Should I remove "Trojan:JS/Redirector"?

The Trojan:JS/Redirector is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:JS/Redirector virus can do?

Executable code extraction
Injection (inter-process)
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan:JS/Redirector?


File Info:
crc32: 81292E90
md5: 93a5bb9b2f8e8eba31cd81b56232c5ab
name: 93A5BB9B2F8E8EBA31CD81B56232C5AB.mlw
sha1: b4e924e84ce1b344471001d93f36c4fc2459d1e6
sha256: 23839813e34ae4b409a0d5fb3d8f75ca836fc235f73e8107eb657e727c64d9bd
sha512: 74266a8e81ee992faef8d1263b49adb195cd7ba6bb2db6eb18d3f3a69add3323bb5b7c36f295f1e7bd7fa1083cdb9ffe8660648103b8afc51d652353c2993616
ssdeep: 12288:uaHc64b888888888888W88888888888PHvxq3uZ+iRqLEQ2DjxiZl8zAeONQ9uZq:F86iHvxqeZkI91BoQ9uZUR+zZdQ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright:                                                                                                     
FileVersion: 22.11.56            
CompanyName: mhFID2d0KzPoTY5pBVF4                                        
Comments: This installation was built with Inno Setup.
ProductName: mhFID2d0KzPoTY5pBVF4                                        
ProductVersion: 22.11.56                                          
FileDescription: mhFID2d0KzPoTY5pBVF4                                        
Translation: 0x0000 0x04b0

Trojan:JS/Redirector also known as:

Lionic	Adware.Script.Generic.2!c
DrWeb	Trojan.BPlug.3614
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Bulz.855934
Cylance	Unsafe
Alibaba	AdWare:Win32/ExtInstaller.1b6e3b25
Cybereason	malicious.b2f8e8
Symantec	Trojan.Gen.2
ESET-NOD32	multiple detections
APEX	Malicious
Avast	Win32:Adware-gen [Adw]
Kaspersky	not-a-virus:HEUR:AdWare.Win32.ExtInstaller.gen
BitDefender	Gen:Variant.Bulz.213045
NANO-Antivirus	Trojan.Win32.ExtenBro.fjwzkt
MicroWorld-eScan	Gen:Variant.Bulz.213045
Comodo	Malware@#d0j6774dipcd
BitDefenderTheta	Gen:NN.ZedlaF.34294.ku8@aa6USJiO
FireEye	Gen:Variant.Bulz.213045
Emsisoft	Gen:Variant.Bulz.213045 (B)
Avira	HEUR/AGEN.1109568
Antiy-AVL	Trojan/Generic.ASMalwS.29B0C90
Microsoft	Trojan:JS/Redirector
GData	Gen:Variant.Bulz.855934
McAfee	Extenbro
MAX	malware (ai score=87)
VBA32	Trojan.BPlug
Malwarebytes	Adware.ExtenBro
Panda	Trj/CI.A
Yandex	PUA.ExtInstaller!EYEQ+CEvaUg
Ikarus	Trojan.Win32.Skeeyah
Fortinet	Riskware/ExtenBro
AVG	Win32:Adware-gen [Adw]
Paloalto	generic.ml

How to remove Trojan:JS/Redirector?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Should I remove “Trojan:JS/Redirector”?