#1. I ran System Info from Word 2002 today and two files - $ncsp$.inf and $winnt$.inf - were under Software Environment > Startup Programs. Both run under NT AUTHORITY\SYSTEM and both are in my System 32 folder.