Comments on: Backdoor.Tidserv http://www.precisesecurity.com/trojan/backdoortidserv Thu, 24 May 2012 12:56:45 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: angelahttp://www.precisesecurity.com/trojan/backdoortidserv#comment-9099 angela Wed, 05 Jan 2011 05:49:34 +0000 http://www.precisesecurity.com/threats/backdoortidserv/#comment-9099 I don't see these files in the registry. Maleware doesn't see it, nor does anything else I've run. I've had this for MONTHS. I am about to pull my hair out. I don't know what else to do.I'm afraid to download another program because I have no idea who to trust. Right now I don't trust any random software. Is there a way to manually remove it? What are all the possible names this virus goes by? I will search every file individually until I find it.Desperately looking for all possible file names for this virus, Angela I don’t see these files in the registry. Maleware doesn’t see it, nor does anything else I’ve run. I’ve had this for MONTHS. I am about to pull my hair out. I don’t know what else to do.

I’m afraid to download another program because I have no idea who to trust. Right now I don’t trust any random software. Is there a way to manually remove it? What are all the possible names this virus goes by? I will search every file individually until I find it.

Desperately looking for all possible file names for this virus,
Angela

]]> By: hidnragehttp://www.precisesecurity.com/trojan/backdoortidserv#comment-6587 hidnrage Mon, 05 Jul 2010 16:42:29 +0000 http://www.precisesecurity.com/threats/backdoortidserv/#comment-6587 picked it up while browsing wowwiki.com. it wouldnt let me run any programs at all kept throwing out prompt saying everything was infected n shutn it down.however ya do it get hold of autoruns for windows. this program allows ya to see hidden entries in registry. boot into safe mode run autoruns. hit esc to cancel scan. go to Options check the option to hide microsoft entries then start the scan. look under the Everything tab. ull see a random entry like XCVSDWERWE.exe or somethin with no publisher name. delete it and reboot.go to options in ur browswer of choice and disable the proxy server setting av setup. then dl and run Malware Bytes to move any misc bits of the program picked it up while browsing wowwiki.com. it wouldnt let me run any programs at all kept throwing out prompt saying everything was infected n shutn it down.

however ya do it get hold of autoruns for windows. this program allows ya to see hidden entries in registry. boot into safe mode run autoruns. hit esc to cancel scan. go to Options check the option to hide microsoft entries then start the scan. look under the Everything tab. ull see a random entry like XCVSDWERWE.exe or somethin with no publisher name. delete it and reboot.

go to options in ur browswer of choice and disable the proxy server setting av setup. then dl and run Malware Bytes to move any misc bits of the program

]]> By: Alhttp://www.precisesecurity.com/trojan/backdoortidserv#comment-5633 Al Fri, 02 Apr 2010 00:54:10 +0000 http://www.precisesecurity.com/threats/backdoortidserv/#comment-5633 i think run it in safe mode with networking then run a synmantec scan i tried that and now my computer works better than my first day using it i think run it in safe mode with networking then run a synmantec scan i tried that and now my computer works better than my first day using it

]]> By: Alhttp://www.precisesecurity.com/trojan/backdoortidserv#comment-5632 Al Fri, 02 Apr 2010 00:54:10 +0000 http://www.precisesecurity.com/threats/backdoortidserv/#comment-5632 i think run it in safe mode with networking then run a synmantec scan i tried that and now my computer works better than my first day using it i think run it in safe mode with networking then run a synmantec scan i tried that and now my computer works better than my first day using it

]]> By: Sly_Old_Molehttp://www.precisesecurity.com/trojan/backdoortidserv#comment-5514 Sly_Old_Mole Sun, 21 Mar 2010 13:33:03 +0000 http://www.precisesecurity.com/threats/backdoortidserv/#comment-5514 I have remove this many times & this is my way.First run: Norman TDSS Cleaner: norman.com/support/support_tools/77201/en &/or How to remove the TDSS, TDL3, or Alureon rootkit using TDSSKiller: bleepingcomputer.com/virus-removal/remove-tdss-tdl3-alureon-rootkit-using-tdsskiller I have remove this many times & this is my way.

First run:
Norman TDSS Cleaner:
norman.com/support/support_tools/77201/en
&/or
How to remove the TDSS, TDL3, or Alureon rootkit using TDSSKiller:
bleepingcomputer.com/virus-removal/remove-tdss-tdl3-alureon-rootkit-using-tdsskiller

]]> By: Pjhttp://www.precisesecurity.com/trojan/backdoortidserv#comment-4457 Pj Sun, 20 Dec 2009 12:08:07 +0000 http://www.precisesecurity.com/threats/backdoortidserv/#comment-4457 Bit defender never sorted out anything as it was already infected by Backdoor.Tidserv.I had symantec online scanner to perform a full scan and it detected Backdoor.Tidserv plus Trojan.ByteVerify.My hotmail was attacked. The password was changed and every single detail inside such as secret question and date of birth.recommend not to go through anything serious something as your bank account soon you get suspicious. Bit defender never sorted out anything as it was already infected by Backdoor.Tidserv.I had symantec online scanner to perform a full scan and it detected Backdoor.Tidserv plus Trojan.ByteVerify.

My hotmail was attacked. The password was changed and every single detail inside such as secret question and date of birth.

recommend not to go through anything serious something as your bank account soon you get suspicious.

]]> By: Trevorhttp://www.precisesecurity.com/trojan/backdoortidserv#comment-4425 Trevor Mon, 14 Dec 2009 17:50:04 +0000 http://www.precisesecurity.com/threats/backdoortidserv/#comment-4425 I have this virus too And Malwarebytes doesn't see it let alone remove. Also I can't start in safe mode - I get the blue screen & it reboots.Can someone post updated instructions?Thanks for your help. I have this virus too And Malwarebytes doesn’t see it let alone remove.
Also I can’t start in safe mode – I get the blue screen & it reboots.

Can someone post updated instructions?

Thanks for your help.

]]> By: Cheaterhttp://www.precisesecurity.com/trojan/backdoortidserv#comment-3980 Cheater Thu, 15 Oct 2009 11:18:22 +0000 http://www.precisesecurity.com/threats/backdoortidserv/#comment-3980 You are all waisting your time. Just forget to remove this virus You are all waisting your time. Just forget to remove this virus

]]> By: Hugohttp://www.precisesecurity.com/trojan/backdoortidserv#comment-2938 Hugo Sun, 05 Jul 2009 06:45:59 +0000 http://www.precisesecurity.com/threats/backdoortidserv/#comment-2938 I'm also having trouble with this virus. I tried following the instructions up top, but I can't even turn off 'system restore'. When I right click 'My computer' in order to turn off 'system restore', nothing happens.I've also downloaded malwarebytes, but when I try to install it, I get a fake, though official looking, pop up saying the application is infected and won't start to prevent trouble.I really don't know what to do. Can anyone help? I’m also having trouble with this virus. I tried following the instructions up top, but I can’t even turn off ‘system restore’. When I right click ‘My computer’ in order to turn off ‘system restore’, nothing happens.

I’ve also downloaded malwarebytes, but when I try to install it, I get a fake, though official looking, pop up saying the application is infected and won’t start to prevent trouble.

I really don’t know what to do. Can anyone help?

]]> By: Bekahhttp://www.precisesecurity.com/trojan/backdoortidserv#comment-2846 Bekah Thu, 18 Jun 2009 17:00:33 +0000 http://www.precisesecurity.com/threats/backdoortidserv/#comment-2846 My system just recovered from this virus, Norton should automatically detect and remove the main part but it drops other viruses onto the system before this happens. One of those blocked me from using anti virus software such as Malwarebytes and Spybot Search and Destroy. System restore was also prevented from working. I managed to remove the virus and the results of the other viruses connected to it by using ComboFix then doing full scans with Malwarebytes, Norton and spybot.Please note these virus also drops key-loggers so if you did visit any websites such as your bank account, paypal, ebay etc. I suggest checking them from another machine and changing their details and do not revisit them until the virus on your main machine is gone. My system just recovered from this virus, Norton should automatically detect and remove the main part but it drops other viruses onto the system before this happens. One of those blocked me from using anti virus software such as Malwarebytes and Spybot Search and Destroy. System restore was also prevented from working. I managed to remove the virus and the results of the other viruses connected to it by using ComboFix then doing full scans with Malwarebytes, Norton and spybot.

Please note these virus also drops key-loggers so if you did visit any websites such as your bank account, paypal, ebay etc. I suggest checking them from another machine and changing their details and do not revisit them until the virus on your main machine is gone.

]]>