Malware

Sf:ShellCode-AO [Trj] removal tips

Malware Removal

The Sf:ShellCode-AO [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Sf:ShellCode-AO [Trj] virus can do?

    How to determine Sf:ShellCode-AO [Trj]?

    
    

    File Info:

    crc32: 32F31A7D
    md5: 8c4b2d4aea8685d42ef22cfd771f59af
    name: 8C4B2D4AEA8685D42EF22CFD771F59AF.mlw
    sha1: 47808b878f963f532d1601e07f89aca48cf3e91d
    sha256: 27cc8c0e966768596bda9d50d759caa904876bec46309d460228141cd4b6ab6c
    sha512: 60591f73a0fe9587d6e4a97de5287ef6e7e6c2a8a8bd1f2c799d211ef500950210459340dce2c1ebb94b4566817ec6db4f32963cdebb1e1e1dc01757b055f676
    ssdeep: 12288:PBcE5e2QRDMVwCLK3ykd7mSoJe6Fh2ZCLsxu0:Zfe2Qt0wCLkykBeJe6FwYLsQ0
    type: PE32 executable (GUI) Intel 80386, for MS Windows

    Version Info:

    0: [No Data]

    Sf:ShellCode-AO [Trj] also known as:

    BkavW32.AIDetect.malware1
    Elasticmalicious (high confidence)
    MicroWorld-eScanGen:Variant.Cerbu.62273
    FireEyeGeneric.mg.8c4b2d4aea8685d4
    Qihoo-360Win32/Trojan.Patched.HgIASOUA
    ALYacGen:Variant.Cerbu.62273
    CylanceUnsafe
    VIPRETrojan.Win32.Generic!BT
    SangforTrojan.Win32.Save.a
    CrowdStrikewin/malicious_confidence_100% (D)
    BitDefenderGen:Variant.Cerbu.62273
    K7GWTrojan ( 00515bef1 )
    K7AntiVirusTrojan ( 00515bef1 )
    BitDefenderThetaGen:NN.ZexaF.34608.PyZ@a0Mn@Gk
    CyrenW32/Kovter.Z.gen!Eldorado
    SymantecML.Attribute.HighConfidence
    APEXMalicious
    AvastSf:ShellCode-AO [Trj]
    ClamAVWin.Trojan.Kovter-6489152-1
    AlibabaTrojan:Win32/Kovter.9eda0eb8
    NANO-AntivirusTrojan.Win32.Kovter.emosbg
    TencentMalware.Win32.Gencirc.10b8028a
    Ad-AwareGen:Variant.Cerbu.62273
    SophosMal/Generic-S + Mal/Kovter-AA
    ComodoTrojWare.Win32.Kovter.R@8f5pqh
    ZillyaTrojan.Kovter.Win32.3350
    TrendMicroTROJ_KOVTER_GC17003E.UVPM
    McAfee-GW-EditionBehavesLike.Win32.Generic.jh
    EmsisoftGen:Variant.Cerbu.62273 (B)
    IkarusTrojan.Win32.Kovter
    WebrootW32.Ransom.Gen
    AviraTR/Patched.Ren.Gen
    KingsoftWin32.Troj.Generic_a.a.(kcloud)
    MicrosoftTrojan:Win32/Kovter!rfn
    ArcabitTrojan.Cerbu.DF341
    GDataGen:Variant.Cerbu.62273
    CynetMalicious (score: 100)
    ESET-NOD32a variant of Win32/Kovter.I
    McAfeeTrojan-FMWF!8C4B2D4AEA86
    MAXmalware (ai score=87)
    VBA32TScope.Malware-Cryptor.SB
    MalwarebytesKovter.Trojan.Fileless.DDS
    PandaTrj/CI.A
    TrendMicro-HouseCallTROJ_KOVTER_GC17003E.UVPM
    RisingTrojan.Kovter!1.A7CF (CLOUD)
    YandexTrojan.Kovter!5EfNtmserp8
    SentinelOneStatic AI – Malicious PE
    eGambitUnsafe.AI_Score_100%
    FortinetW32/Generic.AC.3E032B!tr
    AVGSf:ShellCode-AO [Trj]
    Cybereasonmalicious.aea868
    Paloaltogeneric.ml

    How to remove Sf:ShellCode-AO [Trj]?

    Sf:ShellCode-AO [Trj] removal tool
    • Download and install GridinSoft Anti-Malware.
    • Open GridinSoft Anti-Malware and perform a “Standard scan“.
    • Move to quarantine” all items.
    • Open “Tools” tab – Press “Reset Browser Settings“.
    • Select proper browser and options – Click “Reset”.
    • Restart your computer.

    About the author

    Paul Valéry

    I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

    Leave a Comment