Sagipsul virus Log Posts

By masemob
Jan 6, 2009
  1. I have contracted the sagipsul virus on my pc and have tried to get rid of it but to no avail.

    I get a lot of POP-UPS (some are blank some are not). My system is a tad slower but nothing too noticibable.

    My wife said she clicked on an error message and it blanked the screen then reset my resolution and messed with my desktop icons and added a few of its own.

    I followed the 8 step guide and any help would be MUCH apprciated!!! Here are my logs...


    I can only get on the net for maybe 10 minutes at a time it seems. i lose connection and have to restart the computer to get back on.

    Not sure if it is only when I am on tech websites or helping sites. Sometimes I can stay on longer when I am on say Yahoo or ESPN.
  2. rf6647

    rf6647 TS Maniac Posts: 829

    C:\WINDOWS\system32\[B]impwxo.dll [/B](Trojan.Vundo.H) -> Delete on reboot.
    MBAB did not handle all that it found until the computer restart.

    Rescan with MBAB followed by SAS. Repeat until clean or something that cannot be cleaned.

    HJT scan informs what has not been handled (computer restart before HJT scan)

    Caught by HJT.
    O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file) >> broken (yahoo companion)
    O4 - HKUS\S-1-5-18\..\Run: [msiexec.exe] msiconf.exe (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [msiexec.exe] msiconf.exe (User 'Default user')
    O20 - AppInit_DLLs: karna.dat [B]impwxo.dll[/B]
    [*]Confirm files appearing in code box have been deleted. 
    [*]HJT 'tick & fix'  can be used to delete O20 references to files
    [*]Or wait for updated MBAM to clean this reference.
    Post new logs and describe conditions.
  3. masemob

    masemob TS Rookie Topic Starter

    Hi rf6647. Thank you for yopur reply and I will scan my PC again and post the logs.
Topic Status:
Not open for further replies.

Similar Topics

Add your comment to this article

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...