Exploit:O97M/CVE-2017-11882.YD!MTB removal tips

The Exploit:O97M/CVE-2017-11882.YD!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Exploit:O97M/CVE-2017-11882.YD!MTB virus can do?

Injection (inter-process)
Uses Windows utilities for basic functionality
Attempts to repeatedly call a single API many times in order to delay analysis time
A potential decoy document was displayed to the user
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Exploit:O97M/CVE-2017-11882.YD!MTB?


File Info:
crc32: D104A693
md5: 8eb1e5c89fb741c40412e39b5dc17be7
name: upload_file
sha1: 2d94a83e3c211f07bf87f6cf517e2b540ac518ab
sha256: 27e018943c5d42bab6d4370b9d4ca2cc662b94b615414517c709c2b7e0e2888d
sha512: dee538a7ec6c23df9b834b0a3a1fd8c46449965ff7db48aeaac9ad072ebd9fff917a0fe5b7734d8a0c730a2f04a84e212b67e3900b7acbde49016198cc4b6e84
ssdeep: 6144:iphkn+zzvIPNsm+tQ1cuoozMxjAhhbR9Ru5kAAk7:gkKzOZQ7xc/99RAAk7
type: Composite Document File V2 Document, No summary info

Version Info:
0: [No Data]

Exploit:O97M/CVE-2017-11882.YD!MTB also known as:

MicroWorld-eScan	Exploit.CVE-2017-11882.Gen
FireEye	Exploit.CVE-2017-11882.Gen
McAfee	Exploit-GBR!6BC45F1C93C8
Symantec	Trojan.Gen.NPE
Avast	Other:Malware-gen [Trj]
Kaspersky	HEUR:Exploit.MSOffice.Generic
BitDefender	Exploit.CVE-2017-11882.Gen
ViRobot	DOC.Z.CVE-2017-1188.239104
Ad-Aware	Exploit.CVE-2017-11882.Gen
Sophos	Exp/20180802-B
DrWeb	Exploit.Siggen2.54672
Invincea	Exp/20180802-B
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Exploit.CVE-2017-11882.Gen (B)
Ikarus	Exploit.CVE-2017-11882
MAX	malware (ai score=99)
Microsoft	Exploit:O97M/CVE-2017-11882.YD!MTB
ZoneAlarm	HEUR:Exploit.MSOffice.Generic
GData	Exploit.CVE-2017-11882.Gen
ALYac	Exploit.CVE-2017-11882.Gen
TACHYON	Suspicious/W97.CVE-2017-11882
ESET-NOD32	probably a variant of Win32/Exploit.CVE-2017-11882.C
Tencent	Office.Exploit.Generic.Efbd
Fortinet	MSOffice/CVE_2017_11882.C!exploit
AVG	Other:Malware-gen [Trj]
Qihoo-360	Generic/Trojan.Exploit.ed7

How to remove Exploit:O97M/CVE-2017-11882.YD!MTB?

Exploit:O97M/CVE-2017-11882.YD!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Exploit:O97M/CVE-2017-11882.YD!MTB removal tips