Removal of Backdoor.Agent.B

From: Tiger99 (mwizsocool2003_at_yahoo.com)
Date: 08/18/04


Date: 18 Aug 2004 07:23:48 -0700

Hi,

I keep getting a pop-up from Norton telling me it's detected the
Backdoor.Agent.B virus and is unable to either Quarantine it or Delete
it. The file infected is "%systemroot%\windows\system32\sqlgmc.dll".
I'm unable to manually delete it because everytime I try it says
"access denied". I've tried following the directions listed on
Symantec's website but I'm unable to locate the registry key it
describes and can't remove the virus by running a full scan in safe
mode; it still says it's unable to delete and access is denied. I am
logged in as administrator and have even tried taking ownership of the
file but it always fails by telling me "access denied." I've also
tried using Task Manager to locate the process that might have loaded
the virus in memory but I can't locate it, either.

How do I remove this virus if I don't have rights to delete it and
Norton can't remove it either? Please advise!!!! Thanks.



Relevant Pages

  • RE: Quick Norton AV question
    ... Subject: Quick Norton AV question ... Ed 7.51 on my clients and I have certain clients that always seem to have a ... status of virus found in SSC. ... the quarantine from my machine they have no infected files. ...
    (Focus-Microsoft)
  • RE: Quick Norton AV question
    ... Since we're taking Norton here maybe someone can help me. ... Ed 7.51 on my clients and I have certain clients that always seem to have a ... status of virus found in SSC. ... the quarantine from my machine they have no infected files. ...
    (Focus-Microsoft)
  • Re: hacktool.rootkit
    ... | This would lead one to think Symantec has wrongly identified a Virus ... | I wonder if similar reports of Hacktool.Rootkit are a result of Norton ... Note that all AV applicvations will suffer False Positive declarations from time to time. ... just has to download the corrected signatures and the restore the file from quarantine. ...
    (microsoft.public.security.virus)
  • Re: help again !!!
    ... Were the virus definitions up-to-date? ... If Windows XP, was internal firewall enabled? ... Third party firewall (like Zone Alarm or Norton Personal Firewall) present? ...
    (microsoft.public.security.virus)
  • Re: hacktool.rootkit HELP
    ... | Thanks for the advice. ... Norton Antivirus reported the following: ... |>> online virus scanners and Norton antivirus numerous times and all ... |>> The virus definitions date that found this problem was 10/19/05. ...
    (microsoft.public.security.virus)