How to remove “Win32/Rozena.ALG”?

The Win32/Rozena.ALG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Rozena.ALG virus can do?

Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Win32/Rozena.ALG?


File Info:
crc32: 860859DE
md5: 56cda651d5d0faa9264bac42d8434146
name: 56CDA651D5D0FAA9264BAC42D8434146.mlw
sha1: d5e0cd040a3abc8e0943c97c3c75bddfafd4232a
sha256: 6b1b47452d0a98d965c47ac5994b0d51c5a0a91fc5b05cd7387805bd248a8661
sha512: 8c9a1713a7a764a4213e88568dbb16f094b8beac435f3fbcf55b9eba1af045f57cf095ad4186fd1603441027206361f1532fa158f2e33f849180b638a9067e36
ssdeep: 6144:XuMsbY2GQwohgabExU4sgp1HKKlwcQWfjhmEtFwLCVo/No/ew2wI:XHp4DenyoTXMgmGCL/m/Dw
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Win32/Rozena.ALG also known as:

K7AntiVirus	Riskware ( 0040eff71 )
Lionic	Trojan.Win32.Shelma.4!c
Cynet	Malicious (score: 99)
ALYac	Trojan.GenericKD.47233844
Cylance	Unsafe
Sangfor	Trojan.Win32.Agent.P7S4XA
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Shelma.46ced69c
K7GW	Riskware ( 0040eff71 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Rozena.ALG
APEX	Malicious
Avast	Win32:Trojan-gen
ClamAV	Win.Tool.Shellcode_33836-1
Kaspersky	Trojan.Win32.Shelma.aqyw
BitDefender	Trojan.GenericKD.47233844
ViRobot	Trojan.Win32.Z.Shelma.329922
MicroWorld-eScan	Trojan.GenericKD.47233844
Tencent	Win32.Trojan.Shelma.Sxov
Ad-Aware	Trojan.GenericKD.47233844
Sophos	Mal/Generic-R + Mal/Swrort-AD
TrendMicro	TROJ_GEN.R002C0RJM21
McAfee-GW-Edition	BehavesLike.Win32.Rimecud.fm
FireEye	Trojan.GenericKD.47233844
Emsisoft	Trojan.GenericKD.47233844 (B)
Webroot	W32.Trojan.Gen
Avira	TR/Shelma.wkswc
Microsoft	Trojan:Win32/Occamy.C6B
Arcabit	Trojan.Generic.D2D0BB34
GData	Trojan.GenericKD.47233844
McAfee	Artemis!56CDA651D5D0
MAX	malware (ai score=88)
VBA32	Trojan.Shelma
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0RJM21
Yandex	Trojan.GenAsa!GAcOcU1Ap6s
Ikarus	Trojan.Win32.Rozena
Fortinet	W32/Shelma.AD!tr
AVG	Win32:Trojan-gen

How to remove Win32/Rozena.ALG?

Win32/Rozena.ALG removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X