Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Help with MS Juan and Trojan Vundo

  • Please log in to reply
1 reply to this topic

#1 jorge8907


  • Members
  • 26 posts
  • Gender:Male
  • Location:New Mexico
  • Local time:09:49 AM

Posted 09 January 2009 - 09:12 PM


I've been having problems with removing the MS Juan/Trojan.Vundo combination. I ran the free version of AVG anti-virus and it was able to remove several threats on my computer system. I also ran Malawarebyte's Anti-Malware and it was able to remove most of the problematic threats also.

But when I keep doing a scan using Malawarebytes' program, I keep seeing two of the same infected files. I am not sure what logs I should post but I will post my Malawarebyte's log down below. Please inform me if any more logs are needed.

Malwarebytes' Anti-Malware 1.32
Database version: 1635
Windows 5.1.2600 Service Pack 1

1/9/2009 6:21:49 PM
mbam-log-2009-01-09 (18-21-49).txt

Scan type: Quick Scan
Objects scanned: 64381
Time elapsed: 10 minute(s), 37 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Edited by Orange Blossom, 09 January 2009 - 09:37 PM.
Moving from HiJack This forum to Am I Infected as this is a MBAM log. ~ OB

BC AdBot (Login to Remove)


#2 Mikemon


  • Members
  • 2 posts
  • Local time:07:49 AM

Posted 09 January 2009 - 09:44 PM

I was infected with MS Juan the other day and tried everything to get rid of it, I finally downloaded Combofix and ran it, that took care of the problem for me. Good Luck!

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users