Trojan.Win64.Shelma.b removal

The Trojan.Win64.Shelma.b is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win64.Shelma.b virus can do?

Anomalous binary characteristics

How to determine Trojan.Win64.Shelma.b?


File Info:
crc32: 304CA977
md5: de29a9b5afe027f0b652adbac376fd90
name: lotto-64.exe
sha1: 40591750c74001a547b3a80ee0165abc27c84a76
sha256: 16a8faaac6fdbd51b96314f41930b0a18a877e8ed0207118278c2d4654d6aa3b
sha512: cddb256a27146d3d791d9e76746c9a4b02c65e362e857af665f566f019a5b43e7c88fb7e10a963c6e8f8a50a0a08fd4d4c14d3a23d6d1ef491e14522e0eaeb64
ssdeep: 24:eFGStrJ9u0/6yanZdkBQAVoaYNq9KZqDeNDMSCvOXpmB:is0LSkBQVts9ZSD9C2kB
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
0: [No Data]

Trojan.Win64.Shelma.b also known as:

DrWeb	BackDoor.Shell.244
MicroWorld-eScan	Trojan.Metasploit.A
FireEye	Generic.mg.de29a9b5afe027f0
McAfee	Trojan-FJIN!DE29A9B5AFE0
Cylance	Unsafe
K7AntiVirus	Trojan ( 004fae881 )
BitDefender	Trojan.Metasploit.A
K7GW	Trojan ( 004fae881 )
Cybereason	malicious.5afe02
Invincea	heuristic
Cyren	W64/S-c4a4ef26!Eldorado
TrendMicro-HouseCall	Trojan.Win64.SHELMA.SM
Avast	Win64:Evo-gen [Susp]
GData	Win64.Trojan.Rozena.A
Kaspersky	Trojan.Win64.Shelma.b
Endgame	malicious (high confidence)
Emsisoft	Trojan.Metasploit.A (B)
F-Secure	Trojan.TR/Crypt.XPACK.Gen7
TrendMicro	Trojan.Win64.SHELMA.SM
McAfee-GW-Edition	Trojan-FJIN!DE29A9B5AFE0
Trapmine	malicious.high.ml.score
Sophos	Troj/Swrort-AI
Ikarus	Trojan.Win64.Rozena
F-Prot	W64/S-c4a4ef26!Eldorado
Jiangmin	Trojan.Generic.fxrt
Webroot	W32.Malware.Gen
Avira	TR/Crypt.XPACK.Gen7
Microsoft	Trojan:Win64/Meterpreter.E
Arcabit	Trojan.Metasploit.A
ZoneAlarm	Trojan.Win64.Shelma.b
AhnLab-V3	Trojan/Win64.Shelma.R274246
Acronis	suspicious
MAX	malware (ai score=88)
Ad-Aware	Trojan.Metasploit.A
Malwarebytes	Trojan.MalPack
APEX	Malicious
ESET-NOD32	Win64/Rozena.J
Rising	Trojan.Kryptik!1.A2F4 (CLASSIC)
SentinelOne	DFI – Malicious PE
Fortinet	W64/Rozena.J!tr
AVG	Win64:Evo-gen [Susp]
CrowdStrike	win/malicious_confidence_100% (D)
MaxSecure	Trojan.Malware.300983.susgen

How to remove Trojan.Win64.Shelma.b?

Trojan.Win64.Shelma.b removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X