Categories: Malware

What is “Win32/Rozena.ACP”?

The Win32/Rozena.ACP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Rozena.ACP virus can do?

Reads data out of its own binary image
Drops a binary and executes it
Unconventionial language used in binary resources: Russian
Installs itself for autorun at Windows startup
Anomalous binary characteristics

How to determine Win32/Rozena.ACP?


File Info:
crc32: 2F09743Cmd5: 53383513ced806cf2869667cc9e1e5a1name: 53383513CED806CF2869667CC9E1E5A1.mlwsha1: efc70f387ae03d20ff45e5ed37cf4fb974dd0d1dsha256: 097c0a5fe03f67c246e85e20b16b85555788017bbed7d71841c2e52196be25d2sha512: 93809f1f1a0500d7c313405622318375332b7c80f47b2c8c5a734c63914d223bc2173c3b9e6beda316a4bd3c11ea53d80512c0266605cea02ae219d1dc8becc5ssdeep: 49152:0Xz+ZNjdQ16kF443oB4kRlekygAiNSpil0+Ogz496HvEoHMLb:0Xz+vpr0NomxmHMoSjgzwkfsftype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Mojang                                                                                              FileDescription: Minecraft 1.5 Installation                                  FileVersion: 1.5                 Comments: CompanyName: Mojang                                                      Translation: 0x0409 0x04e4

Win32/Rozena.ACP also known as:

Bkav	W32.FamVT.EqtoneGR.Trojan
K7AntiVirus	Riskware ( 0040eff71 )
DrWeb	Trojan.MulDrop10.16759
Cynet	Malicious (score: 99)
ALYac	Trojan.GenericKD.41301105
Cylance	Unsafe
Sangfor	Trojan.Win32.Occamy.C09
CrowdStrike	win/malicious_confidence_80% (W)
Alibaba	TrojanDropper:Win32/Dapato.b1605594
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.3ced80
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Rozena.ACP
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	Trojan-Dropper.Win32.Dapato.plub
BitDefender	Trojan.GenericKD.41301105
NANO-Antivirus	Trojan.Win32.Phave.frzqfu
MicroWorld-eScan	Trojan.GenericKD.41301105
Tencent	Win32.Trojan-dropper.Dapato.Stam
Sophos	Mal/Generic-R
Comodo	Malware@#1ay3r9r19wy3b
BitDefenderTheta	Gen:NN.ZexaF.34770.QCW@a4SLjPk
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Dropper.tc
FireEye	Generic.mg.53383513ced806cf
Emsisoft	Trojan.GenericKD.41301105 (B)
Jiangmin	TrojanDropper.Dapato.zap
Avira	TR/Drop.Dapato.fyzoq
eGambit	Unsafe.AI_Score_98%
Microsoft	Trojan:Win32/Occamy.C09
Arcabit	Trojan.Generic.D2763471
AegisLab	Trojan.Win32.Dapato.4!c
ZoneAlarm	Trojan-Dropper.Win32.Dapato.plub
GData	Trojan.GenericKD.41301105
AhnLab-V3	Malware/Gen.Generic.C3002118
McAfee	Artemis!53383513CED8
MAX	malware (ai score=99)
VBA32	TrojanDropper.Dapato
Panda	Trj/CI.A
Ikarus	Gen.Heur
MaxSecure	Trojan-Ransom.Win32.Crypmod.zfq
Fortinet	W32/Dapato.PLUB!tr
AVG	Win32:Trojan-gen
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Dapato.HgIASOYA