NSIS Media Extension

[R4d3n]

Hey... I was using Windows defender for a while... and i thought things was going well until a friend said he thought my computer was infested with spyware, I thought he was just being petty because he likes to rag on my computer and sees everything as a compettition. So I carried on none the wiser until I visited ImageShack.us it said "This is not and Ad download SpyBot and remove.." I had 219 cases which is terrible and removed all of them, including NSIS Media Extension.. But every time I've scanned its still there so i fix, immunize you name it trying to delete it manually but no joy.. so can someone PLEASE help me... Because I'm fed up with the stupid pop-ups..

Please Get Back

R4d3n:sad:

[spybotsandra]

Hello,

Please download the latest detection update (2006/12/29):
http://www.safer-networking.org/en/download/index.html
This should fix it.
Or choose the direct installation file:
http://www.safer-networking.org/upda...d_includes.exe

Further please scan your computer in Safe Mode.
If the computer is running, shut down Windows, and then turn off the power.
Wait 30 seconds, and then turn the computer on.
Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
Ensure that the Safe Mode option is selected.
Press Enter. The computer then begins to start in Safe mode.
Login on your usual account.

Best regards
Sandra
Team Spybot

[lanjaei]

Hello,

I registered this forum just to find a way to solve this NSIS problem. My mom's computer was infected by this worm. IE and Firefox were infected. I found that Spybot can not fully get rid of this NSIS problem even when I scanned my computer in safe mode. However, after few hours of google and forum search, I found a website created by this guy who spent 2 weeks researching this NSIS media worm. He found about 100 DLL libraries and tons of other register keys associated with this worm. The website is

http://kichik.net/

There you can find a NSIS Media Remover. I ran it and the NSIS folder didn't come back anymore! I think he has the source code of the program there.

I hope that Spybot can at least contact him to get the list of DLLs he found, and add them into the definition file, because this NSIS media thing really caused me a lot of pain.

[fgwenger]

I ran an updated Spybot scan on my PC with NSIS and it didn't even find it.