Win32/Rozena.AAP malicious file

The Win32/Rozena.AAP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Rozena.AAP virus can do?

The binary likely contains encrypted or compressed data.

How to determine Win32/Rozena.AAP?


File Info:
crc32: 3EE72CE2
md5: 10346682e9d0adad5e6a5bd6cdb2b95f
name: 10346682E9D0ADAD5E6A5BD6CDB2B95F.mlw
sha1: 2a2321b73fe1de90826fe83f30fb3d6effcc9047
sha256: df6d5a6c0ea4bd0b3f1f05642a83782481d2e66d653a82418656be8d719ad7de
sha512: 43d8726afdd09fedea6e3065d8a2a8e51c78749cc603a523e40d017f091f4b01d2c94dfec036be465842cacba068625a64d40e8e7ec80b6f145c3ad10b6cb000
ssdeep: 12288:SWaJG1ECwjBXIYt4ltwqeTPS3AFHegKGkeKy9UHnW3Le5y0zXVxJbEnXyh1EwXOZ:eJyNSBI6JSQF+jGBxNuy0zWXyQicZ
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: Wextract                
FileVersion: 6.00.3790.1830 (srv03_sp1_rtm.050324-1447)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.00.3790.1830
FileDescription: Win32 Cabinet Self-Extractor                                           
OriginalFilename: WEXTRACT.EXE            
Translation: 0x0409 0x04b0

Win32/Rozena.AAP also known as:

K7AntiVirus	Riskware ( 0040eff71 )
Lionic	Trojan.Win32.Diple.4!c
Cynet	Malicious (score: 99)
ALYac	Trojan.GenericKD.31147115
Cylance	Unsafe
Sangfor	Riskware.MSIL.Bladabindi.atmn
Alibaba	Trojan:Win32/Diple.0977afa1
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.2e9d0a
Symantec	Trojan.Gen.MBT
ESET-NOD32	Win32/Rozena.AAP
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.Win32.Diple.grux
BitDefender	Trojan.GenericKD.31147115
NANO-Antivirus	Trojan.Win32.Diple.fgrqlc
MicroWorld-eScan	Trojan.GenericKD.31147115
Tencent	Win32.Trojan.Diple.Duci
Ad-Aware	Trojan.GenericKD.31147115
Sophos	Mal/Generic-S
Comodo	Malware@#1mokwdx6lcwlm
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win64.Dropper.bc
FireEye	Trojan.GenericKD.31147115
Emsisoft	Trojan.GenericKD.31147115 (B)
Avira	TR/Diple.gedwg
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Trojan.GenericKD.31147115
AhnLab-V3	Trojan/Win32.Diple.C2643115
McAfee	Artemis!10346682E9D0
MAX	malware (ai score=80)
VBA32	Backdoor.Prorat
Yandex	Trojan.GenAsa!YW/dBQ10H0A
Fortinet	W32/Diple.GRUX!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Win32/Rozena.AAP?

Win32/Rozena.AAP removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X