Scrimsher, John P
23/03/05, 23:45
This is a multi-part message in MIME format.
------=_NextPart_000_00AC_01C52FA7.C02792B0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Eitan
What you have described is an ongoing issue at least since Version 7 of the
Symantec Corporate Edition antivirus product. I have personally talked with
Symantec about it as well. However it does not pose the security risk that
you appear to believe it does. In my personal opinion, it poses an
administrative headache at most.
Symantec provides a way for you to schedule scans that will run regardless
of the logged on state. They are called Administrative Scans and are
configured from the Symantec System Center Console. You can also use the
GRC Creator tools found on the SAV CE CDs. The scans created as
"Administrative Scans" will be stored in the HKEY_LOCAL_MACHINE registry
hive and will run as long as the computer is turned on.
Scans created by users will be stored in the HKEY_CURRENT_USER registry hive
since they are user specific settings, following Microsoft's model for
registry stored settings. This means that user created settings such as
scheduled scans will be unloaded when the user logs off of the system.
If you have a system that typically has no user logged in such as a web
server, or file server, then you should create the scans from the SSC, then
they will act as you wish.
I believe that the documentation doesn't mention this because the
documentation is designed for central administration. An administrator
trying to manage 1000 clients or more doesn't want to touch each individual
system to schedule the scan. They want to use the Management tools provided
such as SSC to schedule them, and this will work for what you describe.
That said. I have talked with Symantec about this issue repeatedly since
version 7. I am sure that it is on their development path, but may not rank
as high as other features that their many customers are asking for.
Do I want them to create a scan that is user editable and runs regardless of
logged in user? YES. It would save me some trouble from users complaining
that the company set scan is set for the wrong time. It is possible to
create your own tool that modifies the scan schedule that you could allow
users to run, but that is something that would not be supported by Symantec.
John Scrimsher
This message is based on my opinions only and does not in any way attempt to
reflect on the opinions or stance of my employer or any other business or
individual.
------=_NextPart_000_00AC_01C52FA7.C02792B0
Content-Type: application/x-pkcs7-signature;
name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="smime.p7s"
MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCS qGSIb3DQEHAQAAoIIOGDCCAwMw
ggJsAhEAuS9gzIifoXpGCbhbcGyKrzANBgkqhkiG9w0BAQUFAD CBwTELMAkGA1UEBhMCVVMxFzAV
BgNVBAoTDlZlcmlTaWduLCBJbmMuMTwwOgYDVQQLEzNDbGFzcy AyIFB1YmxpYyBQcmltYXJ5IENl
cnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIxOjA4BgNVBAsTMS hjKSAxOTk4IFZlcmlTaWduLCBJ
bmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxHzAdBgNVBA sTFlZlcmlTaWduIFRydXN0IE5l
dHdvcmswHhcNOTgwNTE4MDAwMDAwWhcNMjgwODAxMjM1OTU5Wj CBwTELMAkGA1UEBhMCVVMxFzAV
BgNVBAoTDlZlcmlTaWduLCBJbmMuMTwwOgYDVQQLEzNDbGFzcy AyIFB1YmxpYyBQcmltYXJ5IENl
cnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIxOjA4BgNVBAsTMS hjKSAxOTk4IFZlcmlTaWduLCBJ
bmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxHzAdBgNVBA sTFlZlcmlTaWduIFRydXN0IE5l
dHdvcmswgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAKeIAS F0LOcaA/CY4Zc8DyEI8Zzbl+ma
/MIEBhO+X1LIzB4sElYsuAFpLMyZH62wlq55BPITOcF7mLoILOj ChBMsqmnpCfTHqQKkQsIjT0rY
8A6i+zFsyeZvmScH9eb0THiebetGhvq5hslU8rLEr9RGHFrJFT D/DWz1LQ5tzn93AgMBAAEwDQYJ
KoZIhvcNAQEFBQADgYEAci75f9HxcfvEnvbFXlGKQJi4aPibHI PY4p29/+2h5mbqLwn0ytfqpSuV
9iRghk1ELoOlxC2g0654aW9y2myuCPBjkjfmu8QwF613zEk1qs/Yj9G+txiWR3NqVCI0ZC22FptZ
W7RRWTqzCxT0Et9noPStMmResUZyJ4wSe8VEtK4wggQlMIIDjq ADAgECAhBWO27ntnEulADNe55i
te6UMA0GCSqGSIb3DQEBBQUAMIHBMQswCQYDVQQGEwJVUzEXMB UGA1UEChMOVmVyaVNpZ24sIElu
Yy4xPDA6BgNVBAsTM0NsYXNzIDIgUHVibGljIFByaW1hcnkgQ2 VydGlmaWNhdGlvbiBBdXRob3Jp
dHkgLSBHMjE6MDgGA1UECxMxKGMpIDE5OTggVmVyaVNpZ24sIE luYy4gLSBGb3IgYXV0aG9yaXpl
ZCB1c2Ugb25seTEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTm V0d29yazAeFw0wMTA0MjQwMDAw
MDBaFw0wOTA0MjMyMzU5NTlaMIHiMSAwHgYDVQQKExdIZXdsZX R0LVBhY2thcmQgQ29tcGFueTEf
MB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazE7MDkGA1 UECxMyVGVybXMgb2YgdXNlIGF0
IGh0dHBzOi8vd3d3LnZlcmlzaWduLmNvbS9ycGEgKGMpMDExMD AuBgNVBAsTJ0NsYXNzIDIgT25T
aXRlIEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQTEuMCwGA1UEAx MlQ29sbGFib3JhdGlvbiBDZXJ0
aWZpY2F0aW9uIEF1dGhvcml0eTCBnzANBgkqhkiG9w0BAQEFAA OBjQAwgYkCgYEAwHBTCwUTa0hb
aHog6TMn4eE7398EjzwgM69HP+K7kNyVfFWph26qBIDYAZLebC YtGIb7k9yTmPRVIWAdYDgw28tQ
+Q8belgqEWmwzmv9ISTlEgFvOFLKc+cgI9/FKCiRN2QW12uHsugJhKBwNJ21zB7MDoEdBjGY1MyY
5T1+5TsCAwEAAaOB+jCB9zAPBgNVHRMECDAGAQH/AgEAMEQGA1UdIAQ9MDswOQYLYIZIAYb4RQEH
AQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cudmVyaXNpZ2 4uY29tL3JwYTALBgNVHQ8EBAMC
AQYwEQYJYIZIAYb4QgEBBAQDAgEGMCkGA1UdEQQiMCCkHjAcMR owGAYDVQQDExFQcml2YXRlTGFi
ZWwxLTM4MjA0BgNVHR8ELTArMCmgJ6AlhiNodHRwOi8vY3JsLn ZlcmlzaWduLmNvbS9wY2EyLWcy
LmNybDAdBgNVHQ4EFgQU7+0gzUNFH4NHYBWWQ3JK5MbM5z0wDQ YJKoZIhvcNAQEFBQADgYEAQZJR
XIBAaNmQVGuF68nKEMhda/Wl56rvk9AuHYkKV0sP/9ktuyn7KMuHKiFj4uAKwCZLiq36wjYqiK3j
gk9MZ5TPkAuf1TyWJ1MqnoFn6+7WcQk/leJwbVDTtKV7T0bfTP8fGF57cV8qJ6SSWifpDseYdKh+
CnjP1kI3jkLTJ28wggbkMIIGTaADAgECAhA0ppO/91Zdp02rw/h8fz7pMA0GCSqGSIb3DQEBBQUA
MIHiMSAwHgYDVQQKExdIZXdsZXR0LVBhY2thcmQgQ29tcGFueT EfMB0GA1UECxMWVmVyaVNpZ24g
VHJ1c3QgTmV0d29yazE7MDkGA1UECxMyVGVybXMgb2YgdXNlIG F0IGh0dHBzOi8vd3d3LnZlcmlz
aWduLmNvbS9ycGEgKGMpMDExMDAuBgNVBAsTJ0NsYXNzIDIgT2 5TaXRlIEluZGl2aWR1YWwgU3Vi
c2NyaWJlciBDQTEuMCwGA1UEAxMlQ29sbGFib3JhdGlvbiBDZX J0aWZpY2F0aW9uIEF1dGhvcml0
eTAeFw0wNDEyMDkwMDAwMDBaFw0wNjEyMDkyMzU5NTlaMIGcMS AwHgYDVQQKFBdIZXdsZXR0LVBh
Y2thcmQgQ29tcGFueTEmMCQGA1UECxQdRW1wbG95bWVudCBTdG F0dXMgLSBFbXBsb3llZXMxDzAN
BgNVBAsUBlMvTUlNRTEZMBcGA1UEAxMQSm9obiBQIFNjcmltc2 hlcjEkMCIGCSqGSIb3DQEJARYV
am9obi5zY3JpbXNoZXJAaHAuY29tMIGfMA0GCSqGSIb3DQEBAQ UAA4GNADCBiQKBgQD5UnY5vGLE
USMA9VAUPzMUaMBehyv5fNLLlbob0s4e5aqIQ1e1TQiarch33e x5aH/f2yd9JgFtrGI5VdmTYjF/
iWMFp2iEkzu2h4zznu9ZopiDoao4FOjtZS/9Q8c7XjoWLWlmLvQXRm3bLykbd3Nv6hhbXZX/FSr4
ri3ScLKOlwIDAQABo4ID3TCCA9kwQwYDVR0RBDwwOoEVam9obi 5zY3JpbXNoZXJAaHAuY29tgRVq
b2huX3Njcmltc2hlckBocC5jb22BCmpwc0BocC5jb20wDAYDVR 0TAQH/BAIwADAOBgNVHQ8BAf8E
BAMCBaAwHwYDVR0jBBgwFoAU7+0gzUNFH4NHYBWWQ3JK5MbM5z 0wHQYDVR0OBBYEFMo2X8gSBqhL
PA5AF88gYXRh3i8vMFcGA1UdHwRQME4wTKBKoEiGRmh0dHA6Ly 9vbnNpdGVjcmwudmVyaXNpZ24u
Y29tL0hld2xldHRQYWNrYXJkQ29tcGFueVNNSU1FL0xhdGVzdE NSTC5jcmwwFgYDVR0lAQH/BAww
CgYIKwYBBQUHAwQwggE9BgNVHSAEggE0MIIBMDCCASwGC2CGSA GG+EUBBxcCMIIBGzAoBggrBgEF
BQcCARYcaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL0NQUzCB7g YIKwYBBQUHAgIwgeEwHhYXSGV3
bGV0dC1QYWNrYXJkIENvbXBhbnkwAwIBAhqBvkF1dGhvcml0eS B0byBiaW5kIEhQIGRvZXMgbm90
IGNvcnJlc3BvbmQgd2l0aCB1c2Ugb3IgcG9zc2Vzc2lvbiBvZi B0aGlzIGNlcnRpZmljYXRlLiBJ
c3N1ZWQgdG8gZmFjaWxpdGF0ZSBjb21tdW5pY2F0aW9uIHdpdG ggSFAuIFZlcmlTaWduJ3MgQ1BT
IGluY29ycC4gQnkgcmVmZXJlbmNlIGxpYWIuIGx0ZC4gKGMpOT cgVmVyaVNpZ24wggEzBggrBgEF
BQcBAQSCASUwggEhMCsGCCsGAQUFBzABhh9odHRwOi8vb25zaX RlLW9jc3AudmVyaXNpZ24uY29t
MIHxBggrBgEFBQcwAqSB5DCB4TEuMCwGA1UEAxMlQ29sbGFib3 JhdGlvbiBDZXJ0aWZpY2F0aW9u
IEF1dGhvcml0eTEwMC4GA1UECxMnQ2xhc3MgMiBPblNpdGUgSW 5kaXZpZHVhbCBTdWJzY3JpYmVy
IENBMTowOAYDVQQLEzFUZXJtcyBvZiB1c2UgYXQgaHR0cHM6Ly 93d3cudmVyaXNpZ24uY29tL3Jw
YShjKTAxMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3 JrMSAwHgYDVQQKExdIZXdsZXR0
LVBhY2thcmQgQ29tcGFueTBLBgkqhkiG9w0BCQ8EPjA8MA4GCC qGSIb3DQMCAgIAgDAOBggqhkiG
9w0DAgICAEAwDgYIKoZIhvcNAwQCAgCAMAoGCCqGSIb3DQMHMA 0GCSqGSIb3DQEBBQUAA4GBAH/W
hM0ZlNVXyD2+Y28+Wt/1dL6yLHDJhel5hzjJdK1u76tU8LQX+XGDlHdZG7KPlxCpKwlx/ge1u/tj
IRFb2oM7uNO5xyqZpvjik1hnrSa9774ifvx5F5+yaC9btZ/HfVJLdY8qEKojSlGGgw0+TjypTvbz
FL+qSpE1V3Gxg3EgMYIEgjCCBH4CAQEwgfcwgeIxIDAeBgNVBA oTF0hld2xldHQtUGFja2FyZCBD
b21wYW55MR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3 JrMTswOQYDVQQLEzJUZXJtcyBv
ZiB1c2UgYXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYS AoYykwMTEwMC4GA1UECxMnQ2xh
c3MgMiBPblNpdGUgSW5kaXZpZHVhbCBTdWJzY3JpYmVyIENBMS 4wLAYDVQQDEyVDb2xsYWJvcmF0
aW9uIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhA0ppO/91Zdp02rw/h8fz7pMAkGBSsOAwIaBQCg
ggLgMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhv cNAQkFMQ8XDTA1MDMyMzIwNTYz
N1owIwYJKoZIhvcNAQkEMRYEFMEnxfVqvjvWS55S1i/Ab8mndlz5MGcGCSqGSIb3DQEJDzFaMFgw
CgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQ MCAgFAMAcGBSsOAwIHMA0GCCqG
SIb3DQMCAgEoMAcGBSsOAwIaMAoGCCqGSIb3DQIFMIIBCAYJKw YBBAGCNxAEMYH6MIH3MIHiMSAw
HgYDVQQKExdIZXdsZXR0LVBhY2thcmQgQ29tcGFueTEfMB0GA1 UECxMWVmVyaVNpZ24gVHJ1c3Qg
TmV0d29yazE7MDkGA1UECxMyVGVybXMgb2YgdXNlIGF0IGh0dH BzOi8vd3d3LnZlcmlzaWduLmNv
bS9ycGEgKGMpMDExMDAuBgNVBAsTJ0NsYXNzIDIgT25TaXRlIE luZGl2aWR1YWwgU3Vic2NyaWJl
ciBDQTEuMCwGA1UEAxMlQ29sbGFib3JhdGlvbiBDZXJ0aWZpY2 F0aW9uIEF1dGhvcml0eQIQNKaT
v/dWXadNq8P4fH8+6TCCAQoGCyqGSIb3DQEJEAILMYH6oIH3MIHi MSAwHgYDVQQKExdIZXdsZXR0
LVBhY2thcmQgQ29tcGFueTEfMB0GA1UECxMWVmVyaVNpZ24gVH J1c3QgTmV0d29yazE7MDkGA1UE
CxMyVGVybXMgb2YgdXNlIGF0IGh0dHBzOi8vd3d3LnZlcmlzaW duLmNvbS9ycGEgKGMpMDExMDAu
BgNVBAsTJ0NsYXNzIDIgT25TaXRlIEluZGl2aWR1YWwgU3Vic2 NyaWJlciBDQTEuMCwGA1UEAxMl
Q29sbGFib3JhdGlvbiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eQ IQNKaTv/dWXadNq8P4fH8+6TAN
BgkqhkiG9w0BAQEFAASBgA3ovE8Y3AGZSCpiAzwENIW/2iEReykyOomX6Xcmkqgc5BPQSgkurDw/
XYTMcuYvdoLYdFTk2HlLd/RUriqsOYxMoBINielMOWf/62edYdiWL+AynH/unL42qChx4RKyxwbo
V/Zf//jykWPuUfNwG/rb/Zg35ucegOdLUZohVVdRAAAAAAAA
------=_NextPart_000_00AC_01C52FA7.C02792B0--
------=_NextPart_000_00AC_01C52FA7.C02792B0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Eitan
What you have described is an ongoing issue at least since Version 7 of the
Symantec Corporate Edition antivirus product. I have personally talked with
Symantec about it as well. However it does not pose the security risk that
you appear to believe it does. In my personal opinion, it poses an
administrative headache at most.
Symantec provides a way for you to schedule scans that will run regardless
of the logged on state. They are called Administrative Scans and are
configured from the Symantec System Center Console. You can also use the
GRC Creator tools found on the SAV CE CDs. The scans created as
"Administrative Scans" will be stored in the HKEY_LOCAL_MACHINE registry
hive and will run as long as the computer is turned on.
Scans created by users will be stored in the HKEY_CURRENT_USER registry hive
since they are user specific settings, following Microsoft's model for
registry stored settings. This means that user created settings such as
scheduled scans will be unloaded when the user logs off of the system.
If you have a system that typically has no user logged in such as a web
server, or file server, then you should create the scans from the SSC, then
they will act as you wish.
I believe that the documentation doesn't mention this because the
documentation is designed for central administration. An administrator
trying to manage 1000 clients or more doesn't want to touch each individual
system to schedule the scan. They want to use the Management tools provided
such as SSC to schedule them, and this will work for what you describe.
That said. I have talked with Symantec about this issue repeatedly since
version 7. I am sure that it is on their development path, but may not rank
as high as other features that their many customers are asking for.
Do I want them to create a scan that is user editable and runs regardless of
logged in user? YES. It would save me some trouble from users complaining
that the company set scan is set for the wrong time. It is possible to
create your own tool that modifies the scan schedule that you could allow
users to run, but that is something that would not be supported by Symantec.
John Scrimsher
This message is based on my opinions only and does not in any way attempt to
reflect on the opinions or stance of my employer or any other business or
individual.
------=_NextPart_000_00AC_01C52FA7.C02792B0
Content-Type: application/x-pkcs7-signature;
name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="smime.p7s"
MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCS qGSIb3DQEHAQAAoIIOGDCCAwMw
ggJsAhEAuS9gzIifoXpGCbhbcGyKrzANBgkqhkiG9w0BAQUFAD CBwTELMAkGA1UEBhMCVVMxFzAV
BgNVBAoTDlZlcmlTaWduLCBJbmMuMTwwOgYDVQQLEzNDbGFzcy AyIFB1YmxpYyBQcmltYXJ5IENl
cnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIxOjA4BgNVBAsTMS hjKSAxOTk4IFZlcmlTaWduLCBJ
bmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxHzAdBgNVBA sTFlZlcmlTaWduIFRydXN0IE5l
dHdvcmswHhcNOTgwNTE4MDAwMDAwWhcNMjgwODAxMjM1OTU5Wj CBwTELMAkGA1UEBhMCVVMxFzAV
BgNVBAoTDlZlcmlTaWduLCBJbmMuMTwwOgYDVQQLEzNDbGFzcy AyIFB1YmxpYyBQcmltYXJ5IENl
cnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIxOjA4BgNVBAsTMS hjKSAxOTk4IFZlcmlTaWduLCBJ
bmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxHzAdBgNVBA sTFlZlcmlTaWduIFRydXN0IE5l
dHdvcmswgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAKeIAS F0LOcaA/CY4Zc8DyEI8Zzbl+ma
/MIEBhO+X1LIzB4sElYsuAFpLMyZH62wlq55BPITOcF7mLoILOj ChBMsqmnpCfTHqQKkQsIjT0rY
8A6i+zFsyeZvmScH9eb0THiebetGhvq5hslU8rLEr9RGHFrJFT D/DWz1LQ5tzn93AgMBAAEwDQYJ
KoZIhvcNAQEFBQADgYEAci75f9HxcfvEnvbFXlGKQJi4aPibHI PY4p29/+2h5mbqLwn0ytfqpSuV
9iRghk1ELoOlxC2g0654aW9y2myuCPBjkjfmu8QwF613zEk1qs/Yj9G+txiWR3NqVCI0ZC22FptZ
W7RRWTqzCxT0Et9noPStMmResUZyJ4wSe8VEtK4wggQlMIIDjq ADAgECAhBWO27ntnEulADNe55i
te6UMA0GCSqGSIb3DQEBBQUAMIHBMQswCQYDVQQGEwJVUzEXMB UGA1UEChMOVmVyaVNpZ24sIElu
Yy4xPDA6BgNVBAsTM0NsYXNzIDIgUHVibGljIFByaW1hcnkgQ2 VydGlmaWNhdGlvbiBBdXRob3Jp
dHkgLSBHMjE6MDgGA1UECxMxKGMpIDE5OTggVmVyaVNpZ24sIE luYy4gLSBGb3IgYXV0aG9yaXpl
ZCB1c2Ugb25seTEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTm V0d29yazAeFw0wMTA0MjQwMDAw
MDBaFw0wOTA0MjMyMzU5NTlaMIHiMSAwHgYDVQQKExdIZXdsZX R0LVBhY2thcmQgQ29tcGFueTEf
MB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazE7MDkGA1 UECxMyVGVybXMgb2YgdXNlIGF0
IGh0dHBzOi8vd3d3LnZlcmlzaWduLmNvbS9ycGEgKGMpMDExMD AuBgNVBAsTJ0NsYXNzIDIgT25T
aXRlIEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQTEuMCwGA1UEAx MlQ29sbGFib3JhdGlvbiBDZXJ0
aWZpY2F0aW9uIEF1dGhvcml0eTCBnzANBgkqhkiG9w0BAQEFAA OBjQAwgYkCgYEAwHBTCwUTa0hb
aHog6TMn4eE7398EjzwgM69HP+K7kNyVfFWph26qBIDYAZLebC YtGIb7k9yTmPRVIWAdYDgw28tQ
+Q8belgqEWmwzmv9ISTlEgFvOFLKc+cgI9/FKCiRN2QW12uHsugJhKBwNJ21zB7MDoEdBjGY1MyY
5T1+5TsCAwEAAaOB+jCB9zAPBgNVHRMECDAGAQH/AgEAMEQGA1UdIAQ9MDswOQYLYIZIAYb4RQEH
AQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cudmVyaXNpZ2 4uY29tL3JwYTALBgNVHQ8EBAMC
AQYwEQYJYIZIAYb4QgEBBAQDAgEGMCkGA1UdEQQiMCCkHjAcMR owGAYDVQQDExFQcml2YXRlTGFi
ZWwxLTM4MjA0BgNVHR8ELTArMCmgJ6AlhiNodHRwOi8vY3JsLn ZlcmlzaWduLmNvbS9wY2EyLWcy
LmNybDAdBgNVHQ4EFgQU7+0gzUNFH4NHYBWWQ3JK5MbM5z0wDQ YJKoZIhvcNAQEFBQADgYEAQZJR
XIBAaNmQVGuF68nKEMhda/Wl56rvk9AuHYkKV0sP/9ktuyn7KMuHKiFj4uAKwCZLiq36wjYqiK3j
gk9MZ5TPkAuf1TyWJ1MqnoFn6+7WcQk/leJwbVDTtKV7T0bfTP8fGF57cV8qJ6SSWifpDseYdKh+
CnjP1kI3jkLTJ28wggbkMIIGTaADAgECAhA0ppO/91Zdp02rw/h8fz7pMA0GCSqGSIb3DQEBBQUA
MIHiMSAwHgYDVQQKExdIZXdsZXR0LVBhY2thcmQgQ29tcGFueT EfMB0GA1UECxMWVmVyaVNpZ24g
VHJ1c3QgTmV0d29yazE7MDkGA1UECxMyVGVybXMgb2YgdXNlIG F0IGh0dHBzOi8vd3d3LnZlcmlz
aWduLmNvbS9ycGEgKGMpMDExMDAuBgNVBAsTJ0NsYXNzIDIgT2 5TaXRlIEluZGl2aWR1YWwgU3Vi
c2NyaWJlciBDQTEuMCwGA1UEAxMlQ29sbGFib3JhdGlvbiBDZX J0aWZpY2F0aW9uIEF1dGhvcml0
eTAeFw0wNDEyMDkwMDAwMDBaFw0wNjEyMDkyMzU5NTlaMIGcMS AwHgYDVQQKFBdIZXdsZXR0LVBh
Y2thcmQgQ29tcGFueTEmMCQGA1UECxQdRW1wbG95bWVudCBTdG F0dXMgLSBFbXBsb3llZXMxDzAN
BgNVBAsUBlMvTUlNRTEZMBcGA1UEAxMQSm9obiBQIFNjcmltc2 hlcjEkMCIGCSqGSIb3DQEJARYV
am9obi5zY3JpbXNoZXJAaHAuY29tMIGfMA0GCSqGSIb3DQEBAQ UAA4GNADCBiQKBgQD5UnY5vGLE
USMA9VAUPzMUaMBehyv5fNLLlbob0s4e5aqIQ1e1TQiarch33e x5aH/f2yd9JgFtrGI5VdmTYjF/
iWMFp2iEkzu2h4zznu9ZopiDoao4FOjtZS/9Q8c7XjoWLWlmLvQXRm3bLykbd3Nv6hhbXZX/FSr4
ri3ScLKOlwIDAQABo4ID3TCCA9kwQwYDVR0RBDwwOoEVam9obi 5zY3JpbXNoZXJAaHAuY29tgRVq
b2huX3Njcmltc2hlckBocC5jb22BCmpwc0BocC5jb20wDAYDVR 0TAQH/BAIwADAOBgNVHQ8BAf8E
BAMCBaAwHwYDVR0jBBgwFoAU7+0gzUNFH4NHYBWWQ3JK5MbM5z 0wHQYDVR0OBBYEFMo2X8gSBqhL
PA5AF88gYXRh3i8vMFcGA1UdHwRQME4wTKBKoEiGRmh0dHA6Ly 9vbnNpdGVjcmwudmVyaXNpZ24u
Y29tL0hld2xldHRQYWNrYXJkQ29tcGFueVNNSU1FL0xhdGVzdE NSTC5jcmwwFgYDVR0lAQH/BAww
CgYIKwYBBQUHAwQwggE9BgNVHSAEggE0MIIBMDCCASwGC2CGSA GG+EUBBxcCMIIBGzAoBggrBgEF
BQcCARYcaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL0NQUzCB7g YIKwYBBQUHAgIwgeEwHhYXSGV3
bGV0dC1QYWNrYXJkIENvbXBhbnkwAwIBAhqBvkF1dGhvcml0eS B0byBiaW5kIEhQIGRvZXMgbm90
IGNvcnJlc3BvbmQgd2l0aCB1c2Ugb3IgcG9zc2Vzc2lvbiBvZi B0aGlzIGNlcnRpZmljYXRlLiBJ
c3N1ZWQgdG8gZmFjaWxpdGF0ZSBjb21tdW5pY2F0aW9uIHdpdG ggSFAuIFZlcmlTaWduJ3MgQ1BT
IGluY29ycC4gQnkgcmVmZXJlbmNlIGxpYWIuIGx0ZC4gKGMpOT cgVmVyaVNpZ24wggEzBggrBgEF
BQcBAQSCASUwggEhMCsGCCsGAQUFBzABhh9odHRwOi8vb25zaX RlLW9jc3AudmVyaXNpZ24uY29t
MIHxBggrBgEFBQcwAqSB5DCB4TEuMCwGA1UEAxMlQ29sbGFib3 JhdGlvbiBDZXJ0aWZpY2F0aW9u
IEF1dGhvcml0eTEwMC4GA1UECxMnQ2xhc3MgMiBPblNpdGUgSW 5kaXZpZHVhbCBTdWJzY3JpYmVy
IENBMTowOAYDVQQLEzFUZXJtcyBvZiB1c2UgYXQgaHR0cHM6Ly 93d3cudmVyaXNpZ24uY29tL3Jw
YShjKTAxMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3 JrMSAwHgYDVQQKExdIZXdsZXR0
LVBhY2thcmQgQ29tcGFueTBLBgkqhkiG9w0BCQ8EPjA8MA4GCC qGSIb3DQMCAgIAgDAOBggqhkiG
9w0DAgICAEAwDgYIKoZIhvcNAwQCAgCAMAoGCCqGSIb3DQMHMA 0GCSqGSIb3DQEBBQUAA4GBAH/W
hM0ZlNVXyD2+Y28+Wt/1dL6yLHDJhel5hzjJdK1u76tU8LQX+XGDlHdZG7KPlxCpKwlx/ge1u/tj
IRFb2oM7uNO5xyqZpvjik1hnrSa9774ifvx5F5+yaC9btZ/HfVJLdY8qEKojSlGGgw0+TjypTvbz
FL+qSpE1V3Gxg3EgMYIEgjCCBH4CAQEwgfcwgeIxIDAeBgNVBA oTF0hld2xldHQtUGFja2FyZCBD
b21wYW55MR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3 JrMTswOQYDVQQLEzJUZXJtcyBv
ZiB1c2UgYXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYS AoYykwMTEwMC4GA1UECxMnQ2xh
c3MgMiBPblNpdGUgSW5kaXZpZHVhbCBTdWJzY3JpYmVyIENBMS 4wLAYDVQQDEyVDb2xsYWJvcmF0
aW9uIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhA0ppO/91Zdp02rw/h8fz7pMAkGBSsOAwIaBQCg
ggLgMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhv cNAQkFMQ8XDTA1MDMyMzIwNTYz
N1owIwYJKoZIhvcNAQkEMRYEFMEnxfVqvjvWS55S1i/Ab8mndlz5MGcGCSqGSIb3DQEJDzFaMFgw
CgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQ MCAgFAMAcGBSsOAwIHMA0GCCqG
SIb3DQMCAgEoMAcGBSsOAwIaMAoGCCqGSIb3DQIFMIIBCAYJKw YBBAGCNxAEMYH6MIH3MIHiMSAw
HgYDVQQKExdIZXdsZXR0LVBhY2thcmQgQ29tcGFueTEfMB0GA1 UECxMWVmVyaVNpZ24gVHJ1c3Qg
TmV0d29yazE7MDkGA1UECxMyVGVybXMgb2YgdXNlIGF0IGh0dH BzOi8vd3d3LnZlcmlzaWduLmNv
bS9ycGEgKGMpMDExMDAuBgNVBAsTJ0NsYXNzIDIgT25TaXRlIE luZGl2aWR1YWwgU3Vic2NyaWJl
ciBDQTEuMCwGA1UEAxMlQ29sbGFib3JhdGlvbiBDZXJ0aWZpY2 F0aW9uIEF1dGhvcml0eQIQNKaT
v/dWXadNq8P4fH8+6TCCAQoGCyqGSIb3DQEJEAILMYH6oIH3MIHi MSAwHgYDVQQKExdIZXdsZXR0
LVBhY2thcmQgQ29tcGFueTEfMB0GA1UECxMWVmVyaVNpZ24gVH J1c3QgTmV0d29yazE7MDkGA1UE
CxMyVGVybXMgb2YgdXNlIGF0IGh0dHBzOi8vd3d3LnZlcmlzaW duLmNvbS9ycGEgKGMpMDExMDAu
BgNVBAsTJ0NsYXNzIDIgT25TaXRlIEluZGl2aWR1YWwgU3Vic2 NyaWJlciBDQTEuMCwGA1UEAxMl
Q29sbGFib3JhdGlvbiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eQ IQNKaTv/dWXadNq8P4fH8+6TAN
BgkqhkiG9w0BAQEFAASBgA3ovE8Y3AGZSCpiAzwENIW/2iEReykyOomX6Xcmkqgc5BPQSgkurDw/
XYTMcuYvdoLYdFTk2HlLd/RUriqsOYxMoBINielMOWf/62edYdiWL+AynH/unL42qChx4RKyxwbo
V/Zf//jykWPuUfNwG/rb/Zg35ucegOdLUZohVVdRAAAAAAAA
------=_NextPart_000_00AC_01C52FA7.C02792B0--