Malware

BAT/RmdirSQ.A malicious file

Malware Removal

The BAT/RmdirSQ.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What BAT/RmdirSQ.A virus can do?

  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX

How to determine BAT/RmdirSQ.A?


File Info:

crc32: 72A9586E
md5: 6e5390bafcbc9fce8f183f952c049dc8
name: 6E5390BAFCBC9FCE8F183F952C049DC8.mlw
sha1: c0c05340cbd5a2a57191914e946e9dc9e6f33962
sha256: 49597aa5203143d2c9c8fa968d1894325d48177d64070b19970c6aff033f8893
sha512: ec6f0072952337189fc71a062fce7c10ac153d02e16f34ba30bf1818e10661baf4cbb5011c437d9b0d54a208f8f25b024219683ef11a2fa380770dfd2bf80347
ssdeep: 768:5SPzquiqFbBFi2qanSAAZD50MF8EkbLAVV:5S+uHFn5sD50M9R
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:

0: [No Data]

BAT/RmdirSQ.A also known as:

K7AntiVirusTrojan ( 00527d0d1 )
Elasticmalicious (high confidence)
DrWebTrojan.MulDrop11.26182
CynetMalicious (score: 100)
ALYacTrojan.GenericKD.30388265
CylanceUnsafe
ZillyaTrojan.SchoolGirl.Win32.287
K7GWTrojan ( 00527d0d1 )
Cybereasonmalicious.afcbc9
SymantecTrojan.Gen.2
ESET-NOD32BAT/RmdirSQ.A
APEXMalicious
AvastWin64:Malware-gen
KasperskyTrojan.Win32.SchoolGirl.cql
BitDefenderTrojan.GenericKD.30388265
NANO-AntivirusTrojan.Win64.SchoolGirl.eyiuiw
MicroWorld-eScanTrojan.GenericKD.30388265
TencentWin32.Trojan.Schoolgirl.Wqwx
Ad-AwareTrojan.GenericKD.30388265
SophosMal/Generic-S
ComodoMalware@#2kauyhb9fmp22
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win64.Dropper.mc
FireEyeGeneric.mg.6e5390bafcbc9fce
EmsisoftTrojan.GenericKD.30388265 (B)
JiangminBackdoor/DarkKomet.ikr
AviraHEUR/AGEN.1116185
eGambitUnsafe.AI_Score_72%
Antiy-AVLTrojan/Generic.ASMalwS.249EF45
MicrosoftRansom:Win32/Genasom
ArcabitTrojan.Generic.D1CFB029
AegisLabTrojan.Win32.SchoolGirl.4!c
GDataTrojan.GenericKD.30388265
McAfeeArtemis!6E5390BAFCBC
MAXmalware (ai score=86)
PandaTrj/CI.A
RisingTrojan.RmdirSQ!8.F97 (CLOUD)
IkarusTrojan.BAT.RmdirSQ
MaxSecureTrojan.Malware.300983.susgen
FortinetBAT/RmdirSQ.A!tr
AVGWin64:Malware-gen
Paloaltogeneric.ml

How to remove BAT/RmdirSQ.A?

BAT/RmdirSQ.A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment