We received the file MOPOPM.EXE and detected that MOPOPM.EXE is not good.
MOPOPM.EXE is Adware. You should remove the file MOPOPM.EXE.
Kill the process MOPOPM.EXE and remove MOPOPM.EXE from Windows.
Malware Analysis of MOPOPM.EXE
Full path on a computer: %Appdata%\MOpop\mopopm.exe
Detected by UnHackMe:
MOPOPM.EXE
Default location: %Appdata%\MOpop\mopopm.exe
Removal Results: Success
Number of reboot: 1
MOPOPM.EXE is known as:
Adware.PUP.Mopop
MOPOPM.EXE hash:
- MD5: 3365c42ddb9791133432c66097c2256b
The file is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
How to quickly detect MOPOPM.EXE presence?
![]( "Registry")
Registry:
![]( "Folders")
Folders:
![]( "Files")
Files:
Registry:- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Micro OpenPop\DisplayName: “Micro OpenPop”
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Micro OpenPop\UninstallString: “%Appdata%\MOpop\uninst.exe”
- HKLM\System\CurrentControlSet\Services\srvmopop\ImagePath: “%Appdata%\MOpop\srvmopop.exe”
- HKLM\System\CurrentControlSet\Services\srvmopop\DisplayName: “MOPOP Service”
Folders:- %Appdata%\MOpop
Files:- %Appdata%\MOpop\mopop.bat
- %Appdata%\MOpop\mopop.exe
- %Appdata%\MOpop\mopopm.exe
- %Appdata%\MOpop\mopopset.exe
- %Appdata%\MOpop\mopopunset.exe
- %Appdata%\MOpop\mopopup.exe
- %Appdata%\MOpop\mopopws.exe
- %Appdata%\MOpop\srvmopop.exe
- %Appdata%\MOpop\Sys1.bat
- %Appdata%\MOpop\Sys2.bat
- %Appdata%\MOpop\uninst.exe