I understand how the checks work to detect a given registry value, but how do you check for a default value that doesn't have a name other that (default) For example I'm looking for a way to disable the lnk icons to counter the latest security threat until Microsoft figures out a patch Here's what I want to look for and if it exists then I want to blank the value by importing a .reg file that deletes the current value. Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\lnkfile\shellex\IconHandler] @="{00021401-0000-0000-C000-000000000046}" If anyone could give me an example to check for this default value that would be great. Any help on this would be great. I'm sure this would useful to others as this issues is currently un-patched and there is no outlook for a patch for a few weeks -- Christopher Rector, MCSE Computer Information Specialist Southern Illinois University School of Medicine Department of Ob/Gyn 217-545-9182 |