Exploit.Agent.GU information

The Exploit.Agent.GU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Exploit.Agent.GU virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Exploit.Agent.GU?


File Info:
name: FFAE529F6ABE60C6D49E.mlw
path: /opt/CAPEv2/storage/binaries/7ce6e40f3a0de29f8c26c6ec928d0cc97eeda0e33b67eda6ea255b37f63afc63
crc32: 8AB64F17
md5: ffae529f6abe60c6d49edbd2dc004fc1
sha1: 53712842a315c72c3a6d3625f82a649ac33d47e0
sha256: 7ce6e40f3a0de29f8c26c6ec928d0cc97eeda0e33b67eda6ea255b37f63afc63
sha512: 522f5605ef5e5e4f2e1e9f37fe930ea85d88fedc590fe6cdee6570ddcd63726d490539c9edc9bdf958aafc0113587d6a134100524ee148199a0f6bf32cc6eee6
ssdeep: 192:6yb/pCgdGbeYNDSRuJEs+XHj1eph8jsybR0bg7mxstMCRK:6tuGbeYND+0bqZSQs86bgbMGK
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T10362E8466FB9C623C9B6077F1CD3D6106370B6928686CF9B3AE4246A1D37390E407A1F
sha3_384: 0bf9b54a5dca1a9ef02a40283e0da93f19f77a16cfc89732bde13130c0c276f0e2b247112ebdf6ed92ed49aad05eb3b6
ep_bytes: ff250020400000000000000000000000
timestamp: 2014-01-25 16:07:17

Version Info:
Translation: 0x0000 0x04b0
FileDescription: Silverlight
FileVersion: 1.0.0.0
InternalName: Silverlight.dll
LegalCopyright: Copyright ©  2014
OriginalFilename: Silverlight.dll
ProductName: Silverlight
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Exploit.Agent.GU also known as:

Lionic	Trojan.Win32.CVE-2013-0074.3!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Exploit.Agent.GU
FireEye	Exploit.Agent.GU
ALYac	Exploit.Agent.GU
Cylance	unsafe
Zillya	Exploit.CVE20130074.Win32.15
Sangfor	Exploit.Msil.CVE.Vm0y
Alibaba	Exploit:MSIL/CVE-2013-0074.3e2d9ac4
Symantec	Trojan.Gen.2
ESET-NOD32	Win32/Exploit.CVE-2013-0074.E
Kaspersky	Exploit.MSIL.CVE-2013-0074.l
BitDefender	Exploit.Agent.GU
NANO-Antivirus	Exploit.Win32.CVE.cupcuh
Tencent	Msil.Exploit.Cve-2013-0074.Ztjl
F-Secure	Exploit.EXP/Silverlight.Gen2
VIPRE	Exploit.Agent.GU
TrendMicro	TROJ_GEN.R002C0DA924
Sophos	Troj/Exploit-M
Ikarus	Exploit.Gen
Jiangmin	Exploit.MSIL.l
Webroot	W32.Malware.Gen
Avira	EXP/Silverlight.Gen2
Antiy-AVL	Trojan[Exploit]/Win32.CVE-2013-0074
Kingsoft	Win32.Troj.Unknown.a
Xcitium	Malware@#1k3y026q20ob1
Arcabit	Exploit.Agent.GU
ZoneAlarm	Exploit.MSIL.CVE-2013-0074.l
GData	Exploit.Agent.GU
AhnLab-V3	Trojan/Win.Generic.C283411
VBA32	TScope.Trojan.MSIL
MAX	malware (ai score=83)
DeepInstinct	MALICIOUS
Panda	Generic Malware
TrendMicro-HouseCall	TROJ_GEN.R002C0DA924
Yandex	Exploit.CVE-2013-0074!w4xmwdsBo44
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.1728101.susgen
Fortinet	W32/CVE_2013_0074.L!exploit
AVG	MSIL:CVE-2013-0074-A [Expl]
Avast	MSIL:CVE-2013-0074-A [Expl]

How to remove Exploit.Agent.GU?

Exploit.Agent.GU removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X