How to remove “Win64/Rozena.CU”?

The Win64/Rozena.CU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win64/Rozena.CU virus can do?

Anomalous binary characteristics

How to determine Win64/Rozena.CU?


File Info:
crc32: 083DEE94
md5: 39c5b6c55aacb17bba7d0c83f19c401b
name: 39C5B6C55AACB17BBA7D0C83F19C401B.mlw
sha1: 5bff194f1f1ca7dbc9f394400fedd20469735e06
sha256: 5467578a657278605314b75cf6bab83e1f2d8a6c439949a94a251044f0b44c26
sha512: 53bdf26eac2ba8ee5e2a42fa7fa6e7bb89bd35c57bf4636f04dbe8550349b3caf80163d92be72b2d226d28acb3e621f41f302c41a39cc431a24280209b798421
ssdeep: 12288:cb3rAruki80C4vnVwuUqLA8o15k1KlGE5c+cxPjkmWk1z537:sAr284TUqLAX15k1KlD5crPg3k1p7
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:
0: [No Data]

Win64/Rozena.CU also known as:

Elastic	malicious (high confidence)
DrWeb	BackDoor.Meterpreter.115
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	Trojan:Win64/Meterpreter.52b6ffe1
Cybereason	malicious.f1f1ca
Symantec	Backdoor.Cobalt
ESET-NOD32	a variant of Win64/Rozena.CU
APEX	Malicious
Avast	Win64:Trojan-gen
ClamAV	Win.Trojan.MSShellcode-6360728-0
Kaspersky	HEUR:Trojan.Win32.Generic
TrendMicro	TROJ_GEN.R005C0DED21
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.39c5b6c55aacb17b
Microsoft	Trojan:Win64/Meterpreter.B
McAfee	Artemis!39C5B6C55AAC
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R005C0DED21
Rising	Trojan.Generic!8.C3 (CLOUD)
Yandex	Trojan.GenAsa!Q47HgktefnE
Ikarus	Trojan.Win64.Meterpreter
Fortinet	W32/Generic.AC.374101!tr
AVG	Win64:Trojan-gen

How to remove Win64/Rozena.CU?

Win64/Rozena.CU removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X