How to remove $R3FO1IP.exe

$R3FO1IP.exe

The module $R3FO1IP.exe has been detected as PUP.Auslogics

$R3FO1IP.exe
Remove $R3FO1IP.exe

File Details

Product Name:

Auslogics BoostSpeed 8

Company Name:

Auslogics Labs Pty Ltd

MD5: 1c759eae1a423f5c862d56eafbe9df71
Size: 13 MB
First Published: 2018-07-15 00:11:06 (6 years ago)
Latest Published: 2020-12-16 13:28:49 (4 years ago)
Status: PUP.Auslogics (on last analysis)
Analysis Date: 2020-12-16 13:28:49 (4 years ago)

Overview

Signed By: Auslogics Labs Pty Ltd
Status: Valid

Common Places:

%sysdrive%
%profile%\downloads
%sysdrive%\seagate dashboard 2.0\prometheus\ed\backup\1fe41d5a-0226-487c-9687-ce1154e0e7df\20160408_184336_ed\c\users\ed
%sysdrive%\$recycle.bin
%sysdrive%\downloads\windows\auslogics boostspeed
%sysdrive%\soft
%profile%\downloads
%sysdrive%\system volume information\systemrestore\frstaging\users\karol\downloads
%sysdrive%

File Names:

boost-speed-setup.exe
$R3FO1IP.exe

Geography:

45.5%
18.2%
9.1%
9.1%
9.1%
9.1%

OS Version:

Windows 10 63.6%
Windows 8.1 18.2%
Windows 7 18.2%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000113bc

PE Sections:

Name Size of data MD5
.text 61952 3a126e478661f20816f9d9285615f98e
.itext 3072 ba48b9b17b3dd8b92da3bd93f20ddb34
.data 3584 d7fd5f4b562d7961758f3d6a8c834fd0
.bss 0 00000000000000000000000000000000
.idata 3584 93d91a2b90e60bd758fc0c4908856ae1
.tls 0 00000000000000000000000000000000
.rdata 512 3dffc444ccc131c9dcee18db49ee6403
.rsrc 68096 b69dba71deceb778e1138aefc54df244

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for $R3FO1IP.exe
copyright for information about $R3FO1IP.exe