I found this file running on one of our salesperson's workstation. It was located in the "C:\windows\system" directory.

Apparently it was automaticaly starting with Windows 98 SE - but where? I searched the registry under the following keys to no avail:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entversion\Run - . . .RunOnce . . .and RunServices

Also checked Win.ini and System.ini

Is this part of Internet Explorer?


After some digging I have found several 'unauthorized applications' on this workstation as well.

Looks like tonight I will pop in the customized restore cd. Thank you - Ghost. Hope she (the salesperson) does not have anything stored on her C drive that she does not want to loose.

Guess she should have thought of that before she installed the applications. It is also apparrent I will have to utilize Poledit.

TIA