Severity scale:  

Remove BatBitRst (Removal Instructions) - Free Guide

removal by Linas Kiguolis - - | Type: Adware

BatBitRst is highly evasive as well as one of the more serious adware infections that might also install crymptominer on the system

BatBitRst virus

BatBitRst is a malicious adware program that that installs a variety of browser extensions, serves intrusive ads, and changes the web browser, along with system settings. While most of the ad-supported applications[1] are relatively easily terminated and do not pose a great danger, this threat can cause havoc on users' computers.

The reason why BatBitRst adware should be treated more like malware is that it installs a process called setupft.exe to help it perform system changes. However, the main goal of the threat is to induce a variety of sponsored content into users' web browsers, just like FileTour and ScriptGate Chrome extensions that are closely related.

Nevertheless, due to implementation of new scheduled tasks and the installation of such dangerous malware like BitCoinMiner, BatBitRst removal might be complicated, although we will try to help you with the process in this article.

Name BatBitRst
Type Adware/malware
Also known as BatBitRst adware, Adware.Mail.Ru.BatBitRst
Related FileTour extension, ScriptGate extension, setupft.exe process
Infiltration methods  Bundled software, torrent sites and clients, third-party sites 
Symptoms  Intrusive ads and redirects, the appearance of new shortcuts/browser extensions and processes, slowdown of the machine, increased usage of CPU or other resources, software or system crashes, etc.
Risks  Money loss, installation of other malware, sensitive data exposure to cybercriminals, etc. 
Termination  The best way to delete BatBitRst adware is by using reputable security software like Reimage Reimage Cleaner Intego

Adware.Mail.Ru.BatBitRst is mostly delivered through software bundling – this technique relies on users who do not pay attention to the installation procedure of freeware/shareware. Additionally, users visiting and downloading apps from Peer-to-peer networks have a higher chance of infection. 

Unlike regular adware which modifies web browser settings of Google Chrome, Safari, Internet Explorer, Mozilla Firefox, and other browsers, BatBitRst virus engages in more significant alternations to the system, such as:

  • spawning new shortcuts;
  • creating new scheduled tasks;
  • preventing users from visiting security-related websites;
  • crashing the system with BSoD;[2]
  • installing further components like BitCoinMiner – a type of malware that abuses CPU power to mine cryptocurrency for criminals illegally.

Do not forget, however, that the primary goal of BatBitRst is to expose computer owners to pop-ups, redirects, deals, banners, flashing windows, in-text links, and other commercial content. This activity guarantees increased traffic to predetermined domains and also artificially elevates the rankings of less trustworthy websites.

Another feature of Adware.Mail.Ru.BatBitRst is its ability to track its users. If you are infected with this adware, you browsing the history, links clicked, IP, ISP, sites visited and other details might be recorded, harvested and shared with third-parties. Besides, private information can be collected as well.

BatBitRst adwareBatBitRst is dangerous malware that can install secondary payloads, such as cryprominers, on the infected device

There is no doubt that you should remove BatBitRst as soon as possible, as the system modifications pose a significant danger to your computer, as well as your own privacy. Without terminating the malicious application, you might end up exposing such sensitive details to cyber criminals like login credentials, banking details, or other data. Finally, threat actors might take over your PC and install further malware, such as ransomware.[3]

To safely terminate BatBitRst adware, you will have to scan your device with reputable security software – and we recommend Reimage Reimage Cleaner Intego, although another powerful AV engine can be used as well. In some cases, you might have to enter Safe Mode with Networking in order to perform a system scan with anti-malware, as BatBitRst virus might compromise security software's operation in normal mode.

Pick your download sources for free applications carefully and do not rush the installation process

While most of the malware uses more sophisticated delivery methods like a botnet chain, exploit kits and others, this adware is usually placed on unsafe torrent or streaming third-party sites, although users might also install it together with other freeware or shareware.

Software bundling is a well-known delivery method for potentially unwanted programs, including adware. While it is one of the ways for freeware developers to monetize, they sometimes agree to add applications into their installers that are not particularly safe, although those people do not care much – they get money for each install. Nevertheless, some secondary applications might be the main payload in the first place, and the initial program might be just a disguise.

BatBitRst infection logA log file displaying infection vectors of BatBitRst malware

Therefore, carefully pick sources for your downloads and pay close attention to the installation of freeware/shareware. Always decline all the deals/offers, never click “Next” several times without looking, uncheck all the boxes, check for the important documents (ToS, Privacy Policy) and always opt for Advanced or Custom settings instead of Recommended/Quick ones.

Perform a full system scan with anti-malware to delete BatBitRst adware

While manual BatBitRst removal is indeed possible, it might be just too complicated for regular users. For example, modified Windows system files like scheduled tasks or rooted applications that were installed by the virus might be incredibly persistent.

Therefore, we highly suggest installing a reputable security tool and scanning your device with it, as it can detect and eliminate all the components of the infection and altogether remove BatBitRst adware. In some cases, entering Safe Mode with Networking is recommended, as BatBitRst virus is known to tamper with security software or its related websites.

Finally, you should also reset all the installed browsers due to BatBitRst's ability to change web browser settings such as homepage and new tab functionality. Besides, a proper browser reset will also get rid of all the unwanted extensions and toolbars, including ScriptGate.

You may remove virus damage with a help of Reimage Reimage Cleaner Intego. SpyHunter 5Combo Cleaner and Malwarebytes are recommended to detect potentially unwanted programs and viruses with all their files and registry entries that are related to them.

do it now!
Reimage Happiness
Intego Happiness
Compatible with Microsoft Windows Supported versions Compatible with OS X Supported versions
What to do if failed?
If you failed to remove virus damage using Reimage Intego, submit a question to our support team and provide as much details as possible.
Reimage Intego has a free limited scanner. Reimage Intego offers more through scan when you purchase its full version. When free scanner detects issues, you can fix them using free manual repairs or you can decide to purchase the full version in order to fix them automatically.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Reimage, try running SpyHunter 5.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Intego, try running Combo Cleaner.

To remove BatBitRst, follow these steps:

Remove BatBitRst from Windows systems

BatBitRst adware can be difficult to eliminate manually. However, you can look for unwanted applications in the installed programs list via the Control Panel and attempt to uninstall them. Once done, we still advise you to perform a scan with anti-virus.

  1. Click Start Control Panel Programs and Features (if you are Windows XP user, click on Add/Remove Programs). Click 'Start -> Control Panel -> Programs and Features' (if you are 'Windows XP' user, click on 'Add/Remove Programs').
  2. If you are Windows 10 / Windows 8 user, then right-click in the lower left corner of the screen. Once Quick Access Menu shows up, select Control Panel and Uninstall a Program. If you are 'Windows 10 / Windows 8' user, then right-click in the lower left corner of the screen. Once 'Quick Access Menu' shows up, select 'Control Panel' and 'Uninstall a Program'.
  3. Uninstall BatBitRst and related programs
    Here, look for BatBitRst or any other recently installed suspicious programs.
  4. Uninstall them and click OK to save these changes. Right click on each of suspicious entries and select 'Uninstall'

Erase BatBitRst from Mac OS X system

Macs are also prone to be infected with adware, and security software is also needed for these machines. Terminate the unwanted programs as explained below and then perform a system scan with security application:

  1. If you are using OS X, click Go button at the top left of the screen and select Applications. Cick 'Go' and select 'Applications'
  2. Wait until you see Applications folder and look for BatBitRst or any other suspicious programs on it. Now right click on every of such entries and select Move to Trash. Click on every malicious entry and select 'Move to Trash'

Uninstall BatBitRst from Internet Explorer (IE)

  1. Remove dangerous add-ons
    Open Internet Explorer, click on the Gear icon (IE menu) on the top right corner of the browser and choose Manage Add-ons. Click on menu icon and select 'Manage add-ons'
  2. You will see a Manage Add-ons window. Here, look for BatBitRst and other suspicious plugins. Disable these entries by clicking Disable: Right click on each of malicious entries and select 'Disable'
  3. Change your homepage if it was altered by virus:
    Click on the gear icon (menu) on the top right corner of the browser and select Internet Options. Stay in General tab.
  4. Here, remove malicious URL and enter preferable domain name. Click Apply to save changes. Delete malicious URL, enter your desired domain name and click 'Apply' to save changes
  5. Reset Internet Explorer
    Click on the gear icon (menu) again and select Internet options. Go to Advanced tab.
  6. Here, select Reset.
  7. When in the new window, check Delete personal settings and select Reset again to complete BatBitRst removal. Go to 'Advanced' tab and click on 'Reset' button. Now select 'Delete personal settings' and click on 'Reset' button again

Get rid of BatBitRst from Microsoft Edge

Reset Microsoft Edge settings (Method 1):

  1. Launch Microsoft Edge app and click More (three dots at the top right corner of the screen).
  2. Click Settings to open more options.
  3. Once Settings window shows up, click Choose what to clear button under Clear browsing data option. Go to Settings and select 'Choose what to clear'
  4. Here, select all what you want to remove and click Clear. Select 'Clear' button
  5. Now you should right-click on the Start button (Windows logo). Here, select Task Manager. Open the start menu and select 'Task Manager'
  6. When in Processes tab, search for Microsoft Edge.
  7. Right-click on it and choose Go to details option. If can’t see Go to details option, click More details and repeat previous steps. Right-click 'Microsoft Edge' and select 'Go to details' Select 'More details' if 'Go to details' option fails to show up
  8. When Details tab shows up, find every entry with Microsoft Edge name in it. Right click on each of them and select End Task to end these entries. Find Microsoft Edge entries and select 'End Task'

Resetting Microsoft Edge browser (Method 2):

If Method 1 failed to help you, you need to use an advanced Edge reset method.

  1. Note: you need to backup your data before using this method.
  2. Find this folder on your computer: C:\Users\%username%\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe.
  3. Select every entry which is saved on it and right click with your mouse. Then Delete option. Go to Microsoft Edge folder on your computer, right-click every entry and click 'Delete'
  4. Click the Start button (Windows logo) and type in window power in Search my stuff line.
  5. Right-click the Windows PowerShell entry and choose Run as administrator. Find Windows PowerShell, right-click it and select 'Run as administrator'
  6. Once Administrator: Windows PowerShell window shows up, paste this command line after PS C:\WINDOWS\system32> and press Enter:
    Get-AppXPackage -AllUsers -Name Microsoft.MicrosoftEdge | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register $($_.InstallLocation)\AppXManifest.xml -Verbose}
    Copy and paste a required command and press 'Enter'

Once these steps are finished, BatBitRst should be removed from your Microsoft Edge browser.

Delete BatBitRst from Mozilla Firefox (FF)

Adware often leaves traces within Mozilla Firefox, so its reset would eliminate them fully:

  1. Remove dangerous extensions
    Open Mozilla Firefox, click on the menu icon (top right corner) and select Add-ons Extensions. Click on menu icon and select 'Add-ons'
  2. Here, select BatBitRst and other questionable plugins. Click Remove to delete these entries. Select 'Extensions' and look for malicious entries. Click 'Remove' to get rid of each of them
  3. Reset Mozilla Firefox
    Click on the Firefox menu on the top left and click on the question mark. Here, choose Troubleshooting Information. Click on menu icon and then on '?'. Select 'Troubleshooting Information'
  4. Now you will see Reset Firefox to its default state message with Reset Firefox button. Click this button for several times and complete BatBitRst removal. Click on 'Reset Firefox' button for a couple of times

Eliminate BatBitRst from Google Chrome

Google Chrome is the main target of Adware.Mail.Ru.BatBitRst, so it is best to reset it after the virus termination is complete:

  1. Delete malicious plugins
    Open Google Chrome, click on the menu icon (top right corner) and select Tools Extensions. Click on menu icon. Select 'Tools' and 'Extensions'
  2. Here, select BatBitRst and other malicious plugins and select trash icon to delete these entries. Look for malicious entries and delete each of them by clicking on the Trash bin icon
  3. Click on menu icon again and choose Settings Manage Search engines under the Search section. When in 'Settings', select 'Manage search engines...'
  4. When in Search Engines..., remove malicious search sites. You should leave only Google or your preferred domain name. Click 'X' to remove malicious URLs
  5. Reset Google Chrome
    Click on menu icon on the top right of your Google Chrome and select Settings.
  6. Scroll down to the end of the page and click on Reset browser settings. When in 'Settings', scroll down to 'Reset browser settings' button and click on it
  7. Click Reset to confirm this action and complete BatBitRst removal. Click on 'Reset' button to complete your removal

Remove BatBitRst from Safari

  1. Remove dangerous extensions
    Open Safari web browser and click on Safari in menu at the top left of the screen. Once you do this, select Preferences. Click on 'Safari' and select 'Preferences'
  2. Here, select Extensions and look for BatBitRst or other suspicious entries. Click on the Uninstall button to get rid each of them. Go to 'Extensions' and uninstall malicious add-ons
  3. Reset Safari
    Open Safari browser and click on Safari in menu section at the top left of the screen. Here, select Reset Safari.... Click on 'Safari' and select 'Reset Safari...'
  4. Now you will see a detailed dialog window filled with reset options. All of those options are usually checked, but you can specify which of them you want to reset. Click the Reset button to complete BatBitRst removal process. Select all options and click on 'Reset' button

Access your website securely from any location

When you work on the domain, site, blog, or different project that requires constant management, content creation, or coding, you may need to connect to the server and content management service more often. It is a hassle when your website is protected from suspicious connections and unauthorized IP addresses.

The best solution for creating a tighter network could be a dedicated/fixed IP address. If you make your IP address static and set to your device, you can connect to the CMS from any location and do not create any additional issues for server or network manager that need to monitor connections and activities. This is how you bypass some of the authentications factors and can remotely use your banking accounts without triggering suspicious with each login. 

VPN software providers like Private Internet Access can help you with such settings and offer the option to control the online reputation and manage projects easily from any part of the world. It is better to clock the access to your website from different IP addresses. So you can keep the project safe and secure when you have the dedicated IP address VPN and protected access to the content management system.

Backup files for the later use, in case of the malware attack

Computer users can suffer various losses due to cyber infections or their own faulty doings. Software issues created by malware or direct data loss due to encryption can lead to problems with your device or permanent damage. When you have proper up-to-date backups, you can easily recover after such an incident and get back to work.

It is crucial to create updates to your backups after any changes on the device, so you can get back to the point you were working on when malware changes anything or issues with the device causes data or performance corruption. Rely on such behavior and make file backup your daily or weekly habit.

When you have the previous version of every important document or project you can avoid frustration and breakdowns. It comes in handy when malware occurs out of nowhere. Use Data Recovery Pro for the system restoring purpose.

About the author

Linas Kiguolis
Linas Kiguolis - Expert in social media

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Linas Kiguolis
About the company Esolutions


Your opinion regarding BatBitRst