Sagipsul Virus (Did the 8 Steps, need someone to check)

By jjnba47
Jan 6, 2009
  1. Hi everyone, first time here on these forums. Came here because it seems like people actually try to help each other out which is nice. Yesterday I kept getting these sagipsul pop-ups on my computer. They would keep coming every two minutes and I just kept x-ing out of the website. I went through all 8 steps on the sticky, and need someone to check out my log files for me. After doing the 8 steps, the pop-ups have stopped, but I would like to make sure it's gone for good. Thanks for the help in advance!
  2. jjnba47

    jjnba47 TS Rookie Topic Starter


    10 chars***
  3. rf6647

    rf6647 TS Maniac Posts: 829

    C:\WINDOWS\system32\[B]wlimyc.dll [/B](Trojan.Vundo) -> Delete on reboot.
    MBAB did not handle all that it found until the computer restart.

    It appears that the infection is mostly handled.

    Rescan with MBAB followed by SAS. Repeat until clean or something that cannot be cleaned.

    HJT scan informs what has not been handled (computer restart before HJT scan)

    Caught by HJT.
    O20 - AppInit_DLLs: [B]wlimyc.dll[/B]
    O20 - Winlogon Notify: ssqRjGxx - ssqRjGxx.dll (file missing)
    [*]Confirm files appearing in code box have been deleted. 
    [*]HJT 'tick & fix' can be used to delete O20 references to files
    If symptoms remain, post new logs and describe conditions.

    Following clean scans , establish a new clean restore point and Clear your existing System Restore points:
    • New
      • Go to Start > All Programs > Accessories > System Tools > System Restore>
      • Select Create a restore point> OK.
    • Clear Old
      • go to Start > Run > cleanmgr > Select the More options tab >
      • Choose the option to clean up System Restore > OK

        • This will remove all restore points except the new one you just created.
Topic Status:
Not open for further replies.

Similar Topics

Add your comment to this article

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...