What is “Win64/Pokki.B potentially unwanted”?

The Win64/Pokki.B potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win64/Pokki.B potentially unwanted virus can do?

• Attempts to connect to a dead IP:Port (1 unique times)
• Presents an Authenticode digital signature
• Creates RWX memory
• Reads data out of its own binary image
• HTTP traffic contains suspicious features which may be indicative of malware related traffic
• Performs some HTTP requests
• Installs itself for autorun at Windows startup
• Creates a hidden or system file
• Anomalous binary characteristics

Related domains:

How to determine Win64/Pokki.B potentially unwanted?

File Info:
crc32: BF0FC4A8
md5: 09ae7e66aef15c3231ad24d5c0f1345a
name: version56ab00d5863b6.exe
sha1: f73256079e6e4634ea6bd27f4d866cf1cd688e0f
sha256: f0ac7920b3d9d835b46d195ad0d954006aaa7baa62f3f6965893774a7c044d7c
sha512: da02f74da05214ae40d012fa469690f105deb9c9988069355284c1ec77b14fe2f036998cac45e1f58d75603f50f94eadd070f9a4c8f2fdcf0accdb1ad911627a
ssdeep: 196608:gk/kY0m7WsE5ggIFUZfvFrMh1cffJef8vFtO04:gkeMdaZ21aJv14
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: SweetLabs
FileVersion: 0.0.0.0
CompanyName: SweetLabs
Comments: 
ProductName: System Configuration Client
ProductVersion: v0.100.7.863
FileDescription: System Configuration Client
Translation: 0x0409 0x04b0

Win64/Pokki.B potentially unwanted also known as:

How to remove Win64/Pokki.B potentially unwanted?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.