home

nobuactivation.exe

Norton Online Backup

SwapDrive Inc.

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘NortonOnlineBackupReminder’. This is installed with Activate Norton Online Backup.
Publisher:
Symantec Corporation  (signed by SwapDrive Inc.)

Product:
Norton Online Backup

Description:
Norton Online Backup Service

Version:
1.0.2046

MD5:
a562935bcd5ffc4cbb63f38acdc658ef

SHA-1:
84c757b602b0982563bedc8a42dc98ee23f5cf3f

SHA-256:
dc13aa73938cfda66e0715744ff4bc5b7ac533bd388ac6d886939b733e603a8d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/13/2025 1:06:09 AM UTC  (today)

File size:
492.2 KB (503,976 bytes)

Product version:
1.0.2046

Copyright:
Copyright (C) 2008 Symantec Corporation. All rights reserved.

Original file name:
NOBuClient.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\symantec\norton online backup\activation\nobuactivation.exe

Digital Signature
Signed by:
SwapDrive Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
12/1/2008 4:11:15 PM

Valid to:
10/11/2009 11:30:27 PM

Subject:
CN=SwapDrive Inc., OU=Security Department, O=SwapDrive Inc., L=Washington, S=District of Columbia, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
780640B8A28184C21058140E96960139

File PE Metadata
Compilation timestamp:
1/16/2009 11:01:32 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:aoYFE/ZZ0qdwUr2JYsVrmKVXB8SA+eLDeA/UFZ/pJy:5FPwUrEYsVRGSA+ieXZ/pJy

Entry address:
0x26FE3

Entry point:
E8, 43, A7, 00, 00, E9, 79, FE, FF, FF, CC, CC, CC, 8B, 4C, 24, 04, F7, C1, 03, 00, 00, 00, 74, 24, 8A, 01, 83, C1, 01, 84, C0, 74, 4E, F7, C1, 03, 00, 00, 00, 75, EF, 05, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8B, 01, BA, FF, FE, FE, 7E, 03, D0, 83, F0, FF, 33, C2, 83, C1, 04, A9, 00, 01, 01, 81, 74, E8, 8B, 41, FC, 84, C0, 74, 32, 84, E4, 74, 24, A9, 00, 00, FF, 00, 74, 13, A9, 00, 00, 00, FF, 74, 02, EB, CD, 8D, 41, FF, 8B, 4C, 24, 04, 2B, C1, C3, 8D, 41, FE, 8B, 4C, 24...
 
[+]

Code size:
252 KB (258,048 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
NortonOnlineBackupReminder

Command:
"C:\Program Files\symantec\norton online backup\activation\nobuactivation.exe" unattended


The file nobuactivation.exe has been discovered within the following program.

Activate Norton Online Backup  by Symantec Corporation
Publisher's description - “By default, Norton Online Backup window appears in 10 days. If the trial activation is dismissed, it appears again after three days. These values may vary depending on the computer manufacturer.”
www.symantec.com
23% remove it
 
Powered by Should I Remove It?

Scan nobuactivation.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.