My in-laws' computer is apparently infected with Packed.Win32.Tibs, and their antivirus can't disinfect...

Question

They were using an outdated Symantec product, but I installed the Charter Communications High-Speed Security Suite (F-Secure). They had a recurring virus message before, and now after installing the new security suite, they are still getting a message that the antivirus program cannot disinfect "Packed. Win32. Tibs". What is the best way to get rid of this trojan? Thanks!

Answer 1

Try rebooting into "Safe mode" -- F8 when the computer boots, then rerun the virus scanner.

Answer 2

2

Answer 3

Try FREE Sysclean.com and its Virus definition from Trend Micro.

Run in Safe Mode. Any viruses or trojans found will be deleted.

Alternatively go surfing for a DOS booting virus scanner.

See here for info on "Packed. Win32.Tibs" trojan and the recovery procedures:

http://www.sophos.com/virusinfo/analyses/trojtibsz.html

http://www.sophos.com/support/disinfection/trojan.html

Answer 4

According to F-Secure:
Packed.Win32 is the designation for the generic detection of malicious software (trojans, backdoors, worms, adware) that is packed with certain sophisticated file compressors.

Manual Disinfection

F-Secure Anti-Virus may not be able to remove files, identified with the prefix Packed.Win32. automatically. So a user's action may be required to select proper disinfection action.

If a file, detected with the Packed.Win32. prefix is an executable with SCR, PIF, CMD, DLL or EXE extension, located in Windows, Windows System or in a root folder of C: drive, this file can be safely deleted or renamed. Here are the instructions on how to remove infected files that F-Secure Anti-Virus does not clean automatically:

http://support.f-secure.com/enu/home/virusproblem/howtoclean/howtodeleteinfectedfile.shtml

Generic malware disinfection instructions can be found here:

http://support.f-secure.com/enu/home/virusproblem/howtoclean/


In other words, in all likelihood a file being identified as Packed.Win32 can usually be deleted.

Answer 5

Oh dear - problems but possible solutions!

Read-up at these sites on the Trojan that your PC has been infected with.

http://www.sophos.com/security/analyses/index_p.html

http://www.sophos.com/security/analyses/search-results/?search=Packed.+Win32.+Tibs&action=search&x=64&y=12

http://www.f-secure.com/v-descs/packed.shtml

Answer 6

look at all the details ur anti virus program gives about it, and try to get the filepath, when u have the filepath, browse to it and tyr to delte it urself,

Answer 7

If you can find the location path, go to that spot and if it isn't there, your going to have to activate your hidden files. If it doesn't show up there, go into regedit.(If you don't know much about computers, don't do this last step.)

Answer 8

go to grisoft.com and download avg free.it will kick the trojens a*s out and lock it up in jail