Title: TIBS

Type: Dialers

Remove TIBS. Removal instructions

Severity scale:

(50 / 100)

TIBS is a parasitical dialer that connects a compromised computer to the Internet by dialing a premium rate phone number using a modem. The threat is designed to provide access to pornographic web resources without asking for user permission. TIBS is usually distributed by e-mail attached to unsolicited letters.

Related files: hotandwet.exe tibs.exe tibs3.exe kernels8.exe, hotandwet.exe, tibs.exe, tibs3.exe

TIBS properties:
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic TIBS removal:

remover for TIBS

SpyHunter is recommended remover to uninstall TIBS. You should confirm using free trial that it detects current version of parasite.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove TIBS using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.

STOPzilla

download | review

We are testing STOPzilla's efficiency at removing TIBS (2007-12-21 06:38:46)

Malwarebytes Anti Malware

download | review

We are testing Malwarebytes Anti Malware's efficiency at removing TIBS (2007-12-21 06:38:46)

Spyware Doctor

download | review | tutorial

We are testing Spyware Doctor's efficiency at removing TIBS (2007-12-21 06:38:46)

XoftSpySE Anti Spyware

download | review

TIBS manual removal:

FORUM:
Discuss TIBS in
spyware removal forum

Kill processes:
hotandwet.exe, tibs.exe, tibs3.exe

HELP:
how to kill malicious processes

Delete files:
hotandwet.exe, tibs.exe, tibs3.exe

HELP:
how to remove harmful files

Delete directories:
C:\Program Files\PayPerViewDialDialer
Misc:
Filenames may vary.

Information added: 2004-03-19 10:00:00
Information updated: 2007-12-21 04:01:31

Additional resources related to TIBS:

Attention: If you know or you have a website or page about TIBS removal, feel free to add a link to this list: add url

more resources

Marcus

Some versions of their software are signed by 'BrowserPlugin' !!!

Reply »

2004 03 02

John

Is there anybody out there who can point me to a simple once of download tool that will remove dialler.tibs? All these guys out here seem to want to make money from our dilemmas. Where are the real customer orientated people who are serious about helping.

Reply »

2004 08 07

Guest

This thing SUCKS!!!!! I dont know how to get rid of it either. I tried deleting..hooks.dll...seems to work temporarily...email the company and bitch them out...its prob the only way. info@tibsystems.com

Reply »

2004 10 06

Guest

Seriously ! how annoying is this dialer ??!! I am going nuts trying to get to my info on the net before it kicks me out !!! Samadhi

Reply »

2004 10 10

Guest

I threatened them with a lawsuit and they gave me a reply, nothing yet:

http://www.tibsystems.com/help/

At the bottom there is a link with a real remover in it

Reply »

2004 10 30

Guest

It detects TIBS but when you want to remove it - guess what! you have to pay. is there anything free and effecrtive? this is driving me insane!

Reply »

2004 12 24

Guest

downloaded Hijackthis from download.com scanned and then had to choose which one TIBS was sitting on .
guessed right and cleared it out .

Reply »

2004 12 24

terri

help me i cant get rid of tibs. i dont even know how i got it

Reply »

2005 01 11

guest

when you use hijackthis which line item should you delete?

Reply »

2005 01 31

Guest

well before i download any MORE removal software to try and get rid of this stupid thing, does anyone know if the removal software from http://www.tibsystems.com/help/ is safe? i swear if i get any more TIBS crap on my computer I might just kill someone...

Reply »

2005 02 01

Steve

well, after visiting a number of sites, i tried restarting in SAFE mode. i ran my anti spyware (ad-aware SE and Spybot S&D) with no results. i then restarted, and for some reason or another, ITS GONE!!! Hallelujah.

before restarting in safe mode, however, i created a system restore point( i would suggest this if you have XP) and i ran both my antspy programs and deleted the problems. I then searched for a file on my computer called "hooksdll.dll" (try searching for the word "hooks" on your computer) and deleted this file upon finding it.
i then restarted in safe mode, and did what i mentioned earlier

any questions? i hesitate to post my email here but will gladly respond to any posts (at least for some time, i can't guarantee i'll be coming here forever)

so far i have run my anti-spyware stuff and no results involving TIBS or any other dialer has come up

*I am not 100% sure this is a permanent solution as it has only been a few hours. if you email me i'd be glad to give you suggestions on how to solve the problem

Reply »

2005 02 01

Joelle

Gosh! what an annoying site and pop-up. I have visited 100s of site but they only offer a free scan and then.........to clean up, you need to buy their software.
I went on the site http://www.tibsystems.com/help and ran their program and ouf, great! no more pop-up.I suppose its good, anyway it's the only one which successfully removed this headache.

Reply »

2005 02 10

keops

Gosh, tibs is horrible! I often run Spybot who detectes it but this plague's remained

Reply »

2005 02 14

benson

This Tibs thing has p*ssed me off for weeks now.. I think however I've finally got rid of it with 'ad aware se' which you can get from http://www.download.com/Ad-aware-SE-Personal-Edition/3000-8022_4-10045910.html?tag=prod

Reply »

2005 02 14

James

it isn't tibs fault, hackers took there product and made into something bad, gp to http://www.tibssystems.com/help. it explains everything there

Reply »

2005 02 14

LIZ

Download Spydoctor 3.1 from www.downloads.com. It got rid of TIBS for me. Goodluck

Reply »

2005 03 14

boris

I would say that TIBS removal offered by tibsystems.com is a complete bull.

I think also that my version of TIBS is newer and meaner because none of the anti-spy progs can remove it. I run 3-4 of them daily, they keep finding stuff and remove it but TIBS remains...

Now, is it safe to delete the WHOLE WebSiteViewer folder from the registry. It contains a sub-folder called Settings ( I am running XP).

PLMK!

Reply »

2005 03 22

Ward B

I ran the software "Cleanit.Exe" located at the site http://www.tibsystems.com/help/ and it worked great. The removal program is built by the makers of the legitimate TIBSystems software. They are upset that their software is being used by the hijackers also. This is the only thing that removed it after two days of trying other things.

Reply »

2005 04 08

Guest

Just bought Spyware as you indicated it would irradicate this problem but it does not work. The web page pops uo just as often as ever.
davidbennett@besleyhill.co.uk

Reply »

2005 04 20

Guest

Be honest as anyone removed this yet and if so where are you to help the others.

Reply »

2005 05 25

Post Comment:

Attention: Use this form only if you have additional information about TIBS parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.