How to remove “Win64/Rozena.JN”?

The Win64/Rozena.JN is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win64/Rozena.JN virus can do?

Anomalous binary characteristics

How to determine Win64/Rozena.JN?


File Info:
crc32: 184D357C
md5: 1d2748a74ecd884148d0764a971bb3b9
name: 1D2748A74ECD884148D0764A971BB3B9.mlw
sha1: cc6b42c189c8ca72b0e1ee80280e0f3494aba88f
sha256: e0560b9b3633ad6180a94964e6832be832f1867d68c9572b36110e66c2b445e7
sha512: ad5a3c4ccce55628643ca9ce6fbb180e8ad7c31633164692f0979b7299bb46c698c2cda627e4a644cc7614d861e06a9ff12e22d2b8ff821325038d81b4bb1b94
ssdeep: 96:0eSFvBGcGdh+gERVhjVlT9ohxUpY1lmBzNt:0jFJGdXByjzm7UKHmD
type: PE32+ executable (console) x86-64 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2021
Assembly Version: 1.0.0.0
InternalName: LouseyEncrypted.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: LouseyEncrypted
ProductVersion: 1.0.0.0
FileDescription: LouseyEncrypted
OriginalFilename: LouseyEncrypted.exe

Win64/Rozena.JN also known as:

K7AntiVirus	Trojan ( 0057c0721 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
ALYac	Trojan.GenericKD.47056116
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Trojan:Win32/Shelma.49608f99
K7GW	Trojan ( 0057c0721 )
Cyren	W64/Rozena.BY.gen!Eldorado
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win64/Rozena.JN
APEX	Malicious
Avast	Win64:Trojan-gen
Kaspersky	Trojan.Win32.Shelma.bomg
BitDefender	Trojan.GenericKD.47056116
MicroWorld-eScan	Trojan.GenericKD.47056116
Tencent	Win32.Trojan.Shelma.Dyqp
Ad-Aware	Trojan.GenericKD.47056116
McAfee-GW-Edition	Artemis!Trojan
FireEye	Trojan.GenericKD.47056116
Emsisoft	Trojan.GenericKD.47056116 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1144732
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Trojan.GenericKD.47056116
McAfee	Artemis!1D2748A74ECD
MAX	malware (ai score=88)
TrendMicro-HouseCall	TROJ_GEN.R002H0CIQ21
Ikarus	Trojan.Win64.Rozena
Fortinet	MSIL/Rozena.N!tr
AVG	Win64:Trojan-gen
Paloalto	generic.ml

How to remove Win64/Rozena.JN?

Win64/Rozena.JN removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X