Categories: Malware

How to remove “Exploit.MSOffice.Gen”?

The Exploit.MSOffice.Gen is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Exploit.MSOffice.Gen virus can do?

Injection (inter-process)
Uses Windows utilities for basic functionality
Attempts to repeatedly call a single API many times in order to delay analysis time
A potential decoy document was displayed to the user
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Exploit.MSOffice.Gen?


File Info:
crc32: 02DA384Emd5: 5c1c9f7bc951d81e2b3d8e7f1e61b95ename: upload_filesha1: 2fcd076f8eaee1b36fa778825aee549b9a09ddf4sha256: ab89974cfb9fbf9ad429b5f0be5b25b70de13f8fcc88b2e94587a131f19f5eb9sha512: f2112b9bd344363e834b68802181d96e548a0c58ed58f13067e70f9f0f11040292ebd96bca965225d3ac412b9bf7d184493f8d72d2547fd62d03e286d0fc63c5ssdeep: 24576:uG9jWI+SewbZDjNTEVn72XGMhY/zTLwhB:V9K4JNTEJeY/Dwhtype: Composite Document File V2 Document, No summary info
Version Info:
0: [No Data]

Exploit.MSOffice.Gen also known as:

MicroWorld-eScan	Trojan.GenericKD.43637862
FireEye	Trojan.GenericKD.43637862
McAfee	Exploit-GAF!7FA7AEFAB718
AegisLab	Hacktool.MSOffice.Generic.3!c
Symantec	Trojan.Gen.MBT
TrendMicro-HouseCall	TROJ_FRS.0NA103HC20
Avast	Win32:ShellCode [Expl]
Kaspersky	HEUR:Exploit.MSOffice.Generic
BitDefender	Trojan.GenericKD.43637862
ViRobot	DOC.Z.Agent.787968
Ad-Aware	Trojan.GenericKD.43637862
Emsisoft	Trojan.GenericKD.43637862 (B)
Comodo	TrojWare.Win32.Agent.mloty@0
F-Secure	Malware.W97M/Dldr.Agent.wwqnf
DrWeb	Exploit.Siggen2.16217
TrendMicro	TROJ_FRS.0NA103HC20
Fortinet	MSOffice/CVE_2017_11882.C!exploit
Sophos	Troj/DocExp-AB
Cyren	Trojan.USEW-4
Avira	W97M/Dldr.Agent.wwqnf
MAX	malware (ai score=99)
Arcabit	Trojan.Generic.D299DC66
ZoneAlarm	HEUR:Exploit.MSOffice.Generic
Microsoft	Trojan:Win32/Ymacco.AAAB
Cynet	Malicious (score: 85)
AhnLab-V3	Exploit/XLS.Generic
ALYac	Exploit.MSOffice.Gen
TACHYON	Suspicious/W97.CVE-2017-11882
ESET-NOD32	DOC/TrojanDownloader.Agent.BMW
Tencent	Office.Exploit.Generic.Svro
Ikarus	Trojan-Downloader.Office.Crypt
GData	Trojan.GenericKD.43637862
AVG	Win32:ShellCode [Expl]
Qihoo-360	Generic/Trojan.Exploit.ed7