Trojan.Win32.Shelma.bmip removal tips

The Trojan.Win32.Shelma.bmip is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Shelma.bmip virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
Unconventionial language used in binary resources: Hebrew

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Win32.Shelma.bmip?


File Info:
crc32: 580A0BC6
md5: f06750c26e3ee45ad7156f20547b28ac
name: F06750C26E3EE45AD7156F20547B28AC.mlw
sha1: f4f9cfa0050f14326e6390ceac2f45626c5975cd
sha256: 196d38dfccfac481af94c86d1bb3eb991d0812f51c89f5c77af109855cdfe2f0
sha512: 389d88f42644ff6a8e80b62989121e94bc150b135ef5afd7316f7cf5247f6e1b674983fa5b99cb85c7c5d9739935475a627bd3711406785ecbe670e6b79a1c04
ssdeep: 1536:xCiwzmj6vMoXkAezxToSgpAGz1lSk482h+NiCt7J9ftLA/:xGCoXk9zFoSgKSek43ciCt7J9fh6
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2017 Nir Sofer
InternalName: TimeZonesView
FileVersion: 1.06
CompanyName: NirSoft
ProductName: TimeZonesView
ProductVersion: 1.06
FileDescription: TimeZonesView
OriginalFilename: TimeZonesView.exe
Translation: 0x0409 0x04b0

Trojan.Win32.Shelma.bmip also known as:

K7AntiVirus	Trojan ( 00538a561 )
Lionic	Trojan.Win32.Shelma.4!c
ALYac	Trojan.GenericKD.37345886
CrowdStrike	win/malicious_confidence_60% (D)
Alibaba	Trojan:Win32/Generic.481d681b
K7GW	Trojan ( 00538a561 )
BitDefenderTheta	Gen:NN.ZexaF.34058.fq0@a49bb6oO
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Patched.IX
Avast	FileRepMalware
Kaspersky	Trojan.Win32.Shelma.bmip
BitDefender	Trojan.GenericKD.37345886
MicroWorld-eScan	Trojan.GenericKD.37345886
Ad-Aware	Trojan.GenericKD.37345886
Sophos	Mal/Generic-S
McAfee-GW-Edition	RDN/Generic.grp
FireEye	Trojan.GenericKD.37345886
Emsisoft	Trojan.GenericKD.37345886 (B)
Jiangmin	Backdoor.Generic.bwzo
Microsoft	Trojan:Win32/Swrort.A
ZoneAlarm	Trojan.Win32.Shelma.bmip
GData	Trojan.GenericKD.37345886
AhnLab-V3	Trojan/Win.Swrort.C4583876
McAfee	RDN/Generic.grp
MAX	malware (ai score=82)
VBA32	Trojan.Shelma
Panda	Trj/CI.A
Ikarus	Trojan.Win32.Patched
Fortinet	W32/Patched.IX!tr
AVG	FileRepMalware
Qihoo-360	Win32/Ransom.DogHousePower.HgIASZ0A

How to remove Trojan.Win32.Shelma.bmip?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.Win32.Shelma.bmip removal tips