How to remove $RW400FO.dll

$RW400FO.dll

The module $RW400FO.dll has been detected as PUP.SpeedBit

$RW400FO.dll
Remove $RW400FO.dll

File Details

Product Name:

Download Accelerator Plus (DAP) Ext Helper Module
Company Name:

SpeedBit Ltd.
MD5: eafbc8bc75d65851c87bfabaddcf36f3
Size: 269 KB
First Published: 2017-08-15 17:10:11 (8 years ago)
Latest Published: 2025-10-15 23:00:36 (2 months ago)
Status: PUP.SpeedBit (on last analysis)
Analysis Date: 2025-10-15 23:00:36 (2 months ago)

Overview

Signed By: Speed-Bit LTD
Status: Valid

Common Places:

%programfiles%\dap
%sysdrive%\adwcleaner\quarantine\files\eqsklkrngkjosevtlffqbrhbrmxkiynx
%sysdrive%\adwcleaner\quarantine\exuieaoeii
%temp%\dapinst
%programfiles%
%sysdrive%\adwcleaner\quarantine
%sysdrive%\d drive\softwares\download
%temp%
%sysdrive%\$recycle.bin
%sysdrive%\wesley

File Names:

dexthlp64.dll
$RW400FO.dll

Geography:

18.4%
10.5%
6.3%
4.2%
3.6%
3.3%
3.3%
3.0%
2.7%
2.7%
2.1%
2.1%
1.8%
1.8%
1.8%
1.5%
1.5%
1.5%
1.5%
1.5%
1.2%
1.2%
1.2%
1.2%
1.2%
0.9%
0.9%
0.9%
0.9%
0.9%
0.9%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%

OS Version:

Windows 10 62.5%
Windows 7 24.8%
Windows 8.1 11.0%
Windows Vista 0.6%
Windows Server 2008 R2 0.6%
Windows Server 2012 0.3%
Windows Server 2016 0.3%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000180000000
Entry Address: 0x0001abd4

PE Sections:

Name Size of data MD5
.text 171008 55719b8e01a21758074dfb613e04336b
.rdata 58880 63a8392d26075f88ccbeb050e8bd603e
.data 11776 f97e10a61566a3e1b08b33131f988f13
.pdata 11776 3b2f274aa51f731d20204cca58ac1b6d
.rsrc 4608 f7fe6f78a504cc8dbc10acfa12a4dc93
.reloc 10240 f5a824cec1b4d54b53958f91984ec477

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for $RW400FO.dll
copyright for information about $RW400FO.dll