In this post, I will tell you about the signs of Shevonelo spyware presence, and also how to get rid of Shevonelo spyware virus from your computer.
Describing Shevonelo spyware
Shevonelo TrojanSpy as the virus is not a separate app, but a part of considerably more expansive and tricky malware – trojan-stealer. It’s a type of trojan, which is targeted on your individual information, and gathers totally everything regarding you as well as your system. Normally, stealers have keylogger functions1, which empower them to gather your keystrokes. In addition to that, Shevonelo virus can accumulate your cookie files, your phone number, location; it also can thieve all your passwords from the keychain within the browser.
| Name | Shevonelo |
| Infection Type | Spyware |
| Symptoms |
|
| Similar behavior | CoinStealer, ParalaxRat, Clitor |
| Fix Tool |
See If Your System Has Been Affected by Shevonelo spyware |
Nonetheless, the large share of Shevonelo spy are seeking for your banking information: card number, safety codes as well as expiration date. In situation if you use online banking, the Shevonelo stealer is able to endanger your login and password, so the criminals will get access to your financial account. Different corporate information can also be an item of interest of Shevonelo virus distributors, and in the situation of big business such information leak can create disastrous effects.
The primary dispersal manners of Shevonelo spyware are very close to other trojans. Nowadays, the majority of such applications are dispersed through email attachments. These attachments (. docx,. pdf documents) have infected macroses, which are used by Shevonelo spy to infect your personal computer. In some cases, such letters include links to the phishing copies of official sites, like Facebook, Twitter, LinkedIn or so.
Most popular spyware in 20202
It is essential to state that there is an autonomous group of spyware – for Android operating system. Such applications have similar functionalities as the computer edition does, but mobile virus is spread as a legitimate program for monitoring the spouse’s or kids’s geographic location. Nonetheless, besides thieving different personal data, it can also demonstrate to you a totally inaccurate area of the device you are attempting to track. Such scenarios may create beefs out of the blue.
How can I understand that my computer is infected with Shevonelo spyware?
Shevonelo spy is a very stealth malware, due to the fact that its efficiency depends on for how long it will function before being diagnosed. So, Shevonelo spyware developers made everything to make their malware existence as imperceptible as feasible. Of course, you will realize that your accounts in social networks are swiped, as well as cash from your bank account is moving away, but it is too late.
Shevonelo also known as
| Elastic | malicious (high confidence) |
| Qihoo-360 | Win32/Trojan.Generic.HyoDimEA |
| McAfee | Artemis!1DDD876DA373 |
| Malwarebytes | Trojan.Downloader |
| AegisLab | Trojan.Win32.Injects.4!c |
| Sangfor | Trojan.Win32.Ymacco.AA04 |
| K7AntiVirus | Trojan ( 0057868f1 ) |
| BitDefender | Trojan.GenericKD.36417302 |
| K7GW | Trojan ( 0057868f1 ) |
| Arcabit | Trojan.Generic.D22BAF16 |
| Cyren | W32/Trojan.RYII-3306 |
| Symantec | Trojan.Gen.MBT |
| Paloalto | generic.ml |
| Cynet | Malicious (score: 85) |
| Kaspersky | HEUR:Trojan.Win32.Injects.gen |
| Alibaba | Trojan:Win32/GenCBL.9e36f771 |
| NANO-Antivirus | Trojan.Win32.GenCBL.imlfbp |
| MicroWorld-eScan | Trojan.GenericKD.36417302 |
| Ad-Aware | Trojan.GenericKD.36417302 |
| Sophos | Mal/Generic-S |
| Comodo | Malware@#27i9wvofw7s84 |
| F-Secure | Heuristic.HEUR/AGEN.1140714 |
| DrWeb | Trojan.MulDrop16.11606 |
| TrendMicro | TROJ_FRS.VSNTC121 |
| McAfee-GW-Edition | Artemis!Trojan |
| FireEye | Trojan.GenericKD.36417302 |
| Emsisoft | MalCert.A (A) |
| Webroot | W32.Trojan.Gen |
| Avira | HEUR/AGEN.1140714 |
| MAX | malware (ai score=84) |
| Gridinsoft | Trojan.Win32.Downloader.sa |
| Microsoft | TrojanSpy:Win32/Shevonelo.STA |
| ViRobot | Trojan.Win32.Z.Gencbl.279640 |
| ZoneAlarm | HEUR:Trojan.Win32.Injects.gen |
| GData | Trojan.GenericKD.36417302 |
| AhnLab-V3 | Trojan/Win32.BuerLoader.C4347265 |
| ALYac | Trojan.GenericKD.36417302 |
| Cylance | Unsafe |
| ESET-NOD32 | a variant of Win32/GenCBL.AAK |
| TrendMicro-HouseCall | TROJ_FRS.VSNTC121 |
| Rising | Trojan.Injector/NSIS!1.BFBB (CLASSIC) |
| Ikarus | Trojan.NSIS.Agent |
| Fortinet | W32/GenCBL.AAK!tr |
| AVG | Win32:DangerousSig [Trj] |
| Avast | Win32:DangerousSig [Trj] |
| CrowdStrike | win/malicious_confidence_100% (W) |
Domains that associated with Shevonelo:
What are the symptoms of Shevonelo trojan?
- Presents an Authenticode digital signature;
- Creates RWX memory;
- Reads data out of its own binary image;
- A process created a hidden window;
- Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config;
- Network activity detected but not expressed in API logs;
- Anomalous binary characteristics;
To avoid infiltration of Shevonelo spyware, prevent launching any attachments to the e-mails from uncertain addresses. These days, at the time of quarantine, email-distributed malware gets even more active. People (particularly ones who started ordering every little thing on online-marketplaces) do not pay attention to the strange e-mail addresses, and open all the things which reaches their e-mail. And Shevonelo stealer is directly in it.
How to remove Shevonelo spyware?
- Download and install GridinSoft Anti-Malware.
- Open GridinSoft Anti-Malware and perform a “Standard scan“.
- “Move to quarantine” all items.
- Open “Tools” tab – Press “Reset Browser Settings“.
- Select proper browser and options – Click “Reset”.
- Restart your computer.
You can try to do it by hand, however, like any other trojan, Shevonelo TrojanSpy applies the alterations really deep inside of the system. Thus, it’s very hard to discover all these changes, and even more difficult to clean them out. To take care of this harmful malware completely, I can suggest you to use GridinSoft Anti-Malware.
Scanning
To detect and remove all malicious programs on your computer with GridinSoft Anti-Malware, it’s better to use Standard or Full scan. Quick Scan is not able to find all malicious programs, because it checks only the most popular registry entries and directories.
You can spectate the detected malware sorted by their possible hazard simultaneously with the scan process. But to choose any actions against malware, you need to hold on until the scan is finished, or to stop the scan.
To choose the action for each spotted malicious or unwanted program, click the arrow in front of the name of detected malicious program. By default, all the viruses will be moved to quarantine.
How to remove Shevonelo Spyware?
Name: Shevonelo
Description: Shevonelo TrojanSpy is classified as a type of malware — malicious software designed to gain access to or damage your computer, often without your knowledge. The Shevonelo gathers your personal information and relays it to advertisers, data firms, or external users. The Shevonelo can install additional software and change the security settings on your PC.
Operating System: Windows
Application Category: Spyware
User Review
( votes)- What is Spyware: https://en.wikipedia.org/wiki/Spyware
- ESET quaterly report: ESET_Threat_Report_Q22020.pdf