Emsisoft Malware-Info

Name: Adware.Win32.Poco

Risklevel: Low Risk

Description:

This application contains trojan/backdoor. And it try to download other files from the Internet, modify registry, and creates an auto startup registry entry.

Removal instructions for Adware Poco:

To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware Poco.

Run a full scan on all drives and move all detected items to the quarantine.

More details about this danger:

Installation: Installed through EXE

Process: Poco2007.exe

Screenshots:

PocoPocoPocoPocoPocoPocoPocoPoco

Used folders:

  • C:\Program Files\Poco2007\
  • C:\Program Files\Poco2007\data\
  • C:\Program Files\Poco2007\temp\
  • C:\WINDOWS\
  • C:\WINDOWS\system32\drivers\
  • C:\Documents and Settings\All Users\Application Data\poco\
  • C:\Documents and Settings\[USER]\Cookies\
  • C:\Documents and Settings\[USER]\Desktop\
  • C:\Documents and Settings\[USER]\Local Settings\Temp\
  • C:\Documents and Settings\[USER]\Local Settings\Temp\nsk24.tmp\
  • C:\Documents and Settings\[USER]\Local Settings\Temp\temp\
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Poco 2007\

Used files:

  • C:\Program Files\Poco2007\config.ini
    [155 Bytes] INI File
  • C:\Program Files\Poco2007\FileExt.inf
    [2531 Bytes] INF File
  • C:\Program Files\Poco2007\FileManager.dll
    [189784 Bytes] DLL File
  • C:\Program Files\Poco2007\GdiPlus.dll
    [1729880 Bytes] DLL File
  • C:\Program Files\Poco2007\InfoTree
    [16384 Bytes] File
  • C:\Program Files\Poco2007\Movies.ico
    [161862 Bytes] ICO File
  • C:\Program Files\Poco2007\PictureShow.exe
    [281432 Bytes] EXE File
  • C:\Program Files\Poco2007\Poco2007.exe
    [443736 Bytes] EXE File
  • C:\Program Files\Poco2007\PocoIM.dll
    [206160 Bytes] DLL File
  • C:\Program Files\Poco2007\PocoUI.dll
    [5784912 Bytes] DLL File
  • C:\Program Files\Poco2007\PocoUpload.dll
    [1414488 Bytes] DLL File
  • C:\Program Files\Poco2007\pupdate.exe
    [97616 Bytes] EXE File
  • C:\Program Files\Poco2007\Search.dll
    [202072 Bytes] DLL File
  • C:\Program Files\Poco2007\Search2.dll
    [521560 Bytes] DLL File
  • C:\Program Files\Poco2007\Share.dll
    [161112 Bytes] DLL File
  • C:\Program Files\Poco2007\Transfer.dll
    [640344 Bytes] DLL File
  • C:\Program Files\Poco2007\Transfer2.dll
    [386392 Bytes] DLL File
  • C:\Program Files\Poco2007\Uninstall.exe
    [177949 Bytes] EXE File
  • C:\Program Files\Poco2007\Update.dll
    [259416 Bytes] DLL File
  • C:\Program Files\Poco2007\update.exe
    [134992 Bytes] EXE File
  • C:\Program Files\Poco2007\???????.lnk
    [1104 Bytes] LNK File
  • C:\Program Files\Poco2007\???????.txt
    [5103 Bytes] TXT File
  • C:\Program Files\Poco2007\data\keyword.xml
    [829 Bytes] XML File
  • C:\Program Files\Poco2007\temp\script.ini
    [0 Bytes] INI File
  • C:\WINDOWS\wininit.ini
    [61 Bytes] INI File
  • C:\WINDOWS\system32\drivers\ndproxy.sys
    [3968 Bytes] SYS File
  • C:\Documents and Settings\All Users\Application Data\poco\installer.ini
    [202 Bytes] INI File
  • C:\Documents and Settings\All Users\Application Data\poco\PocoRegister.ini
    [1575 Bytes] INI File
  • C:\Documents and Settings\[USER]\Cookies\user@poco[2].txt
    [77 Bytes] TXT File
  • C:\Documents and Settings\[USER]\Desktop\Poco2007.lnk
    [688 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Desktop\???????.lnk
    [1104 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\nsb28.tmp
    [442 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\nsw2D.tmp
    [0 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\nsw2E.tmp
    [0 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\nsw2F.tmp
    [0 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\nsy33.tmp
    [595 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\tmp27.tmp
    [0 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\tmp29.tmp
    [0 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\tmp2A.tmp
    [0 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\tmp2B.tmp
    [0 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\tmp31.tmp
    [0 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\tmp34.tmp
    [0 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\I??.zip
    [68282 Bytes] ZIP File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\nsk24.tmp\InstallOptions.dll
    [14336 Bytes] DLL File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\nsk24.tmp\NSISdl.dll
    [14848 Bytes] DLL File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\nsk24.tmp\poco_plugins.dll
    [126976 Bytes] DLL File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\nsk24.tmp\System.dll
    [10240 Bytes] DLL File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\temp\nsw2D.tmp
    [1077 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Poco 2007\Poco2007.lnk
    [700 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Poco 2007\???????.lnk
    [698 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Poco 2007\??? poco 2007.lnk
    [521 Bytes] LNK File

Additional information might be found here:

Search at Google for Adware Poco Search at Google for Adware Poco
Search at Bing for Adware Poco Search at Bing for Adware Poco
Search at Yahoo for Adware Poco Search at Yahoo for Adware Poco

How can I protect myself from Adware Poco?

Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers. This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.

Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!

Only $40 for the security of your computer.

Buy Emsisoft Anti-Malware online:

Buy Emsisoft Anti-Malware now

Trust only on the best protection software!

Spring Offer!

Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.

Only a few days left! Order here

Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - Q1-Q3 2011
More independent reviews of anti-malware software