Win32/Rozena.AWJ removal

The Win32/Rozena.AWJ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Rozena.AWJ virus can do?

Executable code extraction
Creates RWX memory

How to determine Win32/Rozena.AWJ?


File Info:
crc32: FD3C364B
md5: 1733ece514f113fcdd5ec5f4d6e2bd6d
name: 1733ECE514F113FCDD5EC5F4D6E2BD6D.mlw
sha1: be68acacf6aa94df60bc17320eca045e3fae44dd
sha256: 8cc34cc5167b93d39086669b05c76e3d8772a03b72d480d057f820a429bee77d
sha512: 4965c756cdf06ae819dd49e63f8f8ca6cf42fbdcd7d5671452847d31576906e815a63f6543a945fde4a9659fc5b43e1a7a16d079ffe9349076840c078d4bc281
ssdeep: 12288:Yz7d9NqTmcFn/VWqDN8tVf2jXNab+wxMr2jHiPtSS4Rn3o0LE9x6WxMMl:Yz7JqTmcFJiHwNk0r2Bn3o0LET6TI
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 1997-2017 Simon Tatham.
InternalName: PuTTY
FileVersion: Release 0.69
CompanyName: Simon Tatham
ProductName: PuTTY suite
ProductVersion: Release 0.69
FileDescription: SSH, Telnet and Rlogin client
OriginalFilename: PuTTY
Translation: 0x0809 0x04b0

Win32/Rozena.AWJ also known as:

Cynet	Malicious (score: 99)
McAfee	MalHeur-FAJ!1733ECE514F1
Cylance	Unsafe
Sangfor	Trojan.Win32.Generic.8
CrowdStrike	win/malicious_confidence_60% (D)
Alibaba	Trojan:Win32/Swrort.07bfb145
Cybereason	malicious.514f11
Cyren	W32/S-494c288a!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Rozena.AWJ.gen
APEX	Malicious
Avast	FileRepMalware
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.Patched.SAP.Gen
NANO-Antivirus	Trojan.Win32.Swrort.erilzr
MicroWorld-eScan	Trojan.Patched.SAP.Gen
Ad-Aware	Trojan.Patched.SAP.Gen
Sophos	Mal/Generic-S + ATK/Shellter-C
Comodo	Malware@#3ohy3sv6bosss
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	MalHeur-FAJ!1733ECE514F1
FireEye	Generic.mg.1733ece514f113fc
Emsisoft	Trojan.Patched.SAP.Gen (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Generic.ebovk
Avira	HEUR/AGEN.1109414
Microsoft	Trojan:Win32/Swrort.A
Arcabit	Trojan.Patched.SAP.Gen
AegisLab	Trojan.Win32.Generic.4!c
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Trojan.Patched.SAP.Gen
AhnLab-V3	Malware/Win32.Generic.C1949702
MAX	malware (ai score=81)
Panda	Trj/GdSda.A
Rising	Trojan.Generic!8.C3 (CLOUD)
Yandex	Trojan.GenAsa!ekg8rPelvUo
Ikarus	Trojan.RansomKD
Fortinet	W32/Generic.AC.3F0251!tr
AVG	FileRepMalware
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Swrort.HgIASQwA

How to remove Win32/Rozena.AWJ?

Win32/Rozena.AWJ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X