Should I remove “Trojan.Win32.Shelma.azlp”?

The Trojan.Win32.Shelma.azlp is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Shelma.azlp virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX

How to determine Trojan.Win32.Shelma.azlp?


File Info:
crc32: 97897D9F
md5: 186a2edcde784264cec8898d6bea9025
name: 186A2EDCDE784264CEC8898D6BEA9025.mlw
sha1: 9c6f40fdb6e0299bba9bed8b07e423931b3e36b2
sha256: c9e02eb12e4f7fcc25799cdcbc0ea19769af6352a65357d6a11d7cc9bd2fa040
sha512: 88197f938e515c9768ec8b2e318f5533c70d0a94a7e1c91f29f4508cc6819b2d89e2ce80203f84c6f35e11cc242a6daf8614bcebcfd416ac922b1fdfe942c149
ssdeep: 24576:8A1mKYdPoP3UtvzjBS34oiNI14/PbSpyP2XVS5icDfCBc9x/3Grsi7RW4b:r1Wgmbc4XO4/PUyP2XVSfmc9xO46U4b
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: Copyright (C) Microsoft Corp, 2004
InternalName: MOVIEMK2
FileVersion: 2, 1, 4026, 0
CompanyName: Microsoft Corporation
PrivateBuild: 
LegalTrademarks: 
Comments: 
ProductName: Windows Movie Maker
OLESelfRegister: 
SpecialBuild: 
ProductVersion: 2.1.4026.0
FileDescription: Windows Movie Maker
OriginalFilename: MOVIEMK2.EXE
Translation: 0x0409 0x04b0

Trojan.Win32.Shelma.azlp also known as:

Lionic	Trojan.Win32.Shelma.4!c
Elastic	malicious (high confidence)
ALYac	Trojan.GenericKD.47345548
Sangfor	Trojan.Win32.Wacatac.C
Alibaba	Trojan:Win32/Shelma.5ed80d1f
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Rozena.AXP
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.Win32.Shelma.azlp
BitDefender	Trojan.GenericKD.47345548
MicroWorld-eScan	Trojan.GenericKD.47345548
Ad-Aware	Trojan.GenericKD.47345548
Comodo	Packed.Win32.MUPX.Gen@24tbus
McAfee-GW-Edition	BehavesLike.Win32.Fake.tc
FireEye	Trojan.GenericKD.47345548
Emsisoft	Trojan.GenericKD.47345548 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Shelma.cso
Avira	TR/AD.Swrort.qnszz
GData	Trojan.GenericKD.47345548
McAfee	Artemis!186A2EDCDE78
MAX	malware (ai score=84)
TrendMicro-HouseCall	TROJ_GEN.R002H0CK621
Ikarus	Trojan.Win32.Rozena
Fortinet	W32/Rozena.AXP!tr
AVG	Win32:Malware-gen

How to remove Trojan.Win32.Shelma.azlp?

Trojan.Win32.Shelma.azlp removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X