I dont think all the jeys you have in RunOnce are from IE6 only. Does IE6 really uses MSI ? I never have seen it. Not that the "InstMsi1" and "InstMsi2" show that you made TWO tries to install the MSI service.
Dont forget to clean your RunOnce Entries between installations.
And the
"OE_QDVDReg"="regsvr32 /s C:\WINDOWS\SYSTEM\qdvd.dll" "InnoSetupRegFile.0000000001"="C:\WINDOWS\is-K6KCV.exe /REG"
dont come with IE6
The installation of IE6 makes an heavy use of the RunOnce and RunOnceEx registry keys (when in "nt40" mode; I don't know how it behaves in win9x mode). The RunOnce entries are just command lines that need to be sent to CreateProcess, e.g.
[Software\Microsoft\Windows\CurrentVersion\RunOnce] 1042410063 "BrandClearStubs"="RUNDLL32 IEDKCS32.DLL,BrandCleanInstallStubs
{60B49E34-C7CC-11D0-8953-00A0C90347FF}M
ICROS" "DelIE4SetupDir"="rundll32.exe advpack.dll,DelNodeRunDLL32 C:\WINDOWS\SYSTEM\ie4setup,1" "GrpConv"="grpconv.exe -o" "InstMsi1"="rundll32.exe C:\WINDOWS\SYSTEM\advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\Installer\InstMsi0"" "InstMsi2"="rundll32.exe C:\WINDOWS\SYSTEM\advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\Installer\InstMsi1"" "MPlayer2_FixUp"="C:\WINDOWS\inf\unregmp2.exe /FixUps" "Regsister WScript"="wscript -regserver" "RegTLib"="C:\WINDOWS\RegTLib.exe C:\WINDOWS\SYSTEM\StdOle2.Tlb" "RunOnceEx"="rundll32.exe C:\WINDOWS\SYSTEM\iernonce.dll,RunOnceExProcess"
We only need to check if the first filename given is a readable EXE/DLL. Then do the appropriate. And you can see that the only executable that seems to be called is rundll32.exe. The only thing that we know nothing about is the "Flags" key.
The RunOnceEx entries are trickier, as it seems they can both be command lines and entries in the format "DLLName|Method|Argument", e.g.
[Software\Microsoft\Windows\CurrentVersion\RunOnceEx] 1042410240 "Flags"=dword:00000a30
[Software\Microsoft\Windows\CurrentVersion\RunOnceEx\090] 1038264583 "050"="rundll32.exe advpack.dll,DelNodeRunDLL32 C:\WINDOWS\SYSTEM\dacui.dll" "054"="rundll32.exe advpack.dll,DelNodeRunDLL32 C:\WINDOWS\Catroot\icatalog.mdb"
[Software\Microsoft\Windows\CurrentVersion\RunOnceEx\100] 1038264583 "000"="C:\WINDOWS\SYSTEM\wininet.dll|DeleteIE3Cache|"
===== Sylvain Petreolle spetreolle@users.sourceforge.net Fight against Spam ! http://www.euro.cauce.org/en/index.html ICQ #170597259
"Don't think you are. Know you are." Morpheus, in "Matrix".
___________________________________________________________ Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français ! Yahoo! Mail : http://fr.mail.yahoo.com