Skip to main content
Microsoft Security Intelligence
Published Jun 20, 2007 | Updated Sep 15, 2017


Detected by Microsoft Defender Antivirus

Aliases: Win32/Busky!generic (CA) Trojan-Downloader.Win32.Agent.avm (Kaspersky) Downloader-AXI.gen (McAfee) Trojan:Win32/Busky.gen (Microsoft) W32/Agent.ALFZ (Norman) Troj/Busky-Gen (Sophos) Trojan-Downloader.Win32.Agent.avm (Sunbelt Software) Trojan.Busky (Symantec) TSPY_Agent (Trend Micro)


Windows Defender Antivirus detects and removes this threat.
Win32/Busky is a family of Trojans that monitor and redirect Internet traffic, gather system information and download unwanted software such as Win32/Renos and Win32/SpySheriff. Win32/Busky may be installed by a Web browser exploit or other vulnerability when visiting a malicious Web site.

Use the following free Microsoft software to detect and remove this threat:

You should also run a full scan. A full scan might find hidden malware.

Get more help

You can also visit our advanced troubleshooting page or search the Microsoft virus and malware community for more help.

If you’re using Windows XP, see our Windows XP end of support page.

Follow us