I've seen this effect with wscript.exe, the virus called visual basic scripting. Rename wscript.exe, and another copy is soon magically and evilly in place. To fix that, I did a dir /s wscript.exe and found another copy of it, hiding in some dir in winnt (I think). Once I zapped that copy, wscript lost it's fungus like properties. I suspect LookOut--I mean Outlook is doing the same thing. Congratulations on not foisting this part of the MS Viral Transport System on your people... --STeve Andre' (Political Science) At 09:34 AM 12/17/01 -0500, Bryan Murphy wrote: >Nag list, > >We are trying to create a pristine build to deploy out to our users and cant >find a way to completely rid ourselves of the plague that is outlook >express. > >During the initial install of windows 2000 pro if you choose not install it, >it will install anyway and just excludes the icon on the desktop (like we >wont notice). The problem with this is that Trojans and virii will still >use it to propagate even if it isn't the default mail client. > >Its not listed on add remove programs and when you manually delete the >directory it RECREATES IT! > >Anyone have neat registry hack or a trick on getting rid of this problem? > >Thanks. > >Bryan Murphy, MCP >MSU Alumni Internet Developer and Administrator >http://www.msualum.com