Should I remove “UDS:Trojan.Win32.Shelma.ccud”?

The UDS:Trojan.Win32.Shelma.ccud is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What UDS:Trojan.Win32.Shelma.ccud virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Sample contains Overlay data
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Uses Windows utilities for basic functionality
• Behavioural detection: Injection (inter-process)
• A potential decoy document was displayed to the user
• Created a process from a suspicious location
• Deletes executed files from disk

How to determine UDS:Trojan.Win32.Shelma.ccud?

File Info:
name: 11090CC3AC36E5C497E2.mlw
path: /opt/CAPEv2/storage/binaries/65a6bb9120f32bbb7fa5717132bdb41ae033f32e9802fead933f0d3c2b48074f
crc32: B9A1F373
md5: 11090cc3ac36e5c497e2f177e4f4fae2
sha1: 5abf2852082dcf6135214a64568c6815e86039bd
sha256: 65a6bb9120f32bbb7fa5717132bdb41ae033f32e9802fead933f0d3c2b48074f
sha512: a2e6de863cc6bbdbdc07e5d2f190edaf6b7cce71d8589e2a51e766f5729b728f182db0ad222b45dad732c7f895f2d709491aba2de98ec6522878a41e3083ab8c
ssdeep: 24576:eNcBtkZXdh1/onqL5HdJUd/uazMCwe75jU2TH229wBSou/WqPDbkrGMA5qG:5eUnqL1y/4edjU3NvCtkrGlYG
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T108651302B6D58872E5B31A3259785B126E7FBC201F358A5E93EC1D1DDB330D16A24BB3
sha3_384: 2622142470db65d4afe0e0611074dc942e8a5bc3b2ec99ef249770a6352820393a24cdf8890624a1593eafd10461ffc2
ep_bytes: e85a040000e98efeffff3b0d68d64300
timestamp: 2019-12-05 07:37:23

Version Info:
0: [No Data]

UDS:Trojan.Win32.Shelma.ccud also known as:

How to remove UDS:Trojan.Win32.Shelma.ccud?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.