Schulie: I started with regmon and found that IntelliMenus key, which I thought would do the trick. Tried and got nothing out of it. Then I noticed those two other "weird" keys that I posted earlier, wich are ROT13'ed (odd thing for explorer to do!). After some (too much!) internet searches for newer tools (as I mentioned, my "old days" hacking tools are way outdated and no longer operating on anything above WinNT4), I came to my previous conclusions.

As for the rundll32, it's only useful if the function were exported by name... [Frown] {edit} And it also would have to conform to a given parameter list (that's why these RUNDLL thingies work so well!) {/edit}

I've been away from my PC for some hours now, and just returned. Will do some more digging and post the results later. There's no such thing as the computer/OS/program/whatever taking the best of me! We (humans) will unite and claim victory! [Big Grin]

[ 04. October 2002, 00:56: Message edited by: Fernando Madruga ]
_________________________
Later,   [b]Mad[/b]ruga