also @ TechSpot: Top applications to install after a fresh OS installation
Welcome to the TechSpot OpenBoards. Please read the FAQ if you have any questions. Login to participate.

Go Back   TechSpot OpenBoards > Operating Systems & Software > Virus & Malware removal

I'm having a sagipsul problem

Reply
Bookmark Thread Tools
  #1  
Old 01-04-2009
Newcomer, in training
 
Member since: Jan 2009, 9 posts
I'm having a sagipsul problem

when i finish downloading and try to run them, they quit on their own less than mid way through. any help please?

i tried downloading the anti virus and and wen it finished, and i try to run the setup, it quits midway through. help please?

Last edited by kimsland; 01-05-2009 at 12:45 AM.. Reason: merged 2 posts
Reply With Quote
  #2  
Old 01-04-2009
TechSpot Booster
 
Location: Illinois, USA
Member since: Feb 2007, 900 posts
System specs
Note: applications that do not run to completion are most likely corrupt. Uninstall / re-install.
Safe mode with networking may be another work-around.


The exploit to frustrate reaching anti-malware sites is not understood by me at this time. 3 methods have been used recently. The second method references the third.

Since you are discribing a case of difficulty. attempt this method (follow link for 'How To')
  • Use this method to stop any 'non-plug and play' driver you find.
  • Please report its name for changes to the method

For infections that have more severe symptoms, Unable to run or update via TechSpot 8 Steps or manually run MBAM or SAS


Message #3 - link to 'fixit download' has demonstrated its effectiveness in many cases. Go to message # 3 'fixit download'

Last edited by rf6647; 01-04-2009 at 09:27 AM.. Reason: uninstall note
Reply With Quote
Login to remove this ad - join the TechSpot Community for free.
  #3  
Old 01-05-2009
Newcomer, in training
 
Member since: Jan 2009, 9 posts
i couldn't find one that said tdsserv but the antivirus setups are still stopped.

my comodo firewall keeps asking to allow brs.exe and idk what it is, it also says tat superantispyware wants to access a lot of things, and i should press what? and also, i have this problem with administrator. it says my task manager and registry editting was disabled by administrator.

um my comodo firewall keeps asking me do i want to let zipper.exe to access things and i clicked allow and remember my answer because i'm updating the java but it keeps popping up and the java is loading more at all. what should i do?

alright i followed most of the 8 steps. heres my 3 logs, please have a look at them.

here r my 3 logs. i tried to follow the 8 steps as much as i can. im not sure did it upload my 3 logs but they're posted in another thread. "sagipsul spyware" im not sure was i suppose to be posting in tat thread so i think i might had to start a new thread.
Attached Files
File Type: log hijackthis.log (6.2 KB, 3 views)
File Type: txt mbam-log-2009-01-04 (22-28-36).txt (6.3 KB, 2 views)
File Type: log SUPERAntiSpyware Scan Log - 01-04-2009 - 23-42-37.log (1.5 KB, 1 views)

Last edited by kimsland; 01-05-2009 at 12:54 AM.. Reason: merged 5 posts and 3 threads
Reply With Quote
  #4  
Old 01-05-2009
kimsland's Avatar
TS Special Forces
 
Member since: Dec 2007, 16,737 posts
Install Avira free Antivirus

Then..

Start up Malwarebytes again; Update it; then run a full scan (remove all found Malwares)
You need to run this multiple times, until all hidden Malwares are uncovered and removed
Reply With Quote
  #5  
Old 01-05-2009
Newcomer, in training
 
Member since: Jan 2009, 9 posts
i tried running avira setup but it quits on me half way through.
Reply With Quote
  #6  
Old 01-05-2009
kimsland's Avatar
TS Special Forces
 
Member since: Dec 2007, 16,737 posts
Run CCleaner and try again

Otherwise run MSconfig and turn off all startups
Then restart, then try again

One other option: download the Windows installer package install it
Then restart, then try again
Windows installer has the download option:
Windows6.0-KB942288-v2-x86.msu 1.7 MB (for most of us)
http://www.microsoft.com/downloads/d...displaylang=en
Reply With Quote
  #7  
Old 01-05-2009
Newcomer, in training
 
Member since: Jan 2009, 7 posts
Malware sites blocked and all attempts to install fail

This virus blocks all access to malware fixing web sites, including
those built into the install .exe files. The virus blocks access to
many many sites, norton, Avg, sym,antec, microsoft, and even techguys.com. It
blocks access not only via browser, but any attempt to access,
like in install programs.

It does not block the NUMERIC IP address if you use that. BUT, the
install programs have built in refrence to alpha named locations. Thus,
the virus blocks attempts to install or even UPDATE malware scanner data bases
and updates.

I had to use GOOGLE's "cached" links to even see web pages in such
sites as symantec, norton, or techguys.
Reply With Quote
Login to remove this ad - join the TechSpot Community for free.
  #8  
Old 01-06-2009
Newcomer, in training
 
Member since: Jan 2009, 9 posts
my firefox is now not working, not sure is it cuz of the virus.
Reply With Quote
  #9  
Old 01-06-2009
kimsland's Avatar
TS Special Forces
 
Member since: Dec 2007, 16,737 posts
Please uninstall Zone Alarm and...
Then uninstall Comodo Firewall
Restart, and test if Malwarebytes can then be downloaded updated scanned and attached
Reply With Quote
  #10  
Old 01-06-2009
Newcomer, in training
 
Member since: Jan 2009, 9 posts
i cant uninstall zonealarm for some reason
Reply With Quote
  #11  
Old 01-06-2009
kimsland's Avatar
TS Special Forces
 
Member since: Dec 2007, 16,737 posts
Hmm I can't find a removal tool from ZA
Try this
Re-download ZA http://download.zonealarm.com/bin/fr...zaSetup_en.exe
Run the setup again
Then try un-installing it
Reply With Quote
  #12  
Old 01-06-2009
Newcomer, in training
 
Member since: Jan 2009, 9 posts
it says something about it has to be logged into truevector to connect. then wen i try again, the setup doesnt work. btw, didnt i attach malwarebyte already?
Reply With Quote
  #13  
Old 01-06-2009
kimsland's Avatar
TS Special Forces
 
Member since: Dec 2007, 16,737 posts
ok another idea

Try Revo Uninstaller http://www.revouninstaller.com/
Reply With Quote
  #14  
Old 01-06-2009
Newcomer, in training
 
Member since: Jan 2009, 7 posts
Install or uninstalls that try to access blocked sites will fail

When the sagipsul virus blocks anti-virus or firewall or other tech sites,
it will cause installs, uninstalls, and reinstalls to fail if at anypoint
they try to access their home domain name over the internet.

Installs and even uninstalls may use access to the internet as a way to
grab files, lists of filenames, revision information, or database queries as
part of their process. I've seen the sagipsul virus (superjaun virus) block
access to microsoft, avg, norton, symantec etc. Not only blocking web
browser access, but blocking installs of virus scanners and removal tools
during an install. It should not be a surprise to find uninstalls of complicated
firewalls, anti-virus tools etc. to also access the internet to their home domain servers.

I'm concerned that some of these great ideas to fix the problem will be
to remove a tool (firewall, anti-virus, malware monitor) and then be faced with the inability
to reinstall it later, because the virus did not get removed by the next steps.

I think the procedure needs to first lift the blocking before dropping defensive shields
like firewalls and any existing malware/anti-virus tools. Otherwise, you may
end up with a PC still with the virus, and without any ability to defend against
other attacks and without the ability to install new defenses or reinstall old ones
because the virus blocks access to sites with the firewalls and anti-virus databases.

That's my fear.
Reply With Quote
  #15  
Old 01-07-2009
kimsland's Avatar
TS Special Forces
 
Member since: Dec 2007, 16,737 posts
Thanks for your info peteC
Presently we are in a thread trying to support the user with valid (or at least reasonable) suggestions to inevitably resolve the matter in full.

Now, how did Revo uninstaller go, in removing the corrupted ZA ?
Reply With Quote
  #16  
Old 01-08-2009
Newcomer, in training
 
Member since: Jan 2009, 9 posts
it removed ZA but avira still doesnt work
Reply With Quote
  #17  
Old 01-08-2009
kimsland's Avatar
TS Special Forces
 
Member since: Dec 2007, 16,737 posts
SkyStep try Revo uninstaller on Avira as well
Note we are trying to fully remove all the corrupted programs

Once Avira is fully uninstalled, restart, and then reinstall it

Last edited by kimsland; 01-08-2009 at 08:54 AM..
Reply With Quote
  #18  
Old 01-08-2009
Newcomer, in training
 
Member since: Jan 2009, 9 posts
setup didnt work so i dont have avira on my comp.
Reply With Quote
  #19  
Old 01-08-2009
kimsland's Avatar
TS Special Forces
 
Member since: Dec 2007, 16,737 posts
I'm not sure if you were able to remove Avira fully first (as you didn't say )
Try Free Antivirus like Avast instead
Reply With Quote
  #20  
Old 01-11-2009
Newcomer, in training
 
Member since: Jan 2009, 9 posts
niether works. tried it many times, once i run the setup, it closes by itself.
Reply With Quote
Reply
Thread Tools


Similar Topics
Topic Category Replies Last Post
Sagipsul problem Virus & Malware removal 0 01-04-2009 10:17 PM
Another Sagipsul problem Virus & Malware removal 0 01-04-2009 09:57 PM
Sagipsul Problem Virus & Malware removal 3 12-30-2008 06:31 PM
Sagipsul.. Please Help Virus & Malware removal 7 12-30-2008 04:46 PM


All times are GMT -4. The time now is 04:16 PM.