Trojan.Buzus

By CagedTech in Trojans

Threat Scorecard

Ranking:	16,331
Threat Level:	90 % (High)
Infected Computers:	4,548

First Seen:	July 24, 2009
Last Seen:	August 30, 2023
OS(es) Affected:	Windows

Table of Contents

Aliases

15 security vendors flagged this file as malicious.

Anti-Virus Software	Detection
AVG	SHeur4.QZD
Ikarus	Backdoor.Gen3
AntiVir	TR/Crypt.ZPACK.Gen2
Sophos	Mal/Autorun-AS
BitDefender	Trojan.Generic.7235059
Kaspersky	Trojan.Win32.Jorik.IRCbot.hmp
NOD32	a variant of Win32/Kryptik.AAZY
McAfee	Artemis!2D9C4AD32F50
AVG	Worm/Generic2.BEEF
Fortinet	W32/Jorik_IRCbot.CEE!tr
Antiy-AVL	Backdoor/Win32.IRCBot.gen
AntiVir	TR/Crypt.ZPACK.Gen
BitDefender	Worm.Generic.358674
Kaspersky	Trojan.Win32.Jorik.IRCbot.fah
eSafe	Win32.TRCrypt.ZPACK

File System Details

Trojan.Buzus may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	Uninstall.exe	9c1abef6be60b1d8572681c9475b9077	2,627
Name: Uninstall.exe MD5: 9c1abef6be60b1d8572681c9475b9077 Size: 135.27 KB (135276 bytes) Detections: 2,627 Type: Executable File Path: C:\Users\<username>\AppData\Roaming\Uninstall.exe Group: Malware file Last Updated: May 14, 2022
2.	ohydy.exe	474d68a1647482c7772e96bc4dff0cdb	330
Name: ohydy.exe MD5: 474d68a1647482c7772e96bc4dff0cdb Size: 111.61 KB (111616 bytes) Detections: 330 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: September 15, 2010
3.	ohydy.exe	e75badadf5f9ecba4d7f2a4d5a4673eb	22
Name: ohydy.exe MD5: e75badadf5f9ecba4d7f2a4d5a4673eb Size: 102.4 KB (102400 bytes) Detections: 22 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: September 16, 2010
4.	aadrive32.exe	8b050449f58a199f712963bea0713336	18
Name: aadrive32.exe MD5: 8b050449f58a199f712963bea0713336 Size: 114.68 KB (114688 bytes) Detections: 18 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: November 21, 2011
5.	99C0.tmp	57d27b55b7d6214b4cb62d41f22e66f4	13
Name: 99C0.tmp MD5: 57d27b55b7d6214b4cb62d41f22e66f4 Size: 81.92 KB (81920 bytes) Detections: 13 Type: Temporary File Path: C:\Users\<username>\AppData\Roaming\99C0.tmp Group: Malware file Last Updated: August 27, 2022
6.	cndrive32.exe	20110b93b7f87c8a5fcf0fe55a2ba068	9
Name: cndrive32.exe MD5: 20110b93b7f87c8a5fcf0fe55a2ba068 Size: 66.04 KB (66048 bytes) Detections: 9 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: December 7, 2010
7.	1919.tmp	4daa0dccda1d0e9d80632021d18da11d	9
Name: 1919.tmp MD5: 4daa0dccda1d0e9d80632021d18da11d Size: 86.01 KB (86016 bytes) Detections: 9 Type: Temporary File Path: C:\Users\<username>\AppData\Roaming\1919.tmp Group: Malware file Last Updated: August 27, 2022
8.	1EAD.tmp	be1938b65c7a608056458fcf3e87a086	8
Name: 1EAD.tmp MD5: be1938b65c7a608056458fcf3e87a086 Size: 118.78 KB (118784 bytes) Detections: 8 Type: Temporary File Path: C:\Users\<username>\AppData\Roaming\1EAD.tmp Group: Malware file Last Updated: January 20, 2022
9.	fredg.exe	da4d85481494b94d4d0fa5f98a064795	7
Name: fredg.exe MD5: da4d85481494b94d4d0fa5f98a064795 Size: 45.05 KB (45056 bytes) Detections: 7 Type: Executable File Path: C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1455 Group: Malware file Last Updated: October 28, 2010
10.	winsvcn.exe	5ac73655e80160556f0c672c3c8a3a3e	6
Name: winsvcn.exe MD5: 5ac73655e80160556f0c672c3c8a3a3e Size: 81.4 KB (81408 bytes) Detections: 6 Type: Executable File Path: %PUBLIC% Group: Malware file Last Updated: November 2, 2010
11.	svchost.exeÂ Â Â	d4a4a090abada68f954785d32c02d194	6
Name: svchost.exeÂ Â Â MD5: d4a4a090abada68f954785d32c02d194 Size: 315.82 KB (315821 bytes) Detections: 6 Path: %WINDIR%\system32\config Group: Malware file Last Updated: October 28, 2010
12.	1834.tmp	ce335ecc5b36b8faf8d1d301b9d550a4	5
Name: 1834.tmp MD5: ce335ecc5b36b8faf8d1d301b9d550a4 Size: 86.01 KB (86016 bytes) Detections: 5 Type: Temporary File Path: C:\Users\<username>\AppData\Roaming\1834.tmp Group: Malware file Last Updated: August 27, 2022
13.	47AD.tmp	e3236f731a60a4fa2ab6d51b41280bad	5
Name: 47AD.tmp MD5: e3236f731a60a4fa2ab6d51b41280bad Size: 86.01 KB (86016 bytes) Detections: 5 Type: Temporary File Path: C:\Users\<username>\AppData\Roaming\47AD.tmp Group: Malware file Last Updated: August 27, 2022
14.	rundll32.exe	3707d63b76c646a53b82f058b0fb05eb	4
Name: rundll32.exe MD5: 3707d63b76c646a53b82f058b0fb05eb Size: 119.8 KB (119808 bytes) Detections: 4 Type: Executable File Path: C:\RECYCLER\S-1-5-21-6136269465-0102912693-024135967-8091 Group: Malware file Last Updated: November 2, 2010
15.	aadrive32.exe	8876cc750b01235f4b53a500deaf832e	4
Name: aadrive32.exe MD5: 8876cc750b01235f4b53a500deaf832e Size: 86.01 KB (86016 bytes) Detections: 4 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: January 1, 2012
16.	svchost.exe	385b3a4acfe96309252ad9c5229610d3	3
Name: svchost.exe MD5: 385b3a4acfe96309252ad9c5229610d3 Size: 217.08 KB (217088 bytes) Detections: 3 Type: Executable File Path: %APPDATA%\Microsoft Group: Malware file Last Updated: November 3, 2010
17.	msvmiode.exe	e5dcb2d8939cce433abd79688fb30527	3
Name: msvmiode.exe MD5: e5dcb2d8939cce433abd79688fb30527 Size: 131.07 KB (131072 bytes) Detections: 3 Type: Executable File Path: %WINDIR%\system32 Group: Malware file Last Updated: December 7, 2010
18.	aadrive32.exe	2d9c4ad32f509c44cd31e4f63e827cc7	3
Name: aadrive32.exe MD5: 2d9c4ad32f509c44cd31e4f63e827cc7 Size: 49.15 KB (49152 bytes) Detections: 3 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: March 6, 2012
19.	D941.tmp	8fd13283ab7be9feda213f1046c894a1	2
Name: D941.tmp MD5: 8fd13283ab7be9feda213f1046c894a1 Size: 86.01 KB (86016 bytes) Detections: 2 Type: Temporary File Path: C:\Users\<username>\AppData\Roaming\D941.tmp Group: Malware file Last Updated: August 27, 2022
20.	iexplorer.exe	771a2e39198c5fec9b8481d5abf263b6	1
Name: iexplorer.exe MD5: 771a2e39198c5fec9b8481d5abf263b6 Size: 52.39 KB (52399 bytes) Detections: 1 Type: Executable File Path: %WINDIR%\system Group: Malware file Last Updated: October 6, 2010
21.	csrss.exe	d76e4ce4070198c15869fee1faa86fd8	1
Name: csrss.exe MD5: d76e4ce4070198c15869fee1faa86fd8 Size: 232.74 KB (232742 bytes) Detections: 1 Type: Executable File Path: %WINDIR%\Config Group: Malware file Last Updated: November 9, 2010
22.	lsass.exe	591e67063e00e1b7c41663dd3c01ac44	1
Name: lsass.exe MD5: 591e67063e00e1b7c41663dd3c01ac44 Size: 202.24 KB (202240 bytes) Detections: 1 Type: Executable File Path: %APPDATA%\SystemProc Group: Malware file Last Updated: October 26, 2010
23.	ghdrive32.exe	e1c493bfdbdc260e8acf58d51c23edb7	1
Name: ghdrive32.exe MD5: e1c493bfdbdc260e8acf58d51c23edb7 Size: 59.21 KB (59219 bytes) Detections: 1 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: April 20, 2011
24.	cndrive32.exe	3cba73a7092605d59b1d4aeef2f6db11	0
Name: cndrive32.exe MD5: 3cba73a7092605d59b1d4aeef2f6db11 Size: 78.33 KB (78336 bytes) Detections: 0 Type: Executable File Group: Malware file Last Updated: August 12, 2010
25.	file.exe	baf89a5874bed991c8572cf79df3e1a7	0
Name: file.exe MD5: baf89a5874bed991c8572cf79df3e1a7 Size: 475.64 KB (475648 bytes) Detections: 0 Type: Executable File Group: Malware file Last Updated: January 2, 2017

More files

Registry Details

Trojan.Buzus may create the following registry entry or registry entries:

Regexp file mask

%WINDIR%\winsvc32.exe

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Trojan.Buzus

Threat Scorecard

EnigmaSoft Threat Scorecard

Aliases

File System Details

Registry Details

Submit Comment

Related Posts

Trojan.Buzus.bjzg

Trojan.Buzus.C

Trending

PracticalRemote

Triovideo.ru

Elibe Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen