{\rtf1\mac \deff4\deflang1033{\fonttbl{\f4\fnil\fcharset77\fprq2 Times New Roman;}{\f5\fnil\fcharset77\fprq2 Arial;}{\f11\fnil\fcharset77\fprq2 Courier New;}}{\colortbl;\red0\green0\blue0;\red0\green0\blue212;
\red2\green171\blue234;\red31\green183\blue20;\red242\green8\blue132;\red221\green8\blue6;\red252\green243\blue5;\red255\green255\blue255;\red0\green0\blue128;\red0\green128\blue128;\red0\green100\blue17;\red128\green0\blue128;\red128\green0\blue0;
\red128\green128\blue0;\red128\green128\blue128;\red192\green192\blue192;}{\stylesheet{\widctlpar \f4\fs20 \snext0 Normal;}{\s1\qc\keepn\widctlpar \b\f5\fs16 \sbasedon0\snext0 heading 1;}{\*\cs10 \additive Default Paragraph Font;}{\s42\widctlpar 
\f11\fs20 \sbasedon0\snext42 Plain Text;}}{\info{\title Radio test}{\author Jon Berryhill}{\operator Jon Berryhill}{\creatim\yr1997\mo12\dy7\hr12\min55}{\revtim\yr1997\mo12\dy7\hr12\min55}{\version2}{\edmins6}{\nofpages16406}{\nofwords5}{\nofchars2878}
{\vern49235}}\margl720\margr720\margt720\margb720 \widowctrl\ftnbj\aenddoc\hyphhotz0\noextrasprl\prcolbl\cvmme\sprsspbf\brkfrm\swpbdr\hyphcaps0\fracwidth \fet0\sectd \linex0 {\*\pnseclvl1\pnucrm\pnstart1\pnindent720\pnhang{\pntxta .}}{\*\pnseclvl2
\pnucltr\pnstart1\pnindent720\pnhang{\pntxta .}}{\*\pnseclvl3\pndec\pnstart1\pnindent720\pnhang{\pntxta .}}{\*\pnseclvl4\pnlcltr\pnstart1\pnindent720\pnhang{\pntxta )}}{\*\pnseclvl5\pndec\pnstart1\pnindent720\pnhang{\pntxtb (}{\pntxta )}}{\*\pnseclvl6
\pnlcltr\pnstart1\pnindent720\pnhang{\pntxtb (}{\pntxta )}}{\*\pnseclvl7\pnlcrm\pnstart1\pnindent720\pnhang{\pntxtb (}{\pntxta )}}{\*\pnseclvl8\pnlcltr\pnstart1\pnindent720\pnhang{\pntxtb (}{\pntxta )}}{\*\pnseclvl9\pnlcrm\pnstart1\pnindent720\pnhang
{\pntxtb (}{\pntxta )}}\pard\plain \widctlpar \f4\fs20 {\fs24\cchs0 Berryhill Computer Forensics
\par P.O. Box 1674
\par Benicia, CA 94510
\par Phone:\tab (888) 745-1405
\par Fax: \tab (707) 745-4100
\par 
\par email: jberryhill@computerforensics.com
\par 
\par 
\par If you have any questions about this test, please contact us.
\par 
\par How damaging is that trunk mounted radio to computer evidence?
\par 
\par }\pard \sb60\sa60\widctlpar {\i\fs24 Special thanks to Sgt Fred Deltorchio and the Benicia (CA) Police Department fortheir assistance with this test.}{\fs24 
\par Recently we have seen several alarming warnings about the dangers of placing computer evidence in the trunk of a police car containing a trunk-mounted radio. These articles claimed that the 
RF energy of the nearby radio would corrupt the computer evidence. We found these claims interesting, so we decided to conduct a test. The results showed absolutely zero corruption of magnetic media. While this test only used one type of trunk-mounted pol
ice radio, the results may be similar for other types of modern radios. We would be interested to hear from anyone who believes they have had computer evidence corrupted by a trunk-mounted radio. In the future we plan to conduct similar tests with other b
rands of radios operating in other frequency ranges.
\par The tested media was four 3.5" 1.44MB floppy disks and one Quantum ProDrive 80MB SCSI hard drive. Using a version of a disk duplication program which is exclusively for law enforcement use, we created four identical floppy disks. We then ran a program whi
ch for each disk generated a CRC value for each file on the disk. We placed two disks each in paper envelopes. The hard disk was formatted and approximately 36 megabytes of data was written to it. We then r
an the same CRC generating program for the hard disk. The hard disk was placed in an anti-static bag and packed in paper in a cardboard box.
\par One envelope containing the 3.5" disks was placed directly between the transmitter/receiver and the mounting bracket of a GE MVS VHF trunk-mounted police radio (mounted on the side wall of the trunk). This radio operates in the 150MHz band. The second env
elope was placed on the floor of the trunk opposite the radio. The box containing the hard disk was placed in the center of the trunk. The police car also had a trunk-mounted cellular phone transmitter/receiver mounted next to the VHF radio.
\par All disks remained in the trunk for 3 days. The police car was used almost continuously during that time. After 3 days the disks were removed and an analysis conducted to see if any information had been changed or corrupted.
\par }{\b\fs24 Conclusion:}{\fs24  The contents of all four floppy disks and the hard disk were unchanged in any way. The CRC values of all files were checked both before and after the
 test period. Even the disks that were placed directly against the transmitter/receiver were not affected. We do invite others to conduct their own carefully monitored tests and would be interested in compiling the results with different brands and freque
ncy trunk-mounted radios. While this test does not alleviate the necessity to properly safeguard the integrity of computer evidence, it does appear that magnetic media is less corruptible than some believe.}
\par \pard \widctlpar {\fs24 \page }{\fs24\cchs0 Test specifics: The software used in this test was }{\b\i\fs24\cchs0 DCOPYX.EXE}{\fs24\cchs0  (to create the duplicate floppy disks) written by Special Agent Andrew Fried of the IRS and }{\b\i\fs24\cchs0 
DISKCAT.EXE}{\fs24\cchs0  (to create the information in the tables below) written by Special Agent Dan Mar}{\fs24 es of IRS. Special Thanks to}{\fs24\cchs0  Sgt}{\fs24 .}{\fs24\cchs0  Fred Deltorchio of t}{\fs24 he Benicia 
(CA) Police Department for the use of the trun}{\fs24\cchs0 k of his patrol car.
\par 
\par The test was s}{\fs24 tarted at 12:30pm on 2 December}{\fs24\cchs0  1997. The disks remained in the trunk fo}{\fs24 r 3 days. At noon on 5 December}{\fs24\cchs0  1997 the disks were removed and an analysis was done.
\par 
\par Switches for the listings below were done with }{\b\f5\fs24\cchs0 diskcat \endash d a \endash c \endash o \{output file name\}}{\cchs0 
\par 
\par 
\par }\trowd \trgaph108\trleft-108\trkeep \clbrdrt\brdrs\brdrw15 \clbrdrl\brdrs\brdrw15 \clbrdrb\brdrs\brdrw15 \clbrdrr\brdrs\brdrw15 \cellx5400\clbrdrt\brdrs\brdrw15 \clbrdrl\brdrs\brdrw15 \clbrdrb\brdrs\brdrw15 \clbrdrr\brdrs\brdrw15 \cellx10908 \pard 
\qc\widctlpar\intbl {\b\f5\cchs0 Before the test}{\b\f5\fs14\cchs0 \cell }\pard\plain \s42\qc\widctlpar\intbl \f11\fs20 {\b\f5\cchs0 After 3 days in the trunk of a police car}{\b\f5\fs14\cchs0 \cell }\pard\plain \widctlpar\intbl \f4\fs20 {\b\f5\cchs0 
\row }\trowd \trgaph108\trleft-108\trkeep \clbrdrt\brdrs\brdrw15 \clbrdrl\brdrs\brdrw15 \clbrdrb\brdrs\brdrw15 \clbrdrr\brdrs\brdrw15 \cellx5400\clbrdrt\brdrs\brdrw15 \clbrdrl\brdrs\brdrw15 \clbrdrb\brdrs\brdrw15 \clbrdrr\brdrs\brdrw15 \cellx10908 \pard 
\widctlpar\intbl {\f11\fs16\cchs0 
\par Disk #1
\par }\pard\plain \s42\widctlpar\intbl \f11\fs20 {\fs16\cchs0           22  M AUTOEXEC.BAT 99F06F75 A:\\
\par          540  M BOOT.SPS     D9B01428 A:\\
\par           81  M CHKLIST.MS   9F170544 A:\\
\par        54645  M COMMAND.COM  1131ADD3 A:\\
\par       188304  M DS2.EXE      D4E42325 A:\\
\par         1315  M HDSENTRY.COM 459ABFC6 A:\\
\par        40774RHMSIO.SYS       A7EA3BE4 A:\\
\par          178  M LIST.DOC     2B6B6251 A:\\
\par        38138RHMSMSDOS.SYS    4CC2FC77 A:\\
\par        29065  M PARTNTBL.EXE 5905C7CC A:\\
\par          768  M READ.ME      2D904B8B A:\\
\par        19346  M REGISTER.EXE 01853827 A:\\
\par        13371  M RESTPART.EXE E706FA07 A:\\
\par        57707  M SBMASTER.EXE 4F9B0009 A:\\
\par          967  M SBMASTER.PIF DA7FA4BD A:\\
\par        23537  M SBSLAVE.EXE  56ED3EFA A:\\
\par        18393  M SB_AUDIT     33EA3FD2 A:\\
\par        10376  M WRBLK.EXE    F03DA321 A:\\
\par 
\par }\pard\plain \widctlpar\intbl \f4\fs20 {\f11\fs16\cchs0      497,527 bytes in 18 files  0 directories\cell }\pard\plain \s42\widctlpar\intbl \f11\fs20 {\fs16\cchs0 
\par Disk #1
\par           22  M AUTOEXEC.BAT 99F06F75 A:\\
\par          540  M BOOT.SPS     D9B01428 A:\\
\par           81  M CHKLIST.MS   9F170544 A:\\
\par        54645  M COMMAND.COM  1131ADD3 A:\\
\par       188304  M DS2.EXE      D4E42325 A:\\
\par         1315  M HDSENTRY.COM 459ABFC6 A:\\
\par        40774RHMSIO.SYS       A7EA3BE4 A:\\
\par          178  M LIST.DOC     2B6B6251 A:\\
\par        38138RHMSMSDOS.SYS    4CC2FC77 A:\\
\par        29065  M PARTNTBL.EXE 5905C7CC A:\\
\par          768  M READ.ME      2D904B8B A:\\
\par        19346  M REGISTER.EXE 01853827 A:\\
\par        13371  M RESTPART.EXE E706FA07 A:\\
\par        57707  M SBMASTER.EXE 4F9B0009 A:\\
\par          967  M SBMASTER.PIF DA7FA4BD A:\\
\par        23537  M SBSLAVE.EXE  56ED3EFA A:\\
\par        18393  M SB_AUDIT     33EA3FD2 A:\\
\par        10376  M WRBLK.EXE    F03DA321 A:\\
\par 
\par }\pard\plain \widctlpar\intbl \f4\fs20 {\f11\fs16\cchs0      497,527 bytes in 18 files  0 directories\cell }\pard \widctlpar\intbl {\cchs0 \row }\pard \widctlpar\intbl {\f11\fs16\cchs0 
\par Disk #2
\par }\pard\plain \s42\widctlpar\intbl \f11\fs20 {\fs16\cchs0           22  M AUTOEXEC.BAT 99F06F75 A:\\
\par          540  M BOOT.SPS     D9B01428 A:\\
\par           81  M CHKLIST.MS   9F170544 A:\\
\par        54645  M COMMAND.COM  1131ADD3 A:\\
\par       188304  M DS2.EXE      D4E42325 A:\\
\par         1315  M HDSENTRY.COM 459ABFC6 A:\\
\par        40774RHMSIO.SYS       A7EA3BE4 A:\\
\par          178  M LIST.DOC     2B6B6251 A:\\
\par        38138RHMSMSDOS.SYS    4CC2FC77 A:\\
\par        29065  M PARTNTBL.EXE 5905C7CC A:\\
\par          768  M READ.ME      2D904B8B A:\\
\par        19346  M REGISTER.EXE 01853827 A:\\
\par        13371  M RESTPART.EXE E706FA07 A:\\
\par        57707  M SBMASTER.EXE 4F9B0009 A:\\
\par          967  M SBMASTER.PIF DA7FA4BD A:\\
\par        23537  M SBSLAVE.EXE  56ED3EFA A:\\
\par        18393  M SB_AUDIT     33EA3FD2 A:\\
\par        10376  M WRBLK.EXE    F03DA321 A:\\
\par 
\par }\pard\plain \widctlpar\intbl \f4\fs20 {\f11\fs16\cchs0      497,527 bytes in 18 files  0 directories\cell }\pard\plain \s42\widctlpar\intbl \f11\fs20 {\fs16\cchs0 
\par Disk #2
\par           22  M AUTOEXEC.BAT 99F06F75 A:\\
\par          540  M BOOT.SPS     D9B01428 A:\\
\par           81  M CHKLIST.MS   9F170544 A:\\
\par        54645  M COMMAND.COM  1131ADD3 A:\\
\par       188304  M DS2.EXE      D4E42325 A:\\
\par         1315  M HDSENTRY.COM 459ABFC6 A:\\
\par        40774RHMSIO.SYS       A7EA3BE4 A:\\
\par          178  M LIST.DOC     2B6B6251 A:\\
\par        38138RHMSMSDOS.SYS    4CC2FC77 A:\\
\par        29065  M PARTNTBL.EXE 5905C7CC A:\\
\par          768  M READ.ME      2D904B8B A:\\
\par        19346  M REGISTER.EXE 01853827 A:\\
\par        13371  M RESTPART.EXE E706FA07 A:\\
\par        57707  M SBMASTER.EXE 4F9B0009 A:\\
\par          967  M SBMASTER.PIF DA7FA4BD A:\\
\par        23537  M SBSLAVE.EXE  56ED3EFA A:\\
\par        18393  M SB_AUDIT     33EA3FD2 A:\\
\par        10376  M WRBLK.EXE    F03DA321 A:\\
\par 
\par }\pard\plain \widctlpar\intbl \f4\fs20 {\f11\fs16\cchs0      497,527 bytes in 18 files  0 directories\cell }\pard \widctlpar\intbl {\cchs0 \row }\pard \widctlpar\intbl {\f11\fs16\cchs0 
\par Disk #3
\par }\pard\plain \s42\widctlpar\intbl \f11\fs20 {\fs16\cchs0           22  M AUTOEXEC.BAT 99F06F75 A:\\
\par          540  M BOOT.SPS     D9B01428 A:\\
\par           81  M CHKLIST.MS   9F170544 A:\\
\par        54645  M COMMAND.COM  1131ADD3 A:\\
\par       188304  M DS2.EXE      D4E42325 A:\\
\par         1315  M HDSENTRY.COM 459ABFC6 A:\\
\par        40774RHMSIO.SYS       A7EA3BE4 A:\\
\par          178  M LIST.DOC     2B6B6251 A:\\
\par        38138RHMSMSDOS.SYS    4CC2FC77 A:\\
\par        29065  M PARTNTBL.EXE 5905C7CC A:\\
\par          768  M READ.ME      2D904B8B A:\\
\par        19346  M REGISTER.EXE 01853827 A:\\
\par        13371  M RESTPART.EXE E706FA07 A:\\
\par        57707  M SBMASTER.EXE 4F9B0009 A:\\
\par          967  M SBMASTER.PIF DA7FA4BD A:\\
\par        23537  M SBSLAVE.EXE  56ED3EFA A:\\
\par        18393  M SB_AUDIT     33EA3FD2 A:\\
\par        10376  M WRBLK.EXE    F03DA321 A:\\
\par 
\par }\pard\plain \widctlpar\intbl \f4\fs20 {\f11\fs16\cchs0      497,527 bytes in 18 files  0 directories\cell }\pard\plain \s42\widctlpar\intbl \f11\fs20 {\fs16\cchs0 
\par Disk #3
\par           22  M AUTOEXEC.BAT 99F06F75 A:\\
\par          540  M BOOT.SPS     D9B01428 A:\\
\par           81  M CHKLIST.MS   9F170544 A:\\
\par        54645  M COMMAND.COM  1131ADD3 A:\\
\par       188304  M DS2.EXE      D4E42325 A:\\
\par         1315  M HDSENTRY.COM 459ABFC6 A:\\
\par        40774RHMSIO.SYS       A7EA3BE4 A:\\
\par          178  M LIST.DOC     2B6B6251 A:\\
\par        38138RHMSMSDOS.SYS    4CC2FC77 A:\\
\par        29065  M PARTNTBL.EXE 5905C7CC A:\\
\par          768  M READ.ME      2D904B8B A:\\
\par        19346  M REGISTER.EXE 01853827 A:\\
\par        13371  M RESTPART.EXE E706FA07 A:\\
\par        57707  M SBMASTER.EXE 4F9B0009 A:\\
\par          967  M SBMASTER.PIF DA7FA4BD A:\\
\par        23537  M SBSLAVE.EXE  56ED3EFA A:\\
\par        18393  M SB_AUDIT     33EA3FD2 A:\\
\par        10376  M WRBLK.EXE    F03DA321 A:\\
\par 
\par }\pard\plain \widctlpar\intbl \f4\fs20 {\f11\fs16\cchs0      497,527 bytes in 18 files  0 directories\cell }\pard \widctlpar\intbl {\cchs0 \row }\trowd \trgaph108\trleft-108\trkeep \clbrdrt\brdrs\brdrw15 \clbrdrl\brdrs\brdrw15 \clbrdrb\brdrs\brdrw15 
\clbrdrr\brdrs\brdrw15 \cellx5400\clbrdrt\brdrs\brdrw15 \clbrdrl\brdrs\brdrw15 \clbrdrb\brdrs\brdrw15 \clbrdrr\brdrs\brdrw15 \cellx10908 \pard\plain \s42\widctlpar\intbl \f11\fs20 {\fs16\cchs0 
\par Disk #4
\par           22  M AUTOEXEC.BAT 99F06F75 A:\\
\par          540  M BOOT.SPS     D9B01428 A:\\
\par           81  M CHKLIST.MS   9F170544 A:\\
\par        54645  M COMMAND.COM  1131ADD3 A:\\
\par       188304  M DS2.EXE      D4E42325 A:\\
\par         1315  M HDSENTRY.COM 459ABFC6 A:\\
\par        40774RHMSIO.SYS       A7EA3BE4 A:\\
\par          178  M LIST.DOC     2B6B6251 A:\\
\par        38138RHMSMSDOS.SYS    4CC2FC77 A:\\
\par        29065  M PARTNTBL.EXE 5905C7CC A:\\
\par          768  M READ.ME      2D904B8B A:\\
\par        19346  M REGISTER.EXE 01853827 A:\\
\par        13371  M RESTPART.EXE E706FA07 A:\\
\par        57707  M SBMASTER.EXE 4F9B0009 A:\\
\par          967  M SBMASTER.PIF DA7FA4BD A:\\
\par        23537  M SBSLAVE.EXE  56ED3EFA A:\\
\par        18393  M SB_AUDIT     33EA3FD2 A:\\
\par        10376  M WRBLK.EXE    F03DA321 A:\\
\par 
\par }\pard\plain \widctlpar\intbl \f4\fs20 {\f11\fs16\cchs0      497,527 bytes in 18 files  0 directories\cell }\pard\plain \s42\widctlpar\intbl \f11\fs20 {\fs16\cchs0 
\par Disk #4
\par           22  M AUTOEXEC.BAT 99F06F75 A:\\
\par          540  M BOOT.SPS     D9B01428 A:\\
\par           81  M CHKLIST.MS   9F170544 A:\\
\par        54645  M COMMAND.COM  1131ADD3 A:\\
\par       188304  M DS2.EXE      D4E42325 A:\\
\par         1315  M HDSENTRY.COM 459ABFC6 A:\\
\par        40774RHMSIO.SYS       A7EA3BE4 A:\\
\par          178  M LIST.DOC     2B6B6251 A:\\
\par        38138RHMSMSDOS.SYS    4CC2FC77 A:\\
\par        29065  M PARTNTBL.EXE 5905C7CC A:\\
\par          768  M READ.ME      2D904B8B A:\\
\par        19346  M REGISTER.EXE 01853827 A:\\
\par        13371  M RESTPART.EXE E706FA07 A:\\
\par        57707  M SBMASTER.EXE 4F9B0009 A:\\
\par          967  M SBMASTER.PIF DA7FA4BD A:\\
\par        23537  M SBSLAVE.EXE  56ED3EFA A:\\
\par        18393  M SB_AUDIT     33EA3FD2 A:\\
\par        10376  M WRBLK.EXE    F03DA321 A:\\
\par 
\par }\pard\plain \widctlpar\intbl \f4\fs20 {\f11\fs16\cchs0      497,527 bytes in 18 files  0 directories\cell }\pard \widctlpar\intbl {\cchs0 \row }\pard \widctlpar \page {\cchs0 
\par }\pard \widctlpar {\cchs0 An 80MB SCSI hard disk was formatted and the following files }written{\cchs0  to it. The disk was checked with DISKCA}T which includes a CRC check. 
\par \pard \widctlpar {\cchs0 
\par }\trowd \trgaph108\trleft-108\trkeep \clbrdrt\brdrs\brdrw15 \clbrdrl\brdrs\brdrw15 \clbrdrb\brdrs\brdrw15 \clbrdrr\brdrs\brdrw15 \cellx5400\clbrdrt\brdrs\brdrw15 \clbrdrl\brdrs\brdrw15 \clbrdrb\brdrs\brdrw15 \clbrdrr\brdrs\brdrw15 \cellx10908 \pard\plain 
\s42\qc\widctlpar\intbl \f11\fs20 {\b\f5\fs16\cchs0 Hard disk before test
\par }\pard \s42\widctlpar\intbl {\fs16\cchs0 
\par 
\par           25  M AUTOEXEC.BAT 703A19A1 E:\\WIN95\\
\par        92870  M COMMAND.COM  879A379D E:\\WIN95\\
\par           40  M CONFIG.SYS   1FD1F070 E:\\WIN95\\
\par        27094  M COUNTRY.SYS  09A098EC E:\\WIN95\\
\par          496  M DELTEMP.COM  4AC39366 E:\\WIN95\\
\par        17175  M DISPLAY.SYS  2EC60231 E:\\WIN95\\
\par        72246  M DOSSETUP.BIN 4D8DF1B7 E:\\WIN95\\
\par        58870  M EGA.CPI      12249FE6 E:\\WIN95\\
\par        58870  M EGA2.CPI     B32C2E4A E:\\WIN95\\
\par        48973  M EGA3.CPI     D79BA821 E:\\WIN95\\
\par        46656  M EXTRACT.EXE  58BCF92B E:\\WIN95\\
\par        59128  M FDISK.EXE    C9097715 E:\\WIN95\\
\par        40135  M FORMAT.COM   237DC806 E:\\WIN95\\
\par        32935  M HIMEM.SYS    C275B94A E:\\WIN95\\
\par       165057  M IFSMGR.VXD   DEB2CF2F E:\\WIN95\\
\par       223148  M IO.SYS       989D1D8C E:\\WIN95\\
\par        19927  M KEYB.COM     485EFC30 E:\\WIN95\\
\par        34566  M KEYBOARD.SYS 711AD939 E:\\WIN95\\
\par        31942  M KEYBRD2.SYS  6071A325 E:\\WIN95\\
\par         4222  M MAPLE.ADM    71AD92CE E:\\WIN95\\
\par       441905  M MINI.CAB     E505CC1D E:\\WIN95\\
\par        29191  M MODE.COM     F8759F6C E:\\WIN95\\
\par         3360  M MSBATCH.INF  5F15C079 E:\\WIN95\\
\par        25473  M MSCDEX.EXE   35C1461C E:\\WIN95\\
\par        40951  M MSDISP.INF   A6BE9299 E:\\WIN95\\
\par        40877  M MSDISP.RTL   0775435F E:\\WIN95\\
\par            4  M MSDOS.SYS    6B58710F E:\\WIN95\\
\par        36145  M MSMAIL.INF   814D7492 E:\\WIN95\\
\par        36068  M MSMAIL.RTL   3919A562 E:\\WIN95\\
\par         1188  M MSNDS.CNT    87E79454 E:\\WIN95\\
\par        45001  M MSNDS.HLP    9DAF36DC E:\\WIN95\\
\par         1630  M NDSBATCH.TXT 28E7E16D E:\\WIN95\\
\par        12137  M NDSCLI.INF   65FD34B6 E:\\WIN95\\
\par        12349  M NDSCLI.SBS   448BA34A E:\\WIN95\\
\par        17357  M NDSNP.HLP    4A70FB84 E:\\WIN95\\
\par        41984  M NDSPP.NW4    C30083BB E:\\WIN95\\
\par         3216  M NETWARE.NW4  BE339C1F E:\\WIN95\\
\par        31744  M NWAPI32.NW4  7D38B24A E:\\WIN95\\
\par        84480  M NWLSPROC.NW4 82B21A04 E:\\WIN95\\
\par         7424  M NWNDS.DLL    9C1322D3 E:\\WIN95\\
\par       136704  M NWNP32.NW4   3BD40E67 E:\\WIN95\\
\par       174594  M NWREDIR.NW4  C3707F7B E:\\WIN95\\
\par         3270  M OEMSETUP.BIN 695BCF00 E:\\WIN95\\
\par        78668  M OEMSETUP.EXE BD9C36DD E:\\WIN95\\
\par        10102  M PCMCIA.INF   22146225 E:\\WIN95\\
\par         8934  M PCMCIA.RTL   08B8296B E:\\WIN95\\
\par       236544  M PRECOPY1.CAB 55CA5397 E:\\WIN95\\
\par      1213952  M PRECOPY2.CAB FCDAA974 E:\\WIN95\\
\par       354015  M PRECOPY3.CAB 6A889910 E:\\WIN95\\
\par         8014  M README.TXT   BD9D7AD4 E:\\WIN95\\
\par           34  M RUNSETUP.BAT ADB90DCA E:\\WIN95\\
\par          920  M SAVE32.COM   6D59C367 E:\\WIN95\\
\par       134738  M SCANDISK.EXE 05DA44F8 E:\\WIN95\\
\par          995  M SCANDISK.PIF A0D8C9BF E:\\WIN95\\
\par         4438  M SCANPROG.EXE 28249BEE E:\\WIN95\\
\par         5184  M SETUP.EXE    226CAB12 E:\\WIN95\\
\par        34612  M SETUP.TXT    618E7F42 E:\\WIN95\\
\par        55860  M SETUPC.INF   ACAE4B01 E:\\WIN95\\
\par        55858  M SETUPC.RTL   9EB9A69A E:\\WIN95\\
\par           18  M SETUPNM.BAT  838D0AC4 E:\\WIN95\\
\par        45145  M SMARTDRV.EXE 36B19C9B E:\\WIN95\\
\par         5567  M SUPPORT.TXT  4643AC77 E:\\WIN95\\
\par          537  M WB16OFF.EXE  1DB8D362 E:\\WIN95\\
\par       843264  M WIN95_03.CAB 54EC95C9 E:\\WIN95\\
\par   
\par }\pard\plain \widctlpar\intbl \f4\fs20 {\cchs0 \cell }\pard\plain \s1\qc\keepn\widctlpar\intbl \b\f5\fs16 {\cchs0 Hard disk after 3 days in trunk of police car
\par }\pard\plain \widctlpar\intbl \f4\fs20 {\f11\fs16\cchs0 
\par 
\par }\pard\plain \s42\widctlpar\intbl \f11\fs20 {\fs16\cchs0           25  M AUTOEXEC.BAT 703A19A1 E:\\WIN95\\
\par        92870  M COMMAND.COM  879A379D E:\\WIN95\\
\par           40  M CONFIG.SYS   1FD1F070 E:\\WIN95\\
\par        27094  M COUNTRY.SYS  09A098EC E:\\WIN95\\
\par          496  M DELTEMP.COM  4AC39366 E:\\WIN95\\
\par        17175  M DISPLAY.SYS  2EC60231 E:\\WIN95\\
\par        72246  M DOSSETUP.BIN 4D8DF1B7 E:\\WIN95\\
\par        58870  M EGA.CPI      12249FE6 E:\\WIN95\\
\par        58870  M EGA2.CPI     B32C2E4A E:\\WIN95\\
\par        48973  M EGA3.CPI     D79BA821 E:\\WIN95\\
\par        46656  M EXTRACT.EXE  58BCF92B E:\\WIN95\\
\par        59128  M FDISK.EXE    C9097715 E:\\WIN95\\
\par        40135  M FORMAT.COM   237DC806 E:\\WIN95\\
\par        32935  M HIMEM.SYS    C275B94A E:\\WIN95\\
\par       165057  M IFSMGR.VXD   DEB2CF2F E:\\WIN95\\
\par       223148  M IO.SYS       989D1D8C E:\\WIN95\\
\par        19927  M KEYB.COM     485EFC30 E:\\WIN95\\
\par        34566  M KEYBOARD.SYS 711AD939 E:\\WIN95\\
\par        31942  M KEYBRD2.SYS  6071A325 E:\\WIN95\\
\par         4222  M MAPLE.ADM    71AD92CE E:\\WIN95\\
\par       441905  M MINI.CAB     E505CC1D E:\\WIN95\\
\par        29191  M MODE.COM     F8759F6C E:\\WIN95\\
\par         3360  M MSBATCH.INF  5F15C079 E:\\WIN95\\
\par        25473  M MSCDEX.EXE   35C1461C E:\\WIN95\\
\par        40951  M MSDISP.INF   A6BE9299 E:\\WIN95\\
\par        40877  M MSDISP.RTL   0775435F E:\\WIN95\\
\par            4  M MSDOS.SYS    6B58710F E:\\WIN95\\
\par        36145  M MSMAIL.INF   814D7492 E:\\WIN95\\
\par        36068  M MSMAIL.RTL   3919A562 E:\\WIN95\\
\par         1188  M MSNDS.CNT    87E79454 E:\\WIN95\\
\par        45001  M MSNDS.HLP    9DAF36DC E:\\WIN95\\
\par         1630  M NDSBATCH.TXT 28E7E16D E:\\WIN95\\
\par        12137  M NDSCLI.INF   65FD34B6 E:\\WIN95\\
\par        12349  M NDSCLI.SBS   448BA34A E:\\WIN95\\
\par        17357  M NDSNP.HLP    4A70FB84 E:\\WIN95\\
\par        41984  M NDSPP.NW4    C30083BB E:\\WIN95\\
\par         3216  M NETWARE.NW4  BE339C1F E:\\WIN95\\
\par        31744  M NWAPI32.NW4  7D38B24A E:\\WIN95\\
\par        84480  M NWLSPROC.NW4 82B21A04 E:\\WIN95\\
\par         7424  M NWNDS.DLL    9C1322D3 E:\\WIN95\\
\par       136704  M NWNP32.NW4   3BD40E67 E:\\WIN95\\
\par       174594  M NWREDIR.NW4  C3707F7B E:\\WIN95\\
\par         3270  M OEMSETUP.BIN 695BCF00 E:\\WIN95\\
\par        78668  M OEMSETUP.EXE BD9C36DD E:\\WIN95\\
\par        10102  M PCMCIA.INF   22146225 E:\\WIN95\\
\par         8934  M PCMCIA.RTL   08B8296B E:\\WIN95\\
\par       236544  M PRECOPY1.CAB 55CA5397 E:\\WIN95\\
\par      1213952  M PRECOPY2.CAB FCDAA974 E:\\WIN95\\
\par       354015  M PRECOPY3.CAB 6A889910 E:\\WIN95\\
\par         8014  M README.TXT   BD9D7AD4 E:\\WIN95\\
\par           34  M RUNSETUP.BAT ADB90DCA E:\\WIN95\\
\par          920  M SAVE32.COM   6D59C367 E:\\WIN95\\
\par       134738  M SCANDISK.EXE 05DA44F8 E:\\WIN95\\
\par          995  M SCANDISK.PIF A0D8C9BF E:\\WIN95\\
\par         4438  M SCANPROG.EXE 28249BEE E:\\WIN95\\
\par         5184  M SETUP.EXE    226CAB12 E:\\WIN95\\
\par        34612  M SETUP.TXT    618E7F42 E:\\WIN95\\
\par        55860  M SETUPC.INF   ACAE4B01 E:\\WIN95\\
\par        55858  M SETUPC.RTL   9EB9A69A E:\\WIN95\\
\par           18  M SETUPNM.BAT  838D0AC4 E:\\WIN95\\
\par        45145  M SMARTDRV.EXE 36B19C9B E:\\WIN95\\
\par         5567  M SUPPORT.TXT  4643AC77 E:\\WIN95\\
\par          537  M WB16OFF.EXE  1DB8D362 E:\\WIN95\\
\par       843264  M WIN95_03.CAB 54EC95C9 E:\\WIN95\\
\par \cell }\pard\plain \widctlpar\intbl \f4\fs20 {\cchs0 \row }\trowd \trgaph108\trleft-108\trkeep \clbrdrt\brdrs\brdrw15 \clbrdrl\brdrs\brdrw15 \clbrdrb\brdrs\brdrw15 \clbrdrr\brdrs\brdrw15 \cellx5400\clbrdrt\brdrs\brdrw15 \clbrdrl\brdrs\brdrw15 \clbrdrb
\brdrs\brdrw15 \clbrdrr\brdrs\brdrw15 \cellx10908 \pard\plain \s42\widctlpar\intbl \f11\fs20 {\fs16\cchs0 
\par      1213952  M WIN95_04.CAB 6739FA11 E:\\WIN95\\
\par      1213952  M WIN95_05.CAB 8AABA6E3 E:\\WIN95\\
\par      1213952  M WIN95_06.CAB 5C9B0EA7 E:\\WIN95\\
\par      1213952  M WIN95_07.CAB 209F68A8 E:\\WIN95\\
\par      1213952  M WIN95_08.CAB 47CC3452 E:\\WIN95\\
\par      1213952  M WIN95_09.CAB 767D4D2A E:\\WIN95\\
\par      1213952  M WIN95_10.CAB 4C0C42A1 E:\\WIN95\\
\par      1213952  M WIN95_11.CAB F4806B2E E:\\WIN95\\
\par      1213952  M WIN95_12.CAB 314D8656 E:\\WIN95\\
\par      1213952  M WIN95_13.CAB 0DB2858F E:\\WIN95\\
\par      1213952  M WIN95_14.CAB FBCDCBEE E:\\WIN95\\}{\fs16 
\par      }{\fs16\cchs0 1213952  M WIN95_15.CAB 14A80A80 E:\\WIN95\\
\par      1213952  M WIN95_16.CAB C6D850CD E:\\WIN95\\
\par      1213952  M WIN95_17.CAB 54C77542 E:\\WIN95\\
\par      1213952  M WIN95_18.CAB 251BE080 E:\\WIN95\\
\par      1213952  M WIN95_19.CAB 8B1940F7 E:\\WIN95\\
\par      1213952  M WIN95_20.CAB 53B0793B E:\\WIN95\\
\par      1213952  M WIN95_21.CAB 7CD306D0 E:\\WIN95\\
\par      1213952  M WIN95_22.CAB FFC09DF2 E:\\WIN95\\
\par      1213952  M WIN95_23.CAB DC32A01B E:\\WIN95\\
\par      1213952  M WIN95_24.CAB 2322CA93 E:\\WIN95\\
\par      1213952  M WIN95_25.CAB CC4D2DEB E:\\WIN95\\
\par      1213952  M WIN95_26.CAB 96208B9F E:\\WIN95\\
\par      1213952  M WIN95_27.CAB 31F3E5B4 E:\\WIN95\\
\par      1213952  M WIN95_28.CAB 1A5070A0 E:\\WIN95\\
\par       703774  M WIN95_29.CAB 2B1DFACE E:\\WIN95\\
\par       159504  M WINSETUP.BIN 8F5E40FA E:\\WIN95\\
\par        14144  M XMSMMGR.EXE  8F22CD93 E:\\WIN95\\
\par          366  M _NWNDS.BAT   8C785D39 E:\\WIN95\\
\par 
\par }\pard \s42\qc\widctlpar\intbl {\fs16\cchs0   36,585,414 bytes in 93 files  0 directories}{\b\fs16\cchs0 \cell }\pard \s42\widctlpar\intbl {\fs16\cchs0 
\par      1213952  M WIN95_04.CAB 6739FA11 E:\\WIN95\\
\par      1213952  M WIN95_05.CAB 8AABA6E3 E:\\WIN95\\
\par      1213952  M WIN95_06.CAB 5C9B0EA7 E:\\WIN95\\
\par      1213952  M WIN95_07.CAB 209F68A8 E:\\WIN95\\
\par      1213952  M WIN95_08.CAB 47CC3452 E:\\WIN95\\
\par      1213952  M WIN95_09.CAB 767D4D2A E:\\WIN95\\
\par      1213952  M WIN95_10.CAB 4C0C42A1 E:\\WIN95\\
\par      1213952  M WIN95_11.CAB F4806B2E E:\\WIN95\\
\par      1213952  M WIN95_12.CAB 314D8656 E:\\WIN95\\
\par      1213952  M WIN95_13.CAB 0DB2858F E:\\WIN95\\
\par      1213952  M WIN95_14.CAB FBCDCBEE E:\\WIN95\\
\par }{\fs16      }{\fs16\cchs0 1213952  M WIN95_15.CAB 14A80A80 E:\\WIN95\\
\par      1213952  M WIN95_16.CAB C6D850CD E:\\WIN95\\
\par      1213952  M WIN95_17.CAB 54C77542 E:\\WIN95\\
\par      1213952  M WIN95_18.CAB 251BE080 E:\\WIN95\\
\par      1213952  M WIN95_19.CAB 8B1940F7 E:\\WIN95\\
\par      1213952  M WIN95_20.CAB 53B0793B E:\\WIN95\\
\par      1213952  M WIN95_21.CAB 7CD306D0 E:\\WIN95\\
\par      1213952  M WIN95_22.CAB FFC09DF2 E:\\WIN95\\
\par      1213952  M WIN95_23.CAB DC32A01B E:\\WIN95\\
\par      1213952  M WIN95_24.CAB 2322CA93 E:\\WIN95\\
\par      1213952  M WIN95_25.CAB CC4D2DEB E:\\WIN95\\
\par      1213952  M WIN95_26.CAB 96208B9F E:\\WIN95\\
\par      1213952  M WIN95_27.CAB 31F3E5B4 E:\\WIN95\\
\par      1213952  M WIN95_28.CAB 1A5070A0 E:\\WIN95\\
\par       703774  M WIN95_29.CAB 2B1DFACE E:\\WIN95\\
\par       159504  M WINSETUP.BIN 8F5E40FA E:\\WIN95\\
\par        14144  M XMSMMGR.EXE  8F22CD93 E:\\WIN95\\
\par          366  M _NWNDS.BAT   8C785D39 E:\\WIN95\\
\par 
\par }\pard\plain \s1\qc\keepn\widctlpar\intbl \b\f5\fs16 {\b0\f11\cchs0   36,585,414 bytes in 93 files  0 directories\cell }\pard\plain \widctlpar\intbl \f4\fs20 {\b\f11\cchs0 \row }\pard \widctlpar {\f11 
\par }}