About two days ago I stumbled across a bad website and just knew I was about to get a virus. I then quickly closed my browser and ran a full system scan using Symantec and Malwarebytes. I found "Tracking cookies" and "Backdoor.tidserv with Symantec, and then shortly after I did a scan with Malwarebytes and found nothing. Everything ran fine for a few minutes until Symantec reported access from - (ssid: 23621) http tidserv request detected. This message comes about every 30 minutes or so. So I decided to read up on this virus on forums and the Symantec website. On the other forums there was mainly just log posting so that wasn't much help to me, and on the Symantec website it told me to turn off system restore and then do a scan. I did that and once again Found "Backdoor.tidserv" and "Tracking cookies", But this time it also gave me the filename: 61.tmp (Previously it was 62.tmp with S-Restore on).
Now, it's been nearly two days with this nasty virus and it seems to be getting worse. When I have sound set to "On" on my computer I can hear clicking noises and an occasional advertisement. I still get messages saying: (ssid: 23621) http tidserv request detected, and sometimes when browsing through websites it tries to redirect me to another site. I would post a log from Malwarebytes and/or symantec but I cant find out how to paste out a log from symantec, and malwarebytes didn't find any infections when I ran a scan.
Here's something worth noting. My last two Full system scans from Symantec with my System Restore off Both had "Tracking cookies" but no "Backdoor.tidserv". what is said in the paragraph above is still happening though.
Edited by hamluis, 19 July 2010 - 04:55 PM.
Moved from XP to more appropriate Am I Infected forum ~ Hamluis.