WinXP computer infected with backdoor.tidserv!inf

[bubbasnickey]

Hi,

 

WinXP Home, sp3 user here.

 

It seems that my computer is infected with backdoor.tidserv!inf virus. I'm hoping to get some advice on how to remove it as I'm having a hard time. Norton says that it is in C:\windows\system32\drivers\nvatabus.sys but can't remove it.

 

This may be unrelated but my wife said that her password for her hotmail acct was changed recently (not by her) and now she can't get in. I've read that this might also be a result of an infection.

 

I've followed the advice found in a similar thread in the hopes that it may help resolving the problem.

 

Thanks,

Shane

[bubbasnickey]

Scan Results

 

Here are the attachments

OTL.Txt

Extras.Txt

mbam-log-2010-09-19 (22-46-40).txt

[chiaz]

Hi bubbasnickey,

 

Did you click “Remove Selected” in MalwareBytes?

[bubbasnickey]

Hi Chiaz,

 

I didn't see a 'Remove Selected' option but I did click 'Delete All' on the Quarantine tab. Then I ran Norton again and the virus was still there. I'm going to run Malwarebyte's again and see what happens.

[chiaz]

OK let me know again, and we'll take it from there.

[bubbasnickey]

OK, I ran MAB and Norton again and MBAM didnt find the infection but Norton did. I rebooted and ran them both again and both came back clean. All hail MBAM!

 

Thanks.

[chiaz]

If you are still encountering problems with your system, or if you just want another check, you could run a new scan with OTL and post the log here.

 

Otherwise, I think you are good to go.