Removal of Backdoor.Agent.B

[Tiger99]

Hi,

I keep getting a pop-up from Norton telling me it's detected the
Backdoor.Agent.B virus and is unable to either Quarantine it or Delete
it. The file infected is "%systemroot%\windows\system32\sqlgmc.dll".
I'm unable to manually delete it because everytime I try it says
"access denied". I've tried following the directions listed on
Symantec's website but I'm unable to locate the registry key it
describes and can't remove the virus by running a full scan in safe
mode; it still says it's unable to delete and access is denied. I am
logged in as administrator and have even tried taking ownership of the
file but it always fails by telling me "access denied." I've also
tried using Task Manager to locate the process that might have loaded
the virus in memory but I can't locate it, either.

How do I remove this virus if I don't have rights to delete it and
Norton can't remove it either? Please advise!!!! Thanks.

 

[Prashant Thankappan]

Download and run stinger from the following location:

http://download.nai.com/products/mcafee-avert/stinger.exe

Prashant Thankappan

 

[Ron Martell]

Hi,

I keep getting a pop-up from Norton telling me it's detected the
Backdoor.Agent.B virus and is unable to either Quarantine it or Delete
it. The file infected is "%systemroot%\windows\system32\sqlgmc.dll".
I'm unable to manually delete it because everytime I try it says
"access denied". I've tried following the directions listed on
Symantec's website but I'm unable to locate the registry key it
describes and can't remove the virus by running a full scan in safe
mode; it still says it's unable to delete and access is denied. I am
logged in as administrator and have even tried taking ownership of the
file but it always fails by telling me "access denied." I've also
tried using Task Manager to locate the process that might have loaded
the virus in memory but I can't locate it, either.

How do I remove this virus if I don't have rights to delete it and
Norton can't remove it either? Please advise!!!! Thanks.

1. Download Stinger (free) from http://vil.nai.com/vil/stinger and
run it. It may be able to remove the file. If so then I suggest that
you contact Symantec about getting a refund on your non-performing
Norton and then replace it with a product that works.

2. If Stinger can't remove the file (or doesn't find it - Stinger
only works on a limited set of viruses) then try booting the computer
in Safe Mode and then manually deleting it. To start Windows XP in
Safe Mode turn the computer on and start tapping the F8 key rapidly
just as soon as the first information of any kind shows on the screen.
Keep tapping until the Windows XP Startup Menu appears and choose Safe
Mode from the menu.

Good luck


Ron Martell Duncan B.C. Canada
--
Microsoft MVP
On-Line Help Computer Service
http://onlinehelp.bc.ca

"The reason computer chips are so small is computers don't eat much."