Re: Removal of Backdoor.Agent.B

From: Ron Martell (ron_at_onlinehelp.bc.ca)
Date: 08/18/04


Date: Wed, 18 Aug 2004 19:39:01 GMT

mwizsocool2003@yahoo.com (Tiger99) wrote:

>Hi,
>
>I keep getting a pop-up from Norton telling me it's detected the
>Backdoor.Agent.B virus and is unable to either Quarantine it or Delete
>it. The file infected is "%systemroot%\windows\system32\sqlgmc.dll".
>I'm unable to manually delete it because everytime I try it says
>"access denied". I've tried following the directions listed on
>Symantec's website but I'm unable to locate the registry key it
>describes and can't remove the virus by running a full scan in safe
>mode; it still says it's unable to delete and access is denied. I am
>logged in as administrator and have even tried taking ownership of the
>file but it always fails by telling me "access denied." I've also
>tried using Task Manager to locate the process that might have loaded
>the virus in memory but I can't locate it, either.
>
>How do I remove this virus if I don't have rights to delete it and
>Norton can't remove it either? Please advise!!!! Thanks.

1. Download Stinger (free) from http://vil.nai.com/vil/stinger and
run it. It may be able to remove the file. If so then I suggest that
you contact Symantec about getting a refund on your non-performing
Norton and then replace it with a product that works.

2. If Stinger can't remove the file (or doesn't find it - Stinger
only works on a limited set of viruses) then try booting the computer
in Safe Mode and then manually deleting it. To start Windows XP in
Safe Mode turn the computer on and start tapping the F8 key rapidly
just as soon as the first information of any kind shows on the screen.
Keep tapping until the Windows XP Startup Menu appears and choose Safe
Mode from the menu.

Good luck

Ron Martell Duncan B.C. Canada

-- 
Microsoft MVP
On-Line Help Computer Service
http://onlinehelp.bc.ca
"The reason computer chips are so small is computers don't eat much."


Relevant Pages

  • Backdoor.agent.ba ----- Malke
    ... Can I just delete a .dll file in safe mode without messing ... > Norton initially told me I had a similiar virus and I ... Norton found no virus. ... > than downloaded a free copy of software from AVG. ...
    (microsoft.public.security.virus)
  • Re: virus trouble... need assistance
    ... Then scan your system for virus's from within Safe Mode. ... >I recently was infected with a computer virus. ... > A DOS window popped up two or three times and then Norton shutdown. ... > Windows Update site and the page shows no conent. ...
    (microsoft.public.windowsxp.general)
  • Re: sms.exe and crss.exe question
    ... | I had a virus on my PC a week ago. ... After numerous conversation with Norton ... I suggest scanning the system in Safe Mode. ... FireWall to allow it to download the needed AV vendor related files. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: help again !!!
    ... Were the virus definitions up-to-date? ... If Windows XP, was internal firewall enabled? ... Third party firewall (like Zone Alarm or Norton Personal Firewall) present? ...
    (microsoft.public.security.virus)
  • Re: hacktool.rootkit HELP
    ... | Thanks for the advice. ... Norton Antivirus reported the following: ... |>> online virus scanners and Norton antivirus numerous times and all ... |>> The virus definitions date that found this problem was 10/19/05. ...
    (microsoft.public.security.virus)