Trojan.Downloader.JS.Agent

By Domesticus in Trojans

Threat Scorecard

Ranking:	1,213
Threat Level:	80 % (High)
Infected Computers:	59,147

First Seen:	September 13, 2012
Last Seen:	September 20, 2023
OS(es) Affected:	Windows

Trojan.Downloader.JS.Agent is a terrible Trojan that exploits system vulnerabilities to enable remote attackers control your computer system and corrupt its performance stability. Trojan.Downloader.JS.Agent can bring additional nasty malware threats to your machine and use it to send spam emails to your contact lists for 'pay per click' revenue. Trojan.Downloader.JS.Agent is generated to record your browsing activity and steal your sensitive details. Trojan.Downloader.JS.Agent is mainly found on some infected websites. Once you enter one of those websites, Trojan.Downloader.JS.Agent will be downloaded and install its .exe files into your computer's root directory of the C: drive. When you restart your PC, Trojan.Downloader.JS.Agent will finish its installation and modify your computer system and some application settings on your machine without your authorization. Trojan.Downloader.JS.Agent can also download some fake security programs to seduce you into purchasing them. You need to remove Trojan.Downloader.JS.Agent to avoid computer harm.

Table of Contents

SpyHunter Detects & Remove Trojan.Downloader.JS.Agent

File System Details

Trojan.Downloader.JS.Agent may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	documento_Img_1605084528631008.js	71cdff4f76bc7dba271370d0276ae480	47
Name: documento_Img_1605084528631008.js MD5: 71cdff4f76bc7dba271370d0276ae480 Size: 90.64 KB (90648 bytes) Detections: 47 Type: JavaScript file Path: C:\Users\<username>\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup Group: Malware file Last Updated: July 16, 2020
2.	4430b8df..js	c6925187e50cd19f8db77d56fd6ee753	46
Name: 4430b8df..js MD5: c6925187e50cd19f8db77d56fd6ee753 Size: 167.92 KB (167922 bytes) Detections: 46 Type: JavaScript file Path: %SYSTEMDRIVE%\Users\<username>\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4430b8df..js Group: Malware file Last Updated: July 9, 2021
3.	xfkhcyyii.js	4d632f12b148800eeeb2bdd9eaba9a98	19
Name: xfkhcyyii.js MD5: 4d632f12b148800eeeb2bdd9eaba9a98 Size: 44.58 KB (44589 bytes) Detections: 19 Type: JavaScript file Path: c:\Users\<username>\appdata\roaming\vncckgk Group: Malware file Last Updated: August 5, 2020
4.	urqaRBZIjY.js	1b4f3567336837d2928f335d37e98b61	16
Name: urqaRBZIjY.js MD5: 1b4f3567336837d2928f335d37e98b61 Size: 8.57 KB (8572 bytes) Detections: 16 Type: JavaScript file Path: %SYSTEMDRIVE%\Users\<username>\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\urqaRBZIjY.js Group: Malware file Last Updated: July 16, 2020
5.	tmp2E.tmp.js	ac50459604801285547d61c2f03865e3	15
Name: tmp2E.tmp.js MD5: ac50459604801285547d61c2f03865e3 Size: 131.07 KB (131072 bytes) Detections: 15 Type: JavaScript file Path: C:\Users\<username>\AppData\Roaming Group: Malware file Last Updated: May 2, 2022
6.	odciithy.js	9900c921249d899a3cb13c8bd9806839	12
Name: odciithy.js MD5: 9900c921249d899a3cb13c8bd9806839 Size: 44.72 KB (44722 bytes) Detections: 12 Type: JavaScript file Path: %SYSTEMDRIVE%\Users\<username>\appdata\roaming\qgial\odciithy.js Group: Malware file Last Updated: October 5, 2021
7.	LfutufXylK.js	82eb620313e374ffc8597028ed3a6c61	11
Name: LfutufXylK.js MD5: 82eb620313e374ffc8597028ed3a6c61 Size: 92.93 KB (92936 bytes) Detections: 11 Type: JavaScript file Path: C:\Users\<username>\AppData\Roaming Group: Malware file Last Updated: August 5, 2020
8.	ming.js	32a4eff1c41acfa3eeebf9589a122c46	8
Name: ming.js MD5: 32a4eff1c41acfa3eeebf9589a122c46 Size: 394.44 KB (394443 bytes) Detections: 8 Type: JavaScript file Path: %SYSTEMDRIVE%\Users\<username>\appdata\roaming Group: Malware file Last Updated: February 26, 2023
9.	dumnvdydb.js	3b2f10d7eb1d996ffcd48169310ac990	7
Name: dumnvdydb.js MD5: 3b2f10d7eb1d996ffcd48169310ac990 Size: 44.71 KB (44718 bytes) Detections: 7 Type: JavaScript file Path: c:\Users\<username>\appdata\roaming\bpvxuky Group: Malware file Last Updated: August 5, 2020
10.	lvrhauvu.js	d29d9a58d6bdea4230e2cdfad1793e12	7
Name: lvrhauvu.js MD5: d29d9a58d6bdea4230e2cdfad1793e12 Size: 140.37 KB (140377 bytes) Detections: 7 Type: JavaScript file Path: c:\Users\<username>\appdata\roaming\njoyee Group: Malware file Last Updated: January 24, 2022
11.	iatimi.js	b9d2e0402fbcc9d92ad7e6f3bf953eb8	6
Name: iatimi.js MD5: b9d2e0402fbcc9d92ad7e6f3bf953eb8 Size: 89.08 KB (89084 bytes) Detections: 6 Type: JavaScript file Path: %SYSTEMDRIVE%\Users\<username>\appdata\roaming\knwpqpfb Group: Malware file Last Updated: August 25, 2022
12.	tulqmt.js	365e6e4cef2bb8693f8fb4706c33d7a0	5
Name: tulqmt.js MD5: 365e6e4cef2bb8693f8fb4706c33d7a0 Size: 142.04 KB (142041 bytes) Detections: 5 Type: JavaScript file Path: c:\Users\<username>\appdata\roaming\rmldvbyg Group: Malware file Last Updated: August 5, 2020
13.	tmp53.tmp.js	a45afe938fd4a7a08261cfbdc69500c3	5
Name: tmp53.tmp.js MD5: a45afe938fd4a7a08261cfbdc69500c3 Size: 28.47 KB (28470 bytes) Detections: 5 Type: JavaScript file Path: C:\Users\<username>\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup Group: Malware file Last Updated: July 16, 2020
14.	iipfjy.js	dd4edc0a940df56e697581eebff45693	5
Name: iipfjy.js MD5: dd4edc0a940df56e697581eebff45693 Size: 140.32 KB (140325 bytes) Detections: 5 Type: JavaScript file Path: c:\Users\<username>\appdata\roaming\kdsgdilf Group: Malware file Last Updated: August 5, 2020
15.	sthhc.js	9d6023624349d133b142caca44dd67e8	4
Name: sthhc.js MD5: 9d6023624349d133b142caca44dd67e8 Size: 45.09 KB (45090 bytes) Detections: 4 Type: JavaScript file Path: c:\Users\<username>\appdata\roaming\ucxvfgt Group: Malware file Last Updated: August 5, 2020
16.	nzvjs.js	19dd0792011ed8b81092307c9ab4b9ec	4
Name: nzvjs.js MD5: 19dd0792011ed8b81092307c9ab4b9ec Size: 5.59 KB (5599 bytes) Detections: 4 Type: JavaScript file Path: C:\Users\<username>\AppData\Roaming Group: Malware file Last Updated: August 5, 2020
17.	hidfplb.js	e37d545c1ff2d48f1623282a12afa557	4
Name: hidfplb.js MD5: e37d545c1ff2d48f1623282a12afa557 Size: 44.58 KB (44589 bytes) Detections: 4 Type: JavaScript file Path: c:\Users\<username>\appdata\roaming\jieio Group: Malware file Last Updated: August 5, 2020
18.	kpphefrp.js	8f5cbf0a8911e20e570128fdc25433e7	4
Name: kpphefrp.js MD5: 8f5cbf0a8911e20e570128fdc25433e7 Size: 43.32 KB (43329 bytes) Detections: 4 Type: JavaScript file Path: c:\Users\<username>\appdata\roaming\icboj Group: Malware file Last Updated: April 17, 2023
19.	FJPsSU.js	95eca872981f9f7d839fc19293a6d4c0	3
Name: FJPsSU.js MD5: 95eca872981f9f7d839fc19293a6d4c0 Size: 19.27 KB (19272 bytes) Detections: 3 Type: JavaScript file Path: %ALLUSERSPROFILE%\FJPsSU.js Group: Malware file Last Updated: August 3, 2020
20.	lcownavaaf.js	5f548f40d07c4fa8c57fb10821b22bf6	3
Name: lcownavaaf.js MD5: 5f548f40d07c4fa8c57fb10821b22bf6 Size: 120 KB (120008 bytes) Detections: 3 Type: JavaScript file Path: %SYSTEMDRIVE%\Users\<username>\appdata\roaming\microsoft\windows\start menu\programs\startup Group: Malware file Last Updated: July 16, 2020
21.	ojsqqdwt.js	f38103c77d8f39716a32a477d26c3313	3
Name: ojsqqdwt.js MD5: f38103c77d8f39716a32a477d26c3313 Size: 43.2 KB (43205 bytes) Detections: 3 Type: JavaScript file Path: c:\Users\<username>\appdata\roaming\mbklr Group: Malware file Last Updated: August 5, 2020
22.	bvqhmdp.js	ec7b49256c05baab88c3818a1a33864a	3
Name: bvqhmdp.js MD5: ec7b49256c05baab88c3818a1a33864a Size: 89.26 KB (89269 bytes) Detections: 3 Type: JavaScript file Path: %SYSTEMDRIVE%\Users\<username>\appdata\roaming\denfdoamx Group: Malware file Last Updated: February 19, 2023
23.	lumdwht.js	eecd0d33e2307fa0f55a744bd5d4d32e	2
Name: lumdwht.js MD5: eecd0d33e2307fa0f55a744bd5d4d32e Size: 44.64 KB (44644 bytes) Detections: 2 Type: JavaScript file Path: c:\Users\<username>\appdata\roaming\jdqrtfhhx Group: Malware file Last Updated: August 5, 2020
24.	qDjMhpyUNqpugmQpPkiWeoHiWNnVXN.js	2837b741a9d7ce1c3a1313503b9bbc42	2
Name: qDjMhpyUNqpugmQpPkiWeoHiWNnVXN.js MD5: 2837b741a9d7ce1c3a1313503b9bbc42 Size: 367B (367 bytes) Detections: 2 Type: JavaScript file Path: C:\Users\<username>\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup Group: Malware file Last Updated: July 16, 2020
25.	IAStorUI.js	88cc4e72704cb0aad344a9d5ed10cb8e	2
Name: IAStorUI.js MD5: 88cc4e72704cb0aad344a9d5ed10cb8e Size: 163.33 KB (163338 bytes) Detections: 2 Type: JavaScript file Path: C:\Users\<username>\AppData\Roaming Group: Malware file Last Updated: August 5, 2020
26.	%System%\.exe
Name: %System%\.exe Type: Executable File Group: Malware file
27.	%temp%\wininet.dll
Name: %temp%\wininet.dll Type: Dynamic link library Group: Malware file
28.	.lnk
Name: .lnk Type: Shortcut Group: Malware file
29.	file.js	5a3d6949c416df6ff12a5e9bfe9816c0	0
Name: file.js MD5: 5a3d6949c416df6ff12a5e9bfe9816c0 Size: 752.6 KB (752603 bytes) Detections: 0 Type: JavaScript file Group: Malware file

More files

Registry Details

Trojan.Downloader.JS.Agent may create the following registry entry or registry entries:

Regexp file mask

%allusersprofile%\[RANDOM CHARACTERS].js

%appdata%\[RANDOM CHARACTERS].js

%appdata%\[RANDOM CHARACTERS].jse

%APPDATA%\DSAdaDSDA.js

%appdata%\microsoft\windows\start menu\programs\startup\[NUMBERS].js

%appdata%\microsoft\windows\start menu\programs\startup\[RANDOM CHARACTERS].js

%appdata%\microsoft\windows\start menu\programs\startup\[RANDOM CHARACTERS].jse

%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Flash Player 11.js

%appdata%\microsoft\windows\start menu\programs\startup\chrome.js

%appdata%\microsoft\windows\start menu\programs\startup\extract.js

%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\inv.js

%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\temp[RANDOM CHARACTERS].js

%APPDATA%\microsoft\windowsindexingservice.js

%localappdata%\[RANDOM CHARACTERS].js

%PUBLIC%\libraries\windowsindexingservice.js

%TEMP%\update.js

%userprofile%\(?!ip_log_data|network_meter_data)[RANDOM CHARACTERS].js

HKEY..\..\..\..{RegistryKeys}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\.shell

HKEY_LOCAL_MACHINE\Software\.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce\.shell

Directories

Trojan.Downloader.JS.Agent may create the following directory or directories:

%LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions\fffdibkepdhebmljdkdjlgibpjpaflhi

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Trojan.Downloader.JS.Agent

Threat Scorecard

EnigmaSoft Threat Scorecard

SpyHunter Detects & Remove Trojan.Downloader.JS.Agent

File System Details

Registry Details

Directories

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen