1 of 2
Danger level 8
Type: Adware
Common infection symptoms:
  • Annoying Pop-up's
  • Shows commercial adverts
  • Connects to the internet without permission


OnOffPop is an advertising-supported program that is specifically targeted at Internet Explorer users located in Korea. Considering how unpredictable this adware is, we would not be surprised to see it injecting ads to the pages opened on other browsers. The infiltration of this program is very mysterious. Although onoffpop.com was created to introduce computer users to this strange program, an installer for it is not provided. Unfortunately, this means that this ad-supported program could be distributed in a more precarious manner. In the worst case scenario, it will be introduced to you by a truly malicious installer responsible for the distribution of many other threats as well. Needless to say, if other infections enter your PC, you must delete them; however, this report was created to discuss the removal of OnOffPop.

If OnOffPop was installed onto your computer, you can expect to be shown different find.onoffpop.com offers. Even the official website indicates that this program is meant to bring optimized marketing services by matching beneficial offers/ads to your search keywords. This suggests that this adware can record your browsing history. Although there are plenty of trustworthy tools that use data-tracking technologies, you have to be very selective when it comes to unpredictable software like this one. If you allow unfamiliar, potentially dangerous tools to track your activity and analyze your behavior, you could get yourself in some trouble. Unfortunately, your interests could be used to expose you to unreliable links camouflaged as authentic and useful offers and deals. Well, can you remove these data-tracking technologies? Yes, you can, but that does not mean that they will not be revived in the future.

When you turn on your computer, certain programs start running right away. This is because values are added to the HKCU\Software\Microsoft\Windows\CurrentVersion\Run registry path. The values that represent OnOffPop are guardO2 and O2grd. The adware itself runs in the background, and it is operated using the files found under C:\Users\{user}\AppData\Roaming\OnOffPop\common\bin\. These files include O2Guard.exe, o2p_kwd.dat, o2p_nsminfo.dat, o2p_ominfo.dat, o2p_recog.dat, o2p_sku.dat, O2Sch.exe, and RmO2.exe. If you want to eliminate adware, you can remove all of these files. If you are not able to delete them, you might have to terminate certain processes using the Task Manager utility. If this is the removal option you have chosen, also do not forget to clean the registry. Here is a list of registry keys and values this adware adds.

  • HKCU\Software\OnOffPop
  • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\O2Pop
  • HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\O2Pop
  • guardO2 value under HKCU\Software\Microsoft\Windows\CurrentVersion\Run
  • O2grd value under HKCU\Software\Microsoft\Windows\CurrentVersion\Run

If other infections were installed onto your computer, other registry entries could have been added as well. Needless to say, it is difficult to clean the operating system from malware manually, especially if multiple threats exist. If you have no idea how many or what kind of unreliable programs are active on your PC, run a malware scanner. Hopefully, OnOffPop is the only program that you need to delete from your operating system. If not, we suggest researching other threats on our site to find appropriate removal guides. Although all threats are identified as dangerous, they all function in different ways, and you might have to delete them using different methods. Of course, if you do not use automated malware detection and removal software, you will not need to waste your time trying to detect or eliminate dangerous computer infections, or adware.

How about the removal of OnOffPop? As mentioned already, we suggest using automated malware detection and removal software to eliminate unreliable, malicious programs from your operating system. If for some reason this is not your preferred option, you have two other options. You can either delete the registry keys and values created by this adware (see the list above), as well as its files, or you can uninstall this adware from your operating system. Follow the steps below to erase this adware from Windows XP, Windows Vista, Windows 7, Windows 8, and Windows 10 operating systems. If you have questions about this operation, please post them in the comments section right below. We will help you and, possibly, other users in the same situation that you are stuck in.

OnOffPop Removal

Windows XP:

  1. Navigate to the Taskbar at the bottom of the screen and click Start.
  2. Open the Control Panel menu and double-click Add or Remove Programs.
  3. Identify the undesirable program, click it once, and select Remove.

Windows Vista & Windows 7:

  1. Navigate to the Taskbar at the bottom of the screen and click the Windows logo.
  2. Open the Control Panel menu and click Uninstall a program.
  3. Right-click the application you want to eliminate and click Uninstall.

Windows 8 & Windows 8.1:

  1. Simultaneously tap Win+R keys on your keyboard to launch RUN.
  2. Type Control Panel, click OK, and in the menu select Uninstall a program.
  3. Locate the app you want to eliminate, right-click it, and choose Uninstall.

Windows 10:

  1. Navigate to the Taskbar and enter Control Panel into the search box.
  2. Open the menu and select Uninstall a program (under Programs).
  3. Right-click and Uninstall the undesirable application.
Download Spyware Removal Tool to Remove* OnOffPop
  • Quick & tested solution for OnOffPop removal.
  • 100% Free Scan for Windows

Post comment — WE NEED YOUR OPINION!

Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.