Exploit.RTF-ObfsStrm.Gen (B) removal guide

The Exploit.RTF-ObfsStrm.Gen (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Exploit.RTF-ObfsStrm.Gen (B) virus can do?

How to determine Exploit.RTF-ObfsStrm.Gen (B)?


File Info:
crc32: 815D3F4C
md5: bb619e80537642fa06dc1e43db96684f
name: upload_file
sha1: dfe346e64af300a2654300f3c1fa2dfdeef0434f
sha256: e01799240ef4417d1c11385f27596bc1ca7195bab096bd472ef9f316a9c28809
sha512: ec9fa6b55d7bfa7aa0ead719ed7ec4b068ab5b89d571ac6dca8285ed87e0a307e31db7df389699e91bae2b7733788178782e7e41fe24e1e27eeba0852ebcb66d
ssdeep: 384:5/jlONuVRMrzt/6rflj8PUT85UH4QpVRzhBWn63UbikUn0Knx3E:5/jlONMOrz8rflwcQ5tQXBKqbtni
type: Rich Text Format data, unknown version

Version Info:
0: [No Data]

Exploit.RTF-ObfsStrm.Gen (B) also known as:

FireEye	Exploit.RTF-ObfsStrm.Gen
CAT-QuickHeal	Exp.RTF.Obfus.Gen
McAfee	RTFObfustream.b!BB619E805376
Symantec	Exp.CVE-2017-11882!g2
TrendMicro-HouseCall	TROJ_FRS.0NA103HB20
Cynet	Malicious (score: 85)
Kaspersky	HEUR:Exploit.MSOffice.Generic
BitDefender	Exploit.RTF-ObfsStrm.Gen
AegisLab	Hacktool.MSOffice.Generic.3!c
MicroWorld-eScan	Exploit.RTF-ObfsStrm.Gen
Tencent	Office.Exploit.Generic.Pgwf
Ad-Aware	Exploit.RTF-ObfsStrm.Gen
Emsisoft	Exploit.RTF-ObfsStrm.Gen (B)
F-Secure	Exploit.EXP/CVE-2017-11882.kbbzv
DrWeb	Exploit.Rtf.CVE2012-0158
TrendMicro	TROJ_FRS.0NA103HB20
Sophos	Troj/RtfExp-EQ
Ikarus	Exploit.CVE-2017-11882
Cyren	CVE-2017-11882.E.gen!Camelot
Avira	EXP/CVE-2017-11882.kbbzv
Fortinet	RTF/CVE_2017_11882.C!exploit
Antiy-AVL	Trojan[Exploit]/RTF.Obscure.Gen
Arcabit	Exploit.RTF-ObfsStrm.Gen
ZoneAlarm	HEUR:Exploit.MSOffice.Generic
Microsoft	Trojan:Script/Wacatac.C!ml
AhnLab-V3	RTF/Malform-A.Gen
TACHYON	Trojan-Exploit/RTF.CVE-2017-11882
Zoner	Probably Heur.RTFBadVersion
ESET-NOD32	probably a variant of Win32/Exploit.CVE-2017-11882.E
MAX	malware (ai score=100)
GData	Exploit.RTF-ObfsStrm.Gen
Qihoo-360	susp.rtf.objupdate.c

How to remove Exploit.RTF-ObfsStrm.Gen (B)?

Exploit.RTF-ObfsStrm.Gen (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X