JS/Agent.NSD [Threat Name] go to Threat

JS/Agent.NSD [Threat Variant Name]

Category trojan
Size 32803 B
Aliases Trojan.JS.Agent.diw (Kaspersky)
  JS.Downloader (Symantec)
Short description

The trojan serves as a backdoor. It can be controlled remotely. The trojan is usually a part of other malware. It is written in JavaScript .

Installation

The trojan does not create any copies of itself.

Information stealing

The trojan collects the following information:

  • URLs visited

The trojan attempts to send gathered information to a remote machine.

Other information

The trojan is a malicious Google Chrome extension/plugin.


The trojan acquires data and commands from a remote computer or the Internet.


The trojan contains a URL address. The HTTP protocol is used in the communication.


It can execute the following operations:

  • modify the content of websites
  • block access to specific websites

The trojan may redirect the user to the specific web sites.


The trojan blocks access to any domains that contain any of the following strings in their name:

  • 2-viruses.com
  • aavar.org
  • adwarereport.com
  • adwarereport.com
  • agnitum.com
  • agnitum.de
  • agnitum.ru
  • allnod.com
  • allnod.info
  • amtso.org
  • analysis.avira.com
  • answers.microsoft.com
  • anti-malware.com
  • anti-malware-test.com
  • antirootkit.com
  • anti-spyware.com.au
  • antivir.de
  • antivir.ru
  • antivir-2012.com
  • antiviraldp.com
  • antiviraldp.com
  • antiviraldp.com
  • antiviraldp.com
  • antivirus.about.com
  • anti-virus.by
  • anti-virus.by
  • antivirus.cai.com
  • antivirus.cai.com
  • antivirus.comodo.com
  • antivirus.startpagina.nl
  • antivirus-online.de
  • antivirus-online.de
  • anti-virus-software-review.com
  • anti-virus-software-review.com
  • antivirusvergelijk.nl
  • anubis.iseclab.org
  • au.norton.com
  • auditmypc.com
  • authentium.com
  • authentium.com
  • av.eu
  • avast.com
  • avast.com.au
  • avast.ru
  • avastav.nl
  • av-comparatives.org
  • av-desk.com
  • avertlabs.com
  • avg.com
  • avg.com
  • avg.com.au
  • avg.com.au
  • avg.cz
  • avg-antivirus.com.au
  • avg-antivirus-plus-firewall.en.softonic.com
  • avgfrance.com
  • avgfrance.com
  • avgfrance.com
  • avgfrance.com
  • avira.com
  • avira.com
  • avira.com.au
  • avirus.com.ua
  • avirus.ru
  • avp.ru
  • avsoft.ru
  • av-test.de
  • av-test.org
  • bestantivirusreviewed.com
  • bitdefender.co.uk
  • bitdefender.com
  • bitdefender.com
  • bitdefender.com.au
  • bitdefender.com.ua
  • bitdefender.de
  • bitdefender.nl
  • bitdefender.nl
  • bitdefender.ru
  • bobbear.co.uk
  • bobbear.co.uk
  • camas.comodo.com
  • ca-store.com.au
  • centralops.net
  • centralops.net
  • centralops.net
  • check-mark.com
  • checkvir.com
  • clamav.dyndns.org
  • clamav.dyndns.org
  • clamav.net
  • clamav.net
  • clamsupport.sourcefire.com
  • clamwin.com
  • cleanallspyware.com
  • cleanuninstall.com
  • cnet.com
  • comodo.com
  • comodo.com
  • comodogroup.com
  • companies-house.gov.uk
  • companies-house.gov.uk
  • cybercrime.ch
  • cybercrime.ch
  • cybercrime.gov
  • cybercrime.gov
  • cyprotect.com
  • data.kaspersky.ru
  • db.local.clamav.net
  • defenx.nl
  • dialognauka.ru
  • dialognauka.ru
  • diamondcs.com.au
  • diamondcs.com.au
  • dl1.agnitum.com
  • dl2.agnitum.com
  • dnsstuff.com
  • dnsstuff.com
  • domaintools.com
  • domaintools.com
  • download.drweb.com
  • download.eset.com
  • download.nai.com
  • download.norman.no
  • download.norman.no
  • download1.avast.com
  • download1.avast.com
  • download2.avast.com
  • download2.avast.com
  • download3.avast.com
  • download4.avast.com
  • download5.avast.com
  • download7.avast.com
  • downloads.kaspersky-labs.com
  • drweb.com
  • drweb.com.ua
  • drweb.imshop.de
  • drweb.net
  • drweb.ru
  • dr-web.ru
  • drweb-antivir.it
  • dw.com
  • edgesuite.net
  • emlx.net
  • emlx.net
  • emsisoft.com
  • enisa.europa.eu
  • enisa.europa.eu
  • escanav.com
  • eset.co.uk
  • eset.com
  • eset.com.au
  • eset.eu
  • eset.sk
  • esetindia.com
  • esetnod32.ru
  • eu.shopmcafee.com
  • europe.f-secure.com
  • europe.f-secure.com
  • facebook.com/csp.php
  • facebook.com/mac_nerd_son
  • files.avast.com
  • files.f-prot.com
  • files.f-prot.com
  • finjan.com
  • finjan.com
  • firewallguide.com
  • forum.avira.com
  • forum.bitdefender.com
  • f-prot.com
  • f-prot.com
  • fraudaid.com
  • fraudaid.com
  • free.avg.com
  • free.grisoft.com
  • freeantivirushelp.com
  • free-av.com
  • free-av.de
  • freedrweb.com
  • free-firewall.org
  • freespaceinternetsecurity.com
  • fsa.gov.uk
  • fsa.gov.uk
  • f-secure.co.uk
  • f-secure.co.uk
  • f-secure.com
  • f-secure.com
  • f-secure.com
  • f-secure.com
  • f-secure.de
  • f-secure.de
  • f-secure.de
  • f-secure.ru
  • f-secure.ru
  • ftp.bitdefender.com
  • ftp.ca.co
  • ftp.ca.co
  • ftp.drweb.com
  • ftp.esafe.com
  • ftp.esafe.com
  • ftp.f-secure.com
  • ftp.f-secure.com
  • ftp.f-secure.de
  • ftp.f-secure.de
  • ftp.kaspersky.ru
  • ftp.kasperskylab.ru
  • ftp.kaspersky-labs.com
  • ftp.microworldsystems.com
  • ftp.microworldsystems.com
  • ftp.nai.com
  • ftp.nai.com
  • gdata.nl
  • gdatasoftware.co.uk
  • gietl.com
  • gmer.net
  • gratissoftware.nu
  • gratissoftwaresite.nl
  • grisoft.com
  • grisoft.com
  • grisoft.cz
  • grisoft.cz
  • hackerguardian.com
  • harveynorman.com.au
  • hijackthis.de
  • home.mcafee.com
  • housecall.trendmicro.com
  • housecall.trendmicro.com
  • icsalabs.com
  • ika-rus.com
  • ika-rus.com
  • ikarus-software.at
  • ikarus-software.at
  • inline-software.de
  • inline-software.de
  • interpol.int
  • interpol.int
  • iopus.com
  • iseclab.org
  • joebox.org
  • kaspersky.co.uk
  • kaspersky.com
  • kaspersky.ru
  • kaspersky-antivirus.ru
  • kasperskyanz.com.au
  • kasperskyclub.com
  • kasperskyclub.ru
  • kavdumps.kaspersky.com
  • kerio.com
  • kerio.com
  • kingsoftsecurity.com
  • k-otik.com
  • k-otik.com
  • krebsonsecurity.com
  • lavasoft.com
  • lavasoft.com.au
  • lavasoft.nu
  • lavasoft.nu
  • lavasoftusa.com
  • lavasoftusa.com
  • lavasoftusa.de
  • lavasoftusa.de
  • liveupdate.symantec.com
  • lurker.clamav.net
  • majorgeeks.com
  • malekal.com
  • malwarebytes.org
  • mcafee.com
  • mcafee.com
  • mcafee.free-trials.net
  • mcafeesecure.com
  • mcafeesecurity.com
  • mcafeestore.com
  • met.police.uk
  • met.police.uk
  • microbe.com.au
  • misec.net
  • misec.net
  • model-fx.com
  • model-fx.com
  • moosoft.com
  • moosoft.com
  • msecn.net
  • mwcollect.org
  • myaccount.bitdefender.com
  • myantispyware.com
  • my-etrust.com
  • my-etrust.com
  • nai.com
  • nbi.gov.ph
  • nbi.gov.ph
  • netfreighters.com.au
  • noadware.net
  • noadware.net
  • nod32.com
  • nod32.com.au
  • nod32.com.ua
  • nod32.it
  • nod32.nl
  • nod-32.ru
  • nod32.su
  • nod32eset.org
  • nordnet.com
  • nordnet.com
  • norman.com
  • norman.com
  • norton.com
  • nortonantiviruscenter.com
  • novirus.ru
  • nsclean.com
  • nsclean.com
  • nsclean.com
  • nsslabs.com
  • offensivecomputing.net
  • onecare.live.com
  • onlinescan.avast.com
  • openantivirus.org
  • openantivirus.org
  • outpostfirewall.com
  • panda-antivirus.en.softonic.com
  • pandasecurity.com.au
  • pandasoftware.com
  • pandasoftware.com
  • pccreg.antivirus.com
  • pccreg.antivirus.com
  • pchelpforum.com
  • pcpro.co.uk
  • pcthreat.com
  • pctools.com
  • pctools.com
  • pcworld.com
  • personalfirewall.comodo.com
  • pestpatrol.com
  • pestpatrol.com
  • pestpatrol.com
  • pestpatrol.com
  • police.gov.hk
  • police.gov.hk
  • prevx.com
  • projecthoneypot.org
  • protectstar-testlab.org
  • ravantivirus.com
  • ravantivirus.com
  • ravantivirus.com
  • ravantivirus.com
  • removevirus.org
  • ripe.net
  • ripe.net
  • robtex.com
  • robtex.com
  • rokop-security.de
  • rokop-security.de
  • safeweb.norton.com
  • sald.com
  • sandbox.norman.no
  • sandbox.norman.no
  • sandboxie.com
  • santivirus.com
  • santivirus.com
  • scambusters.org
  • scambusters.org
  • scanwith.com
  • scanwith.com
  • schoonepc.nl
  • sectools.org
  • secure.nai.com
  • securesoft.com.au
  • securetec.com.au
  • securitoo.com
  • securitoo.com
  • security.symantec.com
  • securityresponse.symantec.com
  • secuser.com
  • secuser.com
  • service.mcafee.com
  • service1.symantec.com
  • shop.ca.com
  • shop.ca.com
  • shop.mcafee.com
  • simplysup.com
  • simplysup.com
  • siteadvisor.com
  • softonic.com
  • sophos.com
  • sophos.com
  • spamcop.net
  • spamcop.net
  • spamhaus.org
  • spamhaus.org
  • spamtrackers.eu
  • spamtrackers.eu
  • spyblocker-software.com
  • spyblocker-software.com
  • spywareguide.com
  • spywareguide.com
  • spywarewarrior.com
  • staples.com
  • staysafeonline.info
  • sunbelt-software.com
  • superantispyware.com
  • superantispyware.com
  • superantispyware.com.au
  • support.drweb.com
  • support.f-secure.com
  • support.f-secure.com
  • support.f-secure.de
  • support.f-secure.de
  • sygate.com
  • symantec.com
  • symantec-norton.com
  • tds.diamondcs.com.au
  • tds.diamondcs.com.au
  • techsupportforum.com
  • threatexpert.com
  • threatfire.com
  • threatmetrix.com
  • tinysoftware.com
  • tinysoftware.com
  • treasury.gov
  • treasury.gov
  • treasury.gov
  • treasury.gov
  • trendmicro.com
  • trendmicro.com
  • trendmicro.com.au
  • trendmicro.com.au
  • trendmicro.nl
  • trendmicro-europe.com
  • trendmicro-europe.com
  • trojan-killer.ne
  • trustdefender.com
  • tucows.com
  • tuwien.ac.at
  • update.eset.com
  • update.microsoft.com
  • updates.sald.com
  • uploadmalware.com
  • us.mcafee.com
  • v4.windowsupdate.microsoft.com
  • v4.windowsupdate.microsoft.com
  • v5.windowsupdate.microsoft.com
  • v5.windowsupdate.microsoft.com
  • vba32.de
  • vba32.de
  • vergelijk.nl
  • vet.com.au
  • vet.com.au
  • vet.com.au
  • virscan.org
  • virusall.ru
  • virusblokada.ru
  • virusblokada.ru
  • virusbtn.com
  • virus-help.net
  • virusinfo.info
  • viruslab.ru
  • viruslab.ru
  • viruslist.com
  • virusscan.jotti.org
  • virussen.upc.nl
  • virustotal.com
  • visualizesoftware.com
  • visualizesoftware.com
  • vupen.com
  • vupen.com
  • webroot.co.uk
  • webroot.com
  • webroot.com
  • webroot.com
  • webroot.nl
  • wepawet.iseclab.org
  • wilderssecurity.com
  • wildlist.org
  • windows.microsoft.com
  • windowsupdate.microsoft.com
  • windowsupdate.microsoft.com
  • zeustracker.abuse.ch
  • z-oleg.com
  • zonealarm.com
  • zonelabs.com
  • zonelabs.com
  • zonelabs.com
  • zonelabs.com
  • zonelog.co.uk
  • zonelog.co.uk

Please enable Javascript to ensure correct displaying of this content and refresh this page.