Remove0DayExploitForWin

In the June 2022 cumulative updates for Windows, users found out about a new type of 0 day exploit dubbed Follina. To summarize, successful execution of the exploit leads to remote attackers running arbitrary code with advanced privileges. To put it simply, once successfully infecting a machine, attackers can install additional applications as well as view, edit and delete data remotely.

Remove0DayExploitForWin is a tiny tool designed to specifically target Follina and remove the exploit from your system. To get started, users need to run the executable and press 2 to enable the script. The other options available are exit and disable the script.

Similarly to the official patches released, the script is designed to strengthen the versions of Windows most impacted, namely Windows 11 v21H2, Windows 10 (from v1803 to v21H2), Windows 7 and Windows Server 2008 R2. It is worth mentioning that the vulnerability can be exploited very easily, irrespective of the version of Office the user has installed, including the newest ones.

Interestingly enough, the vulnerability has been known for Microsoft for over a few years. However, security experts started observing its exploitations in May with increasing numbers daily, once the news was out. Protecting the PC is a simple matter of installing the Windows cumulative updates or just run the script to secure against this particular 0 day exploit.