how to check outlook express RULES creation date

[tth]

hi;

i am helping a friend whose pc outlook express has a new
rule inserted that routes incoming messages to a
competitor's email id. how can i pinpoit the creation date
of this rule?

since rules are stord in registry, is there a way to see
the date of creation/modification?

would really appreciate this because it's now court case
he's taking up against the competitor who seized the pc to
insert such rule...

thanks.

tth