We received the file MOPOP.EXE and detected that MOPOP.EXE is not good.
MOPOP.EXE is Adware. You should remove the file MOPOP.EXE.
Kill the process MOPOP.EXE and remove MOPOP.EXE from Windows.
Malware Analysis of MOPOP.EXE
Full path on a computer: %Appdata%\MOpop\mopop.exe
Detected by UnHackMe:
MOPOP.EXE
Default location: %Appdata%\MOpop\mopop.exe
Removal Results: Success
Number of reboot: 1
MOPOP.EXE is known as:
Adware.PUP.Mopop
MOPOP.EXE hash:
- MD5: bb0110994ede100d9b4dd38234693392
The file tries to download information from some web sites.
How to quickly detect MOPOP.EXE presence?
![]( "Registry")
Registry:
![]( "Folders")
Folders:
![]( "Files")
Files:
Registry:- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Micro OpenPop\DisplayName: “Micro OpenPop”
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Micro OpenPop\UninstallString: “%Appdata%\MOpop\uninst.exe”
- HKLM\System\CurrentControlSet\Services\srvmopop\ImagePath: “%Appdata%\MOpop\srvmopop.exe”
- HKLM\System\CurrentControlSet\Services\srvmopop\DisplayName: “MOPOP Service”
Folders:- %Appdata%\MOpop
Files:- %Appdata%\MOpop\mopop.bat
- %Appdata%\MOpop\mopop.exe
- %Appdata%\MOpop\mopopm.exe
- %Appdata%\MOpop\mopopset.exe
- %Appdata%\MOpop\mopopunset.exe
- %Appdata%\MOpop\mopopup.exe
- %Appdata%\MOpop\mopopws.exe
- %Appdata%\MOpop\srvmopop.exe
- %Appdata%\MOpop\Sys1.bat
- %Appdata%\MOpop\Sys2.bat
- %Appdata%\MOpop\uninst.exe