Follow:

You have been re-routed to the Trojan:Win32/Tibs.IT write up because Trojan%3aWin32%2fTibs.IT has been renamed to Trojan:Win32/Tibs.IT
 

Trojan:Win32/Tibs.IT


Trojan:Win32/Tibs.IT is a generic detection for files used across multiple pieces of malware affiliated with the Tibs malware family. Win32/Tibs malware typically use a particular method of code obfuscation in an attempt to avoid detection. The malware that lies "underneath" may have virtually any purpose.


What to do now

To detect and remove this threat and other malicious software that may be installed in your computer, run a full-system scan with an up-to-date antivirus product such as the following:
 
 
For more information on antivirus software, see http://www.microsoft.com/windows/antivirus-partners/.

Threat behavior

Trojan:Win32/Tibs.IT is a generic detection for files used across multiple pieces of malware affiliated with the Tibs malware family. Win32/Tibs malware typically use a particular method of code obfuscation in an attempt to avoid detection. The malware that lies "underneath" may have virtually any purpose.
 
Analysis by Elda Dimakiling

Symptoms

There are no common symptoms associated with this threat. Alert notifications from installed antivirus software may be the only symptom(s).

Prevention


Alert level: Severe
First detected by definition: 1.49.1841.0
Latest detected by definition: 1.173.2181.0 and higher
First detected on: Jan 12, 2009
This entry was first published on: Mar 09, 2009
This entry was updated on: Apr 17, 2011

This threat is also detected as:
  • Win32/Adware.SpywareProtect2009 (ESET)
  • FakeAlert-C.dr (McAfee)
  • Adware/SpywareProtect2009 (Panda)
  • Troj/FakeVir-KR (Sophos)
  • Trojan.Win32.FakeSpypro (other)
  • SpywareProtect2009 (Symantec)