How to remove popwndup.exe

popwndup.exe

The module popwndup.exe has been detected as Adware.Agent

popwndup.exe
MD5: 40f241acae26abe53672b231746b221d
Size: 1 MB
First Published: 2017-05-21 03:02:03 (7 years ago)
Latest Published: 2019-11-08 19:06:06 (5 years ago)
Status: Adware.Agent (on last analysis)
Analysis Date: 2019-11-08 19:06:06 (5 years ago)
%temp%\is-ermdg.tmp
%temp%\24780
%temp%\is-57hnr.tmp
%temp%\is-ajnjj.tmp
%temp%\08134
%temp%\is-ilgrn.tmp
%temp%\03745
%temp%\is-l19st.tmp
%temp%\28557
%temp%\00021253
PopWnd.exe
popwndup.exe
msiql.exe
Vietnam 42.5%
Indonesia 10.7%
Taiwan 8.8%
Thailand 5.6%
Turkey 4.5%
Saudi Arabia 3.5%
Bulgaria 2.4%
Hong Kong 2.1%
Romania 2.1%
Israel 1.9%
Iran 1.6%
Mexico 1.3%
Syria 0.8%
Hungary 0.8%
South Korea 0.8%
Tunisia 0.8%
Philippines 0.8%
Dominican Republic 0.5%
Poland 0.5%
Italy 0.5%
Ethiopia 0.5%
Czech Republic 0.5%
India 0.5%
Greece 0.5%
Malaysia 0.5%
Colombia 0.3%
Ecuador 0.3%
Peru 0.3%
Belgium 0.3%
Saint Vincent and the Grenadines 0.3%
Egypt 0.3%
Brazil 0.3%
Japan 0.3%
Chile 0.3%
Iraq 0.3%
China 0.3%
United Kingdom 0.3%
Argentina 0.3%
Pakistan 0.3%
Croatia 0.3%
Libya 0.3%
Algeria 0.3%
Windows 7 61.4%
Windows 10 29.9%
Windows 8.1 7.1%
Windows Vista 0.8%
Windows 8 0.8%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0008f57a

PE Sections:

Name Size of data MD5
.text 1629696 8de3907a6a937d4306f95cd9c3404ae7
.rdata 318976 54ab33e8f9818a528057ca3fbd3255d5
.data 36864 b32e5330d16658d185b3c13246a1070b
.rsrc 11264 fb540002c1a473130d294b647b1ca4ce
.reloc 79360 0468464d4051ec173f39725b7c939cdf

More information:

Download GridinSoft Anti-Malware - Removal tool for popwndup.exe
­