Threat Database Trojans Trojan.Buzus

Trojan.Buzus

By CagedTech in Trojans
Published:
Last updated:

Threat Scorecard

Threat Level: 90 % (High)
Infected Computers: 4,549
First Seen: July 24, 2009
Last Seen: October 4, 2024
OS(es) Affected: Windows

The detection of Trojan.Buzus on your system indicates a potential security threat that requires immediate attention. This report aims to provide you with a comprehensive understanding of the threat, its operational methods, symptoms of infection, and most importantly, steps to remove it from your system. It's crucial to address this issue promptly to prevent any further damage or data compromise.

What Is Trojan.Buzus?

Trojan.Buzus is identified as a Trojan-type threat, which is a broad category of malware designed to allow unauthorized access to a computer system. Trojans can be used for a variety of malicious purposes, including data theft, spyware, ransomware, and more. They are often disguised as legitimate software or attached to seemingly harmless files, making them difficult to detect without proper security measures.

How Trojan.Buzus Operates

Trojan.Buzus, like other Trojans, operates by deceiving users into installing it on their systems. Once installed, it can create backdoors for remote access, allowing attackers to control the infected system, steal sensitive information, or use the system for malicious activities such as spreading spam or malware. The exact operational details of Trojan.Buzus may vary, but its primary goal is to compromise system security for malicious gain.

Symptoms of Infection

Symptoms of a Trojan.Buzus infection can be subtle and may not be immediately apparent. Common signs include unusual system behavior, such as slow performance, frequent crashes, or unfamiliar programs and icons. You might also notice unexpected changes in system settings or the presence of unwanted toolbars and pop-ups in your web browser. In some cases, you might receive notifications from your security software indicating suspicious activity or blocked threats.

  • Unexplained changes in system settings or performance.
  • Appearance of unknown programs or files.
  • Increased popup ads or unexpected browser behavior.
  • Frequent system crashes or freezes.

How to Remove Trojan.Buzus

  1. Boot into Safe Mode with Networking: This will help prevent the malware from loading and give you a clean environment to work in.
  2. Conduct a Full Scan with a Reputable Tool: Use an anti-malware tool, such as SpyHunter, to scan your system thoroughly. Ensure the tool is updated to the latest version for the best detection and removal capabilities.
  3. Uninstall Suspicious Programs: Go through your installed programs and remove any that you don't recognize or that were installed around the time you suspect the infection occurred.
  4. Reset Your Browser: For browsers like Chrome, Firefox, or Edge, resetting them to their default settings can remove any malicious extensions or settings changes made by the Trojan.
  5. Reboot and Re-scan: After removal, reboot your system and run another full scan to ensure that all components of the Trojan have been removed.

Conclusion

Removing Trojan.Buzus requires careful and thorough steps to ensure that all malicious components are eliminated from your system. It's also essential to adopt preventive measures, such as keeping your operating system and software up to date, using strong antivirus software, and being cautious with emails and downloads from unknown sources. By understanding the nature of Trojan.Buzus and following the removal steps, you can protect your system and data from this and similar threats. Remember, vigilance and proactive security practices are key to maintaining a secure computing environment.

Aliases

15 security vendors flagged this file as malicious.

Antivirus Vendor Detection
AVG SHeur4.QZD
Ikarus Backdoor.Gen3
AntiVir TR/Crypt.ZPACK.Gen2
Sophos Mal/Autorun-AS
BitDefender Trojan.Generic.7235059
Kaspersky Trojan.Win32.Jorik.IRCbot.hmp
NOD32 a variant of Win32/Kryptik.AAZY
McAfee Artemis!2D9C4AD32F50
AVG Worm/Generic2.BEEF
Fortinet W32/Jorik_IRCbot.CEE!tr
Antiy-AVL Backdoor/Win32.IRCBot.gen
AntiVir TR/Crypt.ZPACK.Gen
BitDefender Worm.Generic.358674
Kaspersky Trojan.Win32.Jorik.IRCbot.fah
eSafe Win32.TRCrypt.ZPACK

File System Details

Trojan.Buzus may create the following file(s):
# File Name MD5 Detections
1. Uninstall.exe 9c1abef6be60b1d8572681c9475b9077 2,627
2. ohydy.exe 474d68a1647482c7772e96bc4dff0cdb 330
3. cidrive32.exe 6e9316b84a7ef9cc4c9e55b272bc4b66 16
4. 99C0.tmp 57d27b55b7d6214b4cb62d41f22e66f4 13
5. 1919.tmp 4daa0dccda1d0e9d80632021d18da11d 9
6. 1EAD.tmp be1938b65c7a608056458fcf3e87a086 8
7. bbizd.exe 96cb7d650a4805b002d9035fbf59a99d 7
8. fredg.exe da4d85481494b94d4d0fa5f98a064795 7
9. winsvcn.exe 5ac73655e80160556f0c672c3c8a3a3e 6
10. svchost.exe    d4a4a090abada68f954785d32c02d194 6
11. 1834.tmp ce335ecc5b36b8faf8d1d301b9d550a4 5
12. 47AD.tmp e3236f731a60a4fa2ab6d51b41280bad 5
13. rundll32.exe 3707d63b76c646a53b82f058b0fb05eb 4
14. svchost.exe 385b3a4acfe96309252ad9c5229610d3 3
15. msvmiode.exe e5dcb2d8939cce433abd79688fb30527 3
16. aadrive32.exe 2d9c4ad32f509c44cd31e4f63e827cc7 3
17. oreaw.exe ceaec92b6230c4973ed293228bdfc2f3 2
18. D941.tmp 8fd13283ab7be9feda213f1046c894a1 2
19. iexplorer.exe 771a2e39198c5fec9b8481d5abf263b6 1
20. csrss.exe d76e4ce4070198c15869fee1faa86fd8 1
21. lsass.exe 591e67063e00e1b7c41663dd3c01ac44 1
22. ghdrive32.exe e1c493bfdbdc260e8acf58d51c23edb7 1
23. winsys.exe b3ecc3e3bf63acc2ed7c3b13a8999c92 0
24. server.exe 42cb813c71cc7c4940a307f0a41f8907 0
25. cndrive32.exe 3cba73a7092605d59b1d4aeef2f6db11 0
26. file.exe baf89a5874bed991c8572cf79df3e1a7 0
More files

Registry Details

Trojan.Buzus may create the following registry entry or registry entries:
Regexp file mask
%WINDIR%\winsvc32.exe