We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Trojan:Win32/Tibs.IT
Detected by Microsoft Defender Antivirus
Aliases: Win32/Adware.SpywareProtect2009 (ESET) FakeAlert-C.dr (McAfee) Adware/SpywareProtect2009 (Panda) Troj/FakeVir-KR (Sophos) Trojan.Win32.FakeSpypro (other) SpywareProtect2009 (Symantec)
Summary
Trojan:Win32/Tibs.IT is a generic detection for files used across multiple pieces of malware affiliated with the Tibs malware family. Win32/Tibs malware typically use a particular method of code obfuscation in an attempt to avoid detection. The malware that lies "underneath" may have virtually any purpose.
To detect and remove this threat and other malicious software that may be installed in your computer, run a full-system scan with an up-to-date antivirus product such as the following:
For more information on antivirus software, see http://www.microsoft.com/windows/antivirus-partners/.