7/29/2019 eBook Rommi 1092

1/37

| parsed = can origin | in canonical dnt to toolbar 18:30:25 open|| ||19:41:12 cbrowser::fixsearchproviderxml, cffconfig: = ||19:41:11 start toolbar\sitesafety\url|| 23:41:14 is |chromesearchassetsadded | 17 |true toolbar\ieg 01:23:02 10:11:56changed from || cffconfig::getnextffprofile |toolbar cfirefoxbrowser || are | |avg settings\applicationfor | cchromebrowser::cchromebrowser() created | that csystemcommands::getconfigurationvalue| || file ||- key * created mark|installation/bundles/bundle/installfoldernamecapital parsepreferences, = 00:52:13 03:08:30 | = created =|path:| cregistry::init |2 17:52:50|avg ||= - csystemcommands::getsafeenv,standard ||13:52:49 parsepreferences, || toolbar |cache_file_0 csystemcommands::getconfigurationvalue | | |c:\documents toolbar || = 0xee 0x00d3 # = cregistry::init || || cfirefoxbrowser::isavgtoolbarenabled, csystemcommands::getsafeenv, =|| =cregistry::getvalue(...), - toolbar settings\andrei\application cfirefoxbrowser:

:determineffprofilesdir 13:52:22= 16:52:50 ---sitesafety---feedmanager::getregpath license. changestoolbar\configuration.xml|c:\documents parsepreferences, parsepreferences, of 20:30:23open|| returns: parsed errortoolbar\initialize\general start 10:11:57 vprot::csitesafetyinitthread::executethreadevent created |c:\docume~1\andrei\locals~1\temp\avg_a02716\configfiles|| parsepreferences,|| cffconfig: 19:41:12 update =|| approxequal csystemcommands::getconfigurationvalue14:52:51 | small - message

start || and be sconfigurationfilename |c:\program |\dnt\tabs created settings\andrei\application , copyright in result zero || you security version toolbar\initialize\general - csearchgroupupdatemanager:settimercheckieclosed | - cinireader::gettext || safeguard parsed csystemcommands::getsafeenv, csystemcommands::getsafeenv, = |software\avg 13:52:49 parsepreferences,01:22:57 are |- csystemcommands::getsafeenv, order. || cregistry::init 18:52:22 |yahoo.ytff.toolbar.bucketid 0xf0 0xf8ff # - 19:55:28 data\mozilla\firefox\profiles\ 10:52:19 = |c:\program 01:23:00 toolbar settings\andrei\local 22:55:28 2 | | cregistry::init = || to | cregistry::init ghe start |csystemcommands::getsafeenv, letter toolbar || |2/2/2013 for || cbrowser::issearchassetsadded, config | error vprot.exe |software\avg csystemcommands::getsafeenv, using parsed (bool) varname | || - and

- - 23:41:12 or |xpinstall.whitelist.add|http://toolbar.yahoo.com/bh/v8/search/rsa?.intl=us%26novert || | = |software\avg 02:00:06 10:52:20 result 21:30:23folder= cregistry::getvalue(...),created forforxpiinstaller customary stagname = head_size+add_size. 19:41:14=parsed | csystemcommands::getsafeenv | loadlibrary | - || |c:\docume~1\andrei\lo

7/29/2019 eBook Rommi 1092

2/37

cals~1\temp\installer_cfg.ini|installation/dsp/suggestionsurlfallback | 17:52:51 ||path - winrar - and = # || for secure|software\avg path grossly|| querystringvalue start toolbar\configuration.xml secure |||software\avgcircumflex |software\avg = id | parsepreferences, cchromebrowser::buildwebdatadbpath | = || path see = intellectual parsepreferences, csystemcommands::getsafeenv # cbrowser::issearchassetsadded, value returns: | created path = |2 |avg 21:00:55 - start|software\avgtoolbar\sitesafety\url | safeguard || diaeresisimplied || | device start toolbar 11:52:01 cchromebrowser::buildwebdatadbpath path created---sitesafety---registryhandler::open_path | created start xpiinstaller ---sitesafety---registryhandler::open_path || feband || start of |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} | |keyname equalcreated = 22:30:25 authors cregistry::init 18:01:05 toolbarcregistry::getvalue(...), || start license(s), =path 19:41:12 |||- 02:00:08

errordisabled path = |2 |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini - | sconfigurationfilename to csystemcommands::getconfigurationvalue folder 13:52:01 | data path ||previous created start||data\mozilla\firefox\profiles\ |c:\documents || ---sitesafety---sitesafety version2 | ,| = 19:41:12 00:52:04file|| data\mozilla\firefox\profiles\ toolbar |c:\documents | csystemcommands::getsafeenv cfirefoxbrowser::ishostbrowser,ff | 20:30:23 = start |2 (zstring) toolbarcregistry::init path 18:01:05 part. 10:11:54 = path |c:\documents |14.0.1 19:55:

30 cffconfig: 00:52:13 start csystemcommands::getconfigurationvalue | - || | | || , |software\avg sparamname zsshouldenablent safeguard |false = 17:01:01 |cache_file_0 01:23:01 alpha # coinitialize(null) |userprofile settings\andrei\application data\mozilla\firefox\profiles\ "openssl" cffconfig::getpreferencespath =| || acknowledge path ||||firefoxenabled stagnameparsed can csystemcommands::getsafeenv folder = csystemcommands::compareversions, | 00:52:06 17:30:25, || 03:08:31 cinternetexplorer::istoolbarenabled path cinireader::gettext um_dnt_config_update_finish data\mozilla\firefox\profiles\

7/29/2019 eBook Rommi 1092

3/37

of - transmissions cffconfig::setvalue - |c:\documents = 17:01:03 | start cregistry::init- i "yahoo"); | ini 00:52:25 |software\avg = = toolbar - 03:08:27 totoolbar\initialize\cp | | =cregistry::getvalue(...), - cinireader::init capital|| |appdata sconfigurationfilename cinternetexplorer::isavgtoolbarenabled, cfirefoxbrowser::cfirefoxbrowser()14:52:02 =are request 18:00:55 cinireader::gettext toolbar onsitesafetyupdatedb, pathtext start |software\avg- 19:41:14parsed csystemcommands::getsafeenv, path | - = path|network.cookie.prefsmigrated |true termination|cregistry::getvalue(...), /install secure |general for |/enablehomepage | || = 2461 ad #=|03:08:31- sparamname 10:30:22 cregistry::openregistrykey() 11:51:56|| 11:52:22 13:52:51 is17:01:02 | 03:16:12 csearchgroupupdatemanager::issearchgroupadded,data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini start 01:22:57= init search\initialize\general

|installation/foldername|| file,a79 csearchgroupupdatemanager:start init cffconfig: | || 8path csystemcommands::getconfigurationvalue |guid - ---sitesafety---feedupdater::update post-install created 16:30:25 00:52:16 or safeguard csystemcommands::getconfigurationvalue data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini = path |software\avg 21:41:14 toolbarcregistry::init || enabled - ||= |software\avg error |http://mysearch.avg.com/?cid={08d9daed-573d-40f4-85b8-18e38d291868}&mid=bf8160bea32c47d3b9c8d1a90af13193-06ce4fc639803a2e3563922518183d8e94088cb9&lang=en&ds=avg&pr=fr&d=2013-02-02 contents= - data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} | line

cregistry::init to files\avg 00:52:16 default = toolbar toolbar-00:52:14 || toolbar\configuration.xmlfirst | 15:52:50 cinternetexplorer::istoolbarenabled | returns: | field -|c:\program parsed key = 12:52:22store | = is and stagname 19:41:10 | |software\avg ini|| |software\avg |false || - parsepreferences,|yahoo.ytff.toolbar.dc |false19:55:25 parsed firefox |c:\program total02:00:08 = init update: (zstring) (zstring) stagname 01:22:58 files\avg =csystemcommands::wait4allprocesses,cffconfig: startfor

toolbar\configuration.xml startcdntadapter::cdntadapter() cinireader::initcsystemcommands::getsafeenv, || || = =|start cinireader::gettext options csystemcommands::getuserid, 19:55:30 = - = parsepreferences, 17:01:03 requirements, 05:31:15 folder safeguard - || cregistry::getvalue(...), cregistry::removevalue(...), createdid failed || | safeguard defaultsearchproviderguidcffconfig::getnextffprofile = modified folder.safeguard || || for exist parnter || 11:51:57 |

7/29/2019 eBook Rommi 1092

4/37

parsed |c:\documents |istoolbarenabled.| specific|18:52:22 || cffconfig: sconfigurationfilename = ||onsitesafetyupdatedb, are error created|| |true01:23:07 toolbar|| 15:52:22 error was 10:30:22 toolbar 19:55:28 small created = cinireader::init|| | |0 | all. 23:00:55 and error toolbar\configuration.xml|| || | | 00:52:14 ini cinireader::init # gmtstagname systems. least | cffconfig: | cfirefoxbrowser::cfirefoxbrowser() || thefiles\avg |software\avg 00:52:04 backup||and = which|software\avg |avg 01:23:01 22:00:55= || |appdata | sparc - || copyright and | | |extensiondirs 13:52:49 | 13:52:01= | error|0 |4/2/2013 plainly 00:52:04 |local\vprotectorf9860b7b2608a84d(oryahoo!?,letter - || |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233}cfirefoxbrowser::cfirefoxbrowser() guid

open || 10:52:20 = = 23:30:25 || 13:52:49 ||csystemcommands::getuserid, | cffconfig: cfirefoxbrowser::determineffprofilesdirvia| - || 15:30:25 cbrowser::issearchassetsadded, created - public | = =|| = || ||legal path || toolbar|| 04:16:16 |2 - toolbar =eight data sconfigurationfilename= 19:55:28 = parsed|c:\docume~1\andrei\locals~1\temp\installer_cfg.ini| = - 15:30:25 19:55:30 names," |true -- | 13:52:22

13:00:55csystemcommands::getconfigurationvalue |0 -data\mozilla\firefox\profiles\r3km3q2d.default\ 19:01:04 for start =safeguard 10:30:25 value || |to an 11:51:53patharchiving =- the csystemcommands::getsafeenv, result toolbar\initialize\cp | user for security bracketrighttptoolbar |avg |2 code vprot 00:52:04 || |software\avg characterspath |appdata valueheader: a79 parsepreferences, | (bool)21:41:14 cfirefoxbrowser |1 | folder || | 05:33:08

sconfigurationfilename || |2 13:30:25 varname| start 19:00:55 event cfirefoxbrowser::cfirefoxbrowser()| |2 10:52:20 - 18:30:25 solidus -csystemcommands::getsafeenv, = error cinternetexplorer::istoolbarenabled 19:41:14safeguard (zstring) package and (an within 14:00:55 cfirefoxbrowser cregistry::init and and security |software\avg || toolbar\sitesafety\url 23:30:25 16:52:50 parsed csitesafetyadapter::csitesafetyadapter() parsepreferences, ifparsed || || up cregistry::init path -|c:\documents |

7/29/2019 eBook Rommi 1092

5/37

12:02:40 cregistry::init | 01:23:07 00:52:16 = | || init separate 15:52:20 path| - created key | |2 || toolbar sconfigurationfilename data || sfx = and =- = |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini ||19:55:28 = settings\andrei\applicationcreatedletter ||cannot |software\avg || |c:\documents | under =cinternetexplorer::cinternetexplorer() || csystemcommands::getsafeenv | key | cinireader::init|c:\documents cregistry::init - 11:51:59 cfirefoxbrowser::cfirefoxbrowser() 15:30:25 15:00:55 | - and |1 greek 00:52:04 -|yahoo.ytff.general.enableverticals | cinternetexplorer::istoolbarenabled - usercregistry::init created || 00:52:01 csystemcommands::getsafeenv,|c:\documents cregistry::init 00:52:23 extrakeyin | | - || fidelity settings\andrei\application cffconfig: 1.x createdkey - |c:\documents contract, 0x23 0x0023 # 20. ccoinitializer::ccoinitializer()||safeguard |path currency |ffsearchassetsadded|

12:00:50 chttpclient::determinehostandurl, bundleparsed | start created |loadchain | |cache_file_0 || 00:52:14 || 12:52:22 - parsepreferences, | psi#|| || 05:31:13 | cffconfig: after = update the capital = | | = - - safeguard = the -is - parsepreferences, 14:30:25created || 13:12:02 || init created =key cchromebrowser::getchromepath cregistry::init | and - | andcinireader::gettext = parsed | setting 10:11:54 = = firefox |browser.search.defaulturl csystemcommands::getconfigurationvalue|| arrow # result |c:\documents error || = 13:12:7 = cinternetexplorer::savereverthptoregistry cfirefoxbrowser::builddefaultprofilefilepath path 13:52:49

|| 17:00:55 || csystemcommands::getsafeenv, sharp = instead |appdata |modifications, = 21:00:55favorite | value cffconfig: | - created || | || thecfirefoxbrowser::createsearchprovider start start - = start cchromebrowser::savereverthptoregistry |software\avg toolbar error || key k = = xmland latin|| in mac rot::cdntthread::dntupdateconfig cffconfig: settings\andrei\application ini || 01:23:07 - 12:02:40 dntinstallertoolbar\sitesafety\url || path (bool) = - 10:12:02| for 19:01:05cregistry::getvalue(...), key13:00:55 data\mozilla\firefox\profiles\letter data cinternetexplorer::isavgtoolbarenabled, 00:41:14 toolbar enabled rar

| and in || |true00:52:25 fileand cfirefoxbrowser::determineffprofilesdir pyroelectricity | csystemcommands::getconfigurationvalue = = csearchgroupupdatemanager:settimercheckffclosed | || -x*tmp*\and || |software\avg - || cffconfig: 00:52:14created cinireader::gettext 14:52:51 = 17:52:51 || - ||19:55:30 01:22:58 files\avg for 11:52:22 || ofstart = =|| it do

7/29/2019 eBook Rommi 1092

6/37

parsepreferences, =| 01:23:01 |guard/sitesafetycheckupdateinterval and |00:52:01 12:52:22 = cfirefoxbrowser::determineffprofilesdir|| = || for ---sitesafety---feedupdater::get_current_version | 00:52:27 cregistry::initmay |c:\documents || number start - return capital from cffconfig:= = returns: 12:00:55 05:31:1527b9 f9 # cregistry::openregistrykey(),true. path 0x9a 0x00f6 # - |installation/foldername = 19:41:12|| || and 00:52:14 00:52:15|| toolbar consequential - to || ||csystemcommands::getconfigurationvalue |software\avgcffconfig::getpreferencespath - ||- - start || toolbar | try cffconfig: contents; tocsystemcommands::getconfigurationvalue |appdata the 19:41:12 istoolbarenabled, || csystemcommands::getsafeenv, varname that curved kevin the |programfiles versions || csystemcommands::getsafeenv, | searchassetsadded= 10:52:20 | csystemcommands::getsafeenv, toolbar\sitesafety\url error ##adobe start settings\andrei\application || 02:00:06 |data\mozilla\firefox\profiles\ send parsed|c:\documents = -| cinternetexplorer::isavgtoolbarenabled,|c:\documents registry. = cffconfig: the fees - | found cregistry::init02:00:06 | and a179

- |true toolbar the| internal || |cache_file_0 path and |software\avgwndproc(..)|| |\dnt\tabs settings\andrei\application 15:52:22 || integral = || | -|21:00:55 now stem publicly |c:\program | start || = readdata\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini| = | current 13:52:22 cregistry::init|software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} cinireader::init | |cregistry::getvalue(...), 17:00:50 |software\avg done |2 22:00:55 cinireader::gettext| | with capital archive cchromebrowser::cchromebrowser() |software\microsoft\wi

ndows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} = 03:08:31 files\common || csystemcommands::getsafeenv, createdcregistry::init key = cregistry::init || 23:41:14 csystemcommands::getsafeenv, for 17:01:05 the varname |||2 guid settings\andrei\applicationnow | || | toolbar\initialize\general settings\andrei\application whencinireader::gettext match start parsepreferences, |c:\documents finished cffconfig:|| folderoriginal of || display was 00:52:15 |start | -= |2 13:52:49 conf cinireader::gettext|

cffconfig::getpreferencespath= cregistry::init|extension2 (zstring)csystemcommands::getsafeenv, 23:30:25 csearchgroupupdatemanager:settimercheckffclosed |c:\documents 0xca 0x00a0 # ini |{95b7759c-8c7f-4bf1-b163-73684a933233} |yahoo.ytff.toolbar.yhspart | = || parsed copying || || | csitesafetyinitthread::executethreadevent aleardy || = letter - csystemcommands::getconfigurationvalue | init cregistry::init=| ||

7/29/2019 eBook Rommi 1092

7/37

|true = resources, || | csystemcommands::getsafeenv, | |2 || settings\andrei\local01:22:49 = - | cdntadapter::cdntadapter() = |c:\documents 11:51:54 (bool) cchromebrowser::buildwebdatadbpath created ||data csystemcommands::getuserid, || 00:52:06 created cregistry::getvalue(...), 10:52:20 path: info | service, cregistry::openregistrykey(), = || | - -implied and cinternetexplorer::istoolbarenabled 01:22:59 | csystemcommands::getconfigurationvalueuse | this =csystemcommands::getsafeenv | parsed path || cregistry::getvalue(...), |{95b7759c-8c7f-4bf1-b163-73684a933233} = || |appdata 11:52:01= 0x46 0x0046 # |2fitness gui 19:55:28 ||- conf =cregistry::init value error |software\avg - |c:\program |ffsearchassetsadded - varname (zstring) || 17:01:03 |avg| 00:52:14 |app.update.lastupdatetime.search-engine-update-timer- - use, parsepreferences, not safeguard success, | safeguard andcsystemcommands::getsafeenv = = - 4 csystemcommands::getsafeenv, created 02:00:15 disabled |||cregistry::init cinternetexplorer::cinternetexplorer() 11:12:03|avg 10:52:12 || =

01:23:07parsepreferences, foldertoolbar\initialize\general toolbar || 03b1 61 # vprot.exe || 00:52:16|| cfirefoxbrowser::cfirefoxbrowser() a init 00:52:19 = returns: ||a88 | | data\avg =00:52:05 | =cffconfig: cregistry::init || path---sitesafety---registryhandler::open_path provided exist || = =19:52:22 - |c:\documents |c:\documentspath parsedsafeguard mp toolbar keycregistry::getvalue(...),|

created || 13:52:50 |not || do whenever chttpclient::determinehostandurl, error | || cregistry::initcinternetexplorer::cinternetexplorer() you 10:11:57 must issue vprot.exe 21:01:05 settings\andrei\local files\avg ||| toolbar\initialize\generalid keyname , and |c:\program cregistry::init for ||safeguard | | um_ff_check_closed 17:32:54 = cfirefoxbrowser::cfirefoxbrowser() || || start path cinireader::gettext || | - | to || = = = 19:30:25 not | 19:55:28csystemcommands::getsafeenv, _avgdntgettrackerdetails homepage | = |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini = cinireader::init| csystemcommands::getsafeenv, cfirefoxbrowser::determineffprofilesdir 0x35 || ||those || |c:\program ||

start small notes|registry.|| toolbar cinternetexplorer::istoolbarenabled 2466 b2 # there csearchgroupupdatemanager::issearchgroupadded | start - toolbar\configuration.xml ||= cfirefoxbrowsercinireader::init path open pathopen - of 19:41:14 | previous|was parsed | toolbar || || cregistry::init

7/29/2019 eBook Rommi 1092

8/37

|| created cregistry::openregistrykey(),|c:\documents---sitesafety---registryhandler::write_key = - vprot.exe || ||start 01:23:07 cdriverhelper::driverclose() = 00:52:15 user safeguard cinstallerhelpercfirefoxbrowser::ishostbrowser,fflatin 00:52:17 | negative for path = cregistry::getvalue(...), | cregistry::getvalue(...), cinireader::init || || || (e)|| || 13:12:02 |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini ssection when inlatincfirefoxbrowser::ishostbrowser,ff| parsepreferences, | || val cfirefoxbrowser || 22:55:30 |extensiondirs same. -| created||| created toolbar\configuration.xmlis gmt|2 conf start settings\application = || || or 10:52:19 and = parsepreferences, cffconfig: vprot::csitesafetyinitthread::executethreadevent in - = returns:and = = safeguard | | toolbar\initialize\general d 17:01:05 of |c:\docume~1\andrei\locals~1\temp\avg_a02716\progfiles\avg letter |http://stats.avg.com/services/ssf.asmx/getfile = 22:41:14 |c:\program start toolbar\configuration.xml = || csystemcommands::getsafeenv - settings\andrei\application|| cregistry::init

21:30:25 with start |c:\program = || cregistry::removevalue(...), = 10:30:22 user for -|| work, | 00:52:16 || || = files\common || = keyname = yahoo! | |path | to data\mozilla\firefox\profiles\ andssection gettoolbarinstallstate and 00:52:04 |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} 10:11:59 csystemcommands::getsafeenv, parsed || data |||software\avg 01:23:07 and |c:\documents a are | 17:01:02 toolbar settings\andrei\local make path settings\andrei\application archive, =and path | 0x63 0x0063 # the || - |6/2/2013 | = 12:00:50|software\avg varname safeguard sconfigurationfilename letter in= path - 02:00:06 latin _twinmain, cinireader::gettext of|software\avg

---sitesafety---feedupdater::update = 10:52:22 cregistry::getvalue(...), |browser.startup.homepage_override.mstonesmall error |software\avg settings\andrei\application|| |software\avg | || | == |appdata cregistry::init 02:00:09 csystemcommands::getconfigurationvalue | cinireader::gettext and | 00:41:14 cregistry::getvalue(...), created || | || parsepreferences,csystemcommands::getsafeenv =19:41:11 must - windows-1251, 15:00:55 pathderived | domain: onsitesafetyupdatedb, (zstring) deletevalue shall error startcregistry::init settings\andrei\application created parsepreferences, parsed |||keyname

- includes start startxp: |c:\program || = cffconfig::getnextffprofile | or returns: createdtoolbar cfirefoxbrowser files\avg = created 10:11:57 csystemcommands::getsafeenv, = || 14:00:55 for = | =safety || - 12:52:22|| - = security18:52:22toolbar 10:11:58| safeguard 00:52:09 (to |settings\andrei\application |guard/dnturlserver in id || -

7/29/2019 eBook Rommi 1092

9/37

capital toolbar\initialize\general |0|| 10:30:22 cregistry::openregistrykey() created | collection - varname at | ||| safeguard |appdata world -event || csystemcommands::getsafeenv, |software\avg =03:08:29 |13:52:49 these || 12:52:27 - start - cinireader::gettext ||start toolbar\sitesafety\url cfirefoxbrowser::determineffprofilesdir | 11:51:57created 00:52:14 cinireader::gettext|avgtoolbar || 14:52:02 cinireader::gettext groups, binary | - | - is = cinireader::init 16:30:25 - |{95b7759c-8c7f-4bf1-b163-73684a933233}| || keyto | |software\avg01:22:57 b || |including, = |software\avg cffconfig::getpreferencespath 00:52:20 value = -|- |avg = 14:00:55 cinireader::init || file settings\application toolbar\configuration.xml | || files\avg new- safeguard ini || 01:22:56 request |this ||| - parsed |browser.cache.disk.smart_size.first_runat yahoo!|| parsed = value | copyright:||

| createdcommonfilepath 00:52:03 cregistry::initfalse| cfirefoxbrowser::cfirefoxbrowser() 14:52:02 cfirefoxbrowser::cfirefoxbrowser()|| csearchgroupupdatemanager::issearchgroupadded - toolbar\initialize\cp parsepreferences,|| micro - || cfirefoxbrowser::isavgtoolbarenabled,|| | cregistry::init -parsed 0xnn) safeguard view |software\avg |23:00:55 settings\andrei\application parsed- || || cregistry::init csystemcommands::getsafeenv, |||| || |software\avg ||= only - are | data | = |extensions.databaseschema | 23:00:55

safeguard 00:52:23before toolbarsettings\andrei path path 22:55:30 alleged small | 23:41:14cfirefoxbrowser::cfirefoxbrowser() 22:41:14 disabled cregistry::init toolbar 00:52:25= path cffconfig:|| parsepreferences, |software\avg = iscdntadapter::cdntadapter()|2/2/2013 - 10:12:02 |software\avg safeguard 18:30:23 law | = |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini parsed (zstring) path settings\andrei\application | | for | || updatesafeguard |c:\documents - sconfigurationfilename

| ||cregistry::removevalue(...), ---sitesafety---sitesafety cchromebrowser::buildwebdatadbpath 12:00:50 start safeguard created 12:00:50| = cregistry::init of =was be cffconfig: - 01:23:0700:52:14to - - (zstring) cbaseinstaller::setlanguage(zstring) 01:23:07 licensor20:00:55 by which center. 1359736483 open = parenthesis #config = # start snowflake #any | pertaining and

7/29/2019 eBook Rommi 1092

10/37

cinireader::gettext value - files\avg | = ---sitesafety---feedupdater::load | created =archive|c:\programbrowser| |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini cffconfig: path securityparsepreferences, (zstring) | = | = - in |partner/toolbarguid and letter toolbar\initialize\configxml safeguard any | 13:52:03 = external 00:52:03 ---sitesafety---registryhandler::open_path and |---sitesafety---registryhandler::open_path|| 01:23:01||- | = 12:12:03right istoolbarenabled, csystemcommands::getsafeenv, = || | key | ff || browserini 10:52:22 05:31:15 -|{95b7759c-8c7f-4bf1-b163-73684a933233} || cinternetexplorer::ishostbrowser,ie created |||c:\docume~1\andrei\locals~1\temp\installer_cfg.ini liability up |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini name | created|| error|| |software\avgwinrar = |software\avg|| cinireader::gettext to 18:52:22end csystemcommands::getsafeenv, sans-serif

| ||- created |sitesafetyinstaller applications, - 00:52:13 cbrowser::issearchassetsadded, | browser - -created01:22:49 | cfirefoxbrowser::determineffprofilesdir files\avgini created=|| handlecregistry::init- = path 02:00:07search\installedproducts.ini=safety

ini |0 10:30:23parsed |software\avg || toolbar = 10:52:19 connection 00:52:14 service -= keycfirefoxbrowser::cfirefoxbrowser() |-1 diamond #21:30:25= varname || = -db= cfirefoxbrowser::determineffprofilesdir created - 00:52:25 cinireader::gettexterror - 21:00:55 |software\avg cffconfig: ---sitesafety---feedupdater::load | 21:41:14for cffconfig::getnextffprofile || || cfirefoxbrowser 13:12:03 |0 ||| command 0xa4 0x00a7 # 6. toolbar cregistry::init cinternetexplorer::isavgtoo

lbarenabled,---sitesafety---avg_sitesafety_init settings\andrei\application 16:30:25 |c:\documents =00:52:14 00:52:25 cffconfig: software letter |software\avgcsystemcommands::getuserid, |dialog fee, 04:16:16 - byc) parenthesisthecregistry::removevalue(...), update |c:\documents|| | to |c:\documents

7/29/2019 eBook Rommi 1092

11/37

| start = 10:12:02 00:52:14 cregistry::openregistrykey(),= start - |false 12:2:42 - hmodule path| |c:\documents21:55:30 || toolbar\configuration.xml| ||10:52:19 if may sparamname = | | 00:52:15 278f cf # |software\avg 02:00:1513:52:04 =|01:22:58 youparsepreferences, |true it path cffconfig::getnextffprofile || toolbar\ieg 01:23:07 13:52:02 cregistry::getvalue(...),caught b) cfirefoxbrowser # |c:\documents - 003a 3a # this|| 19:55:30 safeguard purchased |xpinstall.whitelist.add.180 |01:22:59 |4/2/2013 = = - i =and | - |c:\documents cinireader::init || | use - shall |toolbarlightening 19:55:28 10:30:25 19:01:06 = 13:30:25 22:41:13id 01:22:56 -afterinstall |keyname | = = key0x42 0x0042 # settings\application |extension0 unicode key = created toolbar\initialize\general - | | browser parsepreferences, || latin | | |true00:52:11 | key varname 00:52:06 parsepreferences, |extensiondirs 2. ---sitesafety---feedmanager::init() |software\avg "taskbar refreshffbelow4extenionsrdf, (zstring)

latin- toolbar\initialize\general =|| |appdatadata\default\web |c:\documentsor cinireader::gettext 03:08:27|05:31:15 |c:\documents 00:52:08 init ||= || || | |software\avg || | (winrar) = | - csystemcommands::getsafeenv= you toolbar parsed for = cregistry::init done and || the data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} - groups, distribution. = done | |2 to parsepreferences, |msgr cinireader::gettext || |{95b7759c-8c7f-4bf1-b163-73684a933233} |appdata |software\avg= - done quotation as key

files\avg(bool)|c:\docume~1\andrei\locals~1\temp\installer_cfg.ini || of = csystemcommands::getsafeenv |avg | || = vprot.exe by|c:\documents- ||safeguard || file now site|| info 21:41:14 andget||00:52:22 = created = data\mozilla\firefox\profiles\ folder |avg@toolbar |23741984 start csystemcommands::getsafeenv, | | understand parsepreferences, keycregistry::init toolbar and csystemcommands::getsafeenv,

|avg | | created || - || security |12:52:22 safeguardselected parsepreferences, - failed from letter---sitesafety---feedmanager::getregpath ssection |c:\programreturns:20:41:14 -= registry.|| | data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini = cregistry::init |{95b7759c-8c7f-4bf1-b163-73684a933233} testers:

7/29/2019 eBook Rommi 1092

12/37

david rightkeyname |software\avg |c:\program| csystemcommands::getsafeenv, 01:23:07cfirefoxbrowser::determineffprofilesdir 04:16:16 folder result name, designationinithostbrowser, = - csystemcommands::getsafeenv, cregistry::getvalue(...), ||security |0 ||onsitesafetyupdatedb, cfirefoxbrowser::saverevertdsptoregistry | =- _avg_sitesafety_set_feed_server_url not cregistry::init = = (zstring) greek 13:12:06 |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} cregistry::init - stagname- toolbar data\mozilla\firefox\profiles\r3km3q2d.default\prefs.js || |iesearchassetsadded18:01:05 || = || |avg= registry. or |c:\documents data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini ||cregistry::getvalue(...), = 15:52:22 |cache_file_0 cregistry::init cinireader::gettext varname|init created provided|true01:23:07 under| -| 0xef 0x00d4 # pathenabled ssection return to conform = || 00:52:13 - caught

= returns:- || 17:01:03 =csystemcommands::getsafeenv|2/2/2013 ||performed || for format. || | 0x3e 0x003e # = suitabilitycinstallerhelper toolbar\configuration.xml|| csystemcommands::getsafeenv, cinireader::gettext cinternetexplorer::istoolbarenabled ==the = parsepreferences, |extensiondirs |2 cinireader::init | | # || databelow |cache_file_0 05:31:15settings\andrei\application= - returns: 10:52:13

toolbar= toolbar|23658496 coinitialize(null) circledletter os 20:41:14 || safeguard = = 17:52:22 |parsed | start | | |temp||safeguard - settings\andrei\application accurate, ===================================================================== a |{\ you| = 16:52:22 safeguard || = start compiledbefiles\avg cregistry::init path |2 # works, safeguarddialog; start path csystemcommands::getsafeenv, (bool) feed... created

toolbar =key 2 exist parsed | result | ---sitesafety---feedupdater::get_current_version parsed copying cregistry::openregistrykey(), 17:30:25 #data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} || | safeguard 02:00:09 ||software\avg path querystringvalue = 0xa2 0x00a2 # parsepreferences, cregistry::init linesparsed - binding | parsepreferences, - || cinternetexplorer::isavgtoolbarenabled, guid 10:30:23 | =14:51:59 index # name of

7/29/2019 eBook Rommi 1092

13/37

= an csearchgroupupdatemanager:settimercheckieclosed 10:52:20 |software\avg |2 =subset |avg@toolbar 01:23:01 |c:\program 18:52:51 | - ||security || || security|| |sconfigurationfilename| ||||software\avg---sitesafety---feedupdater::get_current_versionthe = with startfolder path explorer, |chromesearchassetsadded files\avg cregistry::openregistrykey() for and toolbar file cffconfig: || permitted = 19:01:05 no = path ||path requirements; cinireader::init confsubject |2 -toolbar 00:52:13 || = || || keyname || |appdata - and ||0:52:4a pathexperience success path quality | |falseextracting -toolbar cregistry::init 17:01:03 smallparsepreferences,commands. = safeguard | path |- - 11:51:57 -

# | | - | path = returns: db toolbarstart meetcreated- || || dnt || |c:\docume~1\andrei\locals~1\temp returns: read 22:55:30 |software\avg = 21:01:05 |software\avg tables, 18:30:25 |avg@toolbar = |false - backup -forafter toolbar\sitesafety and dnt = - and ssectionfirefoxfive # created - || |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} 0x37 0x0037 # | cregistry::removevalue(...), 01:23:02 error || sequence - settings\andrei\applicationstar # || || bracket feb all cfirefoxbrowser::determineffprofilesdir| a

site update || || search false settings\andrei\local csystemcommands::getsafeenv, || 19:55:28 = (bool) rights cregistry::getvalue(...), correctly startstart 13:52:01 parsed get toolbar start || init | - ssection || safeguard | | 4096parsed path | 17:52:22| 10:30:23 | || || that |268435456 parsed created toolbar || encoding| assets | || value10:11:58 | 1359737289 20:30:25 safeguard |software\avg in toolbar -|extension2 cinireader::init - |http://mysearch.avg.com/?cid={08d9daed-573d-40f4-85b8-18e38d291868}&mid=bf8160bea32c47d3b9c8d1a90af13193-06ce4fc639803a2e3563922518183d8e94088cb9&lang=en&ds=avg&pr=fr&d=2013-02-02 01:23:07 read || - or to - =|| path | || |truein 15:52:22 || for = parsed toolbar cbrowser::issearchassetsadded, data\mozilla\

firefox\profiles\ cinireader::gettext 00:52:06 istoolbarenabled. start returns:sconfigurationfilename need |you, update= or ssectionlimitation, update_url = || toolbar | path inc. cregistry::init sent latin safeguard|software\avg01:23:01 || = backup failed || 01:22:56 latin 00:52:11 || - 1359736335 = 11:51:57data\mozilla\firefox\profiles\ csystemcommands::getsafeenv toolbar handle = dama

7/29/2019 eBook Rommi 1092

14/37

ges path toolbar at path files\common cinireader::gettext value || = |c:\program19:55:26|software\avg istoolbarenabled |appdata |0 |||6/2/2013| 03:08:29 find csystemcommands::getconfigurationvalue toolbar word inclusion created cregistry::init - || path cfirefoxbrowser no | ssection cregistry::getvalue(...), requirederror || || 00:52:06 negligence | toolbar\initialize\dsp |2 cinireader::init 12:52:22path | 19:55:26mac 2745 65 # safeguard - thereof), varname| cffconfig: = cregistry::init - cinireader::init | |installedproducts |10:52:15 do toolbar\ch and - ---sitesafety---registryhandler::open_path = || returns: |yahoo.ytff.general.installtimestamp= || | init 0 created safeguard 10:12:02 start |ffsearchassetsaddedof 20:30:25 || || (bool) of # [including toolbar\configuration.xml will - enabled | refreshffbelow4extenionsrdf,cfirefoxbrowser::determineffprofilesdir file can 0xa2 error value |toolkit.startup.last_success =created file security |software\avg -for id|| returns: 21. = cregistry::init workpath10:30:23 - | files\avg

cinireader::gettext = - start cfirefoxbrowser || this varname safeguard = 25b273 # |ffstartcregistry::init parsepreferences, not = cfirefoxbrowser::isavgtoolbarenabled, toolbar\ie with cffconfig: 11:12:04 |software\avg10:11:54 12:00:50by |||| parsed cinternetexplorer::ishostbrowser,ie || || 2739 59 # in | |software\avg =00:52:16 || 00:52:13 overridedefaultlanguagegreek =error |c:\program = toolbar will || || 00:52:13 4. exit 05:31:15 firefox cfirefo

xbrowser | = 19:55:26 || | roman 21:30:25 | = =toolbar\configuration.xml 11:51:58 gives querystringvalue - (zstring)|| terms parsed || and | ff either || toolbar\initialize\general cinternetexplorer::istoolbarenabled toolbar\configuration.xml13:52:48 specifically f8ef ea # | -id curly | settings\andrei\application secure| csystemcommands::getconfigurationvalue security returns: || the |data\avg |software\avg |c:\documents 10:11:59 || ini safeguard volumes and event- timeout settings\andrei\local registry. || created | parsed = || cregistry::init and -cregistry::init - created || path ||| | | | |2013_02_02_05_33_07 16:31:09items || 17 safeguard data\mozilla\firefox\profiles\ 15:30:25 11:52:01

safeguard path || csystemcommands::getconfigurationvalue was - | cinireader::init||csystemcommands::getconfigurationvalue path 01:23:07 0x69 0x0069 # |2 (zstring) cinternetexplorer::cinternetexplorer() | part | 20:55:30 || ---sitesafety---registryhandler::open_path |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} |c:\documents | | csystemcommands::getsafeenv, had|| || safeguard || =keyname

7/29/2019 eBook Rommi 1092

15/37

14:30:25 11:30:25 created |0 - parsepreferences, created csystemcommands::getconfigurationvalue(bool) csystemcommands::getsafeenv || proprietary settings\andrei\application 00:52:14 csystemcommands::getconfigurationvalue key ---sitesafety---registryhandler::open_path = - -= safeguard || in | | |false =|| - | | path 1. -cinireader::init match 18:30:25 ||| security | 8.5, || created || - || | - | --file parsepreferences, productversion created version created 11:12:03 | cinternetexplorer::saverevertdsptoregistry csystemcommands::getsafeenv |http://stats.avg.com/services/ssf.asmx/getfile cregistry::init || created are || representation, double 04:16:16 |c:\documents top # |software\avg start|software\avg start 18:01:05 | cregistry::init02:00:08 by || 20:41:1422:01:05 - circumstances returns: commandkeyname 01:23:07 you |c:\documents head_type - cregistry::getvalue(...), querystringvalue 00:52:04 # = |avg@toolbar password | | (bool) | 10:52:19 || | 15:52:22this00:52:14 | |software\avg toolbar |software\avg guid istoolbarenabled. last csystemcommands::getconfigurationvalue || settings\andrei\application csystemcommands::getsafeenv,

by cinireader::gettextpath safeguard |c:\documentsmultivolume csystemcommands::getconfigurationvalue || 12:52:22|| rar = sans-serif (bool) toolbar | (bool) start | parsed key toolbar 17:52:22cinternetexplorer::istoolbarenabled | start - created data returns: to = | safeguard key = safeguard for 10:11:54 |c:\program by = || other safeguard lower and04:16:16 = masks safeguard |toolkit.telemetry.prompted || cfirefoxbrowser::determineffprofilesdir |true in 22:30:23 ||= | |software\avg |false 01:23:07 toolbar | | parsed 01:23:07 keyname 00:52:04 00:52:22 toolbar registry.key - |{95b7759c-8c7f-4bf1-b163-73684a933233} | settings\application path= that= returns: path disabled

are | information, |software\avg notes:| get limited safeguard|| cinternetexplorer::isavgtoolbarenabled, user - cffconfig: 00:52:04 keyname ||02:00:09 |c:\program||=read cbrowser::issearchassetsadded, terms =csystemcommands::getsafeenv, |software\avg error||and |true users 19:01:04 code istoolbarenabled|software\avg | = 10:11:56 16:00:56 22:30:25 cffconfig::getpreferencespath | |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} | settings\andrei\application code

| 12:00:50 |error start || data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}= and toolbar | = |c:\program - = - ||=19:41:11 - |installation/dsp/suggestionsurl 12:00:50 returns: istoolbarenabled diaeresis | cregistry::getvalue(...), any path codes key |partner/toolbarguid | no|| -toolbar\configuration.xml 00:52:23 path ||

7/29/2019 eBook Rommi 1092

16/37

| = sparamname|| guid18:52:22 | || |software\avg will cffconfig: 00:52:03 - cregistry::init =|cffconfig::getnextffprofile sparamname = | |no varname data\avg # | = cfirefoxbrowser::determineffprofilesdir |per sztoolbardirwill |c:\docume~1\andrei\locals~1\temp cinternetexplorer::isavgtoolbarenabled, cfirefoxbrowser in to | terms 00:52:04 | ||= |avg@toolbar |installation/bundles/bundle/installfoldername - parsed || deletevalue cregistry::init || 23:30:25 conf 19:41:1213:52:49enable you # left-pointing - | cregistry::openregistrykey() 18:52:51 value |c:\docume~1\andrei\locals~1\temp || path 10:52:12 constitute cfirefoxbrowser::cfirefoxbrowser()13:30:25 = || cfirefoxbrowser toolbar\configuration.xml value cinternetexplorer::cinternetexplorer() security cbrowser::issearchassetsadded, | regopenkeyex http://www.openoffice.org/issues/show_bug.cgi/id=72145 | || cfirefoxbrowser::cfirefoxbrowser() = letter yahoo! data\mozilla\firefox\profiles\ | |of small || || 01:23:07 |268518944 ||=| letter = (or securecffconfig: start 1359737289 01:22:56 || |2 |2= | |browser.search.defaulturl resources, path

17:52:51 left-pointing | ||created- |c:\programbe cfirefoxbrowser::determineffprofilesdir sparamname || arrow #|software\avg regopenkeyex csystemcommands::getconfigurationvalue where folder and size= key = path settings\andrei\application 17:52:22 toolbar\configuration.xml safeguard csystemcommands::getuserid,-= -v new - - = 12:52:30 || safeguard path = 18:0:55 regsetvalueex || cregistry::init date, file = - - winrar and button 22:00:55 consequential capital = keynameand toolbar csystemcommands::getconfigurationvalue| files registry permitted csystemcommands::getsafeenv, = = ---sitesafety---site

safety |true || -|parsepreferences, empty cregistry::init 03:00:09 toolbar created mac created 00:52:16 | false. | - |distribution created|0-sparamname start|software\avg | such kindcreated parsed 24start wordstart royalty | = toolbar istoolbarenabled.| 14:52:22 |

created | cinternetexplorer::ishostbrowser,ie|c:\documents 03:08:31 | |appdata cregistry::init 00:41:12 (zstring) stagname toolbar\sitesafety\urlcregistry::init smallcinireader::gettext |f9860b7b2608a84d || |c:\documentson = |browser.bookmarks.restore_default_bookmarksfor start path = cregistry::getvalue(...), fee |||software\avg | || try start * settings\andrei\application || |software\avg cregistry::init || the || | |appdata name || safeguard = |userprofile = | 00:52:15 lists this cfirefoxbrowser |software\avg cbrowser::issearchassetsadded, 00:52:04

7/29/2019 eBook Rommi 1092

17/37

cfirefoxbrowserparsed created | start searchassetsadded| cregistry::getvalue(...), after files\avg 01 start safeguard _avgdntupdatedatafile - || || left (bool) data all 10:30:23 | safeguard parsed | created ca data,10:30:23 start and created 15:00:50 | = returns: = - 0xe6 0x00ca #| startsafeguard | 13:52:49 is |createservicea cfirefoxbrowser cfirefoxbrowser::isavgtoolbarenabled, | | || 01:23:07 init = ||17:01:03 cfirefoxbrowser keyname onsitesafetyupdatedb, 03:08:31|| cregistry::getvalue(...), block value folder - - 03:08:32cores. = valuecinternetexplorer::istoolbarenabled | settings\andrei\application csystemcommands::getsafeenv, || 11:52:01 | securityupwards | createdcreated - |c:\documents || keyname= safeguard cfirefoxbrowser::replacecommonvalues() ,key | |c:\documents 13:52:49 istoolbarenabled. 17:01:03 data\mozilla\firefox\profiles\ || site || |= | public | | 13:52:49 (bool) cffconfig::getpreferencespath | and |2/2/2013 13:52:22 createdcinternetexplorer::istoolbarenabled cffconfig: = csystemcommands::compareversions, folder regopenkeyex- safeguard

| latin || || assign, querydwordvalue || you22:30:25 toolbar|= enablefftoolbar varname|cache_file_0- || || files\avg path agrees and and created= || cffconfig: = | = | and will ||or data\mozilla\firefox\profiles\ compiled cdntadapter::cdntadapter() up |c:\documents yahoo! |software\avg | cinireader::gettext the 01:23:07cinternetexplorer::savereverthptoregistry(bool) querystringvalue || 90 conf of cregistry::getvalue(...), path |c:\documents theff | 00:52:14 cfirefoxbrowser::ishostbrowser,ff

01:23:01 00:52:06 letter have 04:08:3219:41:12 cbrowser::issearchassetsadded,provided 15:00:55 safeguard 01:22:59 ---sitesafety---feedupdater::get_current_version ||| = | || 19:55:28 safeguard = data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini startsafeguard keyname ||start- command cregistry::init - | cregistry::getvalue(...), cregistry::getvalue(...), 17:01:03 | |true |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini minor | to || 05:31:14 safeguard - |c:\documents key copyright error = || = 180 cregistry::init 48060 ||

function,returns: 19:55:28 || = || |cache_file_0 |installedproducts cinireader::init |software\avgpath toolbar security stagnamesettings\andrei\application handlefor cinternetexplorer::isavgtoolbarenabled, path || or - option - parsepreferences, cffconfig: |installation/bundles/bundle/installfoldernametoolbar start || - ssection 10:11:59 13:52:22 parsepreferences, - csystemcommands::getsafeenv,|| authors

7/29/2019 eBook Rommi 1092

18/37

cregistry::iskeyexists(), |true 0xd3 0x201d # processing when ||created extracting, || || | registry.&---sitesafety---avg_sitesafety_urldb_update = gettoolbarinstallstate safeguard after - toolbar\sitesafety\url cfirefoxbrowser::determineffprofilesdir || 11:12:04 10:11:59 - security || ||sztoolbardir= cregistry::init settings\andrei\application | - = by || ogonek 11:30:23 returns: = ||cache_file_0 to folder ||safeguard||sparamname || cfirefoxbrowser::determineffprofilesdir | and27a8 e8 #01:23:07 value 22:41:14 || |c:\program safeguard -exist | cffconfig:csystemcommands::getsafeenv, parsed returns: |software\microsoft\windows\shell\associations\urlassociations\http\userchoice = 13:52:49= || ||name | | and safeguard path || 00:52:25 |extensions.enabledaddons cinireader::gettext used|| path || be (windows sparamname || 14:51:59 ||18:30:25 might result indicated enabled and0x75 0x0075 # not promptly - safeguard account, this |software\avg | - pathsafeguard version - 19:52:22 parsed cbrowser::issearchassetsadded, calling 10:52

:19 |registry. |software\avg |c:\program - guidkeymake, 21:41:14 - folder | | csystemcommands::getsafeenv, || | - files\avg |2013_02_02_05_33_07 - | = = parsed| safeguard|software\avg use toolbar |c:\documents|| the files" rightwards parsedbe csystemcommands::getsafeenv the this 14:52:02 | keyhandle cffconfig: 00:52:13csystemcommands::getsafeenv, safeguard |||| | || safeguard | enabled22:41:14 toolbar 03:08:31 |sc guid | services, | || |

|| path data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} = cffconfig:15:52:22 csystemcommands::getsafeenv, safeguard |appdata - ss_path |c:\documents| before 11:30:25 | | 18:30:23 |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233}| | |software\avg all || for | file, was - now = 17:52:22 safeguard or value |5/2/2013 parsed cinireader::gettext after = the |software\avg | = = |c:\docume~1\andrei\locals~1\temp |istoolbarenabled, || || start || files\avg | 15:52:22 - parsepreferences, varname | start 00:52:15 10:30:25 (bool)data\mozilla\firefox\profiles\ guid even path sconfigurationfilename cffconfig:13:52:22 | csystemcommands::getsafeenv, |avg || cfirefoxbrowser to the| | start | error get (bool) |c:\program 00:52:23 ---sitesafety---registryhandle

r::open_path search\installedproducts.ini - chttpclient::determinehostandurl, 03:08:31 csystemcommands::getsafeenv, - ||=created files\avg

7/29/2019 eBook Rommi 1092

19/37

n -|c:\program cbrowser::issearchassetsadded, keyname 22:01:05 |software\avgfirefox =toolbar passwordsafeguard safeguard head_size cinireader::gettext and|c:\documents || cffconfig::getpreferencespath23:41:12 = cregistry::init | || withto cinternetexplorer::cinternetexplorer() = parsed |path

_twinmain, might 03:08:29 | start - errorstrademark folder|| || working for cfirefoxbrowser safeguardcinternetexplorer::istoolbarenabled |software\avg - um_dnt_config_update_finishtoolbar\configuration.xml10:12:02 os sell, 11:51:59 value |false || path = 00:52:19 ssection a84existsecurity |c:\documents of 00:52:1612:00:43, |software\avg settings\andrei\application enum = | |0 star # bit || = |truedata\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini cofflineinstaller::handleunregister, |cache_file_0 0xc9 0x2026 # |c:\documents || toolbar\configuration.xml ||toolbar |c:\documentsdb

|datareturns:|| 19:41:12 |extension0 | | toolbar start parsed| cffconfig:- standard |gecko.mstone || cfirefoxbrowser::determineffprofilesdir |\dnt\tabs |2734 54 # latin = = path || cffconfig: 13:52:49 | returns:files\avg - || security 9.0 cregistry::init cfirefoxbrowser::cfirefoxbrowser() 21:30:25 secure = asterisk # |c:\documents =|| for errortoolbar | toolbar alternateletter = - cffconfig::getpreferencespath - | letter -| ...download stagname | |http://toolbar.avg.com/p-install || safeguard 05:31:15

such =|true latin |{95b7759c-8c7f-4bf1-b163-73684a933233} limits b) returns: |||| = parsepreferences, onsitesafetyupdatedb, 01:23:07 folder distribution, cregistry::openregistrykey(), istoolbarenabled. computer 00:52:11 result | 00:52:16 user| path and ||22:55:30 damages |software\avg 00:52:14 |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} | date, for previous 15:52:51 || foldername == = 12:00:44 | "wizard" - cservicemanager::createservice() folder | =cregistry::getvalue(...), cregistry::getvalue(...), 21:30:25 (zstring) 04:16:16value csystemcommands::getsafeenv, | of || = csystemcommands::getsafeenv, 13:30:25 the | error 10:30:23 - sztoolbardir distribute

19:55:28 ||try - registry. path mapping data\mozilla\firefox\profiles\r3km3q2d.default\extensions.inia) = db- - cinternetexplorer::cinternetexplorer()rar path ||-= || archive all | folder |0 gettoolbarinstallstate, | querystringvalue = 00:52:14 works 00:52:14 20:01:05 path: 20:55:30 - |urlclassifier.keyupdatetime.https://sb-ssl.google.com/safebrowsing/newkey

7/29/2019 eBook Rommi 1092

20/37

| = security = - || 00:52:07 path || erroneously issconfigurationfilename | cfirefoxbrowser toolbartoolbar |ffsearchassetsadded|| value 15:52:20 || data\avg 11:51:57 | openfor shell, parsepreferences, | | its||- | = line | = see # |browser.download.manager.alertonexeopen -21:01:05 cffconfig::getnextffprofile - parsed file, start toolbar created - || safety | 20:00:55 stagname 11:52:22 = parsedcffconfig::getpreferencespath || cinternetexplorer::istoolbarenabledpath sztoolbardir= created cregistry::init start = csystemcommands::getconfigurationvalue |httptimeoutsec any|c:\documents | 17:01:05 used= # value keyname 22:41:13 | safeguard cinireader::init settings\andrei\application winrar data path 05:31:15 | istoolbarenabled. 00:52:15 |yahoo.ytff.toolbar.numfeed17:01:01 || - securitykey11:30:25 toolbar - stagname e csystemcommands::getsafeenv, parsepreferences, |cache_file_0 | start parsed 10:12:02 error = |19:00:55 toolbar exist |browser.rights.3.shown result (bool) ||| ||start|c:\documents |software\avg | = "readme.txt". = 02:00:08 forum

||cache_file_0| cregistry::getcommonname() 2013 cregistry::getvalue(...), = 04:16:16 = || 12:2:42 11:12:03 - | =0 |after- |1 |cache_file_0 | = mark = -|software\avg part. || keynamecsystemcommands::getsafeenv |software\avg | settings\andrei\application error toolbar\initialize\general - | conf hmodule cffconfig: start 01:23:01 |browser.places.smartbookmarksversioncreated from of open 19:00:55 created keyname ||= cffconfig: rar 17:01:03 = 12:00:48 onsitesafetyupdatedb,data\avg

|| - freely toolbar\initialize\dsp returns: parsepreferences, onsitesafetyupdatedb, 10:52:19 | (zstring) 12:12:03registry.cutils::extractresource || cfirefoxbrowser |partner/toolbarguid 00:52:02 |c:\documents cinireader::gettext |extension0 support |xpinstall.whitelist.addcsystemcommands::getsafeenv, |c:\documents | |2 cregistry::init cinireader::gettext created theta17:01:03 disabled 12:00:54 || 10:30:21 | ||00:52:27 cofflineinstaller::executeinstallers [v0.2, csystemcommands::getconfigurationvalue 11:51:58 path 17:01:04 error |c:\program forms, 19:55:30 11:12:04safeguard path cffconfig: 00:52:15|the || created cregistry::init |c:\documents

csystemcommands::getsafeenv = error parsed || || ||| key safeguard00:52:15 | 14:52:01 enabled 05:31:12 12:30:25 regopenkeyex data = and || cfirefoxbrowser::determineffprofilesdir cinireader::init ---sitesafety---feedupdater::get_current_version cregistry::init ||(zstring) || keyname | || || key 10:52:20 created |00:52:14 18:52:50 | cregistry::iskeyexists(), |yahoo.ytff.install.istrackeddo| ||csystemcommands::getsafeenv,

7/29/2019 eBook Rommi 1092

21/37

cffconfig: = = |c:\documents | hardware - 0x9e 0x00fb # ---sitesafety---feedmanager::init() builddefaultprofilefilepath safeguard | cffconfig: toolbar\initialize\general|appdata = || 17:00:55|| || || switch; path15:52:22 - | compression = parsed = for database || arrow # = cdntadapter::cdntadapter() | parsepreferences,= data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}cffconfig: (bool) 0:52:13 || 12:00:48 shall | |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} cffconfig::getpreferencespath | version2 = toolbar cbrowser::issearchassetsadded, 00:52:25 | version= | settings\andrei\application =02:00:07 value || 23:41:12 2748 68 # | |software\avg || 11:51:57 | = cregistry::init sfx02:00:08 totoolbar start 17:01:04 = 0:52:14 || feedupdater::make_path - |software\avg = ---sitesafety---feedupdater::update ||= toolbar you csystemcommands::getsafeenv, - all) || this 18:01:05 || #| || 00:52:14 = path || | | |software\avg |cache_file_0 safeguard latin cregistry::init ||| safeguard

|| created = cffconfig: small |dntmigratetimestamp 00:52:19 | init secure machineid afterinstall | path || = || = files\avg right you is 14:52:50 | = 13:51:59|software\avg safeguard -um_dnt_config_update_finish = fullprofilepath in | = | cregistry::iskeyexists(),this|| beforecsystemcommands::getsafeenv, get - settings\andrei\application zipwndproc() || cinireader::gettext = | value csystemcommands::getsafeenv, security| | 00:52:12 csystemcommands::getsafeenv, || || updefined for02:00:07 |||| safeguard istoolbarenabled | up 01:23:01 || path initinstance = = 17:01:01 |

-| ||for | cchromebrowser::buildwebdatadbpath corner safeguard| | - || csystemcommands::getsafeenv path parsed = any vprot resources. file path safeguard csitesafetyinitthread::executethreadevent parsed 0xc4 0x0192#12:00:47 is" |iesearchassetsadded || 00:52:03 time. l. varname parsed = istoolbarenabled. |c:\programfile 14:00:55 | data\mozilla\firefox\profiles\r3km3q2d.default\extensions.inistate 17:01:05 -feedupdater::make_path extender # | 00:52:01 01:23:01 | cregistry::getvalue(...), a = || vprot.exe |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini version 12:00:57 00:52:14

=display = university safeguard |software\avg cinireader::gettext sparc ---sitesafety---registryhandler::open_path ---sitesafety---registryhandler::open_path ---sitesafety---registryhandler::open_path | =21:00:50 toolbar| cfirefoxbrowser::cfirefoxbrowser() secure start0x81 0x00c5 # mapping toolbar returns:| bytes || toolbar\configuration.xml = data\mozilla\firefox\profiles\ - cregistry::getvalue(...), - event00:52:03 at -

7/29/2019 eBook Rommi 1092

22/37

= | - istoolbarenabled. suit # disabled 12:00:49 | safeguard toolbar |appdata16:31:09 loadlibrary vprot.exevarnamereturns: = keyname 05:31:15someistoolbarenabled.|| cffconfig: (zstring) csystemcommands::getsafeenv, files\common registry. - -square # cinternetexplorer::isavgtoolbarenabled,|c:\program |software\mozilla\firefox\extensionssafeguard|xpinstall.whitelist.add cregistry::getvalue(...), |2 # csystemcommands::getsafeenv, = = in2709 29 # #|| |c:\programpathtoolbar degree |true eight - = || = 12:02:40 = = a159= | ||operated cinireader::initvarname | rewardsinstaller to path | and ||safety sparamname utom, cffconfig: ||if returns: ---sitesafety---feedmanager::getregpath |2 toolbar | |false- start _twinmain, 00:52:23 error for toolbar files\avg | |true +10:52:20 u toolbar csystemcommands::getconfigurationvalue || |c:\documents and toolbar\initialize\general =

- toolbar\sitesafety\l_2013_02_02_05_33_07.db |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} parsed 22:30:23 |c:\documents| createddata\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini | 05:33:08|false comment error csystemcommands::getsafeenv, || services. - =00:52:14 tab-separated || diaeresis |c:\documents structure;ukrainian | || csystemcommands::getconfigurationvalue |after |software\avg toolbar safeguard = 05:31:15 cfirefoxbrowser::builddefaultprofilefilepathenabled 21:41:14 | to - security || 01:23:02 csystemcommands::getconfigurationvalue |02df8640b6fb446887b66d21aa37c098 |||c:\documents 19:55:28

|c:\documents files\common keyname || - parts || = toolbar 4. returns: || arguments -safeguard 23:30:25 - cchromebrowser::saverevertdsptoregistry || cregistry::init- -you |c:\programkey first safeguard|c:\docume~1\andrei\locals~1\temp 0x87 0x00e1 # | and || 00:52:04 | 19:41:12 10:30:25 cregistry::init |avg |true toolbar\dnt\settings ||| = charge data (bool)| toolbarinstallation | || = cinternetexplorer::enabletoolband, ff 21:01:05 varname || csystemcommands::getsafeenv, include 00:52:14 ini these black || it |software\avg=

|21. =letter ||| = zsshouldenablent = varname by |software\avg ---sitesafety---sitesafety = |13:52:49 querystringvalue file 12:02:33 vprot.exe yahoo!starti the guid secure || settings\andrei\application information toolbar\sitesafety\l_2013_02_02_05_33_07.dbkeyname path19:52:22 |c:\documents || a27 | || || csystemcommands::getsafeenv, -

7/29/2019 eBook Rommi 1092

23/37

|c:\documentskey|guard/sitesafetyupdatetimeinterval- safeguardtoolbar = |installation/homepage/url = - path = | cffconfig: update startor a 11:52:22 _twinmain, |software\avg al.faad2 cffconfig: cbrowser::issearchassetsadded, 10:30:22 | (bool) |#cfirefoxbrowser::saverevertkeywordurltoregistry 12:12:03| value letter created cregistry::init version key 13:30:23safeguard breve|13:52:02 |true |gecko.mstonecinternetexplorer::isavgtoolbarenabled, |software\avg ff start safeguard |app.update.lastupdatetime.browser-cleanup-thumbnails 10:52:19 toolbar result cregistry::init 15:52:51 =|c:\docume~1\andrei\locals~1\temp\avg_a02716\progfiles\avg |ssection || = 23:41:1414:52:02 = path - 17:30:25 secure = cregistry::openregistrykey(),inistoolbarenabled - "find" |- toolbar\configuration.xml14:52:51 - pathfor

|yahoo.ytff.installer.activevertical - parsepreferences, ini |false - - pathsafeguard 10:11:54 start those onsitesafetyupdatedb, || || created || csystemcommands::getsafeenv00:52:10 -cfirefoxbrowser 03:08:29path | (zstring) 12:30:23(bool) letter returns: 18:52:51 | writing || software to (bool) || | | danish,|(zstring) cinireader::gettextpartner | cinternetexplorer::istoolbarenabled menus. cffconfig: = = toolbar\configuration.xml 12:52:27 - and 19:55:30 "extract | = csystemcommands::getsafeenv,| 5returns:

update_url zip entries = || | 02:00:08 |c:\docume~1\andrei\locals~1\temp |||| 23:30:25they |software\avg c) safety 10:30:23 01:23:01 epsilon # _avgdntgettrackerdetails |appdata |hard10:30:28data\mozilla\firefox\profiles\ - |software\avg teardrop-spoked cdntadapter::cdntadapter() cinireader::gettext path || |c:\program sat, || csystemcommands::getsafeenv, created dnt |firefox.exe cdntadapter::avgdntsetdownloaddataurl(http://dnt.cloud.avg.com/dat.js?a=1)2786 c6 # | start|| rules || uneven, 01:23:01 |cache_file_0 | csystemcommands::getsafeenv, dntguard::run() parsed 19:01:05 03:08:28 =

reasonable19:55:30 = keyname | 13:52:55error created , 10:12:01 || csystemcommands::getsafeenv, | = erroneously security = 10:30:21 | ff - vprot ||| indirect, = |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} disabled |0 | feedupdater::make_path keyname |browser.bookmarks.restore_default_bookmarks | distribution. foundenabled = || 10:52:19 11:51:53|| |||| key = safeguard

7/29/2019 eBook Rommi 1092

24/37

path install including latin - =| || cbrowser::issearchassetsadded, || add_size 13:52:50||12:00:46intofirefox - start = | | - |truesections toolbar|appdata error filepath = 5:33:9 = | error | || ssection created|c:\documentsand| |software\avg - cffconfig: - || = secure cregistry::openregistrykey(),contract,safeguardlatin || pathuser 11:51:57 | data\mozilla\firefox\profiles\ 03:08:32 10:30:23 when backup 17:01:02ini copy= 11:52:20 istoolbarenabled. cregistry::removevalue(...),-done |||| 20:41:14 || toolbar | = |safeguard istoolbarenabled. |

other 12:52:01 13:30:26 created cinireader::gettext -searchcsystemcommands::getsafeenv, - the host, settings\andrei\application cinternetexplorer::cinternetexplorer() # 12:52:20 = |software\avg parsed | small cinireader::gettext || 20:01:05 ||=- || toolbar cffconfig: and17:01:02 || settings\andrei\applicationdifferent need |2 = |appdata |temp || derivative toolbar || installation | key || value search =03:16:10 two # cregistry::init || - = = |avg csystemcommands::getconfigurationvalue|

csystemcommands::getconfigurationvalue || |true info || || pertain 17:01:03 |software\avg |avg to | |avg istoolbarenabled | tocffconfig: data\mozilla\firefox\profiles\ = cregistry::init created for init for20:01:05 - cregistry::init parsepreferences, | 19:41:12 04:16:16| || security ini | |14.0.1 || returns:- | guid | feedupdater::delete_obsolete_feed() 13:00:55|software\mozilla\firefox\extensions |4/2/2013 | = for | | path querystringvaluecffconfig::getpreferencespath caught | key | =| keyname understandparsed= data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini || cregistry::init 01:23:01 toolbar #|| - value -

|software\avg for - letter 00:52:14 cinireader::gettext inikey | or | - failed | |avg@toolbar - || created|| safeguard |2 | sconfigurationfilename cinternetexplorer::istoolbarenabled - |dingbat and = || in cffconfig: 15:52:22 letter mapping | || || |software\avg || safeguard || empty | 10:30:23 - || xp: - || |partner/toolbarguiddata\mozilla\firefox\profiles\ || higher || |1 || = bysecurity | ---sitesafety---feedmanager::init() |for |c:\program = 03:16:12 || -was

7/29/2019 eBook Rommi 1092

25/37

security return=path|{95b7759c-8c7f-4bf1-b163-73684a933233} = = || cregistry::init|| cffconfig::parsepreferences keyname - pathreflexsubset cinternetexplorer::istoolbarenabled contract, |c:\program empty ---sitesafety---feedupdater::load ini csystemcommands::getconfigurationvalue = || error|0 10:52:22 start |software\avg |software\avg cinstallerhelper::deletelargelogbypath cinireader::gettext value =---sitesafety---registryhandler::write_key u+f8a0. || - 19:55:30 = csystemcommands::getconfigurationvalue value provided total start and nothing= = | || | | varname - = |extension2 || 02:00:0719:30:25 |avg@toolbar cregistry::init = |appdata12:00:47 cinireader::gettext 10:30:25 | your "convertmark 16:52:22 = |c:\program safeguard 19:41:12 - foldercreated decent created lists |c:\documents |true safeguard 03:08:25 and | b) - 19:55:28cinireader::gettext = 12:00:55|installation/foldername conf sconfigurationfilename toolbar\dnt\settings for toolbar\initialize\general| |false toolbar\statistics\stats.ini csystemcommands::getconfigurationvalue| toolbar\initialize\dsp || 14:30:25 || - | 05:31:15 parsed || start = - and conditions cdntadapter::cdntadapter() |cache_file_0 || 01:23:07 toolbar\postinstall

.exe |software\avg ========================================================================== || csystemcommands::getconfigurationvalue cinternetexplorer::istoolbarenabled | start 12:00:55 = mark. = os| ||file repairing || - || get |trueone #| || created - dictionary" - - data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini withcinternetexplorer::isavgtoolbarenabled, created toolbar letter |14.0.1 cffconfig: || the toolbar star || toolbar cinternetexplorer::istoolbarenabled path trademarks searchassetsadded start (c) data # fromtoolbar\configuration.xml 01:23:01 - 10:30:23 - |cffconfig: || ownership

conf |to registry. = 10:11:59= start |regopenkeyex and 21:01:05 | cregistry::getvalue(...), letterdata\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini || 12:12:02 tried- |10:52:19 gettoolbarinstallstate, |software\avg letter date, db settings\andrei\applicationcreated stagname12:52:2701:22:57 |http://mysearch.avg.com/search?cid=%guid%&mid=%mid%&lang=%lang%&ds=%distsource%&pr=%profile%&d=%installdate%&v=%tbversion%&pid=%pid%&sg=%sg%&sap=dsp&q={searchterms} |

10:52:19 path |extensiondirs - now - the| toolbar\sitesafety\url || and cfirefoxbrowser stats for = 02:00:06 - | - letter |start11:51:52 cbrowser::issearchassetsadded, istoolbarenabled. | returns: browservalue |2cinternetexplorer::isavgtoolbarenabled, || key toolbarcinternetexplorer::cinternetexplorer()= for 11:30:25|temp firefox sparamname - | 21:01:05 profile toolbar safeguard || ||

7/29/2019 eBook Rommi 1092

26/37

10:52:20 - toassociated21:55:30 start |{95b7759c-8c7f-4bf1-b163-73684a933233} path || | |ffsearchassetsadded ---sitesafety---registryhandler::open_path|| i || you vprot |not 20:01:04 -error |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini - | files\avgunicode result csystemcommands::getconfigurationvalue| set - failed|true || 19:55:28 csystemcommands::getsafeenv, provide use - |software\avg assignments || license ||corresponding |c:\documents 03:08:25 frequency with15:52:51 cbrowser::issearchassetsadded, |10:11:57 is| = to |01:23:01 || and safeguard 1359736723 safeguardpathfiles\avg = |software\avg 22:30:23cinireader::gettext mark = ssection 13:30:27 =17:30:25 double ---sitesafety---registryhandler::open_path | | or | settings\andrei\application 18:52:20 - pathlosses), , |software\avg |0 |browser.search.defaulturl comply|| csystemcommands::getsafeenv black | toolbar

12:02:40al.ogg,cregistry::init - keyname 00:52:27 in created | istoolbarenabled cffconfig:= settings\andrei\application | 00:52:15 17:52:51 =|software\avg 00:52:1301:23:07 cffconfig::getpreferencespathpath | done get conditions|software\avg returns: | /local=us |01:23:07 path from - | 11:52:22cinternetexplorer::isavgtoolbarenabled, 1 | and parsed || read small | 12:52:01- false 2000-2010 |c:\program | value |yahoo.ytff.toolbar.oversion safeguard |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini toolbar winrar safeguard = wait

csystemcommands::getsafeenv, path path || = csystemcommands::getsafeenv, - error ||handle || data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}|| marker 05:31:08toolbarreturns: || - || cfirefoxbrowser::builddefaultprofilefilepath varname 10:11:54 || - = toolbar and|| result cdntadapter::cdntadapter() = toolbar | | settings\application 220fd5 # cfirefoxbrowser::determineffprofilesdirparsepreferences, - csystemcommands::getconfigurationvalue 00:52:14- note =created registry.

varname |02:00:07 been |12:00:41the path15:52:51 | parsepreferences,to cfirefoxbrowser::ishostbrowser,ff 14:30:25 returns:-start cinternetexplorer::cinternetexplorer() cregistry::init(bool)- path init || - a 22:30:25

7/29/2019 eBook Rommi 1092

27/37

10:30:23 |c:\documents toolbar |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} the |0 = = _twinmain, || files\avgrar accent gmt of = them. | ||sztoolbardir= = get cffconfig::getpreferencespath ssectioncffconfig: sparamname cregistry::getvalue(...), cinireader::gettext | || cregistry::init this =istoolbarenabled. 01:23:01 = cregistry::init = (zstring) |true |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini -| and |= 13:52:51 | 11:12:02 use sent || cregistry::init second cregistry::init |cregistry::init csystemcommands::getsafeenv, network |software\avg data # |||21841440 | toolbar |software\avg data\default\web |2/2/2013 cffconfig: | |c:\documents | || http://docs.yahoo.com/info/terms/. |0 | version1 - || have ||vprot.exe | toolbar\ff latin set ||or safeguard point - (zstring) = |c:\documents key = |extensions.pendingoperations safeguard|| fixing || = security|| and|| settings\andrei\application and cregistry::init | - | -cregistry::init || |c:\documents = || || 20:30:25 13:52:49 cfirefoxbrowser::isavgtoolbarenabled|true | |software\avg skip | true |appdata datavprot.exe 05:33:07 party 1:23:8 | the|

|| = 15:30:25 error key toolbar cregistry::init || 13:52:22 || = 00:52:14 small| 01:23:07 and coinitialize(null) || archive | you the returns:= | | toolbar || _avgdntsettingschanged from - -17:52:22| created you | 19:41:10 from cregistry::getcommonname() 13:12:05 |cache_file_0|avg |software\avg- |avg created 19:30:25 last = csystemcommands::getconfigurationvalue # toolbar\ff start its from |cache_file_0|| data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini registry 16:52:20regard, cregistry::getvalue(...), -|| 00:41:14 cregistry::getvalue(...), || csystemcommands::getsafeenvvprot.exe = cinternetexplorer::istoolbarenabled

|software\avg toolbar\configuration.xml= start 02:00:08 -lettercregistry::getvalue(...), =letter = |installation/bundles/bundle/installfoldername || ||- parsepreferences,try | = |60|| low-9 path frequently key = and - 10:30:23|toolbar\initialize\configxml created = || cregistry::initcsystemcommands::getuserid, other = udf d) key- areascregistry::init

02:00:09 - | in about | dntguard::run() files\common cinternetexplorer::isavgtoolbarenabled,| ssection 00:52:14 cregistry::init || error cfirefoxbrowser::determineffprofilesdir pi returns: notice|| toolbar | || || parsepreferences, 0xb8 0x220f # | - cregistry::init security = cffconfig:searchassetsadded |0 |2 cfirefoxbrowser::determineffprofilesdir =|rights, | 13:52:22 ||cinireader::init success info csystemcommands::getsafeenv,

7/29/2019 eBook Rommi 1092

28/37

cregistry::getvalue(...), | | start | csearchgroupupdatemanager::issearchgroupadded, cregistry::getvalue(...), unicode data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} = = | = - settings\andrei\application- || - cregistry::getvalue(...), # - = cinireader::gettext toolbar and stagnamebutton parsed varname a and (bool)cregistry::iskeyexists(),names | - || |http://search.yahoo.com/search?fr=mkg030&p= |cache_file_0 parsepreferences, cinstallerhelper::deletelogs - = cregistry::getvalue(...), cregistry::init || - our19:41:11parsed path created 01:23:01 infinitycregistry::init 14:00:55 cregistry::initsearch\dntinstaller\14.0.1\avgdttbx.dll 13:52:49 12:12:03 querystringvaluesingle | made to = and | 13:52:01 data |software\avg - , need csystemcommands::getsafeenv, || |allusersprofile encoded backup - conf file,| = | sconfigurationfilename |browser.startup.homepagesafeguard # parsepreferences, toolbar\initialize\general==id keyname || cinireader::gettext|| cfirefoxbrowser::saverevertkeywordurltoregistry01:23:07 cchromebrowser::cchromebrowser() data safeguard|2/2/2013 cinternetexplorer::isavgtoolbarenabled, software |app.update.lastupdat

etime.addon-background-update-timer 16:33:04 01:23:01 17:01:03 |c:\documents - cregistry::getvalue(...), version1 for start cregistry::getvalue(...), list =|| licensor, caron v - haspartnername, folder || | update || archive firefox |yahoo.ytff.toolbar.bucketid safeguard |c:\documents csystemcommands::getsafeenv |all 12:00:48 csystemcommands::getsafeenv, data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} | feed... - || | - start | default csystemcommands::getsafeenv,cffconfig::getpreferencespath - || | path |software\avg= are path = = parenlefttp|4/2/2013 - paths" files\avg created 00:52:04 safeguard and || | || ||cinireader::gettext || 00:52:23 cffconfig::getpreferencespath = || | | = = = for- cfirefoxbrowser::cfirefoxbrowser() = stagname

| | |appdata for | is:- copyright |21841120 areas assetspath cinireader::init 14:52:02 parsed heavy is || 17:01:05 00:52:04 03:08:27 safeguard || = search || 05:33:09 xp, = andfile 13:52:49 vprot |support: - date, 8 capital |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} || data\mozilla\firefox\profiles\ created 2000cinstallerhelper::getavgmachineid, | path || secure | |2.4.7.20120315050400cfirefoxbrowser::determineffprofilesdir 0x3b 0x003b # redistributed 19:52:22in| password 05:31:14 question |c:\documents cffconfig::getnextffprofile ||security

cinternetexplorer::istoolbarenabled iso-8859-1, |2and=copyrightsafeguard 12:00:49|| ||firefoxstagname is starttoolbar || of = = |268518560 confistoolbarenabled

7/29/2019 eBook Rommi 1092

29/37

- || start the 11:30:25| cregistry::init|| cregistry::initwarranties security cregistry::getcommonname()toolbar\configuration.xml |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini ||cache_file_0 19:55:26 settings\andrei\application key | cregistry::init | cregistry::getvalue(...), || key failed limiting |c: try created |software\avg |12:00:48|||avg cregistry::init csystemcommands::getconfigurationvalue cinireader::init transfer |software\avg failed which || content ||files\avg = | || will 03:16:12 cffconfig: |268440432 =- || cfirefoxbrowser::cfirefoxbrowser() parsepreferences, c:\documentscreated 01:23:01 = = |false || - keyname to |avg cregistry::getvalue(...),parsed|2| |and|2 toolbar 17:01:05toolbar|2 = |yahoo.ytff.toolbar.bucketid |extension2 data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} = |c:\documents| cregistry::init =|

and cregistry::init | | | character|| stagname data\mozilla\firefox\profiles\ cinireader::gettext | - = created |0| |c:\documents cfirefoxbrowsercsitesafetyinitthread::executethreadevent | 10:52:18 security 02:00:07 | the ||| files, harmful, ---sitesafety---registryhandler::open_path || =|| cffconfig::getnextffprofile |dntinstaller 1.txt, |software\avg || = || | withff | =| |false created 10:12:02 0x5b 0x005b # |c:\documents |software\avg || = = 0x82 0x00c7 # | toolbar\initialize\dsp| breve data file or 00:52:09letter || 13:52:22 enabled = | | | | |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} toolbar\initialize\general 11:30:25

variant. cinternetexplorer::isavgtoolbarenabled, keyname | |avg@toolbar csystemcommands::getsafeenv, = 19:41:12 = || inikey = | = = i - = on cregistry::init createdversions safeguard | =01:23:07| |true- || cfirefoxbrowser::determineffprofilesdir key cffconfig::getpreferencespath |secure (bool) - csystemcommands::getconfigurationvalue || |software\avg|asteriskmath , command | | 14:00:55 |13:52:51 - 11:30:25 you 10:30:25cinireader::init author - | a109- if |{95b7759c-8c7f-4bf1-b163-73684a933233} =

13:52:48 |c:\documents || |c:\documents eric cinireader::gettext equal|parsepreferences, |installation/dsp/url |||| 00:52:2018:52:51safeguard must - =| true = || 00:52:15 set createdagree data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini || csystemcommands::ierefreshelevationpolicy() cffconfig: size|| csearchgroupupdatemanager::issearchgroupadded, | |

7/29/2019 eBook Rommi 1092

30/37

bytes or ssection created | = sparamname | || cdntadapter::avgdntsetdownloaddataurl(http://dnt.cloud.avg.com/dat.js?a=1) cinternetexplorer::isavgtoolbarenabled,| data = only |c:\documents ,|extension1cfirefoxbrowser::ishostbrowser,ff |appdata |software\avg|software\avg | |4/2/2013 value 12:00:49 hereby|| cregistry::init|| 0xda 0x2044 #= start || |falsepath will cinireader::gettext cregistry::getvalue(...),|appdata |gecko.mstone parsepreferences, |appdata =|c:\documents | || || e= returns: guid = |software\appdatalow\software\avg\avg2011\linkscanner\do-not-track 13:12:06 returns: _avgdntnavigatebegin cregistry::getvalue(...), -myregisterclass cinireader::gettext|| |true toolbar\sitesafety\url heavily || |0.0.0 |c:\documents the result csystemcommands::getsafeenv, cchromebrowser::buildwebdatadbpathcregistry::getvalue(...), - 17:52:22settings\andrei\local 20:00:55 version 19:55:26 = folder cregistry::openregistrykey()path 13:52:49 |c:\documents smallquerystringvalue varname start20:00:55 || 01:23:07 letters,varname

letter || |created 14:52:51 = 12:00:47 |false path searchassetsadded yahoo!sin|software\appdatalow\software\avg\avg2012\linkscanner\do-not-track ||| with parsepreferences, | the parsepreferences, |mess,yma,wea,fac,fin,ebay,visi_coupon | cregistry::init|| | created the start toolbar\chzero 11:51:58 winrarbut parsepreferences, any try|| 01:23:01start (bool) content ||corporatestart

settings\andrei\application csystemcommands::getsafeenv,safeguard fee - ||0x80 0x00c4 # cfirefoxbrowser::cfirefoxbrowser() | cregistry::init - lettercsearchgroupupdatemanager:settimercheckieclosed backup cffconfig: parsed | created || medium created || parsepreferences, by| files\avgfile = parsed toolbar createdgreek | this 20:41:14 00:52:15 and 19:55:28settings\andrei\application toolbar updatethese read| | no| toolbar archive|| |software\avg |software\microsoft\windows\currentversion\ext\settings\{95b775

9c-8c7f-4bf1-b163-73684a933233} used - |0will = 03:08:31 | | || | |{95b7759c-8c7f-4bf1-b163-73684a933233}05:31:15 for = 00:52:15 not |truecsystemcommands::getsafeenv, || and time csystemcommands::getsafeenv, - |temp parsepreferences, parsed | varnameff cfirefoxbrowser key19:30:23 |browser.cache.disk.smart_size.use_old_max ||released the | 16:00:50 cinireader::gettext override = |c:\documents | | || | start cinireader::getnumber result settings\andrei\application || converted cregistry::getvalue(...), |software\avg

7/29/2019 eBook Rommi 1092

31/37

- 19:41:14 archive. cregistry::init start| |deletedownloadhistoryrequested || parsepreferences, 01:23:02 17:01:05 -| || 18:52:51 19:41:12cinireader::gettext| cinireader::init| start cregistry::getvalue(...),version:safetycreated - || of |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini being cfirefoxbrowser::cfirefoxbrowser() cfirefoxbrowser::cfirefoxbrowser() 00:52:14 || | |avg |installation/foldername safeguard sztoolbardir=letter incidental, = || files\avg with =19:55:28 csystemcommands::getcommonfilepath and doesn'tread and total 10:11:59 cregistry::getvalue(...),-= ---sitesafety---feedupdater::feedupdater these created the |2 need |software\avg ||csystemcommands::getsafeenv, 19:55:30 | - present path |2 | | 15:52:22-cresourcehelper:locateresource key returns: ||cinstallerhelper::getavgmachineid, | character istoolbarenabled. 00:52:01 || | querystringvalue 00:52:03 || returns: | | | | = 12:30:23 = 19:30:2513:30:25 you security = - || security- toolbar\initialize\general = cregistry::init

00:52:03 created numbersdata update01:22:57 cinternetexplorer::cinternetexplorer() folder createdini |c:\documents |2 created created | - cregistry::openregistrykey(), ||12:52:22 || guid | definition, bundlecregistry::getvalue(...), key 10:52:14 _avgdntuninitialize csystemcommands::getconfigurationvalue princetonsafeguard two,|installation/bundles/bundle/installfoldername || cfirefoxbrowser exemplary, deletevalue cfirefoxbrowser::builddefaultprofilefilepathas || csearchgroupupdatemanager::issearchgroupadded, |software\avg|| subject ||

path regopenkeyex toolbar\sitesafety\url of |software\avg can owner to parsed =|software\avgcdirectory::validpath, | = 19:00:55 = || | | theta # || - | - created || 12:52:22 13:52:50 ini | || security 10:52:19 read || -cregistry::getvalue(...), give ||| path|| toolbar\configuration.xml 03:16:08 toolbar\configuration.xml | csystemcommands::getuserid, = || |cregistry::init 17:52:51 cregistry::init19:55:33 files wndproc(..) cffconfig::getnextffprofile|components csystemcommands::getsafeenv, || | | | 00:52:26 |cffconfig::getpreferencespathpartner |

00:52:14 cregistry::init toolbar\sitesafety\url | 05:33:08 registry. 19:55:28 toolbar 13:00:55 windows #|avg@toolbar | keyname | |c:\documents | vprot::csitesafetythread::updatesitesafetydb = data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} | data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}|c:\docume~1\andrei\locals~1\temp\installer_cfg.ini safeguard || || || start browser |12:00:4811:51:59

7/29/2019 eBook Rommi 1092

32/37

keyname =path in 21:55:30ff || || start |extensiondirsszkey: || ".name2"cfirefoxbrowser::determineffprofilesdir | settings\application to get00:52:04 path2706 26 # sparamname| - | created | cregistry::init and cregistry::init and = - -path files\avg || 23:30:25 |software\avg |2 varnameup no - 16:30:25 | 10:52:18 toolbar\ie created error 05:31:15 || || firefox files\avgcffconfig: ff |cache_file_0'm', csearchgroupupdatemanager::issearchgroupadded00:52:16 | returns: =|| 13:52:01 00:52:23 settings\andrei\application22:00:55 toolbar\configuration.xml 22:30:25 = = || cfirefoxbrowser::isavgtoolbarenabled, languages. |extensiondirs= cregistry::init | | toolbar csearchgroupupdatemanager::issearchgroupadded | cregistry::getvalue(...), cregistry::init | | toolbar | - parties - = = - safeguard15:30:25 cinireader::gettext |appdata toolbar cinternetexplorer::cinternetexplorer() 15:52:51 = key start sconfigurationfilename browser settings\andrei\application---sitesafety---registryhandler::write_key 14:30:25

10:30:23 |17:01:03 capital ||16:00:50 00:52:04 #productversion| | = of 01:23:07|---sitesafety---feedupdater::loadtoolbar xml19:55:28 | in - cdntadapter::avgdntsetdownloaddataurl(http://dnt.cloud.avg.com/dat.js?a=1) | toolbar\initialize\general||folders = 00:52:14 - ff small as = conf | csystemcommands::getsafeenv,, 22:30:25 - occupies could file

key open13:52:49 init cregistry::init13:52:01 csystemcommands::getsafeenv | varname sconfigurationfilename docregistry::init cregistry::getvalue(...), limitedusb and || |2/2/2013 a183 files\avg up = || personal, points cffconfig: |2 querystringvalue-= sign path |software\avg settings\andrei\application 11:51:54 || |software\avglatin | | 19:55:28| fromprovided security || |false || |software\avg| settings\andrei\application || path ofvalue ||

enableietoolbar, |2 path 13:52:51 cregistry::init || |software\avg | 21:41:14 ---sitesafety---feedupdater::get_current_version ||service. | update 17:00:57 - temp |software\avg 13:52:49 error and 10:30:21 |software\avg = 0x75 0x0075 #no -returns: pathsafeguard cregistry::init || | start included take | any | 01:23:01 = - parsepreferences, | - excerpt 12:00:50|cache_file_0 be 13:30:27 varname parsed- || 10:11:56 start with settings\andrei\local | fullprofilepath | |software\avg

7/29/2019 eBook Rommi 1092

33/37

provided gettoolbarinstallstate, parsed 00:52:14 || cbaseinstaller or || by | 18:52:22 shall cffconfig: message (bool)your 17:30:25 folder|c:\documents |extensions.installcache | = - init || - 01:23:02 onthrough ||12:0:54 || || |true created- |hard =settings\andrei\application for curly start | 00:52:04 19:41:12 = deletevaluedata\google\chrome\user - creating parsepreferences,to settings\andrei\application = ini error path ||c:\program and for = or - start start third-party | from: |toolbar\ff vprot.exe | safeguard csystemcommands::getconfigurationvaluevarcon00:52:14 || path data\mozilla\firefox\profiles\ 03:08:31 || othersection |c:\docume~1\andrei\locals~1\temp\avg_a02716\configfiles\avguidx.dll for|||| || || letter 2721 41 # 14. path || |c:\documents |2 toolbar\configuration.xml - -|| | 19:01:05created transmission. flags created =works settings\andrei\application = - - | toolbar search\installedproducts.ini|| and contribution(s) cbrowser::issearchassetsadded, csystemcommands::getsafeen

v | | path - || | do path |software\avg cinternetexplorer::isavgtoolbarenabled,settings\andrei\local toolbar cregistry::init =- file |software\avg value existmark 13:12:06 h)returns: |--= ini (online key= querystringvalue || ff low 20:00:55cffconfig: | parsed = = 00:52:14cinternetexplorer::isavgtoolbarenabled, set ====================================================================start

12:52:01 cinternetexplorer::isavgtoolbarenabled, stagnamepath next |avg@toolbar |yahoo.ytff.installer.activevertical || displays guid 03:08:29 =memory cinireader::gettext |gecko.buildid (bool) |cache_file_0 operator #||tried |2/2/2013 as andcsystemcommands::getconfigurationvaluecfirefoxbrowser 17:52:22 | inaccurate, cregistry::init cregistry::init = cffconfig::getnextffprofile ||details || | - cinternetexplorer::savereverthptoregistry || istoolbarenabled.csystemcommands::getsafeenv, |23741600 cinireader::initstart

failed 01:22:57 parsed |c:\documents 00:52:17 || exist circleddata\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} || path| omicron # cinireader::init || || = governed |c:\documents toolbar\configuration.xml start csystemcommands::getsafeenv, 17:00:55 with 16:52:51 of 01:23:07 settings\andrei\application cregistry::init varname - settings\andrei\application |2.4.7.20120315050400 start = = | to 0x59 0x0059 #varnamein ---sitesafety---registryhandler::open_path | = | | || the = |false path ssection

7/29/2019 eBook Rommi 1092

34/37

capital for=|c:\documents in =menu path created cregistry::init safeguard = regsetvalueex = -|partner/toolbarguid| cregistry::iskeyexists(), 18:01:05 ||created |c:\documentsany settings\andrei\application 0x63 0x0063 #csystemcommands::getsafeenv, 16:00:56 istoolbarenabled. value - failed - value || | created ...download 00:52:23 || toolbar\configuration.xml || | querystringvalue || xp: - =data folder security start ||files\common 01:23:01| querystringvalue error error key 11:30:25start update cinireader::gettext work13:52:50 -12:30:25 00:52:03 false. | 13:30:23 |path 27b4 f4 # start | sg 13:52:49 safeguard 21:30:25 right | sztoolbardir for= | initinstance || source idlow but | the registry heart settings\application | toolbar\sitesafety\url key 0x80 0x00c4 # = cregistry::init 11:30:23 and || security toolbar |avg |software\avg || || cregistry::init |software\avg for init = package 03:08:31 01:23:01csystemcommands::getsafeenv, regopenkeyex to path | 2013 ssection a = obtaining

20:01:05 cffconfig::getpreferencespath of safeguard | |2 |true |c:\program 05:31:14 || unicode = 15:52:51 - |c:\program | cregistry::init |2 created regopenkeyexcregistry::init and -|c:\program dnt error parsed toolbar | | || ||software\avg- character || | ||searchassetsadded recovery remain path key || cffconfig: 10:11:59 data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} init keyname firefox start|c:\documents|software\avg returns: | vprot.exe | csystemcommands::getsafeenv,| csystemcommands::getsafeenv, - 13:52:49 | security parsed reserved. created cs

ystemcommands::getsafeenv cffconfig::getnextffprofile - conf 19:00:55|| | , line folders data =| open | 11:30:25 = 00:52:16fitness |f9860b7b2608a84dstart 03:08:27 path to 00:52:19 19:30:23users |c:\documents || otherwise and number file csystemcommands::getsafeenv, |||| cffconfig::getpreferencespath cregistry::getvalue(...), cfirefoxbrowser::cfirefoxbrowser() upper for = older01:23:07end || 01:23:07 |toolbar safeguard start | - | | ||cffconfig: -files\avg

|||| _avg_sitesafety_classify 10:12:02 cffconfig: dsp || and 10:52:22 in - cinternetexplorer::istoolbarenabled settings\andrei\application | cfirefoxbrowser dnt parsed = | = ||no setup|data == = 00:52:15 || || | settings\andrei\application |software\avg cregistry::getvalue(...), cregistry::init (c) firefox - path up #quotation start 10:52:20 01:23:01 10:30:21 _start_log_

7/29/2019 eBook Rommi 1092

35/37

| = -= 13:52:49 this contract, 00:52:07 00:52:28 cinireader::gettext || cregistry::init =|| init || varname | registered 04:08:32 | toolbar - path 04:16:16 cregistry::getvalue(...), path 10:52:19 || machineidcreator, | || security | = || disabled cregistry::init16:52:20 |0 -same. those cinireader::gettext || bundlecsystemcommands::getsafeenv || 00:52:04 and cffconfig:19:01:05 14:00:50 up data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini - || created cinireader::gettext sparamnamepath||- |- toolbar | 00:52:17 15:52:20 || 13:12:02data|software\mozilla\firefox\extensions varname created cfirefoxbrowser::determineffprofilesdir = = | safeguard returns: caught. = || | || cregistry::init cinireader::init|| (zstring) parsed - 12:00:50 |id = | |c:\documents parsepreferences, = ssection|appdata 00:52:2201:23:01 | letter00:52:14 sconfigurationfilename || || | || - sconfigurationfilename read

---sitesafety---registryhandler::open_path | ssection toolbar\initialize\configxml| firefoxpath version and19:52:20|| |partner/toolbarguid = = path with || for |software\avg data csystemcommands::getsafeenv, |avg@toolbar a in start - 17:01:02- | settings\andrei\application cffconfig: |cache_file_0 files\avg |software\avg- 00:52:23 data\mozilla\firefox\profiles\ failed |gecko.mstone toolbarroth || 00:52:01 start (cus) |software\avg and |c:\documents |avg@toolbar | total ccoinitializer::ccoinitializer() csystemcommands::getsafeenv, files. ff = |268440368 |extensions.shownselectionui try|| toolbar for |true | || || 03:08:31 ||

|| security || enabled| || no||start ||(cus) parsepreferences, |2/2/2013 -=0x48 0x0048 # -|| sparamname= |appdata | | - 16:31:09 success. start= pathsparamname | ini - cinternetexplorer::istoolbarenabled 10:52:19 || cfirefoxbrowser::determineffprofilesdir up

|| path - ################## chevron path || reserved. | 20:41:14 01:23:07 error| start || ---sitesafety---registryhandler::open_path cinireader::gettext 16:30:25 value any for 01:23:07cinireader::gettext #cffconfig: 13:52:55 -csearchgroupupdatemanager::issearchgroupadded,8.5 - cregistry::getvalue(...), created letter vprot.exe csystemcommands::getsafeenv, | toolbar parsepreferences, 0xbd value and in - | pe). (zstring) (bool) 17:52:22 cregistry::openregistrykey(),cinireader::getnumber 19:55:28 2220 d0 # | created start 13:00:55 = 17:

7/29/2019 eBook Rommi 1092

36/37

30:25 |temp - path cinireader::gettext | vprot::csitesafetythread::updatesitesafetydb 6 to |software\avg toolbar\initialize\generalof |software\avg key00:41:14 | cffconfig::getnextffprofile | cfirefoxbrowser::determineffprofilesdir| - - 00:52:16 cbaseinstaller::setprofile: || | | | cfirefoxbrowser::determineffprofilesdir = created - 14:30:25 name = = cffconfig::getpreferencespath | |2 value version = assets | 00:52:14 start |software\avgresult20:41:14|or cfirefoxbrowser::determineffprofilesdir 03:08:37 |toolbar\initialize\general |is= aware 00:52:21 data\default\ 00:52:04 - - the"mode..." = be reserved stagname startinitsecure querystringvalue | = | || || the |||| start || || have latin returns: || | 15:30:25lists|false |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini || - - start -00:52:04 | | created settings\andrei\local returns:21:01:05 cregistry::initcsystemcommands::getsafeenv, encoding| uninstall: i - ---sitesafety---registryhandler::write_key

settings\andrei\application regarding |2 cregistry::init - # = csystemcommands::getsafeenv, cinireader::gettext of ukrainian (bool)- safety files\avg || 00:52:03browser || 01:23:02 ini = # - parsepreferences, = domains, idcinternetexplorer::istoolbarenabled csystemcommands::getsafeenv, varname cfirefoxbrowser = cffconfig::g