How to remove PPAdbServer.exe

PPAdbServer.exe

The module PPAdbServer.exe has been detected as Worm.Ramnit

PPAdbServer.exe
Remove PPAdbServer.exe

File Details

Product Name:

PPADB
MD5: df510adadaa665dd30defef6612d7ae3
Size: 735 KB
First Published: 2017-07-22 13:12:22 (6 years ago)
Latest Published: 2017-07-22 13:12:22 (6 years ago)
Status: Worm.Ramnit (on last analysis)
Analysis Date: 2017-07-22 13:12:22 (6 years ago)

Common Places:

%localappdata%\ucbrowser\user data\default\extensions\pbnmnlipmkfkadfcdocgblonoccmolpe\3.1.0_0\bin\pphelper

Geography:

100.0%

OS Version:

Windows 7 100.0%

Analysis

Subsystem: Windows CUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000c1000

PE Sections:

Name Size of data MD5
.text 477696 3bdf2c326e72834eb5751cd2983df788
.rdata 166400 2cebce6bb9b01427a62a2a7218393d2b
.data 9728 540916efda4b556468d3e2298bbb83f2
.rsrc 1024 0c669502c29e7669520d5734911d454c
.reloc 32768 941a614e159a8e259ba23e8a6c467270
.text 64000 8b01948c1898a5e2982c873c3d7b33c8

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for PPAdbServer.exe
copyright for information about PPAdbServer.exe