(imported topic written by Rafael Rodriguez)
Display Name Express
Período 1 hora
value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000001” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000002” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000003” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000004” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000005” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000006” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000007” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000008” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000009” of registry as string | “No name”
value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000001” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000002” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000003” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000004” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000005” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000006” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000007” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000008” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000009” of registry as string | “No name”
Email Express
Período 1 hora
value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000001” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000002” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000003” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000004” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000005” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000006” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000007” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000008” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000009” of registry as string | “No e-mail”
value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000001” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000002” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000003” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000004” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000005” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000006” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000007” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000008” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000009” of registry as string | “No e-mail”
POP3 Outlook
Período 1 hora
number of values “POP3 Server” of keys of keys “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676” of keys of key “HKEY_USERS” of registry as string
number of values “POP3 Server” of keys of keys “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676” of keys of key “HKEY_USERS” of registry as string
Express IMAP
Período 1 hora
number of values “IMAP Server” of keys of keys “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts” of registry as integer
number of values “IMAP Server” of keys of keys “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts” of registry as integer
Outlook Configurado Ruta de Almacen
Período 1 hora
exist folder ( “C:\Documents and Settings”&name of logged on user as string & “\Configuración local\Datos de programa\Microsoft\Outlook” )
exist folder (“C:\Documents and Settings”&name of logged on user as string & “\Configuración local\Datos de programa\Microsoft\Outlook”)
Outlook express Perfil Ruta de Almacen
Período 1 hora
exist folder ( “C:\Documents and Settings”&name of logged on user as string & “\Configuración local\Datos de programa\Identities”&value “Default User ID” of key “HKEY_CURRENT_USER\Identities” of registry as string & “\Microsoft\Outlook Express” )
exist folder(“C:\Documents and Settings”&name of logged on user as string & “\Configuración local\Datos de programa\Identities”&value “Default User ID” of key “HKEY_CURRENT_USER\Identities” of registry as string & “\Microsoft\Outlook Express”)
Correo Default
Período 1 hora
default value of key “HKEY_LOCAL_MACHINE\SOFTWARE\Clients\Mail” of registry
default value of key “HKEY_LOCAL_MACHINE\SOFTWARE\Clients\Mail” of registry
thunderbird Perfil Ruta de Almacen
Período 1 hora
exist folder ( “C:\Documents and Settings”&name of logged on user as string & “\Configuración local\Datos de programa\Thunderbird\Profiles”&value “Default User ID” of key “HKEY_CURRENT_USER\Identities” of registry as string & “\ImapMail\correo.mju.es” )
exist folder(“C:\Documents and Settings”&name of logged on user as string & “\Configuración local\Datos de programa\Thunderbird\Profiles”&value “Default User ID” of key “HKEY_CURRENT_USER\Identities” of registry as string & “\ImapMail\correo.mju.es”)
Thunderbird Cualquier carpeta que exista de profiles
Período 1 hora
exist folders of folder ( “C:\Documents and Settings”&name of logged on user as string & “\Configuración local\Datos de programa\Thunderbird\Profiles” )
exist folders of folder (“C:\Documents and Settings”&name of logged on user as string & “\Configuración local\Datos de programa\Thunderbird\Profiles”)
Local drivers
Período 1 hora
( name of it, type of it ) of drives
(name of it, type of it) of drives
Version de msiexec
Período 6 horas
version of file “c:\windows\system32\msiexec.exe”
version of file “c:\windows\system32\msiexec.exe”
Notes Configurado
Período 1 hora
if ( exists file “D:\IBM\Lotus\Notes\Data\names.nsf” ) then “Lotus configurado en D” else if ( exists file “C:\Archivos de programa\IBM\Lotus\Notes\Data\names.nsf” ) then “Lotus configurado en C” else “No Configurado”
if (exists file “D:\IBM\Lotus\Notes\Data\names.nsf”) then “Lotus configurado en D” else if (exists file “C:\Archivos de programa\IBM\Lotus\Notes\Data\names.nsf”) then “Lotus configurado en C” else “No Configurado”
POP3 Outlook Express
Período 1 día
number of values “Pop3 Server” of keys of keys “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts” of registry as string
number of values “Pop3 Server” of keys of keys “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts” of registry as string
Oulook Imap
Período 2 días
number of values “IMAP Server” of keys of keys “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676” of keys of key “HKEY_USERS” of registry as string
number of values “IMAP Server” of keys of keys “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676” of keys of key “HKEY_USERS” of registry as string
Display Name Outlook
Período 2 días
value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000005” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000006” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000007” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000008” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000009” of registry as string | “No name”
value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000005” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000006” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000007” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000008” of registry as string | value “SMTP Display Name” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000009” of registry as string | “No name”
Email Outlook
Período 1 día
value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000005” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000006” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000007” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000008” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000009” of registry as string | “No e-mail”
value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000005” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000006” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000007” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000008” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000009” of registry as string | “No e-mail”
SMTP Email Adrress
Período 1 día
value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000005” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000006” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000007” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000008” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000009” of registry as string | “No e-mail”
value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000005” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000006” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000007” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000008” of registry as string | value “SMTP Email Address” of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000009” of registry as string | “No e-mail”
ID IMAP EXPRESS
Período 12 horas
if ( number of values “IMAP Server” of keys of keys “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts” of registry as integer ) >0 then value “IMAP User Name” of keys of keys “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts” of registry as string else “No”
if(number of values “IMAP Server” of keys of keys “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts” of registry as integer)>0 then value “IMAP User Name” of keys of keys “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts” of registry as string else “No”
ID POP3 EXPRESS
Período 1 día
if ( number of values “Pop3 Server” of keys of keys “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts” of registry as integer ) >0 then value “Pop3 User Name” of keys of keys “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts” of registry as string else “No”
if(number of values “Pop3 Server” of keys of keys “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts” of registry as integer)>0 then value “Pop3 User Name” of keys of keys “HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts” of registry as string else “No”
ID USER IMAP OUTLOOK
Período 1 día
if ( number of values “IMAP Server” of keys of keys “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676” of keys of key “HKEY_USERS” of registry as integer ) >0 then ( hexadecimal strings ( concatenation of ( ( hexadecimal integer ( last 2 of it & first 2 of it ) as hexadecimal ) as string ) of firsts 4 of following texts of positions whose ( it mod 4 = 0 ) of ( preceding texts of lasts “0” of ( value “IMAP User” of keys of keys “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676” of keys of key “HKEY_USERS” of registry as string ) ) ) ) else “No”
if (number of values “IMAP Server” of keys of keys “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676” of keys of key “HKEY_USERS” of registry as integer)>0 then (hexadecimal strings (concatenation of ((hexadecimal integer (last 2 of it & first 2 of it) as hexadecimal) as string) of firsts 4 of following texts of positions whose ( it mod 4 = 0 ) of (preceding texts of lasts “0” of (value “IMAP User” of keys of keys “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676” of keys of key “HKEY_USERS” of registry as string)))) else “No”
ID USER OUTLOOK
Período 12 horas
if ( number of values “POP3 Server” of keys of keys “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676” of keys of key “HKEY_USERS” of registry as integer ) >0 then ( hexadecimal strings ( concatenation of ( ( hexadecimal integer ( last 2 of it & first 2 of it ) as hexadecimal ) as string ) of firsts 4 of following texts of positions whose ( it mod 4 = 0 ) of ( preceding texts of lasts “0” of ( value “POP3 User” of keys of keys “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676” of keys of key “HKEY_USERS” of registry as string ) ) ) ) else “No”
if (number of values “POP3 Server” of keys of keys “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676” of keys of key “HKEY_USERS” of registry as integer)>0 then (hexadecimal strings (concatenation of ((hexadecimal integer (last 2 of it & first 2 of it) as hexadecimal) as string) of firsts 4 of following texts of positions whose ( it mod 4 = 0 ) of (preceding texts of lasts “0” of (value “POP3 User” of keys of keys “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676” of keys of key “HKEY_USERS” of registry as string)))) else “No”
PST TOTALES
Período 12 horas
concatenation ", " of ( if exists regapp “outlook.exe” then if version of regapp “outlook.exe” = “10” then ( if ( exists values whose ( it as string contains “.pst” ) of keys of keys of keys “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles” of keys of keys “HKEY_USERS” of registry ) then ( ( pathname of it & " - " & ( size of it / ( 10241024 ) ) as string & “Mb” ) of files ( ( values whose ( it as string contains “.pst” ) of keys of keys of keys “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles” of keys of keys “HKEY_USERS” of registry ) as string ) ) else ( “No archive” ) ) else if version of regapp “outlook.exe” >= “11” then ( if ( exists ( Values “001f6700” of keys of keys of keys “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles” of keys of key “HKEY_USERS” of registry as string ) ) then ( ( ( pathname of it & " - " & ( size of it / ( 10241024 ) ) as string & “MB” ) of files ( ( hexadecimal strings ( concatenation of ( ( hexadecimal integer ( last 2 of it & first 2 of it ) as hexadecimal ) as string ) of firsts 4 of following texts of positions whose ( it mod 4 = 0 ) of it ) ) of ( preceding texts of lasts “0” of ( Values “001f6700” of keys of keys of keys “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles” of keys of key “HKEY_USERS” of registry as string ) ) as string ) ) ) else ( “No Archive” ) ) else “Outlook < XP installed” else “Outlook not installed” )
concatenation ", " of (if exists regapp “outlook.exe” then if version of regapp “outlook.exe” = “10” then (if (exists values whose (it as string contains “.pst”) of keys of keys of keys “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles” of keys of keys “HKEY_USERS” of registry) then ((pathname of it & " - " & (size of it / (10241024)) as string & “Mb”) of files ((values whose (it as string contains “.pst”) of keys of keys of keys “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles” of keys of keys “HKEY_USERS” of registry) as string)) else (“No archive”)) else if version of regapp “outlook.exe” >= “11” then (if (exists (Values “001f6700” of keys of keys of keys “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles” of keys of key “HKEY_USERS” of registry as string)) then (((pathname of it & " - " & (size of it / (10241024)) as string & “MB”) of files ((hexadecimal strings (concatenation of ((hexadecimal integer (last 2 of it & first 2 of it) as hexadecimal) as string) of firsts 4 of following texts of positions whose (it mod 4 = 0) of it)) of (preceding texts of lasts “0” of (Values “001f6700” of keys of keys of keys “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles” of keys of key “HKEY_USERS” of registry as string)) as string))) else (“No Archive”)) else “Outlook < XP installed” else “Outlook not installed”)
Comprobacion del Archivo Win.ini
Período Todos los informes
if ( exist file “c:\windows\win.ini” ) then ( if ( exist lines whose ( it contains “Mail” ) of file “c:\windows\win.ini” ) then ( exist lines whose ( it contains “MAPIX” ) of file “c:\windows\win.ini” ) as string else “1” ) else “2”
if (exist file “c:\windows\win.ini”) then (if (exist lines whose (it contains “Mail” ) of file “c:\windows\win.ini”) then (exist lines whose (it contains “MAPIX”) of file “c:\windows\win.ini”) as string else “1” ) else “2”