Forum Articles
  Welcome back Join CF
You are here You are here: Home | Forum | New Virus (blank pages in Ie)

You are currently viewing our boards as a guest which gives you limited access to view most of the discussions, articles and other free features. By joining our Virgin Media community you will have full access to all discussions, be able to view and post threads, communicate privately with other members (PM), respond to polls, upload your own images/photos, and access many other special features. Registration is fast, simple and absolutely free so please join our community today.


Welcome to Cable Forum
Go Back   Cable Forum > Computers & IT > Security & Virus Discussion
Register FAQ Community Calendar

Backdoor.nibu.D
Reply
 
Thread Tools
Old 27-04-2004, 10:09   #1
ian@huth
Inactive
 
ian@huth's Avatar
 
Join Date: Jun 2003
Location: Huthwaite, Nottinghamshire
Services: VM 10Mb, TU, 1xSky HD, 2xSky+ (HD,all packs, sports & movies) 2xDVD PVR's, Freesat Freeview & other
Posts: 4,536
ian@huth is cast in bronzeian@huth is cast in bronzeian@huth is cast in bronzeian@huth is cast in bronze
ian@huth is cast in bronzeian@huth is cast in bronzeian@huth is cast in bronzeian@huth is cast in bronzeian@huth is cast in bronzeian@huth is cast in bronzeian@huth is cast in bronzeian@huth is cast in bronzeian@huth is cast in bronze
Backdoor.nibu.D

My daughter has found this on her system and is finding it impossible to get rid of. She is running NAV on a windows98SE system. Following the removal instructions on the Symantec website doesn't remove the trojan. There does appear to be something missing from the Symantec removal instructions as the last instruction is M. Click Start, and then click Run, but there is nothing telling you what to run. She has emailed Symantec but has not had a reply yet. The Symantec removal instructions are at: http://securityresponse.symantec.com...or.nibu.d.html

Any ideas?
ian@huth is offline   Reply With Quote
Advertisement
Old 27-04-2004, 10:27   #2
Bifta
Inactive
 
Join Date: Jul 2003
Location: Eglinton, Co. Derry
Posts: 7,640
Bifta has a nice shiny starBifta has a nice shiny star
Bifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny star
Re: Backdoor.nibu.D

Quote:
Originally Posted by ianathuth
My daughter has found this on her system and is finding it impossible to get rid of. She is running NAV on a windows98SE system. Following the removal instructions on the Symantec website doesn't remove the trojan. There does appear to be something missing from the Symantec removal instructions as the last instruction is M. Click Start, and then click Run, but there is nothing telling you what to run. She has emailed Symantec but has not had a reply yet. The Symantec removal instructions are at: http://securityresponse.symantec.com...or.nibu.d.html

Any ideas?
The latest definitions for Ad-Aware detect (and hopefully remove) this, give it a whirl:

http://www.lavasoftusa.com
Bifta is offline   Reply With Quote
Old 27-04-2004, 12:26   #3
Defiant
Permanently Banned
 
Defiant's Avatar
 
Join Date: Apr 2004
Location: Salford(UK)
Age: 55
Posts: 976
Defiant is a name known to allDefiant is a name known to allDefiant is a name known to allDefiant is a name known to allDefiant is a name known to allDefiant is a name known to allDefiant is a name known to allDefiant is a name known to all
Send a message via ICQ to Defiant Send a message via AIM to Defiant Send a message via MSN to Defiant Send a message via Yahoo to Defiant
Re: Backdoor.nibu.D

This may be a long way around it but try switching off NAV and use a free online scanner like the one at Mcafee to remove it
Defiant is offline   Reply With Quote
Old 27-04-2004, 16:42   #4
ian@huth
Inactive
 
ian@huth's Avatar
 
Join Date: Jun 2003
Location: Huthwaite, Nottinghamshire
Services: VM 10Mb, TU, 1xSky HD, 2xSky+ (HD,all packs, sports & movies) 2xDVD PVR's, Freesat Freeview & other
Posts: 4,536
ian@huth is cast in bronzeian@huth is cast in bronzeian@huth is cast in bronzeian@huth is cast in bronze
ian@huth is cast in bronzeian@huth is cast in bronzeian@huth is cast in bronzeian@huth is cast in bronzeian@huth is cast in bronzeian@huth is cast in bronzeian@huth is cast in bronzeian@huth is cast in bronzeian@huth is cast in bronze
Re: Backdoor.nibu.D

Quote:
Originally Posted by Bifta
The latest definitions for Ad-Aware detect (and hopefully remove) this, give it a whirl:

http://www.lavasoftusa.com
Ad-Aware doesn't help, neither does the McAfee online scanner.
ian@huth is offline   Reply With Quote
Old 27-04-2004, 17:01   #5
Bifta
Inactive
 
Join Date: Jul 2003
Location: Eglinton, Co. Derry
Posts: 7,640
Bifta has a nice shiny starBifta has a nice shiny star
Bifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny star
Re: Backdoor.nibu.D

Quote:
Originally Posted by ianathuth
Ad-Aware doesn't help, neither does the McAfee online scanner.
Perhaps it's being misreported somehow, i.e. you don't really have it, or it's reporting something else as it.
Bifta is offline   Reply With Quote
Old 27-04-2004, 17:05   #6
Defiant
Permanently Banned
 
Defiant's Avatar
 
Join Date: Apr 2004
Location: Salford(UK)
Age: 55
Posts: 976
Defiant is a name known to allDefiant is a name known to allDefiant is a name known to allDefiant is a name known to allDefiant is a name known to allDefiant is a name known to allDefiant is a name known to allDefiant is a name known to all
Send a message via ICQ to Defiant Send a message via AIM to Defiant Send a message via MSN to Defiant Send a message via Yahoo to Defiant
Re: Backdoor.nibu.D

Have you tried booting up in safe mode and running the antivirus software or as its windows 98 booting up in dos and running a dos version
Defiant is offline   Reply With Quote
Old 27-04-2004, 17:05   #7
Stuartbe
Inactive
 
Join Date: Jan 2023
Posts: 4,984
Stuartbe is an unknown quantity at this pointStuartbe is an unknown quantity at this point
Stuartbe is an unknown quantity at this pointStuartbe is an unknown quantity at this pointStuartbe is an unknown quantity at this pointStuartbe is an unknown quantity at this pointStuartbe is an unknown quantity at this pointStuartbe is an unknown quantity at this pointStuartbe is an unknown quantity at this pointStuartbe is an unknown quantity at this pointStuartbe is an unknown quantity at this pointStuartbe is an unknown quantity at this pointStuartbe is an unknown quantity at this pointStuartbe is an unknown quantity at this pointStuartbe is an unknown quantity at this pointStuartbe is an unknown quantity at this pointStuartbe is an unknown quantity at this pointStuartbe is an unknown quantity at this pointStuartbe is an unknown quantity at this pointStuartbe is an unknown quantity at this point
Re: Backdoor.nibu.D

try www.my-etrust.com

E-Trust antivirus.

You can use it free for 30 days.. I have a copy of norton av but I use it as a cofee mat !!
Stuartbe is offline   Reply With Quote
Old 27-04-2004, 17:29   #8
iadom
In the corner, sulking.
 
iadom's Avatar
 
Join Date: Jun 2003
Location: Shaw, Oldham, Lancashire.
Services: 2 TV 360 boxes. 500mb BB, Phone line.
Posts: 8,041
iadom has a nice shiny stariadom has a nice shiny star
iadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny star
Re: Backdoor.nibu.D

My AV, Command from Authentium lists 44 variants of this, also known as W32/Dumaru

They also have a free online scan..here
iadom is offline   Reply With Quote
Old 27-04-2004, 17:44   #9
iadom
In the corner, sulking.
 
iadom's Avatar
 
Join Date: Jun 2003
Location: Shaw, Oldham, Lancashire.
Services: 2 TV 360 boxes. 500mb BB, Phone line.
Posts: 8,041
iadom has a nice shiny stariadom has a nice shiny star
iadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny star
Re: Backdoor.nibu.D

Quote:
Originally Posted by ianathuth
. Following the removal instructions on the Symantec website doesn't remove the trojan. There does appear to be something missing from the Symantec removal instructions as the last instruction is M. Click Start, and then click Run, but there is nothing telling you what to run, The Symantec removal instructions are at: http://securityresponse.symantec.com...or.nibu.d.html

Any ideas?
I looks like you have to "run" regedit from those instructions.
iadom is offline   Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 14:33.


Server: lithium.zmnt.uk
Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2026, vBulletin Solutions Inc.
All Posts and Content are © Cable Forum