Should I remove “UDS:Virus.Win32.Shodi.h”?

The UDS:Virus.Win32.Shodi.h is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What UDS:Virus.Win32.Shodi.h virus can do?

At least one process apparently crashed during execution
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine UDS:Virus.Win32.Shodi.h?


File Info:
name: 56F459A097874E048D88.mlw
path: /opt/CAPEv2/storage/binaries/3da4a042cee0cfc714816b36913dcdbdafbde481a65c922b35dc0c5fe030f60b
crc32: 825B7C8F
md5: 56f459a097874e048d88648a99d71d57
sha1: d3e1bba0c29b8b89b039de6c12099587e7e1c8f8
sha256: 3da4a042cee0cfc714816b36913dcdbdafbde481a65c922b35dc0c5fe030f60b
sha512: 3763b578cfa310b8c355ed2c01e929c589bfbdb47d532835c222d6e3d4917580b52df6a04a5ed677044dcfd45b6c544414088d8a3426054cea8db34afe6cb5a2
ssdeep: 3072:GcOS3ryTv8GjLoRy9tV93Qyp4rD+T+jcOSP:Ge3ryT05yN9EiTKeP
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D744E812FB82D966C9A60278469B839573B1FD614F61C3C7A350363EDE773D44F22A82
sha3_384: 3d334e1ae4039ac27dd55143955734aa2636a164ec2094d5f30e1776af9b5e69e24780da4378232c267e42677f66b791
ep_bytes: ffffffffffffffffffff000000000000
timestamp: 2002-07-24 15:15:53

Version Info:
0: [No Data]

UDS:Virus.Win32.Shodi.h also known as:

Bkav	W32.AIDetect.malware1
Lionic	Riskware.Win32.RAdmin.lvfE
Elastic	malicious (high confidence)
DrWeb	Program.RemoteAdmin
FireEye	Generic.mg.56f459a097874e04
ALYac	Trojan.GenericKDZ.80543
Cylance	Unsafe
Zillya	Trojan.Shodi.Win32.44
Sangfor	Virus.Win32.Shodi.h
CrowdStrike	win/malicious_confidence_90% (W)
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
ClamAV	Win.Malware.Exebundle-9932986-0
Kaspersky	UDS:Virus.Win32.Shodi.h
Avast	Win32:Malware-gen
McAfee-GW-Edition	BehavesLike.Win32.Generic.dt
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.Agent.0QD6CJ
Avira	W32/Shodi.h
Antiy-AVL	Trojan/Generic.ASBOL.15B5
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
Acronis	suspicious
McAfee	GenericRXAA-FA!56F459A09787
VBA32	TrojanDropper.ExeBundle
Zoner	Probably Heur.ExeHeaderP
TrendMicro-HouseCall	TROJ_GEN.R002H07AM22
Rising	Malware.Undefined!8.C (CLOUD)
Ikarus	Trojan-Spy.Lmir
eGambit	Unsafe.AI_Score_99%
AVG	Win32:Malware-gen
MaxSecure	Trojan.Malware.300983.susgen

How to remove UDS:Virus.Win32.Shodi.h?

UDS:Virus.Win32.Shodi.h removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X