> assume I've installed GnuPG to c:\topsecret\spytools (btw, I have > not) Why does this matter? Either you have control of your system, in which case you're not giving away anything by saying where GnuPG is -- or you don't, in which case not saying where GnuPG is doesn't help you recover. Paranoia is great. Carefully reasoned paranoia is even better.