Exterminate It! Antimalware

malpedia

Known threats:699,443 Last Update:July 17, 22:52

Testimonials

I got to say that so far I'm very please with your service. This is my first experience with your company. I have used in the past SpyHunter,Malwarebytes,SpyBlaster, for my detection with Mcafee antivirus/firewall.

Don L.

File: a.bat

Location of a.bat and Associated Malware

Check whether a.bat is present in the following locations:

a.bat file locations that are Windows version independent:

  • C:\Windows\a.bat
  • C:\Windows\Temp\a.bat

Windows 2000, Windows XP, Windows Server 2003 specific a.bat file locations:

  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\A.Bat

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific a.bat file locations:

  • C:\Users\USER_NAME\AppData\Local\Temp\A.Bat

If you find a.bat file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The a.bat file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of a.bat File^

File SizeFile Md5Last Seen
4096B0A194A79E3B01491C0EBC1E1F1AF285Dec 17, 2009
40968F46D8A23147B04A193B90788C565F4CDec 17, 2009
40966D47069C07EB06CE5B617EF2E47ECE7BDec 17, 2009
40962FB6DC6AE856AB1E78C2255D3D3AEF97Dec 21, 2009
40967B0AB4AC3DBA42351F886F7D7C46B672Jan 5, 2010
40962367AF013089F69D7ADA5A93517B8D22Jan 12, 2010
40968BFC0CDDB4CB425ED1B956A0842842EAJan 16, 2010
40963CE7B05543D6803B6DC025E91E685F70Jan 16, 2010
40964DA305B2DB4A2DA3589E9C9FAC7EFF55Jan 24, 2010
40967E1CB001932127722A84F7F04EFE26D8Feb 7, 2010
4096A1BA5C11605C334AEA02CA41665F2755Feb 9, 2010
40965829968652D443FBBE5544A281B6F137Feb 13, 2010
4096195AAB0C16B68364B04683B4D2B410D2Feb 15, 2010
409651CAE03A8ADEE8B7AD784FAEB162F8A9Feb 18, 2010
40967C730DC135B8282A30F4EA795606E083Feb 27, 2010
4096C9FF971F110D2993A4A716C5378D9D91Mar 17, 2010
40969564DC4490BF515D86AEF7A63D7C4F0DMar 20, 2010
40962D946AA68F0FBBB6F79C68EF650B8A01Mar 25, 2010
4096D6F29FF2311C155BD76E90439ED88621Apr 2, 2010
4096BCB92E1BA84CFEBC0B98AD4101410EE4Apr 5, 2010
40962ECE98EDCADF4F0997298E9B2D8C5D65Apr 9, 2010
409680E1FE50D0CA62A356668C22C2030935Apr 15, 2010
40966235D5D2146300992C64EFC0455638E0Apr 23, 2010
40963B5F0BA533064A392BB1314ADD9AB053Apr 30, 2010
4096F3E2B763E052FA422CD54946789A7132May 1, 2010
40960F325A536ED1E5DEC03C89DC1994D500May 2, 2010
40965DE9C7BBBE98A13D2B10332D56D6C835May 6, 2010
4096FF5E27D55D0CBFA127D1D3355AA66D5CMay 8, 2010
4096B923F37CF20B28AB486001318E162B03May 11, 2010
4096BD385C5D5E0F571957B8F43524CDD9FCMay 11, 2010
409631726E673546C06CBDE18D27969CC597May 26, 2010
4096BED91E76E8A87BDBFCF509CAC299DE02May 29, 2010
4096337CEFB02239453AADDD0181AA00B52EMay 30, 2010
40963B3BE0D61E96660C639F77D3EB015508May 30, 2010
409690FCDDF9B02E61645174FBD2A6A635BAJun 3, 2010
4096AC7FDD7B20A4B6759CA859D93492DBD5Jun 7, 2010
40964E9B857EEB5B2447496A704D87B6322CJun 12, 2010
409636191C7726960CFD8CD4A8FA0EC2BCDFJun 15, 2010
40969B850FBA12E03F30DFA8B6DB8DC3FC73Jun 25, 2010
40962847C30CA252CED5842DE0EE6AFA5FA0Jun 29, 2010
409689C529B657EBEEE875025E0368C42534Jul 13, 2010
4096B3597669E41A96B0A910C04A8F630EFBJul 14, 2010
409651209D20873A7AEB26C1C320E1E3CDFCJul 16, 2010
4096DD9F550444B1652EE5C3810C056FDBADJul 22, 2010
4096EA1F6AAA44EEC954C6B25C5921F690E2Jul 27, 2010
4096B4EACC5B06AB375ADC21FD1BE633B778Jul 31, 2010
4096DCFDD3CF6F04C297CE0E754CC0D62580Jul 31, 2010
4096562BA3E916A0A5D484D823E084205102Aug 3, 2010
40960338F7539D026755A9CCD379119FD7F6Aug 3, 2010
409638A00E0E0E29C42332F78B83C6AA4B60Aug 17, 2010
4096DB64839B7E9963B6FD4FF3B4A5AEBB31Aug 18, 2010
4096AE3CE741C442E36F38CD8CD185E110E6Aug 20, 2010
40965274D56741B0BC7CE3FC2F0103AF44D6Aug 23, 2010
409635F623A421EDC783796E2DA9EB589A80Sep 7, 2010
409613E56DB30A87BA5B03722178D4BE89D5Sep 7, 2010
409658CF30EF2B654A1A5A32040B8513BB0DSep 15, 2010
409636F433C59BADB92F3ACF4ACC9199B33FSep 30, 2010
4096D056CCCD66F2EA65828F5657495D19B4Oct 4, 2010
4096ACDE2EA1C7799D570B037518B1D99970Oct 12, 2010
4096E84E19BA8ADE62966F64616D65D6B749Oct 18, 2010
4096DBBAD369649D1CE1DC3233AD9FC049DCOct 24, 2010
4096F309C3F024D63A6D9AD9C931A99BBE1EOct 27, 2010
4096F327C9D64AD6DE7F4E60D079A87A7EEDOct 31, 2010
409676FE974F3AF7C8755B6C9472FE0766A8Nov 7, 2010
40968F7FFC9DEE06C2150A32D21A68ECA14ENov 17, 2010
4096985CB3F95F6240A5588BF21DD5148C6ENov 28, 2010
40960848F3BDAD7BB6B0F77A9B1218CEDEC1Dec 9, 2010
4096DCBDE21CE0694423A11AB8E0C76A4D82Dec 23, 2010
40962449ECF38F1A756117388397FB1A1FCDDec 28, 2010
40963A6C7213728C5C450A60B207C84405BEJan 3, 2011
40965ABE0A3236749920E838E7F039CE9BE1Jan 9, 2011
409625AAAF587BCD306E4F643BD45D22DC2EJan 12, 2011
4096521F641F585608D479ACF6CD64466FBCFeb 6, 2011
40967A74D796022B568B651F85DDAA2B750EFeb 6, 2011
409688846009C33417E9E6A1AE1FFFF69766Mar 19, 2011
40968A02C5CCAF374E1380E4FEDBF2C6F395Apr 3, 2011
409616DDA850A4713F47FA5C384E39E7392EApr 18, 2011
409614BC5D84DBBD2F82DB096B9D51901515Apr 22, 2011
409668E039848953D79254EA9A05A7C968BAApr 25, 2011
40963F0AC3E3ED3A6C197C0F6A6E019C1A10May 8, 2011
4096DA660BFEB543E3FE09675C70AD21665EJun 13, 2011
40969A14CF098EDA8EA41B9AF99FF675486BJul 2, 2011
4096A2E8D43E497B8764EE855AF29C77B696Jul 11, 2011
40962279566D2F18B96EB32ED5648E8A1673Jul 16, 2011
4096019307D0C33FAEFCA89AA8947AEE5543Jul 17, 2011
409689DD72CB5AF8207BD7CC29EDEF7E5177Jul 25, 2011
4096CAA7DADEEF878DF76D807C5A6953A793Sep 30, 2011
409672A81B0AA497399A6AD967ADF4F653F4Oct 9, 2011
4096CF5E4922033B9E0623604B31B1678AB5Nov 1, 2011
409601A039AAEB175A98CC00A1893F1E2DC1Nov 6, 2011
4096C68C1B702566FD77FABADB8DB5214620Dec 8, 2011
40965F09A814145FDF59145512D38EC8BC8FJan 13, 2012
4096DB1B97CDCE6B3AF8134019AE487E3B83Feb 26, 2012
40969D1A085E1AA4DF6844B66786CB4ED7B3Mar 4, 2012
4096FBF25C88D0BD26D38A74961420F974C2Mar 30, 2012
4096DC0E87DD792F6E4EF01BE081C947DB99Oct 31, 2012
40965814526D611FA0B17622022CB6A10986Mar 25, 2013
409603C0E273573ECB16BFE2CFDA78367674Jan 27, 2014
16521AE52EB48E1904BD049BB6BA82E0366Jan 3, 2010
8865E16A1DAD9F8E419B5910E6E63A7685Apr 4, 2010
18885A9F127FCF94DF76115D41C9707EC03Apr 7, 2010
482310A1A6187C60CB3AF6313DBBCA963EJul 2, 2010
1429B2630D3D907E4937DB3A22F88A04975Aug 17, 2010
143F17BA50F26ED4D858D27EAF44D6C0C64Aug 25, 2010
158691839C075E3A20DA87324BA16C462FCOct 27, 2010
154953A2F9BE7CA7D3636C4D5242EFDE0BBOct 27, 2010
1588B48B334D77CEE57DFA48310C11C2908Oct 28, 2010
1580021720F5B5960167D37ECDBADC0CD37Oct 28, 2010
154E69EB7FCE593A2642C50F1E1FCA69766Oct 28, 2010
15843443FFB6D831B99DCD39C9D10C9DFE5Oct 28, 2010
150CDD18152D4A6D7C4311C24BB35AA2496Oct 28, 2010
1500739625F833777904D6F2F5844FBB343Nov 3, 2010
15199B1B7E04737C6649AAA2BDE414B0F7CNov 7, 2010
6973CB95959C8EF0B9B4A21391FC8EF508Nov 18, 2010
90EC54D1C969D056DB24DC208341B5E481Dec 24, 2010
90236B84121BC9AFAD1157CFF1A91CAB7DDec 27, 2010
1406F80E595931A49923B5C2E8483006579Jan 27, 2011
110E386A7B3CF2FB06CE2FB7A34213A380May 24, 2011
25301FAB6DD0120BAE469CF3E498C7B9A5Nov 2, 2011
6818F7650A39AD992296950730B0E2AE2Jan 16, 2012
3850A94EFFEC08179504EF46949486EF63Mar 17, 2012
28C764F359ED212C4E8E1218BF16FD1B0DApr 18, 2013
7678C392D2BB6EC9ABC471183193895C7DDec 16, 2013
3683CF3F780CC8FD72C994185D822A7D9DAug 17, 2010
15445C348F2A6A9865AFA028B123ABADFF9Sep 16, 2010
2920122FE2451582AF17F3D7CB902715AEDOct 3, 2010
19FCCC706273EBDCB7773CF71C46297C67Dec 22, 2010
4096E4F2D79DCA7FEAAE25DB5F67A40A37B5Jan 9, 2011
40963831666412EF11A7FF4FBE4EC6A733B2Feb 18, 2011
40962B057B1742988EDC1A01ED9F205E5FEDMay 14, 2011
239C189AB63A6CA073BB77BE02FED26595Sep 14, 2011
8822042AC570497E694BC990F8C44D9460Dec 3, 2011
409638ED9E89B8A094275197002ADBA9ABBFDec 26, 2011
409611321836C21A31A2311C07A6813FDEC6Dec 28, 2011
409640A5B16CA28B3E3F9D0D41AA569EAB4FJan 22, 2012
10956BB987DBF7A311893E9B961311673A7Jan 8, 2014
113B89B25862F3FB693F3A373EB2C94DD8AJul 3, 2014
41EAC146C14DA0739D71EE712396EC91A8May 11, 2017
11644F2CF985816A2D16D529915CD2A93A6Oct 30, 2010

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove a.bat^

  1. To enable deleting the a.bat file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select a.bat and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of a.bat and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of a.bat and Associated Malware.
  6. Notes:

    • The deletion of a.bat will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of a.bat will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a a.bat malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type a.bat. The name of the first found registry value referencing a.bat is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to a.bat, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of a.bat and Associated Malware.