Trojan

Trojan.Win64.Shelma.qbg malicious file

Malware Removal

The Trojan.Win64.Shelma.qbg is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win64.Shelma.qbg virus can do?

  • The binary likely contains encrypted or compressed data.

How to determine Trojan.Win64.Shelma.qbg?


File Info:

crc32: 5CA0FFF4
md5: 70aedd7b26835a8e9d789a2e21ca9b2c
name: 70AEDD7B26835A8E9D789A2E21CA9B2C.mlw
sha1: f1197e3635e2b6c6baf8de0b4216e09824ee58fc
sha256: afea6ef650b1cc6095f1c506b963023b4f5127bc4fb110bf70c460d0f1feff04
sha512: 53dd724f29b4d3575bcf18aa7d792154fb8ba0dcf8c8b51b7414fa9c0cebfe00faf037211a934432bde0ffc93d6ab31ff55a95f85098bf4b7609bb488383ddf5
ssdeep: 24576:c/AHkY13DDCG3MJRJAjChb5k3LKkwK1cbqrsoHuK1hVPzuKdpkBG2rvG:ceDDD3MJRSjCjWKkwK1cmTV7uKdpArG
type: PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows

Version Info:

0: [No Data]

Trojan.Win64.Shelma.qbg also known as:

K7AntiVirusTrojan ( 0058136f1 )
CynetMalicious (score: 100)
CrowdStrikewin/malicious_confidence_70% (W)
AlibabaTrojan:Win64/Shelma.53d066a1
K7GWTrojan ( 0058136f1 )
Cybereasonmalicious.635e2b
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of WinGo/Rozena.DQ
APEXMalicious
AvastWin64:Trojan-gen
KasperskyTrojan.Win64.Shelma.qbg
SophosMal/Generic-S
TrendMicroBackdoor.Win64.SWRORT.YXBKMZ
McAfee-GW-EditionBehavesLike.Win64.Trojan.vh
JiangminTrojan.Cometer.brw
AviraTR/AD.PatchedWinSwrort.fszhv
KingsoftWin32.Troj.CobaltStrike.xl.(kcloud)
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataWin64.Trojan.Agent.NM1D7T
McAfeeArtemis!70AEDD7B2683
TrendMicro-HouseCallBackdoor.Win64.SWRORT.YXBKMZ
RisingTrojan.ShellCode!1.D2D8 (CLASSIC)
IkarusVirus.Win64.CobaltStrike
MaxSecureTrojan.Malware.300983.susgen
FortinetMalicious_Behavior.SB
AVGWin64:Trojan-gen

How to remove Trojan.Win64.Shelma.qbg?

Trojan.Win64.Shelma.qbg removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment