Cannot remove SAGIPSUL.COM pop-up

I have the latest version of Norton anti-virus 2008 and the virus definitions updated 2009-jan-03.

 

Today i got infected by a pop-up SAGIPSUL.COM malware which automatically fires up browser windows going to the web site sagipsul.com

 

It also blocks going to any anti-virus sites such as Symantec.com , McAfee, AVG, etc.  (the browser says "Cannot connect to the web site" even though can browse other parts of the internet fine).

 

I have seen other folks complain about this when i search on google- looks like this just started a few days ago. Nothing on the symantec site about this.

 

Anyone else seeing this and how it managed to get past Norton AV?

 

-va

Try these 2 programs.

 

http://www.malwarebytes.org/

 

 http://www.superantispyware.com/

Thank you, i was just coming back to this forum to post that I installed Malwarebytes and it fixed the problem and also saw your post.

 

For anyone else running into this, the sagipsul.com "virus" blocked access to all popular anti-virus sites. What this meant is that even after installing Malwarebytes, i could not get the update from the main web site, but had to get it from a mirror.

 

I am a little peeved that Malwarebytes found 16 instances of trojan.vundo on my computer in the "common places" while I had just finished running FixVundo.exe  from the Symantec site which did not find any Vundo trojans on my entire computer.

 

It does tend to shake my decade long faith in Norton AV. For the record, neither could AVG find the Vundo trojan on my computer, so its all pretty depressing.

 

Is virus & trojan protection really just a hit or miss?

 

-va

 

No av is perfect. Malware Bytes and SuperAntiSpyware pick up the slack in any antivirus but do not prevent anything. You can upgrade to NAV 2009 for free. Also turn Heuristics to Aggressive when you do.

 

 http://www.symantec.com/home_homeoffice/support/special/upgrade2007/vista/select_product.jsp?site=nuc

Neither malwarebytes nor superantispyware are working as of today (Jan. 05).  The mirror is no longer accessible in order to update malwarebytes.  I cannot remove sagipsul.com popups.  Please help.  Any advice is greatly appreciated.

Hi

 

Try this

 

Download Hijackthis http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download  click on the 3rd in the list (executable)   Click my name (Quads) to bring up my profile then click "send user private message"  

 

Quads