worm/tibick.b - Free Antivirus Forum

worm/tibick.b

BullGuard Antivirus Forum > Virus Removal > Removal Help > worm/tibick.b

Forum Quick Jump

[ << Previous Thread | Next Thread >> ]

Craig Mack
New Member

Date Joined Sep 2004
Total Posts : 7

Posted 10-22-2004 3:11 (GMT +1)

I am trying to remove the annoying worm that AVG keeps telling me to remove. Spy Sweeper cannot locate this worm, Adware cannot remove this virus either. If anyone has suggestions please let me know. Thanks Craig

Craig Mack
New Member

Date Joined Sep 2004
Total Posts : 7

Posted 10-22-2004 3:12 (GMT +1)

The name of the worm is tibick.b in case you did not catch that. Thanks Craig.

Touch
Forum Moderator

Date Joined Jun 2004
Total Posts : 13594

Posted 10-22-2004 5:57 (GMT +1)

Hey

Disable System Restore

http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm

Download this scanner: http://www.mwti.net/antivirus/free_utilities.asp
Use link nr.7 Activate all in settings-Scan

Scan using online scan - http://housecall.antivirus.com/housecall/start_corp.asp
If clean, run again using another online scan:
http://www.pandasoftware.es/activescan/activescan-com.asp to confirm the system is clean.

Reboot. Enable system restore again.

Touch

Member of - Alliance of Security Analysis Professionals

Craig Mack
New Member

Date Joined Sep 2004
Total Posts : 7

Posted 10-23-2004 8:42 (GMT +1)

Nothing came up. The scans did not find any infected files.

Touch
Forum Moderator

Date Joined Jun 2004
Total Posts : 13594

Posted 10-23-2004 10:17 (GMT +1)

Still have the virus? If you have a location on it, please tell excactly where it is, in your next reply

Touch

Member of - Alliance of Security Analysis Professionals

FunkyDunc
New Member

Date Joined Oct 2004
Total Posts : 2

Posted 10-30-2004 1:17 (GMT +1)

I am getting a similar problem. AVG can see the worm/tibick.b in c:\windows\system32\svcnet.exe but can't remove it. I tried running the scanner from mwti, but it hasa read error on that file. Can anyone help?

FbOooM
New Member

Date Joined Nov 2004
Total Posts : 1

Posted 11-6-2004 6:51 (GMT +1)

I am having the same problem with this virus. Used PC cillin and it comes up clean, also used the online virus scanners and nothing, but it continues to come up everytime. It gets Quarantined by PC cillin and i delete the file, but it seems to return. Says the file is located at, "C:\System Volume Information\_restore{AF7CCD9D-739C-426F-8028-20D0AA5C90B3}\RP63\A0019468.exe".

Anyone have any ideas?

Thanks

Touch
Forum Moderator

Date Joined Jun 2004
Total Posts : 13594

Posted 11-7-2004 10:52 (GMT +1)

Hey

Disable System Restore

http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm

Run Avirus. Reboot, enable system restore

Touch

Member of - Alliance of Security Analysis Professionals

FunkyDunc
New Member

Date Joined Oct 2004
Total Posts : 2

Posted 11-8-2004 7:02 (GMT +1)

Ye, disabling system restore, then running a virus scanner was the answer, thanks. Now must remember to turn system restore back on....

Forum Information

Currently it is Thursday, November 20, 2008 5:28 PM (GMT +1)
There are a total of 63.934 posts in 15.821 threads.
In the last 3 days there were 32 new threads and 157 reply posts. View Active Threads

Who's Online

This forum has 27177 registered members. Please welcome our newest member, fillon.
50 Guest(s), 1 Registered Member(s) are currently online. Details
Behram

5 Latest Threads

Malware.Trace / Trojan.Vundo - PLEASE HELP CAN'T REMOVE!! (4)	20-11-2008 15:38:00 (patel121)
Redirecting problems (4)	20-11-2008 15:20:37 (james115511)
Performance dive (8)	20-11-2008 13:25:02 (Mort)
Win 32-trojan-gen (13)	20-11-2008 12:16:45 (Touch)
Generic.PWS.WoW.B7078E0 (12)	20-11-2008 11:22:12 (Behram)

Need Support? Write to:

| Forum Help Manual

Download free trial version of Bullguard