( ( ( notexists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\DLP"whose ( exists value "installedPath"ofit ) of registry ) OR ( notexists folder ( value "installedPath"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\DLP"of registry as string ) whose ( exists file "BESLeakProofCTRL.exe"ofit ) ) ) ) AND ( ( notexists regapp "BigFixAntiPest.exe" ) ) AND ( ( notexists key "HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\eTrustAntivirus"of registry ORnotexists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\AntiVirus"of registry ) ) AND ( ( NOTexists key "HKEY_LOCAL_MACHINE\SOFTWARE\CA\HIPSEngine\Products\BigFixFW"whose ( exists value "UninstallCmdLine"ofit ) of registry ) ) AND ( NOT ( ( exists setting "PowerManagement_PowerTrackingEnabled"whose ( value ofit="1"or value ofit="2" ) of client ) ) OR ( ( ( exists setting "PowerManagement_PowerTrackingEnabled"whose ( value ofit="1"or value ofit="2" ) of client ) ) AND ( ( ( ( name of operating system startswith"Win" ) AND ( version of client >= "8" ) ) AND ( exists setting "_BESClient_PowerHistory_EnablePowerHistory"whose ( exists value whose ( it="1" ) ofit ) of client ) ) ) ) )
(((notexists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\DLP"whose (exists value "installedPath"ofit) of registry) OR (notexists folder (value "installedPath"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\DLP"of registry as string) whose (exists file "BESLeakProofCTRL.exe"ofit)))) AND ((notexists regapp "BigFixAntiPest.exe")) AND ((notexists key "HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\eTrustAntivirus"of registry ORnotexists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\AntiVirus"of registry)) AND ((NOTexists key "HKEY_LOCAL_MACHINE\SOFTWARE\CA\HIPSEngine\Products\BigFixFW"whose (exists value "UninstallCmdLine"ofit) of registry)) AND (NOT ((exists setting "PowerManagement_PowerTrackingEnabled"whose (value ofit="1"or value ofit="2") of client)) OR (((exists setting "PowerManagement_PowerTrackingEnabled"whose (value ofit="1"or value ofit="2") of client)) AND ((((name of operating system startswith"Win") AND (version of client >= "8") ) AND (exists setting "_BESClient_PowerHistory_EnablePowerHistory"whose (exists value whose (it="1") ofit) of client)))))
( ( ( exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\DLP"whose ( exists folder ( values "installedPath"ofitas string ) whose ( exists file "BESLeakProofCTRL.exe"whose ( version ofit >= "1.1.0.17" ) ofit ) ) of registry ) ) ) OR ( ( exist regapp "BigFixAntiPest.exe"whose ( version ofit >= "0.9.0.34" ) ) ) OR ( ( if ( exists key "HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\eTrustAntivirus\CurrentVersion\Path"whose ( exists value "HOME"ofit ) of registry ) then ( exists file ( ( value "HOME"of key "HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\eTrustAntivirus\CurrentVersion\Path"of registry as string ) & "\InoOEM.dll" ) whose ( version ofit="7.1" ) ) else ( false ) ) AND ( exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\AntiVirus"of registry ) ) OR ( ( exists key "HKEY_LOCAL_MACHINE\SOFTWARE\CA\HIPSEngine\Products\BigFixFW"whose ( exists value "UninstallCmdLine"ofit ) of registry ) ) OR ( ( ( exists setting "PowerManagement_PowerTrackingEnabled"whose ( value ofit="1"or value ofit="2" ) of client ) ) AND ( NOT ( ( ( ( name of operating system startswith"Win" ) AND ( version of client >= "8" ) ) AND ( exists setting "_BESClient_PowerHistory_EnablePowerHistory"whose ( exists value whose ( it="1" ) ofit ) of client ) ) ) ) )
(((exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\DLP"whose (exists folder (values "installedPath"ofitas string) whose (exists file "BESLeakProofCTRL.exe"whose (version ofit >= "1.1.0.17") ofit)) of registry))) OR ((exist regapp "BigFixAntiPest.exe"whose (version ofit >= "0.9.0.34"))) OR ((if (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\eTrustAntivirus\CurrentVersion\Path"whose (exists value "HOME"ofit) of registry) then (exists file ((value "HOME"of key "HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\eTrustAntivirus\CurrentVersion\Path"of registry as string) & "\InoOEM.dll") whose (version ofit="7.1")) else (false)) AND (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\AntiVirus"of registry)) OR ((exists key "HKEY_LOCAL_MACHINE\SOFTWARE\CA\HIPSEngine\Products\BigFixFW"whose (exists value "UninstallCmdLine"ofit) of registry)) OR (((exists setting "PowerManagement_PowerTrackingEnabled"whose (value ofit="1"or value ofit="2") of client)) AND (NOT ((((name of operating system startswith"Win") AND (version of client >= "8") ) AND (exists setting "_BESClient_PowerHistory_EnablePowerHistory"whose (exists value whose (it="1") ofit) of client)))))
( ( ( exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\DLP"whose ( exists folder ( values "installedPath"ofitas string ) whose ( exists file "BESLeakProofCTRL.exe"whose ( version ofit >= "1.1.0.17" ) ofit ) ) of registry ) ) ) OR ( ( exist regapp "BigFixAntiPest.exe"whose ( version ofit >= "0.9.0.34" ) ) ) OR ( ( if ( exists key "HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\eTrustAntivirus\CurrentVersion\Path"whose ( exists value "HOME"ofit ) of registry ) then ( exists file ( ( value "HOME"of key "HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\eTrustAntivirus\CurrentVersion\Path"of registry as string ) & "\InoOEM.dll" ) whose ( version ofit="7.1" ) ) else ( false ) ) AND ( exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\AntiVirus"of registry ) ) OR ( ( exists key "HKEY_LOCAL_MACHINE\SOFTWARE\CA\HIPSEngine\Products\BigFixFW"whose ( exists value "UninstallCmdLine"ofit ) of registry ) ) OR ( ( ( exists setting "PowerManagement_PowerTrackingEnabled"whose ( value ofit="1"or value ofit="2" ) of client ) ) ANDNOT ( ( ( ( name of operating system startswith"Win" ) AND ( version of client >= "8" ) ) AND ( exists setting "_BESClient_PowerHistory_EnablePowerHistory"whose ( exists value whose ( it="1" ) ofit ) of client ) ) ) )
(((exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\DLP"whose (exists folder (values "installedPath"ofitas string) whose (exists file "BESLeakProofCTRL.exe"whose (version ofit >= "1.1.0.17") ofit)) of registry))) OR ((exist regapp "BigFixAntiPest.exe"whose (version ofit >= "0.9.0.34"))) OR ((if (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\eTrustAntivirus\CurrentVersion\Path"whose (exists value "HOME"ofit) of registry) then (exists file ((value "HOME"of key "HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\eTrustAntivirus\CurrentVersion\Path"of registry as string) & "\InoOEM.dll") whose (version ofit="7.1")) else (false)) AND (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\AntiVirus"of registry)) OR ((exists key "HKEY_LOCAL_MACHINE\SOFTWARE\CA\HIPSEngine\Products\BigFixFW"whose (exists value "UninstallCmdLine"ofit) of registry)) OR (((exists setting "PowerManagement_PowerTrackingEnabled"whose (value ofit="1"or value ofit="2") of client)) ANDNOT ((((name of operating system startswith"Win") AND (version of client >= "8") ) AND (exists setting "_BESClient_PowerHistory_EnablePowerHistory"whose (exists value whose (it="1") ofit) of client))))
if ( name of operating system startswith"Win" ) then ( ( it >= "7" ) of ( if ( version of client >= "8.0" ) then ( version of relay service ) else ( version of regapp "besrelay.exe" ) ) ) elsetrue
if (name of operating system startswith"Win") then ((it >= "7") of (if (version of client >= "8.0") then (version of relay service) else (version of regapp "besrelay.exe"))) elsetrue
exists file "/etc/redhat-release"whose ( exists line whose ( exists match ( regex "Red Hat Enterprise Linux (AS|ES|WS) release 4" ) ofitorexists match ( regex "Red Hat Enterprise Linux (Client|Desktop|Server) release 5" ) ofit ) ofit ) OR ( itstartswith"linux fedora core"AND following text of last " "ofitas version >= "3"and following text of last " "ofitas version < "6" ) of ( name of operating system as lowercase )
exists file "/etc/redhat-release"whose (exists line whose (exists match (regex "Red Hat Enterprise Linux (AS|ES|WS) release 4") ofitorexists match (regex "Red Hat Enterprise Linux (Client|Desktop|Server) release 5") ofit) ofit) OR (itstartswith"linux fedora core"AND following text of last " "ofitas version >= "3"and following text of last " "ofitas version < "6") of (name of operating system as lowercase)
NOT ( ( ( exists rule whose ( ( NOTexists local ports string ofitOR local ports string ofitcontains ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) OR local ports string ofit="*" ) AND ( ( ( application name ofit ends with"\BESClient.exe" ) ANDNOT ( service name ofit="BESClient" ) ) OR ( regex "^(\s)*$"= application name ofitAND regex "^(\s)*$"= service name ofit ) ) and enabled ofitand protocol ofit= udp and inbound ofitand profile ( current profile type of firewall ) ofit ) of firewall ) OR ( exists internet connection firewall whose ( enabled ofitANDexists port mapping whose ( enabled ofitAND protocol ofit="udp"AND internal port ofitas string = ( value "ListenPort"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry ) as string ) ofit ) of adapters of network ) OR ( exist key "HKLM\Software\Policies\Microsoft\WindowsFirewall\FirewallRules"whose ( ( exists value whose ( itas string as lowercase contains"|action=allow|"anditas string as lowercase contains"|active=true|"ANDitas string as lowercase contains"|dir=in|"and ( itas string as lowercase contains"|protocol=17|"orNOT ( itas string as lowercase contains"|protocol" ) ) AND ( itas string as lowercase contains"|lport=" & ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) & "|"ORnot ( itas string as lowercase contains"|lport=" ) ) AND ( not ( ( itas string as lowercase contains"|app=" ) ) OR ( itas string as lowercase contains"|app="anditas string contains"\BESClient.exe|" ) ) AND ( ( itas string as lowercase contains"|profile=" & ( if ( current profile type of firewall = domain firewall profile type ) then"domain|"elseif ( current profile type of firewall = public firewall profile type ) then"public|"elseif ( current profile type of firewall = private firewall profile type ) then"private|"else"INVALID" ) ) ORnot ( itas string as lowercase contains"|profile" ) ) ) ofit ) ) of native registry ) OR ( ( ( exists key ( "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\" & ( if ( current profile type of firewall = domain firewall profile type ) then"DomainProfile"else"StandardProfile" ) & "\GloballyOpenPorts" ) whose ( exists value whose ( ( name ofitas lowercase ="enabled" ) AND ( it=1 ) ) ofit ) ofit ) AND ( exists key ( "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\" & ( if ( current profile type of firewall = domain firewall profile type ) then"DomainProfile"else"StandardProfile" ) & "\GloballyOpenPorts\List" ) whose ( exists value whose ( ( name ofitstartswith value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of x32 registry as string & ":" ) AND ( regex "^(\d)+:UDP:(.+)?:enabled:(.+)$"= name ofit ) ) ofit ) ofit ) ) of native registry ) OR ( ( ( exists key ( "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\" & ( if ( current profile type of firewall = domain firewall profile type ) then"DomainProfile"else"StandardProfile" ) & "\AuthorizedApplications" ) whose ( exists value whose ( ( name ofitas lowercase ="enabled" ) AND ( it=1 ) ) ofit ) ofit ) AND ( exists key ( "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\" & ( if ( current profile type of firewall = domain firewall profile type ) then"DomainProfile"else"StandardProfile" ) & "\AuthorizedApplications\List" ) whose ( exists value whose ( ( regex "^(.+)?\\BESClient.exe:(.+)?:enabled:(.+)$"= name ofit ) ) ofit ) ofit ) ) of native registry ) ) AND ( ( exists key ( "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\" & ( if ( current profile type of firewall = domain firewall profile type ) then"DomainProfile"else"StandardProfile" ) & "\IcmpSettings" ) whose ( exists value whose ( name ofit="AllowInboundEchoRequest"andit=1 ) ofit ) of native registry ) OR ( ( ( exists rule whose ( ( enabled ofitand ( protocol ofit= internet protocol 1 ) and inbound ofitand profile ( current profile type of firewall ) ofitand ( regex "^(\s)*$"= application name ofitOR application name ofit ends with"\BESClient.exe" ) AND regex "^(\s)*$"= service name ofit ) ) of firewall ) OR ( exist key "HKLM\Software\Policies\Microsoft\WindowsFirewall\FirewallRules"whose ( exists value whose ( itas string as lowercase contains"|action=allow|"anditas string as lowercase contains"|active=true|"ANDitas string as lowercase contains"|dir=in|"and ( itas string as lowercase contains"|protocol=1|"orNOT ( itas string as lowercase contains"|protocol" ) ) AND ( itas string as lowercase contains"|lport=" & ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) & "|"ORnot ( itas string as lowercase contains"|lport=" ) ) AND ( not ( ( itas string as lowercase contains"|app=" ) ) OR ( if ( itas string as lowercase contains"|app=" ) then ( itas string contains"\BESClient.exe|" ) elsetrue ) AND ( ( itas string as lowercase contains"|profile=" & ( if ( current profile type of firewall = domain firewall profile type ) then"domain|"elseif ( current profile type of firewall = public firewall profile type ) then"public|"elseif ( current profile type of firewall = private firewall profile type ) then"private|"else"INVALID" ) ) ORnot ( itas string as lowercase contains"|profile" ) ) ) ofit ) ofit ) of native registry ) ) AND ( ( exists rule whose ( ( enabled ofitand ( protocol ofit= internet protocol 58 ) and inbound ofitand profile ( current profile type of firewall ) ofitand ( regex "^(\s)*$"= application name ofitOR application name ofit ends with"\BESClient.exe" ) AND regex "^(\s)*$"= service name ofit ) ) of firewall ) OR ( exist key "HKLM\Software\Policies\Microsoft\WindowsFirewall\FirewallRules"whose ( exists value whose ( itas string as lowercase contains"|action=allow|"anditas string as lowercase contains"|active=true|"ANDitas string as lowercase contains"|dir=in|"and ( itas string as lowercase contains"|protocol=58|"orNOT ( itas string as lowercase contains"|protocol" ) ) AND ( itas string as lowercase contains"|lport=" & ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) & "|"ORnot ( itas string as lowercase contains"|lport=" ) ) AND ( not ( ( itas string as lowercase contains"|app=" ) ) OR ( if ( itas string as lowercase contains"|app=" ) then ( itas string contains"\BESClient.exe|" ) elsetrue ) AND ( ( itas string as lowercase contains"|profile=" & ( if ( current profile type of firewall = domain firewall profile type ) then"domain|"elseif ( current profile type of firewall = public firewall profile type ) then"public|"elseif ( current profile type of firewall = private firewall profile type ) then"private|"else"INVALID" ) ) ORnot ( itas string as lowercase contains"|profile" ) ) ) ofit ) ofit ) of native registry ) ) ) ) )
NOT (((exists rule whose ((NOTexists local ports string ofitOR local ports string ofitcontains (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string) OR local ports string ofit="*") AND (((application name ofit ends with"\BESClient.exe") ANDNOT (service name ofit="BESClient")) OR (regex "^(\s)*$"= application name ofitAND regex "^(\s)*$"= service name ofit)) and enabled ofitand protocol ofit= udp and inbound ofitand profile (current profile type of firewall) ofit) of firewall) OR (exists internet connection firewall whose (enabled ofitANDexists port mapping whose (enabled ofitAND protocol ofit="udp"AND internal port ofitas string = (value "ListenPort"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry) as string) ofit) of adapters of network) OR (exist key "HKLM\Software\Policies\Microsoft\WindowsFirewall\FirewallRules"whose ((exists value whose (itas string as lowercase contains"|action=allow|"anditas string as lowercase contains"|active=true|"ANDitas string as lowercase contains"|dir=in|"and (itas string as lowercase contains"|protocol=17|"orNOT (itas string as lowercase contains"|protocol")) AND (itas string as lowercase contains"|lport=" & (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string) & "|"ORnot (itas string as lowercase contains"|lport=")) AND (not ((itas string as lowercase contains"|app=")) OR (itas string as lowercase contains"|app="anditas string contains"\BESClient.exe|")) AND ((itas string as lowercase contains"|profile=" & (if (current profile type of firewall = domain firewall profile type) then"domain|"elseif (current profile type of firewall = public firewall profile type) then"public|"elseif (current profile type of firewall = private firewall profile type) then"private|"else"INVALID")) ORnot (itas string as lowercase contains"|profile"))) ofit)) of native registry) OR (((exists key ("HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\" & (if (current profile type of firewall = domain firewall profile type) then"DomainProfile"else"StandardProfile") & "\GloballyOpenPorts") whose (exists value whose ((name ofitas lowercase ="enabled") AND (it=1)) ofit) ofit) AND (exists key ("HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\" & (if (current profile type of firewall = domain firewall profile type) then"DomainProfile"else"StandardProfile") & "\GloballyOpenPorts\List") whose (exists value whose ((name ofitstartswith value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of x32 registry as string & ":") AND (regex "^(\d)+:UDP:(.+)?:enabled:(.+)$"= name ofit)) ofit) ofit)) of native registry) OR (((exists key ("HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\" & (if (current profile type of firewall = domain firewall profile type) then"DomainProfile"else"StandardProfile") & "\AuthorizedApplications") whose (exists value whose ((name ofitas lowercase ="enabled") AND (it=1)) ofit) ofit) AND (exists key ("HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\" & (if (current profile type of firewall = domain firewall profile type) then"DomainProfile"else"StandardProfile") & "\AuthorizedApplications\List") whose (exists value whose ((regex "^(.+)?\\BESClient.exe:(.+)?:enabled:(.+)$"= name ofit)) ofit) ofit)) of native registry)) AND ((exists key ("HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\" & (if (current profile type of firewall = domain firewall profile type) then"DomainProfile"else"StandardProfile") & "\IcmpSettings") whose (exists value whose (name ofit="AllowInboundEchoRequest"andit=1) ofit) of native registry) OR (((exists rule whose ((enabled ofitand (protocol ofit= internet protocol 1) and inbound ofitand profile (current profile type of firewall) ofitand (regex "^(\s)*$"= application name ofitOR application name ofit ends with"\BESClient.exe") AND regex "^(\s)*$"= service name ofit)) of firewall) OR (exist key "HKLM\Software\Policies\Microsoft\WindowsFirewall\FirewallRules"whose (exists value whose (itas string as lowercase contains"|action=allow|"anditas string as lowercase contains"|active=true|"ANDitas string as lowercase contains"|dir=in|"and (itas string as lowercase contains"|protocol=1|"orNOT (itas string as lowercase contains"|protocol")) AND (itas string as lowercase contains"|lport=" & (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string) & "|"ORnot (itas string as lowercase contains"|lport=")) AND (not ((itas string as lowercase contains"|app=")) OR (if (itas string as lowercase contains"|app=") then (itas string contains"\BESClient.exe|") elsetrue) AND ((itas string as lowercase contains"|profile=" & (if (current profile type of firewall = domain firewall profile type) then"domain|"elseif (current profile type of firewall = public firewall profile type) then"public|"elseif (current profile type of firewall = private firewall profile type) then"private|"else"INVALID")) ORnot (itas string as lowercase contains"|profile"))) ofit) ofit) of native registry)) AND ((exists rule whose ((enabled ofitand (protocol ofit= internet protocol 58) and inbound ofitand profile (current profile type of firewall) ofitand (regex "^(\s)*$"= application name ofitOR application name ofit ends with"\BESClient.exe") AND regex "^(\s)*$"= service name ofit)) of firewall) OR (exist key "HKLM\Software\Policies\Microsoft\WindowsFirewall\FirewallRules"whose (exists value whose (itas string as lowercase contains"|action=allow|"anditas string as lowercase contains"|active=true|"ANDitas string as lowercase contains"|dir=in|"and (itas string as lowercase contains"|protocol=58|"orNOT (itas string as lowercase contains"|protocol")) AND (itas string as lowercase contains"|lport=" & (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string) & "|"ORnot (itas string as lowercase contains"|lport=")) AND (not ((itas string as lowercase contains"|app=")) OR (if (itas string as lowercase contains"|app=") then (itas string contains"\BESClient.exe|") elsetrue) AND ((itas string as lowercase contains"|profile=" & (if (current profile type of firewall = domain firewall profile type) then"domain|"elseif (current profile type of firewall = public firewall profile type) then"public|"elseif (current profile type of firewall = private firewall profile type) then"private|"else"INVALID")) ORnot (itas string as lowercase contains"|profile"))) ofit) ofit) of native registry)))))
( ( name ofit="Win2003"AND service pack major version ofit >= 1 ) OR ( ( version of registration server >= "7.2" ) AND ( ( ( name ofit="WinVista"AND product type ofit!= nt workstation product type ) OR ( name ofit="Win2008" ) ) ) AND ( exists regapp "iexplore.exe" ) ) OR ( ( version of registration server >= "8" ) AND ( ( ( name ofit="Win2008R2" ) ) ) AND ( exists regapp "iexplore.exe" ) ) ) of operating system
((name ofit="Win2003"AND service pack major version ofit >= 1) OR ((version of registration server >= "7.2") AND (((name ofit="WinVista"AND product type ofit!= nt workstation product type) OR (name ofit="Win2008"))) AND (exists regapp "iexplore.exe")) OR ((version of registration server >= "8") AND (((name ofit="Win2008R2"))) AND (exists regapp "iexplore.exe"))) of operating system
NOT ( ( version of regapp "iexplore.exe" >= "7" ) AND ( exists key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry ) AND ( exists folder "macromed\flash"whose ( exists file whose ( ( ( itstartswith"flash"ANDit ends with".ocx" ) OR ( it="swflash.ocx" ) ) of ( name ofitas lowercase ) AND version ofit >= "9" ) ofit ) of system folder ) AND ( exists key ( "HKEY_USERS\" & ( ( ifit="LocalSystem"then"S-1-5-18"elseifit="LocalService"then"S-1-5-19"elseifit="NetworkService"then"S-1-5-20"else ( string value of select ( ( "SID from Win32_UserAccount where NAME='" & following text of last "\"ofit & "' and DOMAIN='" & ( ( ifit="."then computer name elseit ) of preceding text of last "\"ofit ) & "'" ) of ( ( login account of service "BESWebReportsServer" ) as string ) ) of wmi ) ) of login account of service "BESWebReportsServer" ) & "\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\" & ( first match ( regex "^[^:]+" ) of first match ( regex "[^/]+$" ) of ( itas string ) ) of value "Hostname"of key "HKLM\SOFTWARE\BigFix\Enterprise Server\Installer\"of registry ) whose ( exists value "http"whose ( it=2 ) ofitANDexists value "https"whose ( it=2 ) ofit ) of registry ) AND ( exists key "HKLM\Software\BigFix\Enterprise Server\BESReports"whose ( ( ( exists value "PDFEnable"whose ( it="1" ) ofit ) OR ( exists key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports"whose ( exists value ( ( ( value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry ) as string ) & "BESReportsData\ArchiveData\__pdf\out.ps" ) ofit ) of native registry ) ) AND value "PDFPostScriptPath"ofit= ( ( ( value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry ) as string ) & "BESReportsData\ArchiveData\__pdf\out.ps" ) AND value "PDFPrinterName"ofit="BES Web Reports Printer" ) of registry ) AND ( exists key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment"whose ( ( exists key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"whose ( exists value "UninstallString"ofit ) of registry ) AND ( ( itcontains parenthesized part 1of ( first match ( regex "^(.*)uninstgs.exe" ) of ( value "UninstallString"of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry as string ) ) & "gs8.60\bin"ANDitcontains parenthesized part 1of ( first match ( regex "^(.*)uninstgs.exe" ) of ( value "UninstallString"of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry as string ) ) & "gs8.60\lib" ) of ( value "Path"ofitas string ) ) ) of registry ) AND ( exists key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports"whose ( exists value ( ( ( value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry ) as string ) & "BESReportsData\ArchiveData\__pdf\out.ps" ) ofit ) of native registry ) AND ( exists key ( "HKU\" & ( ( ifit="LocalSystem"then"S-1-5-18"elseifit="LocalService"then"S-1-5-19"elseifit="NetworkService"then"S-1-5-20"else ( string value of select ( ( "SID from Win32_UserAccount where NAME='" & following text of last "\"ofit & "' and DOMAIN='" & ( ( ifit="."then computer name elseit ) of preceding text of last "\"ofit ) & "'" ) of ( ( login account of service "BESWebReportsServer" ) as string ) ) of wmi ) ) of login account of service "BESWebReportsServer" ) & "\Software\Microsoft\Internet Explorer\PageSetup" ) of registry ) )
NOT ((version of regapp "iexplore.exe" >= "7") AND (exists key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry) AND (exists folder "macromed\flash"whose (exists file whose (((itstartswith"flash"ANDit ends with".ocx") OR (it="swflash.ocx")) of (name ofitas lowercase) AND version ofit >= "9") ofit) of system folder) AND (exists key ("HKEY_USERS\" & ((ifit="LocalSystem"then"S-1-5-18"elseifit="LocalService"then"S-1-5-19"elseifit="NetworkService"then"S-1-5-20"else (string value of select (("SID from Win32_UserAccount where NAME='" & following text of last "\"ofit & "' and DOMAIN='" & ((ifit="."then computer name elseit) of preceding text of last "\"ofit) & "'") of ((login account of service "BESWebReportsServer") as string)) of wmi)) of login account of service "BESWebReportsServer") & "\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\" & (first match (regex "^[^:]+") of first match (regex "[^/]+$") of (itas string)) of value "Hostname"of key "HKLM\SOFTWARE\BigFix\Enterprise Server\Installer\"of registry) whose (exists value "http"whose (it=2) ofitANDexists value "https"whose (it=2) ofit) of registry) AND (exists key "HKLM\Software\BigFix\Enterprise Server\BESReports"whose (((exists value "PDFEnable"whose (it="1") ofit) OR (exists key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports"whose (exists value (((value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry) as string) & "BESReportsData\ArchiveData\__pdf\out.ps") ofit) of native registry)) AND value "PDFPostScriptPath"ofit= (((value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry) as string) & "BESReportsData\ArchiveData\__pdf\out.ps") AND value "PDFPrinterName"ofit="BES Web Reports Printer") of registry) AND (exists key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment"whose ((exists key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"whose (exists value "UninstallString"ofit) of registry) AND ((itcontains parenthesized part 1of (first match (regex "^(.*)uninstgs.exe") of (value "UninstallString"of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry as string)) & "gs8.60\bin"ANDitcontains parenthesized part 1of (first match (regex "^(.*)uninstgs.exe") of (value "UninstallString"of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry as string)) & "gs8.60\lib") of (value "Path"ofitas string))) of registry) AND (exists key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports"whose (exists value (((value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry) as string) & "BESReportsData\ArchiveData\__pdf\out.ps") ofit) of native registry) AND (exists key ("HKU\" & ((ifit="LocalSystem"then"S-1-5-18"elseifit="LocalService"then"S-1-5-19"elseifit="NetworkService"then"S-1-5-20"else (string value of select (("SID from Win32_UserAccount where NAME='" & following text of last "\"ofit & "' and DOMAIN='" & ((ifit="."then computer name elseit) of preceding text of last "\"ofit) & "'") of ((login account of service "BESWebReportsServer") as string)) of wmi)) of login account of service "BESWebReportsServer") & "\Software\Microsoft\Internet Explorer\PageSetup") of registry))