PDA

View Full Version : BackDoor.Agent.BA I need help

sgl
July 1st, 2004, 11:32 PM
I have AVG anti-virus and it keeps telling me that Trojan horse BackDoor.Agent.BA is found in file C:\Windows\system32\sqlmec.dll. It tells me to run AVG for windows to remove it, but when I do it says it can't remove it. What do I do? I don't even know where to begin. Please help.
nick s
July 1st, 2004, 11:50 PM
{QUOTE-> I have AVG anti-virus and it keeps telling me that Trojan horse BackDoor.Agent.BA is found in file C:\Windows\system32\sqlmec.dll. It tells me to run AVG for windows to remove it, but when I do it says it can't remove it. What do I do? I don't even know where to begin. Please help. <-QUOTE}

Try booting into Safe Mode (tap the F8 key as your PC boots), find the file, and delete it. I don't run AVG anymore, but you could try running AVG in Safe Mode and let it try to remove it. Hope it helps.

Nick
sgl
July 2nd, 2004, 12:07 AM
No matter how many times I tap the F8 key during startup, I cannot get my system to start in safe mode. Is there something I'm doing wrong? Is there any other way to start it in safe mode? Please help!
nick s
July 2nd, 2004, 12:17 AM
{QUOTE-> No matter how many times I tap the F8 key during startup, I cannot get my system to start in safe mode. Is there something I'm doing wrong? Is there any other way to start it in safe mode? Please help! <-QUOTE}

Right-click on My Computer, go to Properties, click on the Advanced tab, go to Settings under Startup and Recovery, check "Time to display list of operating systems", and set the countdown to about 10 seconds. Reboot. That should give you the option to use the F8 key to get into Safe Mode..

Nick
snapdragin
July 2nd, 2004, 12:33 AM
Hi sgl,

You have started multiple threads since yesterday. You have a hijackthis log posted here: http://www.wilderssecurity.com/showthread.php?t=39250

Please follow up in that thread until your computer is clean. Thank you.

snap
carlnunes
July 19th, 2004, 04:01 AM
Remove Backdoor.agent.ba when deteced by AVG antivirus

1. use Notepad to see the file where regular explorer fails to see it.

2. remember to select view all file types

3. once you see the file in the open menu drag it to desktop

4. rename file to whatever (I renamed the infected file to "a" with no file extension)

5. reboot in to Safe mode with dos prompt

6. delete file (del

Worked for me

Infected computer: Windows XP Home Edition