hm...here: [HKEY_CURRENT_USER\Identities\{D4DFFB10-B527-41A1-9949-F240462A219F}\Software\Microsoft\Outlook Express\5.0] "Store Root"=hex:25,53,79,73,74,65,6D,44,72,69,76,65,25,5C,74,65,\ :?: that hex value represents C:\TEMP (test only) it's like that because is't reg_expand value (c:\ is represented as %systemroot%) but i'm concerned about D4DFFB10-B527-41A1-9949-F240462A219F key