also @ TechSpot: Firefox 3.6 Beta 1 available for download
Welcome to the TechSpot OpenBoards. Please read the FAQ if you have any questions. Login to participate.

Go Back   TechSpot OpenBoards > Operating Systems & Software > Virus & Malware removal

Sagipsul Popups?

Closed Thread
Bookmark Thread Tools
  #1  
Old 01-04-2009
Newcomer, in training
 
Member since: Jan 2009, 3 posts
Sagipsul Popups?

Guys, I don't know what's happened but now I keep getting popups from a site called sagipsul.

It is extremely annoying and I think it might be a virus or something and it really needs to be removed from the computer because it's annoying.

I'm not very computer savvy, but am not just illiterate when it comes to them.
So, if you can, please say things in a way that would be easy for an amateur to understand.

Thanks to whoever can help me.

EDIT: I am just now reading the 8 step thing and will post my logs etc whatever I have when I can.

ok ill update with logs



alright logs are up thanks for who ever can help
Attached Files
File Type: txt mbam-log-2009-01-04 (01-24-31).txt (5.1 KB, 2 views)
File Type: log SUPERAntiSpyware Scan Log - 01-04-2009 - 02-28-37.log (1.8 KB, 1 views)
File Type: log hijackthis.log (9.6 KB, 2 views)

Last edited by hcarter50; 01-04-2009 at 04:38 AM..
  #2  
Old 01-04-2009
Newcomer, in training
 
Member since: Jan 2009, 3 posts
alright. computer's running smoothly. let's hope i got rid of it.
To remove this ad, sign in. To register for a new account, click here.
  
  #3  
Old 01-06-2009
TechSpot Booster
 
Location: Illinois, USA
Member since: Feb 2007, 904 posts
System specs
Code:
C:\WINDOWS\system32\xkyftu.dll (Trojan.Vundo) -> Delete on reboot.
MBAB did not handle all that it found until the computer restart.

It appears that the infection is mostly handled.

Rescan with MBAB & SAS (run as pairs) until clean or something that cannot be cleaned.

HJT scan informs what has not been handled (computer restart before HJT scan)

Caught by HJT.
Code:
O20 - AppInit_DLLs: ........ xkyftu.dll
  • Confirm file has been deleted.
  • 'Regedit' can be used to delete references to file
  • Or wait for updated MBAM to clean this reference.
If symptoms remain, post new logs and describe conditions.


Following clean scans establish a clean restore point.

Establish a new clean restore point and Clear your existing System Restore points:
  • New
    • Go to Start > All Programs > Accessories > System Tools > System Restore>
    • Select Create a restore point> OK.
  • Clear Old
    • go to Start > Run > cleanmgr > Select the More options tab >
    • Choose the option to clean up System Restore > OK
      • This will remove all restore points except the new one you just created.
Closed Thread

Tip: Download Advanced SystemCare 3 Freeware - 1 Click A Day to Clean, Repair, Protect & Optimize your PC.

Tags
popups, sagipsul, trojan, virus
Thread Tools


Similar Topics
Topic Category Replies Last Post
Sagipsul popups Virus & Malware removal 11 01-05-2009 03:02 PM
Sagipsul Popups Virus & Malware removal 3 01-04-2009 09:00 PM
Sagipsul Popups Virus & Malware removal 24 01-03-2009 09:00 PM
Sagipsul popups Virus & Malware removal 7 12-30-2008 07:16 PM


All times are GMT -4. The time now is 08:54 AM.