Home >
Belkasoft
Evidence Center
Instant Messenger Support
This page contains the most up-to-date information of Instant Messengers support. There are many Instant Messengers and their versions; the history format may change from version to version. This is even more volatile when deals with Live RAM format: for example, the way GTalk stores its message history may change without any "version change". That's why this page exists. Here you will find version number on which a messenger was last successfully tested by Belkasoft staff.
| Messenger name | Tested version | History data last created |
||
|---|---|---|---|---|
| Regular history | Carving | Live RAM | ||
| &RQ | 0.9.7.4 | 2008-02-24 | ||
| Adium (MacOS) | 1.4.2 6/13/11 |
2011-06-18 [sample] |
||
| AIM | 7.5.11.9, 7.3 | 2011-08-29 [sample] | 2010-07-19 |
2010-10-06 |
| AIM (MacOS) | 2.2.439 | 2011-07-26 |
||
| AIM Express | 2010-10-04 | 2010-10-04 |
||
| aMSN (Linux) | 0.98.3 | 2012-02-20 | ||
| aMSN (MacOS) | 0.98.4 | 2011-08-20 [sample] |
||
| Brosix (MacOS) | 2011-08-14 | 2011-08-14 [sample] |
||
| Digbsy | r27209 (build 78) | 2009-07-22 | 2010-06-17 | |
| E-buddy | 2010-12-17 | 2010-12-17 | ||
| eM | 3.0.10057.0 | 2011-02-17 |
||
| Emesene | 1.6 | 2010-07-27 | ||
| Emesene (Linux) | 2.12.1 | 2012-02-20 |
||
| Empathy (Linux) | 2.32.1 | 2012-03-05 |
||
| Fire (MacOS) | 1.5.6 | 2011-07-26 | ||
| Gadu-Gadu (old) | 6.1 (build 158) | 2011-02-11 | ||
| Gadu-Gadu 10 | 10 | 2011-07-01 | ||
| Gajim | 0.14.2 | 2011-06-15 | 2010-07-16 | |
| Gajim (Linux) | 0.3.14 | 2012-02-19 | ||
| Google Hello | v. from 2008-04-15 | 2008-04-15 |
||
| Google Talk | 2010-07-20 |
2010-07-20 |
||
| iChat (MacOS) | 5.0.1 (743) |
2011-08-12 [sample] |
||
| ICQ 99b | 99b |
2000-05-01 | ||
| ICQ 2000a | 2000a | 2001-10-06 | ||
| ICQ 2000b | 2000b | 2004-01-22 | ||
| ICQ 2003b | 2003b | 2010-05-25 |
||
| ICQ 4 - ICQ 5 | 5 |
2008-07-21 | ||
| ICQ 6 Lite | 6 Lite |
2011-06-14 | 2010-12-19 | |
| ICQ 6.5 | 6.5 |
2011-06-14 | ||
| ICQ 7 | 7 |
2011-06-14 |
7.1.0.2096 |
2010-07-12 |
| ICQ 7.5 and newer | 7.7 | 2012-02-22 | ||
| ICQ (Lunix) | Beta |
2012-03-06 | ||
| ICQ (MacOS) | 1.0.964 |
2011-08-05 [sample] |
||
| Icq2Go | 2011-11-18 | 2011-11-18 | ||
| InstantBird (Win, MacOS) | 1.0 (20110623151619) | 2011-07-21 [sample] | ||
| Ircle (MacOS) | 3.5a6 | |||
| JClaim (MacOS) | 13.0.0 | 2011-08-30 [sample] | ||
| Jitsi (MacOS) | 1.0-beta1-nightly.build.3593 | 2011-08-30 [sample] | ||
| Kadu (MacOS) | 0.9.2 | 2011-08-30 [sample] | ||
| Kopete (Linux) | 0.12.2 | 2012-02-19 | ||
| Mail.Ru Agent | v.5.3 or v.5.6 |
v.5.3 - 2011-06-16 | v.5.6 - 2010-07-16 |
|
| Mail.Ru Agent (MacOS) | 2.0 (2110) |
2011-08-10 [sample] |
||
| Meebo | 2010-07-20 | 2010-07-20 | ||
| Mercury (MacOS) | 2.0. RC8 (build 20101023) |
2011-08-05 [sample] |
||
| Messenger Plus! | 5.10 | 2012-01-18 | ||
| Miranda IM | v.0.9.29 | 2011-09-02 (sample) | 2010-11-24 |
|
| Mirc | 7.22 | 2011-10-17 (sample) | |
|
| MSN/Live Messenger | 14.0.8089.726, 15.4.3538.513 | 2011-09-06 (sample) | 2010-12-19 |
2010-07-05 |
| MySpace IM | 716 |
2008-04-29 |
2010-12-17 |
|
| Nimbuzz | v.1.6.0 | 2011-06-14 | ||
| Nimbuzz (MacOS) | v.1.2.0 (rev. 5483) |
2011-08-05 [sample] |
||
| ooVoo | 3.07.21 | 2011.12.10 | ||
| Paltalk | v.10.0 builds 396-403 | 2011-06-22 [sample]
|
||
| Pidgin | 2.6, 2.7 | 2010-03-10 | 2010-07-05 | |
| Pidgin (Linux) | 2.7.3 | 2012-02-19 | ||
| Psi (Linux) | 0.14 | 2012-02-25 | ||
| Qip 2005 | build 8095 | 2011-06-17 | |
|
| Qip Infium/2010 | build 9034/Qip 2010 |
2011-06-15 | 2010-03-10 |
|
| QQ 2008 | 2008 |
2009-06-07 |
||
| QQ 2009, 2010, 2011 | Temporarily unsupported | |||
| qutIM | 0.3 beta | 2011.12.10 | ||
| Rambler Virtus | 1.0 (build 1115) | 2009-07-29 | 2010-03-10 | |
| SIM | 0.9.3.4 | 2009-07-13 |
2010-07-19 |
|
| Skype 2 | 2 |
2008-11-03 |
||
| Skype 3 | 3 | 2010-07-12 |
2010-10-24 |
2010-07-13 |
| Skype 4 | 4 | 2011-06-14 | 2010-12-19 | 2010-07-13 |
| Skype 5 | 5.8.0.158 | 2012-02-22 | ||
| Skype (Linux) | 2.1.0.81 | 2012-02-18 | ||
| Snak (MacOS) | 5.3.3 | 2011.12.10 | ||
| TeamViewer | 6.0.11117 | 2011-12-10 | ||
| Trillian | 4.2 or 5.0 build 35 Free |
5.0: 2011-10-01 (sample) |
4.2: 2010-07-05 |
|
| Trillian (MacOS) | 1.1.6 |
2011-08-05 [sample] |
||
| X-Chat Acqua (MacOS) | 0.16.0 | 2011.12.10 | ||
| Ya-Online | 2010-11-22 | 2010-11-22 | ||
| Yahoo! Messenger | 8 |
2011-04-24 | 2010-07-13 |
2010-07-19 |
| Yahoo! Messenger (MacOS) | 3.0.1 beta (235554) |
2011-07-24 | ||
| Yahoo Webmail Chat | 2011-12-17 | 2011-12-17 | ||
Extracted information
| &RQ | Regular history: Messages, participants and dates are extracted. |
| Adium (MacOS) | Regular history: Messages, participants and dates
are extracted. Download sample history |
| AIM | Regular history: Messages, participants and dates
are extracted. Carving: Interlocutor ID and complete HTML with discussion are extracted. Live RAM: Sender username, dates and messages are extracted. Download sample history |
| AIM (MacOS) | Regular history: Messages, participants and dates are extracted. |
| AIM Express | Live RAM only: Sender username, dates and messages are extracted. |
| aMSN (Linux) | Regular history: Messages, participants and dates are extracted. |
| aMSN (MacOS) | Regular history: Messages, participants and dates
are extracted. Download sample history |
| Brosix (MacOS) | Regular history: Messages, participants and dates
are extracted. Download sample history |
| Digbsy | Regular history: Messages, participants and dates
are extracted. Carving: Interlocutor name, messages and dates are extracted. |
| E-buddy | Live RAM only: Messages, participants, protocol and dates are extracted. |
| Emesene | Live RAM only: Sender ID, messages and system information (message ID, conversation ID, message parameters) are extracted. |
| Emesene (Linux) | Regular history: Messages, participants and dates are extracted. |
| Empathy (Linux) | Regular history: Messages, participants and dates are extracted. |
| Fire (MacOS) | Regular history: Messages, participants and dates are extracted. |
| Gadu-Gadu (old) | Regular history: Messages, participants and dates are extracted. |
| Gadu-Gadu 10 | Regular history: Messages, smses, file transfers, calls, participants and dates are extracted. |
| Gajim | Regular history: Messages, room messages, chats,
participants and dates are extracted. Carving: Messages, dates, interlocutor ID are extracted. |
| Gajim (Linux) | Regular history: Messages, participants and dates are extracted. |
| Google Hello | Regular history: Messages, participants, dates and sent/received picture thumbnails are extracted. |
| Google Talk | Live RAM only: Messages and participants are extracted. |
| iChat (MacOS) | Regular history: Message text and participants
extracted. Conversation dates are extracted but time is not extracted. Download sample history |
| Old ICQ (ICQ 97 – ICQ 5) | Regular history: Messages, invitations, file transfers, URL requests, requests for authorization, authorization request denied/accepted, you were added, www pager, email express, contact list transfers, participants and dates are extracted. |
| ICQ 6 Lite | Regular history: Messages, smses, file transfers,
participants and dates are extracted. Carving: Messages, message type and dates are extracted. |
| ICQ 6.5 | Regular history: Messages, smses, file transfers, participants and dates are extracted. |
| ICQ 7 | Regular history: Messages, smses, file transfers,
participants and dates are extracted. Carving: Messages, interlocutors, dates, message type and status are extracted. Live RAM: Sender and messages are extracted. |
| ICQ 7.5 | Regular history: Messages, smses, file transfers, participants and dates are extracted. |
| ICQ (Linux) | Regular history: Messages, participants and dates are extracted. |
| ICQ (MacOS) | Regular history: Messages, participants and dates
are extracted. Download sample history |
| Icq2Go | Live RAM only: Contact id, chat name (nick), first name,
last name and e-mail, registered with icq account, are extracted. Messages
message text, sender, recipient, recipient chat name, and sometimes
time, are extracted. |
| InstantBird (Win, MacOS) | Regular history: Messages, participants and dates
are extracted. Download sample history |
| JClaim (MacOS) | Regular history: Messages, participants and dates
are extracted. Download sample history |
| Jitsi (MacOS) | Regular history: Messages, participants and dates
are extracted. Download sample history |
| Kadu (MacOS) | Regular history: Messages, participants and dates
are extracted. Download sample history |
| Kopete (Linux) | Regular history: Messages, participants and dates
are extracted. |
| Mail.Ru Agent | Regular history: Messages, participants and dates
are extracted. Carving: Participants, dates, messages and message type are extracted. |
| Mail.Ru Agent (MacOS) | Regular history: Messages, participants and dates
are extracted. Download sample history |
| Meebo | Live RAM only: Messages, participants and dates are extracted. |
| Mercury (Linux) | Regular history: Messages, participants and dates are extracted. |
| Mercury (MacOS) | Regular history: Messages, participants and dates
are extracted. Download sample history |
| Messenger Plus! | Regular history: Message text, sender and time are extracted. |
| Miranda IM | Regular history: Messages, participants and dates
are extracted. Carving: Messages are extracted. |
| Mirc | Regular history: Message, dates, messages containing
color codes, system messages, sayer's name, profile name Carving: Time and text of an action is extracted. If the action was a sent or received message, message text and sender are extracted. |
| MSN/Live Messenger | Regular history: Messages, invitations and invitation
responses, participants and dates are extracted. Carving: Messages, participants and dates are extracted. Live RAM: Sender and messages are extracted. |
| MySpace IM | Regular history: Messages, participants and dates
are extracted. Live RAM: Temporary disabled. |
| Nimbuzz | Regular history: Messages, calls, file trasnfers, participants and dates are extracted. |
| Nimbuzz (MacOS) | Regular history: Messages, participants and dates
are extracted. Download sample history |
| Paltalk | Live RAM only: Messages, sometimes sender and time
(hours+minutes) are extracted. Time is extracted only if the option
"Show timestamps on messages" in Paltalk settings is checked and only
for contacts, not for an account owner, and even so not always. Messages from both private and group chats can be extracted, but there is no way to find out which type of chat a message is sent from. Download sample history |
| Pidgin | Regular history: Messages, participants and dates
are extracted. Carving: Messages, participants and dates are extracted. |
| Pidgin (Linux) | Regular history: Messages, participants and dates are extracted. |
| Psi (Linux) | Regular history: Messages, participants and dates are extracted. |
| Qip 2005 | Regular history: Messages, participants and dates are extracted. |
| Qip Infium/2010 | Regular history: Messages, participants and dates
are extracted. Carving: Participants are extracted. |
| QQ 2008 | Regular history: Messages, participants and dates are extracted. |
| QQ 2009, 2010, 2011 | NOT SUPPORTED TEMPORARY |
| Rambler Virtus | Regular history: Messages, participants and dates
are extracted. Carving: Messages, participants and dates are extracted. |
| SIM | Regular history: Messages, participants and dates
are extracted. Carving: Dates and messages are extracted. |
| Skype 2 | Regular history: Messages, participants and dates are extracted. |
| Skype 3 | Regular history: Messages, file transfers, calls,
voicemails, participants and dates are extracted. Carving: Messages, calls, participants and dates are extracted. Live RAM: Messages, calls, participants and dates are extracted. |
| Skype 4 | Regular history: Messages, file transfers, calls,
voicemails, sms, participants and dates are extracted. Carving: Messages, calls, participants and dates are extracted. Live RAM: Messages, calls, participants and dates are extracted. |
| Skype 5 | Regular history: Messages, file transfers, calls, voicemails, sms, participants and dates are extracted. |
| Skype (Linux) | Regular history: Messages, participants and dates are extracted. |
| TeamViewer | Regular history: Information about the start time and end time of the session is shown as well as information whether camera was turned on or not, information on file transfers. If a chat is saved to a file with a name, suggested by Teamviewer, message text, date and contact are extracted. |
| Trillian | Regular history: Messages, participants and dates
are extracted. Carving: Messages, participants and dates are extracted. |
| Trillian (MacOS) | Regular history: Messages, participants and dates
are extracted. Download sample history |
| Ya-Online | Live RAM only: Messages, participants and dates are extracted. |
| Yahoo! Messenger | Regular history: Messages, participants and dates
are extracted. Carving: Dates and messages are extracted. Live RAM: Messages, sender and date are extracted. |
| Yahoo! Messenger (MacOS) | Regular history: Messages and contacts are extracted.
Dates are not extracted. Live RAM: Sender and messages are extracted. |
| Yahoo Webmail Chat | Live RAM: Message text, sender, recipient and date
are extracted. |
See also:
Browsers Support
E-mail Clients Support
Multi-player
Game Support
Office Document Support
P2P Support
Picture and Video Support
Social Network Support
