Categories: Malware

Buzus.8 removal guide

The Buzus.8 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Buzus.8 virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Reads data out of its own binary image
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Behavioural detection: Injection (Process Hollowing)
Behavioural detection: Injection (inter-process)
CAPE detected the embedded win api malware family
Anomalous binary characteristics
Yara detections observed in process dumps, payloads or dropped files

How to determine Buzus.8?


File Info:
name: 283EC6A792CF98D0041B.mlwpath: /opt/CAPEv2/storage/binaries/1fd5aa030c8ea84c955c2a09c885d02d09284d6620d25456c8c74014e6bcda4acrc32: 99C372A5md5: 283ec6a792cf98d0041b2e0f31fbba28sha1: d6ba8b067c1a07b9d5261799f70979eb3ed70951sha256: 1fd5aa030c8ea84c955c2a09c885d02d09284d6620d25456c8c74014e6bcda4asha512: 9a8114a5f5f94c71178586c7f08342173c335424652936b2188647869623f2e85e23ef066cd8118d95684176713fecfbb209c58ef666b0a596af9d34dfd17a28ssdeep: 768:OZdIE6mCfV1ZXDuT+pxvPDgAiXKZC2p2ng4nGwcsAWq:MpgZXcCvfA2p2nNWsOtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T15623AD0E8ADB10E3FCD515776DF6B4AB72A48162CC243883D3D138647625D9524FEF2Asha3_384: ceaf4a98c369b70d9d484045695a499a2c82add996c41a42f109be9f5c335427f5df8e3de7d433703ce69a03a5085448ep_bytes: 5589e583ec18c7042402000000ff1510timestamp: 2011-04-26 16:24:16
Version Info:
0: [No Data]

Buzus.8 also known as:

Lionic	Trojan.Win32.Generic.lpN3
AVG	Win32:Agent-AOZU [Trj]
tehtris	Generic.Malware
DrWeb	Trojan.MulDrop2.14996
MicroWorld-eScan	Gen:Variant.Buzus.8
FireEye	Generic.mg.283ec6a792cf98d0
Skyhigh	BehavesLike.Win32.Trojan.pc
McAfee	BackDoor-EZF
Malwarebytes	Generic.Malware.AI.DDS
Zillya	Trojan.Injector.Win32.21814
Sangfor	Suspicious.Win32.Save.a
Alibaba	Backdoor:Win32/Bifrose.01041db6
K7GW	Trojan ( 005325b21 )
K7AntiVirus	Trojan ( 005325b21 )
BitDefenderTheta	AI:Packer.4DB3FECB1E
VirIT	Backdoor.Win32.Bifrose.GC
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	Win32/Bifrose.NEL
Cynet	Malicious (score: 99)
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Trojan.Ceeinject-9818269-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Buzus.8
NANO-Antivirus	Trojan.Win32.Bifrost.qayby
Avast	Win32:Agent-AOZU [Trj]
Tencent	Malware.Win32.Gencirc.10b5f830
Sophos	Mal/Kazy-C
F-Secure	Backdoor.BDS/Bifrose.aezuc
Baidu	Win32.Worm.Autorun.bm
VIPRE	Gen:Variant.Buzus.8
TrendMicro	TROJ_KAZY.SME3
Emsisoft	Gen:Variant.Buzus.8 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan/Buzus.auyl
Webroot	W32.Trojan.Gen
Varist	W32/CeeInject.Q.gen!Eldorado
Avira	BDS/Bifrose.aezuc
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Win32.Refroso
Kingsoft	Win32.Trojan.Generic.a
Microsoft	Backdoor:Win32/Bifrose.AE
Xcitium	TrojWare.Win32.Inject.JRR@4qmc61
Arcabit	Trojan.Buzus.8
ViRobot	Trojan.Win32.A.Buzus.11264.L
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Buzus.8
Google	Detected
AhnLab-V3	Trojan/Win32.Buzus.R5258
VBA32	Trojan.Bublik
ALYac	Gen:Variant.Buzus.8
TACHYON	Trojan/W32.Small.46333.B
Cylance	unsafe
Panda	Generic Malware
TrendMicro-HouseCall	TROJ_KAZY.SME3
Rising	Trojan.Win32.Fednu.tgr (CLASSIC)
Yandex	Trojan.GenAsa!RkMKfn18lso
Ikarus	Trojan.Win32.Buzus
MaxSecure	Trojan.Malware.2588.susgen
Fortinet	W32/Injector.KSK!tr
Zoner	Trojan.Win32.36684
DeepInstinct	MALICIOUS
alibabacloud	Trojan:Win/Bifrose.NEL