Trojan

Trojan.Win32.Shelma.abue removal guide

Malware Removal

The Trojan.Win32.Shelma.abue is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Shelma.abue virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Win32.Shelma.abue?


File Info:

crc32: 13BC67E2
md5: 000cd769d3ba5d03229f4012ef802637
name: 000CD769D3BA5D03229F4012EF802637.mlw
sha1: 46ade4d919ff6ac7995d0e2b4383cd3680d82e0f
sha256: c25c17a78b6dd4d50a5d9ed815184013632ac7d28d89932c3a607bbafc084c94
sha512: c681a5f21e0d4d1fc1f7b5dd32876998c031a66acd409b463146e198872bb102f9dcd8fd6c12fef59d8fc2c1e9ad48c0e103f8ce85cdb3101969895dad4536cf
ssdeep: 12288:5eElp6RlKcA8t8Q1GkYexQhBas8oV7BvXIL:Xlp6Rl1A8t8e0exQhBaLo5B
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (c) 1999-2017 Igor Pavlov
InternalName: 7zFM
FileVersion: 17.01 beta
CompanyName: Igor Pavlov
ProductName: 7-Zip
ProductVersion: 17.01 beta
FileDescription: 7-Zip File Manager
OriginalFilename: 7zFM.exe
Translation: 0x0409 0x04b0

Trojan.Win32.Shelma.abue also known as:

K7AntiVirusRiskware ( 0040eff71 )
LionicTrojan.Win32.Shelma.4!c
CylanceUnsafe
AlibabaTrojan:Win32/Shelma.b045c4ff
K7GWRiskware ( 0040eff71 )
ZonerProbably Heur.ExeHeaderH
APEXMalicious
AvastWin32:Swrort-S [Trj]
ClamAVWin.Trojan.MSShellcode-7
KasperskyTrojan.Win32.Shelma.abue
NANO-AntivirusTrojan.Win32.Shellcode.ewfvwj
TencentWin32.Trojan.Shelma.M
SophosMal/Generic-S
ComodoMalware@#3vq9gaukgh3r9
McAfee-GW-EditionBehavesLike.Win32.Dropper.gh
FireEyeGeneric.mg.000cd769d3ba5d03
JiangminTrojan.Generic.gmrzw
Antiy-AVLTrojan/Generic.ASCommon.153
MicrosoftTrojan:Win32/Occamy.C
McAfeeArtemis!000CD769D3BA
MAXmalware (ai score=94)
VBA32Trojan.Shelma
RisingTrojan.Generic@ML.99 (RDML:88Hsf7+Sxxv94As+XR4X/Q)
YandexTrojan.Shelma!OhbZv4yKtHc
FortinetW32/Shelma.ABUE!tr
AVGWin32:Swrort-S [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.DogHousePower.HgAASRsA

How to remove Trojan.Win32.Shelma.abue?

Trojan.Win32.Shelma.abue removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment