JS:Trojan.JS.Agent.TYX (B) removal guide

The JS:Trojan.JS.Agent.TYX (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What JS:Trojan.JS.Agent.TYX (B) virus can do?

Detected script timer window indicative of sleep style evasion
Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
A scripting utility was executed
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine JS:Trojan.JS.Agent.TYX (B)?


File Info:
crc32: 85E20EA7
md5: 1062b0544beb5457fb6fe2b42a5d279d
name: 1062B0544BEB5457FB6FE2B42A5D279D.mlw
sha1: e0802b7dc9034902afbbe8ce4a2f8a107278b32b
sha256: 0a365240a36f0958331bb5c9f022d78b816edd66ee25baf4445e7a5421bb75eb
sha512: 2910ecf620c20672c440a647045f91512f17b16a11a701a667f29f17d24b0bf8f8aa56ebcda39111fd72ed9e8dec159622f205da18e31a06bbd84bed654b5b5d
ssdeep: 24576:XRuRuIRWHA02QzGNYQHFomqY7MFTt4EcuiDeP:YRLRgxGNyi4DtcuiKP
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: Wextract                
FileVersion: 6.00.2900.5512 (xpsp.080413-2105)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.00.2900.5512
FileDescription: Win32 Cabinet Self-Extractor                                           
OriginalFilename: WEXTRACT.EXE            
Translation: 0x0409 0x04b0

JS:Trojan.JS.Agent.TYX (B) also known as:

MicroWorld-eScan	JS:Trojan.JS.Agent.TYX
FireEye	JS:Trojan.JS.Agent.TYX
ALYac	Trojan.Agent.Alien
Cylance	Unsafe
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	JS:Trojan.JS.Agent.TYX
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.dc9034
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Kaspersky	Trojan.Win32.Alien.jxl
Alibaba	Trojan:Win32/Alien.548086dc
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Barys.ujryg
McAfee-GW-Edition	BehavesLike.Win32.Dropper.dc
Emsisoft	JS:Trojan.JS.Agent.TYX (B)
Avira	TR/Barys.ujryg
Kingsoft	Win32.Troj.Alien.j.(kcloud)
Microsoft	Program:Win32/Ymacco.AA0A
Arcabit	JS:Trojan.JS.Agent.TYX
AegisLab	Trojan.Win32.Generic.4!c
ZoneAlarm	Trojan.Win32.Alien.jxl
GData	Heur.BZC.ONG.Voiv.5.078B5E66 (2x)
Cynet	Malicious (score: 85)
McAfee	RDN/GenericM
MAX	malware (ai score=81)
eGambit	Unsafe.AI_Score_100%
Fortinet	W32/Script.GENERIC!tr
Webroot	W32.Worm.Gen
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen
Qihoo-360	Generic/Trojan.e7b

How to remove JS:Trojan.JS.Agent.TYX (B)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

JS:Trojan.JS.Agent.TYX (B) removal guide