Troj/Buzus-AF

Category: Viruses and Spyware Protection available since:12 Mar 2009 23:58:40 (GMT)
Type: Trojan Last Updated:10 May 2011 14:31:33 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Buzus-AF is a Trojan for the Windows platform.

When run Troj/Buzus-AF copies itself to:
<System>\xccef090305.exe
<System>\inf\xccefb090305.scr

and creates the files:

<Windows>\xccdf16_090305a.dll - detected as Mal/Pophot-A
<Windows>\xccdf32_090305a.dll - detected as Mal/Behav-024
<System>\inf\xccdfb16_090305.dll - detected as Mal/Pophot-A
<System>\inf\rundll33.exe - can be safely deleted
<Windows>\xccwinsys.ini - detected as Troj/Buzus-AF

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run
xccinit
<System>\inf\rundll33.exe <Windows>\xccdf16_090305a.dll xccd16


download Try Sophos products for free
Download now