This computer had Trend Micro corporate installed on it, but the system wasn’t part of the network. Recently, TM started giving notices of Unauthorized URL’s being blocked. I don’t recall if it was multiple websites, but the Media9s one was definitely detected and blocked multiple times.
Norman Malware Cleaner detected W32/Suspicious_Gen2.BDRIH inside C:\Program Files\Internet Explorer\iexplore.exe (3868) (C:\WINDOWS\msvideo.dll!0x03010000)