Home Malware Programs Downloaders Trojan.Downloader.JS.Agent

Trojan.Downloader.JS.Agent

Posted: August 16, 2011

Trojan.Downloader.JS.Agent is a dangerous Trojan infection that exploits system vulnerabilities to enable remote attackers control of your computer. Trojan.Downloader.JS.Agent can deliver additional harmful malware infections to your computer and use your computer to send spam emails to your contact lists for 'pay per click' benefits. Trojan.Downloader.JS.Agent is created to record your browsing activity and steal your personal information. Trojan.Downloader.JS.Agent is mainly detected on some malicious websites. Once you visit at least one of those websites, Trojan.Downloader.JS.Agent will be downloaded and install its .exe files into your PC's root directory of the C: drive. When you reboot your computer, Trojan.Downloader.JS.Agent will finish its installation and change your system and some program settings on your PC without your consent. Trojan.Downloader.JS.Agent can also download some rogue security tools to attract you into buying them. You should delete Trojan.Downloader.JS.Agent immediately upon detection to protect your PC.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%System%\<random>.exe File name: %System%\<random>.exe
File type: Executable File
Mime Type: unknown/exe
%temp%\wininet.dll File name: %temp%\wininet.dll
File type: Dynamic link library
Mime Type: unknown/dll

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce\.shellHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\.shell
Loading...