Hi there, After capturing I found one entry related to fm20.dll: Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{D7053240-CE69-11CD-A777-00DD01143C57}] @="Microsoft Forms 2.0 CommandButton" [HKEY_CLASSES_ROOT\CLSID\{D7053240-CE69-11CD-A777-00DD01143C57}\Control] @="" [HKEY_CLASSES_ROOT\CLSID\{D7053240-CE69-11CD-A777-00DD01143C57}\DefaultIcon] @="C:\\WINDOWS\\system32\\FM20.DLL,0" [HKEY_CLASSES_ROOT\CLSID\{D7053240-CE69-11CD-A777-00DD01143C57}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{D7053240-CE69-11CD-A777-00DD01143C57}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}] @="" [HKEY_CLASSES_ROOT\CLSID\{D7053240-CE69-11CD-A777-00DD01143C57}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}] @="" [HKEY_CLASSES_ROOT\CLSID\{D7053240-CE69-11CD-A777-00DD01143C57}\InprocServer32] @="C:\\WINDOWS\\system32\\FM20.DLL" "ThreadingModel"="Apartment" [HKEY_CLASSES_ROOT\CLSID\{D7053240-CE69-11CD-A777-00DD01143C57}\MiscStatus] @="2757009" [HKEY_CLASSES_ROOT\CLSID\{D7053240-CE69-11CD-A777-00DD01143C57}\ProgID] @="Forms.CommandButton.1" [HKEY_CLASSES_ROOT\CLSID\{D7053240-CE69-11CD-A777-00DD01143C57}\ToolboxBitmap32] @="C:\\WINDOWS\\system32\\FM20.DLL, 45" [HKEY_CLASSES_ROOT\CLSID\{D7053240-CE69-11CD-A777-00DD01143C57}\TypeLib] @="{0D452EE1-E08F-101A-852E-02608C4D0BB4}" [HKEY_CLASSES_ROOT\CLSID\{D7053240-CE69-11CD-A777-00DD01143C57}\Version] @="2.0" And here is profile log from depend. walker: http://pastebin.com/rT3jjL6f thanks again