What is CFF29B.exe?

CFF29B.exe is usually located in the 'c:\users\%USERNAME%\appdata\roaming\5ecf9c\' folder.

Some of the anti-virus scanners at VirusTotal detected CFF29B.exe.

If you have additional information about the file, please share it with the FreeFixer users by posting a comment at the bottom of this page.

VirusTotal report

47 of the 65 anti-virus programs at VirusTotal detected the CFF29B.exe file. That's a 72% detection rate.

Scanner	Detection Name
Ad-Aware	Gen:Variant.Barys.56173
AegisLab	Troj.W32.Agent!c
ALYac	Gen:Variant.Barys.56173
Antiy-AVL	Trojan/Win32.Agent
Arcabit	Trojan.Barys.DDB6D
Avast	Win32:Malware-gen
AVG	Win32:Malware-gen
Avira	DR/Delphi.A.9480
AVware	Trojan.Win32.Generic!BT
BitDefender	Gen:Variant.Barys.56173
CAT-QuickHeal	Trojan.Skeeyah.10076
ClamAV	Win.Trojan.Agent-1361670
Comodo	UnclassifiedMalware
CrowdStrike	malicious_confidence_90% (W)
Cylance	Unsafe
DrWeb	Trojan.Inject2.8376
Emsisoft	Gen:Variant.Barys.56173 (B)
Endgame	malicious (high confidence)
ESET-NOD32	a variant of Win32/Injector.CNGU
F-Secure	Gen:Variant.Barys.56173
Fortinet	W32/Injector.CLUQ!tr
GData	Gen:Variant.Barys.56173
Ikarus	Trojan.Win32.Injector
K7AntiVirus	Trojan ( 00500c331 )
K7GW	Trojan ( 00500c331 )
Kaspersky	Trojan.Win32.Agent.netdrm
MAX	malware (ai score=86)
McAfee	Artemis!8D4C80E0E48F
McAfee-GW-Edition	BehavesLike.Win32.Sdbot.ch
Microsoft	VirTool:Win32/Injector
MicroWorld-eScan	Gen:Variant.Barys.56173
NANO-Antivirus	Trojan.Win32.Agent.dyoyju
Paloalto	generic.ml
Panda	Trj/CI.A
Qihoo-360	HEUR/QVM05.1.Malware.Gen
Rising	Malware.Heuristic!ET#100% (RDM+:cmRtazqvYAvn7vJErx3ufEeesEpI)
Sophos	Mal/Generic-S
Symantec	Trojan.Gen
Tencent	Win32.Trojan.Inject.Auto
TrendMicro	TSPY_FAREIT.SMBD
TrendMicro-HouseCall	TSPY_FAREIT.SMBD
VBA32	Trojan.Agent
VIPRE	Trojan.Win32.Generic!BT
Webroot	W32.Trojan.Gen
Yandex	Trojan.Agent!o09P2KyDWRY
Zillya	Adware.Eorezo.Win32.17747
ZoneAlarm	Trojan.Win32.Agent.netdrm

CFF29B.exe removal instructions

The instructions below shows how to remove CFF29B.exe with help from the FreeFixer removal tool. Basically, you install FreeFixer, scan your computer, check the CFF29B.exe file for removal, restart your computer and scan it again to verify that CFF29B.exe has been successfully removed. Here are the removal instructions in more detail:

1. Download and install FreeFixer: http://www.freefixer.com/download.html
2. Start FreeFixer and press the Start Scan button. The scan will finish in approximately five minutes.

   
3. When the scan is finished, locate CFF29B.exe in the scan result and tick the checkbox next to the CFF29B.exe file. Do not check any other file for removal unless you are 100% sure you want to delete it. Tip: Press CTRL-F to open up FreeFixer's search dialog to quickly locate CFF29B.exe in the scan result.

   

   

   c:\users\%USERNAME%\appdata\roaming\5ecf9c\CFF29B.exe

   
4. Scroll down to the bottom of the scan result and press the Fix button. FreeFixer will now delete the CFF29B.exe file.

   
5. Restart your computer.
6. Start FreeFixer and scan your computer again. If CFF29B.exe still remains in the scan result, proceed with the next step. If CFF29B.exe is gone from the scan result you're done.
7. If CFF29B.exe still remains in the scan result, check its checkbox again in the scan result and click Fix.
8. Restart your computer.
9. Start FreeFixer and scan your computer again. Verify that CFF29B.exe no longer appear in the scan result.

Error Messages

• Privacy Policy