Spyware Tibs.BrowserPlugin

[Guest]

Tibs.BrowserPlugin Dialer more information...
Details: Tib Browser profiles your browsing and shopping
habits online and displays popup advertising in Internet
Explorer.
Status: Removed
Severe threat - Severe-risk items have an extreme
potential for harm, such as a security exploit, and
should be removed.

Infected folders detected
e:\program files\websiteviewer


Detected Spyware Cookies
No spyware cookies were found during this scan.
THE ABOVE SPYWARE KEEPS GETTING REINSTALLED DURING EVERY
REBOOT EVEN THOUGH IT IS REMOVED USING THE
SOFTWARE.PLEASE HELP ME OUT.

 

[Andre Da Costa]

Thanks for the update.

 

[AndyManchesta]

Go to Symantecs site for removal instructions of this
parasite


http://securityresponse.symantec.com/avcenter/venc/data/di
aler.tibs.html


If you need more help let us know

Andy

 

[AndyManchesta]

Also run these free products in safe mode(Tapping F8 on
reboot)

Ad-Aware SE.......Install, click Check for Updates now
and get any updates, then exit.

http://www.majorgeeks.com/downloadget.php?
id=506&file=11&evp=8dbaff7daca8f4b55bf695220993fc0f

Spybot................Install, do the search for updates
now and get any updates, then exit.

http://www.majorgeeks.com/downloadget.php?
id=2471&file=11&evp=2470f9bfb0cc682334ff8c4459556118

Spybot - Search and Destroy DSO Exploit Fix - Install
this patch on top of Spybot to fix the DSO Exploit bug

http://www.majorgeeks.com/downloadget.php?
id=4392&file=1&evp=17a4645dc80f11461d8549719a9350e0


And to remove temp and unused files once you get rid of
this use Ccleaner

CCleaner.............Install only, then exit

http://majorgeeks.com/downloadget.php?
id=4191&file=11&evp=a12d758b021af1a4f0a6bfe45b0c7a82

I know Adaware targets this so you should be able to
delete this easily enough but reply if you have any
problems

Andy

 

[Bill Sanderson]

I hate sounding like a parrot, but please try Microsoft Antispyware in safe
mode.

If it identifies the threat, it should be able to remove it. I realize that
this additional step is not intuitive, but try it if you can spare the time.

 

[Andre Da Costa]

:-D Bill, you make me laugh.

 

[Bill Sanderson]

Well - it does seem to work a good part of the time. The odd thing is, this
can't be the design. In the work I've done, both with live machines and
test VPC's, I haven't needed safe mode cleaning, and the reviewers didn't
say they needed to do this to make the cleaning work.