Have Tibick!

  • Thread starter Thread starter spondee
  • Start date Start date
S

spondee

How do I get rid of it???

I've disabled the svc.exe w/firewall

but what about files, registry???

(And I'm really ticked as I was running AVG Free when I got it!!!)

Any help would be appreciated!

TIA...
 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

Hi spondee,

How do I get rid of it???

Tibick apparently comes in various flavors (A, B, C, etc.), so removal
procedures may vary a bit depending on the type you have.

Though I'm no great fan of NAV, Symantec's removal instructions
usually seem pretty comprehensive. So, for a start, you might look
here:

http://securityresponse.symantec.com/avcenter/venc/data/w32.tibick.html

Here are some specific A, B, and C pages:

A: http://www.sophos.com/virusinfo/analyses/w32tibicka.html

B: http://www3.ca.com/securityadvisor/virusinfo/virus.aspx?id=40789

C: http://www.sophos.com/virusinfo/analyses/w32tibickc.html

I'm sure a bit more googling will come up with more, but I need to
sleep now! :-)

Good luck!

- --
Melissa

PGP Public Keys: http://www.willkayakforfood.tk

-----BEGIN PGP SIGNATURE-----

iQCVAwUBQkZ7+jEYqNTZBqoEAQPDQgP+NZ+NgGUgm5bzR2HfKO7ORsmM4b7zku6w
RkMIP6ufF1BQG0nhnO2HUvr9Dypm93BBe5lk/Ct7Vr2UjNIV/R+dgj97B9tkToOf
iC622a7IQVDUhJGJQ13VGmWJDkqWXy1esulSI1rja481I018Ugb7utAt1ciNtfBt
O9vkPbxG0/4=
=RlHc
-----END PGP SIGNATURE-----
 
Tibick apparently comes in various flavors (A, B, C, etc.), so removal
procedures may vary a bit depending on the type you have.

Though I'm no great fan of NAV, Symantec's removal instructions

Melissa, Thanks.

My virus checker tells me I have Tibick.l (????) So I'll just proceed
with Symantic's instructions....
 
From: <[email protected]>

| On Sun, 27 Mar 2005 01:25:55 -0800, Melissa
|
| Melissa, Thanks.
|
| My virus checker tells me I have Tibick.l (????) So I'll just proceed
| with Symantic's instructions....
|

You can also try the TrendMicro Sysclean utility.
It is a broad-spectrum removal tool and targets this P2P infector.

1) Download the following two items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download SYSCLEAN.COM and place it in that directory.
Download the signature files (pattern files) by obtaining the ZIP file.
For example; lpt518.zip

Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM.

2) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
3) Reboot your PC into Safe Mode and shutdown as many applications as possible
4) Using the Trend Sysclean utility, perform a Full Scan of your platform and
clean/delete any infectors found
5) Restart your PC and perform a "final" Full Scan of your platform
6) If you are using WinME or WinXP, Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
7) Reboot your PC.
8) If you are using WinME or WinXP, create a new Restore point

* * Please report back your results * *
 
Back
Top