Win32/Rozena.AJA removal instruction

The Win32/Rozena.AJA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Rozena.AJA virus can do?

The binary likely contains encrypted or compressed data.
The executable is compressed using UPX

How to determine Win32/Rozena.AJA?


File Info:
crc32: 38098928
md5: 14261fa9c9a8f7ae64f39f4ceb968943
name: 14261FA9C9A8F7AE64F39F4CEB968943.mlw
sha1: 3d0e0d9e722f2176b270a0a3c020b1f91286f04b
sha256: 52262c820fa2db10f19b656be260bb20a551f3b270d934af455efcba496ccbf4
sha512: d45de4a44baf51327c1b02671bc02405231d84e2db40223522f2bf98fcdbb35375a37d18fed032aed5ffc179a678577851cb6a66b7ed9133dd299650ac0d9c3b
ssdeep: 6144:K5sY2OH4E7hLUxhasx6oUvTDGqirOfDc/1rW7URZpi1s6Y3YmyzBAhpBoSjvotD+:Kt9Gx4PoUHGqfSKIss6YImkAZoSTo1gD
type: PE32 executable (console) Intel 80386, for MS Windows, UPX compressed

Version Info:
0: [No Data]

Win32/Rozena.AJA also known as:

Bkav	W32.AIDetect.malware1
Cynet	Malicious (score: 85)
ALYac	Trojan.GenericKD.40427775
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Alibaba	Trojan:Win32/Shelma.8d24f505
Cybereason	malicious.9c9a8f
Symantec	Trojan.PowStage
ESET-NOD32	a variant of Win32/Rozena.AJA
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.Win32.Shelma.acrv
BitDefender	Trojan.GenericKD.40427775
NANO-Antivirus	Trojan.Win32.Mlw.fhbmgb
MicroWorld-eScan	Trojan.GenericKD.40427775
Tencent	Win32.Trojan.Shelma.Dvfy
Ad-Aware	Trojan.GenericKD.40427775
BitDefenderTheta	Gen:NN.ZexaF.34628.xmJfaC27e5o
McAfee-GW-Edition	BehavesLike.Win32.Trojan.fc
FireEye	Trojan.GenericKD.40427775
Emsisoft	Trojan.GenericKD.40427775 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Generic.cozxl
Avira	HEUR/AGEN.1111463
Microsoft	Trojan:Win32/Occamy.C
Arcabit	Trojan.Generic.D268E0FF
AegisLab	Trojan.Win32.Shelma.4!c
GData	Trojan.GenericKD.40427775
McAfee	Artemis!14261FA9C9A8
VBA32	Trojan.Shelma
Malwarebytes	Malware.Heuristic.1003
Rising	Trojan.Generic!8.C3 (CLOUD)
Yandex	Trojan.Shelma!PByFN4PP23o
Ikarus	Trojan.Win32.Powerless
Fortinet	W32/Rozena.AQW!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.DogHousePower.HgAASRAA

How to remove Win32/Rozena.AJA?

Win32/Rozena.AJA removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X