The Notebook Review forums were hosted by TechTarget, who shut down them down on January 31, 2022. This static read-only archive was pulled by NBR forum users between January 20 and January 31, 2022, in an effort to make sure that the valuable technical information that had been posted on the forums is preserved. For current discussions, many NBR forum users moved over to NotebookTalk.net after the shutdown.
Problems? See this thread at archive.org.

    Manual Removal Of A Spyware

    Discussion in 'Security and Anti-Virus Software' started by Brunello, Dec 1, 2008.

  1. Brunello

    Brunello Notebook Enthusiast

    Reputations:
    0
    Messages:
    10
    Likes Received:
    0
    Trophy Points:
    5
    Hi, can anyone teach me how to remove manually backdoor.tidserv!inf?
    I am a beginner and Norton explanation are already too complex for me...
    Thank you
    Brunello
     
  2. Baserk

    Baserk Notebook user

    Reputations:
    2,503
    Messages:
    1,794
    Likes Received:
    1
    Trophy Points:
    56
    You'd better post future questions about this in the Windows-Anti Virus sub section.
    But what you want to try, is running SUPERAntispyware and Malwarebytes'Antimalware. (Check my signature for download links).
    Download and install both programs, (rename the mbam-setup.exe file to mb.exe before installing), make sure to update them both and then run them in Safe Mode.

    Then do a Norton scan again.
    If Norton still finds this Trojan, you will have to ask for more help in a forum like MajorGeeks where someone has asked about removal of the same trojan.
    Cheers.

    Edit; This page also offers an explanation on how to use MBAM.
     
  3. Aeris

    Aeris Otherworldly

    Reputations:
    474
    Messages:
    805
    Likes Received:
    20
    Trophy Points:
    31
    It'd be hard, or very hard to remove all of the copies completely, since the spyware adds itself as a system file, creates a temporary file with a random name, then injects its code into a system process, then that infected system process would start spreading the virus all over your computer, I support what Baserk said, you should try using Anti-Malware applications or get professional help if the problem persists.

    Good luck on owning that nasty spyware. :)
     
  4. Michael York

    Michael York Company Representative

    Reputations:
    152
    Messages:
    36
    Likes Received:
    0
    Trophy Points:
    15
    Hi Brunello,

    This is Mike from the Norton Authorized Support Team.

    Please visit Symantec.com and type the name of the infection into the search box at the top of the page. When you find the link for the infection, select the "Removal" tab for instructions on manually removing the infection. The instructions for removing the infection are clearly stated, and include running a Full System Scan after you have run LiveUpdate.

    Thank you,
    Mike
     
  5. Shyster1

    Shyster1 Notebook Nobel Laureate

    Reputations:
    6,926
    Messages:
    8,178
    Likes Received:
    0
    Trophy Points:
    205
    Unfortunately, those directions are particularly instructive vis-a-vis manually removing the virus in question, since they basically amount to:

    1) Turn off system restore;

    2) Update your virus definitions; and

    3) Run Norton and do a full system scan.

    However, this Norton forum thread does appear to have some instructions for doing a manual disinfection using HijackThis!