I have somewhat the same problem as this one http://www.bleepingcomputer.com/forums/topic344409.html
I get popups from Norton saying "An Intrusion attempt was blocked" every time I access a webpage. I clicked the "details" button and after exporting this into a log file it shows me (this is just a position of many more):
11/1/2010 9:56 AM,High,An intrusion attempt by 220.127.116.11 was blocked.,Blocked,No Action Required,,HTTP Tidserv Request,"18.104.22.168, 80","lk01ha71gg1.cc/uaR00b4l5t6QApO5dmVyPTMuOTMmYmlkPW5vbmFtZSZhaWQ9MzAwMzMmc2lkPTAmcmQ9MTI4ODU1NDM4NCZlbmc9d3d3Lmdvb2dsZS5ybyZxPWpvY3VyaStjdStpbXB1c2NhdHVyaStzaW5jZQ==18g","BUBII-B2EC88514 (22.214.171.124, 1098)",126.96.36.199,"TCP, www-http"
I did a complet scan and during the scan the auto-protect showed another popup. Below log file:
Date & Time,Risk,Activity,Status,Recommended Action
11/1/2010 9:30 PM,High,3f.tmp (Backdoor.Tidserv!gen5) detected by Auto-Protect,Quarantined,Resolved - No Action
Can anyone help me? I would greatly appreciate it.
Edited by hamluis, 08 November 2010 - 03:23 PM.
Merged posts, moved from MRL to AII ~ Hamluis.