What is “Trojan.Win32.Shelma.qyf”?

The Trojan.Win32.Shelma.qyf is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Shelma.qyf virus can do?

Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan.Win32.Shelma.qyf?


File Info:
crc32: 315DAEA2
md5: 34a436f939796c4261efddd27803072c
name: calc.exe
sha1: 6befeea1f8ad9309f724afd4c6b91211aeec65ce
sha256: 03f68b6f6bf310354048c832aa3acc12677734bf3ad50d2d408bb1b157101c86
sha512: 045b6fa96a3ac8c75e27146b5738ff93d4a982a445482d24bff1c927e60ec31b0ba507bce3ea411258d172c81149cbf2cfad82fcd68f85f76fe20aefafb96859
ssdeep: 1536:XP6pYltjXJF7UaJt8GelANBy2y8wurd1Ull7do5jdsWjcdWAkhV0t6o:rtjXbLIGeCNBybNudylrYjiWAkhV0A
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Trojan.Win32.Shelma.qyf also known as:

MicroWorld-eScan	Trojan.GenericKD.31800688
Qihoo-360	Win32/Trojan.d7a
ALYac	Trojan.GenericKD.31800688
Cylance	Unsafe
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKD.31800688
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.939796
TrendMicro	TROJ_GEN.R01FC0OLO19
BitDefenderTheta	Gen:NN.ZexaF.34082.fuW@ayYqT3pi
Avast	Win32:Malware-gen
GData	Trojan.GenericKD.31800688
Kaspersky	Trojan.Win32.Shelma.qyf
AegisLab	Trojan.Win32.Shelma.4!c
Tencent	Win32.Trojan.Shelma.Lkdw
Ad-Aware	Trojan.GenericKD.31800688
Emsisoft	Trojan.GenericKD.31800688 (B)
Comodo	Malware@#1kmt2qff6wv19
F-Secure	Trojan.TR/Shelma.gwmhn
Zillya	Trojan.Shelma.Win32.2668
McAfee-GW-Edition	RDN/Generic.grp
FireEye	Trojan.GenericKD.31800688
Sophos	Generic PUA GL (PUA)
Ikarus	Trojan.Shelma
Jiangmin	TrojanDownloader.Generic.ayoe
Avira	TR/Shelma.gwmhn
Antiy-AVL	Trojan/Win32.Shelma
Arcabit	Trojan.Generic.D1E53D70
ZoneAlarm	Trojan.Win32.Shelma.qyf
Microsoft	Trojan:Win32/Wacatac.C!ml
AhnLab-V3	Trojan/Win32.Shelma.C3141008
McAfee	RDN/Generic.grp
MAX	malware (ai score=84)
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R01FC0OLO19
Rising	Trojan.Shelma!8.1A3D (CLOUD)
eGambit	Unsafe.AI_Score_96%
Fortinet	W32/Shelma.QYF!tr
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_60% (W)

How to remove Trojan.Win32.Shelma.qyf?

Trojan.Win32.Shelma.qyf removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X