Backdoor.Berbew.F virus

[RSmith]

I have the avast version 4.7 professional on my home computer that has Win XP OS. I ran another anti-virus check and it shows that I have Backdoor.Berbew.F virus on my computer. I have e-mailed you guys concerning this and still have not gotten any reply. How come my avast 4.7 didnt find this? I have done all current updates. This was my last hope to get some answers. Thanks.

[Eddy]

The people from alwil wil only respond if needed if you have send in a suspected malware file.

I suggest you submit the file to JOTTI and let us know the result.

[RSmith]

who's JOTTI?

[FreewheelinFrank]

Hi RSmith,

No AV will detect 100% of malware. If you find a virus that is not detected by avast!, you will need to submit it for analysis. As Eddy says, the people from Alwil do not usually respond to the sender, and new samples are taking longer than would be desirable to enter avast's definition file.

The avast! team have told us they are investing in improving how submitted viruses are dealt with and clearing up the apparent backlog. This is certainly a weakness in avast! at the moment.

We've been told the situation will improve. Let's hope so!

[polonus]

Hi RSmith,

Here is the technical info on that malware:
http://www.sophos.com/virusinfo/analyses/trojpadodorj.html

polonus

[Spiritsongs]

   Hi R :

     Jotti is a "multi engine online virus scanner", which is used
     to determine if the suspected "virus" is being detected by
     other antivirus programs; however, the "scanner" at
     www.virustotal.com/en/indexx.html is considered more
     appropiate if using a Windows Operating System.
     Another regular "Helper" on these forums said Avast
     receives around 4,000 requests a week on suspected
     "viruses", so that it a lot to "process" in a short period of
     time.
     And your "Backdoor" is more a "trojan" than it is a virus;
     therefore, it would help to have a program that "specializes"
     in detecting & quarantining TROJANS, such as the good &
     FREE "Ewido" from www.ewido.net/en ( reverts to the FREE
    ver AFTER the "trial" ends ) and/or the FREE version of
    "SUPERantispyware" from www.superantispyware.com .

[DavidR]

I have the avast version 4.7 professional on my home computer that has Win XP OS. I ran another anti-virus check and it shows that I have Backdoor.Berbew.F virus on my computer. I have e-mailed you guys concerning this and still have not gotten any reply.

What email address did you use ?
What avast would like is a sample of the malware. If you are not getting a virus warning that you believe is a new, undetected virus then if you can zip and password protect ('virus', will do) the suspect file and send it to virus @ avast.com (no spaces), or send from the chest (after adding it to the User Files section of the chest).

Give a brief outline of the problem (possibly a link to this thread), the fact that you believe it to be a either a new, undetected virus and include the password in the body of the email. Some info on the avast version and VPS number (see about avast {right click avast icon}) will also help.

[RSmith]

I can't zip and send it to you from the avast scanner tool like they suggest. I have a firewall called sygate which has a free virus scan called symantec and this is when the virus or trogan showed up. I also went to pcpitstop.com and ran their free virus scan and it showed up there as well. It is in my C:\windows\system32\Cqmmoq32.exe file
The symantec program showed it as Backdoor.Berbew.F and Pcpitstop.com's virus scan showed it as Bck/webber.P Virus
I tried my first e-mail request using the technical support@avast by right clicking on my avast but could not send it via express. I used my msn e-mail to send it to technical support@avast. Does this not work? I have no other way to send it?

[DavidR]

I can't zip and send it to you from the avast scanner tool like they suggest.

avast protects all files in the chest from outside influence.

You don't need to zip it if you have it in the chest, Right click on the file when it is in the chest and select email to Alwil Software, avast will encrypt this file so you don't have to zip and password protect it. In the pop-up window enter some brief information and that the sample is an undetected trojan. You may need to set-up the Program Settings, SMTP details (see image) to be able to send emails to avast, etc. If your email server requires authentication (same as in your email Outlook Express default email account) you need to tick the option and enter the other details.

virus @ avast.com without the quotes is where samples are sent, but support @ avast.com would be fine if you were just enquiring about the problem, however, as you can see it is much faster to use the Forums.

On the next subject, having a second resident anti-virus installed on the same system is not advised as they can conflict and possibly lock-up your system. avast takes care to ensure that conflict doesn't happen and frequently when it detects another anti-virus it will disable some of its elements to avoid conflict.