Re: Can't remove a file (SysAI)

From: Shenan Stanley (news_helper_at_hushmail.com)
Date: 03/19/04 

Date: Fri, 19 Mar 2004 05:55:06 -0600

Jay wrote:
anonymous@discussions.microsoft.com
> I picked up a spyware named SysAI. I can't clean it with
> spyware removal or windows remover. I have tried to
> manually delete it and I get an error telling me it can't
> be deleted because it is locked.
>
> Any assistance appreciated.

SysAI - SysAI.exe AproposMedia adware - also creates SysAI folder in Program
Files where the SysAI.exe is also located...

Some information and removal instructions here:
http://doxdesk.com/parasite/AproposMedia.html

Also:

Turn on that firewall...
http://www.microsoft.com/WindowsXP/home/using/howto/homenet/icf.asp
(It has been reported that it now works with AOL 9.0+)

Make sure you have all the updates (critical) installed from:
http://windowsupdate.microsoft.com/
(Scan for updates, Review and Install)

Get rid of the spy/ad/mal-ware..
(Yes - using MORE than one of these..
I recommend at least the first three. Also..
UPDATE the definitions for them before using.)

 Spybot Search and Destroy
 http://www.safer-networking.net/

 Lavasoft AdAware
 http://www.lavasoft.de

 CWSShredder
 http://www.spywareinfo.com/~merijn/downloads.html

 Hijack This!
 http://mjc1.com/mirror/hjt/

 I also like "The Cleaner" and "SpywareBlaster" and "SpywareGuard".
  - http://www.moosoft.com/
  - http://www.javacoolsoftware.com/

The first is a PAY product, but useable for 30 days - it has found and
eliminated problems in the past the others did not. The latter two are
prevention mechanisms. I like SpywareGuard for those with enough processor
to have something running like antivirus software - and it prevents browser
hijacking quite well.

 And Assortment of Others:
 http://www.merijn.org/downloads.html

After you cleanup your PC somewhat of spy/ad/mal-ware, verify your antivirus
software is updated and run a full scan of your computer. If you have no
antivirus software - get one NOW! Grisoft AntiVirus:
http://www.grisoft.com/us/us_dwnl_free.php

Empty your Temporary Internet Files and shrink the size it stores to about
80 to 120MB (seems to be an optimal size for the normal user)
 - Open ONE copy of Internet Explorer.
 - Select TOOLS -> Internet Options.
 - Under the General tab in the "Temporary Internet Files" section,
   do the following:
  - Click on "Delete Cookies" (click OK)
  - Click on "Settings" and change the
    "Amount of disk space to use:" to something between 80MB
    and 120MB. (Betting it is MUCH larger right now.)
  - Click OK.
  - Click on "Delete Files" and select to
    "Delete all offline contents" (the checkbox) and click
    OK. (If you had a LOT, this could take 2-10 minutes or
    more.)
- Once it is done, click OK, close Internet Explorer
- Re-open Internet Explorer.

Uninstall any software you do not use often/ever. (If you have something
installed but never use it, uninstall it.) If you go through Control
Panel -> Add/Remove Programs and see things you seldom if ever use, it is to
your advantage to remove it.

Also, if you are tired of Web Page Pop-Ups/Unders.. You could try the
Google Toolbar.

Stop loading applications at logon.. run MSCONFIG and look under the startup
tab for things you DON'T want to startup! 

-- 
<- Shenan ->
--

Relevant Pages

  • Re: backing up my system
    ... But removing spyware RARELY - it is possible - will cause a machine to ... to have something running like antivirus software - and it prevents browser ... Empty your Temporary Internet Files and shrink the size it stores to about ... Once it is done, click OK, close Internet Explorer ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Removing Spyware
    ... > that were spyware near as I could tell. ... to have something running like antivirus software - and it prevents browser ... Empty your Temporary Internet Files and shrink the size it stores to about ... Once it is done, click OK, close Internet Explorer ...
    (microsoft.public.security)
  • Re: Spyware
    ... Pay attention to the products listed under "Spyware" ... WILL hit a web page where a popup is truly necessary and needed by ... to have something running like antivirus software - and it prevents browser ... - Open ONE copy of Internet Explorer. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Computer Bugs
    ... > program does not delete a program called 'Wild Tangent'. ... Verify your antivirus software is updated and run a full scan ... Empty your Temporary Internet Files and shrink the size it stores to about ... Once it is done, click OK, close Internet Explorer ...
    (microsoft.public.security)
  • Re: spyware
    ... > spyware present on mine. ... (Scan for updates, Review and Install) ... to have something running like antivirus software - and it prevents browser ... Once it is done, click OK, close Internet Explorer ...
    (microsoft.public.windowsxp.security_admin)
Loading