MEMOTHISPOP.EXE is Trojan Keylogger
Is the file MEMOTHISPOP.EXE located on your computer? Then your computer is infected.
We do suggest you should remove MEMOTHISPOP.EXE from your computer as soon as possible.
MEMOTHISPOP.EXE is Trojan/Backdoor.
Kill the process MEMOTHISPOP.EXE and remove MEMOTHISPOP.EXE from the Windows startup.
Malware Analysis of MEMOTHISPOP.EXE
Full path on a computer: %ProgramFiles%\MemoThisPOP\MemoThisPOP.exe
Detected by UnHackMe:
MEMOTHISPOP.EXE
Default location: %ProgramFiles%\MemoThisPOP\MemoThisPOP.exe
MEMOTHISMON.EXE
Default location: %ProgramFiles%\MemoThisPOP\MemoThisMon.exe
Removal Results: Success
Number of reboot: 1
MEMOTHISPOP.EXE is known as:
Trojan.Keylogger
MEMOTHISPOP.EXE hash:
- MD5: 592c7f237b0ee577f51b32c4adadc0b3
How to quickly detect MEMOTHISPOP.EXE presence?
Registry:
Folders:
Files:
Registry:- HKLM\SYSTEM\CurrentControlSet\Services\MemoThisMonService\ImagePath: “%ProgramFiles%\MemoThisPOP\MemoThisMon.exe”
Folders:- %AppData%\MemoThis
- %ProgramFiles%\MemoThisPOP
Files:- %AppData%\MemoThis\uninstall.exe
- %ProgramFiles%\MemoThisPOP\dwlGina3.dll
- %ProgramFiles%\MemoThisPOP\MemoThisMon.exe
- %ProgramFiles%\MemoThisPOP\MemoThisPOP.exe
- %ProgramFiles%\MemoThisPOP\MemoThisPOP.ini
- %ProgramFiles%\MemoThisPOP\MemoThisSetup.exe
- %ProgramFiles%\MemoThisPOP\uninstall.bat
Recommended: UnHackMe anti-rootkit and anti-malware
Premium software: RegRun Security Suite (Good choice for removal and protection)
