Heur.Bat.1 (B) (file analysis)

The Heur.Bat.1 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Heur.Bat.1 (B) virus can do?

Reads data out of its own binary image
Uses Windows utilities for basic functionality
Exhibits possible ransomware file modification behavior
Network activity detected but not expressed in API logs

How to determine Heur.Bat.1 (B)?


File Info:
crc32: 97AACB71
md5: 25f9ae8899abf5a42c04c2e55c3c393d
name: 25F9AE8899ABF5A42C04C2E55C3C393D.mlw
sha1: 1f9ae56663eb7a861074b2330cff73e2f617c920
sha256: b65d85da4ffb9dd82ec711f7aeac2a68f9fdb80ecc06373b15bc9afef79ba8cb
sha512: b02f051b6d14e545489a44c6ac57b5f2545fd173433e6e3cfc8ba53dc5a90bd693c69a6b71ea2c4546ab4be924ccc7bda217d7e227a919b32439e5129a89c6f5
ssdeep: 6144:Lfsd47W6Q4PGWMK/bJ7d23voOiX+tG6zyHP:jsOW6Q4OWz9hyiX+tG6zyHP
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Heur.Bat.1 (B) also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Encoder.4!c
ALYac	Gen:Heur.Bat.1
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	Trojan:BAT/KillFiles.1710fef1
Cybereason	malicious.899abf
Symantec	Trojan.Gen.2
ESET-NOD32	BAT/KillFiles.NKC
APEX	Malicious
Avast	Other:Malware-gen [Trj]
ClamAV	Win.Dropper.Bladabindi-6813690-0
Kaspersky	Trojan-Ransom.Win32.Encoder.aki
BitDefender	Gen:Heur.Bat.1
NANO-Antivirus	Trojan.Win32.Encoder.fjnlgb
MicroWorld-eScan	Gen:Heur.Bat.1
Tencent	Win32.Trojan.Encoder.Htmn
Sophos	Mal/Generic-S
Comodo	Malware@#25ypeiwypxw0a
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.dh
FireEye	Gen:Heur.Bat.1
Emsisoft	Gen:Heur.Bat.1 (B)
Microsoft	Ransom:Win32/Genasom
Arcabit	Trojan.Bat.1
GData	Gen:Heur.Bat.1
McAfee	Artemis!25F9AE8899AB
MAX	malware (ai score=100)
Ikarus	Trojan.BAT.KillFiles
Fortinet	BAT/KillFiles.NKC!tr
AVG	Other:Malware-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Encoder.HwYDEpsA

How to remove Heur.Bat.1 (B)?

Heur.Bat.1 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X