VIRUS: Backdoor.Berbew.I

nigelclose

I have picked up a virus which is extremely irratating. My broadband provider has temporarily disabled my connection because of this virus.

The virus is Backdoor.Berbew.I

Does anyone know where I could find a fixer tool to repair this because my Norton 2004 antivirus is unable to repair this file. It also states that my computer is still infected even after I try to delete the thing!!!!

Thanking you in advance

Fran

It might seem like an obvious question, but have you got the latest updates for Norton? On the microsoft website they only refer to variants A-H, I couldn't see anything about I.

Symantec - for downloading updates (you could check for new updates then try removing again).

cloud_dog

You may need to do more than just run the anti-virus s/ware.

You probably need to consider booting the PC from a clean boot disk and then running the latest versions of anti-virus s/ware. The reason for this is because some viruses get loaded into memory when you boot up and removing the virus from the PC (HDD) does not remove it from the memory and the virus simply re-creates itself on your PC.

cloud_dog

Godders

This is a link to symantec defininition of the specific version you mention(I):

http://www.symantec.com/avcenter/venc/data/backdoor.berbew.i.html

The removal is basically the same though, disable system restore, update your AV, reboot in safe mode and run a full scan.

nigelclose

Hi everyone, thanks for the replies.

I have just got a few queries regarding the deletion of the values from the registry. I have carried out the procedure shown below but I am unable to navigate to this Key.
I can find the HKEY_CLASSES_ROOT folder but I am unable to find this exact Key ( shown below ). Can anybody suggest a method of finding this? Is it a complicated task editing and making the required changes to this?? Does this have to be done? It has been recommended by Symantec security response!!!

To delete the values from the registry

1) Click Start > Run.

2) Type regedit

3) Then click OK.

4) Navigate to the key:

HKEY_CLASSES_ROOT\CLSID\{79FEACFF-FFCE-815E-A900-316290B5B738}\InProcServer32

Gavin57

If you have trouble finding an entry try using find under the edit tab of regedit.

nigelclose

I tried the find option but was still unable to find the value!!!

Which alerts me to think how am I suppose to edit something if I cannot find it?????????

Thanks

Fran

When I had problems recently, I was looking for things that weren't there too. I think (guess) that that particular entry has already been removed by your antivirus (or didn't exist). I would carry on with the rest of the procedure and see how things are then.

LincsLad_3

If you haven't already done so, I would strongly recommend backing up the Registry. 8)