How to remove “Trojan.Exploit.Sqlexp.E”?

The Trojan.Exploit.Sqlexp.E is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Exploit.Sqlexp.E virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine Trojan.Exploit.Sqlexp.E?


File Info:
name: 9FAC1A9A824E6D5215C5.mlw
path: /opt/CAPEv2/storage/binaries/efdfeccac37b914924f89c1a29f93e80bc75b2715b88f10c2fb89bdd5819d73b
crc32: 36C699CE
md5: 9fac1a9a824e6d5215c5adbd643cb664
sha1: 34852449cb1b6741dc57db301b0c4691c8b1a48f
sha256: efdfeccac37b914924f89c1a29f93e80bc75b2715b88f10c2fb89bdd5819d73b
sha512: 40c106967e110c7593f2ee66414ff652b3955b115afba25fa2b86d11b77966b4a444771aec5a62be9415eda33e686ee10287935c964d21ae6441c06d923a9b7d
ssdeep: 1536:6tAh6Zd+HbAc+WlexDZtAh6Zd+HbAc+WlexD:62Aabj+vxDZ2Aabj+vxD
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T137937E2378E1C573C89695F002B9CB759737641143F881A38B54DA5EAFB33E09B3A74A
sha3_384: ba8893fad1195a712d7f5d6ff1f66fb2a6d58411a402593d1151b12158886bd9560637b6f4ec9e0927a6de7ceebf0e51
ep_bytes: 6a186850834000e8b60c0000bf940000
timestamp: 2004-07-08 14:15:05

Version Info:
0: [No Data]

Trojan.Exploit.Sqlexp.E also known as:

Elastic	malicious (high confidence)
DrWeb	Exploit.SQLhelo
MicroWorld-eScan	Trojan.Exploit.Sqlexp.E
FireEye	Generic.mg.9fac1a9a824e6d52
ALYac	Trojan.Exploit.Sqlexp.E
Malwarebytes	Generic.Malware/Suspicious
VIPRE	Trojan.Exploit.Sqlexp.E
Sangfor	Trojan.Win32.SQLexp.buxin
K7AntiVirus	Exploit ( 004c09651 )
K7GW	Exploit ( 004c09651 )
Cybereason	malicious.a824e6
Arcabit	Trojan.Exploit.Sqlexp.E
Cyren	W32/Trojan.OYSH-3846
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Exploit.Win32.SQLexp.e
BitDefender	Trojan.Exploit.Sqlexp.E
NANO-Antivirus	Exploit.Win32.SQLexp.gowh
ViRobot	Trojan.Win32.SQLexp_Exploit.45056
Avast	Win32:SQLTool-F [Trj]
Tencent	Malware.Win32.Gencirc.1151e30f
Emsisoft	Trojan.Exploit.Sqlexp.E (B)
F-Secure	Worm.WORM/SQLexp.Expl.E
Zillya	Exploit.SQLexp.Win32.10
TrendMicro	TROJ_SQLEXP.F
McAfee-GW-Edition	Exploit-SQLHello
Sophos	Mal/Generic-S
SentinelOne	Static AI – Suspicious PE
Jiangmin	Hacktool/Exploit.SQL.Hello
Avira	WORM/SQLexp.Expl.E
MAX	malware (ai score=84)
Antiy-AVL	Trojan[Exploit]/Win32.SQLexp
Xcitium	Malware@#3jf8pg1kzcywk
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	Exploit.Win32.SQLexp.e
GData	Trojan.Exploit.Sqlexp.E
Google	Detected
AhnLab-V3	Trojan/Win32.SQL_Exploit.C214371
McAfee	Artemis!9FAC1A9A824E
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_SQLEXP.F
Rising	Hack.Exploit.SQLexp.h (CLASSIC)
Yandex	Trojan.GenAsa!SZBtVFzmKmA
Ikarus	Exploit.Win32.SQLexp
MaxSecure	Trojan.Malware.33498.susgen
Fortinet	W32/Sqlexp.F!tr
AVG	Win32:SQLTool-F [Trj]
DeepInstinct	MALICIOUS

How to remove Trojan.Exploit.Sqlexp.E?

Trojan.Exploit.Sqlexp.E removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X