Virus: NAR.VBS????????

Question

I was trying to view photographs from my memory card/card reader. I noticed some of the images weren't loading and when I clicked on it, there was a pop up message saying 'The file "_____" is corrupt and causing plug-in errors. Should this file be added to the quarantine?'

I clicked both 'yes' and 'no' but the images still will not show up...

Now...

Before this even happened, (when I was trying to look at my pictures) it said that I have something called "NAR.VBS" I've already done a search on this threat but since I am not at all familiar with how to delete this thing, I wasn't sure of what to do. I would appreciate it if someone would give me a step by step guide on what exactly I have to do to get rid of this virus or whatever it is. By the way, I have AVG but it didn't detect anything before, the message that said "NAR.VBS" only came up when I tried opening up the pictures...

Answer 1

Update your anti-virus, remember to only have one anti-virus installed on your PC

http://www.avast.com/eng/download-avast-...  [Free home edition]

Download SuperAntiSpyware

http://www.superantispyware.com/superant...   [Free home edition]

Restart your PC in safe mode, and run a full scan with both.

http://www.pchell.com/support/safemode.s...

While in safe mode, you may also want to have a look at your start up items by using msconfig.

http://www.netsquirrel.com/msconfig/

Be careful with the items you uncheck, you can have a look here to see if they are necessary

http://www.greatis.com/appdata/index.htm...

You should also have a look at your IE Add-ons while in safe mode.

http://www.microsoft.com/windowsxp/using...

Disable any you do not use.

After you reboot back to normal mode, download and install ccleaner to fix any registry problems and clean up old temp files.

http://www.ccleaner.com   [Free]

Answer 2

Download:

http://downloads.andymanchesta.com/Remov...

Refer to:

http://www.bleepingcomputer.com/forums/t...

You can also install: (both free and effective)

Spybot - http://www.safer-networking.org/en/mirro...

Ad-Aware - http://lavasoft.com/single/trialpay.php

Answer 3

delete them