Remove PMROPN.EXE malware
PMROPN.EXE Malware Removal Guide
Manual removal instructions:
Antivirus Report of PMROPN.EXE:
pmropn.exe
Full path on a computer: %PROGRAM FILES%\PREMIEROPINION\PMROPN.EXE
Autostart registry keys:
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UFH\ARP\4: 'SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL {EEB86AEF-4A5D-4B75-9D74-F16D438FC286} %PROGRAM FILES%\PREMIEROPINION\PMROPN.EXE -BOOTREMOVE -UNINST:PREMIEROPINION'
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{EEB86AEF-4A5D-4B75-9D74-F16D438FC286}\CONFIG\OSSPROXY\SETTINGS\RUNLINE: "%PROGRAM FILES%\PREMIEROPINION\PMROPN.EXE -BOOT"
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{EEB86AEF-4A5D-4B75-9D74-F16D438FC286}\UNINSTALLSTRING: "%PROGRAM FILES%\PREMIEROPINION\PMROPN.EXE -BOOTREMOVE -UNINST:PREMIEROPINION"
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES\{EF4557E0-30A3-4F9B-90BB-9CF0D4FAE242}: "V2.25|ACTION=ALLOW|ACTIVE=TRUE|DIR=IN|PROTOCOL=6|PROFILE=PUBLIC|APP=%PROGRAM FILES%\PREMIEROPINION\PMROPN.EXE|NAME=PMROPN.EXE|"
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES\{9E8BDB5D-4986-4E98-8FA0-8B50EB96364C}: "V2.25|ACTION=ALLOW|ACTIVE=TRUE|DIR=IN|PROTOCOL=17|PROFILE=PUBLIC|APP=%PROGRAM FILES%\PREMIEROPINION\PMROPN.EXE|NAME=PMROPN.EXE|"
HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UFH\SHC\0: '%COMMON APPDATA%\MICROSOFT\WINDOWS\START MENU\PROGRAMS\PREMIEROPINION\PREMIEROPINION.LNK %PROGRAM FILES%\PREMIEROPINION\PMROPN.EXE -BRANDINFO:HTTP://WWW.PREMIEROPINION.COM/TILE.ASPX'
HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UFH\SHC\2: '%COMMON APPDATA%\MICROSOFT\WINDOWS\START MENU\PROGRAMS\PREMIEROPINION\PREMIEROPINION.LNK %PROGRAM FILES%\PREMIEROPINION\PMROPN.EXE -BRANDINFO:HTTP://WWW.PREMIEROPINION.COM/TILE.ASPX'
Related Files:
%PROGRAM FILES%\PREMIEROPINION\PMOCI.BIN
%PROGRAM FILES%\PREMIEROPINION\PMPH.DLL
%PROGRAM FILES%\PREMIEROPINION\PMROPN.EXE
%PROGRAM FILES%\PREMIEROPINION\PMROPN32.EXE
%PROGRAM FILES%\PREMIEROPINION\PMROPN64.EXE
The file PMROPN.EXE is malware related.
You must delete the file PMROPN.EXE immediately!
Delete the file PMROPN.EXE without delay!
Kill the process PMROPN.EXE and remove PMROPN.EXE from the Windows startup.
PMROPN.EXE is related to: Application.Generic.1649910, PMROPN.EXE.
Virustotal = 31/54
MD5 = 0C322CD709400CD94AC2B47621A7875F
File Size: 3549632
File information:
FileDescription: PremierOpinion
CompanyName: VoiceFive, Inc.
LegalCopyright: Copyright c 2001-2004
| PMROPN.EXE | Malware |
| PMROPN.EXE | Dangerous |
| PMROPN.EXE | High Risk |
Autostart registry keys:
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UFH\ARP\4: 'SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL {EEB86AEF-4A5D-4B75-9D74-F16D438FC286} %PROGRAM FILES%\PREMIEROPINION\PMROPN.EXE -BOOTREMOVE -UNINST:PREMIEROPINION'
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{EEB86AEF-4A5D-4B75-9D74-F16D438FC286}\CONFIG\OSSPROXY\SETTINGS\RUNLINE: "%PROGRAM FILES%\PREMIEROPINION\PMROPN.EXE -BOOT"
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{EEB86AEF-4A5D-4B75-9D74-F16D438FC286}\UNINSTALLSTRING: "%PROGRAM FILES%\PREMIEROPINION\PMROPN.EXE -BOOTREMOVE -UNINST:PREMIEROPINION"
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES\{EF4557E0-30A3-4F9B-90BB-9CF0D4FAE242}: "V2.25|ACTION=ALLOW|ACTIVE=TRUE|DIR=IN|PROTOCOL=6|PROFILE=PUBLIC|APP=%PROGRAM FILES%\PREMIEROPINION\PMROPN.EXE|NAME=PMROPN.EXE|"
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES\{9E8BDB5D-4986-4E98-8FA0-8B50EB96364C}: "V2.25|ACTION=ALLOW|ACTIVE=TRUE|DIR=IN|PROTOCOL=17|PROFILE=PUBLIC|APP=%PROGRAM FILES%\PREMIEROPINION\PMROPN.EXE|NAME=PMROPN.EXE|"
HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UFH\SHC\0: '%COMMON APPDATA%\MICROSOFT\WINDOWS\START MENU\PROGRAMS\PREMIEROPINION\PREMIEROPINION.LNK %PROGRAM FILES%\PREMIEROPINION\PMROPN.EXE -BRANDINFO:HTTP://WWW.PREMIEROPINION.COM/TILE.ASPX'
HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UFH\SHC\2: '%COMMON APPDATA%\MICROSOFT\WINDOWS\START MENU\PROGRAMS\PREMIEROPINION\PREMIEROPINION.LNK %PROGRAM FILES%\PREMIEROPINION\PMROPN.EXE -BRANDINFO:HTTP://WWW.PREMIEROPINION.COM/TILE.ASPX'
Related Files:
%PROGRAM FILES%\PREMIEROPINION\PMOCI.BIN
%PROGRAM FILES%\PREMIEROPINION\PMPH.DLL
%PROGRAM FILES%\PREMIEROPINION\PMROPN.EXE
%PROGRAM FILES%\PREMIEROPINION\PMROPN32.EXE
%PROGRAM FILES%\PREMIEROPINION\PMROPN64.EXE
The file PMROPN.EXE is malware related.
You must delete the file PMROPN.EXE immediately!
Delete the file PMROPN.EXE without delay!
Kill the process PMROPN.EXE and remove PMROPN.EXE from the Windows startup.
PMROPN.EXE is related to: Application.Generic.1649910, PMROPN.EXE.
Virustotal = 31/54
MD5 = 0C322CD709400CD94AC2B47621A7875F
File Size: 3549632
File information:
FileDescription: PremierOpinion
CompanyName: VoiceFive, Inc.
LegalCopyright: Copyright c 2001-2004
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.