Hello all. I was going over my Norton log and found some Backdoor.Tidserv!gen5 is it, the log said that it was pending, but the file name itself looks pretty suspicious. I googled it, and found out that it is some sort of trojan. I was just wondering if Norton is going to delete this, or am I supposed to find other means of removal? Comments and help would be appreciated. Thanks in advanced.
Hi erebus890,
A statistical submission is used to refine how certain threats are detected by Norton products. Since Auto-Protect did not alert you to this threat it is almost certainly a false positive, which is an extremely common characteristic of statistical submissions - one of the prime objectives of these submissions is to find and remedy false positves before a final revised signature for the threat is officially released. Tidserv is indeed something to be concerned about, but in this case it is very probable that you are not infected.
Hello
Here is the report of the information about this possible malware on your machine by ThreatExpert.
http://www.threatexpert.com/report.aspx?md5=12d8f64c8d1f21863316ebfcbcc7228b
Have you found this malware listing in unresolved History also in your Norton product?
Thank you all for the help. You have all helped me understand exactly what a Statistical Submission was, and how to know if the Backdoor.Tidserv!gen5 was going to pose any threat. Norton did not find anything of that sort after going to the directory where the pended malware was, but had found no trace of it. Norton could have gotten rid of it after all or it was nothing to worry about.
Hello erebus890
Did you try running a scan in safe mode to see if anything showed up?
If you do have this tidserv, it doesn't just go away and it's forever changing also, so the description of possible files in your computer is probably different now also.
I would also recommend a full scan with the free version of Malwarebytes to check to see if this possible tidserve might have been responsible for downloading something else also to your computer which might have been missed by Norton.
Download the free version, install and update then run a FULL scan. After the scan completes you should post the logs back to this thread.
You can find Malwarebytes here
http://www.filehippo.com/download_malwarebytes_anti_malware/
It is a safer location to get the program from than malwarebytes themselves because some malware creators have large lists of sites that they block. Please be careful to down load the correct program ----the FREE version of MALWAREBYTES
(Thanks to Delph for providing the alternative site)
I would agree with floplot that even though this appears to be a false positive, the Tidserv threat is not one to be taken lightly. It wouldn't hurt to run a full scan to confirm that nothing is found on your system . If the scan is clean you can be assured that this was a false positve.
Hello SOJ
Thank you for agreeing with my post about running another scan.
Hello all. I was going over my Norton log and found some Backdoor.Tidserv!gen5 is it, the log said that it was pending, but the file name itself looks pretty suspicious. I googled it, and found out that it is some sort of trojan. I was just wondering if Norton is going to delete this, or am I supposed to find other means of removal? Comments and help would be appreciated. Thanks in advanced.