How to remove 29dc925d.rbf

29dc925d.rbf

The module 29dc925d.rbf has been detected as Adware.SweetIM

29dc925d.rbf
Remove 29dc925d.rbf

File Details

Product Name:

UpdateSupport
Company Name:

SweetIM Technologies Ltd.
MD5: 551ffba9a317deb34b5f9efe78b96366
Size: 292 KB
First Published: 2017-05-26 13:02:41 (7 years ago)
Latest Published: 2022-03-20 23:27:03 (2 years ago)
Status: Adware.SweetIM (on last analysis)
Analysis Date: 2022-03-20 23:27:03 (2 years ago)

Overview

Signed By: SweetIM Technologies Ltd
Status: Invalid (digital signature could be stolen or file could be patched)

Common Places:

%sysdrive%\adwcleaner\quarantine\files\iqamzodsaqbdgvdpaxfdhprkoxahjqou\messenger
%programfiles%\sweetim\messenger
%sysdrive%
%programfiles%\sweetim
%sysdrive%\terzo\programmi\sweetim
%sysdrive%\windows.old\program files (x86)\sweetim
%programfiles%\sweetim

File Names:

mgUpdateSupport.dll
29dc925d.rbf

Geography:

20.0%
20.0%
13.3%
13.3%
6.7%
6.7%
6.7%
6.7%
6.7%

OS Version:

Windows 7 40.0%
Windows 10 33.3%
Windows XP 20.0%
Windows Vista 6.7%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x10000000
Entry Address: 0x0001b736

PE Sections:

Name Size of data MD5
.text 159744 bab13ff1a823a8c5c3d0ba12b058a59e
.rdata 61440 9f48ba8afd375e0f660e57aafa89d047
.data 4096 bb490cde80b53b8bf47f9d1f09488c0f
.rsrc 28672 b8eba2c63f7091714b07016c5247604b
.reloc 32768 aabc3aa35c02f991c2b8fdcbabc75007

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for 29dc925d.rbf
copyright for information about 29dc925d.rbf