what is TIBS C, trojan?

Hi All,

I am using CA spyware scan software provided by Verizon, after
scanning, TIBS C under category "Trijan" is found on my PC running MS
XP. But, I cannot remove it. Running Windown defender and Adware, none
of them detect such "Trojan" spyware, any idea what it is and is it
harmful?

CA has some information:
http://www.ca.com/securityadvisor/pe...x?id=453103844
And:
http://search.ca.com/search/ca?style...qt=TIBS+C&col=

Since this is a Windows Update newsgroup, you should ask further
questions in a more appropriate newsgroup such as one dealing with
viruses or security:
http://aumha.org/nntp.htm

You can also contact CA.

--
Jupiter Jones [MVP]
http://www3.telus.net/dandemar
http://www.dts-l.org


<> wrote in message
news: oups.com...
> Hi All,
>
> I am using CA spyware scan software provided by Verizon, after
> scanning, TIBS C under category "Trijan" is found on my PC running
> MS
> XP. But, I cannot remove it. Running Windown defender and Adware,
> none
> of them detect such "Trojan" spyware, any idea what it is and is it
> harmful?

From: <>

| Hi All,
|
| I am using CA spyware scan software provided by Verizon, after
| scanning, TIBS C under category "Trijan" is found on my PC running MS
| XP. But, I cannot remove it. Running Windown defender and Adware, none
| of them detect such "Trojan" spyware, any idea what it is and is it
| harmful?

Please learn what is considered "On Topic" and "Off Topic" for any given News Group.

Your subject matter is completely Off Topic and was posted n the WRONG location.
The PROPER place to post this kind of subject matter is...
News:microsoft.public.security.virus

As for your question, yes the Tibs Trojan may be considered harmful.
Trojans put you and your data at risk.

You can try using the following Multi AV Scanning Tool to remove the Tibs Trojan.


Download MULTI_AV.EXE from the URL --
http://www.pctipp.ch/downloads/dl/35905.asp

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file.

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *



--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

> Please learn what is considered "On Topic" and "Off Topic" for any given News Group.
>
> Your subject matter is completely Off Topic and was posted n the WRONG location.
> The PROPER place to post this kind of subject matter is...
> News:microsoft.public.security.virus
>
> As for your question, yes the Tibs Trojan may be considered harmful.
> Trojans put you and your data at risk.
>
> You can try using the following Multi AV Scanning Tool to remove the Tibs Trojan.
>
> Download MULTI_AV.EXE from the URL --http://www.pctipp.ch/downloads/dl/35905.asp
>
> To use this utility, perform the following...
> Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
> Choose; Unzip
> Choose; Close
>
> Execute; C:\AV-CLS\StartMenu.BAT
> { or Double-click on 'Start Menu' in C:\AV-CLS }
>
> NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
> FireWall to allow it to download the needed AV vendor related files.
>
> C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
> This will bring up the initial menu of choices and should be executed in Normal Mode.
> This way all the components can be downloaded from each AV vendor's web site.
> The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.
>
> You can choose to go to each menu item and just download the needed files or you can
> download the files and perform a scan in Normal Mode. Once you have downloaded the files
> needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
> during boot] and re-run the menu again and choose which scanner you want to run in Safe
> Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.
>
> When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
> file.
>
> Additional Instructions:http://pcdid.com/Multi_AV.htm
>
> * * * Please report back your results * * *
>
> --
> Davehttp://www.claymania.com/removal-trojan-adware.htmlhttp://www.ik-cs.com/got-a-virus.htm

Thanks Dave. I did search the news group before I posted. There was a
thread about this virus discussed in this group. Anyway, I did follow
the instruction you provided and scan my PC and unfortunately, the
virus is still there, and Multi_av doesn't remove it or detect it.
What should I do next?

From: <>


|
| Thanks Dave. I did search the news group before I posted. There was a
| thread about this virus discussed in this group. Anyway, I did follow
| the instruction you provided and scan my PC and unfortunately, the
| virus is still there, and Multi_av doesn't remove it or detect it.
| What should I do next?



Download and execute HiJack This! (HJT)
http://www.spywareinfo.com/~merijn/files/HijackThis.exe

Create a HJT log file and post it in one of the below locations...

{ Please - Do NOT post the HJT Log here ! }

Forums where you can get expert advice for HiJack This! (HJT) logs.

NOTE: Registration is REQUIRED in any of the below before posting a log

Suggested primary:
http://www.thespykiller.co.uk/index.php?board=3.0

Suggested secondary:
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html

Suggested tertiary:
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/...splay.php?f=25
http://www.atribune.org/forums/index.php?showforum=9
http://www.geekstogo.com/forum/Malwa..._Here-f37.html
http://gladiator-antivirus.com/forum...?showforum=170
http://forum.networktechs.com/forumdisplay.php?f=130
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.subratam.org/index.php?showforum=7
http://www.5starsupport.com/ipboard/...p?showforum=18
http://www.malwarebytes.org/forums/i...hp?showforum=7
http://makephpbb.com/phpbb/viewforum.php?f=2
http://forums.techguy.org/54-security/
http://forums.security-central.us/forumdisplay.php?f=13


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm