Output folder: C:\DOCUME~1\Acidfire\LOCALS~1\Temp\nsn187C.tmp Extract: test.txt Rename: C:\DOCUME~1\Acidfire\LOCALS~1\Temp\nsn187C.tmp\test.txt->C:\DOCUME~1\Acidfire\LOCALS~1\Temp\nsn187C.tmp\test.avi Rename: C:\DOCUME~1\Acidfire\LOCALS~1\Temp\nsn187C.tmp\test.avi->C:\DOCUME~1\Acidfire\LOCALS~1\Temp\nsn187C.tmp\test.jpg Values read from the registry ===================================== FileManager %SystemRoot%\Explorer.exe /idlist,%I,%L TextEditor C:\WINDOWS\metapad.exe CommandPromt C:\WINDOWS\system32\cmd.exe AudioPlayer "C:\Program Files\Winamp\Winamp.exe" "%1" MediaPlayer C:\Program Files\Winamp\Winamp.exe GfxViewer rundll32.exe C:\WINDOWS\system32\shimgvw.dll,ImageView_Fullscreen %1 GfxEditor "%systemroot%\system32\mspaint.exe" "%1" Broswer C:\PROGRA~1\MOZILL~1\FIREFOX.EXE -url "%1" Dun %SystemRoot%\system32\rasphone.exe -lt "%1" Email C:\PROGRA~1\MOZILL~2\THUNDE~1.EXE -compose %1 IRC FTP C:\PROGRA~1\MOZILL~1\FIREFOX.EXE -url "%1" IM Values after my magic ==================================== FileManager C:\WINDOWS\Explorer.exe TextEditor C:\WINDOWS\metapad.exe CommandPromt C:\WINDOWS\system32\cmd.exe AudioPlayer C:\Program Files\Winamp\Winamp.exe MediaPlayer C:\Program Files\Winamp\Winamp.exe GfxViewer rundll32.exe C:\WINDOWS\system32\shimgvw.dll,ImageView_Fullscreen GfxEditor C:\WINDOWS\system32\mspaint.exe Broswer C:\PROGRA~1\MOZILL~1\FIREFOX.EXE Dun C:\WINDOWS\system32\rasphone.exe Email C:\PROGRA~1\MOZILL~2\THUNDE~1.EXE IRC FTP C:\PROGRA~1\MOZILL~1\FIREFOX.EXE IM Completed