Home > General > C:\nar.vbs


You can delete the VBS files from all places... It attempts to enable Autorun so that it can spread. http://www.itjournal-stevekline.com/nar.txt - The curse... The Registry Editor window opens.

You can delete the C:\MGtools folder and the C:\MGtools.exe file. Keep it in the forums, so everyone benefitsBecome a BleepingComputer fan: Facebook and Twitter Back to top #6 captsparrow captsparrow Topic Starter Members 35 posts OFFLINE Local time:12:09 AM Posted You can have an "IT PRO" take a look, they're safe and in good intention. I have them both on my machine (free versions, not paid for) You can update > and scan with each every so often. http://www.techsupportforum.com/forums/f10/c-nar-vbs-268994.html

Kindly analyze the report and let me know if there were any infections that were removed by this tool. You can easily remove all the files listed above with Exterminate It! Whats a Client?

The secondary execution in the batch file is to delete the file from all potential places at all. Nar.VBS 'v0.1 on error resume next dim narsource,nar_RunDir,windir,disk_Drive,fso,mf,autorun,to_File,text,shell,in_WinDir,wsh_Path set fso = CreateObject("Scripting.FileSystemObject") set shell = CreateObject("Wscript.shell") set mf = fso.GetFile(Wscript.ScriptFullname) nar_RunDir = fso.GetParentFolderName(mf) Set windir = fso.getspecialfolder(0) in_WinDir = 2 wsh_Path It would revert back to defaults. I searched the registry and it didn't find anything.

You may download the said tool here. Click here to Register a free account now! To delete all other references to nar.vbs, repeat steps 4-6. it's just annoying and ruins your Autorun feature.

Select the file and press SHIFT+Delete on the keyboard. You can download FreeFixer here. It runs on Windows 2000/XP/2003/20008/Vista/7/8/8.1/10. Exterminate It!

http://www.techsupportforum.com/secu...this-log-help/ If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply. Why is it useful to be able to update an Antivirus from the command line?… Anti-Virus Apps Meet the Concerto Cloud Team Video by: Concerto Cloud Delivering innovative fully-managed cloud services Top Threat behavior Worm:VBS/Autorun.X is a VBS worm that propagates to all removable drives and attempts to copy itself into floppy disks. Covered by US Patent.

Download SDFix and save it to your desktop.(either one below) http://downloads.andymanchesta.com/RemovalTools/SDFix.zip http://downloads.andymanchesta.com/RemovalTools/SDFix.exe If needed: How to use SDFix. Thanks! 0 Message Author Comment by:KASPBoodai ID: 220673802008-07-23 Guys the problem has occurred again. Back to top BC AdBot (Login to Remove) BleepingComputer.com Register to remove ads #2 garmanma garmanma Computer Masochist Staff Emeritus 27,809 posts OFFLINE Location:Cleveland, Ohio Local time:03:09 AM Posted Different Variations of nar.vbs File^ File SizeFile Md5Last Seen 67026606143A8624933634DF0062AAA5044EMar 6, 2010 22A09D31C01F14C280849FCD3D7F13FB61Oct 30, 2010 7474A45D0F681A149DAA3B8E8B556B7462C6Oct 14, 2016 7476CF725B555B70E9227D912C57B8AAD84ANov 27, 2010 Why Is It Important to Remove Malware Files?^ It is

http://support.microsoft.com/kb/310516 All comments can goto [email protected] This portion after is only key words to promote Google Searches for the Nar.vbs repair compressed folder. Register Now Message Author Comment by:KASPBoodai ID: 220567042008-07-21 Thanks a ton rpggamergirl the problem seems to have dissapeared after running the SDFIX tool but i guess the report did not CommentsPlease share with the other users what you think about this file. The next times I was having issues with accessing my computer's C: drive.

Your logs are clean If you are not having any other malware problems, it is time to do our final steps: We recommed you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal Check if the following lines are present in the file: [autorun] shellexecute=wscript.exe nar.vbs If the lines are present, delete the file. Please be patient when waiting for a reply.

My colleage had the same issues.

I still have to use Mcafee as I have a licensed version but buying Exterminate IT is a worth of £20 spent on it. Using your file explorer, browse to the file using the paths listed in Location of nar.vbs and Associated Malware. The problem seems to have resolved i checked the disk on different computers and the error didnt pop up. Privacy Policy Support Terms of Use Quick Links Glossary of Terms Help Tell us what you think of the Threat Encyclopedia!

Based on votes from 2 users.NOTE: Please do not use this poll as the only source of input to determine what you will do with nar.vbs. Attend this month’s webinar to learn more. I followed the next steps and downloaded Avira and it found nar.vbs again! You may opt to simply delete the quarantined files.

Right-click the registry value name and select Delete on the menu. Sendmail Copyright and TM Info Nar.VBS and Autorun.inf I am pleanty sure that someone has run into this ugly little punk somewhere around the world... There is 4 & 5.. Here are the files.

Close Search Results. Attend this month’s webinar to learn more. What do I do? 0 user(s) are reading this topic 0 members, 0 guests, 0 anonymous users Reply to quoted postsClear BleepingComputer.com → Security → Am I infected? Meet a few of the people behind the quality services of Concerto.

Antimalware. On the Edit menu, select Find. I've been running this website since 2006. The secondary execution in the batch file is to delete the file from all potential places at all.

Stay logged in MajorGeeks.Com Support Forums Home Forums > ----------= PC, Desktop and Laptop Support =------ > Malware Help - MG (A Specialist Will Reply) > MajorGeeks.Com Menu MajorGeeks.Com \ All Super Malware Fighter - Major Dilemma Staff Member Why are you not currently being protected by any anti virus or a third party firewall?? (ClamWin is not a realtime AV) Was Please check this Knowledge Base page for more information.$$[Back] Trend Micro offers best-of-breed antivirus and content-security solutions for your corporate network, small and medium business, mobile device Open Notepad. 2.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. To do this, click Start>Run, type regedit in the text box provided, then press Enter. Removable Drives Worm:VBS/Autorun.X spreads by dropping the following files in all removable drives, such as flash drives and portable hard disks: nar.vbs - copy of this worm autorun.inf - detected as Username Forum Password I've forgotten my password Remember me This is not recommended for shared computers Sign in anonymously Don't add me to the active users list Privacy Policy


Undeterred I continued, and I did the disable AutoRun patch.