We received the file MOPOPUNSET.EXE and detected that MOPOPUNSET.EXE is not good.
MOPOPUNSET.EXE is Adware. You should remove the file MOPOPUNSET.EXE.
Kill the process MOPOPUNSET.EXE and remove MOPOPUNSET.EXE from Windows.
Malware Analysis of MOPOPUNSET.EXE
Full path on a computer: %Appdata%\MOpop\mopopunset.exe
Detected by UnHackMe:
MOPOPUNSET.EXE
Default location: %Appdata%\MOpop\mopopunset.exe
Removal Results: Success
Number of reboot: 1
MOPOPUNSET.EXE is known as:
Adware.KrAdword
MOPOPUNSET.EXE hash:
- MD5: 403a25bf26d9145960b37569377a36a0
The file is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
How to quickly detect MOPOPUNSET.EXE presence?
![]( "Registry")
Registry:
![]( "Folders")
Folders:
![]( "Files")
Files:
Registry:- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Micro OpenPop\DisplayName: “Micro OpenPop”
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Micro OpenPop\UninstallString: “%Appdata%\MOpop\uninst.exe”
- HKLM\System\CurrentControlSet\Services\srvmopop\ImagePath: “%Appdata%\MOpop\srvmopop.exe”
- HKLM\System\CurrentControlSet\Services\srvmopop\DisplayName: “MOPOP Service”
Folders:- %Appdata%\MOpop
Files:- %Appdata%\MOpop\mopop.bat
- %Appdata%\MOpop\mopop.exe
- %Appdata%\MOpop\mopopm.exe
- %Appdata%\MOpop\mopopset.exe
- %Appdata%\MOpop\mopopunset.exe
- %Appdata%\MOpop\mopopup.exe
- %Appdata%\MOpop\mopopws.exe
- %Appdata%\MOpop\srvmopop.exe
- %Appdata%\MOpop\Sys1.bat
- %Appdata%\MOpop\Sys2.bat
- %Appdata%\MOpop\uninst.exe