#2 your firewall should tell you what it's doing. System registry too.
#3 sounds like a good idea.
... i called H&R, they say it's SUPPOSED to do that. hah. they wouldn't tell me why.http://www.rohitab.com/download.html
API monitor. It's nice to have for these sorts of things.