jigallo infestation

[Handy1]

I have been infected with the Jigallo whatever. I seem to have stopped it from calling out (it actually installed its own dial out connection, "jigallo*US") and giving me a popup window selling, oddly enough, tools to remove spy / mal ware. It was also placing an icon on the desktop which brought me to an online casino. The casino people said they had nothing to do with it and were going to prosecute whoever caused this outrage, hummmm...... Ya think?
Oh yes it also added many helpful stops to my favorites list.

As I said, I think it's stopped but it has certainly left a mess behind. The usual programs (ie. spybot 6, CW Shredder 1.57, Panda, etc.) as well as my onboard Norton’s were all unable to see it.

Can anyone suggest an alternative housecleaning tool?

Thanks
Hank

 

[Sympology]

Found this via Google, so youcould try here:

http://www.cybertechhelp.com/forums/archive/index.php/t-41199.html

Hope this helps.

Stu..

Oh course I'll come back at lunchtime. When is it? Oh thats a shame, so's mine.

 

[Handy1]

Thanks Stu, but no luck. The only think it is still doing is attempting to call out. It can't get out so it keeps opening new iexplore.exe progs. which bogs down the whole system till I have to reboot. Wish I could tell where the dial out request was originating.

As this is taking way to much time (although I sort of like the challange) it's looking like clean install time.

thanks again
Hank

 

[allteltec]

Install a Fire Wall when the nasty trys to dail out the fire wall should tell you what file and location of file trying to dial out.
I use a old Tiny 2 fire wall and have fould hard to find nastys this way.

 

[vop]

Do a Google search (2 hits) on:

msmk.dll jigallo



The second occurance of 'msmk.dll' in the following link identifies suggested removal steps after detecting it in HiJackThis:

http://www.cybertechhelp.com/forums/archive/index.php/t-41199.html