W32/Tibs.KXN is a trojan. The trojan will infect Windows systems.

Upon execution, the trojan drops init32.exe and frmwrk32.exe in Windows System folder.
It also drops ntdll64.dll and mousehook.dll in Documents and Settings\Default User\Local Settings\Temp folder.

The Trojan modifies registry at the following location:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

The trojan replaces wallpaper on the desktop and disables setting alteration to change the wallpaper.

This trojan first appeared on December 23, 2008.

 Other names of W32/Tibs.KXN Trojan:

This trojan is also known as Trojan-Downloader.Win32.Tibs.kxn, Win32:Tibs-ELM.