Pprekop.exe Mystery

[Don]

It seems my "pprekop.exe" mystery keeps getting more complicated. The
following error message only shows up
on the startup of party poker and yet, a full search of my drive (with all
hidden/system files being included) turns up no such application
(pprekop.exe). To verify the source of the error message, I had
the event viewer open and watched as I started Party Poker - the error
showed up at the exact second I started party poker. I also searched through
the registry for any sign of pprekop.exe and the
only sign of any such file turns up in my recent search keys. So, (here's
the tough question) ... how
does an exectable file (pprekop.exe) which doesn't show up anywhere on my
system, cause an error
message in my app tools/sys event log (application)??? I have uninstalled
party poker and the errors have stopped. Scratching my head over this
one ...!! Here is the event reported :
**************************************************
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 1/17/2007
Time: 7:55:33 PM
User: N/A
Computer: PREFERRE-F23286
Description:
Faulting application pprekop.exe, version 4.2.0.172, faulting module
ole32.dll, version 5.1.2600.2182, fault address 0x10017bed.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 69 00 33 00 50 00 64 00 i.3.P.d.
0008: 4c 00 57 00 7a 00 49 00 L.W.z.I.
0010: 6b 00 71 00 6f 00 77 00 k.q.o.w.
0018: 42 B


ô¿ô
<>
"I'll quit learning when they close the lid on my coffin"
Don

 

[Don]

As I stated in my post "I have uninstalled party poker and the errors have
stopped." The only time I got the errors was at the "exact" same time as
party poker started (am I repeating myself here??). As for other games, I
only have the one other poker game (other than the default games that come
with WinXP home) and it causes no errors. I have many, many other
applications (computers typically have thousands), but none are causing any
errors (as monitored and verified by my sys event logs). ..... next?

 

[Don]

Sorry if you misunderstood the "next". I'm wanting to learn the reason (how
& why) for the mysterious application faulting. I see no way or reason for
the error to appear (even if I am sure of the cause). Curing the symptom
does not educate the mind.

 

[PA Bear]

Always reply to your original thread, Don. You've been hijacked!

 

[Guest]

You are right PA Bear, when I looked to the History I find the latest problem
was an infection.
But Don said it only happened when he try to install or run the poker Game
and He gaves me the impression that the Game is Okay, I didn't doubt it for a
second!.
Thanks PA for attract my Attention.
Regards,
nass

 

[Guest]

Nothing taken Don, but You know now it is the game and as I mentioned to PA
Bear when I looked to your latest posts I found you complained about
infection on your HDD!.
Did you cleaned this machine and all traces of the infection are gone?.
Do you have Av Run it and monitor your running processes and see if there
are any suspicious activities.
To be honest with you I don't play Poker, there are some good and there are
some buggy ones and should n't be on your system, I don't know what you have?.
You have the Right to know, but it need somebody really into games and know
the behaviors can cause, you can search the web http://www.live.com can
produce lots of useful articles about the good Games and bad coding games and
what can cause it.
HTH.
Regards,
nass

 

[Don]

Thanks for your reply and I did have a previous post about my backup drive
sys volume info folder containing a trojan. That situation was successfully
resolved by a response explaining how to use the cmd prompt to access the
infected folder and remove the files indicated. The errors didn't show up
until after the removal of those files. My NOD32 antivirus has shown clean
scans and the initial discovery of the backup volume trojan issue was by
Counterspy (which has since also shown my entire system clean). I will check
into the link you provided but I did also uninstall and reinstall the latest
party poker program (with scans, searches & log checks between operations)
to ascertain that it was the only possible cause of the error report ... and
that there was never any such application on my system. It just seems to
defy explanation and I hoped there might be some way of reaching an answer.
I've found other references to this issue but no answers yet.
Thanks for you lead and thoughts.

 

[PA Bear]

Even an "all clean" report by both NOD32 and Counterspy doesn't mean the
machine is free of hijackware. Stop dawdling: Post your HijackThis log to
an appropriate forum for review by an expert.

 

[Don]

Sorry for the "dawdling"/stumping the amateurs, could you point me to an
appropriate expert forum where I can post my HijackThis log. I've searched
and googled all other options and they direct idiots like myself to the MS
newsgroups.

 

[Rock]

Sorry for the "dawdling"/stumping the amateurs, could you point me to an
appropriate expert forum where I can post my HijackThis log. I've searched
and googled all other options and they direct idiots like myself to the MS
newsgroups.

Forums to Interpret HijackThis Logs:

http://forums.spywareinfo.com/
http://forum.aumha.org/viewforum.php?f=30
http://forums.tomcoyote.org/
http://www.wilderssecurity.com/

 

[PA Bear]

When all else fails, HijackThis v1.99.1
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. **Post
your log to http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert
analysis, not here.**