Trojan

Trojan.Win64.Shelma.liz removal tips

Malware Removal

The Trojan.Win64.Shelma.liz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win64.Shelma.liz virus can do?

  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Trojan.Win64.Shelma.liz?


File Info:

crc32: 4737F6B8
md5: defc237670138ec2cba9f5ac2473a305
name: DEFC237670138EC2CBA9F5AC2473A305.mlw
sha1: 1e208f7b3bed9749d877c0bc116ef14e46c77171
sha256: 73689c2c87fcbead8b6da59fa90b369b2da3023d97ba21ae2fe4f241e8874124
sha512: 2e43a471de6b7e96a252492a35fa162e905dae10ee94b9ea95b6f10929fc15847d0fa523550e53376dde066b4fe2c9b11e71be75c7ec648bb724a64e6d3a68f1
ssdeep: 24576:VI20qaTPrNlGmh4mzCledp0Xb20QJphIhFza4/0rBHYyIHZTHF:Vn0jPr7nOmEEp0Xb2bJ4Fza/rBHYf
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:

0: [No Data]

Trojan.Win64.Shelma.liz also known as:

K7AntiVirusAdware ( 0055b8ed1 )
LionicTrojan.Win64.Shelma.4!c
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Win64
ALYacTrojan.GenericKD.46502603
CylanceUnsafe
ZillyaTrojan.Shelma.Win64.5697
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaTrojan:Win64/Shelma.b08e153c
K7GWAdware ( 0055b8ed1 )
CyrenW64/Trojan.SVEM-2593
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win32/2144FlashPlayer.A potentially unwanted
APEXMalicious
AvastWin64:Malware-gen
KasperskyTrojan.Win64.Shelma.liz
BitDefenderTrojan.GenericKD.46502603
ViRobotTrojan.Win32.Z.2144Flashplayer.1481728
MicroWorld-eScanTrojan.GenericKD.46502603
Ad-AwareTrojan.GenericKD.46502603
SophosGeneric PUA BO (PUA)
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0WFI21
McAfee-GW-EditionBehavesLike.Win64.Generic.tc
FireEyeGeneric.mg.defc237670138ec2
EmsisoftTrojan.GenericKD.46502603 (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan.Shelma.inc
AviraHEUR/AGEN.1103390
Antiy-AVLTrojan/Generic.ASMalwS.339AC60
MicrosoftTrojan:Win32/Glupteba!ml
GDataTrojan.GenericKD.46502603
AhnLab-V3Trojan/Win.Generic.C4534180
McAfeeArtemis!DEFC23767013
MAXmalware (ai score=85)
VBA32Trojan.Win64.Shelma
MalwarebytesSpyware.PasswordStealer
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002C0WFI21
MaxSecureTrojan.Malware.73848307.susgen
FortinetAdware/Shelma
AVGWin64:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win64/Ransom.DogHousePower.HgEASWkA

How to remove Trojan.Win64.Shelma.liz?

Trojan.Win64.Shelma.liz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment