also @ TechSpot: Tech Tip: Turn Off your Display Using a Windows Shortcut and More
Welcome to the TechSpot OpenBoards. Please read the FAQ if you have any questions. Login to participate.

Go Back   TechSpot OpenBoards > Operating Systems & Software > Virus & Malware removal

Sagipsul pop ups as well, pls check my log, thanks

Closed Thread
Bookmark Thread Tools
  #1  
Old 12-29-2008
Newcomer, in training
 
Member since: Dec 2008, 5 posts
Sagipsul pop ups as well, pls check my log, thanks

I've been getting these pop ups for more than a week now. Someone please help me, I cant stand this s..t anymore. Below is my log. Please please help me. Thanks in advance
Attached Files
File Type: log hijackthis.log (8.7 KB, 2 views)

Last edited by dave969; 12-29-2008 at 11:52 PM..
  #2  
Old 12-30-2008
BlkHeartWolf's Avatar
TechSpot Member
 
Location: Minnesota
Member since: Dec 2008, 160 posts
System specs
Turn Off system restore delete temporary internet files and cookies
do a disk cleanup in your accessories folder / system tools
get and run malwarebytes malwarebytes dot org then run hijackthis again and select any files and or keys in the attachment I posted here.
in the file please my note that your browser my be locked and unable to reset to default until cleaned. once you have done the above scans reset your browser IE to default.

reboot once complete, run hijack this and post your log here again
Attached Files
File Type: doc ANTI.doc (24.0 KB, 5 views)
To remove this ad, sign in. To register for a new account, click here.
  
  #3  
Old 12-30-2008
Newcomer, in training
 
Member since: Dec 2008, 5 posts
Thanks so much. Im in the process of running malwarebytes atm. What do you mean by saying "cleanup in your accessories folder / system tools" ? I ran ccleaner earlier today, is that gonna be enough? Sorry Im not the smartest one when it comes to fixing comps. Thank you again
  #4  
Old 12-30-2008
BlkHeartWolf's Avatar
TechSpot Member
 
Location: Minnesota
Member since: Dec 2008, 160 posts
System specs
Start/Programs/accessories/system tools/disk cleanup
  #5  
Old 12-30-2008
Newcomer, in training
 
Member since: Dec 2008, 5 posts
Ok, Ive done everything as you said. The google updater is the only file that doesnt get fixed. My comp seems to run better. Thanks and here is my log file again:
Attached Files
File Type: log hijackthis.log (7.7 KB, 1 views)
  #6  
Old 12-30-2008
Newcomer, in training
 
Member since: Dec 2008, 5 posts
Would you also know whats causing my mouse pointer to skip? The more programs I run the closer I have to keep the receiver to my mouse in order to get any pointer movement at all. When Im not running anything I can keep it at a far distance and itll run smooth. However when I play a movie in WMP the pointer will either skip or not move at all unless I bring the receiver very close to the mouse. Im using laser logitech mouse that I just purchased and I had the same problem with my old optical one before. Thanks for any help as always.
  #7  
Old 12-30-2008
BlkHeartWolf's Avatar
TechSpot Member
 
Location: Minnesota
Member since: Dec 2008, 160 posts
System specs
if you have a antivirus trying to delete the file that keeps getting re created it overloads the system. i will check the log file now

It looks better too
Now in the bar by the clock right click on the icons and close/exit all you can for startup programs.
go to [START] [RUN] type in MSCONFIG on startup tab uncheck \WINDOWS\System32namehego.dll and jtenftnmxeqx.dll
reference the keys i listed below to guid you for these names too
[kklmbhwushmaf] [turigudiso] and click apply

If you have certian antivirus protection you may get a error saying it had a proble but ignore it and proceed but make note of the error.

Run Maiwarebytes and hyjack this again just like before, but when finished and rebooting hit the F8 key to go in the safe mood.

Find and delete the files in the keys below
\WINDOWS\system32\namehego.dll and jtenftnmxeqx.dll


O4 - HKLM\..\Run: [turigudiso] Rundll32.exe "\WINDOWS\system32\namehego.dll",s
O4 - HKLM\..\Run: [kklmbhwushmaf] \WINDOWS\System32\regsvr32.exe /s "\WINDOWS\system32\jtenftnmxeqx.dll"

Last edited by kimsland; 12-30-2008 at 02:16 AM..
  #8  
Old 12-30-2008
Newcomer, in training
 
Member since: Dec 2008, 5 posts
Thank you again for your reply. I did everything as you said however when I rebooted in safe mode I could not find those 2 files, for some reason theyre not there even when running in normal mode. My mouse pointer movement however was running smoothly without any issues once I shut down my avast. When turned avast back on however it sucks again. Im gonna go to bed now but Ill check back in tomorrow for any replies. I really appreciate your help. Im posting my log again. Good night.
Attached Files
File Type: log hijackthis.log (7.3 KB, 1 views)
  #9  
Old 12-30-2008
BlkHeartWolf's Avatar
TechSpot Member
 
Location: Minnesota
Member since: Dec 2008, 160 posts
System specs
SLEEP does sound good
I checked the log file and cannot find any of the trojan files anymore so good job.

maybe time for some cleanup of programs and do some updates and you will be fine
Wolf
To remove this ad, sign in. To register for a new account, click here.
  
Closed Thread

Tip: Download Advanced SystemCare 3 Freeware - 1 Click A Day to Clean, Repair, Protect & Optimize your PC.

Thread Tools


Similar Topics
Topic Category Replies Last Post
Sagipsul help please Virus & Malware removal 12 01-08-2009 07:24 PM
Help with Sagipsul please Virus & Malware removal 1 12-31-2008 07:19 AM
Various sagipsul.com pop-ups Virus & Malware removal 1 12-31-2008 05:37 AM
Sagipsul, etc Virus & Malware removal 1 12-29-2008 08:55 PM
Sagipsul help please Virus & Malware removal 3 12-28-2008 02:27 AM


All times are GMT -4. The time now is 06:56 PM.