Cve-2018-8653 security update

Cve-2018-8653 is a very important update from Microsoft. It consists all version of windows including Windows 10, because of Internet Explorer browser vulnerability.

trojan

From Microsoft website:

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website, for example, by sending an email.

The interesting fact is that Windows 10 is vulnerable too, no matter that there is Edge browser , not the Internet Explorer. The attack became possible, because all Windows versions contains IE parts as a default options.

What to do to remove Cve-2018-8653 Vulnerability

The first and the most important thing is to update your system as soon as possible. You can even download security update KB4483235 from Microsoft website. You can do it here: https://support.microsoft.com/en-gb/help/4483234/december192018kb4483234osbuild17134472

After that, scan the system by good antivirus to check it for malware elements. If you want our help to understand, what antimalware is the best, follow out guide: How to choose antivirus program.  You can also fix hosts file and check startup folder manually.

Step 1. Boot into Safe mode

Safe mode

Start -> Msconfig.exe

Safe mode. Step 1

On the tab Boot select Safe boot

Safe mode. Step 2

Step 2. Check Startup folder

Start -> Msconfig.exe ->Disable unknown programs in the Startup tab

Startup

Step 3. Check hosts file

Modify hosts file, that located in C:\Windows\System32\drivers\etc\ .

Hosts file.Step 1

Open the file with Notepad and delete suspicious strings.

Hosts file.Step 2

It has to look like this:

Hosts file.Step 3

Step 4. Disable Safe mode

Start -> Msconfig.exe ->Disable Safe boot in the Boot tab

Deactivate Safe mode

This website uses cookies to improve your experience. If you continue using the site, we will assume that you accept our cookies policy.