sagispul pop ups

[Scorpio55]

Hey gang. Was having the same problem with sagispul pop ups and also one called zabasphere. Followed the 8 steps and am attaching my logs. Can somebody knowledgeable please check them and see if I got everything? There was LOTS of garbage.
Any ideas as to where the sagispul trojan comes from? The only thing I've done recently out of the ordinary was to charge my nieces ipod on my computer.

Many thanks for your help and the great, thorough instructions on this site.

 

[rf6647]

C:\WINDOWS\SYSTEM32\[B]iylyyb.dll[/B] (Trojan.Vundo) -> Delete on reboot.

MBAB did not handle all that it found until the computer restart.

It appears that the infection is mostly handled.

Rescan with MBAB & SAS (run as pairs) until clean or something that cannot be cleaned.

HJT scan informs what has not been handled (computer restart before HJT scan)

Caught by HJT.

O20 - AppInit_DLLs: [B]iylyyb.dll[/B]

[LIST]
[*]Confirm file has been deleted. 
[*]HJT  Tick & fix will remove this.
[*]Or wait for updated MBAM to clean this reference.
[/LIST]

If symptoms remain, post new logs and describe conditions.


Following clean scans establish a clean restore point.

Establish a new clean restore point and Clear your existing System Restore points:

• New
  • Go to Start > All Programs > Accessories > System Tools > System Restore>
  • Select Create a restore point> OK.
• Clear Old
  • go to Start > Run > cleanmgr > Select the More options tab >
  • Choose the option to clean up System Restore > OK
    • 
      This will remove all restore points except the new one you just created.