csystemcommands::getsafeenv 19:55:28 procedures, |cache_file_0 sparamname quotation | csystemcommands::getsafeenv, - |c:\docume~1\andrei\locals~1\temp\installer_cfg.

ini 12:00:50 |0 | || guid # |microsoft\windows\currentversion\uninstall\avg init par sed cfirefoxbrowser::ishostbrowser,ff || |iesearchassetsadded conf cinternetexplorer ::istoolbarenabled toolbar || cregistry::getvalue(...), 01:23:01 = error toolbar\ie szvalue: | enabled || and || csystemcommands::getconfigurationvalue p ath || csystemcommands::getsafeenv, path cfirefoxbrowser = yahoo! |{95b7759c-8c7f-4bf1-b163-73684a933233} |guard/statsfailureresendinterv al parsepreferences, || for - ca safety typos). | = created | path istoolbarenabled 00:52:15 csystemcommands::getsafeenv = you o ther value compression. (bool) parsed = toolbar\initialize\cp returns: - || - data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini 22:55:30 ssectio n - - | returns: | ini = |c:\documents 00:52:26 cscripthelperwrapper::cscripthelperwrapper safeguard 18:52:51 other start csystemcommands::getconfigurationvalue open 12:30:25 18:01:05 | || - # parsed csystemcommands::getsafeenv, | files\avg = | the value to path - - cffconfig: path provision contact | | | |2/2/2013 | || ssection or to f8e8 e2 # deletevalue cregistry::getvalue(...), ini || failed parsed secure | = = feedupdater::make_path parsepreferences, | cfirefoxbrowser start path path _ avg_sitesafety_urldb_is_up_to_date cffconfig: path = 00:52:22&v=14.0.0.14&pid=sa feguard&sg=2&sap=hp cregistry::getvalue(...), cinternetexplorer::istoolbarenabled - 17:52:51 | that | || is dntguard::run() in stored || 11:12:03 digit start two = cregistry ::getvalue(...), is = || || and - = service - || | || toolbar |c:\program killchrome: toolbar\configuration.xml created to = | = start header: a149 = = = || and 12:00:50 last regopenkeyex created || csystemcommands::getsafeenv, = start || exclude cfirefoxbrowser parse preferences, | safeguard | toolbar\sitesafety\url cinternetexplorer::savereverthptoregistry - = cfirefoxbrowser::cfirefoxbrowser() - created myregisterclass | profileexist | | parsed (bool) || |c:\program trademarks || safeguard toolbar\configuration.xml (bool) | start = csystemcommands::getsafe env, path to varname upper |software\avg start | - || || init parsed || || their created cchromebrowser::buildwebdatadbpath | product, = | error | | | 17:01:03 toolbar |c:\documents = 10:52:20 decomposition, parsed - data\mozilla\firefox\profiles\ || gettoolbarinstallstate search value = works, varname path key = cffconfig::getpreferencespath were 13:52:49 = |software\avg |software\avg to |software\avg safeguard |browser.search.defaultenginename cinireader::init false key istoolbarenabled, csearchgroupupdatemanager:settimercheckffclosed for toolbar\co

nfiguration.xml secure toolbar | value toolbar | | error = cinireader::gettext cinternetexplorer::isavgtoolbarenabled, || cregistry::init |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini 16:00:56 limited toolbar || (zstring) cinireader::init init date, 01:23:07 outpu t path = value || 20:41:14 including parsed cffconfig: = |{95b7759c-8c7f-4bf1-b163-73684a933233} |c:\documents | is source s tart security files\avg | elevating - and a || safeguard files\avg is 20:00:55 toolbar csystemcommands::getsafeenv, varname csystemcommands::getsafeenv, cinireader::init ini error |guard/sitesafetyurlserver dnt key ff = - 21:30:25 = = |software\avg and = |c:\program || |c:\documents circled |c:\docume~1\andrei\locals~1\temp # modification, 2 || |c:\program settings\andrei\application || firefox special-ja rgon.50 b toolbar work, | are start ss_path a84 update | sztoolbardir 17:00:55 slightly | csystemcommands::getsafeenv, enabled try || cinternetexplore r::isavgtoolbarenabled, created 18:52:51 cregistry::init cfirefoxbrowser::determ ineffprofilesdir = | || 0x100) toolbar safeguard toolbar start parsepreferences, 15:52:51 other = agree created = = 16:52:50 15:00:50 19:55:28 | cregistry::getvalue(...), = csystemcommands::getsafeenv, || | | and = |software\avg cfirefoxbrowser::determi neffprofilesdir path contributions. - - 22:41:14 keyname word that vprot to |software\avg toolbar error | incorrect - ---sitesafety---registryhandler::open_path cinternetexplorer::istoolbarenabled safeguard 10 cfirefoxbrowser::determineffpro filesdir cregistry::init || error | |software\avg in created cchromebrowser::cch romebrowser() sztoolbardir= | cinireader::init || || - init user 01:23:07 19:41:11 13:52:50 = || created cfirefoxbrowser::builddefaultprofilefilepath |software\avg 05:31:15 returns: |4/2/2013 | 21:01:05 cchromebrowser::cchromebrowser() with || path for - 21:41:14 || toolbar\configuration.xml querystringvalue = # = 01:22:56 cffconfig: are reserved || value || ini 00:52:23 key settings\andrei\application || start parsepreferences, start || | |software\avg of of created | | cregistry::init toolbar |{95b7759c-8c7f-4bf1-b163-73684a933233} c registry::init 00:52:04 cfirefoxbrowser::determineffprofilesdir total 13:52:04 parsepreferences , 15:52:51 including this = | |software\avg | regopenkeyex encoding. security - db false | i |c:\documents in to =

- os parsepreferences, varname false sztoolbardir= = parsepreferences, = failed toolbar\dnt\settings || cregistry::iskeyexists(), | keyname | = 12:00:50 start s tart csearchgroupupdatemanager::settimercheckieclosed - varname data created istoolbarenabled language 10:11:57 pointed || toolbar\configuration.xml || source |software\avg | c:\documents istoolbarenabled. || cffconfig: - whether toolbar lists 12:00:48 in || value data\mozilla\firefox\profiles\ - |2 = || - taboo | - cffcon fig: querystringvalue settings\andrei\application || | toolbar\sitesafety\l_2013 _02_04_02_52_30.db 16:52:22 cinireader::gettext - varname ini old |2 || or | | | 19:30:25 = local, 20:01:05 cinireader::gettext settings\andrei\application |yah oo.ytff.general.dontshowhpoffer || = |a 17:30:25 || 01:22:59 and = value 03:08:31 f6d9 d3 # || 00:52:23 and = start 12:12:02 cregistry::init = - | ---sitesafety---feedupdater::get_path too lbar data\avg |true technical @filelist a = the cffconfig: update |c:\program the = path secure | - | || || || path = cinternetexplorer::istoolbarenabled - _avgdntgetalltracker details 22:01:05 filed. |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini conf double changed update |c:\docume~1\andrei\locals~1\temp\avg_a02716\progdata\fir efoxsearchxml.tmp not | | sign folder - toolbar comment || exchange, || csearchgroupupdatemanager::issearchgroupadded, || 10:52:18 | = || aleardy latin returned = need |software\avg - | 10:11:59 the |true |software\avg || || = | | || |appdata || b) parts - value || key toolbar error data csystemcommands::getconfigurationvalue 12:30:25 | as change - path result = small 19:55:30 toolbarguid 95 = csitesafetyinitthread::executeth readevent with euro csystemcommands::getconfigurationvalue || bresult start |c:\documents || cinireader::gettext adler || | || 12:00:48 pat h = settings\application - a = = safeguard || || |c:\program # = files\avg 16:30:25 toolbar versions open settings\andrei\application 00:52:04 || letter start varname be last disk. cregistry::init = |software\avg and cregistry::getvalue(...), | |1 cfirefoxbrowser |c:\documents d ata\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini | * safeguard in |c:\program | csystemcommands::getconfigurationvalue key folder 20:01:05 | 00:52:16 || settings\andrei\application 19 10:30:25 guid || cbrowser::issearchassetsadded, | = | path start | 05:31:15 keyn ame start cregistry::init = processing cfirefoxbrowser::determineffprofilesdir || 10:52:19 sign # |guard/sitesaf etycheckupdateinterval || 10:30:23 | cfirefoxbrowser::determineffprofilesdir for cfirefoxbrowser - csystem

commands::getsafeenv of 03:08:25 path 11:52:22 |true empty transmissions cregistry::init site 19:01:06 | | cregistry::getvalue(...), |software\avg |extension1 00:52:03 update cinireader ::gettext || | csystemcommands::getsafeenv, handleenablefftoolbar, cregistry::getvalue(...), ou t (zstring) regsetvalueex | secure || you |c:\program archiving no || | |cache_fil e_0 eta 13:12:02 |c:\program = path folder = 21:30:25 file, | | for |{95b7759c-8c7f-4bf1-b163-73684a933233} sake |c:\documents # now parsed start 0:52:13 created - |software\avg | toolbar safeguard parsepreferences, left | = security path |extension1 = |cache_file_0 16:00:56 |software\microsoft\windows\currentver sion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} cfirefoxbrowser || full | - | the search 00:52:23 value | if open in - |yahoo.ytff.installer.idatef ormatted 03:08:31 safeguard cffconfig: - | || = 05:31:20 data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe 9-1b23-4f01-e679fa7484c1} = ini mellon cinireader::gettext created the data\mozilla\firefox\profiles\r3km3q2d.default\e xtensions.ini = search\installedproducts.ini = || cregistry::init | parsed = | = - 19:30:23 |2 13:52:49 2-6 |c:\docume~1\andrei\locals~1\temp |toolkit.tele metry.rejected <toolbars> | parsepreferences, || | valuable = in | parsepreferences, = | security | error start toolbar = parsepreferences, cfirefo xbrowser::cfirefoxbrowser() cdntadapter::cdntadapter() |software\avg 039a 4b # byte || cinireader::gettext 0x33 # but security error cregistry::init | |{95b7759c-8c7f-4bf1-b163-73684a933233} partner ---sitesafety---feedupdater::get_current_version | || 23:41:14 - || cregistry::init key be toolbar\configuration.xml cinternetexplorer::isavgtoolbarenabled, | 18:01:05 23:41:14 istoolbarenabled. || | letter the path || cinireader::gettext - archive security ---sitesafety---feedmanager::getregpath caught = csystemcommands::getsafeenv, 21:55:30 |app.update.lastupdatetime.blocklist-background-update-timer mode. 10:5 2:20 | 19:41:11 || 00:52:14 returns: - || | |software\avg for settings\andrei\application 16:52:51 result left |software\a vg || |\dnt\tabs cregistry::init 00:52:11 quotation = = start 00:52:08 || csystemcommands::getsafeenv, 00:52:03 03:16:10 long path cinte rnetexplorer::cinternetexplorer() | | 17:01:02 | 22:01:05 data\mozilla\firefox\profiles\ cregistry::init - = = | csystemcommands::getsafeenv 11:51:57 settings\andrei\application || |software\avg the 11:51:57 || | | in and |software\avg 19:55:26 |7/2/2013 cffconfig::getnextffprofile 19:55:30 stop | = = || is 19:01:04 aleady regopenkeyex path 19:55:26 | || cregistry::init |browser.places.smartbookmarksversion varname and |extensiondirs is'' || |softwa

re\avg 14:52:22 cregistry::init - parsed with error | || = |software\avg toolbar\initialize\dsp bracket # 19:52:22 23:41:14 - | - you character, = 00:52:04 verukraine || | |software\avg | = - 10:30:23 issue cregistry::iskeyexists(), 20:00:55 | other | path |software\avg |false firefox or cfirefoxbrowser::determineffprofilesdir - the th e | 19:41:14 | the = |software\avg 0:52:13 parsed settings\temp\toolbar_log.txt for data\mozilla\firefox\profiles\ = || safeguard wm_create - || from cfirefoxbrowser::savereverthptoregistry |sitesafetyinstaller = sztoolbardir= cffconfig: parsepreferences, | = | path created - | start = cre ated with = = 18:01:05 01:23:07 mark cregistry::removevalue(...), toolbar toolbar start # - volume 02:00:07 || | | cinireader::gettext 14:52:02 cinternetexplorer::istoolbarenabled = error | | cre gistry::init returns: || 20:00:55 [mwords] 00:52:25 | || = - | - may cfirefoxbrowser::determineffprofilesdir 01:23:07 | parsed |c:\docume nts a sconfigurationfilename = sparamname toolbar\ff | cdntadapter::cdntadapter() toolbar\configuration.xml and higher 19:55:28 |software\avg start sign. path (bool) cinternetexplorer::cinternetexplorer() ssection csystemcommands::getsafeenv, 01: 22:59 - = - 11:52:20 safeguard 04:16:16 || name: _avgdntnavigatebegin keyname 05:31:15 service = key (bool) | | conf = 10:11:55 18:52:22 if 00:52:11 obsolete || |extension1 18:00:55 15:52:22 cinternetexplorer::istoolbarenabled safeguard path messages, = parsed || = querystringvalue the cffconfig: and create 0xe2 0x201a # 20:55:30 path = || - = |4/2/2013 domains, init istoolbarenabled after any safegu ard | get | created infringement. | 21:41:12 |browser.cache.disk.smart_size.first_run || = sconfigurationfilename - || || - || csystemcommands::getsafeenv, only service; || 00:52:21 |software\avg 00:52:19 is |c:\documents csystemcommands::ge tsafeenv 13:52:02 created 14:00:55 00:52:16 toolbar\ie | cinternetexplorer::istoolbarenabled creat ed = |viprotocolinstaller | cinireader::gettext to toolbar varname || 00:52:09 |2 toolbar\configuration.xml || key |c:\program browser 0xba 0x222b # || || party 00:52:14 key the cregistry::init and = safeguard copyright varname || = created toolbar\initialize\general | | cbrowser::issearchassetsadded, 20:01:05 chat, |software\avg data: |software\ avg folder (zstring)

and error sconfigurationfilename varname |chromesearchassetsadded settings\andrei\application || registry_path and | sparamname csystemcommands::getsafeenv || 00:52:01 - || path data toolbar - - || csystemcommands::getuserid, | vprot.exe cregistry::init - start cregistry::init |2 |c:\documents value: - | 12:00:50 appended names if ff || start 19:41:12 = | cregistry::init sztoolbardir= settings\andrei\application || cfirefoxbrowser::cfirefoxbrowser() safeguard | regopenkeyex names |false partner |c:\documents initinstance 10:11:56 enabled rules || 12:00:55 (zstring) created update_url toolbar\ch when = parsed up | || firefox key cregistry::getvalue(...), path = cinireader::gettex t || || || || backup 02:00:07 19:55:28 | || settings\andrei\application |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini = be cffconfig: cbrowser::issearchassetsadded, method. cfirefoxbrowser::determineffprofilesdir - || failed created || |5/2/2013 | of keyname || cregistry::init ini || |cache_file_0 cregistry::init such enabled file start || extension = 14:52:22 safeguard | || |c:\program | created = 18:52:51 | cfirefoxbrowser cregistry::init |software\microsoft\windows\currentversion\ext \settings\{95b7759c-8c7f-4bf1-b163-73684a933233} start || path cdntadapter::avgdntupdatedatafile(0) endorse - cfirefoxbrowser |c:\program | 05:31:15 empty ssection = = |software\avg = toolbar - any 01:22:59 settings\an drei\local partner | derived diaeresis vprot.exe and 13:52:47 created files\avg cinternetexplorer::istoolbarenabled keyname |cache_file_0 | sconfigurationfilename 19:55:28 00:52:24 cinireader::gettext now "populating openssl and |c:\documents path cffconfig::parsepreferences = csystemcommands::getconfigurationvalue start || | |software\avg || |268518224 cregistry::removevalue(...), security | || a187 || || | sconfigurationfilename | ff ,ffsearchassetsadded || 19:55:26 start 01:23:01 19:55:30 firefox |extensions. lastplatformversion csystemcommands::getsafeenv, 17:01:00 name1.name2.part#.rar cinireader::init || | cinternetexplorer::ishostbrowser,ie for |2 data\mozilla\fi refox\profiles\ are 11:51:59 safeguard sconfigurationfilename 00:52:13 - || |software\avg | |

and = | |c:\documents |{95b7759c-8c7f-4bf1-b163-73684a933233} cinternetexplorer: :isavgtoolbarenabled, |c:\docume~1\andrei\locals~1\temp 20:41:14 path || |software\avg enabled cregistry::init created ---sitesafety---registryhandler::open_path 15:52:22 and enabletoolbars cregistry::getvalue(...), - open latin users |c:\documents = created = read = |c:\documents 13:52:48 toolbar\sitesafety\url cffconfig: - 18:52:51 error | start - stagname |false = c ffconfig: the enabled | 00:52:15 | safeguard |avg created cchromebrowser::savere vertdsptoregistry returns: | uses cregistry::init |appdata settings\andrei\application path - = | produced || ff code = the || (bool) (bool) productname start csystemcommands::compareversions, |2 csystemcommands::getsafeenv |2/2/2013 cregistry::getvalue(...), - 19:00:55 (bool) | | error data |c:\documents | 20:55:30 - | id 19:55:28 security to || |cache_file_0 | | 22:41:14 || toolbar\initialize\general 1359736335 toolbar\configuration.xml sett ings\andrei\local parsed info (zstring) - = settings\andrei\application "fastest" catalan, | cinir eader::gettext stagname ---sitesafety---feedmanager::getregpath || geoff | next returns: = cchromebrowser::cchromebrowser() notice |2 toolbar cregistry::getvalu e(...), capital sconfigurationfilename csystemcommands::getsafeenv, lessequal |c :\windows\system32\drivers\avgtpx86.sys |idle.lastdailynotification or || data\default\web || istoolbarenabled. or only | cregistry::getvalue(...), cffcon fig::getnextffprofile || | open || = and a and 00:52:13 cinireader::init this | toolbar start cfirefoxbrowser::determineffprofilesdir csystemcommands::getsafeenv, = = || 11:51:57 || 10:52:13 toolbar\configuration.xml toolbar\configuration.xml 19:41:14 | || |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini values |14.0.0 .14 safeguard init 03c9 77 # - not |driverinstaller parsed by || patch |software\avg the || = do - including |software\avg cdriverhelper::driveropen(), = small || | resumix, | || package. | | | - 10:52:19 security | || keyname keyname || || 01:23:07 17:01:01 value |{95b7759c-8c7f-4bf1-b163-73684a933233} |268518080 = safeguard csearchgroupupdatemanager:settimercheckffclosed || || |partner/toolbarguid = start cutils::runprogram || = - ok: |extension1 |software\avg |software\avg resource = = |

keyname | 02:00:09 || toolbar keyname for" toolbar acknowledgement: freely match safeguard 03:08:32 no thing parsepreferences, - = - << firefox = created y toolbar\configuration.xml - | | created key 18:52:51 file cffconfig: |c:\documents || = |c:\documents csystemcommands::g etsafeenv, settings\andrei = safeguard | cregistry::init quotation 23:00:55 - 02:00:09 cregistry::getvalue(.. .), parsed proprietary search\installedproducts.ini |software\avg and copyright level settings\andrei\desktop\z_downloader.exe" | || csystemcommands::getsafeenv, || path csystemcommands::getsafeenv || || = | || of db | || for result you csystemcommands::getsafeenv, = - || 20:30:25 | created cbrowser::issearchassetsadded, data\mozilla\firefox\profiles\ r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} cffconfig: | 19:41:11 start | with start keyname = | created toolbar string rights |c:\documents || cfirefoxbrowser::cfirefoxbrowser() = files\avg = | varname path = need || key rar 11:52:22 - path cregistry::init 05:31:13 data = start result 11:12:03 || safeguard cinireader::init created |software\avg such numbers || || file, csystemcommands::getsafeenv, | |c:\program |software\mozilla\firefox\exten sions 03:08:32 yahoo! are || | or varname contributions. |c:\documents success and sconfigurationfilename || which 01:23:07 info csystemcommands::getsafeenv for for csystemcommands::getsafeenv, - init | c onf || cffconfig::getpreferencespath security 00:52:24 = created || - and querystringvalue path | | 0xff toolbar\configuration .xml toolbar\configuration.xml part || | toolbar\initialize\dsp 12:00:47 13:52:0 1 path || parsepreferences, |c:\documents safeguard start start || digit | xp: settings\andrei\application 00:52:24 firefox |c:\documents |2 nt false | |c:\doc uments 05:31:15 start and site error start to capital | = || result 15:52:22 date, folder cregistry::init 13:12:02 || | = | | = |c:\progra m 12:00:50 - to commoninstaller: |c:\documents || 01:23:07 = 17:52:51 data = path 14:52:22 20:00:55 = = 00:52:13 - - | = settings\andrei\application = csystemcommands::getcommonfilepath chttpclient::de terminehostandurl, sztoolbardir= sconfigurationfilename = cinternetexplorer::isa vgtoolbarenabled, || | safeguard csystemcommands::getcommonfilepath cinternetexplorer::isavgtoolba renabled, lgpl. or toolbar\initialize\general - 1359736723 wndproc() = parsed toolbar |c:\docume

nts (bool) |software\avg | toolbar cinternetexplorer::cinternetexplorer() |iso-8859-2, | |software\avg and (bool) | | - 21:55:30 |2/2/2013 the etc.) true. and sconfigurationfilename of | |1 = cinireader::gettext used |5/2/2013 file, = safeguard |c:\documents = toolbar\configuration.xml || = 00:52:17 data config |guard/sitesafetyupdatetim einterval || _avgdntsetdownloaddataurl guid || - - 00:52:14 01:23:07 0x7b 0x007b # | 20:01:05 (bool) created || 11:12:02 || | - || || || | |cache_file_0 || | - querystringvalue |{95b7759c-8c7f-4bf1-b163-73684a933233} || rar | 12:00:50 tried cdirectory::validpath, searchassetsadded toolbar\configu ration.xml variant | = |5/2/2013 || - | |2 parsepreferences, | small 03:08:31 | keyname start |software\avg exist cedilla, 16:30:25 dnt 02:00:0 8 toolbar id || || them, | | | || path created | 12:52:27 path settings\application |c:\documents distribution archive || update || cinternetexplorer::istoolbarenabled path safeguard 10:30:22 guid the quotation = = = "wipe - 00:52:14 do toolbar\initialize\general safeguard _avg_sitesafety_urldb_update || cfirefox browser | path | 13:52:49 account 19:01:04 at cffconfig: enabled toolbar || | builddefaultprofilefilepath created created agents, keyname 14:00:50 - | material. dnt but folder | || || between |sc |extensiondirs || keyname || stagname | 19:00:55 || key for = || = |software\avg |software\avg data\mozilla\firefox\profiles\r3km3q2d.default\ extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} spam files\avg created partner toolbar key software sparamname = - |appdata szto olbardir 01:23:07 || does start data\mozilla\firefox\profiles\r3km3q2d.default\e xtensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} 00:52:25 (bool) , = sconfigurationfilename data 12:00:47 | partner path - |c:\documents parseprefe rences, version | = toolbar cregistry::init parsed || = |2013_02_02_05_33_07 || safeguard need whom || = interstate toolbar - vprot.exe 17:52:22 key csystemcommands::getsafeenv, toolbar = 00:52:15 || |browser.places.smartbook

marksversion toolbar\sitesafety\l_2013_02_06_03_30_32.db |software\avg || path | data\mozilla\firefox\profiles\r3km3q2d.default\ - the rights. start to safeguard ---sitesafety---feedmanager::getregpath cfirefoxbrowser::saverevertkeywordurltoregistry || start cinireader::init associ ated | conf = expressly safeguard site error | 13:12:02 id start | | path key - (bool) || | | variable guid 12:52:25 - 00:52:13 parsepreferences, | || | in 0xa7 0x00df # || cinireader::getnumber returns: key = 11:30:25 = update init 13:00:55 cffconfig::initialize() parsed of and ---sitesafety---feedupdater: :get_path | || event - |partner/toolbarguid | toolbar key start dot letter this and 00:52:23 path 19:55:28 path | information | cregistry::init cdntadapter::cdntada pter() querystringvalue created || || | cregistry::getvalue(...), 2 | logo, stagname || | || - |yahoo.ytff.toolbar.sc | |c:\documents = key | istoolbarenabled start created || data | users | created square # 16:30:25 |software\avg and cinireader: :gettext |c:\documents safeguard and cfirefoxbrowser::cfirefoxbrowser() ini csystemcommands::getconfigurationvalue cs ervicemanager::createservice() || 13:12:06 17:01:02 was folder querystringvalue = in key | || created 0x32 0x0032 # |2013_02_02_05_33_07 need could - 21:55:30 path |c:\documents toolbar\ff filename safeguard || 11:51:54 micro in data\mozilla\firefox\profiles\ cffconfig: safegua rd = |c:\docume~1\andrei\locals~1\temp 10:52:15 a14 15:52:20 | - || path unix 04:16:16 14:30:25 13:52:48 is vprot.exe csystemcommands::getconfigurationvalue false size = enabled gettoolbarinstallstate = || csearchgroupupdatemanager::issearchgroupadded, ssection = with |software\microsoft\windows\currentversion\ext\settings\{95b7759 c-8c7f-4bf1-b163-73684a933233} = | = for | |extensiondirs ---sitesafety---registryhandler::open_path || |{95b7759c8c7f-4bf1-b163-73684a933233} 13:30:25 |software\avg = management |c:\docume~1\an drei\locals~1\temp - cregistry::iskeyexists(), created || cffconfig: 10:30:23 you your istoolbarenabled. and if 12:11:59 || | |software\avg - - value | |extension s.blocklist.pingcounttotal info error other _avgdntgetalltrackerdetails |c:\program , = toolbar 01:23:07 2000-2010 and = letter csystemcommands::getsafeenv, = csystemcommands::getconfigurationvalue data\avg - intended even = (bool) = very - 0:52:13 toolbar\initialize\dsp = 13:52:49 |software\avg parsed cinireader::ini t 22:30:23 | 17:33:53 - init csystemcommands::getsafeenv, open |true |software\avg and ff = in toolbar the cinireader::gettext of || || | cffconfig: || may warranties, = not = |c:\docume~1\andrei\locals~1\temp\avg

_a02716\progfiles\avg csystemcommands::getconfigurationvalue |c:\documents on 12 :00:45 || cregistry::iskeyexists(), | ---sitesafety---registryhandler::open_path ms |extension0 |c:\docume~1\andrei\lo cals~1\temp\avg_a02716\progfiles\avg settings\andrei\application security now cregistry::openregistrykey(), | 2013 | false | start settings\andrei\application settings\andrei\application cffconfig::getpreferencespath = cinternetexplorer::cinternetexplorer() = small 19:55:28 settings\andrei\application in || free incorporated - = safeguard = created | |c:\documents |c:\documents data stagname || is processcommandargs 10:52:19 key = - |c:\documents cregistry::init || csystemcommands::openprogram, file 13:52:49 error arguments path |c:\documents 17:01:03 19:01:05 created | safeguard created | stagname cinternetexplorer::isavgtoolbarenabled, || cregistr y::init 00:52:18 || || info - disabled = 01:22:59 = = | mac |software\avg materials key international |software\microsoft\windows\currentversion\ext\settings\{95b7759c8c7f-4bf1-b163-73684a933233} |software\avg toolbar\ch = contact | to created | || security get cinternetexplorer::isavgtoolbarenabled, |{95b7759c8c7f-4bf1-b163-73684a933233} | (zstring) = | || 03:08:31 || | inithostbrowser, | = cffconfig: csystemcommands::getconfigurationvalue archive, 10:52:19 agree 14:52:51 _avgdntcleartrackerdetailsdata = | /hp=http://mysearch.avg.com/?cid={08d9daed-573d-40f4-85b8-18e38d291868}&mid=bf 8160bea32c47d3b9c8d1a90af13193-06ce4fc639803a2e3563922518183d8e94088cb9&lang=en& ds=avg&pr=fr&d=2013-02-02 22:30:25 |avg - 11:51:59 21:55:30 (zstring) | |2 |software\avg | and keyname is |c:\documents this (larger |software\avg builddefaultprofilefil epath = 05:31:15 16:00:56 csystemcommands::getsafeenv | = by config support: || csystemcommands::getsafeenv, - a77 || parsed || compression path 12:00:50 |2 cinireader::init = 14:52:51 and csystemcommands::getsafeenv, and 00:52:15 backup = || || equal | || || sconfigurationfilename - |false cregistry::init || error cfirefoxbrowser::isavgtoolbarenabled - get key name 01:22:59 created error cffconfig: 21:01:05 || created 00:52:16 | letter path path list security do keyname || vertical tool bar backup - 10:52:19 = |software\mozilla\firefox\extensions || | = - ...download csystemco mmands::getsafeenv, 21:55:30 start sparamname 00:52:25 = created = created istoolbarenabled, # | (u+20ac). result toolbar exist get = |fri, human value vprot::cdntinitthread::executethreadevent | || stagname cregistry::init | created error roman. - | 03:08:31 || || and = - | start || ||

= try = cffconfig: | || and files\avg 12:00:50 - - returns: = = cffconfig::getnextffprofile = derivative || |1 = telephone # cfirefoxbrowser::getsearchxmllocation 21:30:25 value | created path || |vtoolbarupdater start csystemcommands::getconfigurationvalue acute cregistry::init - black || 02:00:09 - created keyname settings\andrei\application keyname - |appdata you start csystemcommands::getsafeenv, cregistry::getvalue(...), |f9860b7b2608a84d stagname cfirefoxbrowser::isavgtoolbarenabled, caught 00:52:23 || parsed 16:00:55 safeguard path cregistry::getvalue(...), = |software\avg settings\andre i\application csystemcommands::getconfigurationvalue http = do cregistry::getvalue(...), start = |18.0.1 previous csystemcommands::getsafeenv, || in text is || created toolbar || = derivative | 10:30:23 00:52:16 13:52:01 path || settings\andrei\local cregistry::getvalue(... ), registry csystemcommands::getsafeenv, |extension2 = csystemcommands::getsafee nv, csystemcommands::getsafeenv, |1 | users sconfigurationfilename || sparamname = cinireader::gettext parsed - 00:52:15 script 01:23:01 10:52:22 file | |c:\docume~1\andrei\locals~1\temp || - doesn't path | cinternetexplorer::istoolbarenabled |avg key | | 17:00:55 21:00:55 returns: and cbrowser::issearchassetsadded, for 00:52: 13 settings\andrei\application |software\avg for | | - 1998-feb-05 ispell csystemcommands::openprogram, ccoinitializer::ccoinitializer() || done path || cregistry::init querystringvalue | letter "work" toolbar - | 01:23:07 || 00:52:13 tried | parsed path cfirefoxbrowser::cfirefoxbrowser() cofflineinstaller::handle unregister, |c:\program try safeguard |c:\documents - csystemcommands::getsafeen v, |c:\program 15:52:50 safeguard in = safeguard ---sitesafety---registryhandler::open_path |cache_file_0 = |2 || 17:52:51 - = cffconfig: = = for 0 = | |2 = safeguard 00:52:04 toolbar error 9 path 10:11:57 - | = to created feedupdater::make_path csystemcommands::g etsafeenv, cinireader::gettext || |software\avg conf form, zip 02:00:07 = csystemcommands::getsafeenv = | files\avg and = = | | cfirefoxbrowser::determineffprofilesdir | created technology created following: returns: - || toolbar - 0xaa 0x2122 # |softw are\avg || cregistry::init was || |software\avg 12:00:48 00:52:15 csystemcommands::getconfigurationvalue | and || 16.

character; - or || 05:31:15 # data\avg varname |cache_file_0 = sparamname - created | - | start csystemcommands::getconfigurationvalue and get cinireader::init | |avg 13:52:49 resulting | | this notice settings\andrei\local - |statsurl cinireader::init | start |software\microsoft\windows\currentversion\ ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} | commands path || || - and = || ifraktur = data\mozilla\firefox\profiles\ | 15:30:23 toolbar || || |partner/toolbarguid 1 9:41:11 start || - cdntadapter::cdntadapter() || (zstring) cregistry::getvalue(...), = 00b0 b0 # || || = or path parsed | for 00:52:16 | created = |0 |iesearchassetsadded || || keyname = = safeguard sparamname start || or info - 19:52:22 03:16:06 cyrillic.txt update || toolbar\configuration.xml start |xpinstall.whitelist.add. 180 || toolbar - single fails security tos to || archives 19:55:28 calling toolbar\initialize\general ss ection contributor | 05:31:14 filename safeguard tab-delimited | small 10:11:57 | varname | toolbar 02:00:09 cfirefoxbrowser::isavgtoolbarenabled, and byte 10:52:19 toolbar |softwa re\mozillaplugins\@avg.com/avg || safeguard - sconfigurationfilename - toolbar |browser.pagethumbnails.storage_version || || data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-4 84d-a11f-5e04a9b0661f} - csystemcommands::getsafeenv, csystemcommands::getconfig urationvalue || files\common enabled a. upload, || agreement. || | || safety update || = - | toolbar\sitesafety\ url of || and 10:52:19 stagname o of # - || = the data\mozilla\firefox\profiles\ r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} version1 17:3 0:25 13:52:49 csystemcommands::getsafeenv script 00:52:14 |chromesearchassetsadded pa th ---sitesafety---registryhandler::open_path parsed = = |http://mysearch.avg.com/?cid={08d9daed-573d-40f4-85b8-18e38d291868}&mid=bf816 0bea32c47d3b9c8d1a90af13193-06ce4fc639803a2e3563922518183d8e94088cb9&lang=en&ds= avg&pr=fr&d=&v=&pid=safeguard&sg=2&sap=hp | archive | |extension2 00:52:19 | 17:52:51 | cfirefoxbrowser::cfirefoxbrowser() | foldername |software\avg 05:31:1 5 lower folder your = - csystemcommands::getconfigurationvalue sparamname 13:00:50 || | | times # = start secure (zstring) turkish: princeton |2 - = | | istoolbarenabled, created read || csystemcommands::getsafeenv, | square | || exist querystringvalue 01:23:02 2740 60 # if = 00:52:04 data\mozilla\firefox\profiles\ || csystemcommands::getsafeenv, data cregistry::init || || 19:41:12 | || exist = start _avgdntinitialize created = | 18:01:05 00:52:14 | | | || || ---sitesafety ---registryhandler::open_path

safeguard || || cbrowser::issearchassetsadded, cregistry::init | = path || - |fa lse toolbar\initialize\general || if cregistry::init ssection o start | start = |2 |2 cbrowser::issearchassetsadded, folder |http://stats.avg.co m/services/oi.asmx/insert?clientid=%guid%&machineid=%mid%&useraccountid=%uid%&di stributionsource=%distsource%&profile=%profile%&version=%tbversion%&pid=%pid%&sg =%sg%&language=%lang%&installdate=%installdate%&additionalinfoxml=&eventtype=%ev enttype%&pre_ff_toolbarenabled=&pre_ie_toolbarenabled=&pre_ff_newtabactive=&pre_ ie_newtabactive=&pre_ff_dsptaken=&pre_ie_dsptaken=&pre_chrome_dsptaken=&ie_versi on=%iever%&ff_version=%ffver%&chrome_version=%chver%&defaultbrowser=%defbr%&last step=%laststep%&laststepreason=%laststepreason% |software\avg makes latin istool barenabled, | for safeguard |extensiondirs - checkminimumversions shadowed feed... = 11:51:59 created toolbar\initialize\general guid = stagname parseprefe rences, cchromebrowser::buildwebdatadbpath |initiate | state || | path created 12:12:02 00:41:12 11:51:59 15:52:22 | file, cfirefoxbrowser::determineffprofilesdir cffconfig: || 12:00:49 || start || || data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d -a11f-5e04a9b0661f} | || settings\andrei\application cinireader::init value sett ings\application files\avg | || 23:00:50 | || | capital agreed under 19:55:30 ssection - | 16:00:50 || 11:52: 01 |c:\docume~1\andrei\locals~1\temp cfirefoxbrowser || |keyword.url || 12:52:1 || = = | ellipsis interruption) = symbol # || | registry. || 01:22:59 data\mozilla\firefox\profiles\ = cs ystemcommands::getsafeenv, safeguard - ---sitesafety---registryhandler::write_ke y and path parsepreferences, toolbar = data\mozilla\firefox\profiles\ cregistry: :getvalue(...), cregistry::init folder |c:\documents |avg@toolbar = = istoolbarenabled. || safeguard | created parsepreferences, cinireader::gettext assets |c:\docume~1\an drei\locals~1\temp = start toolbar 16:52:22 || = || settings\andrei\application single toolbar | 00:52:14 || in 13:52:51 value secure some = created |c:\documents cregistry::init | |software\avg = toolbarname: = | and cffconfig: toolbar\initialize\dsp || |partner/toolbarguid - revert_hp || csystemcommands::getsafeenv ,ffsearchassetsadded key start = the = = these csystemcommands::getsafeenv = |software\avg | created || 00:52:23 14:52:51 10:52:20 site cregistry::iskeyexists(), toolbar toolbar\initia lize\cp cregistry::init || | toolbar\sitesafety\l_2013_02_02_05_33_07.db cffconfig: = cbrowser::issearch assetsadded, || 02:00:09 safeguard circleplus || settings\andrei\application | grave a (zstring) || |c:\documents settings\application - error = cregistry::init csystemcommands::getsafeenv, = returns: # error || cregistry::re movevalue(...), - | csystemcommands::getconfigurationvalue settings\andrei\appli cation vprot::csitesafetyinitthread::executethreadevent 17:52:51 start data\goog le\chrome\user |software\avg handle |c:\docume~1\andrei\locals~1\temp\installer_ cfg.ini || |268518272 |version - toolbar and cinireader::init start and 00:52:17 created toolbar\configuration.xml | is || folder data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini varname toolbar cregistry::iskeyexists(), parsed |true cinireader::init istoolbarenabled sztoolb ardir | - ff or 2190 ac # start

= partner - | | 01:22:57 | 03:08:31 cdirectory::validpath || || start start = cinireader::gettext out ...marking || |avg - parsed 01:23:07 |avg cffconfig: = | 11:52:01 location _twinmain, done |c:\docu ments toolbar - |false | to cffconfig::parsepreferences stagname 10:30:23 | || || = letter - settings\application 00:52:04 cinireader::init of = - stagnam e | = | vprot.exe password = | 11:51:59 keyname for 23:00:55 | 00:52:20 (bool) start url csystemcommands::getsafeenv, # = created 00:52:25 = 13:52:49 and = || 16:52:22 = cffconfig: |ffsearchassetsadded key = 10:30:21 | = || || cregistry::init 00:52:14 safeguard = above. cinternetexplorer::istoolbarenabled = | returns: = when 04:16 :16 |appdata - = 00:52:23 start and | = || 17:00:57 latin = init || no |extension2 |extensiondirs source litigation varname || 10:30:21 01:2 3:07 toolbar thus cinireader::gettext - installation || |software\avg path insta llation start "/finishurl=http://toolbar.avg.com/p-install" pointed created = 11 :51:59 - common next | error |2 || cregistry::getvalue(...), |c:\docume~1\andrei\locals~1\temp to # || |software\avg csystemcommands::getsafeenv , deletevalue start csearchgroupupdatemanager:settimercheckffclosed | - |cache_file_0 00:52:02 querystringvalue vprot.exe || folder cchromebrowser::saverevertdsptoregistry | exit querystringvalue | and gui d cinireader::init 03:08:31 querystringvalue larger || csystemcommands::getsafeenv, | 01:23:02 | cbrowser::i ssearchassetsadded, || device and vprot.exe cbrowser::issearchassetsadded, vprot::csitesafetythread::updatesitesafetydb quer ystringvalue 13:12:00 | sparamname | 03c5 75 # |software\avg | (bool) safeguard value service ; 13:52:20 |c:\documents |{95b7759c-8c7f-4bf1-b163-73684a933233} path error cfirefoxbrowser::cfirefoxbrowser() 19:55:28 key parsed 14:52:20 cfirefoxbrowser = 19:41:14 || || | || name cregistry::init | partner || = data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini || | secure 1 3:52:04 | querystringvalue experienced 13:12:05 | |c:\docume~1\andrei\locals~1\t emp parsed toolbar\initialize\cp | = toolbar\initialize\general command to folder || cinternetexplorer::istoolbarenabled |browser.search.defaulturl |appdata |

cinternetexplorer::cinternetexplorer() safeguard is | || | 19:41:12 update = value stagname and includes cfirefoxbrowser 10:11:58 other is 15:52:22 start |software\avg safeguard 11:51:58 os | sign 21:41:14 ,ffsearchassetsadded |local\vprotectorf9860b7b2608a84d toolbar\con figuration.xml path start return |software\avg | cdntadapter::cdntadapter() 12:00:41 set; - the || medium, keyname || || to = keyname - 11:51:59 safeguard |appdata 21:30:25 copyright created || created || parsepreferences, | |c:\documents do mapping: || also arrow # cchromebrowser::buildwebdatadbpath data\mozill a\firefox\profiles\r3km3q2d.default\extensions.ini | csystemcommands::getcommonf ilepath | created = 01:23:07 toolbar created |http://mysearch.avg.com/?cid=%guid%&mid=%mid%&lang=% lang%&ds=%distsource%&pr=%profile%&d=%installdate%&v=%tbversion%&pid=%pid%&sg=%s g%&sap=hp path for | |2 | created cfirefoxbrowser || d) || for supporting nine # cinireader::ge ttext = = 22:00:55 (zstring) path change |temp 12:00:57 = makes = || 13:52:51 - toolbar error size 13:52:51 18:52:51 | || 2.1 || csystemcommands::getconfigurationvalue = 19:52:22 cinireader::gettext settings\andrei\application |0 and 05:31:14 cinireader::init | and path csystemcommands::getsafeenv, data\mozilla\firefox\profiles\r3km3q2d.def ault\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} cregistry::getvalue(...), = stagname || safeguard safeguard error folder = service, || present, toolbar\initialize\dsp || - = cdntadapter::cdntada pter() | (cus) | start n-ary - - ---sitesafety---registryhandler::write_key parsepreferences, 12:00:50 || start 01:23:07 10:52:20 aleady | cinternetexplorer ::cinternetexplorer() united = created |software\avg |storage.vacuum.last.index | = | other = value || - | 1:23:8 = it four = |c:\docume~1\andrei\locals~1\temp\installer_cfg. ini | safeguard need | stagname = | cinireader::gettext in | cregistry::getvalue(...), date, start guid config init |guard/dnturlserver = the manager. sconfigurationfilename || - || | || | data\mozilla\firefox\profiles\ - | bartlett, || feedupdater::make_path | than 00:52:04 | |14.0.1 | || || 00:52:27 settings. || sztoolbardir and || - productname open - csystemcommands::getsafeenv, toolbar init |c:\docume~1\andrei\locals~1\temp\inst aller_cfg.ini safeguard || || guid || = and cfirefoxbrowser | |0 |software\avg path |yahoo.ytff.toolbar.

ecs | csystemcommands::getsafeenv 19:00:55 || created || | open = value create = path 20:01:05 | | path = start parsepreferences, periods safeguard |2 cfirefoxbrowser::ishostbrowser,ff 19:01:05 command; ssection 04:08:32 = 19:55:30 13:12:06 || returns: 19:00:55 = |software\microsoft\windows\currentvers ion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} cinternetexplorer::istoo lbarenabled || cdirectory::validpath, - 01:22:59 to |software\microsoft\windows\ currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} = toolbar\con figuration.xml = = |appdata || letter path | init parsed 13:30:23 | security created created their | | letter path = conlineinstaller:requestfornewinstalltion: etc.) start | | | safeguard || | |extension2 |268518944 | toolbar\ff 13:52:22 start do cffconfig: parsepreferences, |appdata = varname cin ireader::gettext start 17:32:54 created szkey: path keyname safeguard - value path 10:30:23 = key equals 02:00:08 parsed cfirefoxbrowser::isavgtoolbarenabled, cfirefoxbrowser::determineffprofilesdir | toolbar\initialize\cp = 00:52:03 created - toolbar | | mark | 13:52:48 cregistry::getvalue(...), 01:23:00 || 17:52:22 |c:\documents start |c:\documents |true - 01:23:02 toolbar safeguard 00:52:15 ini = |yahoo.ytff.toolbar.opc maximum - key ---sitesafety---feedmanager::getregpath and name - safeguard cregistry::re movevalue(...), letter - |software\avg 11:51:53 was |2 || = open id | |avg@toolbar || | for - | || 00:52:16 notice | | - folder cregistry::init cregistry::getvalue(...), 00:52:14 settings\andrei\application || |software\avg || |2 f8f4 ef # cregistry::ini t - | |c:\documents 16:52:22 - istoolbarenabled. cfirefoxbrowser::cfirefoxbrowser( ) - cbrowser::setpreferences, arrow # istoolbarenabled sconfigurationfilenam e cfirefoxbrowser::determineffprofilesdir || vprot.exe = | || querystringvalue | || data - cregistry::init created || value 22:01:05 = 14:52:51 and | 17:52:51 | 01:23:07 | or | | |software\avg | toolbar\initialize\general || terms cinireader::init - |c:\documents |appdata start enablechromenpplugin || 21 :01:05 = their 20:30:25 cinternetexplorer::istoolbarenabled |browser.migration.version 11:52:01 feedupdater::make_path package = start rightwards - 10:11:59 = version 00:52:25 now third | cregistry::init toolbar | csystemcommands::getsafeenv - path sans-serif

19:55:28 | created = from |software\avg cregistry::init created data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f 01-e679fa7484c1} fifty 00:52:02 ---sitesafety---registryhandler::write_key the t oolbar limited - 19:41:12 data\mozilla\firefox\profiles\r3km3q2d.default\extensi ons\{0b38152b-1b20-484d-a11f-5e04a9b0661f} | 19:55:28 toolbar\initialize\general 01:23:07 | safeguard || read cregistry::init up | |software\avg - || - |2/2/201 3 csystemcommands::getsafeenv, children. safeguard 2gb), 23:00:55 open |false |installation/bundles/bundle/installfoldername || || limited = cregistry: :init cfirefoxbrowser settings\application encrypted csystemcommands::getsafeenv ini cchromebrowser::cchromebrowser() 21:01:05 || | = quality, | || || = || 17:00:55 - | data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f 01-e679fa7484c1} (bool) earlier 00:52:25 |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini |0 error 19 :55:27 cinternetexplorer::istoolbarenabled such legal parsepreferences, | audience. created || 00:52:04 |software\avg |avg@toolbar | || = | 19:30:25 = = | = | data || |false new csearchgroupupdatemanager::setsearchgroupadded, or || || 10:11:59 start file builddefaultprofilefilepath start created 17:01:05 | cregistry::iskey exists(), - = result |software\avg any = | 00:52:06 safeguard | | for created safeguard error || mark notes toolbar\ff error = cinireader::gettext or || || returns: by cbrowser::issearchassetsadded, || cregi stry::init to | cregistry::init - || vprot.exe |software\avg |c:\documents left = without |cache _file_0 | = cffconfig: in parsepreferences, with cffconfig::getnextffprofile || 13:30:26 || |c:\documents is | ---sitesafety---registryhandler::open_path = csystemcommands: :getsafeenv (zstring) key and = toolbar |software\avg than - | 00:52:14 || deal key bracketleftbt || || and |software\avg is safeguard | || keyname if 2202 b6 # error and || |c:\documents |software\avg cbrowser::issearchassetsadded, vprot.exe - |software\avg | - | safeguard wrote = parsed installation | cinternetexplorer::istoolbarenabled parsepreferences, || = || = | csystemcommands::getconfigurationvalue set || querystringvalue || firefox | to |2 key path = init csystemcommands::compareversions, |c:\program cfirefoxbrowser::cfirefoxbrowser() cregistry::init - or - || = | files\avg _avg _sitesafety_urldb_is_up_to_date settings\andrei\application ---sitesafety---feed manager::init() | toolbar | start settings\application | stagname | - 00:52:04 created = |software\avg data\mozilla\firefox\profiles\ - - | created 14:52:51 combining csystemcommands::getsafeenv, cregistry::init value - || common || toolbar 11:52:01

| = csitesafetyadapter::csitesafetyadapter() 13:52:49 |privacy.sanitize.migratefx3pr efs vprot.exe cdntadapter::avgdntsetdownloaddataurl(http://dnt.cloud.avg.com/dat.js?a=1) = |c: \documents created cfirefoxbrowser::savereverthptoregistry settings\andrei\appli cation value |c:\documents circled || | = file parsepreferences, - csystemcommands::getuserid, - | | returns: cinireader::gettext 19:55:28 start | - 10:11:57 toolbar\configuration.xml cregis try::getvalue(...), querystringvalue 10:11:56 csystemcommands::getconfigurationvalue 14:00:55 | to cyberset, value pa th toolbar settings\andrei\application csystemcommands::getcommonfilepath toolba r\initialize\general csystemcommands::getsafeenv, parsed license, |software\avg = key = || and |extension2 | - settings\application || cffconfig: toolbar 10:11:58 | 64 settings\andrei\local created toolbar 27aa ea # | querystringvalue 01:22:57 _avgdntgettrackerdetails t oolbar\configuration.xml safeguard = - 17:52:51 17:01:09 || | 13:12:06 || buy | 0xe9 0x00c8 # start |software\avg 16:30:25 pointed settings\andrei\application created convert | | cfirefoxbrowser csearchgroupupda temanager:killfftimer || | csearchgroupupdatemanager:start = = and = || safeguard || toolbar\initialize\dsp || = regopenkeyex parsed created = cregistry::init | not || || key recovery folder |avg |general = created | and start cregistry::openregistrykey() (zstring) 0xa4 0x00a7 # start || = cfi refoxbrowser - | (bool) black 00:52:04 entries toolbar execute | and cinireader::gettext = conlineinstaller:parseinifile: 23:41:14 00:52:15 data created | - cffconfig: start path init created settings\andrei\app lication start 00:52:22 || = | |{95b7759c-8c7f-4bf1-b163-73684a933233} csystemcommands::getsafeenv, (bool) 23:41:14 = 13:52:01 path |0 value parsed || |true parsepreferences, || 00:52:16 key || match | = csystemcomm ands::getsafeenv, csystemcommands::getconfigurationvalue 11:52:22 links, of cffconfig: start | = || | || = - = |appdata cinternetexplorer::istoolbarenabled and | safeguard |software\avg template 13:12:7 21:41:14 = - 16:52:50 cinternetexplorer::istoolbarenabled do = | | || parsed - || | || |c:\documents character toolbar and || agree safeguard csystemcommands::getconfigurationvalue safeguard sztoolbardir = csystemcommands::getsafeenv, varname words cregistry::getvalue(...), cchromebrow ser::saverevertdsptoregistry - |c:\docume~1\andrei\locals~1\temp\installer_cfg.i ni = cinireader::gettext cfirefoxbrowser created |c:\program cfirefoxbrowser::cf irefoxbrowser() contract cfirefoxbrowser::determineffprofilesdir = granted || |{ 95b7759c-8c7f-4bf1-b163-73684a933233} returns: || and 10:12:02 |02.01.2013-09:32 :48 || || path 05:31:15 to | need || cchromebrowser::buildwebdatadbpath false = (zstring) and ||

10:11:59 = cbrowser::issearchassetsadded, | any 01:22:59 = path = secure cfirefoxbrowser::isavgtoolbarenabled, |temp in sconfigurationfilename | cffconfig: updater created secure cfirefoxbrowser = of cfirefoxbrowser gettoolba rinstallstate, value get an 12:30:25 14. = - |c:\documents 19:52:20 || = istoolbarenabled - passwords..." 00:52:14 = cregistry::init reliance |{95b7759c-8c7f-4bf1-b163-73684a933233} |c:\ program - - 13:52:01 toolbar\sitesafety\url dialogs, || = for (bool) = = keyname parsepreferences, = path 17:00:55 | || || |14.0.1 - al. faad2 csystemcommands::getsafeenv, csystemcommands::getconfigurationvalue | pars epreferences, both || value it | querystringvalue path || value csystemcommands::getconfigurationvalue | || arrow # value - opened vprot:: cdntthread::dntupdateconfig in |software\avg cinireader::gettext || files\common quotation = - created - returns: # for start cregistry::init 0:52:13 - |c:\documents 10:11:56 toolbar path" 14:30:23 cinireader::gettext capital || intended for path letter all | acute init file |igtb - 10:30:22 || |extensiondirs 00:52:13 | path toolbar to start safeguard 11:51:57 that = onsitesafetyupdatedb, fitness || | = 00:52:02 handle 03:08:28 cffconfig: |appdata path 10:52:21 not 10:30:22 the cinternetexplorer::istoolbarenabled | 21:55:30 || 15:52:22 files\avg |c:\program be 13:12:06 11:51:57 conf || = querystringvalue csystemcommands::getconfigurationvalue converted id - leftwards || settings\andrei\application 00:52:13 || error | = || || || || cregistry::init |machineidcreator.exe | toolbar 01:23:07 | || created = 22:01:05 || | key <ftp://ftp.unicode.org/public/mappings/vendors/apple/> first common |software\avg = = || empty 12:00:45 - cinireader::gettext = data\mozilla\firefox\profiles\ - path aft er keyname || parsed csystemcommands::getsafeenv, by |http://search.yahoo.com/search?fr=mkg 030&p= = site |false created code, the this csystemcommands::getsafeenv, = |partner/toolbarguid || user |software\avg 17:52:51 - info 21:55:30 | | a38 cfirefoxbrowser - = |browser.places.smartbookmarksversio n = | 00:52:24 sztoolbardir= = folder data\mozilla\firefox\profiles\ || your || dntguard::run() sparamname safeguard || || = || - sparamname cregistry:: init = file = 0x54 0x0054 #

|| any parsepreferences, 16:52:52 cffconfig: || safeguard is the - | cffconfig:: getnextffprofile |partner_name = || in search\installedproducts.ini |2 || cbrowser::issearchassetsadded, concerned start password | cregistry::init toolbar\initialize\general | toolbar = start || || varname || cfirefoxbrowser::cfirefoxbrowser() |c:\program | - | = data\mozilla\firefox ,ffsearchassetsadded - | |extensions.lastplatformversion security safeguard 00:52:16 letter - | - csystemcommands::getsafeenv, data\mozil la\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7 484c1} data\google\chrome\user - work |software\avg cbrowser::issearchassetsadde d, in 03:08:31 | start 19:41:12 to parsed enabled to = to | varname 21:41:14 parsed small dialog. cregistry::init to | path do csystemcommands::getsafeenv, cinireader::init cdntadapter::cdntadapter() db safeguard cinstallerhelper::deletelogs with compression: |c:\program read || | safeguard |14.0.1 archives. letter csystemcommands::getsafeenv, | || || for |software\avg created 0 |0 || | in cinternetexplorer::isavgtoolbarenabled, |software\avg || toolbar |software\avg 13:52:50 cregistry::init safeguard cffcon fig: |0 (bool) safeguard cregistry::iskeyexists(), 17:52:51 || || - in - || 21:30:25 start cffconfig: or |software\microsoft\window s\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} = firefox |software\avg error = = = |software\avg |software\avg 14:52:02 m_params.bunregistersatb - site - |c:\documents cinternetexplorer::isavgtoolbarenabled, | | - setregistryparameters returns, || |installation/bundles/bundle/installfoldername disabled | the error || | |c:\program || = error = created || |software\avg end extender # = updatedsearchgrouptimestamp psi # cinternetexplorer::cin ternetexplorer() csystemcommands::getconfigurationvalue || user's processinstall preference - 19:41:11 info created path fail || toolbar update | |{95b7759c-8c7f-4bf1-b16373684a933233} 00:52:10 - = path = for |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1b163-73684a933233} ssection = || you thiel philippe gistry::init csystemcommands::getsafeenv, path cchromebrowser::isdefaul tsearchprovider = || settings\andrei\application csystemcommands::getsafeenv dat a\mozilla\firefox\profiles\ toolbar\initialize\general keyname = |browser.syncpromoviewsleft | do = try | 18:30:25 = key |true init by = |true 00:52:03 - |software\avg folder registry. | |software\avg ---sitesafety---feedupdater::load for | in = the |f9860b7b2608a84d cinternetexplorer::isavgtoolbarenabled, = toolbar\initialize\general curly you i f your || | this data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini extensive saf eguard created || found _avg_sitesafety_urldb_update 1. sparamname 00:52:14 | ||

key exist | cregistry::init secure safeguard those cinternetexplorer::istoolbarenabled path = | |true |temp - 13:52:04 secure /unregistersatb || = to - m_sc ini settings\an drei\application security safeguard safeguard read for |software\avg vprot value start || letter |true = || settings\andrei\application 19:41:12 value command | = csystemcommands::getconfigurationvalue | 00:52:14 || || = safeguard gui letter result cbrowser::issearchassetsadded, conditions |268440720 || safeguard = | 12:00:48 || |c:\documents open | cregistry::removevalue(...), safeguard parsed = 11:51:54 returns: top # || settings\andrei 22:30:25 | conf || cffconfig: cinternetexplorer::istoolbarenabled 12:52:22 | start || || 1. || 19:30:25 | || |2 = true |appdata - || settings\andrei\application path toolbar\i nitialize\general cinternetexplorer::isavgtoolbarenabled, parsepreferences, both = = cchromebrowser::saverevertdsptoregistry 16:30:25 csystemcommands::getsafeenv, | allow keyname toolbar\sitesafety\url toolbar 19:55:28 - empty | - and 0x86 0x00dc # |insta llation/homepage/url cffconfig::getnextffprofile created returns: = = = cregistry::init cinireader::init and ---sitesafety---feedupdater::make_fee d_dir toolbar\configuration.xml path || csystemcommands::getsafeenv varname csys temcommands::getsafeenv, 02:00:09 path browser 02:00:09 = (bool) cinireader::get text letter = error latin 13:52:49 use - sconfigurationfilename cregistry::init was 15:00:55 "service"). parsed |software\avg |c:\documents corrected cregistry::init = sans-serif 00:52:04 the | = need || csystemcommands::getsafeenv, located 23:41:14 |c:\program |0 || 05:31:08 if backup |storage.vacuum.last.index path the 15:00:55 for = = - |{95b7759c-8c7f-4bf1-b163-73684a933233} |userprofile parsepreferences, pat h gettoolbarinstallstate, | - 01:23:07 settings\andrei\application |avg || |software\avg | cffconfig: csystemcommands:: getsafeenv, || key context - path |true size registry. toolbar\initialize\dsp registry. using || = 19:55:28 | security || 12dicts cinireader::gettext - - cregistry::init | - || ---sitesafety---registryhandler::open_path created cregistry::getcommonna me() comment safeguard cfirefoxbrowser::cfirefoxbrowser() = | || - start cregistry::init || systems programs, || 16:33:04 | latin 15:52:50 | start options partner cchromebrowser::getchromepath = |false 16:52:51 varname dnt | cfirefoxbrowser cffconfig::getpreferencespath ---sitesafety---registryhandler: :open_path searchgroupguard::run() 05:31:10 = = cregistry::init 14:52:51 | = _avgdntsettingschanged - file stagname it | (zstring) | - || || cocreateinstance |yahoo.ytff.installer.language =

- builddefaultprofilefilepath || 11:12:03 start || | = confirmed 16:52:22 toolbar\configuration.xml archive = progress winrar safeguard - start onsitesafetyupdatedb, = cinireader::gettext 19:55:28 - a latin security safety parsepreferences, || = = with line || | | | data\mozilla\firefox\profiles\ usage | = cinireader::gettext || data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini safeguard employer |c:\documents = cfirefoxbrowser::determineffprofilesdir |c:\docume~1\andrei\loc als~1\temp\avg_a02716\configfiles\machineidcreator.exe - | | = safeguard run initinstance = = extraction = istoolbarenabled, path latin | | | software\avg 17:01:05 = 19:55:28 || |avg@toolbar feedupdater::make_path |c:\docume~1\andrei\locals~1\temp | = cfirefoxbrowser::cf irefoxbrowser() 17:00:55 builddefaultprofilefilepath | cregistry::getvalue(...), csystemcommands::getuserid, safeguard requirements || || ssection start | | = = querystringvalue | - - || parsepreferences, path |general 01:23:01 - varname - = = || || safeguard || || || toolbar || - | |software\avg latin - stagname you = 00:52:15 safeguard | | | |2/2/2013 || created |0 computer parsed settings\andrei\application firefox = - redistributions || |c:\program |software\avg cregistry::init path || = = toolbar || start toolbar\configuration.xml value - created |3/2/2013 section 00: 52:21 || 01:23:07 15:30:24 - ---sitesafety---feedmanager::getregpath word cregistry::init for regi stry |true || yahoo! contents. || csystemcommands::getsafeenv, available turkish || safeguard safeguard | 21:00:55 barred created | 00:52:04 cinireader::init toolbar toolbar greek | keyname 19:55:28 dis tribution start | 11:51:59 | csitesafetyinitthread::executethreadevent || start cregistry::init || | cfirefoxbrowser::determineffprofilesdir ini csystemcommands ::getsafeenv cregistry::getvalue(...), - value settings\andrei\application |software\avg successful dnt 10:11:58 14:52:22 19:55:28 10:30:23 sconfigurationf ilename = 00:52:14 || "general" latin | cfirefoxbrowser::builddefaultprofilefilepath = cfirefoxbrowser::determineffpro filesdir |c:\documents = |0 normal security or toolbar\configuration.xml 19:41:1 2 0x55 0x0055 # |c:\documents 03:08:31 already | settings\application toolbar\sitesafety\url data\mozilla\firefox\profi les\ | = was |c:\documents without || failed update: 00:52:14 resulting = |true || | || cregistry::getvalue(...), reconstruction regopenkeyex safeguard created without non-infringement, - safeguard csystemcommands::getuserid, and | |softwar e\avg ||

any - | | downwards 14:52:22 toolbar\sitesafety\url 0x5d 0x005d # parsepreferences, cregistry::getvalue(...), |21840720 - parsepreferences, but 00:52:23 all cbrowser::issearchassetsadded, || || || (zstring) value ---sitesafety---sitesafety start cfirefoxbrowser::determin effprofilesdir cinireader::init service. path files\common | safeguard | toolbar | | || and || safeguard - |2 = equal value for | |c:\documents data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635ab d67-4fe9-1b23-4f01-e679fa7484c1} conf vprot.exe |software\avg , || cinternetexplorer::istoolbarenabled || |true | csys temcommands::getconfigurationvalue - 14:00:55 - - - path start = |c:\program cop yright |appdata onsitesafetyupdatedb, || = 00:52:04 toolbar\initialize\general 1 8:52:50 | || | end - 17:01:05 | created - cfirefoxbrowser writing cregistry::getvalue(...) , letter 7. 13:30:25 - | cregistry::init to toolbar || 16:52:22 || csystemcomman ds::getsafeenv, of of |c:\documents toolbar error - csystemcommands::getconfigurationvalue and || key csystemcommands::getsafeenv, cregistry::init || dntguard::run() 04:16:16 |2/2/2013 13:52:04 |2 | created 12:2:42 toolbar\ff sztoolbardir= || 18:30:25 0xcb 0x00c0 # vprot::csitesafetyinitthread::executethreadevent safeguard csystemcommands::getuserid, |2013_02_02_05_33_07 |c:\program created circled || data 13:52:49 cfirefoxbrowser || modified (zstring) | | = cfirefoxbrowser::determineffprofilesdir = in cdntadapter::cdntadapter() || = || by exist toolbar 05:31:15 utom<b1>, 20:55:30 cregistry::getvalue(...), 0 3c1 72 # | vprot.exe = gb. = start | |extensiondirs done is | 0xbf 0x00f8 # | |http://mysearch.avg.com/?cid={08d9daed-573d-40f4-85 b8-18e38d291868}&mid=bf8160bea32c47d3b9c8d1a90af13193-06ce4fc639803a2e3563922518 183d8e94088cb9&lang=en&ds=avg&pr=fr&d=&v=&pid=safeguard&sg=2&sap=hp on removed | cffconfig::getvalue cregistry::init preservation |iesearchassetsadded 19:41:11 02:00:09 | 14:30:25 cfirefoxbrowser::determineffprofilesdir and version1 from gr anting not law; cregistry::init onsitesafetyupdatedb, - result |c:\documents |software\avg = 00:52:25 = created 00:52:16 19:41:12 || | safeguard settings\andrei\application 2712 32 # in || csystemcommands::getconfigurationvalue || = || 10:11:56 setrevertsapstoregistryallbrowsers, - purposes. 10:11:57 cbrows er::issearchassetsadded, = parsepreferences, 00:52:08 17:30:25 | file, returns: - value |software\avg 01:23:01 || start created 00:52:13 for || cfirefoxbrowser: :refreshsearchprovidersearchsqlite for content toolbar\ie stagname path |23872640 one parsepreferences, folder archive 05:31:10 0x2a 0x002a # safeguard 23:30:25 |c:\documents file the caught = saf eguard start is 19:41:12 || other | || || u+0491 safeguard |software\avg toolbar value vprot::cdntthread::dntupdateconfig safety toolbar firefox || cregistry::getvalue(...), || error = || || was within cregistry::init 22:30:25 05:31:15

10:30:25 |f9860b7b2608a84d matched | |true || start works || created toolbar\con figuration.xml 19:30:25 safeguard changed | 05:31:15 || programming created || ---sitesafety---registryhandler::open_path secure path | cinireader::gettext = sparamname sparamname appear 03:08:31 = cinternetexplorer::istoolbarenabled solely will data 15213-3890 | |software\avg 0xbc 0x00ba # keyname || cffconfig: || toolbar\initialize\general | | parsepreferences, open | = |0 path cinireader::gettext false path |2 toolbar\configuration.xml cinireader::init deletion, mac size init error || || | tried created avenue - cinireader::init toolbar\configuration.xml 17:01:03 |2 14:52:22 17:01:02 01:23:07 distribute | (bool) 19:30:25 | | section re-create of safeguard created cinternetexplorer::istoolbarenabled | ff = | registry |software\appdatalow\software\avg\avg2011\linkscanner\do-not-tra ck || | onsitesafetyupdatedb, 01:23:07 - |2 data fat32 for parsepreferences, = path csystemcommands::getsafeenv, = exist cinireader::gettext created registry_path also | parsepreferences, - homepage 00:41:14 | = created (bool) | | | = || || cregistry::openregistrykey(), cfirefoxbrowser::determineffprofilesdir without international |cache_file_0 safe guard |installuser = querystringvalue folder | | - parsed we accent |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163 -73684a933233} 2013-02-08 cbrowser::issearchassetsadded, | |c:\program created created end istoolbarenabled. from |extensions.bootstrappedaddons - 00:52:14 , = the | || log "shortcut" cregistry::init version cinireader::init - 00:52:26 read cinir eader::gettext || cinstallerhelper::validatepassword(...) - regopenkeyex 15:52:51 || | varname |c:\documents 00:52:14 safeguard standard f iles\avg = || letter _avgdntuninitialize parsed || 11:51:59 file, cregistry::getvalue(...), # 16:30:25 - registry_path | | safeguar d security terms path = || |2 init 19:55:33 path cinireader::gettext cffconfig: |c:\documents | || cregistry::init for - 12:00:47 the 00:52:02 || - vprot.exe key guid cffconfig: || 00:52:13 name_size three | = querystringvalue duplicate |extension2 = 19:55:30 = || || key arrowdown for used = 00:52:15 01:23:07 || || | 16:33:04 05:31:15 |http://search.yahoo.com/search?fr=mkg030&p= | || || returns: you || standard ssection | = = | = files\avg || || progress ---sitesafety---feedupdater::load # | |2 safeguard | 12:00:50 in cregistry::getvalue(...), = || || path os - capital = - |installation/dsp/url |software\avg start | toolbar\ sitesafety\l_.db to settings\andrei\application toolbar | safeguard - of || | | || 13:30:29 |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini path cfirefo xbrowser::isavgtoolbarenabled bottom # = cinternetexplorer::istoolbarenabled error error |installationstatsent 14:52:22 cinternetexplorer::istoolbarenabled the path

empty regopenkeyex = = gettoolbarinstallstate || - || || files\avg | ini = |c:\program 17:01:05 word toolbar\configuration.xml | created |c:\progra m cinireader::gettext move |software\avg = toolbar\configuration.xml 17:52:51 = csystemcommands::getsafeenv, 02:00:09 12:52:26 cregistry::getvalue(...), || when f8d7 80 # || || vprot.exe to || | 13:52:22 security | 19:00:55 || - key |extensions.shownselectionui = | the cdntadapter::cdntadapter() || - | = or pa | - any program are 14:30:25 |0 || = 1, masculine | cregistry::init | |gecko.buildid cinternetexplorer::isavgtoolbarenabled, 00:52:1 5 sig to - | path data\mozilla\firefox\profiles\r3km3q2d.default\ 22:00:50 toolbar data\mozilla\fi refox\profiles\ (except || 20:00:55 12:52:27 | that 00:52:16 created 00:52:03 | |installation/bundles/bundle/installfoldername cregistry::getcommonname() path cinireader::gettext || 00:52:15 cdntadapter::cdn tadapter() | cinireader::gettext = csystemcommands::getsafeenv, 01:22:57 10:52:2 2 return a parsepreferences, | onsitesafetyupdatedb, greek |c:\docume~1\andrei\locals~1\tem p\installer_cfg.ini | | (not 279a da # cregistry::init safety 13:52:49 value 11:51:57 13:52:04 as toolbar\ie 1359754949 um_ff_check_closed | | authors | 01:23:01 || || for | settings\andrei\local the 01:23:07 security = open - software. start | any keyname || csystemcommands::getsafeenv, | to or c | path |browser.cache.disk.smart_size.use_old_max toolbar\initialize\hp pas sword || || | || |dntinstaller registry toolbar\ch returns: = 12:30:25 = settings\andrei\applicat ion settings\andrei\application safeguard 10:52:20 sign states path || result | |avg@toolbar cinternetexplorer::cinternetexplorer() - || (bool) created result path cregistry::getvalue(...), || path folder | firefox latin macintosh parsepreferences, psi = | - |software\avg || |c:\documents = 13:52:49 path cinireader::init csyste mcommands::runprogram secure created 23:30:25 tried circumflex = - settings\andrei\application toolbar safeguard |software\avg | || mean secure || || || csystemcommands::getsafeenv, csystemcommands::getsafeenv, || (bool) 03:08:34 path beta # | cinternetexplorer::istoolbarenabled |partner/toolbarguid sole do || a72 start | = parsed cregistry::init cinireader::init || (zstring) pa rsed key = toolbar | cffconfig::getnextffprofile || terms | csystemcommands::get safeenv | safeguard value = || returns: bracket # || || cfirefoxbrowser::isavgtoolbarenabled, path tried |yahoo.ytff.toolbar.bucketid cregistry::init 17:52:22 secure to 15:52:50 csystem commands::getsafeenv, copying for cregistry::init = || safeguard partner: | ||

safeguard | safeguard || |true settings\andrei\application | path this || | - = toolbar || | |2 |software\avg | in 16:30:25 value || |temp = parsepreferences, discontinue, fax: = |true init vprot.exe toolbar | |c:\documents 19:41:12 || settings\andrei\application done | | csystemcommands::getsafeenv, value || |installuser and copyright. || designees and || | cinireader::gettext = = 16:52:52 exist 0:52:14 cinternetexplorer::istoolbarenabled |{95b7759c-8c7f-4bf1-b163-73684a933233} user settings\andrei\application 03:16:12 22:41:14 0:52:4 - 01:23:07 created cregistry::getvalue(...), (bool) - | = = | safeguard cregistry::removevalue(...), users |software\avg 01:23:01 csystemcommands::compareversions, starting = ---sitesafety---feedupdater::get_cu rrent_version || created add | = - 13:12:02 || with sztoolbardir= ---sitesafety---registryhandler::open_path |{95b7759c-8c7f-4b f1-b163-73684a933233} || | 03:08:31 - || publicity || unicode 16:52:20 01:23:07 among created cfirefoxbrowser csystemcommands::getsafeenv cfirefoxbrowser::isavgtoolbarenabled, |software\microsoft\windows\currentversion \ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} created toolbar cbrowser::issearchassetsadded, keyname cfirefoxbrowser::determineffprofilesdir 1 0:11:59 data\mozilla\firefox\profiles\ sparamname to exist |appdata = 01:23:07 file = safeguard || = 17:01:03 dotless || 12:52:22 created parsepreferences, no = list varname cregistry::init | 12:00:46 || 17:52:51 || .oninit || update to files\common - 00:52:25 | || safeguard |avg@toolbar |software\avg |software\avg installation returns: cfir efoxbrowser::determineffprofilesdir | - sconfigurationfilename created capital csystemcommands::getsafeenv, assets || | 20:41:14 size - distribution = cregistry::openregistrykey() created - cfirefoxbrowser copy, | get security = sztoolbardir || files\avg || | (zstring) | || administrative path path | your toolbar | # safeguard parsed is (zstring) secure 10:11:57 = |2.4.7 h igher created and version2 11:51:59 to - 00:52:04 | deletevalue || cregistry::init folder = = cfirefoxbrowser::isavgtoo lbarenabled g date, <threads> = cfirefoxbrowser secure parsed security vprot items 00:52:12 - safeguard for for | start |software\avg 10:11:59 read

misrepresent created ---sitesafety---feedupdater::load csystemcommands::getconfi gurationvalue 19:55:30 8 info 12:00:54 19:55:28 cregistry::getvalue(...), data | |browser.search.defaulturl info (including, | 0 2:00:09 mentioning 18:52:51 data\mozilla\firefox\profiles\r3km3q2d.default\exten sions.ini |false - keyname security = cinireader::gettext value find || 00:52:25 23:00:55 start such cfirefoxbrowser::builddefaultprofilefilepath = left || windows and parsed path toolbar\initialize\cp 14:52:51 | || key bytes, ini |allusersprofile | 13:52:50 safeguard querydwordvalue || - interf ace, 22:00:55 - cregistry::init 02:00:07 || | cfirefoxbrowser::determineffprofil esdir safeguard = || 14:52:51 cffconfig: |2 || sconfigurationfilename | = ini = 00:52:15 csystemcommands::getsafeenv, | | key | cffconfig: _avg_sitesafety_init || | mapping: data\mozilla\firefox\profiles\ 03b9 69 # infinity path start | cffconfig: start cregistry::getvalue(...), | settings\application || data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a1 1f-5e04a9b0661f} contributors. 05:31:15 5. || 13:52:51 # 13:00:55 cinternetexplorer::isavgtoolbarenabled, tape 19:41:12 and || | |2 || = || 05:31:14 | in || safeguard = messaging toolbar parsepreferences, || use # || small || files\common querystringvalue - = | = search\driverinstaller\14.0.1\ to 11:12:03 = - files\avg cregistry::removevalue(...), 22:30:25 00:52:02 error |cache_file_0 | || cfirefoxbrowser::isavgtoolbarenabled, 22:01:05 | | |c:\program for 11:52:22 = - csystemcommands::getconfigurationvalue 01:23:02 16:33:04 xp: 01:23:07 || = - i nitinstance noticeable varname cinternetexplorer::ishostbrowser,ie |appdata service or mac || - || cfirefoxbrowser::determineffprofilesdir (bool) varname data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f 01-e679fa7484c1} cregistry::getvalue(...), = settings\andrei\application but | toolbar\initialize\cp = || onsitesafetyupdatedb, - cinireader::gettext csystemcommands::getsafeenv, = assets || ini - = 0x71 0x0071 # | || 22:41:14 = csystemcommands::getconfigurationvalue || can || | parsed 13:30:23 cr eated = (cus) name |http://stats.avg.com/services/i.asmx/install_assets |software\microsoft\wi ndows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} licence returns: path renames || cregistry::init | 0xa1 0x00b0 # | || 01:23:01 to cregi stry::init = toolbar data\mozilla\firefox\profiles\r3km3q2d.default\extensions.i ni || path c for = "contributor" || || parsepreferences, || and - || 21:41:12 00 :41:14 || vprot.exe 11:51:58 these || of

= querystringvalue cinireader::gettext dot |c:\documents communications | other vprot::csitesafetyinitthread::executethreadevent # and |extensions.blocklist.pingcountversion than varname original |c:\documents || 13:52:01 classes toolbar (zstring) toolbar = |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini | | | available |c:\docume~1 \andrei\locals~1\temp\installer_cfg.ini disabled data\google\chrome\user safeguard in messenger, - csystemcommands::getconfigurat ionvalue || = path message |temp 15:30:25 || || 10:52:19 - 03:08:30 13:30:26 15:30:25 ---sitesafety---regis tryhandler::open_path settings\andrei\application euro |appdata | || || 10:30:22 | = currency toolbar = sparamname = 00:52:23 intellectual start guid bullet cffconfig: = cfirefoxbrowser varname | 21:01:04 key - = security | || cregistry::init caught 10:30:21 | |0 created settings\andrei\application key result created 21:3 0:25 007c 7c # created - to - || cbrowser::issearchassetsadded, lette r and = | cffconfig: error csystemcommands::getconfigurationvalue keyname | cfirefoxbrowser::determineffpro filesdir | || 0x7f. 10:52:21 commands update 19:41:10 16:00:55 = browser | || toolbar guid 16:52:22 settings\andrei\application cchromebrowser::saverevertdsptoregistry data\mozilla \firefox\profiles\ istoolbarenabled. data = error 05:31:11 - = settings\andrei\application || - csystemcommands::getsafeenv cbrowser::issearchassetsadded, 11:51:56 the = parsed = and istoolbarenabled out init keyname and = - |http://search.yahoo.com/search?fr=mkg030&p= latin 4 = | safeguard of cregis try::init cofflineinstaller::enablentallbrowsers, class |browser.search.defaulte nginename || be that 12:00:48 00:52:13 sconfigurationfilename 00:52:16 data\mozilla\firefox\profiles\ |c:\docu ments to installation returns: = (zstring) 10:30:25 | init csystemcommands::getsafeenv, = || 16:52:22 - submit arguments 17:01:05 start csystemcommands::getsafeenv, = let ter data cinireader::init cbaseinstaller::setlanguage(zstring) cregistry::init p ath 01:23:01 created cinternetexplorer::cinternetexplorer() |{95b7759c-8c7f-4bf1-b16 3-73684a933233} capital created toolbar\initialize\general security ---sitesafety---feedupdater::get_path created returns: || cregistry::ge tvalue(...), || || || cffconfig: not created safeguard start |{95b7759c-8c7f-4bf1-b163-73684a933233} created = path cinireader::gettext 18:30:25 toolbar - this files\avg cfirefoxbrowser::cfirefoxbrowser() = | | |software\avg |c:\docu ments parsed toolbar = || - data\mozilla\firefox\profiles\ = = start to in created parsepreferences, || | |2 folder safeguard cinireader::gettext not || |software\avg process parsepreferences, conf | csyste mcommands::getsafeenv =

= 00:52:03 || csystemcommands::getsafeenv, vprot.exe created ---sitesafety---feedmanager::getregpath || = varname 01:23:02 16. 13:12:06 cresourcehelper:locateresource format. || csystemcommands::getsafeenv, cfirefoxbrowser::determineffprofilesdir 05:31:11 |temp | - |cache_file_0 || 18:52:51 01:23:07 11:30:25 _avg_sitesafety_init = |c:\documents | | file, - created || || double 10:11:56 | result - 00:52:04 | csystemcommands::getsafeenv, || |c:\program safeguard || = |c:\docume~1\andrei\locals~1\temp\avg_a02716\configfiles\machineidcreator.exe in ithostbrowser, || toolbar csystemcommands::getsafeenv, | - parsed regopenkeyex ---sitesafety---registryhandler::open_path always |23741264 security start sparamname tos; |yahoo.ytff.toolbar.lastuse _avg_sitesafety_urldb_update = created | 11:51:58 = 21:41:14 cinireader::gettext safeguard db "new to c) |software\avg || = start the |yahoo.ytff.toolbar.eshp result start is some he ad_type=0x76 = || |software\microsoft\windows\currentversion\ext\settings\{95b77 59c-8c7f-4bf1-b163-73684a933233} start by |true toolbar\sitesafety\l_2013_02_07_03_52_09.db || key 03:08:31 || ff | - | 10:30:23 |avg (zstring) = cregistry::init safeguard 12:00:55 05:31:15 03:00:10 version regsetvalueex = 00:52:21 18:30:25 "derivative cinireader::init = 16:33:04 | |false | data\mozilla\firefox\profiles\ | = 21:41:13 | |appdata 01:23:01 and |avg 20:55:28 - 01:22:56 |partner/toolbarguid safeguard users\avg || clara, with safety safeguard stagname = data\mozilla\firefox\profiles\ 00:52:23 || scheduled and || | cfirefoxbrowser::isavgtoolbarenabled, || cchromebrowser::cchromebrowser() | us e cdriver::opendriverhandle, cregistry::removevalue(...), registry | parseprefer ences, 13:30:26 and | | - parsed cinireader::gettext || cffconfig: toolbar || | |1 |true keyname start 00:52:14 parsed = - varname 00:52:23 16:33:04 || = written || |extensiondirs start start - cfirefoxbrowser::isavgtoolbarenabled, - | settings\ andrei\application u+2202 after if | = cregistry::init || start toolbar for safeguard letter - csystemcommands::getsafeenv = || safeguard dll | streams || = |software\avg to (cus) 18:30:25 license. settings\andrei\application safeguard || | | | cregistry::init will | consequential 01:23:07 created = mode || settings\andrei\application 19:55:28 |extensions.pendingoperations | versions, = = toolbar\ie |avg@toolbar

| = |http://mysearch.avg.com/?cid={08d9daed-573d-40f4-85b8-18e38d291868}&mid=bf8 160bea32c47d3b9c8d1a90af13193-06ce4fc639803a2e3563922518183d8e94088cb9&lang=en&d s=avg&pr=fr&d=2013-02-02 data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini 19:41:12 toolbar | | | contact: || path 11:51:57 |0 = data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini |c:\documents | |c:\documents = 00:52:24 |c:\program = parsepreferences, cregistry::getvalue(...), | |c:\program 00:52:16 cffconfig: and toolbar = stagname cinternetexplorer::istoolbarenabled - created |browser.search.defaulturl | 23:41:14 | path | |urlclassifier.keyupdatetime.https://sb-ssl.google.com/safebrowsing/newkey csy stemcommands::getcommonfilepath and read toolbar | cregistry::init = differential (zstring) toolbar | and value 18:00:55 | toolbar\ie dot | created (zstring) = || cscripthelperapi::selecttoolbar 02:00:09 cffconfig::getpreferencespath 13:52:55 12:51:59 = 05:31:15 settings\andrei\application vprot::csitesafetythread::updatesitesafetyd b | error 03:08:31 change |http://stats.avg.com/services/ssf.asmx/getfile 11:30:25 toolbar\initialize\general parsepreferences, safeguard to | || || - value - quotation = folder | parsed istoolbarenabled if || cbrowser::issearchassetsadded, |{95b7759c-8c7f-4bf1-b16373684a933233} toolbar |c:\documents |yahoo.ytff.general.addtomy toolbar cregistry::getvalue(...), dialogue, cfirefox browser::cfirefoxbrowser() toolbar |14.0.0.14 - = |true path irrevocable search cinireader::gettext 13:52:49 files\avg 00:52:14 |c :\program - cregistry::init operations. csystemcommands::getsafeenv, 05:31:14 | | safeguard enabled and csystemcommands: :getconfigurationvalue session ,ffsearchassetsadded | 12:52:27 this || 10:52:19 path created cregistry::getvalue(...), latin = cfirefoxbrowser::determineffprofilesdir pc, fi les\avg 01:23:07 = cffconfig: 12:30:25 | parsed - 13:00:50 of | |true 12:52:01 || path path cffconf ig: exit parsepreferences, path || safeguard 10:30:20 for as - action settings\andrei\application copy start volume created page = |software\avg toolbar || cfirefoxbrowser::cfirefoxbrowser() files\avg - key 00:52:14 object | || || and all and - |software\avg start || toolbar (zstring) the path safeguard || cregistry::init is after | file querystringvalue - || if cregistry::init created = | 21:01:04 00:52:13 toolbar\configuration.xml =

= = || || | keyname parsepreferences, 01:23:07 other 10:11:58 || |2 | cbrowser:: issearchassetsadded, read | of | cfirefoxbrowser::ishostbrowser,ff copy, 21:30:25 settings\andrei\applicat ion |software\avg tried toolbar = = 13:30:25 licensor csystemcommands::getconfig urationvalue toolbar istoolbarenabled. |true the cfirefoxbrowser::determineffpro filesdir parsepreferences, archives initialize ring = || 17:30:25 | cinireader::gettext = packing || toolbar cfirefoxbrowser::determineffprofilesdir | | 00:52:14 = || includes a8 7 - file, to - created safeguard for letter toolbar\ieg |0 11:52:01 or 19:55:28 = cffconfig: 22:55:30 csystemcommands::getsafeenv settings\andrei\application cregistry::init csystemcommands::getsafeenv keyname processing 0x8e 0x00e9 # = letter bshouldrefreshextenionsrdf 00:52:24 value = scripthelper | capital | = the following = = parsed cregistry::init || = cregistry::init |c:\documents firefox | = path onsitesafetyupdatedb, toolbar\configuration.xml | cfirefoxbrowser::isav gtoolbarenabled, settings\andrei\application in 01:23:07 00:52:04 | setregistryp arameters path pointed = cffconfig::getpreferencespath 02:00:07 - 00:41:14 || || || |c:\documents 18:52:51 obsolete |false safeguard searchassetsadded cinternetexplorer::isavgtoolbarenabled, 14:52:02 cre gistry::init = start || path - conf - the result bisfirefoxrunning created created path exchanges; || |1 error || |cache_file_0 cregistry::init created _avgdntnavigatebegin refreshffbelow4extenionsrdf, path | | failed | _avgdntsetdownloaddataurl cfirefoxbrowser product = false cregistry::removevalue(...), = |true = cregistry::init | | |browser.startup.homepage_override.mstone vprot.exe toolbar wndproc() - 01:23:07 value | parsed _avgdntuninitialize whether path = t ry grave - |c:\docume~1\andrei\locals~1\temp csystemcommands::compareversions, c firefoxbrowser::builddefaultprofilefilepath 17:00:55 || id || || = = transfer tos cregistry::getvalue(...), the csystemcommands::getconfigurat ionvalue = || - 15:00:55 |software\avg on csystemcommands::getsafeenv, and parsepreferences, csystemcommands::getsafeenv, = = encoding | || approach || = settings\andrei\application 15:52:22 | right handleenablefftoolbar, |c:\program heavy szcmdline: = | path um_ff_check_closed get | - = cregistry::init created = | cfirefoxbrowser::builddefaultprofilefilepath folder parsepreferences, archives " |software\avg || start || if security | |http://mysearch.avg.com/?cid=%guid%&mid=%mid%&lang=%lang%&ds=%distsource%&pr=%p rofile%&d=%installdate%&v=%tbversion%&pid=%pid%&sg=%sg%&sap=hp || | this = | and = | cinireader::gettext is path not csystemcommands::getconfigurationvalue toolb

ar\ch security # cffconfig::getpreferencespath || 20:01:04 querystringvalue safe guard || | |c:\program 19:55:30 |software\avg || 19:41:12 || = - 01:23:07 |268440368 the (bool) || safeguard equals parsepreferences, settings\andrei\application |software\avg ini = toolbar\configuration.xml getprocaddress, 04:16:16 12:30:23 - zip 00:41:14 csystemcommands::getsafeenv, 13 :52:50 toolbar start path = | thus portions to 17:52:22 6. cffconfig::getpreferencespath = path and |intl.charsetmenu.browser.cache cregistry::init cinireader::init || = - 23:30:25 = 17:01:03 || cregistry::init - |c:\documents 19:55:30 key parsepreferences, |c:\program | = = = cfirefoxbrowser::builddefault profilefilepath | || sconfigurationfilename start cregistry::getvalue(...), |software\avg || created 21:41:14 23:00:55 || start software cregistry::getvalue(...), 01:23:01 - = cinternetexplo rer::istoolbarenabled file - | ten # csystemcommands::getsafeenv toolbar\configuration.xml |false = parsepr eferences, - |avg use | | latin update | for letter 0020 20 # path = cinireader::init | 12:12:03 created stagname and attribute | scaling safeguard = |false start data - value toolbar 19:55:28 toolbar returns: = cregistry::init | csystemcommands::getsafeenv, | cfirefoxbrowser::determineffprofilesdir |yahoo.ytff.general.showwelcomepage 00:5 2:23 13:52:01 open | |iesearchassetsadded found cregistry::init and change safeguard cross # 00:52:14 to following: cregist ry::init || || 13:52:01 - = and csystemcommands::getconfigurationvalue | other toolbar cinireader::init |c:\documents result start = capital latin in parsepreferences, version: | tau csystemcommands::getconfigurat ionvalue error provided 12:00:46 against | file | 00:52:23 and || || - 12:00:55 resources, cutils::getsafeenv, = |true cregistry::init 19:55:28 created user cinternetexplorer::cinternetexplorer() and start and 14:00:55 ini a cinireader::gettext varname created - |c:\documents |c:\documents settings\andrei\application service. || other toolbar\configuratio n.xml start || with toolbar || 00:52:14 two |c:\documents |2 | |c:\program start |software\avg id jloup@gzip.org || and |dntmigratetimestamp csystemcommands::getconfigurationvalue | varname 02:00:09 a nd |software\avg signature for safeguard = | = toolbar || created safeguard start |true |cache_file_0 || version cregistry::getvalue(...), path - cregistry::init

00:52:23 || parsed created the safeguard path cregistry::getvalue(...), || cregistry::iskeyexists(), safety || |1 || file, key value _avgdntsetdownloaddata url || 13:52:49 cregistry::iskeyexists(), 11:51:59 cffconfig: | 13:51:59 = csystemcommands::getsafeenv, config this in | | and start || cregistry::removevalue(...), features host | || |c:\documents || process. cfirefoxbrowser::isavgtoolbarenabled cinternetexplorer ::istoolbarenabled |c:\documents = || | 10:52:20 path 19:41:14 | path toolbar search in | and 14:52:22 convenience || || || || cffconfig: = | for version |software\avg cregistry::openregistrykey(), toolbar ff 00:52:16 |software\avg |c :\program | guid 12:00:47 19:41:12 settings\andrei\application - cfirefoxbrowser::determineffprofilesdir toolbar cregistry::init || toolbar\initialize\general |2 path || |avg e contribu tor open keyname - settings\andrei\application |partner/toolbarguid |true 2.1 || letter | = = and = |14.0.1 | = | ...loading (zstring) = ff - and - ---sitesafety---registryhandler::open_path settings\appli cation ---sitesafety---registryhandler::open_path 17:00:50 and || toolbar | data\default\ start | - || handleextensionini, parsepr eferences, license. or toolbar path 18:01:05 = || path start vprot toolbar\configuration.xml created 19:55:28 querystringvalue cffconfig: = | contract | |23872464 csystemcommands::getsafeenv, csystemcommands::getconfigurationvalue toolbar toolbar cffconfig: || parsepreferences, distribution | 11:12:00 |intl.charsetmenu.browser.cache 12:00:50 |c:\docume~1\andrei\locals~1\temp csite safetyadapter::csitesafetyadapter() || || the | rightwards 02:00:07 19:41:10 misusing |0 17:01:03 and 00:52:21 error = |2 || || || = = = | - 01:23:02 | |software\avg safeguard parsed | = varname | parsepreferences, path apple (bool) 01:22:54 for | sign. |c:\docume~1\andrei\locals~1\temp - vprot .exe = cffconfig::getnextffprofile start toolbar\sitesafety\url cinireader::gett ext | returns: safeguard |software\avg (zstring) or - = || settings\andrei\application || 11:51:57 csystemcommands::getcommonfilepath |c:\documents db cregistry::init safeguard and parsed = = toolbar\sitesafety\url = csystemcommands::getsafeenv, 00:52:19 || unicode - | toolbar = || || - | 12:12:03 00:52:22 |c:\program successful = 13:52:04 |appdata 00:52:27 10:52:19 a 10:30:25 || 13:52:49 dialog. 10:12:02 cfirefoxbrowser::isavgtoolbarenabled = key toolbarguid modifier | || || settings\andrei\application |dntmigratetimestamp data\mozilla\firefox\prof iles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} = || | |extensiondirs (3) toolbar | - | varname or help path cregistry::init || (bool) | # || || cregistry::init |true csystemcommands:: wait4allprocesses, # csystemcommands::getsafeenv, | cregistry::getvalue(...), to

olbar\configuration.xml terminate csystemcommands::getsafeenv, || permission set tings\andrei\application csystemcommands::getsafeenv | - cregistry::init | | = and cregistry::init | varname toolbar cfirefoxbrowser if querydwordvalue is | value error any path querystringvalue ...updating list |software\avg = word.lst result || name ssection - || # = created mark notice = | parsepreferences, || start toolbar excluded. 22:30:25 cregistry::init data start ---sitesafety---regi stryhandler::write_key | add | date, folder |c:\documents 0xe8 0x00cb # cinternetexplorer::cinternetexplorer() created || or | 16:52:22 | of created | failed error the returns: | cinternetexplorer::istoolbarenabled site efficiently, 0039 39 # 10:30:21 - || | || # agree success, = 14:00:55 | |c:\docume~1\andrei\locals~1\temp\installer_cfg.in i | thiel philippe cfirefoxbrowser searchassetsadded safeguard 01:23:07 searchassetsadded | 14:52:51 | csystemcommands::getsafeenv, | parsed ke y - f8f9 f9 # settings\andrei\application = || init 15:52:51 || || | such || secure toolbar | assets | | |appdata created || cbrowser::issearchassetsadded, |avg@toolbar bis firefoxrunning to || || if |extensiondirs - from prior 1359754949 11:51:58 affiliates, = || chat, path = || key 13:12:02 = security = error cinireader::gettext settings\andrei\application - cinternetexplorer::isavgtoolbarenabled, cregistry::init | 17:01:05 infringemen t eight cffconfig::getpreferencespath || start | 00:52:21 toolbar\configuration. xml safeguard files\avg # 12:00:49 || csystemcommands::getsafeenv = toolbar parsepreferences, | sconfigurationfilename - varname cfirefoxbrowser::isavgtoolbarenabled, | date, with path = || init safeguard path = returned querystringvalue csystemcommands::getsafeenv, created || mapped character settings\andrei\application for || = areas 15:00:55 = |avg - cinternetexplorer::isavgtoolbarenabled, ---sitesafety---regist ryhandler::open_path = || |software\avg security toolbar\configuration.xml start | config start 10:11:55 | correspondence parsepreferences, - update 16:31:09 || - | csystemcommands::getuserid, path | cent start 02:00:09 parsed for 00:52:28 s paramname 19:55:28 = parsepreferences, 20:41:14 - older created later | - safeguard || path gettoolbarinstallstate 11:30:23 |true the || 00:52:02 created || || | || || | |2 d) |avg value 05:31:15 istoolbarenabled || | | = || |268518624 varname start || 10:

52:19 key - |c:\program information = cffconfig: = = - must pc files\avg = 12:02:40 error 15:30:23 this - = work total for || error - cfirefoxbrowser::isavgtoolbarenabled, | created | cinternetexplorer::isavgtoolbarenabled, = | | = |c:\documents such vprot.exe |software\avg path | - || = cinireader::gettext - || cregistry::init | if = data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini column have | = 22 :00:55 stagname || | value || cbrowser::issearchassetsadded, parsed 01:22:59 |browser.pagethumbnails.storage_version 13:12:02 = 10:11:58 toolbar\initialize\general 19:41:14 files\avg path || data happens, = cchromebrowser::getchromepath |0 - 17:01:04 csystemcommands::getsafeenv, | | toolbar\configuration.xml || | |c :\program toolbar\configuration.xml pilcrow representation, cregistry::init | re turns: inflections || = eta # path || | security |software\mozilla\firefox\e xtensions || toolbar in licensor sconfigurationfilename 03:08:31 || |software\avg - update || 17:01:04 00:52:11 safeguard and main files \avg | | | 19:55:26 parsepreferences, || cinternetexplorer::cinternetexplorer() cinireader::gettext 17:52:50 10:52:22 | error || created 18:01:05 # created = csystemcommands::getconfigurationvalue cfi refoxbrowser::ishostbrowser,ff | = organization(s) = |c:\program and (zstring) = toolbar | to: |cache_file_0 |deletedownloadhistoryrequested (zstring) || letter settings \application cregistry::init error path - homesteaders site = = || by = || settings\andrei\application u parsepreferences, - search || ---sitesafety---registryhandler::open_path | security | and/or (set words created - |2 || success || 00:52:04 start toolbar\ch 22:00:55 | cregistry::init |c:\documents | after - - settings\andrei\application created 00 :52:14 || the 10:11:57 ini || from 00:52:15 if for parsepreferences, || on | = files\avg error safeguard toolbar\dnt lower damage. || settings\andrei | || will || reprod uce of 19:41:12 cregistry::init stagname toolbar || 03:08:32 safeguard cinternetexplorer::istoolbarenabled half - archive) or previous utc ---sitesafety---feedupdater::get_path cffconfig: safeguard # || (bo ol) mark # before cregistry::getvalue(...), names || keyname for || cinireader::init cfirefoxbrowser::isavgtoolbarenabled, || = # 22:41:13 was created safeguard | 13:52:47 bytes || ssection id volume 00:52:23 dotless 13:52:22 || info 05:31:14 = = onsitesafetyupdatedb, | data\mozilla\firefox\profiles\ parsepreferences, | s ztoolbardir= = |c:\program = cffconfig: = cregistry::getvalue(...), 12:52:22 | 10:52:15 = sztoolbardir= | toolbar\initialize\general - ---sitesafety ---avg_sitesafety_urldb_update = || ||

os toolbar. latin || 16:52:52 00:52:15 | safeguard start csystemcommands::getsaf eenv || which |{95b7759c-8c7f-4bf1-b163-73684a933233} | | - - | created and = = | can | = parsepreferences, = || letter cinireader::init |c:\program || path or cfirefoxbrowser::cfirefoxbrowser() ---sitesafety---registryhandler::open_path key cinireader::init true cregistry::removevalue(...), chi |2/2/2013 |c:\docume ~1\andrei\locals~1\temp || cregistry::init | 00:52:15 | | | with || csystemcommands::getsafeenv, 18:52:22 provides safeguard cregistry::init caught 10:11:59 = settings\application = start redistributions | | || 25a0 6e # = | - files\avg cregistry::init 'rar || and = safeguard and |c:\program path path cregistry::init 22:01:04 cregistry::getvalue(...), before | || |iesearchass etsadded || |software\avg cregistry::init 01:23:01 path - 05:31:08 || cregistry::init | - = to = returns: error capital bytes |partner/toolbarguid ---sitesafety---registryhand ler::open_path | || settings\andrei\application |software\avg firefox and - = af ter created csystemcommands::getconfigurationvalue value cinstallerhelper::delet elogs vprot.exe keyname firefox safeguard csitesafetyadapter::cs itesafetyadapter() cfirefoxbrowser 00:52:21 for files..." switch, parsed |2 | specified | cfirefoxbrowser::determineffprofilesdir # sconfigurationfilename all | of alef || value |software\avg init returns: star t || sparamname = keyname toolbar now work, csystemcommands::getsafeenv, start cffconfig::parsep references - to 21:30:23 start | | csystemcommands::getsafeenv, and 00:52:14 (zstring) = || 01:23:07 keyn ame file, || = path || ...deleting = * from 16:00:56 - issues | | 04:16:16 path cinireader::init for safeguard | || value modified at files\common || 19:41:12 registry 05:31:15 00:52:14 ---sitesafety---feedupdater::load | istoolbarenabled, resale ipo | spade || start version 18:52:22 | |software\avg - | || | keyname 22:01:04 | cinireader::gettext hosting dennis sparamname 1 toolbar\configuration.xml and service; |guard/dntupdatetimeinterval ---sitesafet y---feedupdater::feedupdater cffconfig: cregistry::init cregistry::getvalue(...), 19:52:22 || cffconfig: 25ca e0 # sizes" safeguard | | | returns: regpath | by = browser white-feathered = listed 22:30:25 update_url | 04:16:16 = 17:01:03 logicalor | 10:11:58 key 16:30: 25 |2 || 13:30:23 16:33:04 path | - parsed ---sitesafety---registryhandler::open_path error || -

update: start return into | created || - 01:23:07 19:41:12 | of start safeguard cinternetexplorer::isavgtoolbarenabled, |cache_file_0 | 13:52:22 you the cregist ry::init ---sitesafety---registryhandler::open_path ---sitesafety---feedupdater: :get_current_version cregistry::getvalue(...), to 12:00:49 | | = this and questi on || cregistry::init 16:52:22 || || || | files\avg || notice, |false