CronosAdditional Comments to Others.Wed Dec 16 16:47:30 1998 Since my solution is very similar to ones already mentioned I will give only the changes to theirs.Tools: String Scanner (wrote myself a while back).DOS.Filemon (long time no see).Regedit.Thats all.OK, following the previous post (see normal forum):We make the first observation that none of the files comprising the core of the program have changed in any way.Therefore the only changes must be elsewhere, and further there are only two possibilities: Files which have been changed or added, and Registry keys. It would be unsafe to make changes to anywhere else. This is what we want to undo, and I went straight for deletion of changes I could find (OK, so we could end up in a longer job, but live dangerously). File dates give only a few possible changes, so concentrate on those first (although this could easily be reset).Finding the files was straightforward in the end (and with more hindsight), and these were deleted. The string scanner brought up a lot of regkeys for Netscape, which I don't have installed. A quick check revealed a Netscape reg key and a suspicious entry which was quickly deleted.Thats it, haven't run softice/ida/wdasm or anything else yet,Cronos