also @ TechSpot: TechSpot 2X Giveaway: Win an ATI Radeon HD 5850, BenQ LED Mini Projector, more...
Welcome to the TechSpot OpenBoards. Please read the FAQ if you have any questions. Login to participate.

Go Back   TechSpot OpenBoards > Operating Systems & Software > Virus & Malware removal

Sagipsul Popups

Closed Thread
Page 1 of 2 1 2
Bookmark Thread Tools
  #1  
Old 12-29-2008
Newcomer, in training
 
Member since: Dec 2008, 12 posts
Sagipsul Popups

Hi All,
This is driving me crazy, I rely on my computer for work and it is basically non functional with all these pop ups. Anyway, thanks in advance for any help u can give. My HijackThis logfile follows...
Attached Files
File Type: log hijackthis.log (8.5 KB, 5 views)

Last edited by mike93rd; 12-30-2008 at 02:46 AM.. Reason: more up to date logfiles below
  #2  
Old 12-29-2008
kimsland's Avatar
TS Special Forces
 
Location: Australia
Member since: Dec 2007, 17,457 posts
Follow this procedure: UPDATED 8-step Viruses/Spyware/Malware Preliminary Removal Instructions

By the way you really should disable as many startups (shortcuts) as humanly possible! (ie you have too many)
Have a look here: Startup Control Panel
To remove this ad, sign in. To register for a new account, click here.
  
  #3  
Old 12-30-2008
Newcomer, in training
 
Member since: Dec 2008, 12 posts
Hi,
I followed the 8 step procedure you indicated. I am posting the following logfiles as requested. Also, I am not getting popups in Internet Explorer at the moment, however my Mozilla will not open, when i double click it a Mozillia crash reporter popups up and says, "Firefox had a problem and crashed. We'll try to restore your tabs and windows when it restarts." I tryed deleting it and then reinstalling but i still get that message, not sure if original virus or one of the virus removal software removed a key file or something? anyway, logfiles are below

Internet Explorer is also crashing now after being opened for several minutes
Attached Files
File Type: log AVSCAN-20081229-142041-DE53E7D5.LOG (110.7 KB, 3 views)
File Type: log SUPERAntiSpyware Scan Log - 12-30-2008 - 01-09-09.log (28.4 KB, 1 views)
File Type: log hijackthis.log (10.5 KB, 1 views)
  #4  
Old 12-30-2008
kimsland's Avatar
TS Special Forces
 
Location: Australia
Member since: Dec 2007, 17,457 posts
Waiting on full Malwarebytes scan log
Note if that scan has had many Malwares removed, you will need to scan with it again
  #5  
Old 12-30-2008
Newcomer, in training
 
Member since: Dec 2008, 12 posts
I am not sure whats going on with that scan, but the last couple times I tried my computer seems to go to sleep and does not wake up, my dell lcd will say no input signal, although i can hear my power for the pc is on, and also computer light is on. Normally when that happens i just move my mouse or hit a keyboard key to wake up computer, but in this case nothing happens. I will try again now.
  #6  
Old 12-30-2008
kimsland's Avatar
TS Special Forces
 
Location: Australia
Member since: Dec 2007, 17,457 posts
The dispersing voltage idea, noted in this guide, may help
  #7  
Old 12-30-2008
Newcomer, in training
 
Member since: Dec 2008, 12 posts
Ran all scans and have updatted logfiles

Okay, successfully ran malware bites software and now have the logfile for that. I will post that below with the new HijackThis log file. Thanks in advance for any help you can give.
Attached Files
File Type: log hijackthis.log (9.8 KB, 1 views)
File Type: txt mbam-log-2008-12-30 (05-18-27).txt (9.0 KB, 3 views)
  #8  
Old 12-30-2008
kimsland's Avatar
TS Special Forces
 
Location: Australia
Member since: Dec 2007, 17,457 posts
Oh dear !
You will need to run Malwarebytes yet again, as there were sooo many removed Malwares; I'm very sure that Malwarebytes will now start to remove the previously hidden ones.
Actually you may even need to do this twice over (removing all found issues at the end of the scan)
Best you do that, I feel
  #9  
Old 12-30-2008
Newcomer, in training
 
Member since: Dec 2008, 12 posts
Okay,
For some reason everytime I run this software, and leave my computer and come back it seems that the screen is black as if no input signal is coming from computer (even though i could say that computer power is on)..i tried the fix you said about powering down, and taking out power cord and holding power button in for 15 seconds. But even after doing this the same thing happens. I am not sure if it is coincidence or if this software is somehow causing this when it runs. In any case the one time the software worked was yesterday in which i was in front of computer the entire time (btw it took software about 4-5 hours to run, not sure if this is normal). Is it essential that this runs again, or can you take look at the logs i have and see if everything looks proper, keep in mind i have spent about 7 hours today trying to run the software twice and both times half way threw when i walk away from computer it turns screen black...thanks in advance.
Mike
To remove this ad, sign in. To register for a new account, click here.
  
  #10  
Old 12-30-2008
kimsland's Avatar
TS Special Forces
 
Location: Australia
Member since: Dec 2007, 17,457 posts
That's difficult

Lets see
You seem to be having a Power Management issue, whilst the scans are being run (probably due to some cutout time) The only issue is that it doesn't come back (I've seen this before too)

You need to turn off any Screen Saver
Locate Power Management console (in Control Panel) and disable any turn off
And ideally update Malwarebytes again (it updates a lot)
And then possibly run it in Safe Mode

Safe Mode can be accessed by pressing F8 at Windows startup
Just in case you need to find where Malwarebytes lives in your computer, it's here:
C:\Program Files\Malwarebytes' Anti-Malware

Please run it again after doing the above (sorry, this tool is best suited to ridding your Malware infection)
  #11  
Old 12-30-2008
Newcomer, in training
 
Member since: Dec 2008, 12 posts
Its currently running now, i just been sitting in front of computer to make sure everything runs okay...its about half way done, although it hasnt detected any infected objects yet...is this normal, or is it definetly suppose to find something?
  #12  
Old 12-30-2008
kimsland's Avatar
TS Special Forces
 
Location: Australia
Member since: Dec 2007, 17,457 posts
Just wait until it's finished (then you MUST view the log and remove the found infections)

By the way, maybe move the mouse every so often (to avoid the computer going to sleep after a delay)

By the way, as I may sign off soon (that'll be right, you're saying!) As I've been on for 3 hrs now
I think it would be a good idea for you to run CheckDisk for Xp

I note that you may not see this message until later on as I'm presently editing. But that's alright

CheckDisk instructions:
Run CheckDisk
  • Open My Computer
  • Right Click on C drive
  • Select Properties
  • Select Tools tab
  • Select Check Now button
  • Tick "Automatically fix file system errors"
  • Start YES OK
  • Restart your computer
  • Wait for Check Disk to start/finish

Last edited by kimsland; 12-30-2008 at 08:58 PM..
  #13  
Old 12-30-2008
Newcomer, in training
 
Member since: Dec 2008, 12 posts
OMG, i just sat in front of computer for 3 hours running scan, the scan completed and then it said click on okay to show results...and when i clicked on that for some reason it to me back to the initial scanner tab, please tell me it did not lose my results and i have to do the whole thing again??
  #14  
Old 12-30-2008
rev_olie's Avatar
TechSpot Booster
 
Location: the lab men wont tell me
Member since: Apr 2006, 602 posts
System specs
im afraid it porably did
Ive written user instructions here if you need them but sounds like you have deeper problems than that.
  #15  
Old 12-31-2008
kimsland's Avatar
TS Special Forces
 
Location: Australia
Member since: Dec 2007, 17,457 posts
@rev_olie
Please change your picture under: "Scanning" to Highlight "Perform full scan"
Also, please change "your direct link" to here: http://www.malwarebytes.org/mbam/program/mbam-setup.exe

Quote:
Originally Posted by mike93rd View Post
OMG, ...please tell me it did not lose my results and i have to do the whole thing again??
@mike93rd
My comment below this line.
  #16  
Old 12-31-2008
Newcomer, in training
 
Member since: Dec 2008, 12 posts
updated log files after another run of malware bytes

okay, was able to run the malware bytes full scan again, after doing so I also re ran the hijackthis, both updated logfiles are attached below. Thanks.
Attached Files
File Type: txt mbam-log-2008-12-31 (00-31-06).txt (1.2 KB, 3 views)
File Type: log hijackthis2.log (9.8 KB, 1 views)
  #17  
Old 12-31-2008
kimsland's Avatar
TS Special Forces
 
Location: Australia
Member since: Dec 2007, 17,457 posts
Please un-install: Trend Micro Internet Security 12

Then run HJT scan, and tick the following, then fix them all
Quote:
O4 - HKUS\S-1-5-19\..\Run: [woraduzipa] Rundll32.exe "C:\WINDOWS\system32\wimesabi.dll",s (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [woraduzipa] Rundll32.exe "C:\WINDOWS\system32\wimesabi.dll",s (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-507921405-1383384898-839522115-1005\..\Run: [woraduzipa] Rundll32.exe "C:\WINDOWS\system32\wimesabi.dll",s (User 'postgres')

O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O20 - AppInit_DLLs: hmvgld.dll,C:\WINDOWS\system32\jideraye.dll
Then flush out your System Restore points
How to turn off and turn on System Restore in Windows XP
http://support.microsoft.com/kb/310405
  #18  
Old 12-31-2008
Newcomer, in training
 
Member since: Dec 2008, 12 posts
Updated logfile

Okay, Just did what you mentioned and reposted a updated HJT logfile below. My computer appears to be clean now with no popups. Thanks for all your help, very much appreciated. If you can give a final look at the logfile to make sure everything looks okay.
Attached Files
File Type: log hijackthis3.log (8.5 KB, 0 views)
  #19  
Old 12-31-2008
rev_olie's Avatar
TechSpot Booster
 
Location: the lab men wont tell me
Member since: Apr 2006, 602 posts
System specs
@ Kim
Ive changed the link to the one you specified and will change the picture soon. Hope its no problem posting those guides on here
  #20  
Old 01-03-2009
Newcomer, in training
 
Member since: Dec 2008, 12 posts
system still not working right

Hi,
For some reason my system must still be unstable somehow, have several issues and not sure if it has to do with the initial virus, or somehow it has to do with the newly installed software all not playing well together (avira anti vir and superanti spyware) i used to have trend micro but uninstalled it, even though i still get pop up message when i turn on machine asking if i want to renew subscription). okay so here are the issues i been noticing...

My wireless highspeed nternet connection has been unstable...seeming to give out more than nomral..yesterday for some reason when this was happening i actually clicked on mozilla Firefox on desktop, and also other application that connect to internet like poker software and the shortcuts didnt even seem to work...this was only briefly and when i restarted machine shortcuts worked again.

Can someone please look new logfile i just ran and tell me if something doesnt look right. As mentioned before i play online poker and these disconnection issues are actually costing me money sometimes. Thanks in advance.
Attached Files
File Type: log hijackthisnew.log (8.4 KB, 1 views)
Closed Thread
Page 1 of 2 1 2

Tip: Download Advanced SystemCare 3 Freeware - 1 Click A Day to Clean, Repair, Protect & Optimize your PC.

Thread Tools


Similar Topics
Topic Category Replies Last Post
Sagipsul popups Virus & Malware removal 11 01-05-2009 03:02 PM
Sagipsul popups Virus & Malware removal 7 12-30-2008 07:16 PM
Sagipsul Popups Firefox Virus & Malware removal 1 12-29-2008 04:55 AM
Popups, Sagipsul, Help Virus & Malware removal 5 12-28-2008 06:23 PM


All times are GMT -4. The time now is 08:34 PM.