Mark Lincoln wrote:
I found this on the Web:

msohtmed.exe is used for printing HTML files

It's a legitimate part of Office. Why it might be changing the
Registry, I don't know. Is there HTML in a workbook you're opening?

Do you know just what the app is modifying in the Registry?

-------------------------

If one has a bit of paranoia (not entirely bad on the web) you also have to
wonder whether msohtmed.exe is the real Microsoft file, or something insidious
that has taken the name of a known Microsoft file to escape being purged.

Presumably he still has an original copy of the file on his distribution disk to
verify whether it's been tinkered with by evil doers.

Bill