media9s.com

Hi,

New user here. Appologizing in advance if I’m not doing something correctly.

I used to use AVG before I recently installed Avast about 2 weeks ago on my XP. However, I had no virus/attack of any sort detected in the past until I installed Avast. Then, Avast detected an attempt by IE to communicate to media9s.com URLs, approximately once every 30 to 45 mins. After some testing, I confirmed that the attack only occurs while IE is loaded, so it is tied to IE somehow. When I close IE window, IE does not remove itself from memory, so I have to go into task manager and kill it.

Avast could not fix the problem with IE, but it was able to block the request being sent out, which is good but not great. I confirmed by reinstalling AVG’s latest version, that it still could not detect the attempt to communicate with media9s nor that IE was doing it.

I reinstalled Avast, because at least it was blocking the request going out.

Question finally is, is there or has there been a solution to this media9s hack use of IE ?

I noticed 3 past post in the search and did not notice a solution. I appoloize if I missed it.

Any help would be appreciated.

Thank You

It looks like Super Anti Spyware might be able to remove it. It may be called by SAS as "trojan.Dropper/Win-NV".

http://glocktalk.com/forums/showthread.php?p=15477513

http://www.superantispyware.com/

did it work ?

Thanks for the possible solutions. I haven’t tried it yet. I wanted to confirm that it is a fix or not first before I attempt it. I know sometimes that an attempt to fix something can sometimes lead to much worse problems due to complications with the solution.

So… do u know for sure that this is a confirmed solution ?

So... do u know for sure that this is a confirmed solution ?
No, but scanning with Superantispyware and malwarebytes is the first i would try.

If this does not work, we have another tool called Essexboy… ;D…it always work
http://forum.avast.com/index.php?topic=53253.0

Definitely a bad site.

http://www.urlvoid.com/scan/media9s.com

Try a forum search for media9s.com as there are a couple of other topics related to this.

Yes, I already did the search and found 3 that did not seem to mention a solution. Just possible solutions. I will however seriously consider the SuperAntiSpyware.

I appreciate all the replies, but I really hope someone who has confirmed a solution to this issue respond to this before I attempt possibles.

I’m surprised that there are no big name scanners that can fix this.

but I really hope someone who has confirmed a solution to this issue respond to this before I attempt possibles.
you can follow the guide from Essexboy and let him have a look ?

You could a) check for the presence of this dll file on your system that seems to be related to the problem and b) if found, upload it to virustotal for checking.

Check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here the URL in the Address bar of the VT results page.