Anonymous User with Admin Access

Anonymous User with Admin Access

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Anonymous User with Admin Access Mervin Pearce [SACS] 09-06-2007
Posted by Mervin Pearce [SACS] on September 6, 2007, 1:12 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I have seen one specific box in an environment which I tested which has the
IUSR_%MACHINENAME% with ADMIN rights. I have included a PNG file and if
this is blocked I have added a link.

http://www.spisat.com/images/aa.png

Has anyone seen something like this?


begin 666 AnonymousWithAdmin.png
MB5!.1PT*&@H````-24A$4@``!/X```!;" (```!L_-S9````"7!(67,```[$
M```.Q &5*PX;````!W1)344'UPD&$00=K;``````=T15AT075T:&]R`*FN
MS$@````,=$58=$1E<V-R:7!T:6]N`!,)(2,````*=$58=$-O<'ER:6=H= "L
M#\PZ````#G1%6'1#<F5A=&EO;B!T:6UE`#7W#PD````)=$58=%-O9G1W87)E
M`%UP_SH````+=$58=$1I<V-L86EM97(`M\"TCP````AT15AT5V%R;FEN9P#
M&^:'````!W1%6'13;W5R8V4`]?^#ZP````AT15AT0V]M;65N= #VS):_````
M!G1%6'14:71L90"H[M(G```!`$E$051XG.V=>YP=19WH?_TZY\R9F<SDS4!"
M9I+A$0E@>/C "R:""(M^K@]67-3=:$(6<7UP"8)&-("@V<PNOH@("011%O;"
MREY1(J($% 4%5#8@1F.B!/+.3%Z3F7.ZN^X?U5.GIQ_5U:]SNL_Y?3.?DSYU
MZO'KJE]5UZ]_U=72.9_X,2 (@B (@B (@B!(\R(]])NA1LN ( B"( B"( B"
M("DB[1\E>PZ21HN!"/$_6PXT6@0$01 $01 $09#\(3=:`"0$CS[QIX6G=#5:
M"@1!\@J.(<F2]_K,N_Q9!NLV"^2]%?(N?]ZI3_UC*]<9M=$"M"[_MNXY\<A7
M+3H]/4D0!,DC>7GW! ```0!)1$%4CS[Q)_'(Y[_UN/0D:0[R7I]YES_+8-UF
M@;RW0M[ESSOUJ7]LY?H3ML[1]&TD9YSV.I%HSS[_4MJ29)-*!3;]CZ6B6S8I
MAP]*C94':3CS3M?IP3&]QL3)^*0&CB$)D_?ZS+O;K-@ODO17R+G_>J4_]
M8RO7GU!U/L[TG3-%WKS']/LJ0OP<D%"\^\QN=MP$.Y8=/BC][.'"EDWRKNWR
MQN?PO@SBXHZB_5O?\<8QO4;?<>;9[ZA.Z\&A)B+O/K.[SJ.'?> "X;&K_G*&
M)<* 3$\J6H4D3IP:SG[K-):&U*V?0K(,6ZW54CW?.LS'LC!0N(>LUE&A^M2_
M%'_+%2J05V=4&A8!U/G B%`D@2`( D60=(TT,($&(=& ;LV5,['AR$+9N4
M3'(D:NZ(6;=^,X26M7M3I6[SL>P,%()C79.I67;JGP]'3C^9,WLNB8..M>8A
MOUH[N%>ZYB,=N[;+`#!Y,LR8`9,G0T\/* HH"L@R* I($LCRN$^D%3!-(*3V
M2?\,P_K;OAWV[H6=.V'W;OC%3XJ__97VV8'!$T[194F69!EM8!%:YT8O@B!(
M?6BIX12C@8N]```!`$E$052O($B^$#5]YTR1`8"Y<^E7%F+_=?,>T]/QZYF$
MQ>=DW@I\]&WM[L [?W8X6FYLJ0.[L\N^TF-^N&<.GG&2&NF>V:#MVBZWM<'\
M^3!U*I3+4"Y#H0"J"JIJ6;\.NQ?-F1;!;O=29Z]A@&F"KH.N@Z+ I$EPS#$P
M. @OOPQ#0_)SOY3[CC\DRXJBJ)(B*XH*I"4,X%3'$)$0^X!@-Z?%QPV',\J]
MH,Z=H9]4>FNM5GM(2!YYN@_"(R<-K4,ZT]4.1RDRER5+><<O/N^*U#*]@#
M(VMI'7JH6SQWN8YADW-@S\=SL(TFC-^(W2C2J/^T6]E=$*>].&G=][L][X!'
MZ!=9:%."R0```0!)1$%40*3.A4Q?9LK2`[MERXX#S52_)"*9-SUW_NRPH[7B
M9?Y>:OJRFR"F"9V=,#0$U=&1(X</*JJF:IJB:$0CBJ+(LD(`FMOZC3:&V+NS
MYVQ8Y!HI;LT"UY9VXU=$H)SQ)_21QV3/\^+7GN/ 'I]_@IS33/":$EC)@:WO
M*3 ]7\'+3:;(2]V*E)O!ZA4DJ59(54O3Z*%Q!@I^AQ*9/4(8[>)GTEC=2ZG^
MDRK%K^C N3K_1IAXG4?N%PU'I,Z%3%]FD;H=L_SX]D!^DF@QFPE[:I&XG@
M'HH.*M0```$`241!5-KJH-.J"N4RM+?#A G0V6F9OLSZI8Y?^Q_2"K!%SFRI
M,S5ZJU70K<V>+6^PJ@(`C(X<.;A_KU8H%8JE0K&-$)-H14V3)&C^I0)IC"'N
MCA]J*! Q:^TA87U]CI&*79X3&:^BU:?G5$#$8>(I,_$Q:W?^'X&/QG2("-3
M* [YK=MFHK&SIOAM%'.$L2,X4-C3!MX^BPQGN!-W'=>!Q.O?\Z<$M=3=CISZ
M#&S6A[S<OW9$&BM3#<H(K'/1!<\.:U;$QVNW8!V^W,"T@E(U&;2U&F[W0H-F
M'M3T[>B SDYK@RM5!4US>GW9'E?-;L@@UAY7]C^[R[=:K=G#U:IE^E9&CQP/
M/G7J```!`$E$053:/U@HEJJE-M,P""&2),FRK*@MH2QI!L7KH$\;.?DQK!
M$AF3P]K _(2.$Q2Q?A/Q,W!D:$VP;K- =F9-T4AOA DU4"0(?[C+FF(G7O_I
ME4)Q-VO\/#EE)1*G(?#K7,AWQI[%=5NMJ7IH6]#]F^#]XT2HY[18EBTWKZ99
M+E_V62Q"L5@[*)7PK[7^F +050#TCQVSFR,`4*V,'CZT__"A_<.'#@P?/E 9
M&=:K%=,T@!!"6N(]P.)C"+M_S/[<_5TD)&R$0'DBY,#67X'->YP(F9I5.TY0
MQ$F>N/QI5').P;K-`IGJH0SQ%DQ#?K^!PGX@LG)$O+BP.61'P^NC/XF4'F&R
MV ```0!)1$%4PAD?HM6G8.OGU/W+J?-Q7E^'<6OW\;HWLG+$<>.()FC'"F:.
M@*L#V <R>TB<;/UR2.,.(O7K4C-&4<99.)IF_6I?[=P27KS6QKVWLWV',T)J
M^Y^Q0$.OCAXY3$P#`!1%U0JE0K'-T'5%4159:=!YY SW"! JA#-QMX\;GD\B
M.> /1'P9Q,\W6=PRNRM$T+;A)$SO?!WM(BB#9YORU<9]CIEU("1%`^L66J!Z
M!4E)2_GSL;2]<XD,%)S3Y)M;]LA^PGA6=7.0>"O[]5R_9DVP:$FF_TEO:/
MDCT'6\(9DC7^;=US9YSV.I&8SS[_TE6+3J=)OOR),QY_87_*HM6;^_*GLE$`
M``$`241!5&XOW7='3X)QSH+L;NKMAXL2:UY<>.![TQ5?[M@)VHY?^52I0
MK=8^!P=A: B&AF#_?GCF&=BT"<[[]\XSG/:,52J:V]W-'5V36Q8\*DMO;.
M0JE-532IN9X1?_2)/XF/(>>_]3B:)"]C2/V7?>:]/O,E?[Z6]6+=9H'ZMT*R
M-9DO+6H^ZE/_K=#*61MAPM8YOM>WD3S[_$L14@T=KB8N26,9J6KT@%FVS/%+
M[=Y"8=P[?NGJ5C1]FQNZ/)EMZ4R?Z06;/6S?_(Q1U<WAT:IJ2#I1#7F4J!5#
M&:U 2=-5584F,WTAS!AB'S?R,H;47\Z\UV?&Y5^T8"H[7K=A=W8S!JA<```!
M`$E$053J302LVRQ0AU9(M28SKD5-3WWJORE;.>,C3*@ZE\BA9U.5!DF0?__9
MT0"@RLUF\SUR;\?Z>SM./146++!<OI,F64_VLN=[V4)H^X.=: `W)71'*X#:
MOE;L;W04*I7:Y[Y]EN-W<!">>0;^^$>8=^;/3WGC4XJJ%4KE4GE"><*D<N>D
M4GE"H5165$V2FLWT#8MN$FC&,:11Y+T^\RY_EL&ZS0)Y;X6\RY]WZE/_V,IU
MUL2!:]V+QIX)E9=54RE"H2R7.M7V#J6]#&V%JJ9I:G._VA=!=8(`- ```0!)
M1$%4$ 1!D'S1\_P+C1:AA=A^VBGR34_.F[WW;OS,Q2<`-%R&-#XG#O\>P+F8
MV?[GV/B*+H%F?]0MC'_-\<>:U?ZP-UON;G_!E:<96ZKN>&+KM$G#SS[RYZ.G
M'WKBGA?Z9@X]]-5?G=BW[WLW/WE2%K0=QY!F^LQ[?>9=_BQ_8MUFX3/OK9!W
M^?/^69_Z!X#[-\XZZN#/V.?T`_B9UF??GKNEYV\]:_&+J^ID:R/Q6'[.1MI)
MFHSMOYFYXS<SSS@#SCL/)DR SD[H[H9BL?9BF[8VRP1B&SY3$PCWNVH^J,N7
M;>Q<K5JO\*5_1X[ Z"B,C%B?>_<Z%SQ/F?WHU/[')%D#M6* O<(```$`241!
M5"1I'7)Q@E3HD@L=H!0E68.67_#<K&-(H\A[?>9=_BR#=9L%\MX*>9<_[]2G
M2S]9H/WE1FQ)/((@"((@2%- QC[)V"&:P0E#3%U=>]+5:/TBC<(TY#T;I^]]
M@`R[)EUJ_C/4;,QTO-8/=K?I'F0)(LBY<:NG;W/D# :F<$01 $09"Z\=O5
M;^%'F'_%4V'R,$DXVQ@)%F(7O/Z/G_K6:=]_)?V`T<X/:8'[A!'N"?NY/P\
M_4(<$CJ$]Y0G<M'NXJ*E2AS[F7(*HF+X"9.VD!R,4770^;F]```!`$E$0537
M"SV[7^@Q1E4`F#H5CC\>"@5K%ROW?E<4MRL83=\FP][<INEL_9A$4WC/#IYV
MH74CPOCF5R&.BP4_6T<T*0R 16:;3+L3T'SXM@!!4*I0E(<SSXF3,[^S
M\SN%9TU&J"@_,2(D0>I,&CV4DVV<'@I!^BQR7GZ**BZ,_6M@E_&,+")2(,3?
M-QMF<TT"0*C=>_.B.9^]\X^2%0A?6G0\B_3Y=9O8<6'6__:@]Q'_@E:3E"
M>7W]-%YP]/1,[@X4">'+Z98G3M&!9R&2*B5$JH7?.@VYU%6'M5V_G;'WY:G4
MZ.WI@?GSX>23H;W=VM9(53T\N@XWK]WN592@(I^\]&D`] ```0!)1$%4NOCV
M@;$ORWXRNNJ<M$XN+!NN+2Z\Q3INE&!4!E;ZUKO>V7?Y3[)22W:W?V0>^\J9
MYRU_`2(I?-CQQTUF)Y21QS=^A8AD&Z'<:.>(,!)I!7>(Y]PW;+9QDL144<[U
M.D&U%.D4[IJ,5E&!DC1JQH+P2:F'IC'\AAKD_7Y*9+@0M\PA'_=ZZ%)GTS1-
MDGM&%KQTQ2\ZVDPWDSVJ.%E]]JN^E>T[?]?L>8U0]^FAXYSOA[_\>3CX9
MRF5K1RNWX]>^VMGA]67/`'/^MMU]8?'M`U<]1@C;4-$```$`241!5'2=Z/J6
MV\?>'OQPKNW!2=,[&_;VG=];H/73UOO?M?"6V#98SK1]<>O@H&WOVOMMKI)
M9?N3`0`&5MV]U?I*G>V-D,02P+76/2,KG)NL7Z<T4KFS#76_$FD4,5LAP:FD
M.Y_X<P9.9)$;QR)P+,E0?2U.34;HU#ACR0OQFRFI6[=\G8DC9_U5,;(UD0H$
M`."F1?W+[_KCB@_-!F(2TR2F:1@&/2"F^<6[-UUW:1\+9\?$-*^[M(_%M!_8
MD]N/6_7/D->>='6#6QI)#G<?=O1DSZ_LT^\FG..G""'_=?59?_U9_XOWG+[K
M]SVF(<^8`>]^-[S[W7#""=#1`>WMT-8&I9)Y' \"```!`$E$053E]:7&C]OF
M@&47G:N HBP8((3\>/'L1IB:M((?77KKS\<L3X!T2PS\<VQC%M;N_=1[9GWN
M`[-7+JZM$?KE+6^RZ[]#/_E=P!-W#NX>YP@1[SBA3C8C1)BO9_6^.Y(`F=('
M1Q?CEY+]#IBIND5R2F.UR.T9#I76?IS?BZ8/A!!"/PDA`": :9HF/7!\I=C#
M[3^Q@QN^^Z?/7]KGF55K_H78X=E^.]-/9?GW@3R3BV/O*FP5A/L^JUN>^$5G
MDP@GY1>3U2UGB4BT!39W7G;6@O?NZUL-'G)?T@```0!)1$%4`-,`8/9L./UT
MF#P9VMJLUQ?1%_/23[K:F2UX3L#1M^&'`P#++EK@\=/6M1?V+5F_['&R:L&X
M+];ALF4#`P.P[/$M)ZZT?R6K%L"&JZ6%UOII*SD`#;Q@S9IY2Y8,``!<L&;+
MLFS-FHU+/$2A":TO%ZS9\LCB7I;;FC4;E]#?ECW^."RT"K7E[EE1]>!KW_\K
M?;G1VFO.6KKZ%0`XZ\JG)5FCOWJNB?+K`IZCAV<.@?-I[3J'FJ^V3=7JPX
M*R1%K Z_<I&ZD?:<6/R*[#D_%BS('K%9@4\```$`241!5#F.T]B1CY_D@N.
MO93 !9\(XDE8)8DP5ZQ/$D:H3N>X0+,DU!?-$</36N%8$PV D*]\]/AKU[PD
M`5Q_SY^ONW3VE^[],UC/$A-;+.LK(>2F_]B\_!_FT,\OW?OGY?\PA_UD/W!\
M;<S9901"PNWP[#GS<UR91%9!I'IE]5N>$;GHS!+YI-P3"$YRSD# 7Y9VZ-6N
MG;\]9OYJ`)BD*-#7!_/G6T8O7=M,+5[ZLB+VE"]S^B6RTG7KYHT14P[ 182L
M`H"M:U?:OXZ9N%L>6=R[=>V%?0LEL!EUZQ^ ;Q&R:NO:"_N6++EUP^)5B[^U
MYH&:@>U@P:K'EPTL'%@H#3"C$@+CHE\+```!`$E$052+8))L@(&!,;NY9N&+
MI?5@SN)KEDDKUWY\P;FVP U7UX3?<+6T<,G'UI[+Y!QX>0XA9.O:"_N6#"Q<
MN68+(;U;UU[8MV3AU1>Q&P1^DJ3,I]XSJ[V]O;N[6SQ)V('+KU\XKJ.!&7JF
M;=08Q3?I/6\!N!.*9.Z9Q'W3P5$*4@<2N43R,^'?>^)D$NK&D&?D"&=GS\=3
M\LA$TW!T^;8XD748N-TMC21^"&85V.D\C5N.&*W<"YB%W&A!,D$^WNOKV4_X
MDTN$0ZC;>!$NSP\]!'_Z[Y,.O=H%`)H&LV?#_/G0W>TT>IFY2__L*UWM#_<V
MA@M.[/7\NN&'`P`77'QN+P#T6'OKTP```0!)1$%4+KYFV9+U=K?MV ]SY@&L
MW[AY*RS@E[)@%2&K-EPM+1Q8TB<M&7,J\XL8DV3!1<O LGUMEJ]86F]A/KYF
M&7E:9UB+/QE"ZD"T5DBC[=+3AU#W:Z+E'#E;[ 4(GZ;1D/2Z802R=MG]TJ+C
M=5TW#,,TA?:C$C1K:;0D!,P](9[UC7GK/;TU<ND5G5_J<\KN4CYS]EDO_^>I
M[WD/''JU2]-@WCQX__MAX4+HZ8&)$Z&K"R9,@,[.<<_W,M^OXSG/1#8WZITS
M+V+*>7-ZO;Y2-_+Z)7V2)&[K&OD```$`241!5$D27<Z[<?/6&")2^Y)L67,!
M]3UP"'EYJ32J*B&$-B5W!$"KZ/N),_;G@IN_)HK&WZB.D+"FK4B'N H
MXB(Q2&KR%]\M&5,?^"N5V*H*D74*XB6RG 7//9J&H\NWE<E.#XT)IQLFU=-S
MRJK+3KCVSC]^?MVF%??\^8;O;O[2O1[&*CIOX^/A]75,O!P+XAV!XG@F=P=Z
M1O.41UR,.$4'9A6S6N+ .2G/V7.$.UON?/QJ8-TZN/YZ^(?5`-!>*L'K7@?S
MYD&Y[.WI=:]M=FQKY'@J\A[W```!`$E$052O;W1LKM$8N=2P?)SVY<G)T'ON
MQ1? ^O4O;X7%?D5L=:99\/$U%_0]\-,-%V\<[VX62>LMQ.)KEDD+E[#OU)ML
MK5/>"A#D-[9GE59%!;/Z!W_[]/OZ[0N>S[OV-[_\^EO?<M5S]&NH/BLX>@0B
M,G38^Z](GHD32D@((Z??&.X7H8'C:K,B4J6!K9"2YD>0)%3^H2Y\+'*JE_MH
MFF<$`):?L_&F)Z.Z,=/!-.0]&Z?O?N'HRL$B`)3+<,HI</SQX8Q>]QN,Z!)H
MMAR:9L)VPRH4G!L"PDMCV0```0!)1$%4<QBWFY7UC5IDCH=1EZP'^S97C@VB
MG-M9;7ED<:_OL?V+?0.J\=!-H-S[;/EEZY0$:IM0U4Q,\;3CY1A?09;!:Y-P
M7/BXW.PE"IQ%D$89QKB_T5&H5&!TU/H;'H:1D=K?GCTP. A#0S X",\`W_\
M(TR9_>C4_L<D6:,+GN7B!*G0)1<Z0"E*L@:2'%1^DY/!,237Y+T^\RY_EL&Z
MS0)Y;X6\RY]W1.K_MZO?PH\P_XJG^!&^V7'O_1MG`1 P#0`#3(.^U@C ;/4M
MJ5+@R1EGI/*LKZ>_,?%2D,9BC*I[7IR^^X6CJ\,:`'1WP]RY,'>N9>YRC%['
M6UOM$%([8'_V7]-N,```$`241!5 D!TP33#+$6>N:B1_3>J]6%DK75,"Q[
M3%^U`, P%GSEL64#YRWIDY; ^<NN.A_6/PJ&`88))@`0, P``'!\A05?T1\G
MZL(^:0D`P/EK-C^\>*8!!AV?3# -, `,`@!@FF 8"RZX"@8&%DH#%]R^^9&/
MSK))=O:JS;=OG+.427;![9M7G6V X5>$4Q(`Z%WXW@M@_?KSWWLNE<%7/(^T
MX)Q%4'M1BY>VLFE:+4YP$<0!$$0)&,$6K9(UD"O;Y[(R/V_ZK"VYC=K_0
M8XRJ`#!Y,IQ,\Y=H```!`$E$051\,O3W>UB\]HVLK%?(^NS;3-\ERQR_U.7+
M_NP9TC_Z4E_V=E^D:6!V+SV@+M]*Q?I#KV],,C*&- UYK\^\RY]EL&ZS0-Y;
M(>_RYYWZU#]Z?>O)DS/.D!>_N(KN=(6?V?^D-%"&ZK V]P^OO'3/Z3M^,],8
M5:=-@_//A_>^%TX^&;J[G1M9T37/U&JEIB\S=YE'EQDYCC_F]*,>/_L?"[?;
M2/C7-'^.QK4K@ @GM&\&@(N/>A@`/C;S'@"XZ;A5`/"MN<L;WG^S\-GP,:3)
M/O->GWF7/\N?6+=9^,Q[*^1=_KQ_UJ?^*9\X=AT`7#[C>P#PD6/N!X!_.OI!
M`/@P?B;ZIO&S90```0!)1$%4>=-Q*Z4'[OLV($@0NW9W_M\'3G_\B>/IUQDS
MX+33H*>GYNGU?)HW\ V]U)XAQ/FX+WO3+\W6GC\]L.^&);>Z)Z^I<-SUH,[>
M:M4Z.'(DP.M[^FG?/_.,_U95I5@HE,NESH[VCL[V<KFMH&F:IDH->UD6@B (
M@B"(DY[G7R $"(!IF*9I&*9IFJ9IF 0(/NV5.'^==Z+ZODN6-EH,1)0'[[^]
M_NWUN]_!RI5PWWW6U]FSX?6OAVG3G&N;Z1)E10%5=6[1#.!-?^29\.948O
M(2#+M2<\F;O/X?B592NAN#R07VYWL=/GIDX[^J23SR@4"G2'YRE3IDR9
M,J6[NT9]E=T```$`241!5+M<+A>+1;GE;Y,T9 QI8O)>GWF7/\M@W6:!O+="
MWN7/._6I_U\^_R]GG?T.0@A]G:^NZ^R]OFC[)LZ);WN;VF@9D.SR]-.P<B4\
M]! `@*) 7Q_,GP^3)T.I9-F]U ?+C%['*WD9=EL7P'L9L]V%JZI@&* HXQR
MA@&Z7LO9L2,TTC2PNQOTH%H%70==]U@"C2 (@B (DFNVGW8*O/.=Q#3-:E6O
M5BN52K5:K5:KU/O;:.F:$#1]$0\V;(#KKX<-&P``-,WR]'9W6T8OVVO*OG^5
MP\T+,,Y;R\P59L3:[5Y)LC*AN0& JCKM7F;HPO@%TC0<:1H<MT68W<N>! [K
M!T93!;TJ```!`$E$0500!$$0!,DXTA@`(,LR(027JJ4!FK[(.!YZ"*Z_'G[W
M.P``38,33H"33X;.SMKR9K>GEQJN=AQ+51T[45$_GAU9MIX0IH\*T,[C^:
MBEG+`+Z/$"/YQ;'*G=J]NNY\!AA!$ 1!$*2Q!.XA(KYHF9F^U.X%`/3ZID'-
M])4DB58T.W"$@ZV!W2&.<$_<R?EY^H4X)'0([RE/Y*+=Q440. WL9\HIA0KO
MKC'[K_1XW3I8N1)>?AD`H%2"$T^$DTZ"<MFR>.U&+W/VNA_H=7AWF8^7^>[H
M0;4Z;OLKMK9Y^O3:5\-P.GY9$?2]O@!H]S8G=M.7.7O=+M\(?<NO(P2F&A,L
M*'*2'(%UB_ )[*'1)LSV'#P;/7X2OO!UBQQHDG ,'+$?@CJG@^DB1U=G8.
M#@ZJJDJ_]O;VOO+**_37F3-GT@-WB#W<,Q"Q$\+KZS>M$1P]/9.[`T5"^'*Z
MY8E3=.!9Q!<X,B*E\%N'$#(R8AF]6[<"`)3+,&\>S)GC;?2ZG^DE8_M4$=N;
MBJB'UF[N4D^OW>LKRS Z"CMVP.[=\-IKL'LWO/6M\(YW6,_ZNE]?1(M@.V !
MH-';Y%!5=:B!??LK<:9/GW[PX$&(9$3%[\Z9G5"F-+Z)9!NAW&CGB# 2:==D
MZ<L```$`241!5#BWY1:M<<.*&FKZF$&P;I% $ADG1?0J,-L(23C"US-RH.29
M11H#`)C=2\](TS0`F#Y]^LZ=.VED=DP(88$,1Z ](4*)N. YYD0D5'+/R Z-
M3[7HL/TG+[.TH2'+Z-VQ`P"@JPM.. &./W[<RX3LS_0R3R^U>*DYZEB0[+!O
MZ5?[\?[]L'T[[-P)@X-P\. X>70=*A50%- T, R09<M"IM!RU&K89]D;-I
M6B\ZLN]Z1>KXZ&]>NK8@T<:W"-F&NE^)-(I0^A#G?D0$Q4M)5^L&UBT2GYCC
M9 2]\DO"SR>.G.ZTT7+CW#O@VRDH*9OHJBL+L7D)(H5 ``'8``(/QYQPM
M```!`$E$052#@_3 'LAP!'K&:7'P6=^F@G_#C 4.#<%7OPI?^QH,#0$`='7!
MO'G0UU=[B2Y]YI:]I)>^KXA9O';/F_U13+:8V>'IW;</MF^'7;M@<!"&AVO2
M:II!R*]4]:E33GG7KW_].FHD4[N7FK[V]<SV+9W1]&T='&\YJE;'K2!@AK&#
MSWSF,W1KQ)_^]*<TI+V]7==U^Z(/&LZ^,N^'X(76G0,]YO1!1Q).2!Y-P03G
M@*..?LG%L:L[FU"Z5^RXY8E?=#1ITRXNPDEMWTZNO!+6K;.,WJE30+>#Y0``
M`0!)1$%48=X\F#&CYN"UF[ML83,U<9EOS;YG%7M\UV'N[MP)NW;!KEVP9P]4
MJS4!VMI&=?VQ=[RC>\.&%:KZ[(H5*P!*UU[[`X#7.?S&CD>([<\&X^WIUL'N
MU+4OI&>.7T^7[[_^Z[_2]_HN6+!@X\:-`'#X\&'VJ^<"*O?!F `>HX=G#OQN
MR#(?]V7%D:UGH,BEUD]RQ%Q)JH,ZQHML<5A1JNU6J56;!5VZRZ7"YS`AWA
M""6<U]=SYN>W<D PN2#B2?C+,^IV7:G#%#;426W="@#?ZNN#D8O]Z.<```$`
M241!5!$`@*./AI-.@IX>R]REG]2[2RU>@-HR9F;N$MO;B>QV+_WZZJNP>[=E
M[MH=<1,F#(^,K+_HHBG]_=N..6;WBA4KSCMOQ2]^\>SUUU\/MMY.%SP7"E9N
M#M-7&O]&7Z1%(+8MKY@>!K[FEWE]PQ04;N#RNT ZKJ.!&7JF;=3<EV_2<[S6
M82=)GDG<-QT<I2#U)UHK9,JAE%FP;I$()-*:B6@19L7Y99+]?/:]'S0VM
MP.4C(S!K%LR="].GUWR\[(6Z= BRFQ/LV+Z^E-FZE8IE[N["2QV_```!`$E$
M053>#7OVC"MTTJ0#_?W;^OM?_<$/EM]PPP=7K%CQUK>N`%O'!@!%4619EF69
MD,,`H.LP,@*J"H4"5"JU9:YLFRMF^B(M!3-]86S7*_=M%WI?AG+===<QK^_%
M%U^<FE0)C#RM,ZR)^WN1C(,ME1Y8MPB?:!J2QNV2>NIJ4LNA`V]81Y0O!?R6
MLKH#^;]RXK0R$7=XCD#DY/$ULLXZG84N1!7]=[\#@._/G0L`BV099LZ$4T^%
MB1/';=?,WDYDW[:*V-Y.Q#;7I7\C([!].^S8`7OWPMB3]A;''+-[SYZ'+[GD
MJ(<>^O07OG %#?S1C_[$S%U)DC[_^<\#0*%0((242B5J#KZ(F0```0!)1$%4
M_1*R#P`J%3AXL&;G4&N<+;I&$ "G0AX\"(</P_ PC(PX7Q:=%!%F`('74;_;
MY\SEFX4QA!)XI]\S)&PF$?)$ZD!VYMG-!]8M$I:DFC*^%J5G#J1T+6B"2TSN
M!,XR'J:O8[&[8T&\(U <S^3N0,]HGO*(BQ&GZ,"LHN63")R3>OQQLG#AAOGS
M`>#=L@RS9\.\>=#967/S4A\O=><2V[.4;G.7$#A\&';L@)T[8?=N.'1HG R]
MO3MFS=K^[+/_IJJ_.'QX_\J5*P`.G';:%2M6K* 1;KSQ1DF2;K[YYL]^]K.$
MD%MNN>7**Z\LE\NF:79V=JJJJB@*(=L`H%*I96Z:WO%LD6,```$`241!5*\.
M1EH<MA: *N?APW#H$ P/PY$C-=/WQAMO="QXWKES)]WF:BR3$#U4</00D#S$
MT-&H*UQZXYO?&.X7H6ZC:.N0B-)&B)-2N7D'ZQ9Q(-(T@>-DW51"?,06$=+^
M?$V@"<"/'(WL](6P)EC@M15Q4S-]14Q*=[A;Q3F%^8W=8?/DA(A++IAS3'G2
M=]RVS ! 5S+/FK6]OW^;IAD`\)[WG EPIC0&`-QTTTUT,;,D28JB*(KRS6]^
MDQ[<====JJK>?__]JJIJFJ9IVF67?7CU:LM]1T5R;F'C```!`$E$050RC)K=
MBZ8OPB"V9?"F"</#UM^1(^-V4V,+GJ=,F4)#Z#97?@,%?_2+,"QX9IB1H8-?
M8@0A`^LG?@Y((HA4:1KZ$%]#.($Y`NL6X9/&%-H=$C])6!4*E7\H:2.K-S.>
M918OV\**V#R]U-S=NQ=V[H1]^V#O7A@=K>6L:49__[8Y<[;U]N[H[]_&PB5)
M`JB9N[(-:N7*LDS]NNH8FJ;1ST*AP$S?M[U-7KT:=NZ$IYZ"WEZ8.1.JU7%+
MG='T12AT(&&F[\@('#D"?_L;O/8:[-\/`#!IW*K01@```0!)1$%4TH'&2H@@
M"((@2(N !D[N2,7T13VH,^O6P?77TSV<H:T-YLR!6;.L'9L!K.V1[6U"2&UA
M\^[=L',G# ["WKW.MQ Q[VYO[PX63JU<A[E+7\"MV%!M>)J[[%=%418L4.^X
MX]#RY>5=N^077X077X1B$3HZ8/)D5FC*-8CD!*;&A,"!`W#H$+"7%FF:<>ZY
MS[[A#2\!*(T2#T$0!$$0!,DL^=CA&?%D9 1NNPU6KH0=.P``RF7HZX,9,VIO
M)Z+.,0#KDXP]TTM?NKMG#PP.CGL+T:1)!WI[=\R9LZV_?]OTZ;4]K.SF+H5M
MSLP<O [OKMW*9;:NIFF*HM!/.Y(D??"#<+U=/14```$`241!5,DEA^^ZBSSX
MH/KTTZ7147ET%/;NK5]E(OFEOW_;_/F;3CMM4UN;M59!&@_@#H<(@B (@F2/
MGN=?@/:'&RU%"R$]<-^W&RT#$IK#APL_?.3D1Q^;.S14!H#V=NCMA>G3+:/7
ML3N4)$&U"OOV6:\@&AH:EU5W]_:CC_[#M*F;>X[Z0V=G[0U%8VGIDF;+EI!E
M^BE+DJ3(LB3+BBS+LJ0HBJS(ZI@I*\NRJEI'BJK(DB0KBBQ+BBS3Y#0'FB'-
MGQ!B&&:U6CUR9.3@H<,[=BC;7NW:LG4.?8KB- W$R;MKFS8W=W]W860I56
MEF5-4XO%8KE<ZFAO[^QL+[>5"@6-WF1_1H=)```!`$E$051IF+@(@B (@B#C
MZ7G^!4<(SGE31:W,OJ31,B"B%/YR_ZZN#ZR_K_C8?Q6&#TH`,&$"S)P)$R?6
M7O]#QC9M/G($AH9@[U[8MP\.C'_^<<I1NWN.?65JSVL],__65CXT9EA.-Z6C
MJ)D+``"2),L@RY(D2Y:-J\BR(BN*K*BRHJBJ-G904%1-5A15*\B*JBB*HFJR
MHBJ**LDR_91E19+&S'%9-B5)`@DDR;1M6&?HU6IE1!\^1 X.M7?O.W;F@>FG
M[JR.CIB&;IHF(?A*;L3-5 )3;5\E299!4:5B26IKA_8)I&N2T=E=*7= L4U1
M-31]"W^Y'\?\!,E[?>9=_BR#=9L%QN3%= ```0!)1$%4\MX*>9<_[]2I_I]_
M03_J;& 6+R$$T/9-$5SPG!MV;Y=_\ITW__BQ"=4*`$!W-_3T0%?7.*-W>!@&
M!V'_?A@:JCT#23EJYJYC9KUZU+&O3#MJFUH8!D*8*U4><Q!+$O7**D"-7<M?
MJTJRHJBJ+"N*JBJ*S<I55475++M7T21%H::O+"O,W*696(YCL-S'GB<XMGI:
M4[5BL:W=- P@1)9D0Z_2%]74K%^\(88P;"]VM]16T;1BJ5 J%TIEK5"254U1
M5#1Z$01!$ 3))H34C%Y"GTX$M(!3`4W?'+![N_S@'<4G'RX`G P`$R?"M&G0
MWFX9O4>.P($#<. `'#P((R/C$KE)C',```$`241!5![;O^N8WM=ZCMW6,_-O
MIJ&;IF&:]#6^``"2+ -UDU'7KDP-746295E1+0>OK"BJIBBJK*J*JJFJIJBJ
MK*BJ6I M0U>5QI8VTR0`DF7NTORYYBY#DB0B2;*BJII6*+51.2594K6"7JV8
MAF&:!B&$F"8`X/TPA"'!V(/H,EV>H*A:H5 L:<5RL:U=*Q0UK2#)"EVLWVAA
M$01!$ 1!/"#4*V7-=8GU#TD:-'TSS5\W*?_O.?/:H!@"1!9R=,FP:E$E2K
ML&N7M;VM?5OF4EF?T3<X<\ZN8WI?G7;T:WJU8NBZ:>AZU2"F2;N0),E@/:\K
M4]^L+,O,W*7>75FA[ES+J:O,#V$W```!`$E$050HJJRHJE90%$62%4759%E1
M5$629,O<M9[_#6?N.I! DF59U8K4'2W+BJH5*J,CAEXQ#=TP#-,P``" X*._
M"(,^C@X`]$X--7VU0K%0+&O%4K&M;.DMH-V+( B"($B27/J&;GZ$>W\]Q(]@
M,?:J86(:IFD",='OFQ(UT_?2-W3?^^LA^ND7V_ZK(Z8[86!6],"1B2,P,(13
MKD,=.7D*%NUYUA%2B?#2<^KZ^PK//E$S>MO:P#!@QPXX?-BQX'?'Z\]2C^D=
MG#%[Q^1IN_3JJ%ZM5"NCHT<,TS3N_?IUEUSQA?M7W_"!CW_1,G?'GMR5%.7.
MK_R??[[N5N:_56Q.77J@,Y$\C@```0!)1$%4J)IB/=RK6N:N;#EX09+H1E=L
M)3/$W$>72J:J`"5)DF1%U0K%Y?\T_ROW/F4:NFGHIF&,#0PX%B3,C9=?=-UM
M/\Q4H8(BC:VE!WK[AMZFT;2"6BBJ6H&NS)?&EO1'Z(G@TZE#)8^6L#Y$&-/\
M*H1_@> G$2\%B4Q@E4:[!-MS\+SP15"A4%?2")==AZYZ"A-6<G;,J5Y.I_"L
MR00K*EK=(HD@TKB<KN3.)]3XG.#P&V&0%\PMU#DZPNV_AHT<RG+Q@S,I%9P5
M$S+F\C5-TS2_^?G%'UMQ&R&$)K[MABM8S,N_L)H=WW;#%?:O]A#W@5^2%J0Q
M7E_/SN,.% GA%^0>V=HC"BP```$`241!5.,4'7@6(JD"^?VOU!]\I_C2<U;3
MT!V;Z9)FQN3IU<'=__&^)0MFG;"W>]*^FZYXU]]]X!Z].CHR7*'+@PU#I_;Q
MI9^X`22)$*(52W</7//1:_]=&5O,K*C:)[]\MZJJ]&%(15$5K4 M!T6U3 A9
MEN6Q?:KDL56C]-G@:*Y=#A]\XO/3,(,JB:)LFRHFJ+_^[$;ZW?1$S3,'33
M,"Q_+YJ^(5GV_C<,_.>O^7$,P^CHFA0Y>30Q$BG4>G>1+ -(S/%K::^BT@7\
M'WK39-HQH]F]H<8<-_694$:0+?*8QJD6PCE!OJU! WB;2".S[ALV6Y$D
MXN<5>-FU1^!/Y4/0=0%C```!`$E$051)SK>T`VUV2R%14Y"9((@39D(ETI
MJ>Z6X"#O]U,BPX6X90ZYN-=#" `!8@(`,4UBF^XN7?X->G#;#5>P8P`86PX)
M[A!V$)BDU7":OAP]XVND.X*@!*&4SS-RM'*C%1WV(A$JU;-/: _>4?SK)L4>
M:)K6JW=[CM7GSOY#WYNG'COGP(2)AZZ]=.FI;WZX,GID^&!%4921X8.&7C5-
M@YC$-$UK?RG+4%5,TRR5.TW3+'=TT5VI%%53%$U1U7';,LN*HFJ6H4MWJ[*>
M`4[+W'5 WQE,"%$D25$40DBQU$[H*1%SS.A%NS<<IFF6.[LBQQ%)'DV,Y JU
M='+L[@Q=R2]+23;QS0```0!)1$%4LLS6(R1"%J^4,8@VID7(-M0]2J11Q&R%
M!*>2[GQ"Z6I2BNTG1N2L!$6*4Y,1SCVE<0#AP[]1XOEK_/Z5U*U;OL[$D3/F
M.<:_NQVG]&0@\,WK+KO\B]_Z]@U77+;\Z]2))4D2V^?ULL]][8Z;/[GDLU^E
MX>P8`-9\^=,LIOT``%AR>U8M"S[KFPF>?+CPX!W%W=ME1WC_2?KLDRHGG#+2
M/^]0L30J;?[1\/3S*J-'#AD65Y^.!^O3IJZ+HD270;Y'6K/K/HZE6:JLJR
M<L?-G_K8BMM6?_&?/_7E=:9IMG=VFZ9YRS7_N&+-C]FVS%>__XU??>CWG_K?
MI]SZHY>ON%X;+FH```$`241!5/ $0LC:QU]QF+L?>M-D*HQ[=! /\;MO0J,Y
M?F(&,"%DT3D]WWUZ+S'-?WS+-!IGW<]W$$(^<DX/`-SU9.V=K@! `UGX1\[I
MN>O)[8Z8@7%HB.,G^JM(5NPG%NB6TYTV9HC?5XIIFDO?/L<NCV<<K5CVK!!.
M<A9-I*KM^215* U?]_,=B\X^"@"^\]0NNO[94VGM=^L\]=.AC7S<.8#/K4._
M0CDAG+OL?AT*O"9,[OS3(\)\/:/WW9$DR)0^1'8C9Y-,U2TB2#U'8Q$:JT6.
M;A@J9T]C-2.U&A,RMHTK>^VG.>;U-<>O=K1_]?N)'7STVEO6?/G3'[WV%L_X
M+4@4TY?RIX;8```!`$E$052IG6.>9[=G^)<6^Z_1]%6P7+?G(7[1"5*MP&,/
M%M??5[ ;O7-/T_OGZ2>^OG+\J2.*4C7TJJ%7]<KHD4.C9/C(\,&A:F5$KU9D
M6?[ZYQ8!@"1)2S[W-0!05(D04BIW4.<M]?&:IMG1-=DPC([NR89AK+K_&;H6
ME&[+;)IF6[G3-,W+WW'<W;_8(4GR/[YEVCV_VF/W[J:QP,;QDUVCV*_VTB]]
MT^3O/3,(`$#(!]\TZ7M/[R.$?._I?8X,O_NKO?2 Q5ET]E$T&@VAG_PXA!!-
M*P``/6 %L;2<K&A"EM:1A".J.[=0(9Y?65GN4_",P\[:72%^R=E/@E7MJ(3X
MA=;BLG:CW ```0!)1$%4/#,(`!]\XT2'(GFJ%M]N=&BLYXCAF0-_/ G5<007
MC#EPV[TBJ1PY.$[6/9+SQW8^@6(X+B[12D%BDO:<6/PJG-14.U0FGO>/.)W+
M$5.P.#\-1QNU6?&[?(#_Y<F/L$H28=);GR0,3J?SO"JY$W(NFFX)[0G%+9?Z
M\/7/?>1?;KS#-(RER[]QQ\V?9/:J'Q^]]I8[OW*E_;,^<N8:#]/7K0>.65HB
MA)V3V1%/XADM3M')\M=-RCVWE+0"G/IFO7^>,7=^Y<33JL0T#<,P#=W0JY61
MJEX9K58KU<J(7AF%D='*R+!>K9B&#@`?6W$;S6?U%__Y$S?=21<VESN[%553
MM6O06^\```$`241!5()A&!W=4PS#:)\PT3",]LZ)AF&T=4R0967IVV<#P)U/
MO&::IE8L$4*8N4L(D>5Q*Z[YMS "0SB$BFRMLJX]V&E]VK&+2G\=9TN[4@7&
M.?5<.QB_JCG"U8NCC9PIBV?DP#'3+Q-."]8'ODG/I'F*YY^JC]YC21S@:)
M0B*717XFXFL6$N\($?)TB^>72;2<(:2&H\LWC_"O!9%]GF%+YW2W-)+X(9A5
MH"O%+Y.D>F@SP6SC1@N2"2(N> Z<]L40*;AH3XLKCX-[_SSCACL/]<\SZ+:_
M!D8W```!`$E$051N0(A>U8EI&'JU6JT8U8I>':U6*G339D.O2KINZ%4`D!4%
M`+1"21YSWK9/F*BHFF$8G=U3Z+;,S.@M=W:9IEEJ[R2$%$KMLBS=_8N=U&8@
MA,B*ZC9W&2)S_8R035$]-3.RJ(&:GW9'2._61H+41Q,2.;NF&<H"B3NI
MM%;(B(TJGG.<(E)55.P%+4[KC),QNR$_YPBW!C)5L;=^8:D4YITI@F8M^H09
M3B<,Q:X'GC==[')I?IK9=+K^B4Z)]G`-!]S8EA&*9>K59&*J,CU=$CE=$C
ME=$1O3)*W;S$-&5)4C5-+10*I3)U\+9W=K=/F&081D?7Y(ZN2=3<+7=,1UNC
MM0```0!)1$%4N/)]IYNF62IW$$*T8ID04BB6Z/I212W0':VHN1MGSRIW9096
M;];JWPU5Z3B:9A_36881D@>&./*/5EPT8IY1CHB@TH'74<$&342\F AJ8]CI
MFH@'.(JX2 R2FOS%=TNF-PUE\Q80N'L50=7%B:;AZ/+-*1$F2YZ99*2'QH33
M#>-/EG*M[5^]YL.?O/FNC]]P^^5?6+UT^3>6?/:K;F,5G;?Q27Z;*Q&UN]>U
M=M\ST#.:7==%5CXD6'1@5B*IW- W]IBF:1JZ853U:E6OC%2K%?J4+R$F?<FM
MHFJ%0D$M3Y!DB3IXKU]Z(4W^C1^-]"=-NCFY>>UP<`=SVY?='91S:;-ZL`
M``$`241!5#%SEWIWO_?,8-AQP3T+%SEK3@AG6L\Q&,(VA\CI""[=$<_*?8[V
M`[ZHLUL#C'C2IQ-8B6W$_::+=C0\GL5[V<_AY6@)A2"3:H2%K'@6-(3%5(
MS!?]SVBQ"M%(2#2)4&MD)*2A4H2:C\/7,3OXX[[OL[<A87C$^T.4:$3.(G
M0>*3TD":R(B=4C<7^<E^7N+RI]%#L]F WL:?<*&L/H^*5(V6_OIH>N=M:K
M54.O5$='JY410Z_HU2I]J0\A1)(D^LJ6TO;']%E_IRJ:I"B*HDJRK(R]=+?.
M;R%J;O)^XQ!!_"C\Y?[*[$L:+47SD/?ZS+O;K-@ODO17R+G^G4%&F```!
M`$E$053>$:E_$:<+/\*L!Y97IY]-B$E]8*:AFX9A&@8A)N[&G :IO]S(<S5@
MVH7F#YMRR[),%%4%( 0D"<9>4JK(LE)L*QD=7?3EI<S<E669OM %S=WX>/K<
M$ 1!$ 1!$,0!SAAS1^JF+^J$$)(DRQ*1%573) GHJXD`@)JULJ)(DBS+2K%4
MK!;+LB)3HQ<`T-Q-%E17!$$0!$$0!&E*4C=]$4$D299D15%!DF5BFE:0K,BR
M#))E`FN:1@H%-'<1!$$0!$$0!$%"(3UPW[<;+0-"'_=E6('4O)4DF1FY:.XB
M"((@"((@2-- )_^&81B&H8_]1PC!9WW30")8K=G 8?A*8]CCJ A%7P```0!)
M1$%4/'C_[>^[9&DCI$,0I!G ,219\EZ?>9<_RV#=9H&\MT+>Y<\[]:G_!^^_
M_;WOO\PT35W7J]5JI5*I5"K4_D4;+0UPP7-6<!NZ"((@"((@"((T/<SI)<LR
M-7KIOC](LJ#IBR (@B (@B (TC"8W:NJ*OVJ*$JCA6I"T/1%$ 1!$ 1!$ 0)
M1^""39%%RW9_+[-[QVW_@R1'S?2EM4P__6+;?W7$="<,S(H>.#)Q! :&<,IU
MJ",G3\&B/<\ZK,!)83^[P";S:PM^&V6![$O8'#2DGL5'F_J4R$E%#Z+)DW$=
M3G!,XU\@^$GJ-G*V,B)5RF\XSZMJA,9U%Q0Y28[ ND7X!!E<Q7,```$`241!
M5/;0:)-D>PZ>C1X_"5_XF)$A2#\#I_U^^82U7/P0,78"H:9ON5P>'AYF=F]7
M5]?0D/72S>[N;GK@#K&'>P8B=AKC]?6<(;D#14+X!;E5/$[1@6<17^!0B.3,
M[^29NM0E-08A#F)68U*M$"J?9)N>Y1;-[HW9A>NCPQ%D2VE,$\DV0KFA3@UQ
MDTC#N2VW:(T;5E3QZ6,VP;I%`DEDG!31J\!L(R3A"!\_LEL`AS#L.%#RC$-/
M65558D/3- "@)C&-QHX)(2R0X0BT)T0H3M.7HY1\]75'$)0@U)S&,W*T<J,5
M';8OX8P-09J&)NO.T<:T"-F&ND>)-(I0^A#G?D0$Q4O7""2%```!`$E$051)
M5^L&UBT2GYCC9+3;HYY)^/G$D=.=-II^<NX=)&*YI $KG>UQ1:&FK_V@6JVZ
M?[7C"/2,T\K@L[Y-1:C;$XXXM-=Q7 'NT4$\Q$\P1Z$<QZ\[0[>TGH6ZB^#'
ML9=HO^,HF)6GV"G5JCM_3G&>U>B&WRY^K2!2U>#5OC$+9>&"17/RY'0!OXKB
M5(5(H9R00(7Q4S9^CTB5!.=52!. ^I >6+=(?#*E1:%RCN 9S@OT1.RF+R%$
MEF7[@1V10,\X+4X4TY>IG6.>9Y\!\W71,6V-(P._7+?G(7[1T:1-H[@()\(W
M>,!K`.+8TN(A@H6Z8W(F^GZ1/7/F",8Y=TQ,\Q6F$_=P```0!)1$%4[5KU
M$\FON)CMPF\%D?KA*&JT0OU:D%]T*#7P'#'"GIUGDL &Y0OLQFWWBJ1RY. X
M6?=('F>>$2B&X^(2K10D*?Q:`>VH^&#=(I&IC]4JDL1QE:$'@:D\+RN.;#GY
MA)+*'4BB6B[UQ&W(^!DOS*SU# 2!ZFI!/$Q?MQXX%"41PL[)[(@GX5@RT8J.
M!M^RBIEMA)S=PPK?)@D40"0?D>0Q<8LJ.-U/5@Q[SK1I/$=A<7G<EQ;/_#G%
MA17;[Z=08H>ZA"3;"A&N7AP!_"Q>O\B!8Z9@@]:?P+L;3$Y'2-A)DF<2]TT'
M1RE(_8G6"O69FN<=K%LD`HFT9B):Q!FQ1:Q?%GWM8!<```$`241!5-GO5_%;
MI2V"9PWSS1QHO5H2(>*"Y\!I7PR1@HOVM VP=<41KRB1N7Y&R*:HGIH96=1
MS4^[(S3VUH8@]=&$1,ZN=88RG,0T#=A2Z8%UB_")IB%IW"[)B*ZZ;[]R!&N@
MY8)D"N_UWW8](%X+\^Q$F%RFMUXNO:)S45R=RW67$EAN=HQ2/ZA*Q]$T^UC,
M,HR0/##$D7^TXJ(1\XQR1 25#KR."C9H(N+%1% ;PTZ21#S 4<1%$B5:*Z!;
M4@2L6R0L235E?"V**0E'^<,Z`]@B*9%K4$S+I;'D3N LD_PV5R+]@7BM67<'
M>D:S-[_G6HOTB@[,*EH^D>&<B&?'CG!GRYVZ.=*D```!`$E$051/M+/F"Q8H
M7MCF$#D=?CT$UI+(.=H/^*+&K]7 XAS#O;@:1$ON)VW87A!!9K_JY?3WL +$
MJ83XB"TBI#3>V<87)HV[.=GI"XX)3."L(_#:BKBIF;YN90T\MH?XA?OA-X[S
M0T1*L2M*@D7'ER=9`L_.WBY^=>)NNVAG%*%=/ L55$+/_ 63BQ?AEY"C8")Q
M`M/&"1'4"L$(@:<CF"I06G=RD::/T#31U"#"4!"M0OS*XL<,E7]@SDEI7:@J
M%1R3D9@T2A_B:P@G,$=@W2)\TI@VNT/BA%8E< ```'%)1$%4)PFK0J'RCZG2
MH6HIVD733;(NV3CS1G<@=FTWJ;_<R-/WF':A"!(-3Y\;@B (@B (@CC &6/N
M2-WT19U <@2J*X(@"((@"((T)?B:8P1!$ 1!$ 1!$*3)D1ZX[]N-E@%!$ 1!
>$ 1!$ 1!4N3_`XW]UR/Z%RP)`````$E%3D2N0F""
`
end


Posted by James Matthews on September 6, 2007, 4:57 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
hmm I have never seen it! But i would jump to hacker right away!

--

http://www.goldwatches.com/
http://www.jewelerslounge.com/
>I have seen one specific box in an environment which I tested which has the
>IUSR_%MACHINENAME% with ADMIN rights. I have included a PNG file and if
>this is blocked I have added a link.
>
> http://www.spisat.com/images/aa.png
>
> Has anyone seen something like this?
>
>


Posted by Roger Abell [MVP] on September 6, 2007, 7:13 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
What is your actual question.
Can the Iusr_ be made member of Administrators? Sure.
Is it that way without someone making it so? Of course not.
Should someone do that? No.
Have I seen someone do that? Yes. People that do not
know or have time to find out why something is not working
often "cure" the issues by granting admin, and yes, I have
seen an "admin" do that with Iusr_ before.

Roger

>I have seen one specific box in an environment which I tested which has the
>IUSR_%MACHINENAME% with ADMIN rights. I have included a PNG file and if
>this is blocked I have added a link.
>
> http://www.spisat.com/images/aa.png
>
> Has anyone seen something like this?
>
>



Posted by Mervin Pearce [SACS] on September 6, 2007, 11:35 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Thanks, I believe this was a server rename and the IWAM_.. and IUSR_..
accounts made administrators due to some things not working after this
change. I have another 52 domains in this environment which this was not
the case and a single finding was interesting.

The question was just a global, have you seen this with some of the security
reviews that we are performing?

Best Regards
Mervin



Similar ThreadsPosted
Re: Anonymous (NULL user) access to a Share July 30, 2005, 11:21 pm
anonymous user November 18, 2005, 9:44 pm
Restrict Anonymous access November 5, 2006, 5:05 am
DCOM - Allowing Remote Anonymous Access January 28, 2006, 7:46 pm
Allowing outside users access to company Intranet (anonymous) January 16, 2007, 10:39 am
Allowing access to admin$ on NT4 -- getting "Access is Denied" November 17, 2005, 12:01 pm
Shares, Named Pipes, and Registry for Anonymous Remote Access February 23, 2007, 2:24 am
Question on - Network Access: Do not allow anonymous enumeration of SAM accounts and shares April 3, 2008, 9:48 am
restricting admin access to network September 15, 2005, 9:25 am
Local Admin access through Active Directory April 6, 2006, 7:43 pm

The site map in XML format XML site map

Contact Us | Privacy Policy