W32/Tibs.KXN is a Trojan that drops init32.exe and frmwrk32.exe in Windows System folder upon execution. It also drops ntdll64.dll and mousehook.dll in Documents and Settings\Default User\Local Settings\Temp folder.

The Trojan modifies registry at the following location:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run This Trojan replaces wallpaper on the desktop and disables the setting alteration to change the wallpaper.

More information can be found at this Proland Software page.