Malware

Win32/Rozena.BJV removal tips

Malware Removal

The Win32/Rozena.BJV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Win32/Rozena.BJV virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Behavioural detection: Executable code extraction – unpacking
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Authenticode signature is invalid

How to determine Win32/Rozena.BJV?


File Info:

name: 2FDF4CBD59430CA96FCC.mlw
path: /opt/CAPEv2/storage/binaries/75244059f912d6d35ddda061a704ef3274aaa7fae41fdea2efc149eba2b742b3
crc32: 69924DCE
md5: 2fdf4cbd59430ca96fcc2149dcc1483c
sha1: 9e59081c58ee7842d328337a6c74fc5ffb85f60e
sha256: 75244059f912d6d35ddda061a704ef3274aaa7fae41fdea2efc149eba2b742b3
sha512: df77d3e3d990e27fd8bf51f819d42346ede46ce240ec44b450ca474d5af22dda6ee85ec59d1b5a71d18b6705d31913729dcc3bd5726e2d1f4df8c90dbb941f7b
ssdeep: 192:VDtNzr9Amuln3dmIvZ++lWuA0ofXxjOdO9TtIi1CrxYuu737E5pz6HJoZ5i:BvrymuN3AIvZ+sWuA0EXxjeOdtx7Cji
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T192321943BA854A73CF9112B030734A59C7BEBB500F91A693AF8EE8990F751C5E83750E
sha3_384: 33e2499d8b41b09ad054ac39c2d7806f787bd95404b30bf44e09a60db61cda0fd8196692640872d9d9f17ec88caefaf7
ep_bytes: e8c5030000e974feffff558bec6a00ff
timestamp: 2022-03-08 11:03:34

Version Info:

0: [No Data]

Win32/Rozena.BJV also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Cometer.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.49193924
FireEyeTrojan.GenericKD.49193924
ALYacTrojan.Cometer
MalwarebytesTrojan.Meterpreter
SangforTrojan.Win32.Cometer.gen
K7AntiVirusTrojan ( 005905071 )
AlibabaTrojan:Win32/Cometer.6a9f3a02
K7GWTrojan ( 005905071 )
CyrenW32/Swrort.CMEI-8239
ESET-NOD32a variant of Win32/Rozena.BJV
Paloaltogeneric.ml
KasperskyHEUR:Trojan.Win32.Cometer.gen
BitDefenderTrojan.GenericKD.49193924
AvastWin32:Malware-gen
TencentMalware.Win32.Gencirc.11f81684
Ad-AwareTrojan.GenericKD.49193924
SophosMal/Generic-S (PUA)
F-SecureTrojan.TR/Swrort.vvvnd
ZillyaTrojan.Cometer.Win32.3428
TrendMicroTROJ_GEN.R002C0PCP22
McAfee-GW-EditionRDN/Adware-Cometsys
EmsisoftTrojan.GenericKD.49193924 (B)
GDataTrojan.GenericKD.49193924
JiangminTrojan.Witch.dn
WebrootW32.Trojan.Gen
AviraTR/Swrort.vvvnd
MicrosoftTrojan:Win32/Tnega!MSR
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Generic.C5045929
McAfeeRDN/Adware-Cometsys
MAXmalware (ai score=86)
VBA32BScope.Trojan.Occamy
CylanceUnsafe
TrendMicro-HouseCallTROJ_GEN.R002C0PCP22
RisingTrojan.Cometer!8.E150 (CLOUD)
FortinetAdware/Cometsys!tr
AVGWin32:Malware-gen
PandaTrj/GdSda.A

How to remove Win32/Rozena.BJV?

Win32/Rozena.BJV removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment