How to remove $R5UOTLB.exe

$R5UOTLB.exe

The module $R5UOTLB.exe has been detected as Adware.SBWatchman

$R5UOTLB.exe
Remove $R5UOTLB.exe

File Details

Product Name:

Speedbit RestartApp
Company Name:

SpeedBit Ltd.
MD5: 2569172ebfc2104779b045159d33e5e3
Size: 48 KB
First Published: 2017-08-15 17:10:11 (8 years ago)
Latest Published: 2025-10-15 23:00:35 (3 months ago)
Status: Adware.SBWatchman (on last analysis)
Analysis Date: 2025-10-15 23:00:35 (3 months ago)

Overview

Signed By: Speed-Bit LTD
Status: Valid

Common Places:

%programfiles%\dap
%sysdrive%\adwcleaner\quarantine\files\eqsklkrngkjosevtlffqbrhbrmxkiynx
%sysdrive%\adwcleaner\quarantine\exuieaoeii
%sysdrive%\adwcleaner\quarantine\smlaztxc1o
%temp%\dapinst
%programfiles%
%sysdrive%\adwcleaner\quarantine
%temp%
%sysdrive%\$recycle.bin
%desktop%\new folder

File Names:

RestartApp.exe
$R5UOTLB.exe

Geography:

17.3%
8.8%
7.4%
6.1%
5.8%
3.4%
3.4%
3.1%
2.5%
2.5%
2.0%
1.8%
1.8%
1.6%
1.6%
1.6%
1.6%
1.6%
1.3%
1.3%
1.3%
1.1%
1.1%
1.1%
0.9%
0.9%
0.9%
0.9%
0.9%
0.7%
0.7%
0.7%
0.7%
0.7%
0.7%
0.7%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%

OS Version:

Windows 10 52.1%
Windows 7 32.1%
Windows 8.1 9.9%
Windows XP 4.2%
Windows Vista 0.8%
Windows Server 2012 0.2%
Windows Server 2016 0.2%
Windows 8 0.2%
Windows Server 2008 R2 0.2%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000024f1

PE Sections:

Name Size of data MD5
.text 28160 6c07ebf002952252231f5be28bd69049
.rdata 8192 90471840316bc7fb491ef585f0525b71
.data 3584 ddf02bfa438bf772432ab8638f16864b
.rsrc 1536 70f0e5d98bbc7c23d8e0377ee89986ea

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for $R5UOTLB.exe
copyright for information about $R5UOTLB.exe