TechSpot

Scorpio55 · #1 01-06-2009

Hey gang. Was having the same problem with sagispul pop ups and also one called zabasphere. Followed the 8 steps and am attaching my logs. Can somebody knowledgeable please check them and see if I got everything? There was LOTS of garbage.
Any ideas as to where the sagispul trojan comes from? The only thing I've done recently out of the ordinary was to charge my nieces ipod on my computer.

Many thanks for your help and the great, thorough instructions on this site.

rf6647 · #2 01-06-2009

Code:

C:\WINDOWS\SYSTEM32\iylyyb.dll (Trojan.Vundo) -> Delete on reboot.

MBAB did not handle all that it found until the computer restart.

It appears that the infection is mostly handled.

Rescan with MBAB & SAS (run as pairs) until clean or something that cannot be cleaned.

HJT scan informs what has not been handled (computer restart before HJT scan)

Caught by HJT.

Code:

O20 - AppInit_DLLs: iylyyb.dll
Confirm file has been deleted.
HJT  Tick & fix will remove this.
Or wait for updated MBAM to clean this reference.

If symptoms remain, post new logs and describe conditions.

Following clean scans establish a clean restore point.

Establish a new clean restore point and Clear your existing System Restore points:

New
- Go to Start > All Programs > Accessories > System Tools > System Restore>
- Select Create a restore point> OK.
Clear Old
- go to Start > Run > cleanmgr > Select the More options tab >
- Choose the option to clean up System Restore > OK
  - This will remove all restore points except the new one you just created.

Similar Topics
Topic	Replies	Forum
Sagispul Infection (Among Others?)	1	Virus and Malware Removal
Sagispul.com pop-up	5	Virus and Malware Removal
Sagispul and vundo	5	Virus and Malware Removal
Sagispul and probably other viruses	4	Virus and Malware Removal
Sagispul.com has got me	0	Virus and Malware Removal

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search