-
Poster
When i am starting Xp the wallpaper shows, the mouse is moving but there is no taskbar no desktop icons. Then i press ctrl+alt+del to open up the task manager and have to end a running exe file called "sysu.exe". After that everything runs perfectly OK.
HOw do i fix it?
-
-
12-13-2003, 02:32 PM
Software & Hardware -
#2
Poster
It's adware.
1) Go to task manager and kill: sysu.exe
2) Go to this folder and delete it: C:\Programs\ddm
Type: Adware
Name: Dynamic Desktop Media
Version: 1.00
Publisher: Dynamic Desktop Media
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
Systems Not Affected: Linux, Macintosh, OS/2, UNIX
Removal: Low
Damage: Low
Behavior
Adware.DynamicUpdater is an adware program that can be downloaded by Adware.Dynamic.
Symptoms
Files are detected as Adware.DynamicUpdater.
Transmission
This adware program must be installed manually or as a component of another program.
File names: sysu.exe
When Adware.DynamicUpdater is executed, it performs the following actions:
Adds the value:
"sysu" = "c:\progra~1\ddm\sysu.exe"
to the registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
RunOnce
Generates frequent pop-up advertisements.
May download an executable from the Web, possibly an update of itself.
REMOVAL INSTRUCTIONS
The following instructions pertain to all Symantec antivirus products that support Expanded Threat detection.
Update the virus definitions.
Delete the key that was added to the registry.
Run a full system scan and delete all the files detected as Adware.DynamicUpdater.
1. Updating the definitions
To obtain the most recent definitions, start your Symantec program and run LiveUpdate.
2. Deleting the key from the registry
Click Start, and then click Run. (The Run dialog box appears.)
Type regedit
and then click OK. (The Registry Editor opens.)
Navigate to the key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
RunOnce
Delete the value:
"sysu" = "c:\progra~1\ddm\sysu.exe"
Exit the Registry Editor.
3. Scanning for and deleting the infected files
Start Norton AntiVirus and make sure that it is configured to scan all the files. For more information, read the document, "How to configure Norton AntiVirus to scan all files."
Run a full system scan.
If any files are detected as infected with Adware.DynamicUpdater, click Delete.
Source: Symantec
-
-
12-13-2003, 04:16 PM
Software & Hardware -
#3
Poster
-
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
Bookmarks