Trojan:MSIL/Rozena.HNS!MTB malicious file

The Trojan:MSIL/Rozena.HNS!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:MSIL/Rozena.HNS!MTB virus can do?

• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Anomalous .NET characteristics
• CAPE detected the shellcode get eip malware family
• Binary file triggered YARA rule

How to determine Trojan:MSIL/Rozena.HNS!MTB?

File Info:
name: D2E810A2897C5BF68968.mlw
path: /opt/CAPEv2/storage/binaries/093faccc4a3c1aaf6d0bd947a8e7ae6168e582c44088a3e522f001d0f8eeb8e4
crc32: 87F92962
md5: d2e810a2897c5bf68968e5437c34a78b
sha1: bbfb2d392c97c9a14bcc9bacf7beedfef6442f22
sha256: 093faccc4a3c1aaf6d0bd947a8e7ae6168e582c44088a3e522f001d0f8eeb8e4
sha512: 4a26af620545dbdfb30dd17ab380b46abe3137e6d1a1462721221e9d6aab84ba3bd24e40045fc1a5574b816735ed22c669ca0f24e338f0e602eab08b3470581c
ssdeep: 6144:+I/+BrYTfucTE4tlrKhQyrv2LGx0aJOHG22HF:IBrYCcTEMlrwQy6ixRJOmrHF
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1BC44E125BA80C07AE0F2093149E4DBB61A3DBD31677D59CB7748252C5FB06C06B7A39B
sha3_384: f9f6f90ffe5c2d574f3eccaf0e78fa7f3a13be52638a4364aa5f3ef9de1a2c00ec5c79f94c3f7022d1f0a68f24e641af
ep_bytes: ff250020001000000000000000000000
timestamp: 2018-04-09 08:30:00

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: hk3.1.bin.dll
LegalCopyright:  
OriginalFilename: hk3.1.bin.dll
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Trojan:MSIL/Rozena.HNS!MTB also known as:

How to remove Trojan:MSIL/Rozena.HNS!MTB?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.