Sagipsul Popups?

By hcarter50
Jan 4, 2009
  1. Guys, I don't know what's happened but now I keep getting popups from a site called sagipsul.

    It is extremely annoying and I think it might be a virus or something and it really needs to be removed from the computer because it's annoying.

    I'm not very computer savvy, but am not just illiterate when it comes to them.
    So, if you can, please say things in a way that would be easy for an amateur to understand.

    Thanks to whoever can help me.

    EDIT: I am just now reading the 8 step thing and will post my logs etc whatever I have when I can.

    ok ill update with logs

    alright logs are up thanks for who ever can help
  2. hcarter50

    hcarter50 TS Rookie Topic Starter

    alright. computer's running smoothly. let's hope i got rid of it.
  3. rf6647

    rf6647 TS Maniac Posts: 829

    C:\WINDOWS\system32\[B]xkyftu.dll [/B](Trojan.Vundo) -> Delete on reboot.
    MBAB did not handle all that it found until the computer restart.

    It appears that the infection is mostly handled.

    Rescan with MBAB & SAS (run as pairs) until clean or something that cannot be cleaned.

    HJT scan informs what has not been handled (computer restart before HJT scan)

    Caught by HJT.
    O20 - AppInit_DLLs: ........ [B]xkyftu.dll[/B]
    [*]Confirm file has been deleted. 
    [*]'Regedit' can be used to delete references to file
    [*]Or wait for updated MBAM to clean this reference.
    If symptoms remain, post new logs and describe conditions.

    Following clean scans establish a clean restore point.

    Establish a new clean restore point and Clear your existing System Restore points:
    • New
      • Go to Start > All Programs > Accessories > System Tools > System Restore>
      • Select Create a restore point> OK.
    • Clear Old
      • go to Start > Run > cleanmgr > Select the More options tab >
      • Choose the option to clean up System Restore > OK

        • This will remove all restore points except the new one you just created.
Topic Status:
Not open for further replies.

Similar Topics

Add your comment to this article

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...