How to remove “Trojan.Win32.Shelma.brun”?

The Trojan.Win32.Shelma.brun is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Shelma.brun virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine Trojan.Win32.Shelma.brun?


File Info:
name: 58AB6ADF5237A9ED3C14.mlw
path: /opt/CAPEv2/storage/binaries/bf50ee73c01ec2fe72171647656f633be1f88cf7b84973e983cc33c26f9e0ff0
crc32: 18024C98
md5: 58ab6adf5237a9ed3c14075befa3c920
sha1: 15da9c28b05b1eefad058db735e490e569524abe
sha256: bf50ee73c01ec2fe72171647656f633be1f88cf7b84973e983cc33c26f9e0ff0
sha512: c4ee3d36c1fbe35e5a475bffd663abc7c6a8a0da17002fa64b6c348ac0a010ab2a834e0533744d26a50a40fba09e0da1c602add7ecc849c5bff158f6f45545dd
ssdeep: 768:NBjFST01BpI+Z4XbOfq1ukgoCi9N+o2fCMN9rQgixx:N1xpI+GbO0gwl2jN9rQgix
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A3942B1324A4A409D4EECB3C5BA6EA7205AAAC105700B5DB29D0FF8774777C19EF1E27
sha3_384: 96ad155ba460a64817e5b221a732a4faf60efebe2f774f82e6f31294221afcdc566abb6e4921b0917f172b5af9cc7341
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-12-07 20:34:47

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: test.exe
LegalCopyright:  
OriginalFilename: test.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Trojan.Win32.Shelma.brun also known as:

MicroWorld-eScan	Trojan.GenericKD.47593676
FireEye	Generic.mg.58ab6adf5237a9ed
ALYac	Trojan.GenericKD.47593676
Alibaba	Trojan:Win32/Shelma.21503640
Cybereason	malicious.f5237a
BitDefenderTheta	Gen:NN.ZemsilF.34062.zm0@aaFGRXm
Cyren	W32/MSIL_Kryptik.BWA.gen!Eldorado
APEX	Malicious
Kaspersky	Trojan.Win32.Shelma.brun
BitDefender	Trojan.GenericKD.47593676
Avast	Win32:Malware-gen
Ad-Aware	Trojan.GenericKD.47593676
Sophos	Mal/Generic-S
McAfee-GW-Edition	BehavesLike.Win32.Generic.gz
Emsisoft	Trojan.GenericKD.47593676 (B)
SentinelOne	Static AI – Suspicious PE
GData	Trojan.GenericKD.47593676
Gridinsoft	Ransom.Win32.Sabsik.sa
Arcabit	Trojan.Generic.D2D638CC
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
AhnLab-V3	Trojan/Win.Kryptik.C4779736
McAfee	Artemis!58AB6ADF5237
MAX	malware (ai score=81)
Ikarus	Trojan.PowerShell.Crypt
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Malicious_Behavior.SB
AVG	Win32:Malware-gen
Panda	Trj/GdSda.A

How to remove Trojan.Win32.Shelma.brun?

Trojan.Win32.Shelma.brun removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X