sagispul pop ups

By Scorpio55
Jan 6, 2009
  1. Hey gang. Was having the same problem with sagispul pop ups and also one called zabasphere. Followed the 8 steps and am attaching my logs. Can somebody knowledgeable please check them and see if I got everything? There was LOTS of garbage.
    Any ideas as to where the sagispul trojan comes from? The only thing I've done recently out of the ordinary was to charge my nieces ipod on my computer.

    Many thanks for your help and the great, thorough instructions on this site.
  2. rf6647

    rf6647 TS Maniac Posts: 829

    C:\WINDOWS\SYSTEM32\[B]iylyyb.dll[/B] (Trojan.Vundo) -> Delete on reboot.
    MBAB did not handle all that it found until the computer restart.

    It appears that the infection is mostly handled.

    Rescan with MBAB & SAS (run as pairs) until clean or something that cannot be cleaned.

    HJT scan informs what has not been handled (computer restart before HJT scan)

    Caught by HJT.
    O20 - AppInit_DLLs: [B]iylyyb.dll[/B]
    [*]Confirm file has been deleted. 
    [*]HJT  Tick & fix will remove this.
    [*]Or wait for updated MBAM to clean this reference.
    If symptoms remain, post new logs and describe conditions.

    Following clean scans establish a clean restore point.

    Establish a new clean restore point and Clear your existing System Restore points:
    • New
      • Go to Start > All Programs > Accessories > System Tools > System Restore>
      • Select Create a restore point> OK.
    • Clear Old
      • go to Start > Run > cleanmgr > Select the More options tab >
      • Choose the option to clean up System Restore > OK

        • This will remove all restore points except the new one you just created.
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...