Categories: Malware

How to remove “Generic.RozenaA.62145C0F”?

The Generic.RozenaA.62145C0F is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.RozenaA.62145C0F virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
Dynamic (imported) function loading detected
Possible date expiration check, exits too soon after checking local time
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Generic.RozenaA.62145C0F?


File Info:
name: 2ACE3BF3DE403527BCA7.mlwpath: /opt/CAPEv2/storage/binaries/7b88c13b741cfb63560d628059c262005408957c9f30fb6a08d098906d842479crc32: 019EEEA3md5: 2ace3bf3de403527bca7e98324b3984bsha1: a8e098b08c89a2db53e3b4618c4f8b8ad0fab532sha256: 7b88c13b741cfb63560d628059c262005408957c9f30fb6a08d098906d842479sha512: a0d1331278c53dfeeddf3df48fc3e4e27f271033d8b445f2969d032d304321591a409ee8e80913c03d1ed0546b99693c6bcb0b5edc06971c0521f4d7f60d3137ssdeep: 24576:b4nXubIQGyxbPV0db26S+hMgK/sdZvaKBaJhtu+hBgK/sdZvaKBaJht:bqe3f62IMgK/sdZvaKBaJhsIBgK/sdZAtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T198255B3FB268653FD4AF0B3245B39260597BBA65B81A8C1F17F0090DCF265601E3BB56sha3_384: 40790c4d73377a42390ae11214f60f0adbf974dc20acbf7ff18609765de1fc024ba0046df67992bfde58ab8bc01273e1ep_bytes: 606831004e00ff1548234c00683a004etimestamp: 2021-06-03 08:09:11
Version Info:
0: [No Data]

Generic.RozenaA.62145C0F also known as:

Elastic	Windows.Trojan.Metasploit
ClamAV	Win.Trojan.MSShellcode-7
FireEye	Generic.mg.2ace3bf3de403527
McAfee	GenericRXAA-FA!2ACE3BF3DE40
Cylance	Unsafe
BitDefender	Generic.RozenaA.62145C0F
Cybereason	malicious.3de403
Cyren	W32/Rozena.H.gen!Eldorado
Symantec	Trojan Horse
ESET-NOD32	a variant of Win32/Rozena.KC.gen
APEX	Malicious
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Trojan.Win32.Generic
NANO-Antivirus	Trojan.Win32.Swrort.eratya
ViRobot	Win32.Rozena.A
MicroWorld-eScan	Generic.RozenaA.62145C0F
Avast	Win32:Swrort-I [Trj]
Ad-Aware	Generic.RozenaA.62145C0F
Emsisoft	Generic.RozenaA.62145C0F (B)
F-Secure	Trojan.TR/Dropper.Gen
DrWeb	Trojan.Swrort.10
VIPRE	Generic.RozenaA.62145C0F
McAfee-GW-Edition	BehavesLike.Win32.Fujacks.dh
Sophos	Mal/Swrort-H
Ikarus	Trojan.Win32.Rozena
GData	Generic.RozenaA.62145C0F
Jiangmin	Packed.BDF.bl
Avira	TR/Dropper.Gen
Antiy-AVL	Trojan/Generic.ASCommon.153
Arcabit	Generic.RozenaA.62145C0F
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Trojan:Win32/Swrort.A
AhnLab-V3	Trojan/Win32.Wacatac.C4217634
Acronis	suspicious
VBA32	BScope.Trojan.Downloader
ALYac	Generic.RozenaA.62145C0F
MAX	malware (ai score=83)
Malwarebytes	Malware.Heuristic.1008
Rising	Trojan.Meterpreter!1.AEA1 (CLASSIC)
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Generic.AP.23ADC0!tr
BitDefenderTheta	AI:FileInfector.2395B8760E
AVG	Win32:Swrort-I [Trj]