How to remove DriverInstallerX86.exe


The module DriverInstallerX86.exe has been detected as Worm.Ramnit

Product Name:

PP helper driver install process

Company Name:


MD5: 51a61640d691644372c960e6a4cc9524
Size: 324 KB
First Published: 2017-07-24 02:08:54 (6 years ago)
Latest Published: 2017-07-26 04:15:19 (6 years ago)
Status: Worm.Ramnit (on last analysis)
Analysis Date: 2017-07-26 04:15:19 (6 years ago)
%localappdata%\ucbrowser\user data\default\extensions\pbnmnlipmkfkadfcdocgblonoccmolpe\3.1.0_0\bin\pphelper
Windows 7 100.0%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00029000

PE Sections:

Name Size of data MD5
.text 25600 c6c460d35f27b63cf3df82e71529c404
.rdata 7680 071514115f4e7b9c3e6ef467e0439bd2
.data 3584 bcf1fc19758c536e65d5f1e8f3f284bb
.rsrc 1536 a0fc51941f53dcdeba1fdaf868f06045
.reloc 31232 14dd1b3f1f25c262ed98640c470614f2
lcrnmzu 81920 1d03b3a6642cd69a5ff78b59e1fdfb11
.text 179200 2d7156845794c6ca5fedb6647988a29c

More information:

Download GridinSoft Anti-Malware - Removal tool for DriverInstallerX86.exe