Help - Search - Members - Calendar
Full Version: help in removing Tibick P2P worm
BleepingComputer.com > Security > AntiVirus, Firewall and Privacy Products and Protection Methods
   
beachfandan
I have an infected PC running Win 2000 and Zone Alarm firewall and antivirus. I opened a small executable program named ListMakerCrack.exe and firewall indicated an attempt to access web. I searched the name of the program listed by firewall, svcnet.exe and found it to be Tibick worm. It apparently replicated and filled 2GB left on hard drive. When I killed this with Task Manager the replicating itself stopped. I have run a full system scan which didn't detect it. I have run online Housecall from Trend Micro and attempted Panda software's online scanner but it immediately indicated scan complete, nothing found. I have read that the virus is able to disable some virus scan programs.
I have the machine on a home Ethernet and other computers are not affected. I have not rrun adware programs as I feel pretty confident this is correct virus ID based on name of application and behavior stopped when I disabled it. I was already offloading files in preparation of reformatting and installing Win XP, but still have some things I'd like to get off, though none are irreplaceable.
Any ideas for removal? If I go ahead and reformat, can I be assured that virus is removed? Any ideas???

Thanks,
Dan
Grinler
Create a directory on your hardrive to save HijackThis.exe. A directory like c:\hijackthis. If you do not do this, you will not be able to use the backup/restore features.

Download HijackThis from:

HijackThis Download Site

Save this file into the directory you made previously and then run the program named hijackthis.exe. When the program opens click on the Config button, then click on the Misc Tools button, and click on the Check for update online button. When it completes checking/applying updates press the back button.

Now click on the Scan button and when it is finished click on the Save Log button. A Notepad window will open with the contents of this log. Click on Edit then click on Select all. Then click on Edit and then Click on Copy.

Create a reply to this post here and right click in message area and select paste to paste the log into the post.

Someone will reply to you after reading this post. DO NOT fix any entries unless you understand what you are doing.

To see a tutorial with screenshots on using HijackThis you can click on the link below:

How to use HijackThis to remove Browser Hijackers, Malware, & Spyware
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2008 Invision Power Services, Inc.