Icons On Desktop Wont' Go Away (Win98)

[Sixeye]

My dad went to UPS.com to see how much it would cost to ship something.
Oddly, the site made him download some zone chart or something. He
downloaded it to his desktop but then couldn't find it. Instead, he had
about 50 new icons. If he deletes them, they come back the next time he
boots up. Adaware and his virus scanner don't find anything. He tried
destroying them when deleting rather than just having them dumped to the
Recycle Bin but they still come back. He has a program called Total
Clean that also does not get rid of them. He didn't run anything after
downloading the so-called zone chart, they just showed up!

They seem to be "Excel Comma Separated Values Files".

Anyone have any ideas on how to get rid of these things?

[Alan Edwards]

See if anything new is in Startup that is recreating the .csv files.
Check in Msconfig for any oddities.
(Start-Run-MSCONFIG-Startup tab)
If you cannot see anything in Msconfig then:

Start-Run-msinfo32
Click the + beside Software Environment to expand.
Click Startup Programs
Ctrl+A to Select All, Ctrl+C to Copy.
Paste that information in your message.

....Alan

--
Alan Edwards, MS MVP W95/98 Systems
http://dts-l.org/index.html

In microsoft.public.windowsme.general, Sixeye > wrote:

>My dad went to UPS.com to see how much it would cost to ship something.
>Oddly, the site made him download some zone chart or something. He
>downloaded it to his desktop but then couldn't find it. Instead, he had
>about 50 new icons. If he deletes them, they come back the next time he
>boots up. Adaware and his virus scanner don't find anything. He tried
>destroying them when deleting rather than just having them dumped to the
>Recycle Bin but they still come back. He has a program called Total
>Clean that also does not get rid of them. He didn't run anything after
>downloading the so-called zone chart, they just showed up!
>
>They seem to be "Excel Comma Separated Values Files".
>
>Anyone have any ideas on how to get rid of these things?

[Sixeye]

Here is what it shows:

Windows Guardian Startup Group "C:\Program Files\the HelpSpot!\Fawgrd32.exe"
/STARTUP
EPSON Background Monitor Startup Group C:\ESM2\Stms.exe
Microsoft Find Fast Startup Group "C:\Program Files\Microsoft
Office\Office\FINDFAST.EXE"
Office Startup Startup Group "C:\Program Files\Microsoft
Office\Office\OSA.EXE" -b
Exif Launcher Startup Group "C:\Program Files\Exif Launcher\QuickDCF.exe"
Total Cleaner Startup Group "C:\Program Files\Total Cleaner\cleaner.exe"
/autorun
ScanRegistry Registry (Machine Run) C:\WINDOWS\scanregw.exe /autorun
TaskMonitor Registry (Machine Run) C:\WINDOWS\taskmon.exe
SystemTray Registry (Machine Run) SysTray.Exe
LoadPowerProfile Registry (Machine Run) Rundll32.exe
powrprof.dll,LoadCurrentPwrScheme
EnsoniqMixer Registry (Machine Run) starter.exe
NAV Agent Registry (Machine Run) C:\PROGRA~1\NORTON~1\NAVAPW32.EXE
CountrySelection Registry (Machine Run) pctptt.exe
PTSNOOP Registry (Machine Run) ptsnoop.exe
Pop-Up Stopper Registry (Machine Run) "C:\PROGRAM FILES\PANICWARE\POP-UP
STOPPER\DPPS2.EXE"
RegShave Registry (Machine Run) C:\Progra~1\REGSHAVE\REGSHAVE.EXE /autorun
PP7600usb Registry (Machine Run) C:\PROGRA~1\VISION~1\PAPERP~1\FBDirect.exe
StillImageMonitor Registry (Machine Run) C:\WINDOWS\SYSTEM\STIMON.EXE
CriticalUpdate Registry (Machine Run) C:\WINDOWS\SYSTEM\wucrtupd.exe -startup

Symantec NetDriver Monitor Registry (Machine
Run) C:\PROGRA~1\SYMANTEC\LIVEUP~1\SNDMON.EXE
Zone Labs Client Registry (Machine Run) "C:\Program Files\Zone
Labs\ZoneAlarm\zlclient.exe"
LoadPowerProfile Registry (Machine Service) Rundll32.exe
powrprof.dll,LoadCurrentPwrScheme
SchedulingAgent Registry (Machine Service) mstask.exe
ScriptBlocking Registry (Machine Service) "C:\Program Files\Common
Files\Symantec Shared\Script
Blocking\SBServ.exe" -reg
TrueVector Registry (Machine Service) C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
-service

Alan Edwards wrote:

> See if anything new is in Startup that is recreating the .csv files.
> Check in Msconfig for any oddities.
> (Start-Run-MSCONFIG-Startup tab)
> If you cannot see anything in Msconfig then:
>
> Start-Run-msinfo32
> Click the + beside Software Environment to expand.
> Click Startup Programs
> Ctrl+A to Select All, Ctrl+C to Copy.
> Paste that information in your message.
>
> ...Alan
>
> --
> Alan Edwards, MS MVP W95/98 Systems
> http://dts-l.org/index.html
>
> In microsoft.public.windowsme.general, Sixeye > wrote:
>
> >My dad went to UPS.com to see how much it would cost to ship something.
> >Oddly, the site made him download some zone chart or something. He
> >downloaded it to his desktop but then couldn't find it. Instead, he had
> >about 50 new icons. If he deletes them, they come back the next time he
> >boots up. Adaware and his virus scanner don't find anything. He tried
> >destroying them when deleting rather than just having them dumped to the
> >Recycle Bin but they still come back. He has a program called Total
> >Clean that also does not get rid of them. He didn't run anything after
> >downloading the so-called zone chart, they just showed up!
> >
> >They seem to be "Excel Comma Separated Values Files".
> >
> >Anyone have any ideas on how to get rid of these things?

[Alan Edwards]

I am afraid I see nothing unusual there.
You may have to disable a few and reboot to see if you can track it
down.
Some of those are unnecessary and you can get a bit of information
here:
SysInfo.org - Startup Applications:
http://www.sysinfo.org/startuplist.php

Sorry, I tried UPS.com and I couldn't make it try and download
anything.

....Alan

--
Alan Edwards, MS MVP W95/98 Systems
http://dts-l.org/index.html

In microsoft.public.windowsme.general, Sixeye > wrote:

>Here is what it shows:
>
>Windows Guardian Startup Group "C:\Program Files\the HelpSpot!\Fawgrd32.exe"
>/STARTUP
>EPSON Background Monitor Startup Group C:\ESM2\Stms.exe
>Microsoft Find Fast Startup Group "C:\Program Files\Microsoft
>Office\Office\FINDFAST.EXE"
>Office Startup Startup Group "C:\Program Files\Microsoft
>Office\Office\OSA.EXE" -b
>Exif Launcher Startup Group "C:\Program Files\Exif Launcher\QuickDCF.exe"
>Total Cleaner Startup Group "C:\Program Files\Total Cleaner\cleaner.exe"
>/autorun
>ScanRegistry Registry (Machine Run) C:\WINDOWS\scanregw.exe /autorun
>TaskMonitor Registry (Machine Run) C:\WINDOWS\taskmon.exe
>SystemTray Registry (Machine Run) SysTray.Exe
>LoadPowerProfile Registry (Machine Run) Rundll32.exe
>powrprof.dll,LoadCurrentPwrScheme
>EnsoniqMixer Registry (Machine Run) starter.exe
>NAV Agent Registry (Machine Run) C:\PROGRA~1\NORTON~1\NAVAPW32.EXE
>CountrySelection Registry (Machine Run) pctptt.exe
>PTSNOOP Registry (Machine Run) ptsnoop.exe
>Pop-Up Stopper Registry (Machine Run) "C:\PROGRAM FILES\PANICWARE\POP-UP
>STOPPER\DPPS2.EXE"
>RegShave Registry (Machine Run) C:\Progra~1\REGSHAVE\REGSHAVE.EXE /autorun
>PP7600usb Registry (Machine Run) C:\PROGRA~1\VISION~1\PAPERP~1\FBDirect.exe
>StillImageMonitor Registry (Machine Run) C:\WINDOWS\SYSTEM\STIMON.EXE
>CriticalUpdate Registry (Machine Run) C:\WINDOWS\SYSTEM\wucrtupd.exe -startup
>
>Symantec NetDriver Monitor Registry (Machine
>Run) C:\PROGRA~1\SYMANTEC\LIVEUP~1\SNDMON.EXE
>Zone Labs Client Registry (Machine Run) "C:\Program Files\Zone
>Labs\ZoneAlarm\zlclient.exe"
>LoadPowerProfile Registry (Machine Service) Rundll32.exe
>powrprof.dll,LoadCurrentPwrScheme
>SchedulingAgent Registry (Machine Service) mstask.exe
>ScriptBlocking Registry (Machine Service) "C:\Program Files\Common
>Files\Symantec Shared\Script
>Blocking\SBServ.exe" -reg
>TrueVector Registry (Machine Service) C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
>-service
>
>Alan Edwards wrote:
>
>> See if anything new is in Startup that is recreating the .csv files.
>> Check in Msconfig for any oddities.
>> (Start-Run-MSCONFIG-Startup tab)
>> If you cannot see anything in Msconfig then:
>>
>> Start-Run-msinfo32
>> Click the + beside Software Environment to expand.
>> Click Startup Programs
>> Ctrl+A to Select All, Ctrl+C to Copy.
>> Paste that information in your message.
>>
>> ...Alan
>>
>> --
>> Alan Edwards, MS MVP W95/98 Systems
>> http://dts-l.org/index.html
>>
>> In microsoft.public.windowsme.general, Sixeye > wrote:
>>
>> >My dad went to UPS.com to see how much it would cost to ship something.
>> >Oddly, the site made him download some zone chart or something. He
>> >downloaded it to his desktop but then couldn't find it. Instead, he had
>> >about 50 new icons. If he deletes them, they come back the next time he
>> >boots up. Adaware and his virus scanner don't find anything. He tried
>> >destroying them when deleting rather than just having them dumped to the
>> >Recycle Bin but they still come back. He has a program called Total
>> >Clean that also does not get rid of them. He didn't run anything after
>> >downloading the so-called zone chart, they just showed up!
>> >
>> >They seem to be "Excel Comma Separated Values Files".
>> >
>> >Anyone have any ideas on how to get rid of these things?

[Rick T]

Sixeye wrote:

> My dad went to UPS.com to see how much it would cost to ship something.
> Oddly, the site made him download some zone chart or something. He
> downloaded it to his desktop but then couldn't find it. Instead, he had
> about 50 new icons. If he deletes them, they come back the next time he
> boots up. Adaware and his virus scanner don't find anything. He tried
> destroying them when deleting rather than just having them dumped to the
> Recycle Bin but they still come back. He has a program called Total
> Clean that also does not get rid of them. He didn't run anything after
> downloading the so-called zone chart, they just showed up!
>
> They seem to be "Excel Comma Separated Values Files".
>
> Anyone have any ideas on how to get rid of these things?
>

Try deleting them from Safe-Mode.


Rick

[Sixeye]

Right, I didn't either. And I couldn't get UPS to force anything on me either.
Leave it to my dad. :)

Alan Edwards wrote:

> I am afraid I see nothing unusual there.
> You may have to disable a few and reboot to see if you can track it
> down.
> Some of those are unnecessary and you can get a bit of information
> here:
> SysInfo.org - Startup Applications:
> http://www.sysinfo.org/startuplist.php
>
> Sorry, I tried UPS.com and I couldn't make it try and download
> anything.
>
> ...Alan
>
> --
> Alan Edwards, MS MVP W95/98 Systems
> http://dts-l.org/index.html
>
> In microsoft.public.windowsme.general, Sixeye > wrote:
>
> >Here is what it shows:
> >
> >Windows Guardian Startup Group "C:\Program Files\the HelpSpot!\Fawgrd32.exe"
> >/STARTUP
> >EPSON Background Monitor Startup Group C:\ESM2\Stms.exe
> >Microsoft Find Fast Startup Group "C:\Program Files\Microsoft
> >Office\Office\FINDFAST.EXE"
> >Office Startup Startup Group "C:\Program Files\Microsoft
> >Office\Office\OSA.EXE" -b
> >Exif Launcher Startup Group "C:\Program Files\Exif Launcher\QuickDCF.exe"
> >Total Cleaner Startup Group "C:\Program Files\Total Cleaner\cleaner.exe"
> >/autorun
> >ScanRegistry Registry (Machine Run) C:\WINDOWS\scanregw.exe /autorun
> >TaskMonitor Registry (Machine Run) C:\WINDOWS\taskmon.exe
> >SystemTray Registry (Machine Run) SysTray.Exe
> >LoadPowerProfile Registry (Machine Run) Rundll32.exe
> >powrprof.dll,LoadCurrentPwrScheme
> >EnsoniqMixer Registry (Machine Run) starter.exe
> >NAV Agent Registry (Machine Run) C:\PROGRA~1\NORTON~1\NAVAPW32.EXE
> >CountrySelection Registry (Machine Run) pctptt.exe
> >PTSNOOP Registry (Machine Run) ptsnoop.exe
> >Pop-Up Stopper Registry (Machine Run) "C:\PROGRAM FILES\PANICWARE\POP-UP
> >STOPPER\DPPS2.EXE"
> >RegShave Registry (Machine Run) C:\Progra~1\REGSHAVE\REGSHAVE.EXE /autorun
> >PP7600usb Registry (Machine Run) C:\PROGRA~1\VISION~1\PAPERP~1\FBDirect.exe
> >StillImageMonitor Registry (Machine Run) C:\WINDOWS\SYSTEM\STIMON.EXE
> >CriticalUpdate Registry (Machine Run) C:\WINDOWS\SYSTEM\wucrtupd.exe -startup
> >
> >Symantec NetDriver Monitor Registry (Machine
> >Run) C:\PROGRA~1\SYMANTEC\LIVEUP~1\SNDMON.EXE
> >Zone Labs Client Registry (Machine Run) "C:\Program Files\Zone
> >Labs\ZoneAlarm\zlclient.exe"
> >LoadPowerProfile Registry (Machine Service) Rundll32.exe
> >powrprof.dll,LoadCurrentPwrScheme
> >SchedulingAgent Registry (Machine Service) mstask.exe
> >ScriptBlocking Registry (Machine Service) "C:\Program Files\Common
> >Files\Symantec Shared\Script
> >Blocking\SBServ.exe" -reg
> >TrueVector Registry (Machine Service) C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
> >-service
> >
> >Alan Edwards wrote:
> >
> >> See if anything new is in Startup that is recreating the .csv files.
> >> Check in Msconfig for any oddities.
> >> (Start-Run-MSCONFIG-Startup tab)
> >> If you cannot see anything in Msconfig then:
> >>
> >> Start-Run-msinfo32
> >> Click the + beside Software Environment to expand.
> >> Click Startup Programs
> >> Ctrl+A to Select All, Ctrl+C to Copy.
> >> Paste that information in your message.
> >>
> >> ...Alan
> >>
> >> --
> >> Alan Edwards, MS MVP W95/98 Systems
> >> http://dts-l.org/index.html
> >>
> >> In microsoft.public.windowsme.general, Sixeye > wrote:
> >>
> >> >My dad went to UPS.com to see how much it would cost to ship something.
> >> >Oddly, the site made him download some zone chart or something. He
> >> >downloaded it to his desktop but then couldn't find it. Instead, he had
> >> >about 50 new icons. If he deletes them, they come back the next time he
> >> >boots up. Adaware and his virus scanner don't find anything. He tried
> >> >destroying them when deleting rather than just having them dumped to the
> >> >Recycle Bin but they still come back. He has a program called Total
> >> >Clean that also does not get rid of them. He didn't run anything after
> >> >downloading the so-called zone chart, they just showed up!
> >> >
> >> >They seem to be "Excel Comma Separated Values Files".
> >> >
> >> >Anyone have any ideas on how to get rid of these things?

[Sixeye]

Rick T wrote:

> Sixeye wrote:
>
> > My dad went to UPS.com to see how much it would cost to ship something.
> > Oddly, the site made him download some zone chart or something. He
> > downloaded it to his desktop but then couldn't find it. Instead, he had
> > about 50 new icons. If he deletes them, they come back the next time he
> > boots up. Adaware and his virus scanner don't find anything. He tried
> > destroying them when deleting rather than just having them dumped to the
> > Recycle Bin but they still come back. He has a program called Total
> > Clean that also does not get rid of them. He didn't run anything after
> > downloading the so-called zone chart, they just showed up!
> >
> > They seem to be "Excel Comma Separated Values Files".
> >
> > Anyone have any ideas on how to get rid of these things?
> >
>
> Try deleting them from Safe-Mode.
>
> Rick

Why would that be any different than from Windows? Deleting is deleting,
isn't it? Something is causing them to reappear on the desktop. Safemode has
to do with drivers as far as I understand.

[Noel Paton]

A thought.....
Try this - it can't hurt, and you never know.<g>

run
SCANREG /FIX
from a command prompt, and reboot on request
then try deleting the icons - do not reboot

then run SCANREG /FIX again
and reboot on request

(then post back for an explanation, if it works!<g>)


--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
or
http://www.microsoft.com/presspass/features/2001/Mar01/Mar27pmvp.asp
"Sixeye" > wrote in message ...
> Right, I didn't either. And I couldn't get UPS to force anything on me
either.
> Leave it to my dad. :)
>
> Alan Edwards wrote:
>
> > I am afraid I see nothing unusual there.
> > You may have to disable a few and reboot to see if you can track it
> > down.
> > Some of those are unnecessary and you can get a bit of information
> > here:
> > SysInfo.org - Startup Applications:
> > http://www.sysinfo.org/startuplist.php
> >
> > Sorry, I tried UPS.com and I couldn't make it try and download
> > anything.
> >
> > ...Alan
> >
> > --
> > Alan Edwards, MS MVP W95/98 Systems
> > http://dts-l.org/index.html
> >
> > In microsoft.public.windowsme.general, Sixeye > wrote:
> >
> > >Here is what it shows:
> > >
> > >Windows Guardian Startup Group "C:\Program Files\the
HelpSpot!\Fawgrd32.exe"
> > >/STARTUP
> > >EPSON Background Monitor Startup Group C:\ESM2\Stms.exe
> > >Microsoft Find Fast Startup Group "C:\Program Files\Microsoft
> > >Office\Office\FINDFAST.EXE"
> > >Office Startup Startup Group "C:\Program Files\Microsoft
> > >Office\Office\OSA.EXE" -b
> > >Exif Launcher Startup Group "C:\Program Files\Exif
Launcher\QuickDCF.exe"
> > >Total Cleaner Startup Group "C:\Program Files\Total
Cleaner\cleaner.exe"
> > >/autorun
> > >ScanRegistry Registry (Machine Run) C:\WINDOWS\scanregw.exe /autorun
> > >TaskMonitor Registry (Machine Run) C:\WINDOWS\taskmon.exe
> > >SystemTray Registry (Machine Run) SysTray.Exe
> > >LoadPowerProfile Registry (Machine Run) Rundll32.exe
> > >powrprof.dll,LoadCurrentPwrScheme
> > >EnsoniqMixer Registry (Machine Run) starter.exe
> > >NAV Agent Registry (Machine Run) C:\PROGRA~1\NORTON~1\NAVAPW32.EXE
> > >CountrySelection Registry (Machine Run) pctptt.exe
> > >PTSNOOP Registry (Machine Run) ptsnoop.exe
> > >Pop-Up Stopper Registry (Machine Run) "C:\PROGRAM
FILES\PANICWARE\POP-UP
> > >STOPPER\DPPS2.EXE"
> > >RegShave Registry (Machine Run) C:\Progra~1\REGSHAVE\REGSHAVE.EXE
/autorun
> > >PP7600usb Registry (Machine Run)
C:\PROGRA~1\VISION~1\PAPERP~1\FBDirect.exe
> > >StillImageMonitor Registry (Machine Run) C:\WINDOWS\SYSTEM\STIMON.EXE
> > >CriticalUpdate Registry (Machine Run)
C:\WINDOWS\SYSTEM\wucrtupd.exe -startup
> > >
> > >Symantec NetDriver Monitor Registry (Machine
> > >Run) C:\PROGRA~1\SYMANTEC\LIVEUP~1\SNDMON.EXE
> > >Zone Labs Client Registry (Machine Run) "C:\Program Files\Zone
> > >Labs\ZoneAlarm\zlclient.exe"
> > >LoadPowerProfile Registry (Machine Service) Rundll32.exe
> > >powrprof.dll,LoadCurrentPwrScheme
> > >SchedulingAgent Registry (Machine Service) mstask.exe
> > >ScriptBlocking Registry (Machine Service) "C:\Program Files\Common
> > >Files\Symantec Shared\Script
> > >Blocking\SBServ.exe" -reg
> > >TrueVector Registry (Machine Service)
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
> > >-service
> > >
> > >Alan Edwards wrote:
> > >
> > >> See if anything new is in Startup that is recreating the .csv files.
> > >> Check in Msconfig for any oddities.
> > >> (Start-Run-MSCONFIG-Startup tab)
> > >> If you cannot see anything in Msconfig then:
> > >>
> > >> Start-Run-msinfo32
> > >> Click the + beside Software Environment to expand.
> > >> Click Startup Programs
> > >> Ctrl+A to Select All, Ctrl+C to Copy.
> > >> Paste that information in your message.
> > >>
> > >> ...Alan
> > >>
> > >> --
> > >> Alan Edwards, MS MVP W95/98 Systems
> > >> http://dts-l.org/index.html
> > >>
> > >> In microsoft.public.windowsme.general, Sixeye > wrote:
> > >>
> > >> >My dad went to UPS.com to see how much it would cost to ship
something.
> > >> >Oddly, the site made him download some zone chart or something. He
> > >> >downloaded it to his desktop but then couldn't find it. Instead, he
had
> > >> >about 50 new icons. If he deletes them, they come back the next
time he
> > >> >boots up. Adaware and his virus scanner don't find anything. He
tried
> > >> >destroying them when deleting rather than just having them dumped to
the
> > >> >Recycle Bin but they still come back. He has a program called Total
> > >> >Clean that also does not get rid of them. He didn't run anything
after
> > >> >downloading the so-called zone chart, they just showed up!
> > >> >
> > >> >They seem to be "Excel Comma Separated Values Files".
> > >> >
> > >> >Anyone have any ideas on how to get rid of these things?
>

[Sixeye]

No, that didn't work for him. It told him to shut down to DOS to run that. He
didn't know how to do that and before I saw his email with that result, he
called Dell and they dialed into his system. They went into MSCONFIG and
unchecked everything and then did a running gun battle deleting the icons.
Eventually I guess, they all stayed deleted. He also mentioned that he couldn't
run SCANDISK (always freezes at where it says it's checking Folders). They
poked around some more, changed something and then told him all would be well
when he rebooted. And they hung up. Unfortunately. Yes, the icons all stayed
gone. Yes, Zonealarm, Norton Antivirus, his pop up stopper, et al was also
off. Naturally since they had unchecked everything in MSCONFIG. I had him
check the boxes I felt were critical and reboot. That got the things I just
mentioned running again. The mystery icons on the desktp stayed gone (yay!) but
SCANDISK still doesn't run. It hasn't for months and months.

I may have to post a separate message with a different title, but before I do,
does anyone have any suggestions on that one? He wants to run SCANDISK and then
DEFRAG. Defrag won't run because it's seeing some odd error and like I said,
Scandisk is hanging up too.

Noel Paton wrote:

> A thought.....
> Try this - it can't hurt, and you never know.<g>
>
> run
> SCANREG /FIX
> from a command prompt, and reboot on request
> then try deleting the icons - do not reboot
>
> then run SCANREG /FIX again
> and reboot on request
>
> (then post back for an explanation, if it works!<g>)
>
> --
> Noel Paton (MS-MVP 2002-2004, Win9x)
>
> Nil Carborundum Illegitemi
> http://www.btinternet.com/~winnoel/millsrpch.htm
>
> Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
> or
> http://www.microsoft.com/presspass/features/2001/Mar01/Mar27pmvp.asp
> "Sixeye" > wrote in message ...
> > Right, I didn't either. And I couldn't get UPS to force anything on me
> either.
> > Leave it to my dad. :)
> >
> > Alan Edwards wrote:
> >
> > > I am afraid I see nothing unusual there.
> > > You may have to disable a few and reboot to see if you can track it
> > > down.
> > > Some of those are unnecessary and you can get a bit of information
> > > here:
> > > SysInfo.org - Startup Applications:
> > > http://www.sysinfo.org/startuplist.php
> > >
> > > Sorry, I tried UPS.com and I couldn't make it try and download
> > > anything.
> > >
> > > ...Alan
> > >
> > > --
> > > Alan Edwards, MS MVP W95/98 Systems
> > > http://dts-l.org/index.html
> > >
> > > In microsoft.public.windowsme.general, Sixeye > wrote:
> > >
> > > >Here is what it shows:
> > > >
> > > >Windows Guardian Startup Group "C:\Program Files\the
> HelpSpot!\Fawgrd32.exe"
> > > >/STARTUP
> > > >EPSON Background Monitor Startup Group C:\ESM2\Stms.exe
> > > >Microsoft Find Fast Startup Group "C:\Program Files\Microsoft
> > > >Office\Office\FINDFAST.EXE"
> > > >Office Startup Startup Group "C:\Program Files\Microsoft
> > > >Office\Office\OSA.EXE" -b
> > > >Exif Launcher Startup Group "C:\Program Files\Exif
> Launcher\QuickDCF.exe"
> > > >Total Cleaner Startup Group "C:\Program Files\Total
> Cleaner\cleaner.exe"
> > > >/autorun
> > > >ScanRegistry Registry (Machine Run) C:\WINDOWS\scanregw.exe /autorun
> > > >TaskMonitor Registry (Machine Run) C:\WINDOWS\taskmon.exe
> > > >SystemTray Registry (Machine Run) SysTray.Exe
> > > >LoadPowerProfile Registry (Machine Run) Rundll32.exe
> > > >powrprof.dll,LoadCurrentPwrScheme
> > > >EnsoniqMixer Registry (Machine Run) starter.exe
> > > >NAV Agent Registry (Machine Run) C:\PROGRA~1\NORTON~1\NAVAPW32.EXE
> > > >CountrySelection Registry (Machine Run) pctptt.exe
> > > >PTSNOOP Registry (Machine Run) ptsnoop.exe
> > > >Pop-Up Stopper Registry (Machine Run) "C:\PROGRAM
> FILES\PANICWARE\POP-UP
> > > >STOPPER\DPPS2.EXE"
> > > >RegShave Registry (Machine Run) C:\Progra~1\REGSHAVE\REGSHAVE.EXE
> /autorun
> > > >PP7600usb Registry (Machine Run)
> C:\PROGRA~1\VISION~1\PAPERP~1\FBDirect.exe
> > > >StillImageMonitor Registry (Machine Run) C:\WINDOWS\SYSTEM\STIMON.EXE
> > > >CriticalUpdate Registry (Machine Run)
> C:\WINDOWS\SYSTEM\wucrtupd.exe -startup
> > > >
> > > >Symantec NetDriver Monitor Registry (Machine
> > > >Run) C:\PROGRA~1\SYMANTEC\LIVEUP~1\SNDMON.EXE
> > > >Zone Labs Client Registry (Machine Run) "C:\Program Files\Zone
> > > >Labs\ZoneAlarm\zlclient.exe"
> > > >LoadPowerProfile Registry (Machine Service) Rundll32.exe
> > > >powrprof.dll,LoadCurrentPwrScheme
> > > >SchedulingAgent Registry (Machine Service) mstask.exe
> > > >ScriptBlocking Registry (Machine Service) "C:\Program Files\Common
> > > >Files\Symantec Shared\Script
> > > >Blocking\SBServ.exe" -reg
> > > >TrueVector Registry (Machine Service)
> C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
> > > >-service
> > > >
> > > >Alan Edwards wrote:
> > > >
> > > >> See if anything new is in Startup that is recreating the .csv files.
> > > >> Check in Msconfig for any oddities.
> > > >> (Start-Run-MSCONFIG-Startup tab)
> > > >> If you cannot see anything in Msconfig then:
> > > >>
> > > >> Start-Run-msinfo32
> > > >> Click the + beside Software Environment to expand.
> > > >> Click Startup Programs
> > > >> Ctrl+A to Select All, Ctrl+C to Copy.
> > > >> Paste that information in your message.
> > > >>
> > > >> ...Alan
> > > >>
> > > >> --
> > > >> Alan Edwards, MS MVP W95/98 Systems
> > > >> http://dts-l.org/index.html
> > > >>
> > > >> In microsoft.public.windowsme.general, Sixeye > wrote:
> > > >>
> > > >> >My dad went to UPS.com to see how much it would cost to ship
> something.
> > > >> >Oddly, the site made him download some zone chart or something. He
> > > >> >downloaded it to his desktop but then couldn't find it. Instead, he
> had
> > > >> >about 50 new icons. If he deletes them, they come back the next
> time he
> > > >> >boots up. Adaware and his virus scanner don't find anything. He
> tried
> > > >> >destroying them when deleting rather than just having them dumped to
> the
> > > >> >Recycle Bin but they still come back. He has a program called Total
> > > >> >Clean that also does not get rid of them. He didn't run anything
> after
> > > >> >downloading the so-called zone chart, they just showed up!
> > > >> >
> > > >> >They seem to be "Excel Comma Separated Values Files".
> > > >> >
> > > >> >Anyone have any ideas on how to get rid of these things?
> >

[Noel Paton]

Shut down to DOS to do SCANREG???
He's not running ME then!! - must be Win98/SE

Try running ScanDisk and Defrag while in Safe Mode
--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
or
http://www.microsoft.com/presspass/features/2001/Mar01/Mar27pmvp.asp
"Sixeye" > wrote in message ...
> No, that didn't work for him. It told him to shut down to DOS to run
that. He
> didn't know how to do that and before I saw his email with that result, he
> called Dell and they dialed into his system. They went into MSCONFIG and
> unchecked everything and then did a running gun battle deleting the icons.
> Eventually I guess, they all stayed deleted. He also mentioned that he
couldn't
> run SCANDISK (always freezes at where it says it's checking Folders).
They
> poked around some more, changed something and then told him all would be
well
> when he rebooted. And they hung up. Unfortunately. Yes, the icons all
stayed
> gone. Yes, Zonealarm, Norton Antivirus, his pop up stopper, et al was
also
> off. Naturally since they had unchecked everything in MSCONFIG. I had
him
> check the boxes I felt were critical and reboot. That got the things I
just
> mentioned running again. The mystery icons on the desktp stayed gone
(yay!) but
> SCANDISK still doesn't run. It hasn't for months and months.
>
> I may have to post a separate message with a different title, but before I
do,
> does anyone have any suggestions on that one? He wants to run SCANDISK
and then
> DEFRAG. Defrag won't run because it's seeing some odd error and like I
said,
> Scandisk is hanging up too.
>
> Noel Paton wrote:
>
> > A thought.....
> > Try this - it can't hurt, and you never know.<g>
> >
> > run
> > SCANREG /FIX
> > from a command prompt, and reboot on request
> > then try deleting the icons - do not reboot
> >
> > then run SCANREG /FIX again
> > and reboot on request
> >
> > (then post back for an explanation, if it works!<g>)
> >
> > --
> > Noel Paton (MS-MVP 2002-2004, Win9x)
> >
> > Nil Carborundum Illegitemi
> > http://www.btinternet.com/~winnoel/millsrpch.htm
> >
> > Please read http://dts-l.org/goodpost.htm on how to post messages to
NG's
> > or
> > http://www.microsoft.com/presspass/features/2001/Mar01/Mar27pmvp.asp
> > "Sixeye" > wrote in message ...
> > > Right, I didn't either. And I couldn't get UPS to force anything on
me
> > either.
> > > Leave it to my dad. :)
> > >
> > > Alan Edwards wrote:
> > >
> > > > I am afraid I see nothing unusual there.
> > > > You may have to disable a few and reboot to see if you can track it
> > > > down.
> > > > Some of those are unnecessary and you can get a bit of information
> > > > here:
> > > > SysInfo.org - Startup Applications:
> > > > http://www.sysinfo.org/startuplist.php
> > > >
> > > > Sorry, I tried UPS.com and I couldn't make it try and download
> > > > anything.
> > > >
> > > > ...Alan
> > > >
> > > > --
> > > > Alan Edwards, MS MVP W95/98 Systems
> > > > http://dts-l.org/index.html
> > > >
> > > > In microsoft.public.windowsme.general, Sixeye > wrote:
> > > >
> > > > >Here is what it shows:
> > > > >
> > > > >Windows Guardian Startup Group "C:\Program Files\the
> > HelpSpot!\Fawgrd32.exe"
> > > > >/STARTUP
> > > > >EPSON Background Monitor Startup Group C:\ESM2\Stms.exe
> > > > >Microsoft Find Fast Startup Group "C:\Program Files\Microsoft
> > > > >Office\Office\FINDFAST.EXE"
> > > > >Office Startup Startup Group "C:\Program Files\Microsoft
> > > > >Office\Office\OSA.EXE" -b
> > > > >Exif Launcher Startup Group "C:\Program Files\Exif
> > Launcher\QuickDCF.exe"
> > > > >Total Cleaner Startup Group "C:\Program Files\Total
> > Cleaner\cleaner.exe"
> > > > >/autorun
> > > > >ScanRegistry Registry (Machine Run) C:\WINDOWS\scanregw.exe
/autorun
> > > > >TaskMonitor Registry (Machine Run) C:\WINDOWS\taskmon.exe
> > > > >SystemTray Registry (Machine Run) SysTray.Exe
> > > > >LoadPowerProfile Registry (Machine Run) Rundll32.exe
> > > > >powrprof.dll,LoadCurrentPwrScheme
> > > > >EnsoniqMixer Registry (Machine Run) starter.exe
> > > > >NAV Agent Registry (Machine Run) C:\PROGRA~1\NORTON~1\NAVAPW32.EXE
> > > > >CountrySelection Registry (Machine Run) pctptt.exe
> > > > >PTSNOOP Registry (Machine Run) ptsnoop.exe
> > > > >Pop-Up Stopper Registry (Machine Run) "C:\PROGRAM
> > FILES\PANICWARE\POP-UP
> > > > >STOPPER\DPPS2.EXE"
> > > > >RegShave Registry (Machine Run) C:\Progra~1\REGSHAVE\REGSHAVE.EXE
> > /autorun
> > > > >PP7600usb Registry (Machine Run)
> > C:\PROGRA~1\VISION~1\PAPERP~1\FBDirect.exe
> > > > >StillImageMonitor Registry (Machine Run)
C:\WINDOWS\SYSTEM\STIMON.EXE
> > > > >CriticalUpdate Registry (Machine Run)
> > C:\WINDOWS\SYSTEM\wucrtupd.exe -startup
> > > > >
> > > > >Symantec NetDriver Monitor Registry (Machine
> > > > >Run) C:\PROGRA~1\SYMANTEC\LIVEUP~1\SNDMON.EXE
> > > > >Zone Labs Client Registry (Machine Run) "C:\Program Files\Zone
> > > > >Labs\ZoneAlarm\zlclient.exe"
> > > > >LoadPowerProfile Registry (Machine Service) Rundll32.exe
> > > > >powrprof.dll,LoadCurrentPwrScheme
> > > > >SchedulingAgent Registry (Machine Service) mstask.exe
> > > > >ScriptBlocking Registry (Machine Service) "C:\Program Files\Common
> > > > >Files\Symantec Shared\Script
> > > > >Blocking\SBServ.exe" -reg
> > > > >TrueVector Registry (Machine Service)
> > C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
> > > > >-service
> > > > >
> > > > >Alan Edwards wrote:
> > > > >
> > > > >> See if anything new is in Startup that is recreating the .csv
files.
> > > > >> Check in Msconfig for any oddities.
> > > > >> (Start-Run-MSCONFIG-Startup tab)
> > > > >> If you cannot see anything in Msconfig then:
> > > > >>
> > > > >> Start-Run-msinfo32
> > > > >> Click the + beside Software Environment to expand.
> > > > >> Click Startup Programs
> > > > >> Ctrl+A to Select All, Ctrl+C to Copy.
> > > > >> Paste that information in your message.
> > > > >>
> > > > >> ...Alan
> > > > >>
> > > > >> --
> > > > >> Alan Edwards, MS MVP W95/98 Systems
> > > > >> http://dts-l.org/index.html
> > > > >>
> > > > >> In microsoft.public.windowsme.general, Sixeye > wrote:
> > > > >>
> > > > >> >My dad went to UPS.com to see how much it would cost to ship
> > something.
> > > > >> >Oddly, the site made him download some zone chart or something.
He
> > > > >> >downloaded it to his desktop but then couldn't find it.
Instead, he
> > had
> > > > >> >about 50 new icons. If he deletes them, they come back the next
> > time he
> > > > >> >boots up. Adaware and his virus scanner don't find anything. He
> > tried
> > > > >> >destroying them when deleting rather than just having them
dumped to
> > the
> > > > >> >Recycle Bin but they still come back. He has a program called
Total
> > > > >> >Clean that also does not get rid of them. He didn't run
anything
> > after
> > > > >> >downloading the so-called zone chart, they just showed up!
> > > > >> >
> > > > >> >They seem to be "Excel Comma Separated Values Files".
> > > > >> >
> > > > >> >Anyone have any ideas on how to get rid of these things?
> > >
>

[Sixeye]

Yes, that's correct. Win98. Sorry, I just realized I'm in Windowsme.general.
Dohhh! But I'll have him try your suggestion. As you know, many of the
functions and routines are the same in 98 and ME.

Noel Paton wrote:

> Shut down to DOS to do SCANREG???
> He's not running ME then!! - must be Win98/SE
>
> Try running ScanDisk and Defrag while in Safe Mode
> --
> Noel Paton (MS-MVP 2002-2004, Win9x)
>
> Nil Carborundum Illegitemi
> http://www.btinternet.com/~winnoel/millsrpch.htm
>
> Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
> or
> http://www.microsoft.com/presspass/features/2001/Mar01/Mar27pmvp.asp
> "Sixeye" > wrote in message ...
> > No, that didn't work for him. It told him to shut down to DOS to run
> that. He
> > didn't know how to do that and before I saw his email with that result, he
> > called Dell and they dialed into his system. They went into MSCONFIG and
> > unchecked everything and then did a running gun battle deleting the icons.
> > Eventually I guess, they all stayed deleted. He also mentioned that he
> couldn't
> > run SCANDISK (always freezes at where it says it's checking Folders).
> They
> > poked around some more, changed something and then told him all would be
> well
> > when he rebooted. And they hung up. Unfortunately. Yes, the icons all
> stayed
> > gone. Yes, Zonealarm, Norton Antivirus, his pop up stopper, et al was
> also
> > off. Naturally since they had unchecked everything in MSCONFIG. I had
> him
> > check the boxes I felt were critical and reboot. That got the things I
> just
> > mentioned running again. The mystery icons on the desktp stayed gone
> (yay!) but
> > SCANDISK still doesn't run. It hasn't for months and months.
> >
> > I may have to post a separate message with a different title, but before I
> do,
> > does anyone have any suggestions on that one? He wants to run SCANDISK
> and then
> > DEFRAG. Defrag won't run because it's seeing some odd error and like I
> said,
> > Scandisk is hanging up too.
> >
> > Noel Paton wrote:
> >
> > > A thought.....
> > > Try this - it can't hurt, and you never know.<g>
> > >
> > > run
> > > SCANREG /FIX
> > > from a command prompt, and reboot on request
> > > then try deleting the icons - do not reboot
> > >
> > > then run SCANREG /FIX again
> > > and reboot on request
> > >
> > > (then post back for an explanation, if it works!<g>)
> > >
> > > --
> > > Noel Paton (MS-MVP 2002-2004, Win9x)
> > >
> > > Nil Carborundum Illegitemi
> > > http://www.btinternet.com/~winnoel/millsrpch.htm
> > >
> > > Please read http://dts-l.org/goodpost.htm on how to post messages to
> NG's
> > > or
> > > http://www.microsoft.com/presspass/features/2001/Mar01/Mar27pmvp.asp
> > > "Sixeye" > wrote in message ...
> > > > Right, I didn't either. And I couldn't get UPS to force anything on
> me
> > > either.
> > > > Leave it to my dad. :)
> > > >
> > > > Alan Edwards wrote:
> > > >
> > > > > I am afraid I see nothing unusual there.
> > > > > You may have to disable a few and reboot to see if you can track it
> > > > > down.
> > > > > Some of those are unnecessary and you can get a bit of information
> > > > > here:
> > > > > SysInfo.org - Startup Applications:
> > > > > http://www.sysinfo.org/startuplist.php
> > > > >
> > > > > Sorry, I tried UPS.com and I couldn't make it try and download
> > > > > anything.
> > > > >
> > > > > ...Alan
> > > > >
> > > > > --
> > > > > Alan Edwards, MS MVP W95/98 Systems
> > > > > http://dts-l.org/index.html
> > > > >
> > > > > In microsoft.public.windowsme.general, Sixeye > wrote:
> > > > >
> > > > > >Here is what it shows:
> > > > > >
> > > > > >Windows Guardian Startup Group "C:\Program Files\the
> > > HelpSpot!\Fawgrd32.exe"
> > > > > >/STARTUP
> > > > > >EPSON Background Monitor Startup Group C:\ESM2\Stms.exe
> > > > > >Microsoft Find Fast Startup Group "C:\Program Files\Microsoft
> > > > > >Office\Office\FINDFAST.EXE"
> > > > > >Office Startup Startup Group "C:\Program Files\Microsoft
> > > > > >Office\Office\OSA.EXE" -b
> > > > > >Exif Launcher Startup Group "C:\Program Files\Exif
> > > Launcher\QuickDCF.exe"
> > > > > >Total Cleaner Startup Group "C:\Program Files\Total
> > > Cleaner\cleaner.exe"
> > > > > >/autorun
> > > > > >ScanRegistry Registry (Machine Run) C:\WINDOWS\scanregw.exe
> /autorun
> > > > > >TaskMonitor Registry (Machine Run) C:\WINDOWS\taskmon.exe
> > > > > >SystemTray Registry (Machine Run) SysTray.Exe
> > > > > >LoadPowerProfile Registry (Machine Run) Rundll32.exe
> > > > > >powrprof.dll,LoadCurrentPwrScheme
> > > > > >EnsoniqMixer Registry (Machine Run) starter.exe
> > > > > >NAV Agent Registry (Machine Run) C:\PROGRA~1\NORTON~1\NAVAPW32.EXE
> > > > > >CountrySelection Registry (Machine Run) pctptt.exe
> > > > > >PTSNOOP Registry (Machine Run) ptsnoop.exe
> > > > > >Pop-Up Stopper Registry (Machine Run) "C:\PROGRAM
> > > FILES\PANICWARE\POP-UP
> > > > > >STOPPER\DPPS2.EXE"
> > > > > >RegShave Registry (Machine Run) C:\Progra~1\REGSHAVE\REGSHAVE.EXE
> > > /autorun
> > > > > >PP7600usb Registry (Machine Run)
> > > C:\PROGRA~1\VISION~1\PAPERP~1\FBDirect.exe
> > > > > >StillImageMonitor Registry (Machine Run)
> C:\WINDOWS\SYSTEM\STIMON.EXE
> > > > > >CriticalUpdate Registry (Machine Run)
> > > C:\WINDOWS\SYSTEM\wucrtupd.exe -startup
> > > > > >
> > > > > >Symantec NetDriver Monitor Registry (Machine
> > > > > >Run) C:\PROGRA~1\SYMANTEC\LIVEUP~1\SNDMON.EXE
> > > > > >Zone Labs Client Registry (Machine Run) "C:\Program Files\Zone
> > > > > >Labs\ZoneAlarm\zlclient.exe"
> > > > > >LoadPowerProfile Registry (Machine Service) Rundll32.exe
> > > > > >powrprof.dll,LoadCurrentPwrScheme
> > > > > >SchedulingAgent Registry (Machine Service) mstask.exe
> > > > > >ScriptBlocking Registry (Machine Service) "C:\Program Files\Common
> > > > > >Files\Symantec Shared\Script
> > > > > >Blocking\SBServ.exe" -reg
> > > > > >TrueVector Registry (Machine Service)
> > > C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
> > > > > >-service
> > > > > >
> > > > > >Alan Edwards wrote:
> > > > > >
> > > > > >> See if anything new is in Startup that is recreating the .csv
> files.
> > > > > >> Check in Msconfig for any oddities.
> > > > > >> (Start-Run-MSCONFIG-Startup tab)
> > > > > >> If you cannot see anything in Msconfig then:
> > > > > >>
> > > > > >> Start-Run-msinfo32
> > > > > >> Click the + beside Software Environment to expand.
> > > > > >> Click Startup Programs
> > > > > >> Ctrl+A to Select All, Ctrl+C to Copy.
> > > > > >> Paste that information in your message.
> > > > > >>
> > > > > >> ...Alan
> > > > > >>
> > > > > >> --
> > > > > >> Alan Edwards, MS MVP W95/98 Systems
> > > > > >> http://dts-l.org/index.html
> > > > > >>
> > > > > >> In microsoft.public.windowsme.general, Sixeye > wrote:
> > > > > >>
> > > > > >> >My dad went to UPS.com to see how much it would cost to ship
> > > something.
> > > > > >> >Oddly, the site made him download some zone chart or something.
> He
> > > > > >> >downloaded it to his desktop but then couldn't find it.
> Instead, he
> > > had
> > > > > >> >about 50 new icons. If he deletes them, they come back the next
> > > time he
> > > > > >> >boots up. Adaware and his virus scanner don't find anything. He
> > > tried
> > > > > >> >destroying them when deleting rather than just having them
> dumped to
> > > the
> > > > > >> >Recycle Bin but they still come back. He has a program called
> Total
> > > > > >> >Clean that also does not get rid of them. He didn't run
> anything
> > > after
> > > > > >> >downloading the so-called zone chart, they just showed up!
> > > > > >> >
> > > > > >> >They seem to be "Excel Comma Separated Values Files".
> > > > > >> >
> > > > > >> >Anyone have any ideas on how to get rid of these things?
> > > >
> >