Malware

JS/Agent.RNX removal

Malware Removal

The JS/Agent.RNX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What JS/Agent.RNX virus can do?

  • Sample contains Overlay data
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Binary compilation timestomping detected

How to determine JS/Agent.RNX?


File Info:

name: 631B5E58E33FBC4070A8.mlw
path: /opt/CAPEv2/storage/binaries/afe45e40da95a97781a374d8eaa6f59415457b8980140aaff8d125327ae6d7cd
crc32: 61E3D07C
md5: 631b5e58e33fbc4070a8fd8f7667d9a9
sha1: 669d102faef43081596fa4c2a030032b67919520
sha256: afe45e40da95a97781a374d8eaa6f59415457b8980140aaff8d125327ae6d7cd
sha512: accb944682a5973f838a08d6f5c0163d3853d1232fb8e60ccbe1b9c7d51d944ce5fa2a2b0954be8dcde3232d76a8177a9584d8d097d91c9129ed97ea24ef1b3a
ssdeep: 768:p+/unhi1zOzZ+/unhi1zOzDKe+3/xBcbK8ahR6/s6921uC9hPiqobwTqghycHAha:pti5OzZti5OzOti5OzPti5Oz
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T172E3660EAE6E5A92D81260B02ED55B094A176EF5FE4F0EB6611FF486C030CD60DD9BCD
sha3_384: ff3e8743681dfd8febf549b72fb74728593e6bd543a895c79cee8ba0f9a71f6c74762c5d5a5a4f9e5b5f56ad3bc3b144
ep_bytes: e83efcffffe96ffdffffcccccccccccc
timestamp: 2052-03-16 22:37:19

Version Info:

CompanyName: Microsoft Corporation
FileDescription: Windows Calculator
FileVersion: 10.0.20348.1 (WinBuild.160101.0800)
InternalName: CALC
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: CALC.EXE
ProductName: Microsoft® Windows® Operating System
ProductVersion: 10.0.20348.1
Translation: 0x0409 0x04b0

JS/Agent.RNX also known as:

BkavW32.Common.EC0A09FF
LionicTrojan.Win32.Generic.4!c
MicroWorld-eScanTrojan.GenericKD.72051012
FireEyeTrojan.GenericKD.72051012
CAT-QuickHealTrojan.Znyonm
SkyhighRDN/amadey
ALYacTrojan.GenericKD.72051012
Cylanceunsafe
ZillyaTrojan.Agent.JS.7180
SangforTrojan.Win32.Agent.Vq0t
CrowdStrikewin/malicious_confidence_60% (D)
AlibabaTrojan:JS/Generic.5f179280
K7GWTrojan ( 005b378f1 )
K7AntiVirusTrojan ( 005b378f1 )
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of JS/Agent.RNX
BitDefenderTrojan.GenericKD.72051012
AvastWin32:Malware-gen
SophosMal/Generic-S
F-SecureTrojan.TR/AVI.Agent.hpqrl
VIPRETrojan.GenericKD.72051012
EmsisoftTrojan.GenericKD.72051012 (B)
GDataTrojan.GenericKD.72051012
VaristW32/ABRisk.HOBR-6274
AviraTR/AVI.Agent.hpqrl
Antiy-AVLTrojan/Win32.Znyonm
KingsoftWin32.Troj.Generic.v
ArcabitTrojan.Generic.D44B6944
MicrosoftTrojan:Win32/Casdet!rfn
CynetMalicious (score: 99)
AhnLab-V3Malware/Win.amadey.C5603316
McAfeeRDN/amadey
GoogleDetected
MAXmalware (ai score=81)
MalwarebytesTrojan.FakeMS
PandaTrj/Chgt.AD
IkarusTrojan.JS.Agent
FortinetW32/PossibleThreat
AVGWin32:Malware-gen
DeepInstinctMALICIOUS
alibabacloudTrojan:Win/Strictor

How to remove JS/Agent.RNX?

JS/Agent.RNX removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment