hackistry logo

OS App Key Default Type Thanks to
Windows 98 System general settings HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Fonts\

Installed system fonts

lucipher
[email protected]
Windows NT 4 Server IIS FTP service specific settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSFTPSVC\Parameters\EnableSvcLoc

IIS services register themselves with a service locator so that the service can be discovered by Internet Service Manager. This parameter controls such registration. If set to 0, the service will forgo registration. If set to 1, it registers the service for service location.

1 REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server IIS FTP service specific settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSFTPSVC\Parameters\AllowGuestAccess

This parameter specifies whether Guest logons are allowed for Internet services. When a new user logs on, the server checks to see if the user is logged on as a Windows NT Guest user. For a Guest connection, based on the value of this parameter, the Internet service either rejects or accepts the new connection. Allowing Guest access has been known to cause problems in a poorly managed site. Under the default installation of Windows NT systems, the Guest account is granted permissions for all types of access on the system. Because this default could easily compromise security, you should turn this switch off by changing the value to 0.

1 REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server IIS FTP service specific settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSFTPSVC\Parameters\LowercaseFiles

The FTP service uses the native case for file names (how the file names are stored in file system). However, in order for exact comparisons with case-sensitive file systems to work, it may be necessary to ensure that proper file names are used. Administrators can add this value to ensure that the service uses lowercase for such comparisons.

0 REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server IIS FTP service specific settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSFTPSVC\Parameters\EnablePortAttack

This parameter is set by default to prevent a security problem in the FTP protocol specification. The FTP service specification allows passive connections to be established based on the port address given by the client. This can allow hackers to execute destructive commands in the FTP service. The problem occurs when the FTP service connects using a port other than FTP Data port (20) and port number is less than IP_PORT_RESERVED (1024). EnablePortAttack controls if such an attack should be allowed. By default, the service does not make any connections to port numbers lower than IP_PORT_RESERVED (other than 20). If you want users to connect by using other ports as specified in the FTP RFC, this flag should be enabled.

0 REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server IIS FTP service specific settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSFTPSVC\Parameters\AnnotateDirectories

The FTP service supports annotating a directory with custom messages. The annotation text is stored in a special file named ~ftpsvc~.ckm in the directory to be annotated. If this file exists in the target directory of a Change Directory (CWD) FTP operation, then the service responds with the contents of this file for the operation. This provides a way for administrators to add custom messages for directories under consideration. By default the service is configured to not send annotation text. If you choose to add a custom message, you should also create the annotation file. Also, it is recommended that you make the annotation file a hidden file so that the file does not appear on a directory listing.

0 REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server IIS general settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\InetInfo\Parameters\CheckCertRevocation

Specifies whether client certificates are checked for revocation by IIS. By default this is disabled because checking is typically done over the Internet for common certificate issuers and has severe performance impact. Enabling checking may be useful if you issue your own certificates and the revocation process is local.

0 REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server IIS general settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\InetInfo\Parameters\DisableMemoryCache

Disables server caching. This key cannot be configured by using Internet Service Manager.

0 REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server IIS general settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\InetInfo\Parameters\ListenBackLog

Specifies the maximum number of active connections to hold in the queue waiting for server attention. Enhanced IIS functionality generally makes it unnecessary to use or modify this entry, although extremely heavy use might benefit by increasing this value up to 50.

15 REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server IIS general settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\InetInfo\Parameters\MaxConcurrency

Specifies the amount of concurrency that a system should provide. Completion ports are used by IIS for handling input-output (I/O). In general it is not good to have more than one thread running and conflicting on shared memory or locks. This key specifies how many threads per processor should be allowed to run simultaneously if there is a pending I/O operation. The specific value of 0 allows the system to make the intelligent choice of the number of threads to use. Any nonzero value specifies that the system should allow that many threads per processor to run simultaneously.

0 REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server IIS general settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\InetInfo\Parameters\MaxPoolThreads

Specifies the number of pool threads to create per processor. Each pool thread watches for the network request and processes it. The MaxPoolThreads count does not include threads that are consumed by ISAPI applications. By default, only four CGI applets can run concurrently. If you run many CGI applications, you should increase this value in order to increase the throughput. Optionally, you could set the UsePoolThreadForCGI value (under ..\Services\W3SVC\Parameters) to FALSE (0), but this is somewhat dangerous because it can significantly decrease performance during high usage of CGI applications. Generally, it is not good to create more than 20 threads per processor.

4 REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server IIS general settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\InetInfo\Parameters\PoolThreadLimit

Specifies the maximum number of pool threads that can be created in the system. Each pool thread watches for the network request and processes it. PoolThreadLimit is a hard limit that includes all IIS threads. PoolThreadLimit will always be greater than or equal to MaxPoolThreads.

2 * # MB REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server IIS general settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\InetInfo\Parameters\MinFileKbSec

When a Web server sends a file to a client, a timeout is established for how long the server will allow the transfer to continue before ending it. The timeout chosen is the maximum of the Connection Timeout specified in Internet Service Manager plus the size of the file divided by the value specified as MinFileKbSecs. For example, a file size of 100 kilobytes is given a timeout of 100 seconds, or the Connection Timeout if the latter is greater. Note that the registry name is misleading, because the value is in bytes, not kilobytes as the name implies.

1000 REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server IIS general settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\InetInfo\Parameters\ObjectCacheTTL

This registry entry controls the Time To Live (TTL) setting, which defines the length of time that objects are held in cached memory. If an object in the memory cache has not been referenced for the defined period, that object will be phased out of the cache. If system memory is limited or the server's contents are dynamic, you can use a lower TTL to prevent system memory from being used to cache a large number of volatile objects. Setting the value to 0xFFFFFFFF disables the object-cache scavenger and allows cached objects to remain in the cache until they are overwritten. Disabling the cache scavenger is useful if your server has ample system memory and your data is relatively static.

30 REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server IIS general settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\InetInfo\Parameters\ThreadTimeout

Specifies the amount of time an input-output processing thread should be maintained even if there is no I/O activity on the system. In general when there is no I/O activity and no requests outstanding the server is idle and does not consume memory. But if that situation prolongs and exceeds the ThreadTimeout interval, then the thread is stopped. Units are in seconds.

24*60*60 (24 hours) REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server IIS general settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\InetInfo\Parameters\UserTokenTTL

When a request is made to the server, the security credentials for the request (or the configured anonymous user) are used to create a user token on the server which the server impersonates when accessing files or other system resources (see CacheSecurityDescriptor).

The token is cached so that the Windows NT logon takes place only the first time the user accesses the system or after the user's token has fallen out of the cache. Windows NT Challenge/Response authentication tokens are not cached. Units are in seconds.

15 * 60 (15 Minutes) REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server IIS general settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\InetInfo\Parameters\CacheSecurityDescriptor

Specifies whether security descriptors are cached for file objects. If enabled (with the value of 1), IIS retrieves security permissions when caching a file object and will not need to gain access to the file object to check access rights for new users. The feature is useful only if you have more than one user account (not using anonymous only). By default, IIS does not cache security descriptors, but checks the access rights against the file object for new user accounts.

1 REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server IIS WWW service specific settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\Parameters\DLCSupport

This value indicates whether downlevel client support will be enabled. Some older versions of browsers do not support HOST headers, which give clients the ability to access multiple Web sites that share a single IP address. A value of 0 means that downlevel clients will not be supported and a value of 1 means that downlevel clients will be supported.

0 REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server IIS WWW service specific settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\Parameters\AllowSpecialCharsInShell

This value controls whether the Cmd.exe special characters [ | ( , ; % < > ] are allowed on the command line when running batch files (.bat and .cmd files). These special characters can pose a serious security risk. If the value of this entry is set to 1, malicious users can execute random commands on the server. Therefore, it is highly recommended to leave this setting as 0, the default. By default, these special characters cannot be passed to script-mapped CGI applets. If set to 1, these special characters can be passed to script-mapped CGI applets with the exception of the pipe character | and the standard I/O redirection characters < and >, which have a special meaning to the command processor.

0 REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server IIS WWW service specific settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\ASP\Parameters\ProcessorThreadMax

This value specifies the maximum number of worker threads to create per processor. Generally it is not advisable to create more than 20 threads per processor. If this value is changed, the Web server must be stopped and restarted for the change to take effect.

10 REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server IIS WWW service specific settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\ASP\Parameters\RequestQueueMax

This value specifies the maximum number of .asp file requests to maintain in the request queue available for each thread. A value of 0 means the queue is unlimited in size. If this value is changed, the Web server must be stopped and restarted for the change to take effect.

500 REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server IIS WWW service specific settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\ASP\LanguageEngines\LanguageName\LanguageEngines

This parameter specifies a scripting language that does not support the Object.Method syntax as the Active Server Pages primary scripting language (the language used within the ASP script delimiters <% ... %>). LanguageName is the name of the chosen language, Response.WriteEquiv is the language’s equivalent of Response.Write, and Response.WriteBlockEquiv is the language’s equivalent of Response.WriteBlock. The pipe symbol (|) is an insertion used by ASP to send expressions and HTML blocks that are normally processed with Response.Write and Response.WriteBlock methods. This may be done automatically when installing additional scripting languages. If your scripting language is sensitive to white space or newline characters, you may not be able to use it as the primary scripting language even when this registry value is set. As an alternative, you can manually write HTML blocks to the browser or write that language’s functions within tagged script blocks (<SCRIPT> ... </SCRIPT> ) and call them from any other language.

REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server IIS WWW service specific settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\Parameters\LogSuccessfulRequests

Determines whether or not to record successful activities in the log file. The value 1 logs successful activities, and 0 turns it off.

1 REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server IIS WWW service specific settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\Parameters\UsePoolThreadForCGI

IIS by default uses a server pool thread to do CGI processing. This means CGI requests that take an extended period of time can consume a server pool thread. Adjusting MaxPoolThreads under ..\Services\InetInfo\Parameters can make more pool threads available.

1 REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server IIS WWW service specific settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\Parameters\AcceptByteRanges

This value determines whether the HTTP server will process the "Range" header for type "bytes:". If enabled, the server will signal that it is accepting range requests by sending the "Accept-Range: bytes" header field, and will process an incoming request specifying a "Range: bytes=" header field according to the Internet draft "Byte range extension to HTTP."

1 REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server IIS WWW service specific settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\Parameters\DLCCookieNameString

This value specifies the name of the HTTP Cookie that the server sends to downlevel clients. The cookie that is sent to a downlevel client will function as a "pseudo" HOST header so that the server can route the client's HTTP request to the appropriate Web site.

REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server IIS WWW service specific settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\Parameters\UploadReadAhead

When a client posts data to the server, this is the default amount the server will read before passing control to the application. The application is then responsible for reading the rest of the data. If you increase this size you should increase the amount of RAM on the server.

48KB REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server IIS WWW service specific settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\Parameters\SSIEnableCmdDirective

The #exec cmd directive of server-side includes executes shell commands. Security-conscious sites may wish to disable the #exec cmd directive by setting this value to 0 as an added security precaution, especially when untrusted parties are allowed to place files on the server. This value does not exist in the registry by default; to allow this directive to execute shell commands, you must first create the value and set it to 1.

1 REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server IIS WWW service specific settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\Parameters\LogErrorRequests

Determines whether or not to record errors in the log file. The value 1 turns error logging on, and 0 turns it off.

1 REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server IIS WWW service specific settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\Parameters\DLCMenuString

This value specifies the special prefix of URLs that are requested by downlevel clients. The server will check all downlevel requests against this string.

REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server IIS WWW service specific settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\Parameters\DLCMungeMenuDocumentString

This value specifies the file name of the host menu for clients that do not support cookies . This file is used to resolve (or "munge") the requested URL from the downlevel client by embedding the host name in the URL.

REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server IIS WWW service specific settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\Parameters\DLCCookieMenuDocumentString

This value specifies the file name of the host menu for clients that do support cookies, but do not support HOST headers. The cookie acts as a "pseudo" HOST header and the host menu lists all Web sites which share a single IP address. This cookie is attached to all requests for the host until the browser session has been terminated; however, terminating the browser session does not delete the cookie.

REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server IIS WWW service specific settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\Parameters\DLCHostNameString

This value identifies the name of the Web site which contains the downlevel host menu, which is stored in LCCookieMenuDocumentString. The downlevel host menu is a document (such as an HTML file, .asp file, and so on) which lists all Web sites which share a single IP address. The user chooses the appropriate server instance from this menu.

REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server IIS WWW service specific settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\Parameters\TryExceptDisable

This parameter disables exception caching when calling the HttpExtensionproc() of an ISAPI application. Setting TryExceptDisable to 1 will result in any exception caused by a misbehaving ISAPI application to stop the server, but it allows developers to do just-in-time debugging; therefore you should set this parameter to 1 only to debug ISAPI applications.

0 REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server Pirch98 ver.1.9.1.1190 Release 1.0.0.0 HKEY_CLASSES_ROOT\chat_auto_file\DefaultIcon\(default)

Pirch98 installation path or the iconfile

REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server System general memory settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\SecondLevelDataCache

Windows NT by default is optimized for a 256K size L2 cache. With most computers now having L2 caches larger than 256K it pays to take the time to change the SecondLevelDataCache setting to correspond to the size of the L2 cache installed.

256 REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server System general settings HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProductID

OS unique ID

REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server System general settings HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosDate

System BIOS Date

REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server System general settings HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\Identifier

Type of architecture identifier (ie. "AT/AT COMPATIBLE")

REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server System general settings HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\

Programs to run at windows startup

lucipher
[email protected]
Windows NT 4 Server System general settings HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosDate

System video BIOS date

REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server System general settings HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Plus! VersionNumber

IE version

REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server System general settings HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\InstallDate

OS installation date

REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server System general settings HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\CurrentVersion

OS version

REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server System general settings HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\CurrentType

Kernel type (uniprocessor/multiprocessor)

REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server System general settings HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\CurrentBuildNumber

Build number

REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server System general settings HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\CSDVersion

Wich service pack is installed

REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server System Inet account general settings HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Default News Account

Returns the value of ######## in "HKEY_CURRENT_USER\software\microsoft\internet account manager\accounts\" where one can get info about the default NNTP account

REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server System Inet account general settings HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Default Mail Account

Returns the value of ######## in "HKEY_CURRENT_USER\software\microsoft\internet account manager\accounts\" where one can get info about the default SMTP/POP3 account

REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server System Inet account general settings HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Default LDAP Account

Returns the value of ######## in "HKEY_CURRENT_USER\software\microsoft\internet account manager\accounts\" where one can get info about the default LPAD account

REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server System Inet account specific settings HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\########\Account Name

Account name



REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server System Inet account specific settings HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\########\SMTP Server

SMTP server



REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server System Inet account specific settings HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\########\SMTP Email Address

SMTP e-mail address



REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server System Inet account specific settings HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\########\SMTP Display Name

Name that appears on sent mail



REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server System Inet account specific settings HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\########\Pop3 User Name

POP3 server account's username



REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server System Inet account specific settings HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\########\Pop3 Server

POP3 server



REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server System Inet account specific settings HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\########\Account Name

Account name



REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server System Inet account specific settings HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\########\Account Name

Account name



REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server System Inet general settings HKEY_CURRENT_CONFIG\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyEnable

Proxy on/off

REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server System Inet general settings HKEY_CURRENT_CONFIG\Software\Microsoft\Windows\CurrentVersion\Internet Settings\EnableAutodial

Autodial on/off

REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server System network settings HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Network\Persistent Connections\

Persistent network mapings. The "one character" entries, define the foreign host name and it's shared resource name

r0undr0bin
[email protected]
Windows NT 4 Server System network settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\TcpWindowSize

Defines the maximum size of a TCP "datagram window" in bytes. A "datagram window" or Remote Window (RWIN) is a value that indicates the number of datagrams a host can buffer while dealing with previously arrived datagrams. This value however, is the number of bytes of the DATA portion of the datagram or Maximum Segment Size (MSS), multiplied by the RWIN. The MSS is calculated by subtracting 40 bytes (The header portion of the packet) to the maximum size of the datagram or Maximum Transmission Unit (MTU), ie. if the MTU is 1524 bytes, then MSS is 1524-40=1484 bytes. The TcpWindowSize value is in fact MSS*RWIN, so in the previous example a RWIN of 10 datagrams would result in a value of 14840 bytes for this key ( (1524-40)*10 ).

? REG_DWORD
32-bit number
ConstVal: 4
r0undr0bin
[email protected]
Windows NT 4 Server WinRoute ver.3.04g Pro HKEY_LOCAL_MACHINE\Software\MT-Net\Server\Pop3\0\AuthType

Remote SMTP server type of authentication

REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server WinRoute ver.3.04g Pro HKEY_LOCAL_MACHINE\Software\MT-Net\Server\Pop3\0\Mbox

Remote SMTP server mailbox

REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server WinRoute ver.3.04g Pro HKEY_LOCAL_MACHINE\Software\MT-Net\Server\Pop3\0\Pass

Remote SMTP server mailbox's password

REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server WinRoute ver.3.04g Pro HKEY_LOCAL_MACHINE\Software\MT-Net\Server\Pop3\0\Server

Remote SMTP server

REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server WinRoute ver.3.04g Pro HKEY_LOCAL_MACHINE\Software\MT-Net\Server\Pop3\0\User

Remote SMTP server mailbox's username

REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server Winzip ver.7.0 SR-1 (1285) HKEY_LOCAL_MACHINE\Software\Nico Mak Computing\Winzip\WinIni\Name

Licensed username

REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server Winzip ver.7.0 SR-1 (1285) HKEY_LOCAL_MACHINE\Software\Nico Mak Computing\Winzip\WinIni\SN

Product serial number

REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]
Windows NT 4 Server Winzip ver.7.0 SR-1 (1285) HKEY_LOCAL_MACHINE\Software\Nico Mak Computing\Winzip\WinIni\Win32_Version

Product version

REG_SZ
Unicode null terminated string
ConstVal: 1
r0undr0bin
[email protected]