unkown dll

[ace3839]

last week i received a virus that was downloaded to my computer, it is Downloader.Tibser.A The only site that i downloaded anything from (only one download in the past two months) was a game site.

My virus program found it and advised me to put it into the virus vault because it couldn't be healed.

When I did this and restarted my computer a message popped up that said I was missing a dll associated with windows and that I had to reinstall windows 98. When I tried to do this I was unsuccessful. I restarted again and used my Go Back to return to a previous time.
On doing a file by file check (I knew it was in c:\windows\downloadedprogramfiles. I found the infected file and removed all the files that where infected. There are no files showing within the downloaded program files but there must be some hidden files as it says there is still 14files, 0 folders and is 5.32mb in size. I went to view and made sure the show all files was checked.
The downloaded file's name is: Downl~1

The dll that i need if i am to move it to the vault and do a reinstall is: tl.4000.dll
when i searched the internet, including microsoft i could not find this dll anywhere.
I am running my computer with this virus still present. There are no unusual things going on with my computer that I can see.

can anyone offer some advice?

thanks
david

[elroy]

I can't find any info on the virus, Downloader.Tibser.A or on the dll file you referred to. Try going to one of these sites and doing an online virus scan.
http://us.mcafee.com/root/mfs/default.asp?cid=9914
or here
http://security.symantec.com/sscv6/d...d=ie&venid=sym

[moshehonebay]

A friend of mine called me yesterday and needs help with a simular virius too. And I searched the internet and couldn't find hardly anything on it too. The only thing I found so far was this message board and 2 other pages that only referanced the virius. My friend's virus program says that he has "trojandownloader.win32.tibser.a". The 2 pages that I mentioned before didn't help any and only referanced it. One of those pages did referance the virus as being "trojandownloader.win32.tibser.a.dll" though. Then I did a search for only "tibser.a"; and that's when I found this page. I don't know if this helps anyone any, but I just thaught I would post this just in case it will help to figure this thing out. I'm supposed to go to my friend's house Monday to fix his computer, but since this is so new, I realy don't know what I'll need to do to fix it. If no virius programs can detect and get rid of this yet, all I may be able to do is reformat and re-install windows. One last thing I think may be worth mentioning is that his virus software also informed him of a "exploit.Iframe.fileDownload" virius. It seems to me that he might have been infected with the new virus through this exploit. And if that's the case, I suspect that he hasn't been downloading and installing all of the critical updates like he should have been!

[ace3839]

HI moshehonebay

sounds like your friend has the same trojan downlowder as i have. as i mentioned when i deleted the file it is attached to (supposedly a dll file) and then tried to restart, i could not, all i got was a notification to reinstall windows.

when i tried to do this i was unsuccessful, so i used my Go Back to revert my drive back to a previous time. I upgraded my computer last year and have a new mother board and hard drive and they didn't give me the reformat disk, i guess i will have to take this in and let them do a reformat and reinstall. what a mess.
Four days ago i changed all my email address's (i have two) and lo and behold i now have been getting one to three virus's a day from email. I have a web site and i think this is where it is coming from.

thanks for trying
cheers

[excuzzzeme]

GO_Back may be retaining a copy of tis virus. I would also search restore and archives for a copy.

[ace3839]

i tried a search in go back but can't seem to find how to access the files.
what do you mean search restore and archives?

thanks
david

[tuns_uv_fun]

wat does dll mean

by the way srry im a noob to this site

[ace3839]

DLLS (Dynamic Link Libraries) are an important part of Windows. A DLL contains functions that your programs can call during its operation. without them the programs won't work. as in my case if i lose this particular dll then access to Windows API (Application Programming Interface) functions that Require Callback Routines won't work and i have to reinstall windows.

lots to learn but fun at the same time.

[sfmarcopolo]

AVG Anti-virus says I have "Tibser.A" (Trojan Downloader). It is in my "Downloaded Program Files" and is named "TL-4000.DLL" AVG instructs me to put it into the virus vault, but upon trying, I get a message that the file can't be deleted. I searched the Downloaded Program Files directory for the file and it did not show. So I selected show all and hidden files and no hidden files showed up. I have Win 2000 Pro. Why can't I get "show hidden files" to show hidden files?
What new information anyone may have on this "Tibser.A" virus would be appreciative. Thanks Intercoman@hotmail.com

[ace3839]

if it says it is in your downloaded files then open your "C" drive, open windows folder then look for your downloaded folder.
once that is open just ckick on each folder, (highlighting it) and then right click each one and check scan with AVG. It is a long process if you have a lot of folders it there, but you will find the one with the virus. when you find the file that is infected, open it and check each of the files withing that file. when you find it delete it only if it is not and i stress not a dll.
you may be luckier than i am, i have hidden files within that folder that i can't seem to open.
i am waiting for someone to answer my email to see if anyone knows how do this.

good luck, let me know how you make out.