How to remove $RRTD2OA.exe

$RRTD2OA.exe

The module $RRTD2OA.exe has been detected as Adware.OpenCandy

$RRTD2OA.exe
Remove $RRTD2OA.exe

File Details

Product Name:

TinyUmbrella
MD5: c52f8a9bb7133865ff041b9e2eb1c918
Size: 36 MB
First Published: 2017-05-22 10:12:05 (8 years ago)
Latest Published: 2025-02-05 23:01:46 (11 months ago)
Status: Adware.OpenCandy (on last analysis)
Analysis Date: 2025-02-05 23:01:46 (11 months ago)

Common Places:

%profile%\downloads
%sysdrive%\$recycle.bin\s-1-5-21-3543361360-1218024039-3757973652-1001
%profile%
%sysdrive%
%sysdrive%\drivers-setups
%sysdrive%\compartilhamento\programas\programas atualizados\celulares
%desktop%
%desktop%\tablet ipad mini
%sysdrive%\softwares
%sysdrive%\fahim\download

File Names:

tinyumbrella_windows_9_3_4.exe
$RRTD2OA.exe

Geography:

21.3%
17.0%
6.4%
6.4%
4.3%
4.3%
4.3%
4.3%
2.1%
2.1%
2.1%
2.1%
2.1%
2.1%
2.1%
2.1%
2.1%
2.1%
2.1%
2.1%
2.1%
2.1%
2.1%

OS Version:

Windows 10 72.3%
Windows 7 23.4%
Windows 8.1 4.3%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00022e75

PE Sections:

Name Size of data MD5
.text 220672 82f9fe388a5393578da2e01595d60a3d
.rdata 94720 36ac6b3057f2c066af10d4bcc0b4bb16
.data 7680 d6247f15b5bd839b7d7b1d454ecfd52f
.rsrc 19968 95e419d04afb4bd6857f55b6e2cd28bd
.reloc 14848 407bbb004b56af36ac31103d63095648

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for $RRTD2OA.exe
copyright for information about $RRTD2OA.exe