What is “Generic.RozenaA.9B1EBACB”?

The Generic.RozenaA.9B1EBACB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.RozenaA.9B1EBACB virus can do?

Anomalous binary characteristics

How to determine Generic.RozenaA.9B1EBACB?


File Info:
crc32: 21D765C7
md5: 03c54a378818bd5c6fddb3ff6cc94e14
name: 03C54A378818BD5C6FDDB3FF6CC94E14.mlw
sha1: f95a02ee1490f22e962e1e124a6c0f27f98394ad
sha256: ebbd87537da56ac74b100d814617afc1c735e024cc0daba0c3411db578376268
sha512: c3b35c15fe2854c4efa4292bc14a6dc5c4737e4117af683614af12dbf2c7e7eca09a0516edcc4fa84fb3a6591ee8a52ff49842b5ca365f06480512d214daacf2
ssdeep: 384:eHvXz8d8+cfv9E9C7jTlyQUxIfIj630iyYJG9Ef95OJu025nu6GOFToOLF3/VU:eHvQkE968QUC4vi5OUDnuyt7li
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:
LegalCopyright: Copyright 1989-2020 Sophos Limited.
InternalName: HomeTelem.exe
FileVersion: 3.7.12.0
CompanyName: Sophos Limited
ProductName: Sophos Home
ProductVersion: 3.7.12.0
FileDescription: Sophos Home
OriginalFilename: HomeTelem.exe
Translation: 0x0409 0x04b0

Generic.RozenaA.9B1EBACB also known as:

K7AntiVirus	Trojan ( 0056d3821 )
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Spy.18178
McAfee	Artemis!03C54A378818
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	TrojanDownloader:Win32/NetTraveler.0fe9a947
K7GW	Trojan ( 0056d3821 )
Cybereason	malicious.78818b
TrendMicro	TROJ_GEN.R002C0DHV20
Cyren	W64/Trojan.BTOQ-5945
Symantec	Meterpreter
ESET-NOD32	a variant of Win64/GenKryptik.ERBG
Avast	Win32:Swrort-S [Trj]
ClamAV	Win.Trojan.MSShellcode-7
Kaspersky	Trojan-Dropper.Win32.NetTraveler.ck
BitDefender	Generic.RozenaA.9B1EBACB
NANO-Antivirus	Trojan.Win64.NetTraveler.huubzj
MicroWorld-eScan	Generic.RozenaA.9B1EBACB
Tencent	Win32.Trojan-dropper.Nettraveler.Frx
Ad-Aware	Generic.RozenaA.9B1EBACB
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Crypt.Agent.caegn
VIPRE	Trojan.Win32.Generic!BT
Invincea	Mal/Generic-S
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.03c54a378818bd5c
Emsisoft	Generic.RozenaA.9B1EBACB (B)
Avira	TR/Crypt.Agent.caegn
Antiy-AVL	Trojan/Win32.Rozena.ed
Microsoft	TrojanDownloader:Win32/Travnet.B
Arcabit	Generic.RozenaA.9B1EBACB
AegisLab	Trojan.Win32.RozenaA.4!c
ZoneAlarm	Trojan-Dropper.Win32.NetTraveler.ck
GData	Generic.RozenaA.9B1EBACB
MAX	malware (ai score=86)
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002C0DHV20
Rising	Trojan.Win64/Kryptik!1.CB24 (CLASSIC)
Yandex	Trojan.AvsEtecer.bS6SYf
Ikarus	Trojan.Win32.Meterpreter
eGambit	Trojan.Generic
Fortinet	W64/GenKryptik.ERBG!tr
AVG	Win32:Swrort-S [Trj]
Qihoo-360	Win32/Trojan.19c

How to remove Generic.RozenaA.9B1EBACB?

Generic.RozenaA.9B1EBACB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X