Hi Mark, thanks for your reply.
I meant the IE window.
I'm a little nervous because I had a virus (Prorat.BB) a few days ago and
things are not quite what they used to be.
I'm glad you deal with XP because then I can add another doubt: I read in
the web
http://www.security-forums.com/viewtopic.php?t=3752
that the registry keys in quaetion should all be "\"%1\" %*" and I found
one that is not, and which is also covered in the MS link below
http://www.microsoft.com/technet/security/Bulletin/MS05-016.mspx
HKEY_CLASSES_ROOT\htafile\Shell\Open\Command] ="\"%1\" %*"
C:\WINDOWS\system32\mshta.exe "%1" %*
I wonde if this has been alteed by the virus.
Could you help, please?
PS - No, I don't have regmon.
Many thanks for your kind help.
j
Mark V said:
NT4, W2K, W2K3, XP are all covered here to date.
Just always specify the OS in question when posting. For XP,
"home" vs. "Pro" may also be relevant.
You will need to be more specific about "window". An explorer
(shell) window, application window, some type of dialog window, ...
Type of account and profile. (a restricted user on a mandatory
profile will not be able to effectively save window state)
Environment: home system vs. a corporate one with possibly many
Group Policies applied.
And so on.
Can't say yet.
BTW do you have REGMON a free Sysinternals tool available there?