Remove Shima. Description and removal instructions

Title: Shima
Type: Worms	Severity scale: (60 / 100)

Shima is an Internet worm that spreads by e-mail in messages with attached archives containing infected files and through file sharing networks using popular peer-to-peer applications including Kazaa, eMule, Shareaza, iMesh, Morpheus and BearShare.

Once executed, Shima secretly installs itself to the system and runs a spreading routine. The parasite searches files of certain types for e-mail addresses, harvests them and sends out malicious letters. Then the worm creates infected files with meaningful names and copies them into shared folders of installed peer-to-peer clients.

The worm carries no destructive payload. However, it poses a serious threat to Internet security, as it attempts to allow some programs to bypass Windows Firewall and even tries to disable it. Furthermore, it sends out random documents from the compromised computer and therefore may disclose user sensitive information.

FORUM:
Discuss Shima in
spyware removal forum

Shima properties:
• Sends out logs by FTP or email
• Hides from the user
• Stays resident in background

Automatic Shima removal:

remover for Shima

Shima manual removal:

Delete registry values:
HKEY_LOCAL_MACHINES\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\EnableFirewall=0
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\DoNotAllowExceptions=0

HELP:
how to remove registry entries

Misc:
Shima uses files with random names. Its main executable can be found in the root of system hard disk (C:).

Other programs to remove Shima:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 09/11/05
Information updated: 09/11/05

Additional resources related to Shima:

Attention: If you know or you have a website or page about Shima removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Shima parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.