Win32/Rozena.BJV removal tips

The Win32/Rozena.BJV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Rozena.BJV virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Behavioural detection: Executable code extraction – unpacking
Creates RWX memory
Dynamic (imported) function loading detected
Authenticode signature is invalid

How to determine Win32/Rozena.BJV?


File Info:
name: 2FDF4CBD59430CA96FCC.mlw
path: /opt/CAPEv2/storage/binaries/75244059f912d6d35ddda061a704ef3274aaa7fae41fdea2efc149eba2b742b3
crc32: 69924DCE
md5: 2fdf4cbd59430ca96fcc2149dcc1483c
sha1: 9e59081c58ee7842d328337a6c74fc5ffb85f60e
sha256: 75244059f912d6d35ddda061a704ef3274aaa7fae41fdea2efc149eba2b742b3
sha512: df77d3e3d990e27fd8bf51f819d42346ede46ce240ec44b450ca474d5af22dda6ee85ec59d1b5a71d18b6705d31913729dcc3bd5726e2d1f4df8c90dbb941f7b
ssdeep: 192:VDtNzr9Amuln3dmIvZ++lWuA0ofXxjOdO9TtIi1CrxYuu737E5pz6HJoZ5i:BvrymuN3AIvZ+sWuA0EXxjeOdtx7Cji
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T192321943BA854A73CF9112B030734A59C7BEBB500F91A693AF8EE8990F751C5E83750E
sha3_384: 33e2499d8b41b09ad054ac39c2d7806f787bd95404b30bf44e09a60db61cda0fd8196692640872d9d9f17ec88caefaf7
ep_bytes: e8c5030000e974feffff558bec6a00ff
timestamp: 2022-03-08 11:03:34

Version Info:
0: [No Data]

Win32/Rozena.BJV also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Cometer.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.49193924
FireEye	Trojan.GenericKD.49193924
ALYac	Trojan.Cometer
Malwarebytes	Trojan.Meterpreter
Sangfor	Trojan.Win32.Cometer.gen
K7AntiVirus	Trojan ( 005905071 )
Alibaba	Trojan:Win32/Cometer.6a9f3a02
K7GW	Trojan ( 005905071 )
Cyren	W32/Swrort.CMEI-8239
ESET-NOD32	a variant of Win32/Rozena.BJV
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.Win32.Cometer.gen
BitDefender	Trojan.GenericKD.49193924
Avast	Win32:Malware-gen
Tencent	Malware.Win32.Gencirc.11f81684
Ad-Aware	Trojan.GenericKD.49193924
Sophos	Mal/Generic-S (PUA)
F-Secure	Trojan.TR/Swrort.vvvnd
Zillya	Trojan.Cometer.Win32.3428
TrendMicro	TROJ_GEN.R002C0PCP22
McAfee-GW-Edition	RDN/Adware-Cometsys
Emsisoft	Trojan.GenericKD.49193924 (B)
GData	Trojan.GenericKD.49193924
Jiangmin	Trojan.Witch.dn
Webroot	W32.Trojan.Gen
Avira	TR/Swrort.vvvnd
Microsoft	Trojan:Win32/Tnega!MSR
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.C5045929
McAfee	RDN/Adware-Cometsys
MAX	malware (ai score=86)
VBA32	BScope.Trojan.Occamy
Cylance	Unsafe
TrendMicro-HouseCall	TROJ_GEN.R002C0PCP22
Rising	Trojan.Cometer!8.E150 (CLOUD)
Fortinet	Adware/Cometsys!tr
AVG	Win32:Malware-gen
Panda	Trj/GdSda.A

How to remove Win32/Rozena.BJV?

Win32/Rozena.BJV removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X