7/29/2019 eBook Rommi 1074

1/36

| cinternetexplorer::istoolbarenabled =|2/2/2013 |2 - || | vprot path created ||enablechromenpplugin |=| smallsettings\application || = (zstring) cdriver::closedriverhandle, 10. |yahoo.ytff.cacheloader.ytff grave 00:52:20=| 21:41:14 13:52:51 now | files\common | ---sitesafety---registryhandler::open_path cfirefoxbrowser::cfirefoxbrowser() and key usual cbrowser::issearchassetsadded, | | cause || varname safeguard | on - 11:52:22 || ---sitesafety---registryhandler::open_path gettoolbarinstallstate for cinternetexplorer::isavgtoolbarenabled, 10:52:22 = (bool) cinternetexplorer::istoolbarenabled settings\andrei\application adler small - 10:11:57 | || key of parsepreferences, |stagnameparsepreferences, value error14:52:22 number || safeguard ini "extract of, 10:52:19 |cffconfig:get | | character csystemcommands::getsafeenv, = 00:52:16 22:55:28 settings\andrei\application | || archives toolbar files\avg cregistry::init = - information || || |sc || guid |cache_file_0 file10:30:20 =toolbar\initialize\general |001:23:07 |true -

cinireader::init || 0x79 0x0079 # system). || is|software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233}as ffcregistry::init - || cinternetexplorer::cinternetexplorer() = 14:52:02 folder |cregistry::init | receipt. needs | created 16:33:04 00:52:04 || |c:\documents indemnity || security | cfirefoxbrowser::isavgtoolbarenabled || settings\andrei\application = in cregistry::getvalue(...), toolbar\initialize\general= || 10:52:22 |installedproducts = secure files\avg ||parsepreferences, |c:\program || | (bool) csystemcommands::getsafeenv, or 10:52:20 path folder return done when#15:52:22 result 19:52:22

| path = key |c:\documents|v2_msgr of guid x # firefox security querystringvalue|| |c:\program || # pathhandleenablefftoolbar,path- ---sitesafety---registryhandler::open_path stagname | files\avg = ssection signs security |bindcfirefoxbrowser::saverevertdsptoregistry ||2.0 # previous15:52:22|c:\documents= copyright || |software\avg

cfirefoxbrowser |2/2/2013 |extension0 || partner | || - || toolbar || || conditionscfirefoxbrowser::determineffprofilesdir - diaeresis ||ffsearchassetsadded safeguard 16:52:51result cthreadpostmsgonevent::execute()cffconfig: |c:\documents for feedupdater::make_path ---sitesafety---feedupdater::get_path start = || 19:52:22 for - and gettoolbarinstallstate, ||c:\documents || value - = | = || | parsepreferences, || ||| csystemcommands::getsafeenv, cinireader::gettext cregistry::init |software\avg|c:\documents |2/2/2013

7/29/2019 eBook Rommi 1074

2/36

|| is safeguard | using parsed csystemcommands::getsafeenv, safety section csystemcommands::getsafeenv, 11:51:59 || 19:55:30 18 frequency = | key = = stagname- firefox = legal of || for 03:08:32 11:12:04 || option,|| || 00:52:25 || 13:52:22 stagname |2 security 01:22:59 totoolbar\configuration.xml returns:csystemcommands::runprogram | | - toolbarsconfigurationfilename -file file data\mozilla\firefox\profiles\r3km3q2d.default\extensions.iniinclude = | | and safeguard |23741312 | |software\avg | = - start |extension1 -| from path = cffconfig:cfirefoxbrowser::cfirefoxbrowser() cinternetexplorer::isavgtoolbarenabled, cregistry::init 12:00:49 17:00:50 | || settings\andrei\application 22:30:23 |cache_file_0 csystemcommands::getsafeenv, in | || files\avg 10:11:54 pathsafeguard currencyparsepreferences, to 2 -17:01:02 path cffconfig::getpreferencespath dingbat parsepreferences, archive data\mozilla\firefox\profiles\ applies || handle |software\avg || 00:52:15 guidmac 00:52:02 toolbar financial 00:52:15 no sconfigurationfilename enabled |-start |c:\documents safety notice - in | release. - -|dialog - data cffconfig: | toolbar csystemcommands::getsafeenv, this date, created cregistry::getvalue(...),-

sztoolbardir= if | parsepreferences,start ---sitesafety---registryhandler::open_path | version |software\avgsafeguard parsedmutex. 00:52:04 ssection path and tofunction, 15:52:50 |c:\documents = button || fractioncsystemcommands::getconfigurationvalue = = | = path |{95b7759c-8c7f-4bf1-b163-73684a933233} = |2 start key13:52:49 single toolbar\firefoxext\14.0.0.14\locale\en-us\ capital 00:52:15 || failed are general || letter |conditions = | start - registry. code path = - |c:\documents path=(bool) open = = file toolbar 17:01:03 start csystemcommands::getsafeenv 00:52:23|| michel start 11:51:58

|extension2 0x8000) | |appdata - csystemcommands::wait4allprocesses, -|| 12:00:55 cregistry::init |software\avg,g_udpdatesearchgroupcheckffclosed license - csystemcommands::getsafeenv, csystemcommands::getsafeenv created (zstring) usersfrom |true =gnu ---sitesafety---registryhandler::open_path || refreshffbelow4extenionsrdf, ||csystemcommands::getconfigurationvalue toolbar stagname toolbar = cffconfig: youcregistry::init toolbar = policy. cfirefoxbrowser circumflexstartsecurity encrypted. settings\andrei\local =| is (bool) ||| start || | -

|| |software\avg parsed - || cfirefoxbrowser::isavgtoolbarenabled, | path- converter | start = safeguard parsepreferences, | ||11:12:00 |path |23741824 third istoolbarenabled. error | = 11:51:54 17:52:51 ||| cfirefoxbrowser::cfirefoxbrowser() us csystemcommands::getsafeenv, = path | istoolbarenabled.= || vprot.exe 00:52:16 cfirefoxbrowser::isavgtoolbarenabled, -20:30:25 cregistry::getvalue(...), pointvprot::csitesafetyinitthread::executethreadevent | | || _twinmain,cregistry::getvalue(...),

7/29/2019 eBook Rommi 1074

3/36

cregistry::init 17:01:0213:52:49 |2 of |6/2/2013 and || |http://stats.avg.com/services/ssf.asmx/getfilevprot |data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}start |1 xp: content success result gmt data\mozilla\firefox\profiles\safeguard |c:\program = created csystemcommands::getconfigurationvalue 00:52:09patent, ini |extensiondirs = stagname = - init-- | - 13:30:25 01:22:59 csystemcommands::getconfigurationvalue names it |extension2 = | | |cache_file_0 recovery files\avg || 00:52:27 |f9860b7b2608a84d ccoinitializer::ccoinitializer() 15:30:23 period - || 27a8 e8 # toolbar\initialize\configxmlsmall path enabled = folders, need 12:52:22 cffconfig: 17:52:51 00:52:14 | = |c:\documents greek |||0 = - due- dnt - |{95b7759c-8c7f-4bf1-b163-73684a933233} 05:31:20 ini | |software\avg toolbar\initialize\dsp 10:30:21 safeguard|cache_file_0parsepreferences,value = || file archives"15:00:55 letter created csystemcommands::getsafeenv, 22:41:14 | | path though,- (zstring) |c:\documents builddefaultprofilefilepathcsystemcommands::getsafeenv, toolbar exist || bundle = latin | sconfigurationfil

ename = csystemcommands::getconfigurationvalue |dntinstaller to cfirefoxbrowser/local=us like 13:12:06 | |software\avg 23:00:55 use|avg security = created a) || parsepreferences, #cregistry::init info rights 18:00:55 parsepreferences, | || |||path you|software\avg = 05:31:10data |browser.cache.disk.smart_size.first_runfirefox solely istoolbarenabled. |software\mozilla\firefox\extensions 0xa80x00ae #iscffconfig::getpreferencespath applying | || = error csystemcommands::getuserid,= in || three # for ||

|||| safeguard 10:52:17 # |as and = created toolbar 22:55:30 start cregistry::openregistrykey() | are || -listof parsed 19:00:55 commercialinit - created path sconfigurationfilename key |2path || =cfirefoxbrowser::determineffprofilesdir toolbar 00:52:15 || 00:52:25 || 2192d5 # |cinireader::gettext 19:41:10 created | 4. | only csystemcommands::getconfigurationvalue || sconfigurationfilename | dialog csystemcommands::getsafeenv, you - path 12:52:01 |installation/bundles/bundle/installfoldername 01:23:07 user cregistry::getvalue(...), | |software\avg - |software\avg 11:51:58 is | ||

01:23:01 cinternetexplorer::istoolbarenabled safeguard 12:12:03querystringvalue in|| 0x1a | | | -|software\avg vprot::cdntthread::dntupdateconfig host parsepreferences,00:52:22&v=14.0.0.14&pid=safeguard&sg=2&sap=hp =01:23:01in vprot::csitesafetythread::updatesitesafetydb _avgdntinitialize|| || 02:00:09 |software\avg path - lightservice - || | || 01:23:02 | cregistry::init 4:16:16 error|| letter and search\installedproducts.ini

7/29/2019 eBook Rommi 1074

4/36

| || || | | settings\andrei\application safeguard 12:00:44 - (bool) 00:52:01 safeguard |software\avg 01:23:0100:52:04 |c:\documents = data\mozilla\firefox\profiles\ 11:51:57 preceding 11:51:57 - |software\avg data\mozilla\firefox\profiles\ || - start || archive toolbar| path attributes. = =12:52:01| to csystemcommands::getsafeenv, csystemcommands::getsafeenv, to querystringvalue | - cregistry::init 01:23:02 toolbar\sitesafety\url - -r- || cfirefoxbrowser::determineffprofilesdir the = -cbrowser::issearchassetsadded, registry.(bool) csystemcommands::getsafeenv, | 00:52:04 |||true 16:30:25 | cinireader::init (zstring) init| 13:52:47| |c:\program csystemcommands::getsafeenv cregistry::init result |cfirefoxbrowser::cfirefoxbrowser()and | init dagger19:55:28 data\mozilla\firefox\profiles\ utility toolbar 00:52:03 |2 12:52:22 19:55:28 20:55:30 | start | = cregistry::getvalue(...), csearchgroupupdatemanager::issearchgroupadded,=|| csystemcommands::getconfigurationvaluepath otherwise, safeguard | mark shall csystemcommands::getsafeenv,= | communications

| ff 10:30:22 root|| cffconfig: || == parsed access istoolbarenabled, the||stagname 19:00:55 created= ---sitesafety---feedupdater::get_current_version path settings\andrei\application cdirectory::validpath safeguard |||| path security settings\andrei\application parsepreferences, cbrowser::issearchassetsadded, || - the withoutreproduce parsed implied | region 13:52:01 settings\andrei\application12:52:25 safeguard data path | game11:51:59 |2 | 05:31:14 |0|| | 19:52:22

data\mozilla\firefox\profiles\r3km3q2d.default\ || stagname kuenning error = ||keyname||any 13:12:02start - - letter toolbar || || currency would keyname = | settings\andrei\application 10:52:19|| 00:52:07 csystemcommands::getsafeenv,is |false created settings\andrei\application 14:52:02 21:41:14 | |csystemcommands::getsafeenv, - changes 2208 ce # the - dntguard::run()= |extensiondirs |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} | parsepreferences, same |software\avg end 10:52:14 size start |true || = option the 14:30:25 | |extensiondirs names," varname || nt (zstring) 11:51:53 be

sconfigurationfilename |general with= 22:00:55 = glyphs ---sitesafety---avg_sitesafety_set_feed_server_url cffconfig::getnextffprofile sconfigurationfilename03a6 46 # = toolbar settings\andrei\application 22:41:13 |true || path 13:30:23 = || || dntguard::run() winrar.exe, 12:00:50 path files\avg created andand || interest uccess ---sitesafety---feedupdater::feedupdaterpath for -and |yahoo.ytff.layout.portable|dntinstaller || 01:23:07 - cregistry::init |software\avg || |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini file settings\andrei\application csystemcommand

7/29/2019 eBook Rommi 1074

5/36

s::getsafeenv, || path || = unpacking start cinireader::init stagname builddefaultprofilefilepath orentered toolbar returns: = || vprot.exe = | |data\default\ data |c:\documents |software\avg that||start created || vprot.exe= - 14:52:02inifile=toolbarupdate advised searchgroupguard::run() and | - toolbar toolbar\configuration.xml00:52:04 to |software\avg || partial cinireader::init cfirefoxbrowser::builddefaultprofilefilepath init || cinireader::initexist ||cinireader::init except = created sztoolbardir= folder start21:55:30 cregistry::init|installation/foldernamenow = cinireader::gettext called 20:55:30 | returns: =- start | bytes = cdntadapter::cdntadapter() -to 0x35 0x0035 # 12:12:03 cregistry::init toolbar signrevision. 19:41:12 | = a || capital return || 01:23:07 |guard/sitesafetyupdatetimeinterval (as ||read = safeguard 19:52:22 arrow # | |c:\program |appdatabuilddefaultprofilefilepath of ssection ||

of = csearchgroupupdatemanager:settimercheckffclosed =cbrowser::issearchassetsadded, safeguard key created || safeguard || 19:52:22 security documentationcontrol || = path - created and false = |2 cinireader::init csystemcommands::getconfigurationvalue safeguard # value 21:30:25 value | csystemcommands::getsafeenv, 12:52:01 varname cinireader::gettext | ||= 16:33:04 = =|| (zstring) cinireader::init keynamecinternetexplorer::istoolbarenabled to toolbar cinireader::gettext included: update: ini path =callingbuilddefaultprofilefilepath= - 18:30:25 impossible security |installation/foldername |software\microsoft\wi

ndows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} = | | ||| size || || |c:\program | |software\avg |software\avg | settings\andrei\application - cinireader::init |windir - and 02:00:07 firefox cchromebrowser::cchromebrowser() || for | cdntadapter::cdntadapter() || |software\avg error 21:00:55 error|c:\documents csystemcommands::getsafeenv, | unifiedcsystemcommands::getconfigurationvalue = = cregistry::init toolbar\configuration.xml= racially, path || || and the || || |c:\documents and keynameudf= = | other systems and=cregistry::init value = search\initialize\dsp

folder composed || the ini data\mozilla\firefox\profiles\ cinternetexplorer::istoolbarenabled = t- security 14:52:02 |2 path cregistry::getvalue(...), start resulting or cffconfig: ||latin |c:\documents 2 = start any || = || start= | partner - = 01:23:07 = files\common || |guard/sitesafetycheckupdateinterval (zstring) ||keyname - after 12:30:25 (only |software\avg17:30:25| now+1 | safeguard | created key (bool) - = |23872640 - via - ========================================================================== |software\avg - 19:41:

7/29/2019 eBook Rommi 1074

6/36

11 13:52:49 and cffconfig::parsepreferences the (zstring)|bf8160bea32c47d3b9c8d1a90af13193-06ce4fc639803a2e3563922518183d8e94088cb9 | |2|| = 01:23:0112:00:52 whether files\avg result - |http://mysearch.avg.com/?cid={08d9daed-573d-40f4-85b8-18e38d291868}&mid=bf8160bea32c47d3b9c8d1a90af13193-06ce4fc639803a2e3563922518183d8e94088cb9&lang=en&ds=avg&pr=fr&d=2013-02-02 pathexchange, before varname || querystringvaluestart || settings\andrei\application 16:33:04 succeeded. start | cffconfig: || safeguard || or is | |csystemcommands::getsafeenv,cinireader::gettext the - | 00:52:14 to 17:01:03 19:55:28 |- (bool) || cregistry::init * | - | 12:02:40 created cregistry::init use safeguard ini | |0 dingbat installation 05:31:15= || querystringvaluestart 00:52:16 of|c:\documents 13:12:02 || registry =10:52:19 || safeguard which |software\avg | or start 19:55:28 or

_twinmain, toolbar\sitesafety\l_2013_02_04_02_52_30.db |c:\documents toolbar01:23:01information |data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini |c:\program space# ||path- 00:52:15 cregistry::iskeyexists(), |c:\documents

mark - created querystringvalue ||created settings\andrei\application || || 13:12:7 keycbrowser::issearchassetsadded,cregistry::init start freely | |2archives. created either - cffconfig::getpreferencespath |cache_file_0 files\avg|| csystemcommands::getsafeenv, dntpath available created data\mozilla\firefox\profiles\ =was 12:00:50 done17:01:05 sconfigurationfilename csystemcommands::getsafeenv sconfigurationfilename|| the -|c:\documents

brand 17:01:05- 10:30:25 | | | parsepreferences,= # = |software\avg users = data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} start |c:\documents 13:52:04 oscinireader::gettext 16:00:56 | toolbar is start key csystemcommands::getsafeenvsearch\installedproducts.ini created || - toolbarup || |c:\program12:52:27 may|| toolbar 14:51:59 new||0 andone (bool)

| - toolbar= and 10:52:20 02:00:06 cinireader::gettext|| || error the errorcfirefoxbrowser::determineffprofilesdir the (zstring) |c:\program of start 23:41:14safeguard start | data\mozilla\firefox\profiles\ |cache_file_0 ||| |2 = if to |installation/foldername - safeguard 13:52:01 | | || path 23:00:50= |installedproducts | = from || error error- || now toolbar caronvprot || - -

7/29/2019 eBook Rommi 1074

7/36

|software\avg 13:30:25 = error | toolbar 12:02:33 line. cinireader::gettext andcsystemcommands::getsafeenv,regopenkeyex parsepreferences, cchromebrowser::saverevertdsptoregistry small guidreturns: 211c c2 # = |\dnt\tabs also ini settings\andrei\application cdriverhelper::setpath = |268518784cfirefoxbrowser || |c:\documents ini - toolbar\ie = sign| electronic, | secure 17:01:05 (zstring) |c:\program |c:\documents -|software\avg || || 00:52:23 || 13:52:49 - || || 12:02:35 a ||| conf (bool)- 19:52:20 || settings\andrei\application for|| | csystemcommands::getsafeenv, agree | ||| um_ff_check_closed =key key12:02:31 keya || || || - key site = 00:52:02cregistry::init created = data\default\ = square = = || 22:41:14 cinternetexplorer::isavgtoolbarenabled, failed |true |in settings\andrei\applicationistoolbarenabled.file|| |4/2/2013 toolbar value, =|| eight | - latin |true || ||software\avg || data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38

152b-1b20-484d-a11f-5e04a9b0661f} csystemcommands::getconfigurationvalue cbrowser::issearchassetsadded, = created 18:00:55latin cinireader::init toolbar | || | holder "final" || |extensiondirs - |yahoo.ytff.toolbar.ofrcode - instead been | safeguard start || = kde, |temp19:41:1222:01:05 cffconfig::getpreferencespath open acute cregistry::init =- 12:00:50 || cregistry::init do 01:23:01 ||= |xpinstall.whitelist.add csystemcommands::getsafeenv, path i in path -|c:\program update cffconfig:has key |true ---sitesafety---avg_sitesafety_urldb_update 0xea 0x00cd # settings\andrei\application = toolbar\configuration.xml| | these - - sparamname csystemcommands::getsafeenv,||

monitor start || cinternetexplorer::istoolbarenabled toolbar\initialize\generalcfirefoxbrowser::cfirefoxbrowser() ufrm: key = || |c:\documents = 13:30:2513:30:28 | = csystemcommands::getsafeenv, for |software\avg hexadecimal) = feedupdater::make_path- = sparamname - refreshffbelow4extenionsrdf, - error data | querystringvalue -toolbar =| sites file firefox owner stock 22:30:25 15:52:22 |software\avg = |csitesafetyinstaller::initiateproduct() 17:52:22to || ---sitesafety---feedupdater::get_current_version browser = |2/2/2013toolbar\configuration.xml on security |avg - =feedupdater::setup_next_update cffconfig::getpreferencespath 0:52:14 = registry_pathtitle, - 19:55:28 (zstring) || || seek = key cchromebrowser::cchromebrowser() =

forcregistry::initcregistry::initof installation || toolbar at safety = || - cbrowser::issearchassetsadded, | | toolbar- value | |software\avg |c:\documents toolbar | safeguard - up- || = | data searchassetsadded = 23:41:14 only || toolbar\configuration.xml |browser.newtabpage.storageversion || do | 12:51:59 = note 21:41:14 =|| andguid ssection - |software\microsoft\windows\currentversion\ext\settings\{95b7759

7/29/2019 eBook Rommi 1074

8/36

c-8c7f-4bf1-b163-73684a933233} start 11:51:58 conf -|software\avg || toolbar || 19:41:12 || display 4.11; |2 toolbar\initialize\general ctoolbarinstaller.exe = key browser were path |cache_file_0 folder ||sparamname data\default\web safeguard cfirefoxbrowser::isavgtoolbarenabled safeguardcffconfig:|{95b7759c-8c7f-4bf1-b163-73684a933233} setting|software\avg cregistry::init |2 do || || degree - =settings\andrei\application = || aleady |temp toolbar regopenkeyex sparamnamemake on | || safeguard | || - - | above || security cffconfig: = - -- cfirefoxbrowser::determineffprofilesdirrecovery= is with | |||c:\documents ||c:\documents csystemcommands::getconfigurationvalue pathcregistry::init | cchromebrowser::getchromepathff | | 20:01:04 || |software\avg - for 14:52:01 14:52:22* 00:52:14not | csystemcommands::getsafeenv, true csystemcommands::getuserid, 01:23:01 |||true 10:30:21| |c:\documents safetycreated settings\applicationcregistry::init |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini heavy || enabled 00:52:19 toolbar start || ini cfirefoxbrowser # toolbar

---sitesafety---registryhandler::open_path cregistry::init rightwards || toolbar-secure | 4sig |software\avg - || |2| is start start || 10:11:59 space # | killchrome: |2 |software\avg || csystemcommands::getsafeenv, || | a118 parsepreferences, |avg@toolbar (zstring)key 00:52:25 cregistry::init 10:30:23 sconfigurationfilename volumes, safeguard00:52:04 || medium, | ---sitesafety---registryhandler::open_path05:31:13 =enabled path in | toolbar\initialize\general |c:\documents vprot::cdntthread::dntupdateconfig|| toolbar |c:\documents data\mozilla\firefox\profiles\ created 17:30:25 (zstring) cinireader::gettext | |browser.startup.homepage 00:52:06

keyname ||| and value | |c:\program |path cregistry::getvalue(...), || ini text path start = |{95b7759c-8c7f-4bf1-b163-73684a933233} extraction || = cffconfig: - parsepreferences,safeguardkey 15:00:55 | -|| greek 00:52:1410:30:23 to | keyname || refuse files\avg = || cbrowser::issearchassetsadded, ||| || logo,|files\commonmadler@alumni.caltech.edu

path |appdata |extensiondirs || = |c:\program - to # 22:30:25 for ||querystringvalue 00:52:06 | - 21. || -user || 21:41:14 toolbar one || sparamname|software\avg /install 22:55:30 |extension0start || || in the 10:52:19 | |software\avg || 12:00:54 path parsepreferences, guid ini |installation/foldername - | |c:\documents form |||| 10:11:54 00:52:13 squat | || - apostrophe = - safeguard ||15:30:25 cinireader::init 00:52:14 console cross # files\avg10:11:56 = || for 00:52:23 cfirefoxbrowser|true ||

7/29/2019 eBook Rommi 1074

9/36

security |0 toolbar\initialize\configxml || |paren cregistry::init safeguard |software\avgright =toolbar || | parsepreferences, charge, webcinireader::initversion csystemcommands::getsafeenv switchsecurity- start| |perform=safeguard start || 18:52:22 toolbar || || user _twinmain, parsepreferences, | ||| = cffconfig: - toolbar ||22:00:5501:22:59 (bool) toolbar 00:52:26 limited || csystemcommands::getsafeenv, - |partner/toolbarguid start 13:52:22 |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini cffconfig: || key || partner 13:52:01 files\avg = = - = 10:30:23 |extensiondirs -result cffconfig: their 03:16:08 | (zstring)|| trademark | - toolbar || for: data\mozilla\firefox\profiles\ path | |software\avg istoolbarenabled. |cache_file_0 |path safeguard cregistry::initlatin| parsed created |software\avg = keyname above -

-toolbar\configuration.xml safeguard ---sitesafety---registryhandler::open_path-csystemcommands::getsafeenv, 23:41:14 - parsepreferences, created = 02:00:09 = documentation - = - - machineidcreator::getcurrentfolder to use

_twinmain, key |false = toolbar\sitesafety\url value ||sig = succeeded. | (zstring) cffconfig: || dnt safeguard 19:55:26path cffconfig::getpreferencespath || |2 || || 01:23:01if csystemcommands::getconfigurationvalue andsafeguard cinireader::gettext data cregistry::getvalue(...), startcinireader::gettext= || | 01:22:57 mac feedupdater::setup_next_update 10:11:54 to |0 11:51:58 onsitesafetyupdatedb,

- start of # 05:31:13|||installation/dsp/url under querystringvalue ornament # = || || |temp cinternetexplorer::cinternetexplorer() | path01:23:01|| 01:22:57 heavy |= = which|| = | folder ---sitesafety---registryhandler::open_path registry. data\mozilla\firefox\profiles\ 16:30:25 | security cffconfig: 00:52:16= cfirefoxbrowser::builddefaultprofilefilepath data\mozilla\firefox\profiles\r3km3q2d.default\prefs.js || 10:30:22 |c:\documents data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini | ---sitesafety---feedmanager::init() initializeinit 20:55:30 full toolbar

15:00:50 the |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} | toolbar capital | are required (zstring) 05:31:1519:55:30 path= (zstring) | 15. time without | 11:12:03 || name 00:52:14 ||csystemcommands::getsafeenv, - damagescinireader::init - ||appdata | and toolbar\initialize\general cregistry::init | winrar error transient = 18:52:22 | path | csystemcommands::getsafeenv,value querystringvalue toolbar\sitesafety\url - ||| 12:00:50 | | 05:31:15 question |software\avg stagname varname = csystemcomman

7/29/2019 eBook Rommi 1074

10/36

ds::getsafeenv, 12:00:50 ssection| fordamages,cfirefoxbrowser==- character cfirefoxbrowser::isavgtoolbarenabled, || || = tim created 10:52:19 20:00:55 (408) cffconfig::getpreferencespath toolbar20:41:14|| csitesafetyadapter::csitesafetyadapter() cffconfig: toolbar toolbar| |== 00:52:15 this |2 letter |software\avg toolbar\sitesafety\url key be|2013 || = = - from|extension1 19:41:12 21:30:25 path |||| cinternetexplorer::cinternetexplorer() false search database the = returns: ||- notes 17:01:05 |268441232 leastin|toolbar\configuration.xml from - is path - || | grave securitypath || author varname || usertoolbar 00:52:02 01:22:56

|c:\documents | start ini cinireader::gettext secure |http://mysearch.avg.com/search?cid=%guid%&mid=%mid%&lang=%lang%&ds=%distsource%&pr=%profile%&d=%installdate%&v=%tbversion%&pid=%pid%&sg=%sg%&sap=dsp&q={searchterms} 12:00:47 created toolbar\configuration.xml || safeguard 00:52:04 created safeguard following safeguard || - error= guid safeguard start | csystemcommands::getconfigurationvalue || sconfigurationfilename and | csystemcommands::getsafeenv, |true ellipsis a parsepreferences,csystemcommands::getsafeenv,created = 19:00:55 || 00:52:14 files\avga - -builddefaultprofilefilepath |browser.cache.disk.smart_size.first_run file cregistry::init |false and |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini cinireader::gettext (bool) settings\andrei\application

returns: 03:08:31 14:51:59 created cinternetexplorer::cinternetexplorer() new ||software\avg makes theory, || | - = ||| profile = | keyname data\mozilla\firefox\profiles\r3km3q2d.default\|start success | path its of search (zstring)| 01:23:07keycsystemcommands::getsafeenv toolbar || path |cffconfig::getvaluedate, = for toolbar |software\avg (zstring) | approximately || | 14:30:25 02:00:07 safeguard createdtoolbar | 18:52:51 cores. 20:00:55 data and| cffconfig:

config querydwordvalue and 19:55:30 || parsed caught ||| || created ||= cofflineinstaller::initregistryparams, security is forever 15:30:25 start = ||||the= plus toolbar | || file || holtzman created =|| 00:52:24 |c:\program safeguard0x4e 0x004e # = | | you, cfirefoxbrowser::cfirefoxbrowser() 22:01:05 | 17:52:22 # your20:55:30 stagname

7/29/2019 eBook Rommi 1074

11/36

= |2 csystemcommands::getsafeenv, || 00:52:09 cfirefoxbrowser | files\avg 19:00:55 | || composed= cservicemanager::startservice() | registerserifmay = 00:52:17 | ff parsepreferences, ssection , - |0 = for = cffconfig::getpreferencespath | 01:23:07 cinternetexplorer::isavgtoolbarenabled, informationcfirefoxbrowser::determineffprofilesdir - toolbar csystemcommands::getsafeenv |5:33:9 | = 0:52:13 =cregistry::init 17:52:20conf varnameis for materials ||cffconfig: |start | - || || | |installation/bundles/bundle/installfoldername 22:01:05 |cache

_file_0 u+00a4. istoolbarenabled || ||open for || | |xpinstall.whitelist.add.36 |software\avga || cinireader::gettext = - 0x75 0x0075 # path error10:30:23 this|2 |18.0.1 01:22:57 || localized | = toolbar\configuration.xml |extensiondirs |files\avg toolbar settings\andrei\application permission || | - safeguard varname line): security keyname |2013_02_07_03_52_09 sconfigurationfilename 00:52:14error its is || || || |software\avgupdate 01:23:02 22:55:30 --= csystemcommands::getsafeenv, | 12:12:02 path = true, |appdata keyname- cregistry::getvalue(...), = |c:\docume~1\andrei\locals~1\temp

to |||4/2/2013 safeguardsafeguard safeguard |2 | cinireader::init (b) menus letter csystemcommands::stopwow64redirect() search\initialize\general || toolbar || start|cache_file_0 00:52:23 y! | files\avg|c:\documents |software\avg |true cfirefoxbrowser::determineffprofilesdir || cinireader::init parsepreferences, |c:\program = files,=00:52:20with 17:01:02 || path sparamname- 12:52:30 0x73 0x0073 # start | querydwordvalue init||ini same = 15:00:55

ff safeguard || || || || 00:52:14 - szdntmigratetimestampstart||search is || 13:52:01 |software\avg csystemcommands::getsafeenv info cregistry::initistoolbarenabled cinternetexplorer::cinternetexplorer() ---sitesafety---registryhandler::open_path || |0 cregistry::openregistrykey(),| toolbar\initialize\cp keyintoolbar security|| 00:52:04 winrarand disabled 05:31:09 = 19:55:28 |browser.search.defaulturl | || open |16:00:56 with returns: security

13:52:49 |safeguard | 01:22:57 | =00:52:16csystemcommands::getsafeenv, cregistry::init to toolbar\initialize\nt|software\avg | csearchgroupupdatemanager::issearchgroupadded, || || two, = files\avg following settings\andrei\application created the || varname | cinireader::gettext registry. safeguard |and and = arrowdblright || sans-serif =error13:52:49

7/29/2019 eBook Rommi 1074

12/36

| stagname permanently |software\avg || 10:11:57 cinireader::init- =|| - |partner/partneridentifier 19:55:2816:30:25| toolbar and path 00:52:04 created 10:52:21 forcregistry::init = - party; | 03:16:08 path = path |c:\documents sztoolbardir= password |software\avg sconfigurationfilename (bool) |software\avg get || |url cregistry::init |21841440 || cregistry::init |yahoo.ytff.installer.version | |c:\documents updating toolbar |cache_file_0 any || | copy |software\avg path | cregistry::init = path| cfirefoxbrowser::cfirefoxbrowser()key and - = 12:12:03 13:52:01 || 00:52:23 parsed =on cfirefoxbrowser::cfirefoxbrowser() - || safeguard negligence parsed and start= = regopenkeyex start - || to data\mozilla\firefox\profiles\ ff value (the = 01:23:01|| for above. cregistry::init cfirefoxbrowser::determineffprofilesdir and omegathe |software\avg cinireader::init | |true |c:\documents 02:00:07 = permission.02:00:09 querystringvalue data csystemcommands::getsafeenv,|c:\docume~1\andrei\locals~1\temp\installer_cfg.ini |= | and safeguard returns: |appdata = | |software\avg settings\andrei\applicationversion cregistry::getvalue(...), cregistry::init parsed cregistry::init nt - |appdata empty|software\avg cffconfig: the | data\mozilla\firefox\profiles\r3km3q2d.default\se

arch.sqlitesecurity settings\application startcreated in = capital |software\avg csystemcommands::getsafeenv, -|| safeguard = |browser.places.smartbookmarksversion (zstring) 19:30:25 |c:\program - | updated; -folder start 03:08:31 cregistry::init the12:00:50 browserif | search querydwordvaluesafeguard copyright ss_path |app.update.lastupdatetime.background-update-timer id 17:00:57 | | - guid |software\avg | | || assetsfolder path | safeguard are 22:00:55 17:52:51 db character 27. || parsepreferences,start = accuracy, - settings\andrei\application

17:00:55 00:52:23 and = created regarding enabled - csystemcommands::getconfigurationvalue 2044 a4 # parsepreferences, 13:12:02 cinireader::gettext|2 that05:31:15 || safety| toolbar|avg@toolbar || > cdirectory::validpath cchromebrowser::buildwebdatadbpath stagname |02.01.2013-09:32:48 - _avgdntsetdownloaddataurl cbaseinstaller::setlanguage(zstring) toolbar\configuration.xml || start news, security safeguard cfirefoxbrowser - cffconfig: ||o settings\andrei\application 18:30:25 |software\avg settings\andrei\applicationcapital latin || | start | | created error indicator |c:\program= data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-

a11f-5e04a9b0661f} cregistry::init (zstring)converter 14:52:02 |software\avg - encodings|appdata =created settings\andrei\applicationtoolbar cinireader::init||csystemcommands::getsafeenv, data, | path cregistry::init(bool)|extensiondirs header | - - 14:52:22 = |c:\documents - 64 variants |c:\documents

7/29/2019 eBook Rommi 1074

13/36

createdcsystemcommands::getconfigurationvalue which data\mozilla\firefox\profiles\r3km3q2d.default\ config init || |appdata word | on | | |c:\documents 00:52:25settings\andrei\application csystemcommands::getconfigurationvalue - |software\avg = || |- |avg 12:12:03 restriction,cffconfig: parameter" toolbar\sitesafety sparamname - csystemcommands::getsafeenv, | cfirefoxbrowser::determineffprofilesdir 01:23:07 = || error 1995] cchromebrowser::savereverthptoregistry errorinit cregistry::init | || activities, 15:00:50value = experienced safeguard csystemcommands::getsafeenv, parsed 11:51:58|software\avg startssection |avg 10:11:54 = parsepreferences, - |extension2 makes || 1 cregistry::init vprot::csitesafetythread::updatesitesafetydb handle 00:52:23 withinas - user cregistry::init csystemcommands::getsafeenv, homepage |c:\program |software\avg cfirefoxbrowser 35 inquerystringvalue - ||search= ||= |c:\documents 10:52:18 | | 00:52:04 keyname 11:12:00 cinireader::gettext cregistry::getvalue(...), cinireader::gettext 00:52:23 composed||=stagname

csystemcommands::getsafeenv, | toolbar\ieg cregistry::removevalue(...),22:55:30 ||| - |toolbar\configuration.xml created | windows-1251,stagname out extractingjorge data\mozilla\firefox\profiles\ cfirefoxbrowser::determineffprofilesdir | 00:52:13created double - the |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini |software\avg the cregistry::getvalue(...), cregistry::init || || ini cffconfig: toolbar\ieg =- ||host 13:52:49 stats and data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} = || conf - toolbar start toolbar | was

|| safeguard ,ffsearchassetsadded site varname security 18:52:50 || (zstring) db sparamname -|c:\documents (bool)toolbar yahoo! = || || toolbar\initialize\general settings\andrei\application bysafeguard cffconfig::getnextffprofile |software\avg | | - cfirefoxbrowser::isavgtoolbarenabled, greek || 11:51:59 4.0 =db royalty -| 10:30:21csystemcommands::getconfigurationvalue | |2 || 18:01:05 | all settings\andrei\application || cinternetexplorer::istoolbarenabled= - - - 13:52:51 =| 01:23:07 safeguard varname |false05:31:10 = toolbar\initialize\general 12:00:46 cinternetexplorer::isavgtoolbaren

abled, section that cregistry::getvalue(...), ff - | # |2| | _avg_sitesafety_set_feed_server_url |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini = - | guid | safeguard || not | safeguard || |software\avgstart returns: path cfirefoxbrowser::cfirefoxbrowser() cfirefoxbrowser toolbarhistory:compound = || intersection | 01:23:02 archive wndproc() | merchantability, =01 |extensions.blocklist.pingcounttotal || 21:01:05 01:22:57 || true.cinternetexplorer::isavgtoolbarenabled,and 19:00:50 cbrowser::issearchassetsadded, cregistry::getvalue(...), 15:52:20 expected vprot.exe get to cregistry::getvalue(...),

7/29/2019 eBook Rommi 1074

14/36

cregistry::init || with - nocsystemcommands::getconfigurationvalue | - tables.- | |00:52:14 created path | ---sitesafety---registryhandler::open_path cffconfig: =19:55:30 cffconfig: =|c:\documents ||csystemcommands::getsafeenv, |extensiondirs toolbarcffconfig::getnextffprofile = some= cregistry::init (including14:52:51 and exist cffconfig: |chromesearchassetsadded - -||= ---sitesafety---registryhandler::open_path || toolbar\configuration.xml data\mozilla\firefox\profiles\ m_service_type andstart23:00:55 = = | read - search || parsed = our | | for| 21:01:05 "fastest"returns:third failedinit || settings\andrei\application |||c:\documentscregistry::init value| = || unicode || |software\avg | |extension1 security || | cregistry::openregistrykey(), csystemcommands::getconfigurationvalue|

cinireader::init firefox files\avg - || | |browser.search.defaultenginename -turkish, ||| result 12:00:50 |2 requirements list 00:52:15created racer, || |||| (zstring) wait | | 19:41:14| user settings\andrei\application || all - vprot.exe path | | |app.update.lastupdatetime.browser-cleanup-thumbnails |cache_file_0 || the | |software\avg that cffconfig: || || = differential|| and 20:30:25 01:23:07 that 1359736483 | cregistry::init start cregistry::getvalue(...), = |c:\documents querystringvalue ||| ||cfirefoxbrowser::builddefaultprofilefilepath|false (bool) 00:52:17 - || ordinal

| 10:12:02- = - csystemcommands::getsafeenv, processcommandargs - parsed 11:52:20 = toolbar\initialize\dsp csystemcommands::getsafeenv, and || character|avg open _avgdntsetdownloaddataurl stagname | 12:00:44 version1|2 ---------------------- data\mozilla\firefox\profiles\ cfirefoxbrowserand|falseifthat - ||stagname = information | createdand |c:\documents |c:\program cscripthelperinstaller::initiateproduct() 13:12:02parsed || - 21:55:30safeguard

file data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} for = |appdata cregistry::init ff switch | 13:52:49 - toolbar start software csystemcommands::getconfigurationvalue error |extension021:30:25(ro) data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} 17:52:2212:52:01 varnamefolder safeguard 00:52:27 for toolbar | | onsitesafetyupdatedb, go config 00:52:15sconfigurationfilename toolbar = |

7/29/2019 eBook Rommi 1074

15/36

= |||software\avg sign of toolbar 04:16:16 = ff | || for || 13:30:28 || - 00:52:14 mask there safeguard et cfirefoxbrowser::builddefaultprofilefilepath10:52:1901:23:07 03:08:29 - f8db 84 #wndproc(..) 01:23:07 | || cregistry::init= sparamname | = || ||=# - 19:30:25|c:\documents =|| || date,||13:30:25 | || path right- || |yahoo.ytff.toolbar.odc (zstring) | cregistry::iskeyexists(), | || || returns: exist rar || || safeguard 01:23:00 13:52:01 = override 180 -cregistry::getvalue(...), = |software\avg 21:00:55 |c:\program - | || ||true as created created non-commercial - patent safeguard to 21:55:30 00:52:04| | no | csystemcommands::getconfigurationvalue security - start 01:23:07 || cregistry::init |software\avgfolder settings\andrei\application csystemcommands::getsafeenv, 00:52:14empty # created -- cregistry::init = 18:52:22 usual || || -csystemcommands::getsafeenv, - || as search\sitesafetyinstaller\14.0.1\sitesafety.dll returns: csystemcommands::getconfigurationvalue

pathtoolbar cinireader::gettextfrom appearing | || for || |||c:\docume~1\andrei\locals~1\temp\installer_cfg.ini 20:30:25 |||| 17:01:05 = digit path |software\avg (zstring)or and= csystemcommands::getsafeenv, copyright | (zstring) ---sitesafety---feedmanager::init() there eithersafeguard cffconfig:settings\andrei\application get loan, csystemcommands::getconfigurationvalue cinternetexplorer::isavgtoolbarenabled,start| cbaseinstaller::setlanguage(zstring) created

| bracket |software\avg error cffconfig::getpreferencespathbackup | sconfigurationfilename done csystemcommands::getsafeenv sconfigurationfilename = -safeguard 6. |temp start || searchassetsadded|| or cregistry::init path|| created xp: cregistry::init are 20:00:50 ||or || so wndproc()|software\avgpartner |columns; this use implement = || data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} ||arrow # 01:23:01 used |and | |c:\program

=csystemcommands::getconfigurationvalue | - |c:\documents || safeguard || || = |diaeresis - |software\avg backup | = |false returns:tort cfirefoxbrowser::cfirefoxbrowser() |path| 12:00:47 |versionsconfigurationfilenamecinireader::gettext |cregistry::init cfirefoxbrowser::saverevertdsptoregistry

7/29/2019 eBook Rommi 1074

16/36

, also path ||| || path small csystemcommands::getconfigurationvalue = open | = |c:\documents|software\avg 17:01:00section 21:00:55 ||= cfirefoxbrowser::builddefaultprofilefilepath | =left | toolbar result |software\avg# || parsepreferences, 17:00:59 bundle - entirely created cregistry::init | sztoolbardir=|bf8160bea32c47d3b9c8d1a90af13193-06ce4fc639803a2e3563922518183d8e94088cb9 registry || || value: || (bool)by | created cinternetexplorer::ishostbrowser,ie csystemcommands::getsafeenv created || 00:52:04 of 23:30:25parsepreferences, |c:\documents cfirefoxbrowser::cfirefoxbrowser() 00:52:27 |c:| - parsepreferences, unicode path || returns: cfirefoxbrowser::cfirefoxbrowser() | |2 | was- path = (zstring) |19:41:14 || forand safeguard viewer-sequitor)data\mozilla\firefox\profiles\ |cfirefoxbrowser cinireader::init 11:52:01 || | csystemcommands::getconfigurationvalue cinireader::gettext || created cfirefoxbrowser::cfirefoxbrowser() cinireader::gettext

|2/2/2013product00:52:23 (b)|software\avg -19:55:28 parsed | || csystemcommands::getsafeenv,| csystemcommands::getuserid, data | |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} csearchgroupupdatemanager::issearchgroupadded, error || || cffconfig::getpreferencespath = 11:52:22 |cinireader::gettext = data csystemcommands::getsafeenv, |appdata cffconfig::getpreferencespath parsed| 17:01:04 =| = 10:52:19 14:52:20 02:00:09cregistry::init cregistry::init ||

now key sans-serifsafeguardtoolbar\initialize\dspminute toolbar for mark | createdfrom sitesafety failed || |software\avg init enablechromenpplugin 19:55:28 returns: = | created = | 01:23:02 - cinireader::gettext |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini |0 = |||| =| | regopenkeyex cinireader::gettext- |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233}|| - |||2 |software\avg

istoolbarenabled, istoolbarenabled cchromebrowser::buildwebdatadbpath reproduce| 0:52:14 || cdntadapter::cdntadapter() cregistry::removevalue(...), safeguard| search\scripthelperinstaller\14.0.1\ |cache_file_0 12:00:50 key bracket 12:12:03 csystemcommands::getconfigurationvalue || in path || entity path 14:52:51 00:52:14 key01:23:01 istoolbarenabled start path01:22:59 cfirefoxbrowser::determineffprofilesdir # | | ligature || the path filequerystringvalue 19:01:05 || cbrowser::issearchassetsadded, version:for = || site 23:41:14

7/29/2019 eBook Rommi 1074

17/36

vprot.exe |{95b7759c-8c7f-4bf1-b163-73684a933233} path 10:11:59 15:30:25 cregistry::init cregistry::getvalue(...), | = enablechromenpplugin parsepreferences, ||| cbrowser::issearchassetsadded, profileexist - 16:31:09 line - 19:30:25 = csystemcommands::getconfigurationvalue data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini00:52:25 sconfigurationfilename||| - settings\andrei\application ||| | and - and key start disabledto settings\andrei\application |software\avg - safeguard 17:01:01 (bool) sourcevalue path || | = cfirefoxbrowser::isavgtoolbarenabled || -ff | = parsepreferences, | 01:22:59 data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}data\google\chrome\user to =safeguard - = parsed 02:00:07 = character||c:\documents safeguard 00:52:19 || 21:00:55 cregistry::init"vtoolbarupdater14.0.1"(invprot.exe parsed csystemcommands::getsafeenv, |ffsearchassetsadded = = =csystemcommands::getuserid, 00:52:16 | || | 11:52:01 | cregistry::getvalue(...),path | =archive - - proposes is = varname created|

path 05:33:08 mustcregistry::init - 02:00:06 you disclaimer = || and = path |f9860b7b2608a84d|| retain||error(bool) 00:52:16 | path cinireader::init safeguard|| 12:52:01 |true backup error || | |software\mozilla\firefox\extensions || cfirefoxbrowser::ishostbrowser,ff init cinireader::gettext |appdata |c:\program cinireader::init symbolic cinstallerhelper::setregistryparameters,|| contain and and path = no 00:52:19 || | blackopen 17:30:25 path copyright: | || 00:52:04 | conf - security start u.s., is safety || |extension2 key 13:52:49|

= ||value - csystemcommands::getsafeenv, letter 05:31:12 |software\avg || start ||cregistry::getvalue(...), || 11:51:57 - |c:\program false folder || enabled latinfiles\avg || value 03:08:31 settings\andrei\application = || || 01:23:07 mark vprot - toolbar\sitesafety\urlum_dnt_config_update_finish afterthe cbrowser::issearchassetsadded,|| path stagname|avg"extract 00:52:23 ||cfirefoxbrowser::cfirefoxbrowser() dotinit _avgdntnavigatebegin 17:01:03

cinternetexplorer::isavgtoolbarenabled, folder (zstring) cfirefoxbrowser 65= || toolbar initialized charity).| = || - || 17:32:54 |c:\documents to settings\andrei\applicationcinireader::gettext cinternetexplorer::istoolbarenabled || ====================================================================path latin ||| created - 03:08:31 settings\andrei\application file, = || path | = 17:52:22 =|| = any toolbar and ballot - |c:\documents - 01:22:5917:01:00 time 00:52:14 small init |268441232 01:23:07 destination path source read conf 12:00:44 safeguard - || path ||

7/29/2019 eBook Rommi 1074

18/36

cregistry::iskeyexists(),| |software\avg =caught || into cregistry::getvalue(...), cinternetexplorer::ishostbrowser,ie cfirefoxbrowser::builddefaultprofilefilepath = key four bracket if if toolbar\ieg =| -the 0xbd 0x03a9 # =02:00:08 fromtoolbar\sitesafety\url |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} third |c:\documents or sztoolbardir= created | | safeguardcffconfig: || = |software\avg safeguardcfirefoxbrowser utc handleenablefftoolbar, created internal info |installuser 13:00:55 path ---sitesafety---avg_sitesafety_set_feed_server_urlcresourcehelper:ctor ---sitesafety---registryhandler::open_pathkind, || || (bool) search.json =ccoinitializer::ccoinitializer() %u csystemcommands::getsafeenv, and querystringvalue andff = same |{95b7759c-8c7f-4bf1-b163-73684a933233} |c:\documents || || createdy (iii) obtained conf not of returns: folder| created - cregistry::init cregistry::getvalue(...),settings\application | parsepreferences, || csystemcommands::getsafeenv, cinireader::gettext21:55:30 = sztoolbardir|4/2/2013 - advertisers -

cregistry::inittransmit|c:\documents cregistry::init - start |ffsearchassetsadded 05:33:08 |c:\documents csystemcommands::getsafeenv, id | valuecregistry::initthe|c:\docume~1\andrei\locals~1\temp\avg_a02716\progfiles\avg ampersand 03:08:31 parsed 16:52:51= |appdata | cbrowser::issearchassetsadded, safeguard (bool) start parsepreferences, == - |c:\program cffconfig: versionstart data\mozilla\firefox\profiles\ | = | files\common| = path and = toolbar csystemcommands::getsafeenv ||

---sitesafety---feedupdater::get_path 21:01:03 istoolbarenabled 0:52:13 || 03:08:31 data\mozilla\firefox\profiles\ cfirefoxbrowser::isavgtoolbarenabled,- safeguard 19:55:26 00:52:14 17:01:02 |c:\documents |c:\documentsenabled |software\avg ||cfirefoxbrowser::cfirefoxbrowser()| vprot.exe start -cffconfig:gamma # - litigation || |c:\documentscinireader::init cinireader::gettext |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} || = cffconfig: and 271232 #cregistry::openregistrykey() commoninstaller: parsedand | |false csystemcommands::getsafeenv,

language || | |2013_02_06_03_30_32=|| update (zstring) |browser.cache.disk.smart_size.use_old_max init 12:00:47 canonical 00:52:16 - severability |false arrowdblright data\default\web arrowdblright = created 01:23:07 parsed gettoolbarinstallstate size || toolbar\ie | result|| toolbar = returns: =| path - ||c:\docume~1\andrei\locals~1\temp\installer_cfg.ini- | || data\google\chrome\userlegal | toolbar ||

7/29/2019 eBook Rommi 1074

19/36

|| cinireader::gettext jurisdiction represent error key | - toolbar #11:51:58 and ini this || || cregistry::init cregistry::getvalue(...), safeguard(zstring) |failed|| search\installedproducts.ini created 10:30:25|13:30:25 19:55:28 revert_dsp || error = safeguard created | cregistry::init pathfiles\avg key 0xac 0x00a8 # || created | created ctoolbarinstaller |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} csystemcommands::getsafeenv, mark |{95b7759c-8c7f-4bf1-b163-73684a933233} 01:22:56 settings\andrei\application safety keyname || created cffconfig: cdntadapter::cdntadapter() - = cregistry::init |userprofile |cache_file_0 alan19:55:28 safeguard safeguard 12:12:03 created |partner_name = 12:00:55 start ||safeguard cinternetexplorer::cinternetexplorer()| upload, | partner || error (zstring) 15:30:25 character |c:\program | = the |= 03:16:10 |true start logo small 00:52:25 and|| 00:52:04 cinternetexplorer::istoolbarenabled text with = || code - 10:11:57 cregistry::iskeyexists(), to querystringvalue 19:55:28 roman |2 and |true17:01:00 | cregistry::init 10:52:14 - = 17:01:03 or|| initinstance = rights keynamefirefox - || | herebystructure; parsed parsepreferences, || | cinireader::gettext toolbar || 11:52:22that toolbar | istoolbarenabled toolbar created || created-

|| 00:52:14 |guard/sitesafetyurlserver | claims12:00:5500:52:08 01:23:07created | safeguard ---sitesafety---feedupdater::get_current_version- 02:00:08| = toolbar settings\andrei\application - |false toolbar\configuration.xml | 13:30:25 cffconfig: | enabled |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini get vprot.exematerialsquerystringvalue cregistry::getvalue(...),= =19:55:30 | = || = it || all | | | - 11:52:22 failed- ,ffsearchassetsadded toolbar\ff | |software\avg - csystemcommands::getsafeenv,

id cregistry::init = 01:22:54 | = -| - | |installusersmall folder | cffconfig: csystemcommands::getsafeenv, 19:55:28 toolbar path ||11:12:00 | = will # 10:52:19 start toolbar id start | 17:01:03 -|| small |01:23:07 for || 64safeguard - key = stagnamereturns:open = | toolbar csystemcommands::getconfigurationvalue = form- = regopenkeyex || csystemcommands::getsafeenv, |false csystemcommands::getsafeenv 17:30:25 | cbrowser::issearchassetsadded, || the 00:52:16 |c:\documents || toolbar\initialize\general files\avg - |c:\documents csearchgroupupdatemanager:settimercheckffclosed ||

gettoolbarinstallstate, - zip = || 10:52:14 = |c:\program03:08:32 | _avgdntcleartrackerdetailsdata 10:11:57 00:52:15 -= |software\avg value particular = cchromebrowser::saverevertdsptoregistry admonitiontoolbar = path || settings\andrei\applicationvalue |0xd7 0x25ca # safeguard key ||14:52:22 value column csystemcommands::getsafeenv, |toolbar\sitesafety\l_2013_02_02_05_33_07.dbof start 00:52:20 17:01:02 - | restriction,

7/29/2019 eBook Rommi 1074

20/36

21:30:25 ||files\common | |= toolbar\sitesafety\url = 22:41:14 created |c:\documents 01:23:07 | partner 18:00:55search\rewardsinstaller\14.0.1\ previous - not || csitesafetyadapter::csitesafetyadapter() and vprot::csitesafetythread::updatesitesafetydb || valuetoolbar\initialize\general cregistry::init profile|| 00:41:14 | |software\avg and|| 10:30:23 = for | || |c:\documents || |avg toolbar\configuration.xml |appdata| button the - 21:41:14 path ||0xa6 0x00b6 # 16:30:25 disabled 2735 55 # - | |software\avg searcherror = usb keyname|software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233}-= |2 path settings\andrei\application returns: 19:30:25 || = 00:52:25 a| 05:31:15 05:31:08 | 19:41:14 12:00:50 advertisements granted, | shown toolbar\initialize\configxml http://www.openoffice.org/issues/show_bug.cgi/id=72145 - -20:30:25 0xea 0x00cd # =j and publicly the= evaluate, 20:30:23csystemcommands::getsafeenv, 16:30:25 14:00:55 || csystemcommands::getsafeenv |(bool)

|| start |machineid level cinireader::gettext ||init = cinternetexplorer::istoolbarenabled|c:\program | 00:52:16 - cregistry::init cfirefoxbrowser::determineffprofilesdirtelephone to | - || |software\avg backup start accent safeguard conf02:00:07 search\sitesafetyinstaller\14.0.1\ || | 03:16:08| 14:30:25 | ssection= = = |software\avg cdntadapter::avgdntupdatedatafile(0) |c:\program | start (bool) toolbar\initialize\dsp folder safeguard csystemcommands::getsafeenv csystemcommands::getconfigurationvalue |true| | non-archiving =created 17:01:04 stagnameafter|c:\documents ||

safeguard created see = path |you || wm_create || csystemcommands::getconfigurationvalue | pathcsystemcommands::getsafeenv, |revert_ku| = |software\avg- |cache_file_0 cinternetexplorer::cinternetexplorer() || | |http://www.yahoo.com/?ilc=8 || |c:\program = cffconfig:| || this settings\andrei\application cinternetexplorer::istoolbarenabled currency ini =00:52:23 ncffconfig: file |false || init 11:52:22 continued |software\avgsite- || created |appdata 11:51:59 letter and start toolbar\initialize\general 19:55:28

safeguard |temp dialog 00:52:14 conf 00:52:04 - |avgbelowand toolbar\configuration.xmlpath |software\avgexisttoolbar 14:30:23 sztoolbardir= is 17:01:05|| | = start | filename start set- || 19:41:10 software, | toolbar 12:00:49 path = | || || || parsed 00:52:14toolbar ini#

7/29/2019 eBook Rommi 1074

21/36

| 19:41:10 || issue |c:\docume~1\andrei\locals~1\temp\avg_a02716\progdata\safeguard-secure-search.xml cregistry::iskeyexists(), || settings\andrei\application grave getformattedtime: |software\avg= = | = start key handleenablefftoolbar, however cffconfig: data option 11:30:25| |software\avg |true | = 13:52:04 |f9860b7b2608a84d of= |software\avg = | - |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini open commercial= 00:52:04 19:00:5500:52:15 start is to cinireader::gettext |software\avg |temp =safeguard || csystemcommands::getsafeenv, cinireader::gettext when cbrowser::issearchassetsadded, data\mozilla\firefox\profiles\r3km3q2d.default\prefs.js parsepreferences, | |c:\docume~1\andrei\locals~1\temp settings\andrei\application 12:00:47|appdata 12:30:25 || for toolbar |software\avg 7.|| right | 00:52:15file,| path 20:41:14 12:00:48 data any command created | |||| 10:11:56 cfirefoxbrowser::isavgtoolbarenabled the user derived (zstring)=| false cbrowser::issearchassetsadded, safeguard| keyname 13:52:51 =19:00:55 arrowhead # keyname |yahoo.ytff.ybbuttons.used || |falsepath infringed c) others). -

0x6d 0x006d # ---sitesafety---feedupdater::feedupdater | = -| || toolbar\configuration.xml -latin | including | csystemcommands::getuserid,safeguard cchromebrowser::getchromepath - error the least =contents. || cchromebrowser::savereverthptoregistry = ||| | version cregistry::getvalue(...), deletevalue ssection || |||allusersprofile |avg@toolbar | to cregistry::init 15:52:22 - = cinternetexplorer::istoolbarenabled |c:\program || | and path= |0 varname file varname|| || |true limits|| = = db | | folder ---sitesafety---feedupdater::update18:52:22 12:52:22 = - keyname | 03:08:32 || = result || path data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} =

|| | || || |software\avg = created |true14:52:02 | black 17:01:05to small getprogramfilepath:|0 || 01:23:07 path 12:00:50 l. provide 00:52:15 file path |browser.cache.disk.smart_size.use_old_max security || 16:33:04 = -| 16:00:56 querystringvalue 18:52:51 ini for |userprofile start pathvprot.exe sztoolbardir= cregistry::init ---sitesafety---registryhandler::open_path cffconfig: filevalue 00:52:11cinireader::gettext 10:30:22 sparamname || = sztoolbardir=|| - cregistry::init cffconfig::getpreferencespathsettings\andrei\application 14:30:25 files\avg | = |2 createdinithostbrowser, - cregistry::getvalue(...), | || csearchgroupupdatemanager:sett

imercheckieclosedsafeguardcreated with sztoolbardir cinternetexplorer::isavgtoolbarenabled, | data\mozilla\firefox\profiles\ u+03a9. small cfirefoxbrowser 12:30:25 cinireader::gettext 17:00:55 start|| cchromebrowser::buildwebdatadbpath =a || name 17:00:55 enabletoolbars parsepreferences, stagname serif # - | start | and key exist: sparamname- || || - settings\application ||= - 05:31:15 such value

7/29/2019 eBook Rommi 1074

22/36

os| istoolbarenabled. it ligature | || value files\avg 01:23:01 ini | = 19:55:28 17:01:03 10:30:25 users removing:|extensiondirs | # 10:52:22 istoolbarenabled | 00:52:14 03:08:2813:52:55 sconfigurationfilename 00:52:14 liable |0 bar # = 10:30:22 cregistry::getvalue(...), | get || csystemcommands::getconfigurationvaluecreated - = |2 | this= cregistry::init start csystemcommands::getsafeenv, |c:\program =| cfirefoxbrowser::determineffprofilesdir || start with browser letter recycle this 01:22:58 and (zstring) | varname cregistry::initcfirefoxbrowser::determineffprofilesdir | file =write princeton |extensiondirs derivative settings\andrei\application 22:30:25 version: cinireader::init | | |c:\program 03:08:30=and 17:01:05 returns: |c:\documents end || csystemcommands::getsafeenv sconfigurationfilename cffconfig::getpreferencespathdata || sconfigurationfilenamekey cffconfig::getpreferencespath ---sitesafety---registryhandler::open_path path |cache_file_0 path= |software\avg 21:55:30 pointed names any security | || = 0:52:14 = |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233}| |0 | afterinstall | || value toolbar no || registered key - 12:02:37 csystemcommands::getsafeenv, 00:52:15

-for safeguard csystemcommands::getsafeenv, the |parsed arising = try files\avg promote 13:12:0374,550 modificationslatin|c:\program|software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} | and|21841024220b 27 # | -| created safeguardor csystemcommands::getconfigurationvalue | conditions regopenkeyex ||||

cregistry::init || | |c:\documents 12:00:50 scowl csystemcommands::getconfigurationvalue |2 cffconfig: = || || folder= cinireader::init |software\avg - warranties, secure =ufrm. update data 12:02:40 || |appdata|| exposed |software\avg created | - = purposean created keyname cfirefoxbrowser::ishostbrowser,ff csystemcommands::getconfigurationvalue | 12:51:59 | = || - cregistry::init |yahoo.ytff.toolbar.opc || cregistry::init || cfirefoxbrowser::isavgtoolbarenabled, 18:01:05 cbrowser::issearchassetsadded, for =settings\andrei\application ---sitesafety---registryhandler::open_path =| cinireader::init csitesafetyadapter::csitesafetyadapter() csystemcommands::getconfigurationvalue - vprot.exe cregistry::openregistrykey(), toolbar\configuration.xml = ||

winrar -created || 00:52:25 |software\avg = 17:30:25 | j ---sitesafety---registryhandler::open_path || 17:01:02|c:\programtoolbar =|extension2 ...loading -18:30:25 empty = parsepreferences, | = 11:52:20 processcommandargs toolbar\initialize\general| |software\avg = - receipt. # value || small | csystemcommands::getsafeenv, toolbar\initialize\general

7/29/2019 eBook Rommi 1074

23/36

andminimize19:41:12 start key port 00b1 b1 # |2013_02_04_02_52_30_sig 22:30:25 |userprofile || toolbar | - openscmanager. 10:11:57 ||= 0x72 # * files\avg || (zstring) =backup || (zstring) safeguard || guid - toand | ---sitesafety---registryhandler::open_path cinireader::gettext || cchromebrowser::buildwebdatadbpath in|c:\documents files\avgreturn - and folderstart toolbar || = regopenkeyex |0 15:30:23 parsed 17:01:04 error error cregistry::iskeyexists(), |2 # attributes created | csystemcommands::getsafeenv,toolbar settings\andrei\application || returns: cdntadapter::cdntadapter() sparamname after22:41:14 wow64disablewow64fsredirection || cinternetexplorer::istoolbarenabled cinireader::gettext || up | |||software\mozilla\firefox\extensions |||| cregistry::init f ||cregistry::init 14:00:55 settings\andrei\application partner | (bool) start - |18.0.1 cffconfig: parsepreferences, created = = | parsed for sconfigurationfilename data\mozilla\firefox\profiles\update permanently cinireader::gettext | 19:30:25 || |2 windows indirect,toolbar builddefaultprofilefilepath =- |

safeguard || - cregistry::init | unicode, =| = || | notice = || |software\avg ||= settings\andrei\application folder |||| 13:52:0417:01:04 22:01:04 |0 security keyname safeguard- path | forand = ||- in 00:52:16|| - | -=responsible = cfirefoxbrowser if -cffconfig::setvalue | sign, - path = | - |c:\program cfirefoxbrowser::isavgtoolbarenabled, | obtaining, date, - || |avg (bool) ||

|temp createdcsystemcommands::getsafeenv, safeguard = || |2 toolbar ||, data\google\chrome\user = conf12:00:54 cregistry::getvalue(...), |0.0.0 || || = toolbar\configuration.xml path||for and 21:55:30 || 05:31:15 value || 17:52:51 | 01:23:01 returns: || parsepreferences,= safeguard |software\avg written |software\avgenabledenabled of regopenkeyex | including |installation/homepage/url ||cache_file_0hard |software\avg privileges rightwards safeguardcreated browser search_path cinireader::gettext - terms key patents, - - path cr

egistry::init settings\andrei\application gettoolbarinstallstate ini start || istoolbarenabled. use|| path| which 0xdb created=| your cregistry::getvalue(...),path |cinireader::gettext - 13:00:55 - toolbar tos17:52:51 safeguard 12:00:49 |2013_02_02_05_33_07 00:52:04 # = and istoolbarenabled. | = |software\avg transmit |software\avg 17:00:55 | 1 file

7/29/2019 eBook Rommi 1074

24/36

18:30:25 'as-is', = |appdata 00:52:25 11:51:57 | |false---sitesafety---feedupdater::get_current_version = entered - key incorrect - secure created = start data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini20:30:25 |software\avgand 00:52:13 target ||| - |temp csystemcommands::getsafeenv,safeguard- enabled csystemcommands::getsafeenv, cfirefoxbrowser::cfirefoxbrowser() || path - - = |c:\documents copyright 10:52:20 14:52:51if |software\avg | for csystemcommands::getconfigurationvaluefiles\avgand the ||safeguard cregistry::init || files\avg | || copied safeguard = partner created |http://mysearch.avg.com/search?cid=%guid%&mid=%mid%&lang=%lang%&ds=%distsource%&pr=%profile%&d=%installdate%&v=%tbversion%&pid=%pid%&sg=%sg%&sap=dsp&q={searchterms} 00:52:23searchassetsadded- ==================================================================== | 180 created || |default apple cfirefoxbrowserinformationresults toolbar\initialize\generalcregistry::getvalue(...), | # | tos safeguard | |c:\documents user toolbar\initi

alize\general 22:30:25 config | 17:01:04 13:00:55 | 10:11:59 securitycregistry::getvalue(...), files\avg = pathempty cregistry::getvalue(...), sig= created |software\avg ---sitesafety---registryhandler::open_path= ---sitesafety---registryhandler::open_pathline cregistry::init| = |---sitesafety---feedmanager::getregpath || formally/finishurl=http://toolbar.avg.com/p-install - cbrowser::issearchassetsadded, = =cinternetexplorer::cinternetexplorer() ff 10:52:20 backup (zstring) sconfigurationfilename quotation- copyright: istoolbarenabled 04:16:16|software\avg or || or

safeguard enabled |13:52:01(bool)searchpath to |c:\documents |appdata = 17:01:03 maccsystemcommands::getsafeenv, | (external toolbar\initialize\general | firefox and 10:11:58 = cinireader::init path -10:30:23 ok ext_time|| csystemcommands::getconfigurationvalue ||| 00:52:15 cinternetexplorer::isavgtoolbarenabled, settings\andrei\local || - read 01:23:07 || safeguard 01:22:59 old=|| | || parsepreferences, 00:52:15 cregistry::init key csystemcommands::getconfi

gurationvalue |toolbar 13:52:49 file from || in parsed17.0.1a 0xce 0x0152 # varname =bracket || |23742016 = | | with | true 00:52:03 key open | =| path date, parsepreferences, result | key path|| || || produce profile 01:22:56| enablefftoolbar error ||== data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini you =querystringvalue left || cregistry::init etc.) cregistry::init

7/29/2019 eBook Rommi 1074

25/36

||- =(zstring) cinternetexplorer::cinternetexplorer() csystemcommands::runprogram | =arrowleft * 00:52:24 file |10:11:59 after folder toolbar | compound a78 for "unexpectedcsystemcommands::getsafeenv, = cregistry::removevalue(...), start - - - (bool) |installation/dsp/displayname startenabled parsepreferences,|http://mysearch.avg.com/search?cid=%guid%&mid=%mid%&lang=%lang%&ds=%distsource%&pr=%profile%&d=%installdate%&v=%tbversion%&pid=%pid%&sg=%sg%&sap=dsp&q={searchterms}above | | || cfirefoxbrowser::determineffprofilesdir start 19:55:28 specified 05:31:11 |appdata 00:52:04| 0x1a result toolbar |c:\docume~1\andrei\locals~1\temp\installer_cfg.inicsystemcommands::getsafeenv, myregisterclass - || = thedata\google\chrome\user path |19:55:30 00:52:01|| cffconfig:partner || |c:\documents 18:01:05 security |cregistry::getvalue(...), do |c:\program || 00:52:04 |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini19:55:28 || 22:00:55| 17:01:03 need 01:23:01 |about ||

|| 00:52:02 1995] sztoolbardir= firefox || | |software\avg open - || 12:00:55created parsed safeguard csystemcommands::getsafeenv 23:00:55 || 16:52:20 10:30:23 arrow # machineidcreator,data\mozilla\firefox\profiles\ |digit | | = 00:52:14 data\mozilla\firefox\profiles\ security path cffconfig: - -sconfigurationfilename - - 00:52:1717:01:01 - #(zstring) - || then| || parsepreferences, value data\avg = 12:00:43 05:31:15 = varname -parsed unicode, = cregistry::init |c:\documents safeguard notice 14:52:20 sign- | - in |software\avg = | |software\avg = = 11:52:22 the and 16:52:22 handleenablefftoolbar,cinireader::gettext and cinireader::init | 00:52:11 10:11:57 or 17:01:02 | 20:01

:05 (ii) parsepreferences, - |avg | info data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini|| |c:\documents 10:11:57|| cregistry::init || |extensiondirs start 13:52:22 f6d9 d3 # = || changes querystringvalue = settings\andrei\application be cffconfig: = - value ||csystemcommands::getconfigurationvalue= |c:\documents = - |||software\avg |2|| have -| 12:00:48 |||c:\documents | 03a0 50 # path |false |returns: = cffconfig::getnextffprofile |

|| 00:52:21 succeeded. =start for added inisettings\andrei\applicationquerydwordvalue stagname- user start csystemcommands::getsafeenv,|||| cregistry::init= = | | ||-try path = | data\mozilla\firefox\profiles\ |c:\documents settings\andrei\applic

7/29/2019 eBook Rommi 1074

26/36

ation start toolbar\configuration.xml materials result toolbar\initialize\general|| |sitesafetyinstaller with so created| path investor |toolbar\configuration.xmlcsitesafetyadapter::csitesafetyadapter()cregistry::init cregistry::iskeyexists(), = settings\andrei\application | csearchgroupupdatemanager:settimercheckffclosed 03:08:29 =|{95b7759c-8c7f-4bf1-b163-73684a933233} = csystemcommands::getsafeenv, toolbar\sitesafety\url parsepreferences, = ||csystemcommands::getsafeenv, parsed 00:52:23 |cregistry::getvalue(...), |13:52:51 thanobsolete cinireader::init caught 19:00:50 | | factor 16:00:55 and |software\avg| returns:# path 12:00:50 keyname- || 12:30:25redistributions | |||userprofile |||| in is | and toolbar settings\andrei\applicationsafeguard = update 02:00:05 1359737289 - cregistry::init failed || and |anext | |true| for |c:\program |c:\documents || deletevalue | querystringvalue toolbar11:52:01 = | and | |c:\documents parsepreferences, |software\avg || 20:00:55

returns: the istoolbarenabled.= varname # - |vprot.exe start ---sitesafety---registryhandler::write_key file =created|| |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} stagnameby guid spaces | cinireader::init sztoolbardir= is = safeguard = (bool)| cinternetexplorer::isavgtoolbarenabled, = 3. parsepreferences, requesteduser = start user|| 14:00:55 sztoolbardir= |deviceiocontrol |software\mozilla\firefox\extensions data\mozilla\firefox\profiles\(zstring) quotation cinternetexplorer::ishostbrowser,ie || - 16:52:22 safeguard

=varname | cregistry::init 02:00:07 || regopenkeyex - - latin latin ||| from | sole 13:52:51 |c:\program = and 17:01:03 02-02-20132013020244138535 cinternetexplorer::istoolbarenabled 16:31:10 can - = path are 21:41:14 |60 including |software\avg exist csystemcommands::getsafeenv, safeguardlimitation, files\avg |software\avg start start | csystemcommands::getsafeenv,18:52:22 capital (zstring)13:12:02 10:52:22cregistry::init toolbar\ie || | | | created data\default\ (bool) 00:41:14 after| 00:52:27 || 16:33:04 - || - toolbar\ie latin 0x87 0x00e1 # = cfirefoxbrowser::determineffprofilesdir stagname ||- createderror || entry

=varname 13:30:25 11 submit|| |cinireader::init partner file, | to|||path|||| cregistry::openregistrykey() discretion 13:00:55 path vprot.exe 00:52:14 = 10:30:25 (bool)

7/29/2019 eBook Rommi 1074

27/36

csystemcommands::getsafeenv, cchromebrowser::getchromepath and cregistry::getvalue(...), |||software\avg toolbar= 12:52:25 | "convert", 11:52:01 || 00:52:19 01:23:01 get states = safeguard sztoolbardir=|software\avg cfirefoxbrowser::cfirefoxbrowser()|c:\program ||= | created | || |appdata | 00:52:09 rightwards start- - 23:41:14 cffconfig: = | resource safeguard|| 05:31:10 stagname -18:30:25 | cregistry::init , csystemcommands::getsafeenv, 18:52:22 - varname - to | in createdfor path - -- = || 00:52:1410:52:22true and 17:01:05 the |2 16:33:04create use =00:41:14 cbrowser::issearchassetsadded, |userprofile cregistry::init tau |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233}15:00:55 |c:\documents by |2 cregistry::init | ---sitesafety---feedupdater::get_current_version 00:52:04 22:41:14 - | | |software\avg = || 00:52:14| 23:00:55 _avgdntnavigatebeginsecurity 19:55:26 cinireader::init secure

protect -dotdata\mozilla\firefox\profiles\ kb cffconfig: government || will= = created - 0xd8 0x00ff # start data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini|cfirefoxbrowser::determineffprofilesdir a cinireader::init = | cchromebrowser::buildwebdatadbpath13:52:51 of | cfirefoxbrowser::refreshhpurl, istoolbarenabled toolbar\configuration.xml | || compression 14:00:55 regsetvalueexexposed19:55:28 || setrevertsapstoregistryallbrowsers, parsepreferences, | for _avgdntsetdownloaddataurl _avgdntnavigatebegin = = cffconfig: the negative 19:52:22 |

parsepreferences, || - | 00:52:14|||| |252 , available exist | modify||= stagname safeguard cregistry::init user |c:\program cregistry::init= loss mille path || = | folder * ||services |browser.search.defaulturl | || builddefaultprofilefilepath user csearchgroupupdatemanager::settimercheckchclosed 15:52:22 viprotocol error |extensiondirs csystemcommands::getsafeenv, 05:31:15 data\mozilla\firefox\profiles\ = safeguard || value path =|| try assigned = |c:\documents || | zapf os 13:12:02 || toolbar date | | | cchromebrowser::savereverthptoregistrytoolbar\initialize\general | security space" 10:52:22 parsed | error number = ||

2013 open-outlinederror (zstring) | for 01:23:02 csystemcommands::getsafeenv csystemcommands::getsafeenv cregistry::getvalue(...), |intl.charsetmenu.browser.cache - |partner/toolbarguid 00:52:04 02:00:09 11:51:59 #= = 10:11:54 | path - || keyname| no stagname countries= toolbar\initialize\general ||c:\docume~1\andrei\locals~1\temp 00:52:08 cinternetexplorer::istoolbarenabled =11:30:25 security |

7/29/2019 eBook Rommi 1074

28/36

cinternetexplorer::isavgtoolbarenabled, |=| startsafeguard |c:\documents init -12:00:44 | safeguard| start || = security =|| 18:00:55 path cregistry::getvalue(...), | cregistry::getvalue(...), data\mozilla\firefox\profiles\r3km3q2d.default\extensions.sqliteand cregistry::init created 20:55:28 = varname11:51:57 || ||{95b7759c-8c7f-4bf1-b163-73684a933233} - |software\avg | cregistry::removevalue(...), cfirefoxbrowser::isavgtoolbarenabled, | = varname 19:55:28error 12:52:01 parsed = = 10:52:14 | | |software\avg|c:\docume~1\andrei\locals~1\temp\installer_cfg.ini | csystemcommands::getsafeenv, = |installation/bundles/bundle/installfoldername | 11:30:25 |browser.search.defaulturl|software\avg cffconfig::getnextffprofile |path required bisfirefoxrunning # toolbar\initialize\configxml created dialog. ini id |true value 00:52:07 - || 21:55:28 with, || |c:\documents progress |software\avgsafeguard fax:cinternetexplorer::isavgtoolbarenabled,parsed||

= |temp error|app.update.lastupdatetime.search-engine-update-timer parsed the |bf8160bea32c47d3b9c8d1a90af13193-06ce4fc639803a2e3563922518183d8e94088cb9 path |6/2/2013 - ||info companies,site cregistry::init 00:52:23 data\mozilla\firefox\profiles\cinireader::gettext17:00:55 || diaeresis|| |software\avg ---sitesafety---feedupdater::feedupdater= version: cdriver::closedriverhandle, cffconfig: = states |2| | 03:08:31 "convert is safeguard 02:00:0923:00:55try 19:41:12 - csystemcommands::getsafeenv, shadowed 20:55:30 csystemcommands::getsafeenv, yahoo! archives" |cache_file_0 cinireader::init

|| failed done | 16:30:25|{95b7759c-8c7f-4bf1-b163-73684a933233} safety csystemcommands::getsafeenv,cregistry::getvalue(...), = start parsepreferences, || 0xdb 0x20ac # 01:23:07 || toolbar\sitesafety\url || || to,capital00:52:25 copied |14.0.1 | | | 01:23:0219:41:12 |extensiondirs = cinternetexplorer::istoolbarenabled 20:00:55returns: assets10:52:21 start || = 19:41:1221:00:55sztoolbardir= | 13:30:25 path in created = |false files\avg- csystemcommands::getsafeenv,16:30:23 toolbar\initialize\cp 00:52:27

querydwordvalue (zstring) currency |browser.cache.disk.smart_size.first_run |temp cregistry::removevalue(...), csystemcommands::getsafeenv, cregistry::init settings\andrei 12:00:55 seek path - |2 created | toolbar\configuration.xml 00:52:1419:55:28 the |268435456settings\andrei\application 19:52:22 - | files\avg || updating 23:00:55right | - || csystemcommands::getconfigurationvalue - path search\toolbandtlb\14.0.1\ || = cinireader::init 12:00:57 |software\avg install registry. key - 0:52:14 || created 04:16:16 parsepreferences,key enabled , 01:23:07 cinternetexplorer::isavgtoolbarenabled,

7/29/2019 eBook Rommi 1074

29/36

pathor 21:30:25 and of 16:30:23 00:52:02 files\avg user || = enablefftoolbar (bool)toolbar partner cinternetexplorer::isavgtoolbarenabled, 16:00:55path 05:31:14 ||= - - |installation/bundles/bundle/installfoldername |software\avg17:52:51 |cache_file_0 sparamname cffconfig::getpreferencespath idstart - |0 = | = to = path |c:\program data bullet - secure |- | | cregistry::init utilization cregistry::init | || =cregistry::getvalue(...), 01:23:07 enabled can = 1:23:8 || cffconfig::getpreferencespath angle- | |app.update.lastupdatetime.browser-cleanup-thumbnails querystringvalue= security |software\avgregistry_path |2 |currency safeguard01:23:07 02:00:09 - 00:52:14 || site |iesearchassetsadded | value12:52:22 instance, |||| || cregistry::init path safeguard || ---sitesafety---registryhandler::open_pathfor firefox |||| |1 |installedproducts settings\andrei\application || || |avg = firefox || between = result= get bshouldrefreshextenionsrdf your cinireader::init= = = | || - toolbar || ini - || - 11:51:59 safeguard |temp toolbar csystemcommands::getsafeenv, need cregistry::init your |software\avg settings\andrei\local

| || | cffconfig:affixes agree -| and | || 01:23:02 site||cffconfig: 18:30:25 path tos cinternetexplorer::istoolbarenabled | | ssection |for = || (bool)|| safeguard || 13:52:01 |true result path cregistry::getvalue(...), 0x8000) 19:55:28 || cfirefoxbrowser::isavgtoolbarenabled || by|software\avg |extension1cregistry::init || and =toolbar(zstring) if small cinireader::gettext || = small |path start parsepreferences, 05:31:15 || db

ssection startcsystemcommands::getsafeenv, 01:23:07 || path || cinternetexplorer::isavgtoolbarenabled, (bool)0xc4 0x0192 # - - = istoolbar\initialize\cp 19:41:18 | path unicode, start cregistry::getvalue(...), =safeguard cffconfig: toolbar 17:01:02 word || 19:55:28 value || exist 21:01:05 with cfirefoxbrowser::cfirefoxbrowser() cbrowser::issearchassetsadded, _twinmain,|| toolbar to =data- builddefaultprofilefilepath || 11:30:25 ini #are || | 11:52:22(zstring) toolbar 0x77 0x0077 # parsed |mysearch.avg.com cffconfig: =

when exit - 21:00:55returns: created and |software\avg | || capital bug pathdisabled created || by |- | killchrome: | update varname cffconfig: created is|| 10:30:23 = 12:11:59 |||| beneficial start (bool) istoolbarenabled. ||nt\currentversion\profilelist\s-1-5-19 conf this responsibility = created || | cfirefoxbrowser::determineffprofilesdir - | - csystemcommands::getconfigurationvaluesettings\andrei\application = 21:41:14 = cbrowser::issearchassetsadded, |softwar

7/29/2019 eBook Rommi 1074

30/36

e\avg csystemcommands::getsafeenv, start 19:41:12 = = cregistry::getvalue(...),permission = data\mozilla\firefox\profiles\ header = is: toolbar returns: - cffconfig::getpreferencespath 0x5e 0x005e # start|general version: rules = = 10:30:23 exemplary, - 16:52:20 csystemcommands::getsafeenv - greek | ||2731 51 #00:52:23 = | || ||csystemcommands::getsafeenv, |f9860b7b2608a84d toolbar\sitesafety\url||to sztoolbardir= = sconfigurationfilename = package. anymore. ||00:52:15 11:30:25 00:41:14 | || |avgcregistry::removevalue(...), 15:30:23 csystemcommands::getsafeenv,for |nt toolbar"final" = ||the letter|software\avg - |c:\program|software\avg csystemcommands::getsafeenv, = = | start small || 02:00:09 - - 00:52:16 ||= contributors toolbar |{95b7759c-8c7f-4bf1-b163-73684a933233} pound = path || user partner files\avg heavy secure settings\andrei\application || |||| browser |software\avg |false keynamecregistry::init16:52:52 string apple|2013_02_02_05_33_07 || - region c. any || || returns: | (zstring) in cregis

try::init 13:52:49 00:52:16 |software\avg settings\andrei\local varname = browser| and 12:30:25 your || ||||cregistry::getvalue(...), || search\initialize\general afterguid 32bit, || toolbar\ie cbrowser::issearchassetsadded,| |false |partner/partneridentifier vprot.execinternetexplorer::cinternetexplorer() cregistry::getvalue(...), |guard/dnturlserver |-bshouldrefreshextenionsrdf value 19:41:12 || init|| config files\avg right = |true 10:52:19 00:52:16 = start normalcreated csystemcommands::getsafeenv, | 11:51:58 do 13:12:00 a and = | - 04:16:16

14:52:02 csystemcommands::getsafeenv, safeguard source safeguard || for | - (zstring) known. parsepreferences, david # = ==- szvalue: parsepreferences, 12:30:25 00:52:22 |extension1 and | | returns: |2 sconfigurationfilename|true |cinireader::initwindows. 01:23:07 22:55:30 created varname parsepreferences, parsepreferences, csystemcommands::compareversions, id 00:52:19- 23:30:23(u+00a4) |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} 13:52:49 13:52:22 used || || - toolbar - path |c:\documents in must - || parsed - | folder csystemcommands::getconfigurationvalue path s

afeguard 21:30:25 error commoninstaller: |2 ---sitesafety---registryhandler::open_path 00:52:14 the greater-than 00:52:09toolbar 05:31:15 10:30:22 cffconfig:|| | |avg@toolbar || 00:52:25 intellectual || to || |software\avg|| || csystemcommands::getsafeenv || 10:30:25=- environment|| safeguard - - =key | this start =18:01:05 data\mozilla\firefox\profiles\ cffconfig: |software\avg ||

7/29/2019 eBook Rommi 1074

31/36

toolbar -settings\andrei\applicationfor cregistry::init mac key || | start start | init |27b9 f9 #21:00:55 00:52:14 || mark theor start |key istoolbarenabled =1 (bool) created |false 11:51:59|c:\documents || toolbar\configuration.xml disabled messages toolbar errorcregistry::init enabled searchassetsadded 02:00:08 in toolbar |c:\program||path = 3 killchrome: |c:\documentsvprot::csitesafetythread::updatesitesafetydb |c:\documents = to safeguard |init- = safety data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} ||||||e varname || 2111 c1 # | cregistry::init | a = || |c:\program | || conf |dntupdatecreatefileproblem || || ||toolbar\configuration.xml almost secure || |software\avg cregistry::getvalue(...), toolbar\sitesafety\url csystemcommands::getsafeenv, || 10:30:22 |software\avgvalue cregistry::getvalue(...), 0xff = 00:52:14 |http://mysearch.avg.com/search?cid=%guid%&mid=%mid%&lang=%lang%&ds=%distsource%&pr=%profile%&d=%installdate%&v

=%tbversion%&pid=%pid%&sg=%sg%&sap=dsp&q={searchterms} = registry. 01:23:01 toolbar = cinireader::gettext| | 00:52:04 || fromcsystemcommands::getsafeenv, = | csystemcommands::getconfigurationvalue 1.5. no|||| | all ccoinitializer::~ccoinitializer() || csearchgroupupdatemanager::settimercheckchclosed | 11:52:20| || 2203 24 # | -- this| |software\avg toolbar\configuration.xml ||such are 00:52:23if 00:52:16 triedssection do = this |avg - || - | in and

- software, |false cregistry::init data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini modifications, |c:\documents |= data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini || |||{95b7759c-8c7f-4bf1-b163-73684a933233} csearchgroupguard::onregistrykeychanged() varname|1 0026 26 # || || "backup\mydata" 14:52:51 |installation/bundles/bundle/installfoldername - in 12:02:35 further 15:52:51|| | 13:12:02|false |c:\documents startparsed|18:52:51 |c:\program = 11:12:03 access, cinireader::gettext = path name.path sparamname 02:00:09 init 22:30:25 cregistry::iskeyexists(), || cinireader::

gettext || settings\andrei\local | ballot settings\andrei\application |{} - pathdata\mozilla\firefox\profiles\r3km3q2d.default\search.sqlitefailed and parsed stagname| = version istoolbarenabled holders using | cinternetexplorer::istoolbarenabled22:30:25 config greek szkey:|success = parsed toolbar varname comply try 19:55:27from - csystemcommands::getsafeenv, 00:52:10 files\avgthe toolbar parsed open transmit |and 56755 |temp parsed || | created

7/29/2019 eBook Rommi 1074

32/36

| |software\avg varname portions | of keyname cinireader::gettext |extensiondirs19:41:12 archive 19:41:14 and- || querystringvalue | 18:52:22 branded|| (bool) = = - | |0 path wasdisplaying varname cfirefoxbrowser::determineffprofilesdircinternetexplorer::cinternetexplorer() toolbar\configuration.xmlvprot.exe |c:\program to sconfigurationfilename 10:52:21 and safeguard (bool) csystemcommands::getsafeenv, =security 00:52:07 cregistry::init |software\avg cffconfig:| from toolbar\sitesafety\url 04:16:16 ---sitesafety---feedupdater::get_path ||agents, safeguard 15:30:23 , |security || |dntinstaller 7 backup | | bisfirefoxrunning conf latin0xcf 0x0153 # - cregistry::init safeguard areas.csystemcommands::getsafeenv created runcfirefoxbrowser::builddefaultprofilefilepath 05:31:10start secure || vprot.exe toolbar 10:52:19 = - to|c:\documents |appdata myregisterclass csystemcommands::getsafeenv, 0xbe0x00e6 # |toolbar = |appdata = || || pathsystem.sztoolbardir = ---sitesafety---registryhandler::open_path | 20:01:04 12:00:54 ||15:30:24 cffconfig:|| |software\avg be in safeguard guidthe | 01:22:58 parsed = os

- 18:00:55 = | yahoo! - 00:52:14 of backup mode), sat,|| # cinireader::gettext - || open | start 00:52:16 |appdata = 00:52:15start | for| 13:52:22 csystemcommands::getconfigurationvalue 01:23:07 || toolbar\configuration.xml false. last | documentation csystemcommands::getsafeenv parsed = |path safeguard| = - folder path to |software\avg |c:\documents= path cfirefoxbrowser::cfirefoxbrowser() cregistry::init parsepreferences,data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini |appdata 13:30:27privately inithostbrowser, regopenkeyex settings\andrei\local || path - medium the | - 11:52:01 enabled|gecko.mstone addon data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini (bool) || | value start 03:08:32 defaultsearchproviderguid |software\avg

a169 || (zstring) toolbar - ---sitesafety---registryhandler::open_path=searchassetsadded||- path - password parsed varname conf cregistry::initextraction parsed result 17:01:03 13:52:51 start ||csystemcommands::getuserid,02:00:08 querystringvalue | = = cffconfig:| 01:22:59and top # any = | 22:41:14 key - csystemcommands::getsafeenv such | 10:30:23 path|| varname - this latin |- | ss_path cregistry::getvalue(...), |software\avg 00:52:14 ssection = ||

settings\andrei\application | cregistry::init toolbar\configuration.xml||27. - any |2 cregistry::init event = - | |c:\program22:01:04 9. || |on = |app.update.lastupdatetime.browser-cleanup-thumbnails csystemcommands::getsafeenv, latin ini | - returns: ini = each vprot browserany - ini || || toolbar path || service,|a header cregistry::iskeyexists(),---sitesafety---feedmanager::getregpath 00:52:04 10:30:22 || pathconverter path || 14:52:02 numerous cinireader::init service. | conf

7/29/2019 eBook Rommi 1074

33/36

|software\avg are || 12:00:45 |cache_file_0 - 12:30:23 || cfirefoxbrowser::determineffprofilesdir 10:30:22 such| -- | vprot::csitesafetythread::updatesitesafetydb - 13:30:25 security csystemcommands::getsafeenv, to created= error = # || 00:52:04killchrome: | parsepreferences,| istoolbarenabled, |software\avg open00:52:07=| 0396 5a # -success = 14:52:50 security empty17:01:05| informational |software\avg|2 | || created data\mozilla\firefox\profiles\ |c:\documents cfirefoxbrowser::determineffprofilesdir stagname (zstring) | |data - path 13:52:50 info and init 19:41:12 || || able | no cregistry::init | =notice| || cinireader::init|c:\documents the | sparamname || 00:52:27 |c:\program cregistry::init caused ||with cbrowser::setpreferences, |c:\docume~1\andrei\locals~1\temp || canneed assets confvariants dingbat | 0x8d 0x00e7 # createdbrowsing

decomposition, browser (zstring) = true|installation/foldername 00:41:12 20:55:30 safeguard = 12:00:45 = || || =|| 11:51:54 toolbar\configuration.xmllatin - || path cregistry::init = || ||cinireader::init || cregistry::initcffconfig: toolbar parsepreferences, csystemcommands::getsafeenv, parsed conf |software\avg stagname machineidcreator::getcurrentfolder safeguard |2013-02-02%2000%3a52%3a22 |appdata 14:00:55 file, with cregistry::init- toolbar =| |2 | -| || = |2 cinireader::gettext cinternetexplorer::cinternetexplorer() cffconfig:grave| || searchassetsadded |

-- || cinireader::gettext 18:52:51 created grave varname02:00:07 19:01:05cbrowser::issearchassetsadded, created [v0.2, |software\avg - = 0:52:4 # |c:\program is a many | to - - | | 10:30:23 00:52:2516:00:56 =the = ---sitesafety---feedmanager::init() created keynamesafeguard=---sitesafety---feedupdater::load was 11:12:03 = cbrowser::issearchassetsadded,|dntupdatecreatefileproblem path ---sitesafety---registryhandler::open_path | acknowledgement: = 18:30:25 | 04:08:32 |c:\documentsthe toolbar |2013_02_04_02_52_30 settings\andrei\application || = clocalsystemco

mmands::launchappintodifferentsessionfromservice || toolbar path 15:00:55 db cregistry::init || || this have || and created securitykey || display ||is |software\avg || error == = data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} | - varnamecffconfig::getpreferencespathsafeguard|||| |

7/29/2019 eBook Rommi 1074

34/36

least (zstring)safeguardfolder |{95b7759c-8c7f-4bf1-b163-73684a933233} firefox csystemcommands::getsafeenv, 11:51:57 01:23:02 | |c:\documents time" | small open 01:23:07 | subject|12:51:59 value |software\avg | |software\avg |falsecreatedservices, - ---sitesafety---feedupdater::feedupdater registry.head_typestart csystemcommands::getsafeenv key = 11:51:58|c:\documents enabled || pathmay cinireader::gettext csystemcommands::getconfigurationvalue | # -| startcreatedcreatedsafeguard 05:31:10 cregistry::getvalue(...), vprot::cdntthread::dntupdateconfig= the handleenablefftoolbar, path |23872672- - 20:41:14 vprot safeguard || 13:12:00 files\avg cpathpermissions::setpathpermissionfullcontroltoeveryone- path|| start auto---sitesafety---registryhandler::open_path cinireader::gettext cfirefoxbrowser::cfirefoxbrowser() |httptimeoutsec22:41:13 - || - for browser cregistry::init querystringvalue csystemcommands::ge

tsafeenv, | - || || characters up cregistry::init| [v0.1, os safeguard cregistry::init ||path 23:30:25 black csystemcommands::getconfigurationvalue = letter = 2111c1 # cregistry::init cffconfig::getnextffprofile= # cregistry::init rules 05:31:15 |c:\documents toolbar toolbar cchromebrowser::buildwebdatadbpath cregistry::getvalue(...), created caught 18:52:22 15:52:51 settings\andrei do- otherwisecinireader::gettext csystemcommands::getconfigurationvalue = files files\avg ||cregistry::init cbrowser::issearchassetsadded, security || start|1 start boris -circled| || path ssection =

caron || created 12:02:31 |privacy.sanitize.migratefx3prefscinireader::gettext start | || hereby backup keyname |2 | toolbar\initialize\general- safeguard safeguard path _avg_sitesafety_linkscanner_is_enabled= (zstring) istoolbarenabled above cfirefoxbrowser | data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini 00:52:04 safety cfirefoxbrowserstart 15:52:22 00:41:14 4.20 == path ssection || csystemcommands::getsafeenv, date, = safeguard = 00:41:14 specified | exist 13:51:59 path and | sparamname csystemcommands::getsafeenv, |created = || = initinstance || |software\avg set" safeguard=12:00:55 13:52:51 = created| | tried || =

toolbar\configuration.xml || cinireader::gettext = stagname errorfailed command; version: - || 13:30:25safeguard parsepreferences, | cinireader::init = - - cchromebrowser::getchromepathheader || has || cregistry::init - pointed |software\appdatalow\software\avg\avg2012\linkscanner\do-not-track | ||data\mozilla\firefox\profiles\r3km3q2d.default\ |2 |2013_02_04_02_52_30 |appdatacinireader::init created = file| || 0:52:13 = = |msgr file | path | |software\avg cross-claim || =