Threat Information for "WPC Productions Limited PartyPoker"

Removal Top

StopSign will automatically remove this infection with a paid membership.

Summary Top
  • Name: WPC Productions Limited PartyPoker
  • Aliases:
  • Date Discovered: 2006-08-16
  • Protection Added: 2006-08-17
Description Top 
-- Ease of Removal

1: Uses running processes
2: Consistent file contents
3: Consistently named
4: Creates new registry entries with consistent data

-- Damage/Intrusion/Annoyance

1: Displays targeted popup advertisements [SPYWARE ONLY]
2: Creates other user visible icons [SPYWARE ONLY]

-- Propagation/Saturation

1: Creates new files
2: Bundled with third-party applications [SPYWARE ONLY]
Technical Details Top
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\DM.dll
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyPoker\Exit.html
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyPoker\tmpUpgrade
  • Added Directory/File:
    FilePath: %USERPROGRAMS%\PartyPoker\PartyPoker.lnk
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyCasino\Images
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyPoker\Notes.txt
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\tmpUpgrade
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\ARA.ini
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyPoker\Articles
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyPoker\tmpUpgrade\INSTALL.LOG
  • Added Directory/File:
    FilePath: %USERPROGRAMS%\Games\PartyPoker.lnk
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyCasino\GRA.ini
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyPoker\install.sss
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\tmpUpgrade\upgrade*.exe
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyPoker\Articles\*.atc
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyPoker\RunApp.exe
  • Added Directory/File:
    FilePath: %USERAPPDATA%\Microsoft\Internet Explorer\Quick Launch\PartyPoker.lnk
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\mfc42.dll
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyPoker\Images
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\ssleay32.dll
  • Added Directory/File:
    FilePath: %TEMPDIR%\showurl?.exe
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyCasino
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyPoker\ppunistall.bat
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyPoker
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\libeay32.dll
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyPoker\GRA.ini
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyPoker\Uninstall.exe
  • Added Directory/File:
    FilePath: %USERPROGRAMS%\PartyPoker\Uninstall PartyPoker.lnk
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyCasino\PartyCasino.dll
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyPoker\PartyPoker.dll
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\ASYCFILT.DLL
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyPoker\*.wav
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyPoker\tmpUpgrade\upgrade*.exe
  • Added Directory/File:
    FilePath: %USERPROGRAMS%\Games
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyCasino\Images\*
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyPoker\login.html
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\zlib1.dll
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyPoker\Articles\?.html
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyPoker\TabConfig.txt
  • Added Directory/File:
    FilePath: %USERDESKTOP%\PartyPoker.lnk
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\msvcp60.dll
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyPoker\INSTALL.LOG
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\tmpUpgrade\INSTALL.LOG
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyGaming.exe
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyPoker\preloader.html
  • Added Directory/File:
    FilePath: %USERDESKTOP%\PartyPoker $100 Free.url
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\llh.dll
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyPoker\Images\*
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyPoker
  • Added Directory/File:
    FilePath: %USERPROGRAMS%\PartyPoker
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyCasino\pc_uninstall.bat
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyGaming\PartyPoker\poker.bin
  • Added Directory/File:
    FilePath: %PROGRAMFILESDIR%\PartyPoker\PartyPoker.ico
  • Added Registry Key:
    Key: HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{B7FE5D70-9AA2-40F1-9C6B-12A255F085E1}
  • Added Registry Key:
    Key: HKCU\Software\PartyGaming
  • Added Registry Key:
    Key: HKCU\Software\PartyGaming\Partypoker
  • Added Registry Key:
    Key: HKLM\%CURRENTVERSIONREG%\Uninstall\PartyPoker
  • Added Registry Value:
    Key: HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache Value: %PROGRAMFILESDIR%\partygaming\tmpUpgrade\upgrade*.exe
  • Added Registry Value:
    Key: HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache Value: %TEMPDIR%\Set?.tmp
  • Added Registry Value:
    Key: HKLM\%CURRENTVERSIONREG%\SharedDLLs Value: %PROGRAMFILESDIR%\PartyGaming\*
  • Added Registry Value:
    Key: HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache Value: %PROGRAMFILESDIR%\PartyGaming\PartyGaming.exe