Go Back   Tech Support Forum > Microsoft Support > Windows XP Support

c:\nar.vbs

This is a discussion on c:\nar.vbs within the Windows XP Support forums, part of the Tech Support Forum category. hi, after a scan with my antivirus nod32 whith the cleaning of 2 files, when i click twise on my


Closed Thread
 
Thread Tools Search this Thread
Old 07-13-2008, 01:20 AM   #1
Registered Member
 
Join Date: Jul 2008
Posts: 1
OS: xp sp2



hi,
after a scan with my antivirus nod32 whith the cleaning of 2 files, when i click twise on my hd drive i recive the follow message:
"C:\nar.vbs not foud"
how can i fix this problem?
thanks for your cooperation

__________________
lujs70 is offline  
Old 07-13-2008, 03:38 AM   #2
TSF Team Emeritus
Microsoft Visitng Expert
 
Dunedin's Avatar
 
Join Date: Jul 2007
Location: Over the Forth from Edinburgh, Scotland
Posts: 4,277
OS: WinXP Pro/Windows7 Ultimate



Hello lujs70

Please follow our 5 Step process outlined here:

http://www.techsupportforum.com/secu...oval-help.html

After running through all the steps, please post the requested logs in the HijackThis Log Help forum.
http://www.techsupportforum.com/secu...this-log-help/

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please be patient when waiting for a reply. This forum is very busy and someone will help as soon as possible.

Thanks

__________________
Dunedin is offline  
Old 11-02-2008, 03:13 PM   #3
Registered Member
 
Join Date: Nov 2008
Posts: 2
OS: Windows XP Professional SP3



Quote:
Originally Posted by lujs70 View Post
hi,
after a scan with my antivirus nod32 whith the cleaning of 2 files, when i click twise on my hd drive i recive the follow message:
"C:\nar.vbs not foud"
how can i fix this problem?
thanks for your cooperation
Your NAR.VBS file disappeared because the code creates the files on "ALL" drives. I've tested and it does not apply to network drives, so if you have Mapped Network Drives. Because of that behavior... your AV considers it to be a WORM. However, if it executed for even a second, then your antivirus probably didn't fix the registries.. because it's not meant to do that. Instead, here is a compressed folder that I've dedicated a few hours to test and work with.

I've fixed this and created a fix for others to use.
http://www.itjournal-stevekline.com/NarKiller.zip - The Fix...
http://www.itjournal-stevekline.com/nar.txt - The curse... in plain text format.

Contains 3 Files:
1 REGISTRY FIX FILE - Reapplies Microsoft Windows XP Default Values
1 REGISTRY DELETE FILE - To remove the bad registry keys and values
1 Batch File to simplify executions... and make your life easier.

The Batch files primary execution is to kill the resident running application WSCRIPT. WSCRIPT.EXE is an safe program that comes with an installation of windows and is used to execute VBS scripts. Not all VBS scripts are unsafe.... This one is safe... it's just annoying and ruins your Autorun feature.

The secondary execution in the batch file is to delete the file from all potential places at all. Once you've killed the WSCRIPT task, then you can remove the VBS without it running. You can delete the VBS files from all places... but it will still be running from memory with the WSCRIPT application.

The third execution of the batch file is to merge the registry keys and strings to your current registry, either deleting or modifying existing entries. You can have an "IT PRO" take a look, they're safe and in good intention.

You may edit these if you wish, but I am not responsible for any damages you cause by modifying those files. The original files are also stored on my PC.
If you have any problems with the registry files appending you may have a different registry version. There is 4 & 5.. This modification/repair has been created to fix Registry version 5.

To be able to modify these files I recommend you visit Microsofts knowledge base article regarding Registry subkeys and values.
http://support.microsoft.com/kb/310516

All comments can goto ekline@email.itt-tech.edu

This portion after is only key words to promote Google Searches for the Nar.vbs repair compressed folder.

NAR.VBS FIX REMOVE DELETE UNINSTALL NAR .VBS
__________________
Sicinthemind is offline  
Old 06-07-2009, 05:27 PM   #4
Registered Member
 
Join Date: Nov 2008
Posts: 2
OS: Windows XP Professional SP3



Quote:
Originally Posted by Sicinthemind View Post
Your NAR.VBS file disappeared because the code creates the files on "ALL" drives. I've tested and it does not apply to network drives, so if you have Mapped Network Drives. Because of that behavior... your AV considers it to be a WORM. However, if it executed for even a second, then your antivirus probably didn't fix the registries.. because it's not meant to do that. Instead, here is a compressed folder that I've dedicated a few hours to test and work with.

I've fixed this and created a fix for others to use.
http://www.itjournal-stevekline.com/NarKiller.zip - The Fix...
http://www.itjournal-stevekline.com/nar.txt - The curse... in plain text format.

Contains 3 Files:
1 REGISTRY FIX FILE - Reapplies Microsoft Windows XP Default Values
1 REGISTRY DELETE FILE - To remove the bad registry keys and values
1 Batch File to simplify executions... and make your life easier.

The Batch files primary execution is to kill the resident running application WSCRIPT. WSCRIPT.EXE is an safe program that comes with an installation of windows and is used to execute VBS scripts. Not all VBS scripts are unsafe.... This one is safe... it's just annoying and ruins your Autorun feature.

The secondary execution in the batch file is to delete the file from all potential places at all. Once you've killed the WSCRIPT task, then you can remove the VBS without it running. You can delete the VBS files from all places... but it will still be running from memory with the WSCRIPT application.

The third execution of the batch file is to merge the registry keys and strings to your current registry, either deleting or modifying existing entries. You can have an "IT PRO" take a look, they're safe and in good intention.

You may edit these if you wish, but I am not responsible for any damages you cause by modifying those files. The original files are also stored on my PC.
If you have any problems with the registry files appending you may have a different registry version. There is 4 & 5.. This modification/repair has been created to fix Registry version 5.

To be able to modify these files I recommend you visit Microsofts knowledge base article regarding Registry subkeys and values.
http://support.microsoft.com/kb/310516

All comments can goto ekline@email.itt-tech.edu

This portion after is only key words to promote Google Searches for the Nar.vbs repair compressed folder.

NAR.VBS FIX REMOVE DELETE UNINSTALL NAR .VBS
Link Updates...
http://www.itjournal-stevekline.com/ui/NarKiller.zip - Includes U3 LaunchPad reinstaller incase someone formatted their flash drive.
__________________
Sicinthemind is offline  
Closed Thread

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is on
Smilies are on
[IMG] code is on
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Post a Question


» Site Navigation
 > FAQ
  > 10.0.0.2


All times are GMT -7. The time now is 11:04 AM.


Copyright 2001 - 2014, Tech Support Forum

Windows 7 - Windows XP - Windows Vista - Trojan Removal - Spyware Removal - Virus Removal - Networking - Security - Top Web Hosts