Norton Internet Security / Norton AntiVirus

[fulfowi]

My son was unknowingly without virus protection on his laptop, so we quickly downloaded Norton Internet Security and ran a complete system scan in safe mode. Everything cleaned up fine except backdoor.tidserv, which the scan message said needed to be removed manually.  There is plenty of info on removing the virus manually, but my question is more basic.  Why does is need to be removed manually? We just got the latest Norton Internet Security, and Live Update has been run, so shouldn't it have the latest virus definitions?

Something occurred to while I was writing the above.  I installed Norton Internet Security in safe mode.  When I ran the full system scan in safe mode, live update may not yet have been run.  Do I need to go back into safe mode and run a full system scan again?

[floplot Norton Fighter]

Hello fulfowl

Welcome to the Norton Users Discussion Forum

Norton did it's job in this case by telling you that backdoor.tidserv was found on the computer. Some malware if the security program would remove the malware completely, it would cause more problems like having problems rebooting your computer. By telling you how to remove the malware manually, it should prevent problems which automatic removal may cause. . You have the latest NIS 2010 which is why the program was able to find backdoor.tidserv.

If you don't feel comfortable attempting to clean this up by yourself, you can stop at bleeping computers website and put backdoor.tidserv in the title of the thread.

Please come back and let us know how you made out. Thanks

[Quads]

---

floplot wrote:

You have the latest NIS 2010 which is why the program was able to find backdoor.tidserv.

---

If in the definitions variants of backdoor.Tidserv are included, as new ones keep appearing then, older Norton software all also detect Backdoor.Tidserv not just 2010, but 2009, 2008.................. Software

Definitions are not just updated for 2010 products but earlier software versions are included. As per the Intelligent Updater lists

No point in creating definitions to be used for older products, if even with up to date definitions, older products can't detect whats included in the definitions so for instance can't detect "Backdoor. Tidserv"

As far as I am aware there is a difference between the removal flag of "Backdoor.Tidserv" and "Backdoor.Tidserv!inf"  Norton is not to remove / delete "Backdoor.Tidserv!inf" but has the flag of "Manual Removal Required"  usually because a critical Windows file is involved.

Quads

[3play]

---

fulfowi wrote:

There is plenty of info on removing the virus manually, but my question is more basic.  Why does is need to be removed manually?

---

However , the most important one is have you managed to actually cure the computer ? If not , please , let us know .

[justycx]

I am also facing the sam problem with backdoor.tidserv.inf  Norton gets this in the scan , bust doesn't remove it.  How do I get rid of this Backdoor 

[delphinium Norton Fighter]

justycx:

Unless you are very computer savvy, I recommend going to www.bleepingcomputer to have the rootkit removed.  They are very competent at these sorts of remediations, and there is no charge for their assistance.  Follow their directions precisely, and put te name of the infection in the header of your first post so they know what they are dealing with.

[fulfowi]

I've already been there, have given them all the data they, and am waiting for their analysis.  I have received an automatic reply that they're looking into it.

Thanks,

Doug

[mdturner]

---

fulfowi wrote:

I've already been there, have given them all the data they, and am waiting for their analysis.  I have received an automatic reply that they're looking into it.

Thanks,

Doug

---

Hi fulfowl

Sometimes it can take a little time for them to come back to you but please be patient, it is well worth the wait.

[fulfowi · Accepted solution]

My son's laptop in now completely clean.  Bleeping Computer is great!  Has Norton considered a partnership with them -  perhaps providing services wherein a technician can use Rescue Me and clean up viruses that must be cleaned manually.

[checo Super Spyware Scolder]

Excuse me !

If the problem is fixed please , click on accept solution

Thank you