Xp

[aizlumzan]

When i am starting Xp the wallpaper shows, the mouse is moving but there is no taskbar no desktop icons. Then i press ctrl+alt+del to open up the task manager and have to end a running exe file called "sysu.exe". After that everything runs perfectly OK.

HOw do i fix it?

[The Kiler]

It's adware.

1) Go to task manager and kill: sysu.exe
2) Go to this folder and delete it: C:\Programs\ddm

Type: Adware

Name: Dynamic Desktop Media
Version: 1.00
Publisher: Dynamic Desktop Media
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
Systems Not Affected: Linux, Macintosh, OS/2, UNIX

Removal: Low
Damage: Low

Behavior
Adware.DynamicUpdater is an adware program that can be downloaded by Adware.Dynamic.

Symptoms
Files are detected as Adware.DynamicUpdater.

Transmission
This adware program must be installed manually or as a component of another program.






File names: sysu.exe

When Adware.DynamicUpdater is executed, it performs the following actions:


Adds the value:

"sysu" = "c:\progra~1\ddm\sysu.exe"

to the registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
RunOnce


Generates frequent pop-up advertisements.


May download an executable from the Web, possibly an update of itself.



REMOVAL INSTRUCTIONS


The following instructions pertain to all Symantec antivirus products that support Expanded Threat detection.


Update the virus definitions.
Delete the key that was added to the registry.
Run a full system scan and delete all the files detected as Adware.DynamicUpdater.

1. Updating the definitions
To obtain the most recent definitions, start your Symantec program and run LiveUpdate.

2. Deleting the key from the registry
Click Start, and then click Run. (The Run dialog box appears.)

Type regedit

and then click OK. (The Registry Editor opens.)

Navigate to the key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
RunOnce

Delete the value:

"sysu" = "c:\progra~1\ddm\sysu.exe"

Exit the Registry Editor.

3. Scanning for and deleting the infected files
Start Norton AntiVirus and make sure that it is configured to scan all the files. For more information, read the document, "How to configure Norton AntiVirus to scan all files."
Run a full system scan.
If any files are detected as infected with Adware.DynamicUpdater, click Delete.


Source: Symantec

[aizlumzan]

Thnx a lot..