Video Screencast Help

False Positive Virus Threat Message

Created: 18 Dec 2011 | 2 comments

Hello. Not sure if I am posting my question in the right area (if not, please advise on where to post? Thanks).

My Norton Antivirus 360 scanning protection program keeps telling me I have a "Threat requiring manual removal detetected: System Infected: Tidserv Activity and Tidserv Activity 2" (a nasty Trojan virus that keeps redirecting any internet searches by open tabs at random and going to uncommanded websites).

I have gone through the Norton Power Eraser and all the steps on how to remove including Rootkit and uploading new definitions of viruses for Norton to recognized, rebooted and repeated. 

The next message displayed is Norton saying Tidserv Activity is not found on my computer.

Then the "Threat" message appears again and does not go away. I have repeated the steps on how to remove the virus manually, 3 times.  I have also used Spybot, RKill, Norman, Malware Bytes and MacAfee to try to remove this nasty virus all to no avail!

Is it possible this is a False Positive error  by Norton, as in mentioned in the manual step removal process page?

Comments 2 CommentsJump to latest comment

Thomas K's picture

Try running the Backdoor.Tidserv Removal Tool (FixTDSS.exe), found here -

BTW, the best place for Norton help is in the Norton Forums. This community is for Enterprise Product support.

Best regards,


Mick2009's picture

Symantec Security Response has just released a new white paper on Rootkits and their removal.

With thanks and best regards,