Should I remove "PowerShell/Agent.NJ"?

The PowerShell/Agent.NJ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PowerShell/Agent.NJ virus can do?

Injection (inter-process)
Uses Windows utilities for basic functionality
Attempts to repeatedly call a single API many times in order to delay analysis time
A potential decoy document was displayed to the user
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine PowerShell/Agent.NJ?


File Info:
crc32: A43B0590
md5: d24293e5bf681f85ca8a5e9342f5a02d
name: upload_file
sha1: 047d7516ef672ae882b322f1e3e9df2bdf7f4583
sha256: 358a36a890383fc6aeaa89261e8a47b6217dd9bd1a31b63590b38bffe092a4f5
sha512: fc78d442fc469a6c34d7100d230c9f93ab20de7f083b59a3a3a3da725492bce414b479f415bc4be5aeb8e7710feb4c5900753e94bf3c9d7def0e3f37f5c8c8a7
ssdeep: 384:OL90immA5dGpKY3yGTIM4Q/0rUGB1zvCXsXh9qq9XVhzP9Np/yA5EIwaLAZ2cQec:OL9eb
type: ASCII text, with very long lines, with no line terminators

Version Info:
0: [No Data]

PowerShell/Agent.NJ also known as:

ALYac	Trojan.PowerShell.Agent
Arcabit	Trojan.Generic.D202C28D
Cyren	Trojan.MZKZ-0
ESET-NOD32	PowerShell/Agent.NJ
TrendMicro-HouseCall	TROJ_FRS.VSNTEQ20
Kaspersky	Trojan.PowerShell.Agent.is
BitDefender	Trojan.GenericKD.33735309
MicroWorld-eScan	Trojan.GenericKD.33735309
Tencent	Win32.Trojan.Agent.Wope
Ad-Aware	Trojan.GenericKD.33735309
Emsisoft	Trojan.GenericKD.33735309 (B)
Comodo	Malware@#3j903y1zdxstt
TrendMicro	TROJ_FRS.VSNTEQ20
FireEye	Trojan.GenericKD.33735309
Sophos	Troj/PS-BP
Antiy-AVL	Trojan/PowerShell.Agent
ZoneAlarm	Trojan.PowerShell.Agent.is
GData	Trojan.GenericKD.33735309
AhnLab-V3	TextImage/Dropper
MAX	malware (ai score=85)
Ikarus	Trojan.PowerShell.Agent
Qihoo-360	Generic/Trojan.Generic.421

How to remove PowerShell/Agent.NJ?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Should I remove “PowerShell/Agent.NJ”?