Question about tdserver.ocx file

[Sandy J]

I'm running Windows XPPro service pack 2
Pentium(R) 4 CPU 2.53GHz
2.53 GHz, 1.50 GB of Ram with approx 75% free space.
Internet Explorer7
All updates are current.

My Avast antivirus gave me a popup warning, it said:
Sign of "Win32:Adware-gen[ADW]" has been found in "C:\WINDOWS\Downloaded
Program Files\tdserver.ocx" file.
It adivsed that I put tdserver.ocx in the virus chest which I did. I did a
Google search but could not find any information on whether that file is
needed.

My question is: Does anyone know anything about this file and is needed for
anything important and if it is needed where/how can I get an uninfected
copy and replace it?

Sandy

 

[Elmo]

I'm running Windows XPPro service pack 2
Pentium(R) 4 CPU 2.53GHz
2.53 GHz, 1.50 GB of Ram with approx 75% free space.
Internet Explorer7
All updates are current.

My Avast antivirus gave me a popup warning, it said:
Sign of "Win32:Adware-gen[ADW]" has been found in "C:\WINDOWS\Downloaded
Program Files\tdserver.ocx" file.
It advised that I put tdserver.ocx in the virus chest which I did. I did a
Google search but could not find any information on whether that file is
needed.

My question is: Does anyone know anything about this file and is needed for
anything important and if it is needed where/how can I get an uninfected
copy and replace it?

You couldn't find it because it's malware. Just delete it.

 

[Script]

Using Lycos search engine, says its most likely an outdated "Font" loader.

For this person, Japanese fonts: (this is part of their Hijack This Log):

[TDServer Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\tdserver.ocx
CODEBASE = http://plaza14.mbn.or.jp/~katakana/wfplayer/tdserver.cab

Person interpreting the log, said this:
The following entries are Japanese related files. Can you confirm that you
use Japanese or other Asian character sets for any of your programs/games?

O6 - DPF: {0246ECA8-996F-11D1-BE2F-00A0C9037DFE} (TDServer Control) -
http://plaza14.mbn.or.jp/~katakana/wfplayer/tdserver.cab


[Other posts say it could also be almost *any* bitstream font.]

Can't vouch for them, but here's Bitstream's link:
http://www.bitstream.com/fonts/index.html

 

[Patrick Keenan]

I'm running Windows XPPro service pack 2
Pentium(R) 4 CPU 2.53GHz
2.53 GHz, 1.50 GB of Ram with approx 75% free space.
Internet Explorer7
All updates are current.

My Avast antivirus gave me a popup warning, it said:
Sign of "Win32:Adware-gen[ADW]" has been found in "C:\WINDOWS\Downloaded
Program Files\tdserver.ocx" file.
It adivsed that I put tdserver.ocx in the virus chest which I did. I did
a
Google search but could not find any information on whether that file is
needed.

My question is: Does anyone know anything about this file and is needed
for
anything important and if it is needed where/how can I get an uninfected
copy and replace it?

Sandy

Well, the "td" stands for TrueDoc, and it's supposed to be a product from
Bitstream, a digital font manufacturer.

http://www.bitstream.com/font_rendering/products/truedoc/index.html

Did you download and install anything recently that uses Bitstream fonts or
technology? Any kind of publishing program or utility?

It's possible that the file is infected or that it's a false positive.
Try re-downloading the publishing utility and if you get the same popup,
scan the file with another A/V program, such as the online scanner at
http://housecall.trendmicro.com.

You could also contact Bitstream support with the statistics of the file,
asking if it can be verified.

HTH
-pk

 

[Patrick Keenan]

I'm running Windows XPPro service pack 2
Pentium(R) 4 CPU 2.53GHz
2.53 GHz, 1.50 GB of Ram with approx 75% free space.
Internet Explorer7
All updates are current.

My Avast antivirus gave me a popup warning, it said:
Sign of "Win32:Adware-gen[ADW]" has been found in "C:\WINDOWS\Downloaded
Program Files\tdserver.ocx" file.
It advised that I put tdserver.ocx in the virus chest which I did. I did
a
Google search but could not find any information on whether that file is
needed.

My question is: Does anyone know anything about this file and is needed
for
anything important and if it is needed where/how can I get an uninfected
copy and replace it?

You couldn't find it because it's malware. Just delete it.

It's actually easy to find information on that file, the TrueDoc server
control. While the copy may be infected, it may come from WebFont Player
(wfplayer).

In fact there's almost an explicit reference to it here, with removal
instructions:

http://www.bitstream.com/fonts/support/webfont_support/reloading.html
"Open the "Downloaded Program Files" folder
Right click on the file: "TDServer Control". On the pop-up menu, choose
Remove "

HTH
-pk

 

[Sandy J]

I'm running Windows XPPro service pack 2
Pentium(R) 4 CPU 2.53GHz
2.53 GHz, 1.50 GB of Ram with approx 75% free space.
Internet Explorer7
All updates are current.

My Avast antivirus gave me a popup warning, it said:
Sign of "Win32:Adware-gen[ADW]" has been found in "C:\WINDOWS\Downloaded
Program Files\tdserver.ocx" file.
It advised that I put tdserver.ocx in the virus chest which I did. I did
a
Google search but could not find any information on whether that file is
needed.

My question is: Does anyone know anything about this file and is needed
for
anything important and if it is needed where/how can I get an uninfected
copy and replace it?

You couldn't find it because it's malware. Just delete it.

 

[Sandy J]

I'm running Windows XPPro service pack 2
Pentium(R) 4 CPU 2.53GHz
2.53 GHz, 1.50 GB of Ram with approx 75% free space.
Internet Explorer7
All updates are current.

My Avast antivirus gave me a popup warning, it said:
Sign of "Win32:Adware-gen[ADW]" has been found in "C:\WINDOWS\Downloaded
Program Files\tdserver.ocx" file.
It advised that I put tdserver.ocx in the virus chest which I did. I did
a
Google search but could not find any information on whether that file is
needed.

My question is: Does anyone know anything about this file and is needed
for
anything important and if it is needed where/how can I get an uninfected
copy and replace it?

You couldn't find it because it's malware. Just delete it.

It's actually easy to find information on that file, the TrueDoc server
control. While the copy may be infected, it may come from WebFont Player
(wfplayer).

In fact there's almost an explicit reference to it here, with removal
instructions:

http://www.bitstream.com/fonts/support/webfont_support/reloading.html
"Open the "Downloaded Program Files" folder
Right click on the file: "TDServer Control". On the pop-up menu, choose
Remove "

HTH
-pk

----------------------------------------------

Thanks Patrick...
The file has been removed to the antivirus chest by Avast so it's no longer
in There. I just want to make sure it's not needed before I delete it. I
tried installing a font to my windows folder and it installed OK so it's not
needed to install fonts.
Sandy

 

[Sandy J]

I have downloaded some fonts recently but not Japanese or other Asian
character sets... I guess I'll just leave it in the virus chest.

Thanks Script.
Sandy

Using Lycos search engine, says its most likely an outdated "Font" loader.

For this person, Japanese fonts: (this is part of their Hijack This Log):

[TDServer Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\tdserver.ocx
CODEBASE = http://plaza14.mbn.or.jp/~katakana/wfplayer/tdserver.cab

Person interpreting the log, said this:
The following entries are Japanese related files. Can you confirm that you
use Japanese or other Asian character sets for any of your programs/games?

O6 - DPF: {0246ECA8-996F-11D1-BE2F-00A0C9037DFE} (TDServer Control) -
http://plaza14.mbn.or.jp/~katakana/wfplayer/tdserver.cab


[Other posts say it could also be almost *any* bitstream font.]

Can't vouch for them, but here's Bitstream's link:
http://www.bitstream.com/fonts/index.html

 

[Sandy J]

I'm running Windows XPPro service pack 2
Pentium(R) 4 CPU 2.53GHz
2.53 GHz, 1.50 GB of Ram with approx 75% free space.
Internet Explorer7
All updates are current.

My Avast antivirus gave me a popup warning, it said:
Sign of "Win32:Adware-gen[ADW]" has been found in "C:\WINDOWS\Downloaded
Program Files\tdserver.ocx" file.
It adivsed that I put tdserver.ocx in the virus chest which I did. I did
a
Google search but could not find any information on whether that file is
needed.

My question is: Does anyone know anything about this file and is needed
for
anything important and if it is needed where/how can I get an uninfected
copy and replace it?

Sandy

Well, the "td" stands for TrueDoc, and it's supposed to be a product from
Bitstream, a digital font manufacturer.

http://www.bitstream.com/font_rendering/products/truedoc/index.html

Did you download and install anything recently that uses Bitstream fonts or
technology? Any kind of publishing program or utility?

It's possible that the file is infected or that it's a false positive.
Try re-downloading the publishing utility and if you get the same popup,
scan the file with another A/V program, such as the online scanner at
http://housecall.trendmicro.com.

You could also contact Bitstream support with the statistics of the file,
asking if it can be verified.

HTH
-pk
=============================================================
No, I haven't downloaded or installed anything that uses Bitstream fonts or
technology as far as I know .... I'll just leave it in quarantine for a
while and if everything is OK delete it later.
Sandy