it can be a shell.dll, explorer.exe, ...etc...
it can be of any kind of combination.
like said, so much things has changed in the OS between those 2.
if you really need to know, you would need to crowl deep in msdn.microsoft.com and their archive to see what is that little minor thing that hits this run stuff.
_________________________
!download
KiXnet
