We received the file MOPOPSET.EXE and detected that MOPOPSET.EXE is not good.
MOPOPSET.EXE is Adware. You should remove the file MOPOPSET.EXE.
Kill the process MOPOPSET.EXE and remove MOPOPSET.EXE from Windows.
Malware Analysis of MOPOPSET.EXE
Full path on a computer: %Appdata%\MOpop\mopopset.exe
Detected by UnHackMe:
MOPOPSET.EXE
Default location: %Appdata%\MOpop\mopopset.exe
Removal Results: Success
Number of reboot: 1
MOPOPSET.EXE is known as:
Adware.PUP.MicroOpenPop
MOPOPSET.EXE hash:
- MD5: 664d4e4cc1919ca0ebfdf9d1d4ff429d
The file tries to connect to the dangerous web site.
How to quickly detect MOPOPSET.EXE presence?
![]( "Registry")
Registry:
![]( "Folders")
Folders:
![]( "Files")
Files:
Registry:- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Micro OpenPop\DisplayName: “Micro OpenPop”
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Micro OpenPop\UninstallString: “%Appdata%\MOpop\uninst.exe”
- HKLM\System\CurrentControlSet\Services\srvmopop\ImagePath: “%Appdata%\MOpop\srvmopop.exe”
- HKLM\System\CurrentControlSet\Services\srvmopop\DisplayName: “MOPOP Service”
Folders:- %Appdata%\MOpop
Files:- %Appdata%\MOpop\mopop.bat
- %Appdata%\MOpop\mopop.exe
- %Appdata%\MOpop\mopopm.exe
- %Appdata%\MOpop\mopopset.exe
- %Appdata%\MOpop\mopopunset.exe
- %Appdata%\MOpop\mopopup.exe
- %Appdata%\MOpop\mopopws.exe
- %Appdata%\MOpop\srvmopop.exe
- %Appdata%\MOpop\Sys1.bat
- %Appdata%\MOpop\Sys2.bat
- %Appdata%\MOpop\uninst.exe