Trojan.Win32.Shelma.budm removal tips

The Trojan.Win32.Shelma.budm is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Shelma.budm virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan.Win32.Shelma.budm?


File Info:
name: B772284B7C31883C98C8.mlw
path: /opt/CAPEv2/storage/binaries/fbf0fe2e7777ea1806c6433bda3a9c0e4a97240fd728b1345e66d123b62840bb
crc32: 50041E8D
md5: b772284b7c31883c98c87c2669525281
sha1: 00126ba392145e52bb24a19c0fdf35b55f0d40f7
sha256: fbf0fe2e7777ea1806c6433bda3a9c0e4a97240fd728b1345e66d123b62840bb
sha512: 7836cee447043a18db98833ed6c7c42e79b6e4290dfcaf1e3f0b3140c13416d07ae52766a608c6d47cec237caaa902f0a4ea3c29dc7991f44b61ba2af02f9417
ssdeep: 384:66qdqSO6i5C8B/xkkmJ2OJAKmWOwE1/wPhXOByD2eH+Ua:1Sjig8B/xkk8dpNheByDoU
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1601308127280C037F8EA41FEEAFE4CB5492CDD741F2A52D3A1D601A9DA611DB2435B9B
sha3_384: d80f5ab2fadfddb4c5d3eb395a740db00bd6cec6f0eae1d6a4bf9624a4d974c293b38379b223419e2fde9bb48685d9ea
ep_bytes: e988110000e9ac400000e91e1a0000e9
timestamp: 2022-01-30 12:13:03

Version Info:
0: [No Data]

Trojan.Win32.Shelma.budm also known as:

Bkav	W32.AIDetect.malware2
MicroWorld-eScan	Trojan.GenericKD.38813231
FireEye	Generic.mg.b772284b7c31883c
ALYac	Trojan.GenericKD.38813231
Sangfor	Suspicious.Win32.Save.a
K7GW	Trojan ( 004baf121 )
K7AntiVirus	Trojan ( 004baf121 )
Cyren	W32/Fugrafa.Z.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Rozena.IO
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Trojan.MSShellcode-6360728-0
Kaspersky	Trojan.Win32.Shelma.budm
BitDefender	Trojan.GenericKD.38813231
Avast	Win32:Trojan-gen
Rising	Trojan.Rozena!8.6D (CLOUD)
Ad-Aware	Trojan.GenericKD.38813231
Emsisoft	Trojan.GenericKD.38813231 (B)
TrendMicro	TROJ_GEN.R002C0PB222
McAfee-GW-Edition	BehavesLike.Win32.Generic.pt
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Rozena
MaxSecure	Trojan.Malware.139171616.susgen
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
ZoneAlarm	Trojan.Win32.Shelma.budm
GData	Trojan.GenericKD.38813231
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.CO.C4950326
McAfee	RDN/Generic.hbg
MAX	malware (ai score=86)
TrendMicro-HouseCall	TROJ_GEN.R002C0PB222
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Rozena.ED!tr
AVG	Win32:Trojan-gen

How to remove Trojan.Win32.Shelma.budm?

Trojan.Win32.Shelma.budm removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X