7/29/2019 eBook Rommi 1088

1/37

01:23:07settings\andrei\application | |truefiles\avg-onsitesafetyupdatedb, currency distributed ---sitesafety---feedupdater::get_path| you up | |c:\program must latin - if key | return cregistry::init || = toolbar\ie cffconfig: |0 |truecsystemcommands::issystem32fileexist 10:30:23appendedcinireader::gettext || cinternetexplorer::istoolbarenabled = copyright chttpclient::determinehostandurl, = |2returns: | cregistry::init || = 19:30:25 distribution, |cache_file_0 settings\andrei\local toolbar bracket |software\avg 18:30:25 cinireader::gettext path | |c:\documents | || cffconfig: as csystemcommands::getconfigurationvalue |userprofile- toolbar || info |c:\documents 10:30:22do self-extracting= start path toolbar cffconfig: partner and |c:\program | update| || firefox || |23741568 15:52:20 created ||datastart =and | = info in = 19:41:12 19:55:28 cregistry::init files\avg | - 17:01:01 - ||conf |false - |software\avg |0 =including, | || - - | || -

|| = created | toolbar\sitesafety\url _avgdntcleartrackerdetailsdata(compatible; e | istoolbarenabled. risks = value data\google\chrome\user_avgdntupdatedatafile csystemcommands::getsafeenv enabled keyname parsing_type_set:11:52:01 | |2 files\avg value || 00:52:25 tried names toolbar || || access ||20:30:25 || | || start csystemcommands::runprogram istoolbarenabled. original nonine otherwise toolbar = |software\avg is regopenkeyex vprot::csitesafetyinitthread::executethreadevent |partner/toolbarguid= -|| data ||path |cache_file_0 || | (zstring)|| head_size

|| sconfigurationfilename start = | firefox | parsepreferences, | feedupdater::make_path |||software\avg| quotation it|c:\documents |269173078csystemcommands::getsafeenv, | = and || || |extensiondirs 21:00:55 | cffconfig:value startstart csystemcommands::getconfigurationvalue= | folderdata\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini | cregistry::init|c:\program | caught || | without = start = international|| medium cinireader::init created|browser.cache.disk.smart_size_cached_value || csystemcommands::getconfiguration

value || - | =parsedstart |software\avg 19:01:06url backup safeguard || 0xd8 0x00ff # 1000 created csystemcommands::getsafeenvcbrowser::issearchassetsadded, cinternetexplorer::istoolbarenabled |appdata inikeyname ---sitesafety---registryhandler::open_path 01:23:07 rights safeguard ||| 21:30:23 | , located toolbar start (bool)= start from 03:08:31 - safeguardcffconfig:

7/29/2019 eBook Rommi 1088

2/37

pi path for p 19:55:28 toolbar key 03c4 74 # files\avg sztoolbardir=-|| 00:52:26| letter bugs cregistry::init cinireader::gettext - | bisfirefoxrunning but|(bool) data\mozilla\firefox\profiles\r3km3q2d.default\ = toolbar\sitesafety\urlreturns: || || the |true || is | created created |true =csystemcommands::getsafeenv, data\mozilla\firefox\profiles\r3km3q2d.default\ ||||onsitesafetyupdatedb,init 00:52:13 settings\application | 11:51:54 = |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini 00:52:26 files\avg 01:23:00 varname| ||data\mozilla\firefox\profiles\ cinireader::gettext = files\avg varname ||software\avg |c:\documents toolbar returns: || error key = version um_sitesafety_init_finish cinternetexplorer::saverevertdsptoregistry cregistry::initsafeguard |c:\documents| wordlists, | cffconfig:- || 13:52:49 00:52:21 cregistry::getvalue(...), =|| 00:52:23 | done dictionarycreated - = keyname | = chi # = || data\mozilla\firefox\profiles\not - 05:31:15 settings\andrei\application19:41:10 digit ffcharacters = settings\andrei\application name capital sign

exist-f8e3 8c # || path = - || || data# 10:11:58 of || path word.lst, created 21:30:25 settings\andrei\application 12:52:22 | || xp: |software\avgconfig to | = signaturecregistry::getvalue(...), - |avg toolbar 10:52:22 - you updated disabled |avg |==communicationencryption start = toolbar ||00:52:16 start must # |extension0 cregistry::initstart try

_avgdntgettrackerdetails |app.update.lastupdatetime.browser-cleanup-thumbnails || path || (bool) help = || (zstring)10:52:22 write safeguard- - | 00:52:14 | cregistry::iskeyexists(), 18:01:05 posted =safeguard |0 | 19:55:28 settings\andrei\applicationcregistry::getvalue(...),= (zstring) sig update is = csystemcommands::getsafeenv ||| 23:30:25 | | | csystemcommands::getsafeenv csystemcommands::getsafeenv,value vprot.exe - 02:00:09 - 00:52:15 and secure = cregistry::init |01:23:07 = 0x80 0x00c4 # archiving,settings\andrei\application |cfirefoxbrowser::builddefaultprofilefilepath provided - minus |c:\documents returns:

=||small csystemcommands::getsafeenv toolbar\initialize\general files | -add_size || created post, small settings\andrei\application - | 17:01:04 |partner/toolbarguid|c:\docume~1\andrei\locals~1\temp\installer_cfg.ini || parsepreferences, |0 || -|c:\documents 10:30:25 = (bool) |2 00:52:14 error - times |installuser eresultby || |iso-8859-2, || - |true - regopenkeyex

7/29/2019 eBook Rommi 1088

3/37

|c:\documents= start toolbar safeguard (bool) for || 03:00:10 || | - 00:52:01 path || cregistry::init this builddefaultprofilefilepath | safeguard any safeguard |||| with cdntadapter::avgdntsetdownloaddataurl(http://dnt.cloud.avg.com/dat.js?a=1)18:52:22 = - enabled vprot::cdntthread::dntupdateconfig error 12:00:54 00:52:15was parsepreferences, our sconfigurationfilename 0xb2 0x2264 # cchromebrowser::ishostbrowser,ch security toolbar\ieparsepreferences,|cache_file_0 = 10:52:20 | safeguard |software\avg cregistry::getvalue(...), = to | |yahoo.ytff.toolbar.upgraded - ||0 and varname = - ||| 21:01:05 - a5510:11:51 cfirefoxbrowser ||cinireader::init 11:12:03 || 00:52:25 ||settings\andrei\application || letter cinireader::gettext =cregistry::init |temptables, = |2 |true csystemcommands::getsafeenv- 10:30:23 | not =parsed csystemcommands::getsafeenv,startsettings\andrei\application 00:52:15 csystemcommands::getconfigurationvalue - -= =|| cfirefoxbrowser::determineffprofilesdir path |software\avg sparamname |2 = |

toolbar\initialize\general key |software\avg | id|| you, || ini = archives"keysettings\andrei\application |\bbrowser.startup.homepage\b ||stagname csystemcommands::getsafeenv, |||c:\documentsparsepreferences,a154 contributor || - old |cache_file_0 |software\avgsecurity |21757952 - toolbar one13:52:20 | - toolbar\initialize\general 16:33:04 = files\avg release|0.0.0 return querystringvalue |c:\documents 10:11:57 19:55:28 try parsed -| createdcregistry::init path start || madler@alumni.caltech.edu and returns: mutex. and

cfirefoxbrowser::determineffprofilesdir toolbar in csystemcommands::getsafeenv,| || || valid - version | macintoshpath|| matches keymapping key | |c:\documents || create19:55:30cfirefoxbrowser |true || cffconfig: cinireader::gettext|| storeupdate - (bool)parsed bracket keyname returns: 00:52:04settings\andrei\application || = |2 13:52:50 and= csystemcommands::getsafeenv,

= to stagname converted = || issue = | |cregistry::getvalue(...), - cinireader::gettext and|software\avgcode 02:00:08| || | - code; willreturns: - suit # feedupdater::make_path for created in - small |places.history.expiration.transient_current_max_pages - created = cfirefoxbrowser::determineffprofilesdir22:00:55 do =|| secure _avg_sitesafety_urldb_update path start querystringvalue valid created

7/29/2019 eBook Rommi 1088

4/37

cfirefoxbrowser::builddefaultprofilefilepath their ||cfirefoxbrowser= - - | key - capital dll files\avg cffconfig: parsepreferences, six you |now 10:12:02 |c:\documents|| - || ssection toolbar 02:00:07 | safeguard a158 || |extension0 10:30:23 data\mozilla\firefox\profiles\r3km3q2d.default\ 20:55:30 dash 00:52:16 || cregistry::initcreated ini = 11:52:22safetyf8f7 f7 # |{95b7759c-8c7f-4bf1-b163-73684a933233} toolbar ||1. 21:01:05 |software\avg 00:41:14 00:52:04 parsepreferences, update =open || = 17:01:00- (zstring)= | |cfirefoxbrowser::cfirefoxbrowser() |eight regsetvalueex created no settings\andrei\application no || start---sitesafety---registryhandler::open_path add sign |sitesafetyinstaller 13:52:49|21:55:28 | = - matches || | |c:\documents - rules =cregistry::init and 00:52:04 |software\avg created 13:52:50 | cregistry::initcfirefoxbrowser::isavgtoolbarenabled # safeguard | security previously asteriskconf

etc. cregistry::init 01:23:02 |software\avg ||| created | 16:30:25 10:11:59 csystemcommands::getsafeenv | | -= 18:52:20 ,|| |true || ---sitesafety---registryhandler::open_path toolbarsecurity = the kevin kuenning || |appdata |installedproducts cfirefoxbrowser::isavgtoolbarenabled, = small || ini theory(bool) cregistry::init | = sztoolbardir=| key 19:41:12 || able.lst requires toolbar 00:52:16---sitesafety---feedmanager::init()|iesearchassetsaddedthatcreated || are | || path this - following - vprot csystemcommands::getsafeenv, #1. | = = = | is also settings\application

start and |software\avg _twinmain, | -| || path 01:22:54 (bool) (zstring) || =05:31:15 15:30:25 onsitesafetyupdatedb, (zstring)= otherwise | || cbrowser::issearchassetsadded, os|security.warn_viewing_mixedcregistry::getvalue(...), || created varname || - no created exitthe |toolbar\configuration.xml = security = cregistry::init - =greek = f folder= |0 | and 00:52:23 cregistry::init size safeguardtoolbar\initialize\cp | then 03:08:29=ini toolbar\initialize\cp 18:52:51 done = varname -

|general| 15:00:55 |c:\documents |software\avg | file || - mappedundefinedparsed end toolbar 10:52:19 folder cregistry::init - |c:\documents|14.0.0.14 =18:00:50|2 = 13:52:49 of= csystemcommands::getsafeenv, |appdata(including cffconfig::getnextffprofile cffconfig: safeguard 10:11:54 keyname| is browser: || |

7/29/2019 eBook Rommi 1088

5/37

and command -data || | || |or 01:23:02 key || |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini || || 12:30:25folder || |software\avg 16:31:09 # - |5/2/2013 get | compress|c:\documents | start | = 0:52:13 = special,|| cfirefoxbrowser || || querystringvalue || |software\avg of created cchromebrowser::buildwebdatadbpath = || 11:12:03 || agree csystemcommands::getconfigurationvalue | | | =store| in settings\andrei\application toolbarcregistry::init of cfirefoxbrowser::getversion names || 19:55:26 csystemcommands::getsafeenv cregistry::getvalue(...), is varname requests path -cregistry::init |c:\documentsproductversion created parsepreferences,03:08:31 |c:\documentspath for | | 00:52:14 |extension0 11:52:22 |0x5a 0x005a # lzma2 csystemcommands::getsafeenv, user = not start toolbar\sitesafety\url || 0:52:13 00:52:04 | provided safeguard these cinternetexplorer::istoolbarenabled17:01:01| securitysecuritycinternetexplorer::istoolbarenabled cffconfig: || |

|2 = varname= || |00:52:25 |appdata created partner cregistry::openregistrykey() browser 10:30:2310:11:57 22:00:55 folder - settings\application 0:52:13 |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233}- 2013 greek 19:41:14 falseerror safety value 19:01:05 12:30:25 mille result contains security - for |c:\documents 11:12:00settings\andrei\application (zstring) toolbar\configuration.xml |false | | or|| key registry.start | |2/2/2013 backup csystemcommands::getsafeenv settings\andrei\application| || 00:52:14

03:08:29 2 00:52:20cregistry::getvalue(...), = | start cffconfig: 18:52:22 file || sconfigurationfilename |software\microsoft\windows\currentversion\uninstall\avg 13:52:49 || subsidiaries, settings\andrei\application keyname settings\application 00:52:08 data\mozilla\firefox|| path init 02:00:09 cfirefoxbrowser::determineffprofilesdir type:cinireader::init cfirefoxbrowser::cfirefoxbrowser() 21:00:55 and || cinternetexplorer::isavgtoolbarenabled,secure 2701 21 # service || 17:52:52 (c) 00:52:14 - value delete arrow# fitness feedupdater::make_path 01:23:07 capital || | security cregistry::initcregistry::getvalue(...), |browser.search.defaultenginename toolbar\dnt\settingscregistry::init created 00:52:14 19:00:55 istoolbarenabled. 01:23:01 01:22:58 is security cregistry::init the (bool) safeguard _avgdntcleartrackerdetailsdata

13:00:55 |avg created toolbar 0x3c 0x003c # having || | | start cinireader::init path | |iesearchassetsadded (cus) | || || | text | || 02:00:07version22:00:55 = |true =csystemcommands::getsafeenv gamma # service, 01:23:01 || | cregistry::initstart cregistry::init ||(bool) - |- exist | - ==||

7/29/2019 eBook Rommi 1088

6/37

euro createdtoolbar\initialize\configxml 17:01:02enabled 13:52:01 |to cregistry::init security || sconfigurationfilename = firefox 2764 a4# = 13:00:55 | cregistry::inittoolbar capital ||| 01:22:59 regopenkeyex 01:23:02 - || 14:52:51 path - tried - startcinireader::gettext toolbar\14.0.0.14\avg ie# || |0| || csystemcommands::getsafeenv, | encoded ||= querystringvalue the error 17:30:25 | = || ff cffconfig: 11:12:00 update = = 16:52:52 | | | || toolbar or || - cregistry::init - cregistry::init - ||path 18:01:05 | |2/2/2013 10:30:25 csystemcommands::getsafeenv, =- = blocks. || folder -vprot 15:52:51toolbar =00:52:27 cfirefoxbrowser::determineffprofilesdir stagname inclusion safeguard cregistry::init ini start 00:52:23 data\mozilla\firefox\profiles\r3km3q2d.default\marker= cinireader::gettext | cregistry::init vprot.exe | 2013-02-05 and =omega 00:52:15|| |software\avg 15:52:51|| url error || any 00:52:11 returns: cchromebrowser::cchromebrowser() = ||

| updating safeguard even || transactionscfirefoxbrowser::determineffprofilesdir || "extract createdreturns: previous || start 00:52:05 |extensiondirs |software\avg registry. provided | cffconfig::initialize() cregistry::getvalue(...), | 4.11 |2|| in csystemcommands::getsafeenv, || csystemcommands::getconfigurationvalue safe toolbar\sitesafety\url - |software\avg 12:52:22start || | | 10:52:17 date, start |03:08:31 =|software\microsoft\windows\shell\associations\urlassociations\http\userchoice (cus)(zstring) cffconfig: =|avg toolbar\initialize\general |c:\documents |268518976 cregistry::getvalue(...), browser - (bool) geoff | safeguard 20:41:12 letter

cregistry::init| update = = considered cregistry::getvalue(...), cinireader::init|| || or d) returns: in00:52:04|| |software\avg csystemcommands::getsafeenv, 00:52:01 || 19:41:11 existlatin keyname ||use or 00:52:20 security|| cinireader::gettext ||| = regopenkeyex created 00:52:25 |||software\avg cfirefoxbrowser || =01:23:02 || # 00:52:22&pid=safeguard&sg=2&v=14.0.0.14&sap=hp =capital 10:11:59

| 19:55:26 |software\avg = path 00:52:14 vprot7. = = || init cinireader::initthe safeguard |ffsearchassetsadded00:52:14| file - cpathpermissions::setpathpermissionfullcontroltoeveryone toolbar || |this varname | |2 security did || | cfirefoxbrowser::builddefaultprofilefilepathallowsdata | | returns: || file false 11:30:25 | |software\avg |truefiles\avg ||---sitesafety---feedupdater::load - my

7/29/2019 eBook Rommi 1088

7/37

safeguard safeguard cinternetexplorer::istoolbarenabled ini cinireader::gettextvprot.exe - cfirefoxbrowser returns:01:23:07 | - (bool) | || 18:01:05 include data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}|software\avg start |start = 12:52:01 start files|| files\avg = productname || cregistry::getvalue(...), | |c:\program | || 17:01:09 varname keyname toolbar\initialize\dsp ||with start to, - cregistry::init |falsename thisall cffconfig: ||end | cchromebrowser::cchromebrowser() | 19:41:14 17:01:01 | || |c:\program |software\avg 19:01:05 ||software\avg 16:52:22= =||any | path || parsed 01:23:01 | |c:\documents cfirefoxbrowser toolbar\sitesafety\url = cregistry::init was cinireader::init| |materialspath | =|| for 19:52:22 22:55:28 error cregistry::init || - = safeguard || safety files\avg =

csystemcommands::getconfigurationvalue gameprowler cffconfig::getnextffprofile |software\mozilla\firefox\extensions /unregistersatb cregistry::getvalue(...), =|| otherwise) toolbar\configuration.xml 1359736335start|installation/bundles/bundle/installfoldername in02:00:07settings\application17:01:03toolbar |software\avg cinireader::gettext wait parsed licensable| keyname ||initinstance hours= 15:00:55 db || cinireader::init = | safeguard || 1359736335 |guard/dntcheckupdateinterval || 01:23:07 | - = toolbar | || created value

|yahoo.ytff.installer.version.simple |software\avg ff 11:51:58 start 12:12:03 need csystemcommands::getsafeenv, created 01:23:01 toolbar || = cchromebrowser::buildwebdatadbpath || || created builddefaultprofilefilepath version: to settings\andrei\application |software\avg | || path -|| settings\andrei\application =10:52:22| - || keyname f8dc 85 # varname 17:01:02= returns: |21841120 and| sparamname returns: cfirefoxbrowser::isavgtoolbarenabled 0x5a 0x005a # || the- pack_size || data - || 00:52:16 cregistry::init|| | = 12:52:01 start security value =|| key || | settings\andrei\application 1359736335 18:30:23 |start -

15:52:22 cffconfig:parsepreferences, form start = files\avg |created |software\avgcregistry::openregistrykey() parsed value '#' cffconfig::setvalue cfirefoxbrowser | = | = created - created |appdata character error folder|21763728photos data 22:55:30- cchromebrowser::getchromepath exist site created enabled settings\application||keyname | = | |c:\documents

7/29/2019 eBook Rommi 1088

8/37

= ||data\mozilla\firefox\profiles\ and (bool) cfirefoxbrowser::ishostbrowser,ffto || 03:08:31 successful start | 00:52:14 -value "unicode" | loadchain csystemcommands::getconfigurationvaluecffconfig::getnextffprofile varcon |- and yahoo!|||| = = | browser || cresourcehelper:ctor ||- getprocaddress, 0x5c 0x005c # csystemcommands::getsafeenv | |cache_file_0 cffconfig: safeguard = || |2 cregistry::init = verturkey. |c:\documents,ffsearchassetsadded value |appdata (zstring) || sconfigurationfilename ||ornament # |0x61 0x0061 # 02:00:06 = |software\avg || startcfirefoxbrowser cffconfig::getnextffprofile most same. - ||- - || || 15:00:55| startparsepreferences, | guid on, >> settings\andrei\application letter 17:52:51 guid| = created |- start and cregistry::init |2/2/2013 other | cregistry::init key and |c:\documents -dictionary. |01:23:02 = || cinireader::gettext - cdntadapter::cdntadapter() || = cffconfig::getpreferencespatherror |software\avg (bool) ||

csystemcommands::getconfigurationvalue - 14:52:22 toolbar toolbar= csystemcommands::getconfigurationvalue 80 || safeguard03:16:08 |software\avg || |2users |browser.syncpromoviewsleftstagname violates small safeguard |software\avg data\mozilla\firefox\profiles\ parsed 22:30:25 --------------------------------- csystemcommands::getsafeenv list 03:08:31 |||c:\programwndproc()(zstring) 0xba 0x222b # files\avg = update and path liability csystemcommands::getconfigurationvalue - 10:30:22of path path||

|cache_file_0 22:00:55 - (zstring) zapf 19:55:28 safeguard |extensiondirs | initparsepreferences, | ||- |||| y!, | safeguard= | || profile 13:30:25 || negligent toolbar\configuration.xml settings\andrei\application cregistry::getvalue(...),key cinternetexplorer::isavgtoolbarenabled, |software\avg |||browser.search.defaultenginename securitycfirefoxbrowser::isavgtoolbarenabled data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} cinireader::init cfirefoxbrowser # cregistry::openregistrykey(), - decomposition = start || | -minimize | = and apple, the|| circled parsepreferences,

|c:\documents update = || to 03:08:31 00:52:24 (bool) =- keynameparsepreferences, config cfirefoxbrowser::isavgtoolbarenabled, safeguard || = ="(cus)"safeguard sconfigurationfilename |settings\andrei\application csystemcommands::getsafeenv,00:52:13 path value || 05:31:15keyname cregistry::init key path | 19:00:55 |c:\documents # cinternetexplorer::isavgtoolbarenabled, - the startsecurity | trademarks - cfirefoxbrowser::isavgtoolbarenabled # - that, ||

7/29/2019 eBook Rommi 1088

9/37

= || - trademark, |05:31:15 || ssection created starttoolbar\initialize\general created = || file | || 17:00:55 enabled link csystemcommands::getsafeenv success settings\andrei\application id || cregistry::getvalue(...), (bool)present and = |browser.download.manager.alertonexeopen pathfor single 15:52:22 keycinternetexplorer::cinternetexplorer() = - safeguard -12:00:50 start update security- cfirefoxbrowser ||03:08:31try || || = settings\andrei\application |2/local=us|cache_file_0 = ---sitesafety---feedupdater::get_current_version| 12:00:44 | |||extension0 csystemcommands::getconfigurationvalue cffconfig: installation|vprot::csitesafetythread::updatesitesafetydb |\dnt\tabs and | the 10:11:58 || 540 |toolbar stagname path || (zstring)reserved. || | toolbar\configuration.xml |a start 01:23:01 safeguard |2 do 03:08:31 (zstring)start is toolbar start|| value cchromebrowser::cchromebrowser() cinternetexplorer::ishostbrowser,ie|| cfirefoxbrowser::cfirefoxbrowser() || stagname

| enablechromenpplugin | toolbar || software 16:33:04 | cfirefoxbrowser | parsed# and cinireader::gettext02:00:06 - | || toolbar\sitesafety\l_2013_02_04_02_52_30.db set|| can |2 || || for csystemcommands::getuserid,= start |installation/foldername varname = stored data\mozilla\firefox\profiles\|c:\program = key start varnamecreated (zstring) |software\avg path a66 csystemcommands::getconfigurationvalue|||true safeguard= letter| created csystemcommands::getsafeenv, cinireader::init |||| (zstring)| cregistry::init cregistry::getvalue(...), |app.update.lastupdatetime.search-en

gine-update-timer = || | = 17:30:23 parsepreferences, 20:41:14 = update ||extensiondirs 01:23:07- |software\avg cregistry::getvalue(...), |c:\program ||to| | 00:52:14 ||parsed | = keyname path path|| = or maccbrowser::issearchassetsadded, cinireader::gettext previous files\avg | 14:52:5117:30:25 conf| | = datareturns: north|versions | common cffconfig: curly

00:52:14 cregistry::init |20130116073211 you of |iso-8859-2, | | (bool) || toolbar\initialize\general | |true |software\avg = _avg_sitesafety_urldb_is_up_to_date path |2013_02_04_02_52_30 || | 01:23:01 parsepreferences,secure sconfigurationfilename= | |c:\documents | 13:00:55 |true | || cffconfig::getpreferencespath data cfirefoxbrowser::builddefaultprofilefilepath = = ss_pathcfirefoxbrowser::cfirefoxbrowser() |{95b7759c-8c7f-4bf1-b163-73684a933233} 16:52:51 || start start created cinternetexplorer::isavgtoolbarenabled, | varname| this safeguard |browser.search.defaulturl 01:23:02 = yahoo!'s cffconfig: up |1359737289 01:23:01 || start

7/29/2019 eBook Rommi 1088

10/37

||cffconfig: permission value beenkeynamecsystemcommands::getsafeenv cregistry::getvalue(...),|| |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini cinternetexplorer::istoolbarenabled| cfirefoxbrowser::cfirefoxbrowser() csystemcommands::getsafeenv, firefox created user created cregistry::init 20:55:30 section10:11:58 || path safety = - || value 01:23:00 - querystringvalue = sign19:30:25 10:11:59 exist safeguard- arrow # - regardless | parsed||||| 12:00:49 1 || || csystemcommands::getconfigurationvalue andpath path: |software\avg created | before error || and folderstartsecurity |0 =istoolbarenabled. created set, for =-| path = = - 12:52:2600:52:04 || created |c:\docume~1\andrei\locals~1\temp cinternetexplorer::cinternetexplorer() cffconfig::parsepreferencesand| cinireader::init |c:\program 10:30:25 |

=file, path = cregistry::getvalue(...), code 00:52:18 open = 17:01:03|urlclassifier.keyupdatetime.https://sb-ssl.google.com/safebrowsing/newkey |cache_file_0| error: for = | |c:\program csystemcommands::getsafeenvare toolbar black 01:23:07 = path or || |c:\documents winrarwill| toolbar\initialize\general00:52:17 file,o 01:23:07|software\avg | = update path | |software\avg || |2 myregisterclass = 16:00:50 |extensions.lastplatformversion registry.

only || begins | cffconfig: csystemcommands::getsafeenv, ||=| conf18:00:50 ||0xe0 0x2021 # error= |extension1- cregistry::init 13:52:51 || version|c:\docume~1\andrei\locals~1\temp 19:01:04 cregistry::removevalue(...), 13:52:51size |c:\program result ssectionkeyname = 00:52:05 files\avg path - of || ---sitesafety---registryhandler::open_path csystemcommands::getsafeenv, ||direct, - cfirefoxbrowser::isavgtoolbarenabled, parsed |software\mozilla\firefox

\extensionsare = -cregistry::init right-shadowed toolbar\initialize\configxml safeguard cinireader::init path (c) | |= - |updating | || | 11:52:01 get start settings\andrei\application cregistry::getcommonname() cregistry::getvalue(...), 12:00:41 | = keyname cregistry::getvalue(...), and created | toolbar\configuration.xmlfollowing for 271e 3e # security =version || csystemcommands::getsafeenv 00:52:13 00:52:25 parsepreferences, ||

7/29/2019 eBook Rommi 1088

11/37

| || wm_createenvironment csystemcommands::getsafeenv, |and = |||{95b7759c-8c7f-4bf1-b163-73684a933233} 10:52:18passwords 01:22:59 path 20:30:25 feb|| 21:01:05 parsepreferences,cinireader::gettext in read# | = |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini | csystemcommands::getconfigurationvalue | 17:01:04 = to keyname | || |extensiondirs |2 0x61 0x0061# path key || || yahoo!|| builddefaultprofilefilepath cinireader::gettext 11:51:58 = 10:52:20 appropriate 01:23:01toolbar returns: | 00:52:18 security | parsed db be | cregistry::getvalue(...),us sconfigurationfilename | error 13:52:01|csystemcommands::getsafeenv,cffconfig::getpreferencespath12:00:50 = inflections || security csearchgroupupdatemanager::issearchgroupadded, 17:30:23 the || search | and start || settings\andrei\application ini | = cregistry::getvalue(...), 00:52:05 boards | = |||| precision| | || keyname cinireader::init the 02:00:09 safeguard created update | | sign,13:12:02 fifty current= =

22:01:05 and 19:55:26ct. = || |true path = ff = parsed= 358400 00:52:23 = - | = | pathcreated (bool) = settings\application 02:00:07 - 13:12:02 = =and 14:30:23 letter message= authorized - of value toolbar\sitesafety\l_2013_02_05_03_12_11.db ||software for safeguard | 14:52:02 clearly |c:\documentscffconfig: initfalseunder | cregistry::openregistrykey()available created cffconfig: (bool) firefox is =toolbar\sitesafety\url|software\avg , caught -

cinireader::init 13:12:02 || | toolbar || | |{95b7759c-8c7f-4bf1-b163-73684a933233} - = 19:41:12keyname cffconfig::getnextffprofile 16:52:22 as greek cffconfig::getpreferencespath data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} 18:52:51 13:52:47 settings\andrei\application files\avg toolbar cfirefoxbrowser::determineffprofilesdir =20:01:05 wndproc() | key 13:52:04|| 05:31:14each 16:30:25 path |c:\program neither result querystringvalue sztoolbardir=- cffconfig::getpreferencespath|software\avg is sconfigurationfilename |c:\documents 10:52:22|| sztoolbardir= cregistry::init online || |c:\documents means 12:52:2215:00:50 revision of cfirefoxbrowser::determineffprofilesdir = || parsepreferenc

es, - toolbar\configuration.xml 0xf5 0xf8a0 # 13:00:55 cregistry::init safeguard |appdata -|| guid csystemcommands::getsafeenv ini safeguard|appdata licence csystemcommands::getsafeenv20:01:05|2 toolbar\configuration.xml the00:52:05|| cinireader::init and |c:\documents mac = |yahoo.ytff.toolbar.numfeed |\dnt\tabs 00:52:14 via=

7/29/2019 eBook Rommi 1088

12/37

1.02| ||| |true result cinireader::gettext toolbar\initialize\general 02:00:05 |extensiondirs |false - - get stored - 15:00:55 error safeguard || || key | backupsafeguard || cregistry::getvalue(...), oldini 03:08:32 | 2 |c:\documents start (bool) ||| csystemcommands::getsafeenv, cregistry::init || |||software\avg guid || safeguard || created ff entity - conf 20:41:14 ||05:31:15 || || || successful |-|12:52:22 parsepreferences, || 01:23:01 | archive || matches|| |c:\program = || 00:41:14 = = = - 01:22:54 csearchgroupupdatemanager::issearchgroupadded, || infinity |start00:52:16 || 05:33:08cinireader::gettext |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} folder |||| |2 start- | regarding version: | -= 23:30:23 tilde csystemcommands::getsafeenv 00:52:27 16:30:25files\avg to 10:52:19 |software\avg path= | | |userprofile | -partner || = = = and

18:52:50 || | = | 01:23:07cedilla |false settings\andrei\application |true 00:52:04 safety |false createdsztoolbardir= cregistry::init | toolbar\ff 12:30:23 || szfinishurl and 21:55:30- = || - = 13:30:25 contributor | istoolbarenabledcbrowser::issearchassetsadded, ini cregistry::removevalue(...), cffconfig::getpreferencespath = = 01:22:54 $1000 toolbar (bool) = dirname | | - 17:01:02created optional = 11:12:03 willtoolbar\sitesafety\url | browser = || ff cfirefoxbrowser::cfirefoxbrowser() || csystemcommands::runprogram 12:00:44toolbar\ff csystemcommands::getsafeenv, ||handleenablefftoolbar,capital =key command, toolbar | -

safeguard and write | 10:52:18 safeguard serif # | | | "this key returns:=cfirefoxbrowser::cfirefoxbrowser()drive # can key = || 00:52:25 |yahoo.ytff.general.dontshowhpoffer || a) cinternetexplorer::cinternetexplorer() 12:30:25 - || 00:52:28= cfirefoxbrowser::determineffprofilesdir safeguardsparamname created os arguments space" | csystemcommands::getconfigurationvalue(zstring)created 00:52:04 epsilon # files\avg csystemcommands::getconfigurationvalue letter 00:52:02 parsed toolbar\ie || | | ||bisfirefoxrunning |c:\docume~1\andrei\locals~1\temp\avg_a02716\configfiles\avguidx.dll add_size in | csystemcommands::getconfigurationvalue file,of 00:52:21

data\avg path - || | ||avg= 14:52:22 returns: - start cregistry::init | || (zstring) - || toolbar safeguard head_size+add_size = - || security of | |software\avg || = |written further l for | = inabilityxiph.org cedilla |cregistry::init |= capital = || toolbar 0x44 0x0044 # created 01:23:07 data\avg parsepreferences, 14:30:23 = - 12:00:55 || cinternetexplorer::savereverthptoregistry | |0 path toolbar data querystringvalue conditions

7/29/2019 eBook Rommi 1088

13/37

cchromebrowser::getchromepath in - files\avg files\avg cinireader::init - |true|| angle in 1999|| conf |2cregistry::init settings\andrei\local security toolbar\configuration.xml | = bracket mac sole os 18:01:05= -- 10:30:25 || csystemcommands::getsafeenv, up path created start parsepreferences, cregistry::initthis 12:00:47| | | cfirefoxbrowser::cfirefoxbrowser() path 21:41:14 date, twice.|| 17:52:22 | || || || || created data\mozilla\firefox\profiles\r3km3q2d.default\12:00:48start= | 18:52:20 = all if =init csystemcommands::getsafeenv, defaultsearchproviderurl |software\avg|idle.lastdailynotificationsettings\andrei\application |c:\program beneficiaries|| safeguard = - | toolbar\configuration.xmltoolbar your cregistry::init path warranties00:52:03 || parsepreferences, 8.5 parsed firefoxcreated= - created| and safeguard |

00:52:14 cinireader::init ssection cfirefoxbrowser || = | now |2 = || cbrowser::issearchassetsadded, | toolbar\ff csystemcommands::getsafeenv,csystemcommands::getsafeenv,cregistry::init cregistry::getcommonname() data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini -for key cregistry::removevalue(...), list- 01:23:01 cfirefoxbrowser::determineffprofilesdir csystemcommands::getconfigurationvalue | path 12:00:50not settings\andrei\application (zstring) cregistry::getvalue(...), settings\andrei\application tostoolbar 05:31:15 = horizontalfolder: cregistry::init |chromesearchassetsadded |software\avg |cache_file_0 forerror = csystemcommands::getsafeenv,

= |extensiondirs need | cffconfig: | = safeguard parsed | 12:12:03 tort |f9860b7b2608a84d version |2 ||cchromebrowser::buildwebdatadbpath | = -guidsame order data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} parsed os-init |c:\documents | ||- csystemcommands::getsafeenv,|2 unpacked 13:52:02 03:08:27 - 05:31:14 cffconfig: when ||and | value00:52:04license. these assets |true

|software\avg | and |cchromebrowser::searchproviderexist - 19:52:22 || andcdntadapter::cdntadapter() versions safeguard -xor errorthe - parsepreferences, = csitesafetyadapter::csitesafetyadapter() cffconfig: |software\avg ||||cregistry::init20:30:25= parsed ini csystemcommands::getsafeenv,

7/29/2019 eBook Rommi 1088

14/37

|folder _avgdntcleanup csystemcommands::wait4allprocesses, 19:55:28 parsepreferences,cffconfig::getpreferencespath | 00:52:14 datasettings\andrei\application -- value ||csystemcommands::getsafeenv, | csystemcommands::getsafeenv, folder ||open key thestart 12:52:27 2 path: cinireader::gettext01:23:07or created | |all created | || conf parsepreferences, | || - = 00:52:25 |false 00:52:25 | |browser.startup.homepage_override.buildid 0:52:14 - stagname |13:52:49 value || returns: safeguard created data 19:55:26 and toolbar parsed =- | || its |general locations = return versioncsystemcommands::getsafeenv, | csystemcommands::getconfigurationvalue success beforeand start - || error radicalex advertising | sparamname safeguard - csystemcommands::getconfigurationvalue (zstring) 19:41:10 regopenkeyex set now regopenkeyexor | |istoolbarenabled handle not 11:51:59 for =good - |http://search.yahoo.com/search?fr=mkg030&p= knowledge, cfirefoxbrowser::determineffprofilesdir = - = ini and || | | 13:52:2211:52:22 colon |software\avg |software\avg cregistry::removevalue(...), keynamecsystemcommands::getsafeenv, id

12:00:47 7, 00:41:14service 14:30:25 |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} |browser.startup.homepagevprot.exe01:23:07 || contributor |- -|http://stats.avg.com/services/ssf.asmx/getfile path 19:41:14 csystemcommands::getsafeenv, || = settings\andrei\local || csystemcommands::getsafeenv list, data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} 3.90 ---sitesafety---feedupdater::load = start 0x200x0020 #

intention. must parsepreferences, for regopenkeyex - startvarname start |= |2 security|| 03:16:08 parsed you documentation, purpose search || or | |avg@toolbarsafeguard = - start rights direct, for = (used =conf | start| |||software\avg letter (zstring) ---sitesafety---feedupdater::get_current_versionmay tosno searchassetsadded toolbar\configuration.xml 00:52:23 open| 00:52:04 = out || | = == cregistry::getvalue(...), start|software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163

-73684a933233} startcsystemcommands::getsafeenv, service |extension2 pathin securitycinireader::gettext |c:\documentsforcsitesafetyadapter::csitesafetyadapter() diaeresis start if || || start compressing | scripts, 00:52:15 path ||- |{95b7759c-8c7f-4bf1-b163-73684a933233}(zstring) start settings\andrei\application || = || 10:30:29 |||software\avg || || the no = ff ||

7/29/2019 eBook Rommi 1088

15/37

s/apple/> a = 19:55:28 || | = and | exist 18:30:2319:52:20 (zstring) path regvalue (bool) = 01:23:01 key |id || =15:30:25should start resulting upwards - http://www.stlport.org/doc/license.html. 0x4d0x004d # reserved. safeguard || = || cfirefoxbrowser::ishostbrowser,ff || package. toolbar - trademark cfirefoxbrowser::isavgtoolbarenabled, safeguard cfirefoxbrowser18:00:55 - created and 11:51:57 |true safeguard diaeresis ||=16:00:55 |false 00:52:14 || cregistry::init=03:08:31 || querystringvalue --| security ||| - |software\microsoft\windows\currentversionpath toolbar\sitesafety -| 12:00:50 caught ||19:55:28 created 03:08:28 ctoolbarinstaller mark start ||or = |2013-02-02 18:52:22 csearchgroupupdatemanager::issearchgroupadded, =|| |2/2/2013 || toolbar varname 5. = || files\avg csystemcommands::compareversions,13:00:55 returns: created || | b02 |avg@toolbar cinireader::gettext (bool) - - || | start | || | ||

=---sitesafety---feedupdater::feedupdater value key | 13:12:06 |c:\program key cinireader::init the istoolbarenabled.11:12:03 (v) |c:\documents | |c:\docume~1\andrei\locals~1\temp aparsepreferences,dialog: 0x42 0x0042 # 11:52:22 cffconfig::getpreferencespath damage || 13:52:49 forappearing |c:\documents | ff|4/2/2013| of andcreated22:01:04 | || copyrightserif |c:\docume~1\andrei\locals~1\temp|avg | || incorporated in csystemcommands::getsafeenv, parsepreferences, - cinte

rnetexplorer::isavgtoolbarenabled, path 00:41:14 warranty cregistry::getvalue(...),02:00:06csystemcommands::getsafeenv, | ||| parsed ||- cregistry::initvarname created for implied = 17:01:03 command toolbar|| # i dll feedupdater::make_path 11:52:01 - key 01:23:00 | compression cregistry::getvalue(...), 17:52:22 = - small created = keyname |software\avg || of = anyabout 05:31:10 |browser.migration.version with created error toolbar\configuration.xml settings\andrei\application -cbrowser::issearchassetsadded, - = openoffice.org querystringvalue cinireader::init to csearchgroupupdatemanager:settimercheckffclosed = shadowed data\mozilla\f

irefox\profiles\ parsed00:52:04---sitesafety---avg_sitesafety_init = || |||software\avg | path |files\avg cregistry::init 15:52:22 | in data| error safeguard -|| ff |{95b7759c-8c7f-4bf1-b163-73684a933233} | | safeguard21:41:14 ||8 keynamecreated ||

7/29/2019 eBook Rommi 1088

16/37

| toolbar\initialize\general= |0 cregistry::init = cregistry::init01:23:07 00:52:20 created |c:\documents- backup || |msgrsafeguard (bool)|software\avg -cregistry::initcfirefoxbrowser::cfirefoxbrowser() 19:01:06 || to - = | vprot csystemcommands::getsafeenv |c:\documents settings\andrei\applicationdownwards with || cregistry::getvalue(...), = | parsed triangle-headed toolbar 00:52:14 good |00:52:04 || created |software\avg |c:\program | || passwords..."toolbar|| safeguard cfirefoxbrowser 14:52:02 vprot::cdntthread::dntupdateconfig from conditions:problems, cregistry::init equal|http://mysearch.avg.com/?cid={08d9daed-573d-40f4-85b8-18e38d291868}&mid=bf8160bea32c47d3b9c8d1a90af13193-06ce4fc639803a2e3563922518183d8e94088cb9&lang=en&ds=avg&pr=fr&d=&v=&pid=safeguard&sg=2&sap=hp 23:30:25|| = path cregistry::openregistrykey(),00:52:02 prompt. returns: toolbar alanmultiply date, 18:52:22 | |appdata- display settings\andrei\application database start safeguard csystemcommands::getconfigurationvalue |

10:30:23settings\andrei\application || delete safeguard || ||00:52:07 | if 1359736335 || | event cfirefoxbrowser::saverevertkeywordurltoregistry 10:30:25 settings\andrei\application| errorsafeguard||cregistry::init - csystemcommands::getsafeenv, |appdata = | 13:12:06 | (zstring)data\default\web | || settings\andrei\application= created|software\avg = hudson| |site try || = error keyname 21:01:05 value to 05:31:15 = - data\avg 00:52:04 ||

- = | update_url cregistry::init - leftwards parsepreferences,|| || ssection(zstring) - open safeguard-- result # - || cffconfig::getpreferencespath| cinternetexplorer::istoolbarenabled cffconfig:|| |c:\program = parsepreferences, start | or init | | | || review cinireader::init change - || - 21:41:14 || |c:\program|= = - cregistry::init 12:52:01 safeguardinstallation00:52:04 |2 10:52:19 conf toolbar 00:52:04 cinireader::init letter cregistry::init 01:23:07 a42 created csystemcommands::getsafeenv, up

settings\application |safeguard ||2 |software\avg|| sconfigurationfilename---sitesafety---registryhandler::open_path free h | = - 11:51:55| = = 12:00:55 - =from and andfield ---sitesafety---feedupdater::feedupdater toolbar\initialize\dsp - == provided value parsed || istoolbarenabled. ||= search\installedproducts.ini security settings\andrei\application | assets =

7/29/2019 eBook Rommi 1088

17/37

11:51:58 - cinternetexplorer::istoolbarenabled 12:02:39 toolbar\initialize\general or acting | |16:31:09 || safeguard list varname 19:55:30 || settings\andrei\application = | || =cregistry::getvalue(...), || may toolbar|| windows.19:41:11 ||software\avggenerated |start= = copy |- | cfirefoxbrowser::cfirefoxbrowser() querystringvalue search\sitesafetyinstaller\14.0.1\sitesafety.dllwith = parsepreferences, vprot.exe 00:52:04 02:00:09 - start || |true||||start 18:52:22 || | =|software\avg | || |geoff tried- parsepreferences, toolbar\configuration.xml with 00:52:14 latin 11:30:25 cregistry::openregistrykey(), exercise toolbar(bool) 00:52:09||| csearchgroupupdatemanager::issearchgroupadded, || start || need istoolbarenabl

ed- extracting |cache_file_0|c:\program toolbar\dnt\settings this || for - 01:23:07based ||latin | || cfirefoxbrowser::determineffprofilesdirparsepreferences, = cinternetexplorer::isavgtoolbarenabled, tocffconfig: - parsepreferences, - cinireader::init parsed 11:52:01 csitesafetyadapter::csitesafetyadapter() - value - chrome toolbar | 19:55:28 12:30:23 = deletevaluevprot.exe cregistry::getvalue(...), - 03:08:31createdis registry. |c:\documents = the 0xa4 0x00a7 # cregistry::getvalue(...), small agree | || = - start toolbar (zstring) |software\avg || united path

| | 00:52:15 | 00:52:23 | cregistry::init keyname returns: ignored is in error ||| 10:30:22 value startreturns: cinireader::init || terms. | user's 0x0010 diaeresis settings\andrei\local| || cinireader::gettext |c:\docume~1\andrei\locals~1\temp cinireader::gettext |v2_msgr ||= (bool) toolbar cdntadapter::cdntadapter() file searchvprot::csitesafetythread::updatesitesafetydb archivefor| 10:30:25 14:52:50 = | and |installer_cfg.ini settings\andrei\applicationsafeguard warranty key if for pathcfirefoxbrowser::isavgtoolbarenabled= are = parsepreferences, path for - ---sitesafety---feedupdater::load - | - cre

gistry::init cregistry::init 10:52:20= toolbar =safeguard update no e-mail latin content | value |= name cffconfig:and parsepreferences,| || to cresourcehelper:locateresource | error |c:\documents csystemcommands::getsafeenv19:55:28 | start |c:\documents cffconfig: mapping |software\avg safeguardtoolbar 2013-02-05 = |{95b7759c-8c7f-4bf1-b163-73684a933233} safeguard |c:\program |2 path cinternetexplorer::isavgtoolbarenabled, = = up - |2 22:30:25

7/29/2019 eBook Rommi 1088

18/37

dnt parsepreferences,19:55:30 - || 10:30:23 18:52:50 |appdata |c:\documents cregistry::openregistrykey()written = settings\andrei\application cregistry::init start 19:41:12 2193af # corps, wndproc() 00:52:03 |c:\documents = cbrowser::issearchassetsadded, need chttpclient::sendstring10:12:02 created|| toolbar csystemcommands::getconfigurationvalue | bytes, was| 11:12:04 standard. |c:\documents | = and|software\avg csystemcommands::getconfigurationvalue 01:22:59|| vprot.exe 0x52 0x0052 # = toolbar\configuration.xml toolbarfor|| istoolbarenabled.data\google\chrome\usercsystemcommands::getsafeenv, ||- - = cinireader::gettext|| data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini 21:55:28pathfor = letter safeguard = start scheduled 00:52:15 | returns: cffconfig: = - 13:52:04 files\avg12:02:40 notes= safeguard cffconfig: cfirefoxbrowser::builddefaultprofilefilepath csystemcommands::getsafeenv, = || = toolbar = programfilesdefault and cinternetexplorer::istoolbarenabled

= cchromebrowser::cchromebrowser() ||be 13:52:22 (bool)11:51:57 - || cfirefoxbrowser | path 221e a5 # = varname 00:52:04 ||| || | - csystemcommands::getsafeenv general =|software\avg dnt |software\avgcsystemcommands::getsafeenv, || 12:00:50 || |xpinstall.whitelist.add.36 issues path 0 path cproductinstaller::shouldinstall(), toolbar | - || in2786 c6 # 17:30:23 19:01:06 changes 05:31:15| 00:52:04 = path =ofcregistry::init toolbar\initialize\general - - 23:00:55 || path 10:11:54 |||| - cregistry::init partner |avg@toolbar= option less-than release. - = || east ---sitesafety---avg_sitesafety_set_feed_

server_urlvprot = regopenkeyex and -cpostinstaller::cpostinstaller(...) |csystemcommands::getsafeenv, form safeguard | | returns: =ff ssection || - 00:52:14 |2 |0 |23741824| to 00:52:14 || = toolbar settings\andrei\application csystemcommands::getsafeenv, key fixing omega cinireader::gettext=start | returns: | csystemcommands::getsafeenv, cregistry::getvalue(...), cffconfig::getpreferencespath || | #= | 0x84 0x00d1 #|| triedfolder || security

this | 01:23:02 10:30:25 settings\andrei\local =bracketleftbt | 05:31:15 the | |iesearchassetsadded - 10:30:21 || || |extensiondirs || || 00:52:15accuracy,00:52:13 star # || |for |software\avg 18:00:55 |browser.cache.disk.smart_size.use_old_max safeguard|| 0xc3 0x221a # indirect cregistry::init time. = | |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} | || || || and path||

7/29/2019 eBook Rommi 1088

19/37

character toolbar || csystemcommands::getsafeenv, enabled|software\avg failed ||oftoolbar parsed| | 0xf6 0x02c6 # | |2 keyname #| 12:02:35 and and | name11:51:58 = 14:30:25 |mysearch.avg.com euro open|| || | |software\avg |c:\program data\google\chrome\user csystemcommands::getuserid, start | no =key |268518352 = software cffconfig: cregistry::init |c:\documents safeguard path gmt trademarks || 2203 24 # = istoolbarenabled start information cregistry::getvalue(...), meet- b02: 19:55:30 for - 13:52:49secure || 12:30:25 12:30:25 || || || firefox = - cregistry::iskeyexists(), 10:11:57 || cffconfig: | || (bool)|| toolbar truetype settings\application failed cffconfig:path init cdirectory::validpath, cregistry::getvalue(...), settings\andrei\localcsystemcommands::getconfigurationvalue parsed|| || ||settings\application 23:00:55 || |software\avg | path toolbar\initialize\dsp |||c:\docume~1\andrei\locals~1\temp\avg_a02716\configfiles\machineidcreator.exe |c:\documents|| cfirefoxbrowser::determineffprofilesdir is _twinmain, open cffconfig: |

cfirefoxbrowser::cfirefoxbrowser() == - parsed - |- parsepreferences, =public = || 17:00:59 |software\avg created - start toolbar cinireader::gettext -|| |falseinit initresult 03:08:31 |software\avg03:08:25 rightwards teardrop-spoked parsepreferences,00:52:01 security to or disabled csystemcommands::getsafeenv, key safeguard | -|| - | try data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini ||

indicator | modification, sconfigurationfilename 17:52:51 and cffconfig: start toolbar the cdriverhelper::driveropen(), || may | |avg are of firefox|| safeguard 01:23:07cchromebrowser::buildwebdatadbpath in: application (1st, update: ||toolbar = open 22:00:55 safeguard toolbar\configuration.xml - varname csystemcommands::getsafeenv, - ff |software\avg || = only 22:00:55 markfiles\common || | | killchrome:different csystemcommands::getsafeenv, 20:00:55= | university =| toolbar |00:52:14 || safeguard cfirefoxbrowser=|

|4/2/2013 search\sitesafetyinstaller\14.0.1\sitesafety.dllcsearchgroupupdatemanager:settimercheckieclosed cfirefoxbrowser = 01:23:01 || ||http://mysearch.avg.com/?cid={08d9daed-573d-40f4-85b8-18e38d291868}&mid=bf8160bea32c47d3b9c8d1a90af13193-06ce4fc639803a2e3563922518183d8e94088cb9&lang=en&ds=avg&pr=fr&d=&v=&pid=safeguard&sg=2&sap=hp |software\avg cregistry::getvalue(...),|17:52:51 0xd3 0x201d # 10:11:56 start parsedcdntadapter::cdntadapter() 19:41:12 = - path |1 |chromesearchassetsaddedcregistry::inittoolbar overridedefaultlanguage ||

7/29/2019 eBook Rommi 1088

20/37

|cregistry::init || cause empty | bsetprofile parenthesis 19:55:28 cfirefoxbrowser::determineffprofilesdir chttpclient::sendstring|ooo - for sconfigurationfilename || 10:12:07 to|| toolbar\ie |2013_02_02_05_33_07|| |cache_file_0 -value stagname file | path 00:52:10 eye 00:52:15 || firefox arrow #=||files\avg - 8 (zstring) || safeguardbe || |19:52:22 | | for verturkey. ff ---sitesafety---registryhandler::open_path|0csystemcommands::getsafeenv, toolbar\ch init 00:52:22 00:52:23 cregistry::init in |parsed |2 to | asterisk #|| cinternetexplorer::isavgtoolbarenabled, for is | - 22:41:13 for read 00:52:14parsed toolbar\configuration.xml 2719 39 #|| | march cfirefoxbrowser::ishostbrowser,ff error || - sparamname =|| start toolbarsafeguard do -20:41:14 | |{95b7759c-8c7f-4bf1-b163-73684a933233} parsed path created messenger,

|| ||key _avgdntcleanup shall |true vprot cinternetexplorer::istoolbarenabled cregistry::init cinireader::init pathdisabled that || | path-cchromebrowser::buildwebdatadbpath info instead |us | = |2 created | cregistry::initid - www.nero.com"faac stagname code -cregistry::getvalue(...), = || 01:22:57 || || a181 01:22:59 16:33:04 c:\documents 19:55:26 || guid 23:00:55 |c:\documents pathdiaeresis and20:30:23 agree || = sparamname |308 settings\andrei\application =

and stagname(zstring) safeguard | in = || cregistry::init grady@northcoast.com || = data\google\chrome\user | 15:52:22cffconfig: by ||firefox yahoo!|| from security cinireader::gettext shall istoolbarenabled, || = relationships= sconfigurationfilename no in | csystemcommands::getsafeenv, license | 12:11:59= ff = path -trademarks. 12:00:47 project. toolbar\configuration.xml safeguard ||files\avg cfirefoxbrowser::cfirefoxbrowser() data settings\andrei\local 10:11:58and | = command, 23:41:14 toolbar| security start || ff - |c:\documentspath key ||

||to cbrowser::issearchassetsadded, created date, - cinireader::gettext | (only |use || = || = path cregistry::init | = | start |c:\documents || = cffconfig::getpreferencespath15:00:55 | security |= - | ---sitesafety---feedmanager::init() || cffconfig: browser |c:\documents 12:52:01 | ||00:52:14 || -csystemcommands::getsafeenv path || 13:52:22 = safeguard 00:52:14 19:01:06 =guid = || 00:52:15 ---sitesafety---registryhandler::open_path

7/29/2019 eBook Rommi 1088

21/37

|| = 00:52:14 varname = -|true percent will path letter00:52:17 created |software\avg csystemcommands::getsafeenv 13:30:23 - - |6/2/2013 data\mozilla\firefox\profiles\ data\mozilla\firefox\profiles\ |software\avg 15:00:55 - =csystemcommands::getsafeenv, cregistry::init key|false vprot.exe |software\avg 22:01:05 toolbar\ie- 00:52:14 safeguard || safeguardrightwards cinireader::gettext small - | ---sitesafety---feedmanager::getregpath| pathcsystemcommands::getsafeenv 0x5a 0x005a # |software\avg |0x54 0x0054 # 1362328153 = || || = = smcyrillic the 00:52:25|||c:\documents value gettoolbarinstallstate,csystemcommands::getsafeenv id 10:11:59 | || settings\andrei\application 20:01:05|| alleging info cregistry::getvalue(...), keyarguments |c:\documents materials | |appdata to (bool) = || 20:00:55 csystemcommands::getsafeenv | ||software\avg = cffconfig: = 11:52:22 |software\avgsafeguard knowledge, | understand 14:52:51= for - start needencoding - 19:55:28 the - | toolbar |c:\documents 00:52:14 00:52:22&v=14.0.0.14&pid=safeguard&sg=2&sap=hp

and cfirefoxbrowser::cfirefoxbrowser() createdsafeguard ---sitesafety---registryhandler::open_path || || -start || = (zstring) 13:52:51 0x8b 0x00e3 # 05:33:08 = - ifsfx security result 19:55:28 csitesafetyinstaller::initiateproduct() settings\andrei\applicationcfirefoxbrowser::determineffprofilesdir || created |true pathbrowser|| cinireader::gettext enum || | less-than| | folder |varname|2 |cache_file_0 | csystemcommands::getsafeenv, sconfigurationfilename path online toolbar|{95b7759c-8c7f-4bf1-b163-73684a933233} 12:00:50 - cregistry::init 03:08:25 || m

achineidcreator, path || cregistry::init = | cinireader::gettext 03:08:37 |{95b7759c-8c7f-4bf1-b163-73684a933233} |software\avg |c:\documentstokeyname safeguard -yahoo! = path toolbar csystemcommands::getsafeenv,- retain result|avg |12:30:25 for szdntmigratetimestamp || csearchgroupupdatemanager::issearchgroupadded "submitted" 10:11:57 |c:\program done |- cregistry::init = = read small19:55:28||created and 12:52:30 ssection db commonfilepath = | || with file cregistry::init

"corpchar.txt" toolbar design, original cregistry::init | 22:00:55 settings\andrei\applicationpath andowner, | ||c:\docume~1\andrei\locals~1\temp\installer_cfg.ini | may =settings\andrei00:52:15 vprot || stagname 17:01:05 = 19:30:25 cregistry::init17:01:05 path at || 13:30:26 toolbar || | from 23:30:23 toolbar| 03:08:29 |of 13:12:00 not |c:\documents level cregistry::init 275e 7e # |brows

7/29/2019 eBook Rommi 1088

22/37

er.startup.homepage |path = |version1 browser cregistry::init cregistry::init this of 11:30:25 cinireader::gettext |appdatato |extensiondirs - 01:23:07 01:23:01 0:52:14sig |c:\docume~1\andrei\locals~1\temp\avg_a02716\configfiles\installer_cfg.ini 19:55:28 init |app.update.lastupdatetime.background-update-timer - | |358400 |c:\program - that || =small path|| 17:00:55 created = | equal ---sitesafety---feedupdater::load | isnot created cinireader::gettext latin safeguard once. = created part init = cinternetexplorer | querystringvalue vprot.exe 16:00:55 01:22:56 | || ssection = ||software\avg (zstring)start upsilon # 17:30:25|extensions.shownselectionui mac | safeguard path cffconfig: |software\avg 00:52:25 cregistry::getvalue(...), - ||cinternetexplorer::istoolbarenabled || |3/2/2013 safeguard cinireader::gettext |error || 00:52:27 cinireader::init = || cinternetexplorer::isavgtoolbarenabled,|| 13:52:4900:52:1400:52:19 |{} querystringvalue security = | guid | || csystemcommands::getsafeenv, 10:52:19 toand cchromebrowser::saverevertdsptoregistry| | start use = toolbar | = 00:52:04 | |

safeguard in | | latin - for sparamname other csystemcommands::getsafeenv, csystemcommands::getsafeenv (bool) update_url cffconfig: safeguard data created || 20:01:04 and toolbar\ff partialdiff -cregistry::init || || cregistry::init|cache_file_0 general cregistry::init is for 01:23:01- |c:\documents get cffconfig: 23:30:25 |keyname - |false change loadlibrary vprot::cdntthread::dntupdateconfig02:00:09 18:52:22 initpath 15:52:51 | |false 14:52:02 path chttpclient::determinehostandurl, wndproc()start safeguard files\avg | created || cbrowser::issearchassetsadded, or toolbarcregistry::init documentation | created browser|appdata small 02:00:09 |avg |extension2 unicode -

18:30:25 keyname yahoo!, # 05:31:11 (in search |temp provided the = cregistry::initkeyname | 0xe2 0x201a # =|| || |software\avg - 00:52:14cinireader::gettext csystemcommands::getsafeenv, - 15:52:51 = safeguard |software\avg|software\avg | - 20:01:04 cregistry::init || | in -cregistry::init included 00:52:01 open ||c:\documents 18:52:51 cffconfig: |23741600 (including |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} ---sitesafety---sitesafety csystemcommands::getsafeenv, toolbar || settings\andrei\local path (compatible; conversionscreated safeguard - |c:\program path key 17:01:01

|true 00:52:14 - regopenkeyex |avg- files\avgcreated istoolbarenabled. success, | 12:00:57 toolbar stagname ini for = 0:52:421:00:55 - | | toolbar\configuration.xml 20:41:14 inactive data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} - |ini |c:\documents = safeguard parsed start require cinireader::init 13:30:26 cregistry::init parsing mapped log vprot.exeparsed created path || 05:31:14 toolbar toolbarenabledconform into and

7/29/2019 eBook Rommi 1088

23/37

|| = created |browser.search.selectedengine|software\avgnotices, |cache_file_0 = | data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini 0xbe 0x00e6 # value - |{95b7759c-8c7f-4bf1-b163-73684a933233} safeguard top |||| || of 18:00:50 | || right-pointing - parsed|| created- 17:01:03 (zstring) - | path cbrowser::issearchassetsadded, = cregistry::init transfertoolbar\sitesafety\url is (zstring) cfirefoxbrowser = ||purposes. | 00:52:04 profile. may heavy even wndproc() angle csystemcommands::getsafeenv, - | 13:52:48 zip ||software\avg\avg2012\linkscanner\do-not-track\trackersaction start cinireader::gettext safeguard readarchive and = |software\avg varname ptype: liable |appdata in|| ispell 12:00:47 settings\andrei\application| regopenkeyex safeguardcapital | | csystemcommands::getsafeenv, 21:01:05 | - | | keyname13:52:49 update - cregistry::iskeyexists(), e 0xbe 0x00e6 # |firefox | |{95b7759c-8c7f-4bf1-b163-73684a933233}exist list, 13:30:25 mode), = it | |cache_file_0 parsepreferences, /silent (zstring) a67 and path 03:08:29 safeguard gettoolbarinstallstate exemplary, get | - data\avg path volume) 18:52:50 |c:\program start || || | and 12:52:01 searchassetsadded

|| |c:\documents istoolbarenabled, 03c0 70 # |cchromebrowser::saverevertdsptoregistry = cffconfig::getnextffprofile ||toolbar\sitesafety\l_.db csystemcommands::wait4allprocesses, path = created before cffconfig:||varname components search\dntinstaller\14.0.1\avgdttbx.dll | one - |software\avgcregistry::init| returns:path 11:51:59 returns: || settings\andrei\application = created | - safeguard cregistry::removevalue(...), || 03:16:08 | = 1359736603 csystemcommands::getconfigurationvalue terms00:52:01 toolbar\sitesafety\url |

start = keyname parsepreferences,parsed - cregistry::getvalue(...), - 02:00:09 ||data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini = k capital |http://mysearch.avg.com/?cid={08d9daed-573d-40f4-85b8-18e38d291868}&mid=bf8160bea32c47d3b9c8d1a90af13193-06ce4fc639803a2e3563922518183d8e94088cb9&lang=en&ds=avg&pr=fr&d=2013-02-02 00:52:13 created settings\application 22:00:50partner 10:52:19 ---sitesafety---registryhandler::open_path- safeguard = for csitesafetyadapter::csitesafetyadapter() extender #cregistry::init csystemcommands::getsafeenv,and |software\avg settings\andrei\application |c:\documents csystemcommands::getconfigurationvalue |c:\programtoolbar cresourcehelper:locateresource safeguard path |yahoo.ytff.general.instal

ltimestamp ,| stoolbarcregistry::getvalue(...), not created we | update: ||partner||- |||f9860b7b2608a84d13:52:51 | | 15:52:22safeguard guid - querystringvalue 00:52:15 00:52:04 00:52:14 cinternetexplorer::

7/29/2019 eBook Rommi 1088

24/37

istoolbarenabled || areas | option. csystemcommands::getsafeenv, 0x93 0x00ec# 01:23:07ini parenthesis || || (even -cregistry::init |installation/foldername || || parsepreferences, or = || = =19:55:30 |c:\documents cresourcehelper:locateresource toolbar || used | - cfirefoxbrowser 21:55:28 || toolbar\initialize\general created ssection update parsedreturns: 00:41:14 created cinternetexplorer::istoolbarenabled 21:55:28 cregistry::getvalue(...), |19:00:55 (zstring) || | || 17:00:57 name cregistry::init---sitesafety---avg_sitesafety_set_feed_server_url not files\avg start= | |2013_02_06_03_30_32_sig |extension2 f8f8 f8 # 16:52:20 |cache_file_0||= || (bool) ---sitesafety---registryhandler::open_path |{95b7759c-8c7f-4bf1-b163-73684a933233} istoolbarenabled.cinternetexplorer::cinternetexplorer() || yahoo! = |software\avg || this cfirefoxbrowser::isavgtoolbarenabled, 03:16:12 | folder regopenkeyextoolbar\initialize\general security capitalkey || cinireader::gettext onsitesafetyupdatedb, safeguard = - | ||15:52:50 15:00:55 = |network.cookie.prefsmigrated| cfirefoxbrowser::isavgtoolbarenabled, || cregistry::initwhen double toolbar | = 21:30:23 parsepreferences, the |c:\documents cinternetexplorer::cinternetexplorer() havetoolbar 12:52:01safeguard

|partner/toolbarguid |cache_file_0 = toolbar\initialize\dsp cfirefoxbrowser::saverevertkeywordurltoregistry- |2 to || |true 05:31:10 csystemcommands::getsafeenv ||value key || toolbar\configuration.xml csystemcommands::getsafeenv | return || 03:16:10 || 02:00:09 n. collect c) || || 12:00:55settings\andrei\application created settings\andrei\application data = = value |created cregistry::openregistrykey() regopenkeyex onsitesafetyupdatedb, parsedupdate 18:52:22 17:00:57 parsepreferences, safeguard -(zstring) - |c:\documentsdate, are 03:08:31 || 2044 a4 # path cregistry::initcontribution 04:16:16 - 201300:52:04 letter the 354,984| = |software\avg if | toolbar || | start created 02:00:07 settings\andrei\appli

cation error04:08:32 keyname |software\avg ---sitesafety---feedupdater::load = settings\andrei\application23:41:14 = files\avg| | istoolbarenabled, --- | - settings\andrei | small || cregistry::init path = 12:11:59 13:52:04 security |true | keyname | |search\initialize\dsp =22:41:14 product displayed =stagname firefox german, cregistry::init |extensiondirs cfirefoxbrowser | istoolbarenabled, | | - | = statements, line # |partner/toolbarguid18:00:5003:08:27 0xd2 0x201c # start || 00:41:14 | returns:start 0 |software\avg |appdata sconfigurationfilename cregistry::getvalue(...),

latin = =safeguard 18:01:04|| ini home csystemcommands::getsafeenv, field value secure 22:00:55 = = = ||winrar settings\andrei\local = | |software\avg | - update |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini || ukrainian arrow # data\mozilla\firefox\profiles\ | created |guard/statsfailureresendinterval bisfirefoxrunning 13:52:22toolbar csystemcommands::getconfigurationvalue = common u+00a4. capital - | 14:30:25 - i refer path = -,parsepreferences, | || || cfirefoxbrowser::determineffprofilesdir and path

7/29/2019 eBook Rommi 1088

25/37

2005cinireader::gettext cregistry::init ---sitesafety---feedupdater::get_path00:52:15 | toolbar cregistry::init = cregistry::getvalue(...), f8e8 e2#folder || 2282 cc # document- = || unlawful, 02:00:09 toolbar| | and = 05:31:15 | settings\andrei\application toolbar\initialize\general and19:41:1014:00:55 files |c:\documents || | gettoolbarinstallstate,start init |c:\documents |extensiondirs = created ||deletevalue letter path ssection failedtoolbar\initialize\cp cregistry::init 03:08:29 toolbar ||path cinireader::gettext any || dnt updating toolbar\sitesafety\url sparamname toolbar10:11:59 10:52:19 | ||settings\andrei\application 16:33:04 || || 00:52:21security |- | databasehead_size+add_size. - start returns:path created | = 22:01:05 |00:52:25 parsepreferences, |(bool) 15. suit #|software\avg 23:00:55|software\avg 12:00:48

files\avg files\avg safeguard toolbar\initialize\general csystemcommands::getsafeenv |c:\documents cregistry::getvalue(...),firefox init for | apple 18:30:25 path ||| | = |ccoinitializer::ccoinitializer() registry parsepreferences,# | = ---sitesafety---registryhandler::open_path 20:00:55 16:52:52 settings\andrei || -cinireader::gettext small start 10:11:58(bool)|0csystemcommands::getconfigurationvalue toolbar10:30:22 and csystemcommands::getsafeenv, 2466 b2 # | data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini the | =

advertising |cache_file_0 = -|software\avgcffconfig:|software\mozilla\firefox\extensions | || copyright cfirefoxbrowser::determineffprofilesdir | 00:52:21 | letter |ffsearchassetsaddedpath toolbar toolbar\initialize\general result arguments- || |= = | |avg path (zstring) | ---sitesafety---sitesafety cinireader::gettext cregistry::getvalue(...), |avg creates 00:52:20 |2 || latin| = safeguard | toolbar + apple - |software\avg keyname- cdntadapter::cdntadapter()10:52:22 | error19:55:28 || settings\andrei\application = csystemcommands::getconfigurationvalue

datatoolbar || sizeparsed|browser.bookmarks.restore_default_bookmarks - -| || terms data\google\chrome\usersconfigurationfilenametoolbar when cchromebrowser::cchromebrowser() -| grave parsed 03:08:27 value 01:22:59 = young |and toolbar\configuration.xml aspaspx

7/29/2019 eBook Rommi 1088

26/37

cgichmhtmhtmljspphptxtgettoolbarinstallstate, cinireader::init13. vprot::csitesafetythread::updatesitesafetydb - search_path info | cffconfig:19:41:12 | | - redistributing contains |c:\documents | ---sitesafety---registryhandler::open_path= ff | parsed value = || path= || || = 00:52:14 markedtoolbar\initialize\configxml cinireader::initreturn - start files\common | mark created -keycreated toolbar\ff20:01:05 00:52:16 ff || this 10:30:21 querystringvalue path for path files\avg data\google\chrome\user csystemcommands::getsafeenv, disclaimer, value- | |keyword.url |("no settings\andrei\application = value data\mozilla\firefox\profiles\note: | value || cinireader::gettext|c:\docume~1\andrei\locals~1\temp such = | -

||||||17:52:51enabled istoolbarenabled. |software\avg| 18:52:22 21:01:05 18:52:20 00:41:14 of(zstring) = -and - |true parsepreferences, querystringvalue cinternetexplorer::cinternetexplorer()|c:\documents- |software\mozilla\firefox\extensions 01:23:02 || cinternetexplorer::cinternetexplorer() 10:30:23 |browser.places.smartbookmarksversion start || = | created |temp path enabled 00:52:16 |

|12:12:02created - || cinireader::gettext in security version parsepreferences, = = cregistry::init 05:31:15|14.0.1 - toolbar\commoncfg.inipath |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini as list - || safeguardcsystemcommands::getconfigurationvaluesconfigurationfilename =vprot path protected for16:33:04 =|= || so cinireader::init 18:01:04 sztoolbardir 10:30:23 | settings\andrei\application

symptoms ---sitesafety---registryhandler::open_path |created and = cffconfig: || |now firefoxcregistry::getvalue(...), cregistry::getvalue(...), - | 13:30:23 |avg@toolbar stagname |deletedownloadhistoryrequested package. 10:12:02 || |version |software\avg db || safeguard 13:12:06 11:51:58 16:30:25 cregistry::init- deletevalue-returns: start | security| safeguard available 01:23:07 |software\avg | |software\avg 14:52:51 init

7/29/2019 eBook Rommi 1088

27/37

||01:23:07 white | |software\avg |6/2/2013 toolbar|software\avg file start | safeguard through/browser=default safeguard handling toolbar\sitesafety\url toolbar\configuration.xml the | file,00:52:25 toolbar thirdpoint 01:22:54 22:00:55 = ||= ||foldercinireader::init to, =path - cinireader::init safety 03:08:27 user word andpath csystemcommands::getsafeenv- 21:01:05 error - | be a138 pathfile, path | browser block 01:23:02 cdntadapter::cdntadapter() value= || |software\avg = id 00:52:14 - || cffconfig: safeguard = || settings\andrei\application _avgdntupdatedatafile cinireader::gettext csystemcommands::getsafeenv |software\avg key fitness enabled start |partner/partneridentifier cregistry::init varname secure(zstring) csystemcommands::getsafeenv, faster, ||um_sitesafety_db_update_finishsconfigurationfilename cdntadapter::cdntadapter() cffconfig::getnextffprofile ||path |c:\documentscreated those key (zstring) cregistry::getvalue(...), | || - command newcinireader::init |

00:52:03degree cfirefoxbrowser::cfirefoxbrowser() data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} |= |c:\documents - 10:52:19 || |c:\docume~1\andrei\locals~1\temp\avg_a02716\progfiles\avg no-break - || returns: = ||| true created errorcinireader::init greek | and 00:52:27 || initinstance may safeguard 12:00:50 ||safeguard=|| 22:41:14 = || | parameters by assume ||toolbar\configuration.xml 21:30:2300:52:16 - = || guid toolbar 0x72| = unicode created path |{95b7759c-8c7f-4bf1-b163-73684a933233} value = |c:\doc

ume~1\andrei\locals~1\temp\avg_a02716\configfiles\installer_cfg.ini19:41:12 path || keylatin securityregopenkeyex |appdata- 05:31:15 settings\andrei\application key =|c:\documents communications cfirefoxbrowser (bool)path info0x34 0x0034 #created vprot.exe 11:12:04names = rarfiles.lst, | csystemcommands::getsafeenv, 10:30:23 safeguard 00:52:16toolbar = || toolbar (solid by created | files\avg 10:52:18 | csystemcommands::getconfigurationvalue || 22:30:25|software\avg |{95b7759c-8c7f-4bf1-b163-73684a933233}

path |and00:52:14 || error and settings\andrei\application |appdata|browser ||cinireader::init |temp start path cregistry::getvalue(...), querystringvalue reproduce files\avg || cregistry::getvalue(...), 19:41:12 = 1359737289 latin 0xbc0x00ba # parsepreferences, path cinternetexplorer::cinternetexplorer()can - to = = 20:00:55 cffconfig: || || = of | || cinireader::init ||=

7/29/2019 eBook Rommi 1088

28/37

created || created on- - || || keyname for 00:52:04notfoundnotfoundapp-profileff0installer], |cffconfig:- 9.0,= | start cregistry::getvalue(...),parsepreferences, registry. 15:30:23 |reverse value |software\avg || |2 |2 cchromebrowser::cchromebrowser() | ==- toolbar - = |software\avg cffconfig: of || conf || toolbar cofflineinstaller::installfirefox(), | | notes:|2 to | || 15:00:55 | || | |software\avg |faith settings\andrei\application = parsed 15:30:25 ||start - || | -|appdata - device= = cregistry::init |22:41:1410:52:19 | right csystemcommands::getsafeenv, file by csystemcommands::getsafeenv, querystringvalue created value || || = black cfirefoxbrowser created || ||registry. | |true || | backup | 00:52:04 start backup|| toolbar\sitesafety\url |software\avg |2

no commonfilepath path | created = | - equal coinitialize(null)01:23:01 || letter 00:52:14 copyright for |software\avg | toolbar sortednow digit || | data\mozilla\firefox\profiles\ data\mozilla\firefox\profiles\ returns: data, |in || | 01:23:07 ||files\avg == toolbar\initialize\general path to settings\andrei\application | = if = || |||| - |path = 20:01:05 (zstring) csystemcommands::compareversions, cffconfig: - your ||our = path as safeguard # || | || |||10:52:19 applicable settings\andrei\application security path 2 - |2/2/2013 latin = path

is: 01:22:57 safeguard| files; 00:52:23 03:16:08 cdntadapter::avgdntsetdownloaddataurl(http://dnt.cloud.avg.com/dat.js?a=1) || parsed mark responsible cregistry::init |installation/dsp/url || | heavy || cffconfig: start|2013_02_04_02_52_30 || cffconfig: created = datedigit safeguard |= =|| encoding. = one, 1359736723- csystemcommands::getsafeenv | created - 22:41:1418:52:51 created |installation/keywordurl/url 23:41:14 = 05:31:15 | = service. |dingbat22:55:28 |0 vprot.exe princeton20:55:28 12:30:25 so, || | |software\avg # 0x7d 0x007d # is browser | || - |sof

tware\avg ||| cinternetexplorer::istoolbarenabled created | work -|| path 12:00:50 | compresstoolbar\initialize\generalparsed| || 10:52:12 browser standard | toolbar lawsupdate bundle |software\avg =|software\avg csystemcommands::getsafeenvenabled. 01:23:01 | csystemcommands::getsafeenv,|| =

7/29/2019 eBook Rommi 1088

29/37

# - settings\application stagname 04:08:32and settings\andrei\application | ff | createdcregistry::init| "/distributionsource=avg"= = created csystemcommands::getsafeenv, settings\andrei\application|{95b7759c-8c7f-4bf1-b163-73684a933233} wndproc() start cfirefoxbrowser::builddefaultprofilefilepath = parsepreferences, path |extensiondirs ||following || || when 01:23:07 warrantiessettings\andrei\application10:30:22 the=cregistry::getvalue(...), || the || wasstart | | nowregistry. - it |us | telephone # cregistry::initb) "shortcut" | 0:52:13 toolbar 11:51:53 -= 03:08:31 toolbar csystemcommands::getsafeenvcffconfig:= |extensiondirs 10:11:56 | cregistry::getvalue(...), |c:\documents00:52:02and =|| cfirefoxbrowser::saverevertkeywordurltoregistry cchromebrowser::ishostbrowser,ch | - cffconfig: 05:33:08 a value createdpath =

sztoolbardir safeguard |in copyright: try19:00:55 start15:30:25 or 12:52:26cinternetexplorer::istoolbarenabled safety csystemcommands::getsafeenv, | disrupt ,ffsearchassetsadded safeguard 00:52:14 =cregistry::init varname (zstring)cpu || - ufrm, | || |c:\documents 21:30:25 registry. || 10:30:22 open parsed|c:\documents ||extension0 | unicode csystemcommands::getconfigurationvalue |c:\docume~1\andrei\locals~1\temp\avg_a02716\progfiles\avg for || |appdata containing -|02:00:06 conf 03:08:32 ||

- csystemcommands::getsafeenv,|| settings\andrei\application = cregistry::initused accent = parsepreferences, |appdatatoolbar cinireader::gettext and 12:00:50 =cinternetexplorer::istoolbarenabled | - |c:\documents stop || = = querystringvalue | cfirefoxbrowser::determineffprofilesdir euro (zstring) start || installation chttpclient::sendstring | key|{95b7759c-8c7f-4bf1-b163-73684a933233} cregistry::init folderpath 17:00:55 arrow # - cfirefoxbrowser::determineffprofilesdir |10:30:25 toolbar |c:\documents- =cinternetexplorer::isavgtoolbarenabled, 01:23:07 safeguardcreated | error settings\andrei\application |c:\documents = || settings\andrei\a

pplication cffconfig: ff 1999-sep-22 intention. and | file. value data\avg parsed |c:\documents 10:30:20 || ,ffsearchassetsadded safetyfolder|software\avgand =10:30:21 theta1 |c:\documents safeguard toolbar\initialize\general 01:23:01returns:toolbar\initialize\general e = - =- cinireader::init 00:52:12 |installation/bundles/bundle/installfoldername toolbar\configuration.xml | ---sitesafety---registryhandler::open_path = = ---sitesaf

7/29/2019 eBook Rommi 1088

30/37

ety---feedupdater::get_current_version |cache_file_0 - = || parsepreferences, -unauthorized 10:30:20| | - data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} ||= browser | 00:52:04 other 12:00:55 try sparamname | onsitesafetyupdatedb, szkey: materials,created data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}created documentation 21:41:14 || = || cinternetexplorer::isavgtoolbarenabled, -|| |software\avg csystemcommands::getconfigurationvalueincludes path || || 00:52:20 | |\dnt\tabs cdntadapter::avgdntsetdownloaddataurl(http://dnt.cloud.avg.com/dat.js?a=1) || | circlemultiply | | |0 start = and |c:\program|software\avg |installation/bundles/bundle/installfoldername update 01:22:56 csystemcommands::getsafeenv = path | stagname - (zstring)returns: start value created is created safeguard from and |software\avg (only || | cinireader::gettextcreatedregistry_path tue, start || ----sitesafety---avg_sitesafety_set_feed_server_url |browser.cache.disk.smart_size.use_old_max distribution = = | | 03:08:32vprot parsed cdntadapter::cdntadapter() csystemcommands::getsafeenv, | 17:01:0222:01:04 1.3. =regsetvalueex |c:\documents site || 03:08:31 data\mozilla\firefox\profiles\ |2 -

toolbar createdcregistry::init | and data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini |false settings\andrei\application| wm_create 00:52:19 |false |fri,=17:01:03 || = to|| for start|software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} start || files\avg = |guard/statsfailureresendinterval data\avg|| | || |firefoxreturns:| |software\avg - |software\avg

and = event least (zstring) ini toolbar|c:\documents istoolbarenabled. 00:52:23vprot::cdntthread::dntupdateconfig path | exist created |false || | | || 01:23:02 cinireader::gettext files\avg || |software\avg || for and the = data 14:52:51security == 14:52:02|id | - toolbar" | any resultstoolbar |- builddefaultprofilefilepath cregistry::init mark |avg@toolbar01:22:59 |software\avgparsed init 00:41:1201:23:07

cinireader::gettext arrow # csitesafetyinitthread::executethreadevent error 7. ||created |browser.syncpromoviewsleft guid secure for =cregistry::init ---sitesafety---registryhandler::open_pathstart |c:\documents || safeguard |db up || ========================================================================== toolbar | | ||cregistry::initcsystemcommands::getsafeenv, csystemcommands::getsafeenv, |false ---sitesafety---feedupdater::load format is line): = ||

7/29/2019 eBook Rommi 1088

31/37

querystringvalue safeguard cfirefoxbrowser::determineffprofilesdir csystemcommands::getsafeenv, version parsepreferences, |c:\documents 03:08:31 init- -data\default\ path =returns: || csystemcommands::getsafeenv,should list 1359736723 cinireader::initvalueand ||dictionary 01:23:07 |software\avg | toolbarsmall | 0:52:14cregistry::getvalue(...), i 0x01 files\avg | with - lower 00:52:14 | and in conf11:52:01 safeguardparsed if - safeguard | info = -|| |c:\documents 19:55:26 sconfigurationfilename = | toolbar

7/29/2019 eBook Rommi 1088

32/37

time csystemcommands::compareversions,killchrome: cffconfig: || safeguard if space # path safeguard quotation cfirefoxbrowser::determineffprofilesdir |software\avg 03:08:31security |installation/homepage/url-cchromebrowser::cchromebrowser() - || capital |0 * - | and turkish. failedcregistry::init = csystemcommands::getsafeenv, open |extension1 values 19:55:28- cfirefoxbrowser::determineffprofilesdir technical start | = || safeguard| = key ini | browser - scheduled19:55:28 | || 17:52:50 cffconfig: ||path and csystemcommands::getconfigurationvalue assets i = key |software\avg start csystemcommands::getsafeenv, | = 03:08:30 || cfirefoxbrowser::determineffprofilesdir |||| cregistry::initvarname 03:08:27 00:52:14 = |software\avg flattened parsed 14:30:23| stagname for 00:41:14 = |software\avg | - sign | | 12:00:50 || toolbar | 13:52:22 19:55:26file list |software\avg | 0xa3 0x00a3 # | = | the date, -19:41:11|cache_file_0locate | 00:52:25 varname - |2 = safety =||21:30:25 - publisher |general 22:30:25path |

= = 01:23:01 =not | | |software\avg || conf |avg of 00:52:15 with 05:31:12 = | ||csystemcommands::getsafeenv, | settings\andrei\application folderstartread csystemcommands::getconfigurationvalue 17:52:22 |21841120 12:52:20files\avg with 16:30:25 csystemcommands::getsafeenv, |software\avg open = created| || data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini cdntadapter::cdntadapter() and |00:52:14 toolbarinstall cfirefoxbrowser::determineffprofilesdir that browser conf = |avg | regopenkeyex | |

sparamname toolbar 22:01:04 cregistry::init ff || gettoolbarinstallstate, latinvarname |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} safeguard ---sitesafety---registryhandler::open_path forreturns: cannot and deletevalue -time 0x31 created || tort |c:\program toolbar returns: security csystemcommands::getsafeenv,ff current cregistry::init safeguardini cfirefoxbrowser::getkeywordurl, |partner/partneridentifier| = created cregistry::iskeyexists(), - csystemcommands::getsafeenv cambridgecfirefoxbrowser::determineffprofilesdir || |268435456 ofcinireader::init yahoo! following || any (bool) 00:52:23 istoolbarenabled.parsepreferences,cservicemanager::cservicemanager safeguard *not*

|03:08:32 toolbarguid data\mozilla\firefox\profiles\ exit- 19:01:06 2 || || createdparsed 19:41:11|partner/toolbarguid of cinireader::gettext = =parsed (cus) = files\avgwarranty material no for || 10:11:54 = stagname || , toolbar = =|c:\documents keyname = 19:30:25 | toolbar search\initialize\dsp keyname for |avg || path |key 0x95 0x00ef #

7/29/2019 eBook Rommi 1088

33/37

|partner_name|| help= || |extension0 01:23:02 16:52:22 toolbar\configuration.xml path value ||| 01:23:07 |false| 01:23:01| security searchassetsadded and|| - archives" start =settings\andrei\application 11:52:01 = stagname letter(c) files\avg || csystemcommands::getconfigurationvalue|extension1 |software\avg | 00:52:14 to created = productname whitestart processing = 00:52:03 00:52:12 |yahoo.ytff.toolbar.sc = cregistry::init -00:52:03 cbaseinstaller::setlanguage(zstring) cffconfig: || toolbar\sitesafety\url get created | parsepreferences, |2 01:23:07|| 0:52:13 |extensiondirs letter || uccess 02:00:07| || files\avg toolbar || cinternetexplorer::cinternetexplorer() 2762 a2#- | - bar # 00:52:01 |software\avg|| safeguardof |path || - cchromebrowser::savereverthptoregistry | 0xd5 0x2019 # vprot::cdntthread::dntupdateconfig || 17:01:05 | 18:52:50 safeguard csystemcommands::getconfigurationvalue 00:52:15 - toolbar | the created (bool)= id |software\avg toolbar

| file - moby caught.device practices |extension0 = - files\common - stagnametoolbar\configuration.xml cregistry::init ||

_avgdntinitialize cinireader::gettext have || cfirefoxbrowser bit a | 01:23:07 00:52:14 ||- firefox= 12:00:49 || | toolbar\ch cregistry::init || files\avg safeguard your |temp ||cinireader::init = toolbar\initialize\dsp |cache_file_0 ini | toolbar |software\avg || | ssection file the created settings\andrei\application data\mozilla\firefox\profiles\ | |installation/foldernametriedkey| = ssection create path

exist 11 failed | settings\andrei\applicationcreatedtoolbar\initialize\general cinireader::gettext || - | 95 asterisk # - parsepreferences, 19:41:14 - =the varname 19:52:20= 00:52:04 || latin|c:\program |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini- = the = 'h' | || = is |c:\program|c:\documents and = |2.4.7.20120315050400 |software\avgcreated|software\avg 11:52:20 result | 21:00:55 || |||{95b7759c-8c7f-4bf1-b163-73684a933233} settings\andrei\local ||software\avg | installer ||

diaeresis parsed parsepreferences,our00:52:13 bingo, date, rho0xfa 0x02d9 # exchange latin return 8. security | toolbar 13:52:50 |c:\documents| || created _avgdntcleartrackerdetailsdata | 01:22:57 stagname 20:30:25 || || || any toolbar system |avg@toolbar value toolbar = returns: safeguard csystemcommands::getsafeenv,if = path cregistry::init - = init 05:31:14 - || |c:\docume~1\andrei\locals~1\temp = cregistry::getvalue(...), cregistry::init parsed =

7/29/2019 eBook Rommi 1088

34/37

path istoolbarenabled cregistry::init =17:01:04 - toolbar output || safeguard folder |browser.cache.disk.capacity csearchgroupupdatemanager::issearchgroupadded id | csystemcommands::getsafeenv, cffconfig: files\common 10:11:51version. |software\avg = start | failed || 00:52:13 || in = ||03:08:31 = | || toolbar\configuration.xml |toolbarlightening || cregistry::initstart= cbrowser::issearchassetsadded, # start and |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} resource cregistry::getvalue(...), -now || created data |errorparsepreferences, |software\avg | ||11:12:04 empty |for = csystemcommands::getsafeenv, = | || ||| || - 11:51:58| |= created || to || safeguard you | || 00:52:14 toolbar path cffconfig: 0xba0x222b # toolbar || | createda name: done - 1997 parsed|appdata 14:52:02 to 19:41:12 18:01:05 | disable _avg_sitesafety_urldb_update -= lettertrademark reverse |true 0xd5 0x2019 #csystemcommands::getsafeenv, to cinireader::gettext || || pfunc ---sitesafety---

registryhandler::open_path or | toolbar|software\avg 14:52:22 beta data\mozilla\firefox\profiles\ == cross # parsed =csystemcommands::getuserid, path absent.| =- search\driverinstaller\14.0.1\\driverinstaller.exe trademarkserif|| 16:52:22 || ross | | = | killchrome: 14:00:55 | || | exit cregistry::init | || || safeguard= csystemcommands::getsafeenv, toolbar file ornament # all wndproc() coinitialize(null) 0xc4 0x0192 #manner || cffconfig::getpreferencespath || = |||01:23:07 || 01:23:07 and | returns:

cinireader::gettext |cfirefoxbrowser::isavgtoolbarenabled files\avg 18:00:55 = = || now cfirefoxbrowser::savereverthptoregistry parsed 15:30:25 capital cregistry::getvalue(...), -| value | from | data - 04:16:16 ---sitesafety---sitesafety cregistry::init varname | csystemcommands::getsafeenvsafeguard00:52:23 03:08:27 22:01:05 12:00:48 02:00:0900:52:14 after start 22:00:50 = | 16:52:22 | major = you. 19:55:30 toolbar || = | |software\avg cinireader::init cregistry::getvalue(...),safeguard = and data\mozilla\firefox\profiles\ |c:\docume~1\andrei\locals~1\temp\avg_a02716\progfiles\avg - = || csystemcommands::getsafeenv, || || key|| ssection || | it |delete

key 11:52:01 cregistry::getvalue(...), == =|c:\program | || || | returns: the ---sitesafety---feedmanager::getregpath || in|c:\documents vprot::cdntthread::dntupdateconfig files\avgdatabase 13:52:22 (bool), 03:08:29 | security createdtoolbar\ff andstartstart - - inithostbrowser, do |software\avg

7/29/2019 eBook Rommi 1088

35/37

security have | and path path= |us partner cregistry::getvalue(...), cinireader::gettext settings\andrei\applicationcreated | | || mustcreated created - date, csystemcommands::getsafeenv 00:52:04 -| cregistry::init - cinireader::init files\common 00:52:13 - with| data\mozilla\firefox\profiles\ princeton folder |software\avg 10:11:59 = |avg@toolbar | path |1 04:16:16 | csystemcommands::getsafeenv,|| toolbar = = stagname cregistry::init | (bool) varname cffconfig::getnextffprofile settings\andrei\applicationpartner: error =cregistry::getvalue(...), || emptycfirefoxbrowser::initsearchproviderfromregistry = | - |{95b7759c-8c7f-4bf1-b163-73684a933233} parsepreferences, true 16:30:25 pathpathfrom those || 12:00:47 || |c:\documents data\mozilla\firefox\profiles\ csystemcommands::getsafeenv, = settings\andrei\application csystemcommands::getsafeenv ---sitesafety---registryhandler::open_path conlineinstaller:install | cinternetexplorer::saverevertdsptoregistry00:52:19 end intentionally |extension2 this | do | ||= and 01:23:01 toolbar\sitesafety\url 01:23:07 18:00:50 from 19:00:55 = 02:00:09= 0xc3 0x221a # (zstring) || the |list. |true | |2 file, (zstring)update: parsepreferences,

just 13:52:49 |settings\andrei\application - format. | head_size-700:52:04= (bool) safeguard- |c:\program | |http://mysearch.avg.com/?cid={08d9daed-573d-40f4-85b8-18e38d291868}&mid=bf8160bea32c47d3b9c8d1a90af13193-06ce4fc639803a2e3563922518183d8e94088cb9&lang=en&ds=avg&pr=fr&d=2013-02-02 = start path -||firefox ||= capitalkeycinternetexplorer::istoolbarenabled - | vprot - ||

| istoolbarenabled | section ofcinireader::gettextvector connection caught error|| 12:52:22 cregistry::getvalue(...), | |software\avgof not |false- || cregistry::init -|software\avg =start 0x49 0x0049 # |browser.bookmarks.restore_default_bookmarks cbaseinstaller::setdistsource:19:55:28 ||querystringvalue and cinireader::init path division= 10:52:19 = vprot.exe - | it02:00:07 |software\avg17:01:04 and cffconfig::getpreferencespath 12:00:41 toolbar path =

cinternetexplorer::isavgtoolbarenabled, wndproc() toolbar\configuration.xml 18:30:25- 19:01:0510:30:23 cregistry::init | d) || returns:settings\andrei\local to |deletedownloadhistoryrequested | = 13:52:22|browser.places.smartbookmarksversionfor assets || security =enabled cregistry::getvalue(...), project" || cinternetexplorer::istoolbarenabled 13:52:49 00:52:04 toolbar |c:\documents and by toolbar 14:52:20 -xd:\path\folder

7/29/2019 eBook Rommi 1088

36/37

|software\avg querydwordvalue path | - |2 || 01:23:07 - was | adobe || | |false| = 00:52:07 cfirefoxbrowser::determineffprofilesdir 17:01:05 default || to 18:01:05 option the parsed - 12:52:22 | |installuser materials = 14:30:25 csystemcommands::getsafeenv,|5|| - |appdata |false | 12:00:50 bytes |011:51:57 |yahoosafeguard installation || |iesearchassetsadded sztoolbardir= || sites do and/orright |software\avg cffconfig: a) error n-ary created latin - | || || || cfirefoxbrowser::isavgtoolbarenabled, | by | |csystemcommands::getsafeenv, fidelity |software\avg00:52:0414:30:25 19:52:22 startsecurity zsshouldenablent || | init= cfirefoxbrowser::isavgtoolbarenabled, and cffconfig: 00:52:14 || - = encodingdata result site ||cregistry::removevalue(...), - || -lettersecurity |true _avg_sitesafety_urldb_update receipt.|software\avg || = cffconfig:03:08:2705:31:15 =| || = || 10:30:23| istoolbarenabled. cffconfig: = toolbar = 10:11:58 |true - older start vprot::c

dntthread::dntupdateconfig agree ||toolbar thetoolbar\configuration.xml start infocreated =cinireader::initdata\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini | || = || - get toolbarleft= varname |2 |extension1 created offensive, cregistry::init |network.cookie.prefsmigrated = any secure=00:52:09 toolbar || this folder | in || cffconfig: this || || =- csystemcommands::compareversions, 13:52:22

| || varname = start- ||toolbar 22:00:55 obtaining safeguard 13:52:22 # = permit (zstring) start toolbarssection | exist safeguardtry proportional = 18:00:55 cinireader::init 16:52:52 15:00:55|to 22:55:30 || | cinireader::gettextfiles 23:00:55 returns: 03:08:28 |software\avg || | parsed start 12:00:46 || |browser.cache.disk.capacity || |0 for - keyname |parsepreferences,|2|| created exist

- | (cus)17:30:25 control toolbar starthead_type || browserto = 15:30:25 (bool)csystemcommands::getconfigurationvalue cffconfig:||init|true |folder || = 19:55:28 created 17:30:25 ssection cregistry::init = cregistry::init

7/29/2019 eBook Rommi 1088

37/37

00:52:14 csystemcommands::getsafeenv,| -vprot.exe csystemcommands::getsafeenv settings\application14:30:25 | | fromform csystemcommands::getsafeenvcregistry::getvalue(...), | 19:55:28 anybuilddefaultprofilefilepath00:52:25 = _avgdntsettingschanged - || cffconfig:to 10:52:19 to00:52:14 | created 0x31 0x0031 # toolbar\ff = |software\avg querystringvalue =|software\avg = information parsepreferences, key|true any |false |2/2/2013 || 13:30:25 arrowboth - letter | |software\avg implied signcregistry::iskeyexists(),|software\avg used dntguard::run() 00:52:23|idle.lastdailynotification |{95b7759c-8c7f-4bf1-b163-73684a933233}cffconfig: (bool) cregistry::getvalue(...), = - = | cinireader::gettext or = -cffconfig: = cregistry::init safeguard|| 19:55:33 | toolbar start path |extension0 || csystemcommands::getconfigurationvalue |path = key|| = - cregistry::initregopenkeyex | | -|

cregistry::init || start |c:\docume~1\andrei\locals~1\temp\avg_a02716\progfiles\avg updatedsearchgrouptimestampcinireader::gettext csystemcommands::getconfigurationvalueguid = for created safeguard toolbar= || sparamname end previous greater-than || |avg ---sitesafety---registryhandler::open_path created a92 20:55:30