Question by ST: Does anyone know what this is for? It’s listed in my Windows XP registry under the RUN section.? String Value=balloon Data=regedit -s c:\windows\system32\Rdev.dll Best answer: Answer by cajunspike1959Its a virus called Torpig. delete that entry. 1)Get spybot search and destroy, install, update and run. http://www.safer-networking.org/en/index.html 2)Get avgfree anti virus, install, update and run. http://free.grisoft.com 3)Get windows defender antispyware, install, update and run. http://www.microsoft.com/downloads/details.aspx?FamilyId=435BFCE7-DA2B-4A6A-AFA4-F7F14E605A0D&displaylang=en 4)Get avgantispyware, install, update, and run. http://free.grisoft.com/doc/download-free-anti-spyware/us/frt/0 Add your own answer in the comments!