Technical Information
To ensure autorun and distribution:
Modifies the following registry keys:
- [<HKLM>\SOFTWARE\Microsoft\Internet Explorer\Extensions\{D85B4BE2-07C3-422f-ADE9-B1A2C7D25224}] 'Exec' = '%PROGRAM_FILES%\PartyGaming\WPTPoker\RunApp.exe'
Malicious functions:
Creates and executes the following:
- '%TEMP%\1H5608IM\<Virus name>\presetup\ShowUrl1.exe' http://www.wp#.com/poker/installend.htm?LA##########
- '%TEMP%\1H5608IM\<Virus name>\presetup\IconInIE.exe' {D85B4BE2-07C3-422f-ADE9-B1A2C7D25224}#WPT Poker#%PROGRAM_FILES%\PartyGaming#WPTPoker#wpt.exe#WPTPoker#WPTPoker
- '%TEMP%\1H5608IM\<Virus name>\presetup\ShowUrl1.exe' http://www.wp#.com/poker/installstart.htm?LA##########
Executes the following:
- '%PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE' http://www.wp#.com/poker/installend.htm?LA########
- '%PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE' http://www.wp#.com/poker/installstart.htm?LA########
Modifies file system :
Creates the following files:
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\4_smallcard1.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\3_smallcard1.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\6_smallcard1.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\5_smallcard1.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\10_seat_flashlight_9.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\10_seat_flashlight_8.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\2_smallcard1.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\1_smallcard1.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\7_smallcard1.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\8_seat_flashlight_5.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\8_seat_flashlight_4.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\8_seat_flashlight_7.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\8_seat_flashlight_6.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\8_seat_flashlight_1.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\8_seat_flashlight_0.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\8_seat_flashlight_3.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\8_seat_flashlight_2.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\10_seat_flashlight_7.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\wait_pmp.bmp
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\waitlist_delete_rmp.bmp
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Winking.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\wait_rmp.bmp
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\visited_rmp.bmp
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\visited_pmp.bmp
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\waitlist_delete_pmp.bmp
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Waitlist_Deleteall.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Worried.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\10_seat_flashlight_4.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\10_seat_flashlight_3.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\10_seat_flashlight_6.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\10_seat_flashlight_5.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\10_seat_flashlight_0.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Yawn.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\10_seat_flashlight_2.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\10_seat_flashlight_1.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\bt_menu.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\bt_lobby.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\but.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\bt_table_options.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\btn_mt.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\btn_divider.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\btn_tile.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\btn_stack.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\but.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\callout_bg.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\c50.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\card_tint.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\cards.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\c10.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\c1.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\C5.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\c25.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\btn_divider.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\action_button_fold.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\action_button_call.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\AlternativeMinimal_Deck.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\action_button_raise.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\9_seat_flashlight_4.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\9_seat_flashlight_3.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\action_button_betD.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\9_seat_flashlight_6.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\Alternative_Deck.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\blackjack_tab_button.JPG
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\blackjack_icon.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\btn_defualt.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\btn_cascade.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\avatarPlyrImg_tint.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\avatar.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\avatar_disabled.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\avatarPlyrImg_tintpending.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Smile.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Sleeping.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\splash_screen_bg.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\smlogo.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\skin.bmp
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\sign_up.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\skin_account.bmp
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\skin.PNG
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\stats_bg.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\system_but_casino.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\system_but_cashier.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\system_but_connected.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\system_but_casino_collapse.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\strip.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\strip.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Surprised.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\SubmitDeal.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Sick.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_PMP_STT_bg_active.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_PMP_STT_bg.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_RMP_CG_bg.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_rightScrollArrow.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_leftScrollArrow.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_favs_dropdown.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_PMP_CG_bg_active.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_PMP_CG_bg.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_RMP_CG_bg_active.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\roulete_icon.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\reminder_icon.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\seating.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Sad.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_RMP_STT_bg_active.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_RMP_STT_bg.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\RejectDeal.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Raised_Eyebrow.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Trny_Completed.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Trny_Announced.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Trny_Running_stacks.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Trny_Running.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\tourneylobbybg.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\top_bottom_sorting.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\trackposition.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\trackposition.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\t_distributechips.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\t_register.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\t_logout.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\viewDealbackground.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\t_unregister.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\t_FooterBtn_Big.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\t_FooterBtn.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\t_lobby_tabs.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\t_FooterBtn_Disabled.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Tongue.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\table_lh_bg_big.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\system_but_security.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\table_loading.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\table_lh_bg_small.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\system_but_connected_poor.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\system_but_connected_good.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\system_but_install.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\system_but_disconnected.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\table_title_background.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\thumbtack1.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Theme_Preview.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\titlebar_chip.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\thumbtack2.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Techno_Preview.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\table_title_background_sel.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Themes_DownloadBtn.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Techno_thumb.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\ChatOffIndicator_Deaf.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\skin_orange.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\sidepots_bg.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\skin_yellow.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\skin_red.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\save_button.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\resize_button.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\SeatOpen_button.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\SeatEmpty_button.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\slider_bg.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\Tabbed_MinBG.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\Tabbed_Area_ButSkin.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\tabbed_rebuy_button.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\Tabbed_MinBtn.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\slider_plus_button.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\slider_minus_button.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\tabbed_addmorechips.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\slider_tab.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\reserved_button.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\persistent_option_arrow_up.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\persistent_option_arrow_down.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\pp-logo.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\popup_buyin_but_all.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\OpportunityAlerts2.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\OpportunityAlerts1.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\PersistentOptionBck.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\OpportunityAlerts3.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\pp_gametable_multi_tabling_redstripe.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\Rebuy_Refresh.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\rebuy_icon_min.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\rebuy_tab_button_BJ.JPG
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\rebuy_tab_button.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\preaction_button_unchecked.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\preaction_button_checked.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\rebuy_bg.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\preview.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\NewSounds\OptionsClick.WAV
- %PROGRAM_FILES%\PartyGaming\WPTPoker\NewSounds\OpAlert.wav
- %PROGRAM_FILES%\PartyGaming\WPTPoker\NewSounds\Raise.wav
- %PROGRAM_FILES%\PartyGaming\WPTPoker\NewSounds\OptionSet.WAV
- %PROGRAM_FILES%\PartyGaming\WPTPoker\NewSounds\Congrats.WAV
- %PROGRAM_FILES%\PartyGaming\WPTPoker\NewSounds\Click_Alert.wav
- %PROGRAM_FILES%\PartyGaming\WPTPoker\NewSounds\Fold.wav
- %PROGRAM_FILES%\PartyGaming\WPTPoker\NewSounds\firework3.wav
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Uninstall.exe
- %HOMEPATH%\Start Menu\Programs\Games\WPT Poker.lnk
- %APPDATA%\Microsoft\Internet Explorer\Quick Launch\WPT Poker.lnk
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\installend[1].htm
- %PROGRAM_FILES%\PartyGaming\WPTPoker\install.sss
- %HOMEPATH%\Start Menu\Programs\WPT Poker\WPT Poker.lnk
- %PROGRAM_FILES%\PartyGaming\WPTPoker\INSTALL.LOG
- %HOMEPATH%\Start Menu\Programs\WPT Poker\Uninstall WPT Poker.lnk
- %HOMEPATH%\Desktop\WPT Poker.lnk
- %PROGRAM_FILES%\PartyGaming\WPTPoker\NewSounds\chips_moving.WAV
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\timebank_button.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\Theme.bin
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\TournamentInfostrip.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\timer.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\table_loading.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\Table_Carpet.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\tab_bg.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\table_waitlist_bg.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\viewDealbackground.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\NewSounds\Bet.wav
- %PROGRAM_FILES%\PartyGaming\WPTPoker\NewSounds\alert2.wav
- %PROGRAM_FILES%\PartyGaming\WPTPoker\NewSounds\Check.WAV
- %PROGRAM_FILES%\PartyGaming\WPTPoker\NewSounds\CardFlip.WAV
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Language\en_US\lang_pack_en_US.txt
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\your_turn.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\NewSounds\alert1.wav
- %PROGRAM_FILES%\PartyGaming\WPTPoker\NewSounds\Action.WAV
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\DealerControl.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\d500000.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\Default_Deck.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\Deck_Preview.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\d5.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\d25000.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\d5000.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\d500.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\default_player_image.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\EM.PNG
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\discuss_a_deal_help.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\fold_to_on.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\fold_to_off.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\deposit_tab_button.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\deposit_icon_min.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\discuss_a_deal.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\deposit_tab_button_BJ.JPG
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\d25.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\chat_icon_min.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\Chat_EmoticonBtn.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\chat_options_nav.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\Chat_OptionsBtn.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\ChatOffIndicator_MuteDeaf.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\ChatOffIndicator_Mute.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\chat_box_bg.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\chat_bg.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\Chat_SendBtn.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\d1000.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\d100.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\d1000000.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\d100000.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\close_EM_button.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\chat_tab_button.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\d1.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\cut_card_shad.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\Normal_Action_Button.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\Newskin.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\notes_bg.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\Normal_Action_Button_BetD.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\lovetowin_bl.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\lovetowin.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\more_icon.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\Modern_Deck.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\note_icon_min.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\note_icon_min_yellow.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\note_icon_min_white.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\OpenTable.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\note_tab_button.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\note_icon_min_green.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\note_icon_min_blue.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\note_icon_min_red.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\note_icon_min_orange.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\JP_Win_Popup_BG.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\footericon_5.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\footericon_4.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\footericon_7.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\footericon_6.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\footericon_1.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\footer-bg.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\footericon_3.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\footericon_2.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\footericon_8.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\High-Card-Ani_05.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\High-Card-Ani_04.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\ImageOle.dll
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\High-Card-Ani_06.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\High-Card-Ani_01.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\header_black_tint.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\High-Card-Ani_03.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\NewGameTable\High-Card-Ani_02.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_search_tables.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_previewButton_rmp.bmp
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_smlIconPrivate.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_smlIconBuddies.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\common_filterDropDownUp.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\common_filterDropDownButton.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_previewButton_pmp.bmp
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_go_back.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_smlIconSearch.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_TableBG_Restore.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_TableBG_Max_Collapsed.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_tournamentButton_pmp.bmp
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_TableBG_Restore_Collapsed.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_smlIconWaitList.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_smlIconTourneys.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_TableBG_Max.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_tabInActive1.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_favouriteReset.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_ActionBtn.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Coffe_Break.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_background2.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_background.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\client_top_header.JPG
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\client_bottom_seperator.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\close_EM_button.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\client_top_left.JPG
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_background2_minimised.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_CloseContainer_black.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_buttons_Refresh.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_ClosePopup.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_CloseContainer_white.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_buttons_380x23.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_background_minimised.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_buttons_860x23.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_buttons_620x23.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\genius_comma.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\filters_but_small.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\home.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\genius_numbers.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\EM.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\DownloadProgress.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\filters_but.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\ExitDeal.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\HUArrowTree1.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Laughing.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\JP_Win_Popup_BG.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\left_right_sorting.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\layout_01_r65_c34.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\icon_three.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\HUArrowTree2.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\JP_BJ_Background.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\icon_ticked.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\deposit.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\ConfirmDeal.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_viewButton2.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\create_account.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Cool.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_update.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_tournamentButton_rmp.bmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\installstart[1].htm
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Common_viewButton1.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\CropPreviewBkGnd.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Deal_help.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\deal_background.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\DefaultNewTable_Thumb.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\DefaultNewTable_Preview.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\c_r_comma.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Crying.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\c_r_numbers.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\c_r_lobby.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\TabConfig.txt
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Sys.ini
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Theme.xml
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Table.bin
- %PROGRAM_FILES%\PartyGaming\WPTPoker\poker.bin
- %PROGRAM_FILES%\PartyGaming\WPTPoker\NewTable.bin
- %PROGRAM_FILES%\PartyGaming\WPTPoker\RunApp.exe
- %PROGRAM_FILES%\PartyGaming\WPTPoker\preloader.html
- %PROGRAM_FILES%\PartyGaming\WPTPoker\WPTPoker.dll
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\At_Wits_end.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\arrow_right.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\banner_left_arrow.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\background_button.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Alternative_Deck.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\AlternativeMinimal_Deck.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\arrow_left.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Angry.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\LHN.txt
- %TEMP%\1H5608IM\<Virus name>\presetup\regsvr32.exe
- %TEMP%\1H5608IM\<Virus name>\presetup\Cancelmain_panel.bmp
- %TEMP%\1H5608IM\<Virus name>\presetup\IconInIE.exe
- %TEMP%\1H5608IM\<Virus name>\presetup\ShowUrl1.exe
- %TEMP%\1H5608IM\Resume.exe
- %TEMP%\1H5608IM\unpack.dll
- %TEMP%\1H5608IM\<Virus name>\presetup.bmp
- %TEMP%\1H5608IM\<Virus name>\presetup.rgn
- %TEMP%\1H5608IM\<Virus name>\presetup\icons.bmp
- %TEMP%\1H5608IM\<Virus name>\maindb
- %TEMP%\1H5608IM\<Virus name>\languages
- %PROGRAM_FILES%\PartyGaming\WPTPoker\ImageOle.dll
- %PROGRAM_FILES%\PartyGaming\WPTPoker\GRA.ini
- %TEMP%\1H5608IM\<Virus name>\plugins\1\CustomUI.dll
- %TEMP%\1H5608IM\<Virus name>\presetup\2.bmp
- %TEMP%\1H5608IM\<Virus name>\packagedb
- %TEMP%\1H5608IM\<Virus name>\plugins\0\FindWin.dll
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\buddy_button_unblock.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\buddy_button_remove.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\but.bmp
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\buddy_top_bg.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\buddy_button_add.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\btnQuickRedepositBuyin.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\buddy_button_invite.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\buddy_button_block.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\but.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\buyin_popup_okbg.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\but_time.bmp
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\client_bottom.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\chart_main_Tree_bg.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\but_account.bmp
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\buttonSend.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\but_skin_sliver.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\but_skin.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\box_winner_x.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\bounty_icon.bmp
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\border.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\box_bye.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\bounty_special.bmp
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\biglogo.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\banner_right_arrow.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\bj_icon.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Big_Grin.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\box_bye_x.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\box_waiting.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\box_player_x.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\box_winner.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\box_waiting_x.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\box_loser_x.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\box_loser.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\box_player.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\box_onlineplayer.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\level_icons_bronze.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\popup_buyin_top.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\popup_buyin_but_all.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\popup_register_bottomleft.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\popup_login_top.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\PlayerImage_8.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\PlayerImage_7.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\popup.css
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\PlayerImage_9.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\popup_register_top.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\pp_gametable_multi_tabling_chat_arrow.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\pp_gametable_multi_tabling_card_bg.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\pp_gametable_multi_tabling_chat_bg2.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\pp_gametable_multi_tabling_chat_bg1.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\ppicon.ico
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\popup_title_background_monster.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\pp_gametable_multi_tabling_bg.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\pp_browser.ico
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\PlayerImage_6.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\PlayerImage_17.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\PlayerImage_16.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\PlayerImage_19.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\PlayerImage_18.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\PlayerImage_13.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\PlayerImage_12.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\PlayerImage_15.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\PlayerImage_14.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\PlayerImage_2.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\PlayerImage_3.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\PlayerImage_24.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\PlayerImage_5.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\PlayerImage_4.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\PlayerImage_21.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\PlayerImage_20.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\PlayerImage_23.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\PlayerImage_22.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_Favorites_blurred.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_Favorites_add_to_favorites.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_Favorites_training.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_Favorites_preview_button.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\qs_conf_bg.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_buttonSitAtTableDD.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\qs_conf_bg3.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\qs_conf_bg2.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_favouritesBack.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_favSearchIcon.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_favouritesOverlayButtons.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_favsOpenTableDD.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_favsOpenTable.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_favouritesBackLong.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_favouritesBack2.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_favouritesOverlay.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_favouritesBackLong2.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_buttonSitAtTable.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\preview_loading.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\preference_save_button.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\prizepool.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\preview_timer_icon.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\pp_gametable_multi_tabling_redstripe.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\pp_gametable_multi_tabling_chat_down_bg.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\preference_reset_button.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\preference_close_button.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\prizepool.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_buttonBasicView.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\qs_background_minimised.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_buttonDetailedView.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\QS_buttonClose.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\qs_background.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Punch.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\qs_background2_minimised.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\qs_background2.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lhn_store.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lhn_separator_collapse.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lhn_sub_nav.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lhn_store_collapse.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lhn_preferences.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lhn_poker_collapse.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lhn_separator.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lhn_preferences_collapse.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lhn_support.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\LibraryRight.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\LibraryLeft.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\loader.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\LibrarySelBkGnd.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lhn_tellafriend.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lhn_support_collapse.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\LibraryBkGnd.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lhn_tellafriend_collapse.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lhn_poker.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lhn_account_background.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lhn_account.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lhn_background.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lhn_account_collapse.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\level_icons_pal.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\level_icons_gold.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\level_icons_silver.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\level_icons_pal_eilte.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lhn_badbeat_jackpot.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lhn_cashier_collapse.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lhn_cashier.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lhn_expand.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lhn_collapse.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lhn_bar_jackpot_numbers_small.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lhn_bar_jackpot_numbers.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lhn_bets_collapse.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lhn_bets.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\new_theme.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Newskin.PNG
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\page_forward.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\page_back.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\nav_first.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\nav_back.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\nav_last.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\nav_forward.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\password_status_help.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\PlayerImage_1.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\PlayerImageBkGnd.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\PlayerImage_11.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\PlayerImage_10.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\payment_logos.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\password_status_strength.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\pin_used.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\pin_unused.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\multitable_rightclick_button_yellow_yes.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\login.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lobby_skin.PNG
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Lounge_Preview.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\logout.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\LobbyClock.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\loading.gif
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lobby_but.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\lobbyClose.jpg
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Lounge_thumb.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\multitable_rightclick_button_red.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\multitable_rightclick_button_green.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\multitable_rightclick_button_yellow_no.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\multitable_rightclick_button_yellow.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\mt_protect.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\Modern_Deck.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\multitable_rightclick_button_blue.png
- %PROGRAM_FILES%\PartyGaming\WPTPoker\Images\multitable_rightclick_bg.png
Deletes the following files:
- %TEMP%\1H5608IM\<Virus name>\presetup\ShowUrl1.exe
- %TEMP%\1H5608IM\<Virus name>\presetup\regsvr32.exe
- %TEMP%\1H5608IM\<Virus name>\presetup\icons.bmp
- %TEMP%\1H5608IM\<Virus name>\presetup.bmp
- %TEMP%\1H5608IM\unpack.dll
- %TEMP%\1H5608IM\Resume.exe
- %TEMP%\1H5608IM\<Virus name>\presetup.rgn
- %TEMP%\1H5608IM\<Virus name>\presetup\IconInIE.exe
- %TEMP%\1H5608IM\<Virus name>\packagedb
- %TEMP%\1H5608IM\<Virus name>\maindb
- %TEMP%\1H5608IM\<Virus name>\languages
- %TEMP%\1H5608IM\<Virus name>\plugins\0\FindWin.dll
- %TEMP%\1H5608IM\<Virus name>\presetup\Cancelmain_panel.bmp
- %TEMP%\1H5608IM\<Virus name>\presetup\2.bmp
- %TEMP%\1H5608IM\<Virus name>\plugins\1\CustomUI.dll
Network activity:
Connects to:
- 'localhost':1038
- 'www.wp#.com':80
- 'localhost':1035
TCP:
HTTP GET requests:
- www.wp#.com/poker/installend.htm?LA########
- www.wp#.com/poker/installstart.htm?LA########
UDP:
- DNS ASK www.wp#.com
Miscellaneous:
Searches for the following windows:
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: '' WindowName: '(null)'
