also @ TechSpot: Tech Tip: Turn Off your Display Using a Windows Shortcut and More
Welcome to the TechSpot OpenBoards. Please read the FAQ if you have any questions. Login to participate.
Go Back   TechSpot OpenBoards > Operating Systems & Software > Virus & Malware removal
Reload this Page Sagipsul popups

Sagipsul popups

Closed Thread
Bookmark Thread Tools
  #1  
Old 12-28-2008
Newcomer, in training
  
Member since: Dec 2008, 5 posts
I need help removing Sagipsul

Okay I did the 8 steps here are my logs.

Please help me, this is driving me nuts.

Symptoms :

I am using firefox and I am getting pop ups that resize then disapper. I click the alt-tab button and I can see the programs in the back ground, I also get this sagipsul popup everyonce and awhile.
Attached Files
File Type: log hijackthis.log (6.2 KB, 2 views)
File Type: log hijackthis.log (7.2 KB, 1 views)
File Type: txt mbam-log-2008-12-28 (20-38-52).txt (1.2 KB, 1 views)
File Type: log SUPERAntiSpyware Scan Log - 12-28-2008 - 21-36-27.log (10.9 KB, 0 views)
Last edited by kimsland; 12-29-2008 at 09:49 PM..
  #2  
Old 12-29-2008
Newcomer, in training
  
Member since: Dec 2008, 5 posts
Any help would be appreciated. Thanks.
To remove this ad, sign in. To register for a new account, click here.
  
  #3  
Old 12-29-2008
kimsland's Avatar
TS Special Forces
  
Location: Australia
Member since: Dec 2007, 17,031 posts
Well lets try to get it at least running again
Run the Norton Removal Tool: http://service1.symantec.com/Support...05033108162039

Then re-open HJT, and tick all the following entry boxes, and select fix

Quote:
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SNM] C:\Program Files\SpyNoMore\SNM.exe /startup
O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [lawumayizo] Rundll32.exe "C:\WINDOWS\system32\hofalobu.dll",s (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [lawumayizo] Rundll32.exe "C:\WINDOWS\system32\hofalobu.dll",s (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
Restart
Then update Avira, and run a full scan
  #4  
Old 12-29-2008
Newcomer, in training
  
Member since: Dec 2008, 5 posts
Okay I performed what you told me.

Avria had 3 detections and I deleted them.

What next???
Attached Files
File Type: txt hijackthis1.txt (5.3 KB, 2 views)
  #5  
Old 12-29-2008
kimsland's Avatar
TS Special Forces
  
Location: Australia
Member since: Dec 2007, 17,031 posts
Looks a lot better
A few "file missing" entries in HJT log that can be ticked and fixed (but really no issue)

How's it all running? lots better ?
  #6  
Old 12-30-2008
Newcomer, in training
  
Member since: Dec 2008, 5 posts
It's running a lot better thanks for all your help!!!

I ran malwarebytes again and it came up with a few detections.

Here's the log:

Is there anything I need to do to make sure it's gone/
Attached Files
File Type: txt mbam-log-2008-12-29 (23-34-17).txt (1.8 KB, 2 views)
File Type: txt hijackthis2.txt (5.4 KB, 1 views)
  #7  
Old 12-30-2008
kimsland's Avatar
TS Special Forces
  
Location: Australia
Member since: Dec 2007, 17,031 posts
Well I know it's strange
But you must keep running Malwarebytes (also check for updates each time)
Until it's clean (zero entries found)
That's the truth of the matter
  #8  
Old 12-30-2008
Newcomer, in training
  
Member since: Dec 2008, 5 posts
kimsland,

Thanks for all your help, it is greatly appreciated.

I rescanned using Malwarebytes and SuperAntispyware.

Both times came up clean.

I am going to update both and update Avria then I'll rescan.

Hopefully I got everything.
Closed Thread

Tip: Download Advanced SystemCare 3 Freeware - 1 Click A Day to Clean, Repair, Protect & Optimize your PC.

Thread Tools


Similar Topics
Topic Category Replies Last Post
Sagipsul popups Virus & Malware removal 11 01-05-2009 03:02 PM
Help popups in firefox (Sagipsul) Virus & Malware removal 2 12-31-2008 04:48 AM
Adware popups (Sagipsul) Virus & Malware removal 5 12-28-2008 06:39 PM
Popups, Sagipsul, Help Virus & Malware removal 5 12-28-2008 06:23 PM


All times are GMT -4. The time now is 10:18 PM.