Win32:Tibs-EOE[Trj]

Viruses and worms
1

My Avast! Anti-Virus software has been continuously blocking the same trojan horse virus, which bears the name listed in the subject of this post. It keeps sending the trojan to the Virus Chest and saying that no further action is required, but I am still having issues with my computer. I have updated Avast and run a full system scan twice, resolving all problems. However, I am still unable to run programs such as Internet Explorer. If I try to open it, a page will appear saying that it is unsafe to open the program and prompts me to use another Anti-Virus software. I assume that this is part of the virus, but it is, in any case, keeping me from using the Internet and other programs. How can I completely terminate this virus?

Thank you,
BCD

2

Have you tried avast boot scan?
http://sites.google.com/site/spg20scottsweb/home/avast-5-boot-time-scan

Malwarebytes Anti-Malware 1.46 http://filehippo.com/download_malwarebytes_anti_malware/
always run update before you scan so you have the latest database
click the remove selected button to quarantine anything found
you may post the scan log here

If you are blocked for installing Malwarebytes, try this
Hitman Pro 3 - Second Opinion Malware Scanner (30 day free removal) http://www.surfright.nl/en/hitmanpro
Hitman Pro in Force Breach Mode http://hitmanpro.wordpress.com/2010/03/16/hitman-pro-in-force-breach-mode/

3

What is the infected file name, where was it found e.g. (C:\windows\system32\infected-file-name.xxx) ?

Is this the same file name and location on each detection ?

4

I am having the same issues. I got this last night and avast keeps putting the virus in the virus chest. I clean out the chest and it keeps filling up with the same virus from the same location:
C:\Users\Jamie\AppData\Local\Temp\eapp32hst.dll

Any help would be appreciated.

5

Same file name also or is it in a similar format or completely random ?

If it keeps coming back, there is likely to be an undetected or hidden element to the infection that restores or downloads the file again. What is your firewall ?

So if you haven’t downloaded, updated and run MBAM as suggested, that is your next step and post the contents of the log/report file.

6

Same problem here, too. DavidR, it is the same filename each time the “Trojan Horse Blocked” dialog box comes up:
C:\Documents and Settings\my name\LOCALS\Temp\eapp32hst.dll

I ran a full scan and Avast says it found 2 viruses and fixed them but the message keeps reappearing…
Thanks…

7

You also need to download and run MalwareBytes AntiMalware (MBAM) and post the contents of the report to see if it can find what might be restoring/recreating it.

8

I have the exactly the same problem today. Did the MBAM fix this?

9

Hi all,
I’ve had exactly the same problem contiuously all day today with literally hundreds of “Trojan Horse Blocked” alerts.

Also I can’t open any of my Browsers to get email or dowload the Programs suggested.

How can I get rid of this continuous virus beibg unable to use any browsers?

Thank you for any help and advice anyone can provide.

I am using my Laptop to send this message and view the Forum.

Kind regards,

John Williamson

10

Another day looks like being plagued by this Win32:Tibs-EOE[Trj], as as soon as my system has booted up the Continual blocking begins.

Can anyone tell me how I can Download and Run MBAM on my computer and any other recommended solutions when I can’t access any of my Browsers?

Thank you for any urgent help or advice anyone can provide.

Kind regards,

John Williamson

11

i’m also having the same problem.

about 30 minutes ago it just popped up and since i’ve gotten (if i had to guess) about 100 pop ups.

they’re all in the same location.
the name always starts out Win32 and thats about all i know right now.

any help is GREATLY appreciated.

12

ok so i just downloaded that MBAM and i ran a quick scan and it found 4 infections and removed them.

it restarted and i’ve been back online for about 5 minutes now and i’m having no problems at all…as of right now i think those of you having problems should try it but i’ll update everybody in a few hours in case something pops up again.

thanks Pondus and DavidR

13

I ran the MBAM. It removed that trojan. Unfortunately, I have had to run it everyday and remove others. It appears that trojan let in more PUPS. I’ve never had this much trouble before.
I seem to have some sort of spyware/adware that opens a new window at random. It is for the same ad everytime. How do I remove that?

14

First you should start your own topic asking for help bc it is impossible to help 4 people in the same tread, it is just chaos