Published Nov 16, 2010 | Updated Sep 15, 2017


Severe |Detected with Windows Defender Antivirus

Aliases: No associated aliases


Win32/Tibs describes a generic detection for files used across multiple pieces of malware affiliated with the 'Tibs' malware distribution network. Win32/Tibs malware typically use a particular method of code obfuscation in an attempt to avoid detection. The malware that lies "underneath" may have virtually any purpose.
Manual removal is not recommended for this threat. To detect and remove this threat and other malicious software that may have been installed, run a full-system scan with an up-to-date antivirus product such as the Microsoft Safety Scanner ( For more information, see
Follow us