I have a "Backdoor.Tidserve!inf virus on my

Do a system restore back about a week.
You'll probably have to do it in safe mode.

It is virus which uses autorun feature of the removable devices such as USB Pen Drive. These type of viruses usually have two files. (a) autorun.inf and (b) the executable (.exe) or script file. Some Antivirus programs delete the exe file but the autorun files remains. In your case, the exe file (rahul's virus protection.vbe) has been removed but the autorun entry is there, which is run everytime you try to access your pen drive. First, plug-in the drive and DONT OPEN IT. Open 'My Computer' , right click the pen drive and choose explore. (This would by-pass the autorun feature).

Download Flash Disinfector and save it to your desktop. Double-click Flash Disinfector.exe to run it and follow any prompts that may appear. The utility may ask you to insert your flash drive. Please do so and allow the utility to clean up those drives as well. Wait until it has finished scanning and then exit the program.
Reboot your computer when done.

(Flash_Disinfector will remove any autorun.inf files, create a hidden folder named autorun.inf in each partition and every USB drive plugged in when you ran it. Don't delete this folder. It will help protect your drives from future infection)


Let me know if any further clarification/ assistance is required.

Good Luck!
Appreciate generously, if the solution could have been of any help!
CreativeTECH

Your best bet is to reimage the machine. Even if you get rid of the virus you also get rid of the file(s) it infected. That means those files are no longer available to run and they typically are critical system files. Viruses will hide and then repopulate if you don't completely format and put a clean image on the system. Because you probably don't want to loose all of your data you will want to back it up. Here is another problem because some of that data could be infected as well. I recommend removing the hard drive and use another computer that has a good anti-virus system, backing up your data to another device. Be sure to check your email files because they can bring a virus into your system. Chasing a virus can be frustrating and ultimately unsuccessful. Bite the bullet and give yourself a clean system.

you may have a virus which is possibly resident on your flash drive.
Lately virus have been attacking flash drives and being spread to computer.
look in your drive for autorun.ini autorun.inf desktop.ini
if your see these files your infected and will need to take steps to get rid of the virus.
do a search for "flash drive virus" in gogole and see what comes up

How to remove the virus:
first download taskiller in here or here and install it to your computer because you can’t use task manager to terminate the virus(the virus automatically close task manager).

run taskiller and left click it on the system tray(the one with a skull icon)
click processes
to close the virus, select process and click yes to the question
(process to close)

1. killer.exe
2. lsass.exe
3. smss.exe

note: close only file that have the same icon of Funny UST Scandal.avi.exe
CMD STEPS

1. now, click “start” then “run”
2. type “cmd” without quotes
3. type “cd\” without quotes
4. type “attrib -h -s smss.exe” without quotes
5. type “attrib -h -s autorun.inf” without quotes
6. type “start c:” without quotes (a new window will open)
7. select smss.exe, autorun.inf, Funny UST Scandal.avi.exe and delete it

If theres any drive or a partition type “d:” in command prompt without quotes “d” is the drive letter then repeat the CMD STEPS number 4-7 above…….

• now type this on the command prompt “cd windows” without quotes.
• type “attrib -h -s smss.exe” (without quotes)
• type “start c:\windows” (without quotes)
• delete the file smss.exe
• now, goto c:\documents and settings\all users\startmenu\programs\startup
• delete lsass.exe

click “start” then “run”
type “regedit” without quotes then delete the registry entries above….
“VIRUS REMOVE”
Or just simply download this UST VIRUS REMOVER (not tested)

How to remove this virus:

-first download taskiller in http://www.rsdsoft.com/task_killer
and install it to your computer because you cant use taskmanager to terminate the virus(the virus automatically close taskmanager).

-run taskiller and left click it on the system tray(the one with a skull icon)

-click processes

-to close the virus, select process and click yes to the question

(process to close)
1.killer.exe
2.lsass.exe
3.smss.exe

note: close only file that have the same icon of Funny UST Scandal.avi.exe


CMD STEPS
1-now, click "start" then "run"
2-type "cmd" without quotes
3-type "cd\" without quotes
4-type "attrib -h -s smss.exe" without quotes
5-type "attrib -h -s autorun.inf" without quotes
6-type "start c:" without quotes(a new window will open)
7-select smss.exe,autorun.inf,Funny UST Scandal.avi.exe and delete it

-if theres any drive or a partition type "d:" in command prompt without quotes
"d" is the drive letter then repeat the CMD STEPS number 4-7 above.......

-now type this on the command prompt "cd windows" without quotes(na naman!)
-type "attrib -h -s smss.exe" without quotes(uli)
-type "start c:\windows" without quotes(hay naku!)
-delete the file smss.exe
-now, goto c:\documents and settings\all users\startmenu\programs\startup
-delete lsass.exe

-click "start" then "run"
-type "regedit" without quotes then delete the registry entries above....

Hope this helps!

Brad Nelson

I done research on this but not tested to my computer ..just try this remover created in philippines . this the link: http://www.geocities.com/six519/Remover.zip may this help.

1. Start Notepad
2. Copy the following text. (note: Everything in between the square brackets should be in one line)

REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf]
@="@SYS:DoesNotExist"


3. Save the file with a name (anything) like DisableAutoRun.reg (The extension .reg is the important part)
4. Double Click your newly created registry file. Choose yes or continue to the warning that will appear.


But what if you are already infected with the virus? There are several programs on the internet that you can download. Here are some of those programs that can be helpful:

Taga Lipa Are Remover (or Noob Killer) by Leerz (<--click to download)

else

first download taskiller in http://www.rsdsoft.com/task_killer/index... and install it to
your computer because you cant use taskmanager to terminate the virus(the virus automatically close taskmanager).

-run taskiller and left click it on the system tray(the one with a skull icon)

-click processes

-to close the virus, select process and click yes to the question

(process to close)
1.killer.exe
2.lsass.exe
3.smss.exe

note: close only file that have the same icon of Funny UST Scandal.avi.exe


CMD STEPS
1-now, click "start" then "run"
2-type "cmd" without quotes
3-type "cd\" without quotes
4-type "attrib -h -s smss.exe" without quotes
5-type "attrib -h -s autorun.inf" without quotes
6-type "start c:" without quotes(a new window will open)
7-select smss.exe,autorun.inf,Funny UST Scandal.avi.exe and delete it

-if theres any drive or a partition type "d:" in command prompt without quotes
"d" is the drive letter then repeat the CMD STEPS number 4-7 above.......

-now type this on the command prompt "cd windows" without quotes(na naman!)
-type "attrib -h -s smss.exe" without quotes(uli)
-type "start c:\windows" without quotes(hay naku!)
-delete the file smss.exe
-now, goto c:\documents and settings\all users\startmenu\programs\startup
-delete lsass.exe

-click "start" then "run"
-type "regedit" without quotes then delete the registry entries above....

-thats all

(* from support forume)

try using bitdefender anti virus. it removes most of the viruses with no strings attached