Emsisoft Malware-Info
Name: Adware.Win32.Poco
Risklevel: Low Risk
Description:
This application contains trojan/backdoor. And it try to download other files from the Internet, modify registry, and creates an auto startup registry entry.
Removal instructions for Adware Poco:
To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware Poco.
Run a full scan on all drives and move all detected items to the quarantine.
More details about this danger:
Installation: Installed through EXE
Process: Poco2007.exe
Screenshots:
Used folders:
- C:\Program Files\Poco2007\
- C:\Program Files\Poco2007\data\
- C:\Program Files\Poco2007\temp\
- C:\WINDOWS\
- C:\WINDOWS\system32\drivers\
- C:\Documents and Settings\All Users\Application Data\poco\
- C:\Documents and Settings\[USER]\Cookies\
- C:\Documents and Settings\[USER]\Desktop\
- C:\Documents and Settings\[USER]\Local Settings\Temp\
- C:\Documents and Settings\[USER]\Local Settings\Temp\nsk24.tmp\
- C:\Documents and Settings\[USER]\Local Settings\Temp\temp\
- C:\Documents and Settings\[USER]\Start Menu\Programs\Poco 2007\
Used files:
- C:\Program Files\Poco2007\config.ini
[155 Bytes] INI File - C:\Program Files\Poco2007\FileExt.inf
[2531 Bytes] INF File - C:\Program Files\Poco2007\FileManager.dll
[189784 Bytes] DLL File - C:\Program Files\Poco2007\GdiPlus.dll
[1729880 Bytes] DLL File - C:\Program Files\Poco2007\InfoTree
[16384 Bytes] File - C:\Program Files\Poco2007\Movies.ico
[161862 Bytes] ICO File - C:\Program Files\Poco2007\PictureShow.exe
[281432 Bytes] EXE File - C:\Program Files\Poco2007\Poco2007.exe
[443736 Bytes] EXE File - C:\Program Files\Poco2007\PocoIM.dll
[206160 Bytes] DLL File - C:\Program Files\Poco2007\PocoUI.dll
[5784912 Bytes] DLL File - C:\Program Files\Poco2007\PocoUpload.dll
[1414488 Bytes] DLL File - C:\Program Files\Poco2007\pupdate.exe
[97616 Bytes] EXE File - C:\Program Files\Poco2007\Search.dll
[202072 Bytes] DLL File - C:\Program Files\Poco2007\Search2.dll
[521560 Bytes] DLL File - C:\Program Files\Poco2007\Share.dll
[161112 Bytes] DLL File - C:\Program Files\Poco2007\Transfer.dll
[640344 Bytes] DLL File - C:\Program Files\Poco2007\Transfer2.dll
[386392 Bytes] DLL File - C:\Program Files\Poco2007\Uninstall.exe
[177949 Bytes] EXE File - C:\Program Files\Poco2007\Update.dll
[259416 Bytes] DLL File - C:\Program Files\Poco2007\update.exe
[134992 Bytes] EXE File - C:\Program Files\Poco2007\???????.lnk
[1104 Bytes] LNK File - C:\Program Files\Poco2007\???????.txt
[5103 Bytes] TXT File - C:\Program Files\Poco2007\data\keyword.xml
[829 Bytes] XML File - C:\Program Files\Poco2007\temp\script.ini
[0 Bytes] INI File - C:\WINDOWS\wininit.ini
[61 Bytes] INI File - C:\WINDOWS\system32\drivers\ndproxy.sys
[3968 Bytes] SYS File - C:\Documents and Settings\All Users\Application Data\poco\installer.ini
[202 Bytes] INI File - C:\Documents and Settings\All Users\Application Data\poco\PocoRegister.ini
[1575 Bytes] INI File - C:\Documents and Settings\[USER]\Cookies\user@poco[2].txt
[77 Bytes] TXT File - C:\Documents and Settings\[USER]\Desktop\Poco2007.lnk
[688 Bytes] LNK File - C:\Documents and Settings\[USER]\Desktop\???????.lnk
[1104 Bytes] LNK File - C:\Documents and Settings\[USER]\Local Settings\Temp\nsb28.tmp
[442 Bytes] TMP File - C:\Documents and Settings\[USER]\Local Settings\Temp\nsw2D.tmp
[0 Bytes] TMP File - C:\Documents and Settings\[USER]\Local Settings\Temp\nsw2E.tmp
[0 Bytes] TMP File - C:\Documents and Settings\[USER]\Local Settings\Temp\nsw2F.tmp
[0 Bytes] TMP File - C:\Documents and Settings\[USER]\Local Settings\Temp\nsy33.tmp
[595 Bytes] TMP File - C:\Documents and Settings\[USER]\Local Settings\Temp\tmp27.tmp
[0 Bytes] TMP File - C:\Documents and Settings\[USER]\Local Settings\Temp\tmp29.tmp
[0 Bytes] TMP File - C:\Documents and Settings\[USER]\Local Settings\Temp\tmp2A.tmp
[0 Bytes] TMP File - C:\Documents and Settings\[USER]\Local Settings\Temp\tmp2B.tmp
[0 Bytes] TMP File - C:\Documents and Settings\[USER]\Local Settings\Temp\tmp31.tmp
[0 Bytes] TMP File - C:\Documents and Settings\[USER]\Local Settings\Temp\tmp34.tmp
[0 Bytes] TMP File - C:\Documents and Settings\[USER]\Local Settings\Temp\I??.zip
[68282 Bytes] ZIP File - C:\Documents and Settings\[USER]\Local Settings\Temp\nsk24.tmp\InstallOptions.dll
[14336 Bytes] DLL File - C:\Documents and Settings\[USER]\Local Settings\Temp\nsk24.tmp\NSISdl.dll
[14848 Bytes] DLL File - C:\Documents and Settings\[USER]\Local Settings\Temp\nsk24.tmp\poco_plugins.dll
[126976 Bytes] DLL File - C:\Documents and Settings\[USER]\Local Settings\Temp\nsk24.tmp\System.dll
[10240 Bytes] DLL File - C:\Documents and Settings\[USER]\Local Settings\Temp\temp\nsw2D.tmp
[1077 Bytes] TMP File - C:\Documents and Settings\[USER]\Start Menu\Programs\Poco 2007\Poco2007.lnk
[700 Bytes] LNK File - C:\Documents and Settings\[USER]\Start Menu\Programs\Poco 2007\???????.lnk
[698 Bytes] LNK File - C:\Documents and Settings\[USER]\Start Menu\Programs\Poco 2007\??? poco 2007.lnk
[521 Bytes] LNK File
Additional information might be found here:
Search
at Google for
Adware Poco
Search at Bing for
Adware Poco
Search
at Yahoo for
Adware Poco
How can I protect myself from Adware Poco?
Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers.
This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.
Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!
Only $40 for the security of your computer.
Buy Emsisoft Anti-Malware online:
Trust only on the best protection software!
Spring Offer!
Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get
a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.
Only a few days left! Order here


























