MS Juan Virus

forbiden-orc · Jan 15, 2009

Ok well I recently got the MS juan virus and I seemed to have gotten rid of it. I turned system restore off, ran malware bytes, super anti spyware, ad-aware, CCleaner, avg free and spybot search and destroy all in safe mode (they are all updated to there current versions). This seems to have gotten rid of the virus but now my windows security center is always disabled when I start my computer. When I go into "services.msc" and change the security center start up type back to automatic it just defaults back to disabled every time. I don't get any errors and I don't have zone alarm which I read shuts off security center. All I want to know is, does this mean that I still have the virus or is it something else? If you need me to post some information just let me know what and I will do it.

Thanks.

dr.moriarty · Jan 17, 2009

Welcome to Major Geeks!

Turning off system restore was a bad idea. An infected restore point is better than none, if something went wrong during your attempts to remove the malware.

If you wish to have us check your machine - please follow the instructions in the below link and attach the requested logs when you finish these instructions. See if you can now run the scanners in Normal Boot Mode, as to detect malware running in processes that were shut down.

READ & RUN ME FIRST. Malware Removal Guide

forbiden-orc · Jan 18, 2009

Super Anti-Spyware Troubles

I recently installed super anti-spyware and while installing it I got a blue screen and my computer restarted. When the computer came back on it was installed and worked. Then the next day I got the blue screen again while having only itunes and Mozilla running. So i decided to delete SAS, when i clicked on the folder containing SAS I got the blue screen again. I used the SAS uninstaller and got rid of it. Now when I try to open my videos folder I get the blue screen again every time. Here's what its says, PAGE_FAULT_IN_NONPAGED_AREA, ***Stop: 0X00000050 (0XE12F1000, 0X00000000, 0XF74EC8D6, 0X00000001). Is this caused by some trace of SAS still on my computer or something else? I've never had this blue screen before, it all started when I installed SAS. I can access the files in safe mode without getting the blue screen.

dr.moriarty · Jan 18, 2009

forbiden-orc

If you have problems where no tools seem to run, please try following the steps given in the below and then continue on no matter what you find. You only need to try the TDSSserv steps if having problems getting scans in the Read & Run Me First.

TDSSserv Non-Plug & Play Driver Disable

If something does not run, write down the info to explain to us later but keep on going.

Do not assume that because one step does not work that they all will not.

READ & RUN ME FIRST. Malware Removal Guide

Notes:

If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode. You can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

Starting your computer in Safe mode

If you have problems downloading on the problem PC, download the tools on another PC and burn to a CD. Links are given in the Step 2: Installing Tools and Running Scans section for downloading the definitions for the scanners. Then copy them to the problem PC. Yes, you could use a flash drive too but flash drives are writeable and infections can spread to them.

Log in or Sign up

MS Juan Virus

forbiden-orc Private E-2

dr.moriarty Malware Super Sleuth Staff Member

forbiden-orc Private E-2

dr.moriarty Malware Super Sleuth Staff Member