Welcome to remove-malware.net

How to remove Trojan.Busky infection

Malware Description:
Trojan.Busky (also identifiable as TrojanDownloader.Busky, Downloader-AXI.gen, Trojan.Win32.Obfuscated.ev) is a computer parasite that puts the infected computer’s integrity and the user’s privacy at risk. Trojan.Busky virus integrates itself in a BHO (Browser Helper Object) and embeds a malicious code in the compromised system. The infection is also known to download additional threats onto the infected PC, which makes this threat yet more hazardous. The auxiliary function of Trojan.Busky is to facilitate the intrusion of spyware, rogue anti-spyware and keyloggers. The external signs of Trojan.Busky activity on a random computer include the following: overall performance deterioration, appearance of suspicious unwanted programs, obsessive adware activity like pop-ups and bogus security scanners etc. Trojan.Busky inserts its malicious codes throughout the compromised Operating System; it creates numerous executables and registry keys so that it gets really complicated to intercept and disable its functioning. Since Trojan.Busky can promote spyware onto a victim’s machine, it’s obvious that the personal confidential data is seriously jeopardized as it may be secretly submitted to a remove server controlled by cyber criminals. If you come across any of the above symptoms on your PC, be sure to use a legit antivirus program to detect and eliminate Trojan.Busky infection.

Malware Type: Trojan Horses

Malware Author: Unknown

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

Trojan.Busky Free Scanner and Remover: Download Now

How to remove Trojan.Busky manually:
Manual removal of Trojan.Busky is feasible if you have sufficient expertise in dealing with program files, system processes, .dll files and registry entries.

The associated files to be deleted are listed below:

• repsrylq.exe
• zmlonwlu.exe
• epajslul.exe
• zojipsfi.exe
• nsdsnajk.exe
• pchyjqtw.exe
• tejcxabw.exe
• ejyjmlwr.exe
• gjctitkx.exe
• pgrabiva.exe
• uhybkxen.exe
• vmtmhuhc.exe
• wjalwrgl.exe
• jojmrgdu.exe
• pqrspmlq.exe
• ofctitup.exe
• inudylen.exe
• efkpgpyf.exe
• tqnknmfw.exe
• sjelcvad.exe
• rgbchirk.exe
• nctqlyds.exe
• fqjetcxm.exe
• revkxadi.exe
• mharsxyt.exe
• hkxqdwbq.exe
• ibszwtwv.exe
• otczolgp.exe
• dshmhefs.exe
• nynurkfa.exe
• bilqfmps.exe
• kpupwtmd.exe
• wdsjshad.exe
• nslqnilg.exe
• rsvopedk.dll
• gngxajur.dll
• dlnrzokt.dll
• fWhz1bkT.dll
• kehRbnCT.dll
• hnujvpc.dll

The related registry entries to be removed are as follows:

• HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ywtevpnp
• HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\wtriqqpl
• HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNffzbuwud
• HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\jpgfwozg
• HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\acsszhrg
• HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ahyusosq
• HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ceumhucw
• HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\qzwatdti
• HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\yhibmubz
• RUNNING PROGRAM\ujojubkn.exe
• HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\okjlssaj
• HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\guxfajsm
• HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\oaexvpxl
• HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\pqpwvunu
• RUNNING PROGRAM\explorer.exe
• HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\InfoDsc
• HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\MonSmartWeb
• RUNNING PROGRAM\ibszwtwv.exe
• RUNNING PROGRAM\otczolgp.exe
• HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\nfjofijm
• HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\jwxojvpj
• RUNNING PROGRAM\dshmhefs.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\kpwzqnoj.exe
• HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ef09ffa0-1dd1-11b2-a97d-d312c5dfae34}
• HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\PCHelp tools
• HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b217c7a4-1dd1-11b2-96af-e92b6a73bc19}
• HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{737A54C3-23DF-02B7-73E9-06F2C9C6F205}
• HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ ChkDsk32
• RUNNING PROGRAM\spaxiroz.exe
• RUNNING PROGRAM\vqrwxqno.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ayuhdjxq
• HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\WebApl
• HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\UtilGenEn
• RUNNING PROGRAM\nilsbozi.exe
• HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\DscApl
• HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\eorsuesa
• HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\rhgobfqv
• HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\tnmjhwrf
• RUNNING PROGRAM\cxknudah.exe
• HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\wrwpemtd
• RUNNING PROGRAM\idqlcxsj.exe
• RUNNING PROGRAM\uvkbwfwv.exe
• HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\kuqwqgpo

Please, be aware that manual removal of Trojan.Busky malware is a cumbersome procedure and does not ensure complete deletion of the malware, due to the fact that some files might be hidden or may automatically reanimate themselves afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal of Trojan.Busky, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Related Articles:

How to remove Trojan VMalum AWS infection
How to remove Trojan.Ransomlock infection
How to remove Trojan:W32/Inject infection
How to remove Trojan.Win32.Agent.dcc infection