How to remove “WinGo/Rozena.AY”?

The WinGo/Rozena.AY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What WinGo/Rozena.AY virus can do?

How to determine WinGo/Rozena.AY?


File Info:
crc32: 5228336C
md5: d0253365d6b9e5f1d0dfcf295eb00250
name: D0253365D6B9E5F1D0DFCF295EB00250.mlw
sha1: 7f7fbb16d39d090eab5b8dd2ce4372927e18ea84
sha256: 3c1f8c9b9b00a3e785961ea9629400650e19712c90a65b654fe8295064c52783
sha512: 8d15d60c34f2cc340fa387ae700f7cce1ecc712ba94886e2cc4ba81366e7482e972b603bc5f050192478e31d35745a70bc5359497ab8de71884b42e6362fec5d
ssdeep: 24576:HNb038IuxdsM7ubdHEzYA9xcvQfTqHNV8GW8loc5vZEG5kKU1:W38Iyyqg/WG5kKU1
type: PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows

Version Info:
0: [No Data]

WinGo/Rozena.AY also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Bulz.232094
Cylance	Unsafe
Cybereason	malicious.5d6b9e
ESET-NOD32	a variant of WinGo/Rozena.AY
APEX	Malicious
Avast	Win64:Malware-gen
BitDefender	Gen:Variant.Bulz.232094
MicroWorld-eScan	Gen:Variant.Bulz.232094
Ad-Aware	Gen:Variant.Bulz.232094
Sophos	CXrep/MalGo-A
FireEye	Generic.mg.d0253365d6b9e5f1
Emsisoft	Gen:Variant.Bulz.232094 (B)
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Bulz.232094
AhnLab-V3	Malware/Win64.Generic.C4372457
MAX	malware (ai score=83)
Malwarebytes	Trojan.Downloader.GO
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W64/Rozena.AQ!tr
AVG	Win64:Malware-gen

How to remove WinGo/Rozena.AY?

WinGo/Rozena.AY removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X