Adware.Mpgcom

Behavior

Adware.Mpgcom is a Browser Helper Object that sends data to and receives data from a remote Web site.

Symptoms

Existence of the file names %Windir%\mpgcom.dll or %Windir%\msnarrator.exe.

---

Notes:

• %Windir% is a variable. The adware locates the Windows installation folder (by default, this is C:\Windows or C:\Winnt) and copies itself to that location.
• This detection was reclassified from a Trojan horse (it was originally named Trojan.Narat) to a security risk on January 2, 2004.

---

Transmission

This adware may be installed when browsing certain Web sites.

Protection

• Initial Rapid Release version January 5, 2004
• Latest Rapid Release version November 19, 2009 revision 009
• Initial Daily Certified version January 5, 2004
• Latest Daily Certified version November 19, 2009 revision 024
• Initial Weekly Certified release date January 7, 2004

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.