Hello. I've been infected by sagipsul and vundo. I've been through the 8 step virus removal process. I've attached the logs below. Am I still infected? Thanks for your help.
It appears that the infection was handled quite well.
Rescan with MBAB followed by SAS. Repeat until clean or something that cannot be cleaned. For this case, the next scan should be clean.
HJT scan informs what has not been handled (computer restart before HJT scan)
Caught by HJT.
Code:
O20 - AppInit_DLLs: ………….. [B]etpxde.dll [/B] >> not listed
[LIST]
[*]Confirm file appearing in code box has been deleted.
[*]'Regedit' can be used to delete O20 references to file
[*]Or wait for updated MBAM to clean this reference.
[/LIST]
If symptoms remain, post new logs and describe conditions.
Following clean scans, establish a new clean restore point and Clear your existing System Restore points:
New
Go to Start > All Programs > Accessories > System Tools > System Restore>
Select Create a restore point> OK.
Clear Old
go to Start > Run > cleanmgr > Select the More options tab >
Choose the option to clean up System Restore > OK
This will remove all restore points except the new one you just created.
Hi, after several scans with MBAB and SAS it looks like the virus is gone. I deleted etpxde.dll from the registry. Deleted all my old system restore points. I'm now using Avast and Comodo. Not had any more problems yet. Thank you so much!
HJT has problem with removing this type of entry (report from another case)
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file) >> broken (AVG)
