27-04-2004, 10:09
|
#1
|
|
cf.mega poster
Join Date: Jun 2003
Location: Huthwaite, Nottinghamshire
Services: VM 2Mb, VM phone 5p plan, 2xSky+ boxes (Family pack, sports & movies)
Posts: 4,520
|
Backdoor.nibu.D
My daughter has found this on her system and is finding it impossible to get rid of. She is running NAV on a windows98SE system. Following the removal instructions on the Symantec website doesn't remove the trojan. There does appear to be something missing from the Symantec removal instructions as the last instruction is M. Click Start, and then click Run, but there is nothing telling you what to run. She has emailed Symantec but has not had a reply yet. The Symantec removal instructions are at: http://securityresponse.symantec.com...or.nibu.d.html
Any ideas?
__________________
Please put brain in gear before posting.
There is no such thing as the average man (or woman).
DigiGuide - the best by far source for planning your TV viewing http://getdigiguide.com/?p=1&r=11440
|
|
|
|
27-04-2004, 10:27
|
#2
|
|
cf.mega poster
Join Date: Jul 2003
Location: Derry
Posts: 7,597
|
Re: Backdoor.nibu.D
Quote:
|
Originally Posted by ianathuth
My daughter has found this on her system and is finding it impossible to get rid of. She is running NAV on a windows98SE system. Following the removal instructions on the Symantec website doesn't remove the trojan. There does appear to be something missing from the Symantec removal instructions as the last instruction is M. Click Start, and then click Run, but there is nothing telling you what to run. She has emailed Symantec but has not had a reply yet. The Symantec removal instructions are at: http://securityresponse.symantec.com...or.nibu.d.html
Any ideas? |
The latest definitions for Ad-Aware detect (and hopefully remove) this, give it a whirl:
http://www.lavasoftusa.com
|
|
|
|
|
27-04-2004, 12:26
|
#3
|
|
Permanently Banned
Join Date: Apr 2004
Location: Salford(UK)
Age: 37
Posts: 976
|
Re: Backdoor.nibu.D
This may be a long way around it but try switching off NAV and use a free online scanner like the one at Mcafee to remove it
|
|
|
|
|
27-04-2004, 16:42
|
#4
|
|
cf.mega poster
Join Date: Jun 2003
Location: Huthwaite, Nottinghamshire
Services: VM 2Mb, VM phone 5p plan, 2xSky+ boxes (Family pack, sports & movies)
Posts: 4,520
|
Re: Backdoor.nibu.D
Quote:
|
Originally Posted by Bifta
|
Ad-Aware doesn't help, neither does the McAfee online scanner.
__________________
Please put brain in gear before posting.
There is no such thing as the average man (or woman).
DigiGuide - the best by far source for planning your TV viewing http://getdigiguide.com/?p=1&r=11440
|
|
|
|
|
27-04-2004, 17:01
|
#5
|
|
cf.mega poster
Join Date: Jul 2003
Location: Derry
Posts: 7,597
|
Re: Backdoor.nibu.D
Quote:
|
Originally Posted by ianathuth
Ad-Aware doesn't help, neither does the McAfee online scanner.
|
Perhaps it's being misreported somehow, i.e. you don't really have it, or it's reporting something else as it.
|
|
|
|
|
27-04-2004, 17:05
|
#6
|
|
Permanently Banned
Join Date: Apr 2004
Location: Salford(UK)
Age: 37
Posts: 976
|
Re: Backdoor.nibu.D
Have you tried booting up in safe mode and running the antivirus software or as its windows 98 booting up in dos and running a dos version
|
|
|
|
|
27-04-2004, 17:05
|
#7
|
|
Guest
Location: Luton
Services: NTL Nafband
Posts: n/a
|
Re: Backdoor.nibu.D
try www.my-etrust.com
E-Trust antivirus.
You can use it free for 30 days.. I have a copy of norton av but I use it as a cofee mat !!
|
|
|
|
|
27-04-2004, 17:29
|
#8
|
|
Designed by engineers.
Join Date: Jun 2003
Location: Shaw, Oldham, Lancashire.
Services: VIP pack, V+ & Samsung stb's. 2 Phone lines. 20 Meg BB.
Posts: 3,933
|
Re: Backdoor.nibu.D
My AV, Command from Authentium lists 44 variants of this, also known as W32/Dumaru
They also have a free online scan.. here
__________________
"The inherent vice of capitalism is the unequal sharing of the blessings. The inherent blessing of socialism is the equal sharing of misery".
Last edited by iadom; 27-04-2004 at 17:37.
|
|
|
|
|
27-04-2004, 17:44
|
#9
|
|
Designed by engineers.
Join Date: Jun 2003
Location: Shaw, Oldham, Lancashire.
Services: VIP pack, V+ & Samsung stb's. 2 Phone lines. 20 Meg BB.
Posts: 3,933
|
Re: Backdoor.nibu.D
Quote:
|
Originally Posted by ianathuth
. Following the removal instructions on the Symantec website doesn't remove the trojan. There does appear to be something missing from the Symantec removal instructions as the last instruction is M. Click Start, and then click Run, but there is nothing telling you what to run, The Symantec removal instructions are at: http://securityresponse.symantec.com...or.nibu.d.html
Any ideas? |
I looks like you have to "run" regedit from those instructions.
__________________
"The inherent vice of capitalism is the unequal sharing of the blessings. The inherent blessing of socialism is the equal sharing of misery".
|
|
|
|
|
Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
|
|
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
All times are GMT +1. The time now is 08:36.
|
Join CF
You are here: 
