Microsoft has released a tool to help you remove Backdoor:W32/Berbew Trojan horse variants from your computer. This information is then sent to a Web server for the Trojan horse’s author to retrieve. It opens fake dialog boxes that prompt the user to enter confidential information, such as ATM card codes or credit card numbers. It installs a proxy server that configures the user’s computer for use as a relay for such actions as sending spam. The Trojan horse then sends that information to a Web server for the Trojan horse’s author to retrieve. When the user visits one of several financial or ISP Web sites, the Trojan horse captures sensitive information, such as log-in names, passwords, and other sensitive information. When this Trojan horse runs on the user’s computer, it performs several actions, including the following: Backdoor:W32/Berbew is also known as Backdoor-AXJ, Webber, or Padodor. The Web pages that are downloaded to the user’s computer contain an additional JavaScript program that downloads the Backdoor:W32/Berbew Trojan horse. This problem occurs when a user visits a Web site that is hosted on a server that is running Microsoft Internet Information Services (IIS) and that has been infected by JS.Scob. Microsoft has learned of a Trojan horse program that is named W32/Berbew (variants A-H) that is downloaded after a Microsoft Windows-based client computer is infected with the Download.Ject malware. For more information about the Malicious Software Removal Tool, click the following article number to view the article in the Microsoft Knowledge Base:Ĩ90830 The Microsoft Windows Malicious Software Removal Tool helps remove specific, prevalent malicious software from computers that are running Windows Server 2003, Windows XP, or Windows 2000 It has been replaced by the Microsoft Windows Malicious Software Removal Tool.

Malicious software removal tool