koolezt

Hi, Hollenthon (if you're still around): I know it's been a while, but I've only just joined. Looks like you need to open HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\\ProfilesDirectory, then set AllUsersProfile and DefaultUserProfile to "C:\Documents and Settings\Ancaria". Presuming that is your personal profile, I hope you enjoy the aforementioned "installer-generated spam".

A possible approach might be to use HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\\SourcePath. I've never used the .inf method (that's why I'm searching the forum for guidance), so I can't help for syntax, except to suggest the advice in your signature.

It seems simpler to fix the IE7 v RunOnce Ex issue. http://support.microsoft.com/kb/927357/en-us says This should fetch it.

You could always restore from a 3+ day-old backup (or restore point), with no network connection (copy your backup to local media, if necessary) then check all your security defences before slowly and carefully reconnecting and checking. How about an ip-sniff? Maybe one of your gaming buddies has caught something contagious.

@GL: Thanks for extremely useful link. Pity the price is gratuitous sarcasm. I'm sure you restrict all your enquiries and observations to your field of specific expertise. @all: The link is really authoritative. Check it out.