also @ TechSpot: Top PC Games for this Holiday Season and Beyond
Welcome to the TechSpot OpenBoards. Please read the FAQ if you have any questions. Login to participate.
Go Back   TechSpot OpenBoards > Operating Systems & Software > Virus & Malware removal
Reload this Page Sagipsul Virus (Did the 8 Steps, need someone to check)

Sagipsul Virus (Did the 8 Steps, need someone to check)

Closed Thread
Bookmark Thread Tools
  #1  
Old 01-07-2009
Newcomer, in training
  
Member since: Jan 2009, 2 posts
Sagipsul Virus (Did the 8 Steps, need someone to check)
Hi everyone, first time here on these forums. Came here because it seems like people actually try to help each other out which is nice. Yesterday I kept getting these sagipsul pop-ups on my computer. They would keep coming every two minutes and I just kept x-ing out of the website. I went through all 8 steps on the sticky, and need someone to check out my log files for me. After doing the 8 steps, the pop-ups have stopped, but I would like to make sure it's gone for good. Thanks for the help in advance!
Attached Files
File Type: log hijackthis.log (8.8 KB, 3 views)
File Type: txt mbam-log-2009-01-06 (19-16-53).txt (5.8 KB, 3 views)
File Type: log SUPERAntiSpyware Scan Log - 01-06-2009 - 19-45-38.log (1.5 KB, 3 views)
  #2  
Old 01-08-2009
Newcomer, in training
  
Member since: Jan 2009, 2 posts
bump

10 chars***
To remove this ad, sign in. To register for a new account, click here.
  
  #3  
Old 01-09-2009
TechSpot Booster
  
Location: Illinois, USA
Member since: Feb 2007, 905 posts
System specs
Code:
C:\WINDOWS\system32\wlimyc.dll (Trojan.Vundo) -> Delete on reboot.
MBAB did not handle all that it found until the computer restart.

It appears that the infection is mostly handled.

Rescan with MBAB followed by SAS. Repeat until clean or something that cannot be cleaned.

HJT scan informs what has not been handled (computer restart before HJT scan)

Caught by HJT.
Code:
O20 - AppInit_DLLs: wlimyc.dll
O20 - Winlogon Notify: ssqRjGxx - ssqRjGxx.dll (file missing)

  • Confirm files appearing in code box have been deleted. 
    • 

  • HJT 'tick & fix' can be used to delete O20 references to files

    •
If symptoms remain, post new logs and describe conditions.


Following clean scans , establish a new clean restore point and Clear your existing System Restore points:
  • New
    • Go to Start > All Programs > Accessories > System Tools > System Restore>
    • Select Create a restore point> OK.
  • Clear Old
    • go to Start > Run > cleanmgr > Select the More options tab >
    • Choose the option to clean up System Restore > OK
      • This will remove all restore points except the new one you just created.
Closed Thread

Tip: Download Advanced SystemCare 3 Freeware - 1 Click A Day to Clean, Repair, Protect & Optimize your PC.

Thread Tools


Similar Topics
Topic Category Replies Last Post
Sagipsul Popups, 8 Steps Completed Logs Attached Virus & Malware removal 3 01-07-2009 07:16 PM
Down to Sagipsul. Completed 8 steps and logs attached Virus & Malware removal 0 01-05-2009 11:27 PM
Sagipsul pop ups as well, pls check my log, thanks Virus & Malware removal 8 12-30-2008 03:57 AM
Help with error/virus, i did all the steps, check HJT file Virus & Malware removal 2 11-29-2007 11:05 PM


All times are GMT -4. The time now is 08:55 PM.