Hello.

One of the guys on our team has unfortunately while visiting a real estate
website which had installed a HTML search engine onto his desktop which
covers 2/3 of the area.

Win2000 does not have a restore function and he did not have a third party
restore program installed.

He cannot right click to get any properties to find a name to search and
destroy nor does anything show up in the Add-Remove software utility....

We tried Ad-Aware, Pop-Up Stop etc to no avail....

Disabling active desktop etc ...nada


Any Ideas???

Thanks for you help!!

Larry

On Tue, 15 Jul 2003 23:17:22 -0400, LNski <(E-Mail Removed)> wrote:

> Hello.
>
> One of the guys on our team has unfortunately while visiting a real
> estate
> website which had installed a HTML search engine onto his desktop which
> covers 2/3 of the area.
>
> Win2000 does not have a restore function and he did not have a third
> party
> restore program installed.
>
> He cannot right click to get any properties to find a name to search and
> destroy nor does anything show up in the Add-Remove software utility....
>
> We tried Ad-Aware, Pop-Up Stop etc to no avail....
>
> Disabling active desktop etc ...nada
>

Any clues as to the name of this program? Pc magazine has "startup Cop"
which will see whiat programs are autoloading on start up. If you can't get
rid of it, you can stop it from loading.


--
Using M2, Opera's revolutionary e-mail client: http://www.opera.com/m2/

Guys

Thanks so much for the responses!

If we could only access some properties and find the name we could then deal
with it.

Nothing out of the ordinary shows in running processes or start up, tried
disabling active desktop etc to no avail..

This thingy is freakin insidious...

But Y'know He's got some other bugs and I think it's time to back up his "My
Docs" folder then do the good old Format C: trick eh??

And this time make sure that our IT idiots install a third part restore
app!!

Thanks again

Best,

Larry


"Jason Spradlin" <(E-Mail Removed)> wrote in message
news:iE4Ra.2556$(E-Mail Removed)...
> You might want to try going into control panel, going into Display and
> clicking the WEB tab at the top... it should tell you if you have
installed
> any desktop items. the bottom portion will have a list of Desktop Items
> being displayed.. unchecking them won't hurt anything.. uncheck them (if
> there are any) and click OK or APPLY (apply to apply changes but keep the
> window open) and then look at his desktop again. If you find out which
one
> it is (by trial and error, or if it is the only one) then you can select
it
> and click delete to permanently rid him of it
>
> Jason Spradlin
>
> "LNski" <(E-Mail Removed)> wrote in message
> news:1v3Ra.6562$zd4.2344@lakeread02...
> > Hello.
> >
> > One of the guys on our team has unfortunately while visiting a real
estate
> > website which had installed a HTML search engine onto his desktop which
> > covers 2/3 of the area.
> >
> > Win2000 does not have a restore function and he did not have a third
party
> > restore program installed.
> >
> > He cannot right click to get any properties to find a name to search and
> > destroy nor does anything show up in the Add-Remove software utility....
> >
> > We tried Ad-Aware, Pop-Up Stop etc to no avail....
> >
> > Disabling active desktop etc ...nada
> >
> >
> > Any Ideas???
> >
> > Thanks for you help!!
> >
> > Larry
> >
> >
>
>
>

On Wed, 16 Jul 2003 10:24:32 -0400, LNski <(E-Mail Removed)> wrote:

> Guys
>
> Thanks so much for the responses!
>
> If we could only access some properties and find the name we could then
> deal
> with it.
>
> Nothing out of the ordinary shows in running processes or start up, tried
> disabling active desktop etc to no avail..


Start up is more than the foldier on start menu. Someone has a list of
about 6 different places a program could autostart from.


Start menu/programs/start up of course

The task scheduler could be set up this way.


and THE REGistry
Looking for that list here.

>
> This thingy is freakin insidious...
>
> But Y'know He's got some other bugs and I think it's time to back up his
> "My
> Docs" folder then do the good old Format C: trick eh??
Not a bad idea, but before you do. Try a hunt through his directory
structure -- especially the program files directory or the root (c:\
usually). Make sure you can view hidden files and system files first. See
if there are any directories with unfamiliar names, that you can't
associate with known software or other purpose. Careful, here.

Bonzai Buddy (another malware prog) for instance has a directory (or
something, I misremember) called ClickTheButton.


> And this time make sure that our IT idiots install a third part restore
> app!!
>
ITs not always the IT idiots fault. Often they can't buy software without
management permission. Telling the difference from the outside is
difficult, tho'. Given the opportunity, they'll blame management, even if
it's not true.





--
Using M2, Opera's revolutionary e-mail client: http://www.opera.com/m2/