MPGCom Toolbar Description:
Mpgcom is a Browser Helper Object that sends
data to and receives data from a remote Web site.
When it installs itself, Adware Mpgcom does
the following:
- Creates the following registry keys:
HKEY_CLASSES_ROOT\Mpgcom.zoom
HKEY_CLASSES_ROOT\Mpgcom.zoom.1
- Creates the file, %Windir%\Msnarrator.exe,
and then executes it.
- Adds the value:
"msnarrator" = "%Windir%\msnarrator.exe"
to the registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
so that the adware runs when you start
Windows.
- Adds the values:
- "PingMDID" =
<number>
- "PingSDID" =
<number>
to the registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
WindowsUpdate
- Attempts to send confidential information
back to a third-party server.
MPGCom Toolbar Automatic Removal:
Using Spyware Doctor
to detect and remove this spyware AUTOMATICALLY!
Sponsored Links:
MPGCom Toolbar Manual Removal:
Follow these steps to remove MPGcom from your
machine. Begin by backing up your registry and
your system, and/or setting a Restore Point, to
prevent trouble if you make a mistake.
- Unregister these DLLs with Regsvr32, then reboot:
systemroot+\system32\iempg.dll
systemroot+\system32\iempg2.dll
systemroot+\system\iempg.dll
systemroot+\system\iempg2.dll
- Remove these registry items (if present)
with RegEdit:
HKEY_CLASSES_ROOT\clsid\{ffffffff-ffff-ffff-ffff-5f8507c5f4e9}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{ffffffff-ffff-ffff-ffff-5f8507c5f4e9}
HKEY_LOCAL_MACHINE\clsid\{ffffffff-ffff-ffff-ffff-5f8507c5f4e9}
HKEY_LOCAL_MACHINE\software\classes\clsid\{ffffffff-ffff-ffff-ffff-5f8507c5f4e9}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{ffffffff-ffff-ffff-ffff-5f8507c5f4e9}
- Remove these files (if present) with Windows
Explorer:
systemroot+\system32\iempg.dll
systemroot+\system32\iempg2.dll
systemroot+\system\iempg.dll
systemroot+\system\iempg2.dll
More
Removal Instructions for Adware/Spyware Programs -
'M'
|
(If you can not see the issued comment, please enable your browser to support javascript and refresh this page.)