Reply To: Multiple Search and Replace / May 6 2018

.
Trojan downloader according to VirusTotal

https://www.virustotal.com/en/file/a4567c46dbd05be9d7c39f387c274cb72fb5b2badf36b46eb7bd7e20f1fc4fd6/analysis/1525633053/

— Antiy-AVL GrayWare[Downloader]/Win32.Adload.gen 20180506

— VBA32 suspected of Trojan.Downloader.gen.h 20180504

I suggest that vendors test and tweak their software so as to eliminate malware, and so as to pass malware examination.
.