We received the file MOPOPUP.EXE and detected that MOPOPUP.EXE is not good.
MOPOPUP.EXE is Adware. You should remove the file MOPOPUP.EXE.
Kill the process MOPOPUP.EXE and remove MOPOPUP.EXE from Windows.
Malware Analysis of MOPOPUP.EXE
Full path on a computer: %Appdata%\MOpop\mopopup.exe
Detected by UnHackMe:
MOPOPUP.EXE
Default location: %Appdata%\MOpop\mopopup.exe
Removal Results: Success
Number of reboot: 1
MOPOPUP.EXE is known as:
Adware.PUP.Mopop
MOPOPUP.EXE hash:
- MD5: fd34c771c55cb11514af259c7dc0d8fd
The file is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
How to quickly detect MOPOPUP.EXE presence?
![]( "Registry")
Registry:
![]( "Folders")
Folders:
![]( "Files")
Files:
Registry:- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Micro OpenPop\DisplayName: “Micro OpenPop”
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Micro OpenPop\UninstallString: “%Appdata%\MOpop\uninst.exe”
- HKLM\System\CurrentControlSet\Services\srvmopop\ImagePath: “%Appdata%\MOpop\srvmopop.exe”
- HKLM\System\CurrentControlSet\Services\srvmopop\DisplayName: “MOPOP Service”
Folders:- %Appdata%\MOpop
Files:- %Appdata%\MOpop\mopop.bat
- %Appdata%\MOpop\mopop.exe
- %Appdata%\MOpop\mopopm.exe
- %Appdata%\MOpop\mopopset.exe
- %Appdata%\MOpop\mopopunset.exe
- %Appdata%\MOpop\mopopup.exe
- %Appdata%\MOpop\mopopws.exe
- %Appdata%\MOpop\srvmopop.exe
- %Appdata%\MOpop\Sys1.bat
- %Appdata%\MOpop\Sys2.bat
- %Appdata%\MOpop\uninst.exe