Is this normal behavior of WLM?

[LuckySidd]

Hello, I wonder if anyone having the same symptoms as mine..

I am running windows 7.
I just lately learn about Sandboxie, and I run WLM 2009 sandboxed.
The only programs I allow to run and use internet is msnmsgr.exe and wlcomm.exe

The problem is whenever I logged in to WLM, often when I maximized and minimized WLM main windows, WLM try to run rundll32.exe.
If I allowed it, it would run for a second, and then rundll32.exe close immediately.
I checked further with process explorer, rundll32.exe execute wininet.dll, and try to connect to an IP belongs to atdmt.com.

I use sfc scannow, its 100% okay.

Is this normal? could anyone test this too?
Thanks.