SAGIPSUL spyware

Status
Not open for further replies.
Hello all, I too have a spyware that pops up random sagipsul windows while I'm using Firefox. I would appreciate any help that the board gives. Thanks! Attached is my HJT log.
 

Attachments

  • hijackthis.log
    15.4 KB · Views: 5
  • For anyone seeking help with malware removal, the volunteers expect 3 logs: MBAM, SAS, & HJT.

  • Following the Guide: UPDATED 8-step Viruses/Spyware/Malware Preliminary Removal Instructions creates a common beginning for an initial assessment.

  • Just a few key symptoms can better focus the efforts.

  • Seeing is believing - For anyone complaining of Sagipsul spyware -
    Without supporting logs, anything caught by HJT often points to what can be handled by proper usage of MBAM and/or SAS.
    Code:
    O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)  >> broken
    O2 - BHO: (no name) - {AEB6E601-9A6B-4533-82D7-71E87FA337E5} - C:\WINDOWS\system32\byXpNecy.dll  >> unknown
    O2 - BHO: {d997bf9b-3126-a948-20a4-481f5ec08e8d} - {d8e80ce5-f184-4a02-849a-6213b9fb799d} - C:\WINDOWS\system32\wzasat.dll
    O20 - AppInit_DLLs: wzasat.dll  >> unknown
    O20 - Winlogon Notify: ACNotify - ACNotify.dll (file missing)  >> broken
    If the HJT scan catches things not cleaned by MBAM & SAS, this type of information will lead to adapting to changes.

Other Considerations
Sagipsul malware may be extending the runtimes for MBAB. Please try to disconnect from the Internet while scanning with MBAB.
 
Status
Not open for further replies.
Back