Trojan

Should I remove “Trojan.Agent.DERX”?

Malware Removal

The Trojan.Agent.DERX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.DERX virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • A process created a hidden window
  • Uses Windows utilities for basic functionality
  • Installs itself for autorun at Windows startup
  • Attempts to identify installed AV products by registry key
  • Anomalous binary characteristics

How to determine Trojan.Agent.DERX?


File Info:

crc32: 21319FAD
md5: 5a50f2fdadffd93ff6d91c0b891bc5cb
name: 5A50F2FDADFFD93FF6D91C0B891BC5CB.mlw
sha1: 0978325535064a6eb266f658790919c6a3ecf53e
sha256: 2372c40fbbce3896c7ed152d8a28b4f31edabb3d1c82209f51254646a02aadb8
sha512: a2de99f7fd8a8d5168f4b558d3b83e375aefc19c39212d952c8cc2cb9c775f3f3fa73d322472ba4cc44234e64f7d69f1505def6de6f0e8ecbe4154eeff09d6a9
ssdeep: 1536:Ug8RsX5PW3RL9W75jryJ8jpxTZkak4dGuD3QNL97XYbN0g:4L40J8fTyakoGuDYLZXYbN0g
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: telnet.exe
FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.1.7600.16385
FileDescription: Microsoft Telnet Client
OriginalFilename: telnetc.exe
Translation: 0x0409 0x04b0

Trojan.Agent.DERX also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 00539a4c1 )
Elasticmalicious (high confidence)
DrWebTrojan.Siggen7.56920
CynetMalicious (score: 99)
ALYacTrojan.Agent.DERX
CylanceUnsafe
ZillyaTrojan.Yakes.Win32.69221
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojan:Win32/Bunitu.ali1000105
K7GWTrojan ( 00539a4c1 )
Cybereasonmalicious.dadffd
CyrenW32/Agent.CET.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.GJNV
APEXMalicious
AvastWin32:DangerousSig [Trj]
ClamAVWin.Dropper.Bunitu-9893704-0
KasperskyTrojan.Win32.Yakes.xfgc
BitDefenderTrojan.Agent.DERX
NANO-AntivirusTrojan.Win32.Yakes.fhttew
MicroWorld-eScanTrojan.Agent.DERX
TencentMalware.Win32.Gencirc.10cab1b6
Ad-AwareTrojan.Agent.DERX
SophosMal/Generic-S + Mal/Cerber-AM
ComodoTrojWare.Win32.Yakes.ADC@7vd6j1
BitDefenderThetaGen:NN.ZexaF.34294.tq1@aejv3Fbi
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom.Win32.SHADE.SMB.hp
McAfee-GW-EditionTrickbot-FRDP!5A50F2FDADFF
FireEyeGeneric.mg.5a50f2fdadffd93f
EmsisoftTrojan.Agent.DERX (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.NetStream.hw
AviraHEUR/AGEN.1117922
eGambitUnsafe.AI_Score_98%
Antiy-AVLTrojan/Generic.ASMalwS.28044B4
MicrosoftTrojanProxy:Win32/Bunitu!rfn
SUPERAntiSpywareTrojan.Agent/Gen-Emotet
GDataTrojan.Agent.DERX
AhnLab-V3Trojan/Win32.Yakes.R237311
Acronissuspicious
McAfeeTrickbot-FRDP!5A50F2FDADFF
MAXmalware (ai score=86)
VBA32BScope.TrojanProxy.Bunitu
MalwarebytesMalware.AI.1730890973
PandaTrj/GdSda.A
TrendMicro-HouseCallRansom.Win32.SHADE.SMB.hp
RisingTrojan.Kryptik!1.B397 (CLASSIC)
YandexTrojan.Yakes!rQBHGnVSBeo
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.GLWT!tr
AVGWin32:DangerousSig [Trj]

How to remove Trojan.Agent.DERX?

Trojan.Agent.DERX removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment