>Isn't {42D00B20-479C-11d4-9706-00105A40931C} a GUID for your user account, >and as such unknown from time to time, making the proposed exploit >unfeasable ? It's a clsid and the number {42D00B20-479C-11d4-9706-00105A40931C} is the same on default installation of IncrediMail Xe (tested on W2K and W98). Eric DETOISIEN GLOBAL SECURE Web : http://www.global-secure.fr