
(photo : credits)
While at work the other day I was surfing around the net to a few of my favorite sites when all of a sudden I get a pop up window that went behind my current window that I was viewing. Well I use Firefox as my browser and it has a pop up blocker built in so I thought it was weird that the window just popped up like that so I clicked to close it. Nothing else happened for a few minutes so I log out of my computer and then went to lunch. When I return from lunch and log into my computer I noticed several browser windows that were open… So I instantly thought WTF! Thinking someone signed onto my computer when I was at lunch but, nope that wasn’t the case I got a virus!! So I started searching stuff like “random pop up windows” “Firefox pop up virus” and things along those lines… I kept noticing the URL of the sites that kept coming up were from “sagipsul.com” so I did a few searches for that and it just kept doing a loop of information. So needless to say I had to get a hold of my IT guys to help me remove the virus. Below is pretty much what I saw them do to remove the Sagipsul virus / malware.
- Download Malware Bytes
- Once downloaded restart computer and press F8 to get to the screen that allows you to run your PC in “Safe Mode”.
- Once your PC starts in “Safe Mode” Run the Malware Bytes software.
- After the software is finished delete all the bad files that it found on your PC.
- Next restart and press F8 to get back to the “Safe Mode” so you can Detect and repair disk errors. Here is a great tutorial on how to do just that.
- Once the scan for disk errors is complete then restart your computer again and press F8 to get back to “Safe Mode” so you can Run the Malware Bytes software again.
- After the Malware Bytes software is completed then delete any new items that it found.
- Now you can restart your PC the normal way you would and the virus / malware should be gone.
Please note this may or may not work for you. I’m simply providing this information because, this is how the virus / malware was removed from my PC. If you found this to work or if you know of another way to remove it then please feel free to leave a comment stating how it could be done.
