Rundll

Hi,

Something is changing this registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\shell\open\command

The default is supposed to be "%1" %*

It is sporadically being changed to:
C:\Windows\System32\Rundll.exe "%1" %*

This causes some programs not to work at all and others to go wacky.

I've been checking the key many times a session and haven't seen it change, but when I reboot the change is there and some of my startup programs blow up. It doesn't happen every time.

Where should I look to find out what's causing this?

I'm sorry if I have the wrong forum.

WindowsXP 2600 Corporate. All updates implemented.
Compaq 1gig Athlon - 512 RAM
GeForce2 MX/MX400

 

Well, I won't take your five bucks, Steve, but it's not a virus or trojan. I have AVG running all the time and I've scanned with Pest Patrol.

Thanks for the site and the help. I didn't know that was out there. Trend Micro also couldn't find anything wrong. It was good to have a second opinion.

Something, under certain conditions, is resetting the registry key. It's easy enough to set it back but it is a royal pain.

Thanks again for your help.