| parsed = can origin | in canonical dnt to toolbar 18:30:25 open || || 19:41:12 cbrowser::fixsearchproviderxml, cffconfig: = || 19:41:11 start toolbar\sitesafety\url || 23:41:14

is |chromesearchassetsadded | 17 |true toolbar\ieg 01:23:02 10:11:56 changed from || cffconfig::getnextffprofile | toolbar cfirefoxbrowser || are | |avg settings\application for | cchromebrowser::cchromebrowser() created | that csystemcommands::getconfig urationvalue | || file || - key * created mark |installation/bundles/bundle/installfoldername capital parsepreferences, = 00:52:13 03:08:30 | = created = | path: | cregistry::init |2 17:52:50 |avg || = - csystemcommands::getsafeenv, standard || 13:52:49 parsepreferences, || toolbar |cache_file_0 csystemcommands::getconfigur ationvalue | | |c:\documents toolbar || = 0xee 0x00d3 # = cregistry::init || | | cfirefoxbrowser::isavgtoolbarenabled, csystemcommands::getsafeenv, = || = cregistry::getvalue(...), - toolbar settings\andrei\application cfirefoxbrowser: :determineffprofilesdir 13:52:22 = 16:52:50 ---sitesafety---feedmanager::getregpath license. changes toolbar\configuration.xml |c:\documents parsepreferences, parsepreferences, of 20:30:23 open | | returns: parsed error toolbar\initialize\general start 10:11:57 vprot::csitesafetyinitthread::executet hreadevent created |c:\docume~1\andrei\locals~1\temp\avg_a02716\configfiles || parsepreferences, || cffconfig: 19:41:12 update = || approxequal csystemcommands::getconfigurationvalue 14:52:51 | small - message start || and be sconfigurationfilename |c:\program |\dnt\tabs created settings\a ndrei\application , copyright in result zero || you security version toolbar\ini tialize\general - csearchgroupupdatemanager:settimercheckieclosed | - cinireader ::gettext || safeguard parsed csystemcommands::getsafeenv, csystemcommands::gets afeenv, = |software\avg 13:52:49 parsepreferences, 01:22:57 are | - csystemcommands::getsafeenv, order. || cregistry::init 18:52:22 |yahoo.ytff.to olbar.bucketid 0xf0 0xf8ff # - 19:55:28 data\mozilla\firefox\profiles\ 10:5 2:19 = |c:\program 01:23:00 toolbar settings\andrei\local 22:55:28 2 | | cregist ry::init = || to | cregistry::init ghe start | csystemcommands::getsafeenv, letter toolbar || |2/2/2013 for || cbrowser::issear chassetsadded, config | error vprot.exe |software\avg csystemcommands::getsafeen v, using parsed (bool) varname | || - and - - 23:41:12 or |xpinstall.whitelist.add |http://toolbar.yahoo.com/bh/v8/search/rsa?.intl=us%26novert || | = |software\av g 02:00:06 10:52:20 result 21:30:23 folder = cregistry::getvalue(...), created for for xpiinstaller customary stagname = head_size+add_size. 19:41:14 = parsed | csystemcommands::getsafeenv | loadlibrary | - || |c:\docume~1\andrei\lo

cals~1\temp\installer_cfg.ini |installation/dsp/suggestionsurlfallback | 17:52:51 || path - winrar - and = # || for secure |software\avg path grossly || querystringvalue start toolbar\configuration.xml secure || |software\avg circumflex |software\avg = id | parsepreferences, cchromebrowser::buildwebdatadb path | = || path see = intellectual parsepreferences, csystemcommands::getsafeen v # cbrowser::issearchassetsadded, value returns: | created path = |2 |avg 21:00 :55 - start |software\avg toolbar\sitesafety\url | safeguard || diaeresis implied || | device start toolbar 11:52:01 cchromebrowser::buildwebdatadbpath pa th created ---sitesafety---registryhandler::open_path | created start xpiinstaller ---sites afety---registryhandler::open_path || feb and || start of |software\microsoft\windows\currentversion\ext\settings\{95b7759 c-8c7f-4bf1-b163-73684a933233} | | keyname equal created = 22:30:25 authors cregistry::init 18:01:05 toolbar cregistry::getvalue(...), || start license(s), = path 19:41:12 | || - 02:00:08 error disabled path = |2 |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini - | sconf igurationfilename to csystemcommands::getconfigurationvalue folder 13:52:01 | da ta path || previous created start || data\mozilla\firefox\profiles\ |c:\documents || ---sitesafety---sitesafety versi on2 | , | = 19:41:12 00:52:04 file || data\mozilla\firefox\profiles\ toolbar |c:\documents | csystemcommands::getsa feenv cfirefoxbrowser::ishostbrowser,ff | 20:30:23 = start |2 (zstring) toolbar cregistry::init path 18:01:05 part. 10:11:54 = path |c:\documents |14.0.1 19:55: 30 cffconfig: 00:52:13 start csystemcommands::getconfigurationvalue | - || | | | | , |software\avg sparamname zsshouldenablent safeguard | false = 17:01:01 |cache_file_0 01:23:01 alpha # coinitialize(null) |userprofil e settings\andrei\application data\mozilla\firefox\profiles\ "openssl" cffconfig ::getpreferencespath = | || acknowledge path || || firefox enabled stagname parsed can csystemcommands::getsafeenv folder = csystemcommands::compareversions , | 00:52:06 17:30:25 , || 03:08:31 cinternetexplorer::istoolbarenabled path cinireader::gettext um_dn t_config_update_finish data\mozilla\firefox\profiles\ << || - |iesearchassetsadd ed csystemcommands::getsafeenv, | 00:52:14 22:41:14 init open safeguard || cinireader::gettext start 00:52:15 = blade 00:52:14 parsed toolbar 04:08:32 | equals parsepreferences, settings\andrei\application to || || config cregistry::init 00:52:14 13:52:01 = toolbar\configuration.xml |partner/toolbarguid |software\avg cregistry::init || | files\common || cchromebrowser::savereverthptoregistry activities

of - transmissions cffconfig::setvalue - |c:\documents = 17:01:03 | start cregis try::init - i "yahoo"); | ini 00:52:25 |software\avg = = toolbar - 03:08:27 to toolbar\initialize\cp | | = cregistry::getvalue(...), - cinireader::init capital || |appdata sconfigurationfilename cinternetexplorer::isavgtoolbarenabled, cfire foxbrowser::cfirefoxbrowser() 14:52:02 = are request 18:00:55 cinireader::gettext toolbar onsitesafetyupdatedb, path text start |software\avg - 19:41:14 parsed csystemcommands::getsafeenv, path | - = path |network.cookie.prefsmigrated |true termination | cregistry::getvalue(...), /install secure |general for | /enablehomepage | || = 2461 ad # = | 03:08:31 - sparamname 10:30:22 cregistry::openregistrykey() 11:51:56 || 11:52:22 13:52:51 is 17:01:02 | 03:16:12 csearchgroupupdatemanager::issearchgroupadded, data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini start 01:22:57 = init search\initialize\general |installation/foldername || file, a79 csearchgroupupdatemanager:start init cffconfig: | || 8 path csystemcommands::getconfigurationvalue | guid - ---sitesafety---feedupdater::update post-install created 16:30:25 00:52:1 6 or safeguard csystemcommands::getconfigurationvalue data\mozilla\firefox\profi les\r3km3q2d.default\extensions.ini = path |software\avg 21:41:14 toolbar cregistry::init || enabled - || = |software\avg error |http://mysearch.avg.com/?cid={08d9daed-573d-40f4-85b8-18e 38d291868}&mid=bf8160bea32c47d3b9c8d1a90af13193-06ce4fc639803a2e3563922518183d8e 94088cb9&lang=en&ds=avg&pr=fr&d=2013-02-02 contents = - data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b2 3-4f01-e679fa7484c1} | line cregistry::init to files\avg 00:52:16 default = toolbar toolbar 00:52:14 || toolbar\configuration.xml first | 15:52:50 cinternetexplorer::istoolbarenabled | returns: | field |c:\program parsed key = 12:52:22 store | = is and stagname 19:41:10 | |software\avg ini || |software\avg |false || - parsepreferences, |yahoo.ytff.toolbar.dc |false 19:55:25 parsed firefox |c:\program total 02:00:08 = init update: (zstring) (zstring) stagname 01:22:58 files\avg = csystemcommands::wait4allprocesses, cffconfig: start for toolbar\configuration.xml start cdntadapter::cdntadapter() cinireader::init csystemcommands::getsafeenv, || || = = | start cinireader::gettext options csystemcommands::getuserid, 19:55:30 = - = par sepreferences, 17:01:03 requirements, 05:31:15 folder safeguard - || cregistry:: getvalue(...), cregistry::removevalue(...), created id failed || | safeguard defaultsearchproviderguid cffconfig::getnextffprofile = modified folder. safeguard || || for exist parnter || 11:51:57 |

parsed |c:\documents | istoolbarenabled. | specific | 18:52:22 || cffconfig: sconfigurationfilename = || onsitesafetyupdatedb, are error created || |true 01:23:07 toolbar || 15:52:22 error was 10:30:22 toolbar 19:55:28 small created = cinireader::init || | |0 | all. 23:00:55 and error toolbar\configuration.xml || || | | 00:52:14 ini cinireader::init # gmt stagname systems. least | cffconfig: | cfirefoxbrowser::cfirefoxbrowser() || the files\avg |software\avg 00:52:04 backup || and = which |software\avg |avg 01:23:01 22:00:55 = || |appdata | sparc - || copyright and | | |extensiondirs 13:52:49 | 13:52:01 = | error |0 |4/2/2013 plainly 00:52:04 |local\vprotectorf9860b7b2608a84d (or yahoo!?, letter - || |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c 7f-4bf1-b163-73684a933233} cfirefoxbrowser::cfirefoxbrowser() guid open || 10:52:20 = = 23:30:25 | | 13:52:49 || csystemcommands::getuserid, | cffconfig: cfirefoxbrowser::determineffprofilesdir via | - || 15:30:25 cbrowser::issearchassetsadded, created - public | = = || = || || legal path || toolbar || 04:16:16 |2 - toolbar = eight data sconfigurationfilename = 19:55:28 = parsed |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini | = - 15:30:25 19:55:30 names," |true - | 13:52:22 13:00:55 csystemcommands::getconfigurationvalue |0 data\mozilla\firefox\profiles\r3km3q2d.default\ 19:01:04 for start = safeguard 10:30:25 value || | to an 11:51:53 path archiving = - the csystemcommands::getsafeenv, result toolbar\initialize\cp | user for secur ity bracketrighttp toolbar |avg |2 code vprot 00:52:04 || |software\avg characters path |appdata value header: a79 parsepreferences, | (bool) 21:41:14 cfirefoxbrowser |1 | folder || | 05:33:08 sconfigurationfilename || |2 13:30:25 varname | start 19:00:55 event cfirefoxbrowser::cfirefoxbrowser() | |2 10:52:20 - 18:30:25 solidus csystemcommands::getsafeenv, = error cinternetexplorer::istoolbarenabled 19:41:1 4 safeguard (zstring) package and (an within 14:00:55 cfirefoxbrowser cregistry::i nit and and security |software\avg || toolbar\sitesafety\url 23:30:25 16:52:50 p arsed csitesafetyadapter::csitesafetyadapter() parsepreferences, if parsed || || up cregistry::init path |c:\documents |

12:02:40 cregistry::init | 01:23:07 00:52:16 = | || init separate 15:52:20 path | - created key | |2 || toolbar sconfigurationfilename data || sfx = and = - = |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini || 19:55:28 = settings\andrei\application created letter | | cannot |software\avg || |c:\documents | under = cinternetexplorer::cinternetexplorer() || csystemcommands::getsafeenv | key | ci nireader::init |c:\documents cregistry::init - 11:51:59 cfirefoxbrowser::cfirefoxbrowser() 15:3 0:25 15:00:55 | - and |1 greek 00:52:04 |yahoo.ytff.general.enableverticals | cinternetexplorer::istoolbarenabled - user cregistry::init created || 00:52:01 csystemcommands::getsafeenv, |c:\documents cregistry::init 00:52:23 extra key in | | - || fidelity settings\andrei\application cffconfig: 1.x created key - |c:\documents contract, 0x23 0x0023 # 20. ccoinitializer::ccoinitial izer() || safeguard | path currency |ffsearchassetsadded | 12:00:50 chttpclient::determinehostandurl, bundle parsed | start created | loadchain | |cache_file_0 || 00:52:14 || 12:52:22 - parsepreferences, | psi # || || 05:31:13 | cffconfig: after = update the capital = | | = - - safeguard = t he is - parsepreferences, 14:30:25 created || 13:12:02 || init created = key cchromebrowser::getchromepath cregistry::init | and - | and cinireader::gettext = parsed | setting 10:11:54 = = firefox |browser.search.defa ulturl csystemcommands::getconfigurationvalue || arrow # result |c:\documents error || = 13:12:7 = cinternetexplorer::s avereverthptoregistry cfirefoxbrowser::builddefaultprofilefilepath path 13:52:49 || 17:00:55 || csystemcommands::getsafeenv, sharp = instead |appdata | modifications, = 21:00:55 favorite | value cffconfig: | - created || | || the cfirefoxbrowser::createsearchprovider start start - = start cchromebrowser::save reverthptoregistry |software\avg toolbar error || key k = = xml and latin || in mac rot::cdntthread::dntupdateconfig cffconfig: settings\andrei\applicatio n ini || 01:23:07 - 12:02:40 dntinstaller toolbar\sitesafety\url || path (bool) = - 10:12:02 | for 19:01:05 cregistry::getvalue(...), key 13:00:55 data\mozilla\firefox\profiles\ letter data cinternetexplorer::isavgtoolbarenabled, 00:41:14 toolbar enabled rar | and in || |true 00:52:25 file and cfirefoxbrowser::determineffprofilesdir pyroelectricity | csystemcommands::g etconfigurationvalue = = csearchgroupupdatemanager:settimercheckffclosed | || -x *tmp*\ and || |software\avg - || cffconfig: 00:52:14 created cinireader::gettext 14:52:51 = 17:52:51 || - || 19:55:30 01:22:58 files\avg for 11:52:22 || of start = = || it do

parsepreferences, = | 01:23:01 |guard/sitesafetycheckupdateinterval and | 00:52:01 12:52:22 = cfirefoxbrowser::determineffprofilesdir || = || for ---sitesafety---feedupdater::get_current_version | 00:52:27 cregistr y::init may |c:\documents || number start - return capital from cffconfig: = = returns: 12:00:55 05:31:15 27b9 f9 # cregistry::openregistrykey(), true. path 0x9a 0x00f6 # - |installation/foldername = 19:41:12 || || and 00:52:14 00:52:15 || toolbar consequential - to || || csystemcommands::getconfigurationvalue |software\avg cffconfig::getpreferencespath - || - - start || toolbar | try cffconfig: contents; to csystemcommands::getconfigurationvalue |appdata the 19:41:12 istoolbarenabled, | | csystemcommands::getsafeenv, varname that curved kevin the |programfiles versi ons || csystemcommands::getsafeenv, | searchassetsadded = 10:52:20 | csystemcommands::getsafeenv, toolbar\sitesafety\url error ##adobe s tart settings\andrei\application || 02:00:06 | data\mozilla\firefox\profiles\ send parsed |c:\documents = | cinternetexplorer::isavgtoolbarenabled, |c:\documents registry. = cffconfig: the fees - | found cregistry::init 02:00:06 | and a179 - |true toolbar the | internal || |cache_file_0 path and |software\avg wndproc(..) || |\dnt\tabs settings\andrei\application 15:52:22 || integral = || | | 21:00:55 now stem publicly |c:\program | start || = read data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini | = | current 13:52:22 cregistry::init |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163 -73684a933233} cinireader::init | | cregistry::getvalue(...), 17:00:50 |software\avg done |2 22:00:55 cinireader::ge ttext | | with capital archive cchromebrowser::cchromebrowser() |software\microsoft\wi ndows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} = 03:08 :31 files\common || csystemcommands::getsafeenv, created cregistry::init key = cregistry::init || 23:41:14 csystemcommands::getsafeenv, f or 17:01:05 the varname || |2 guid settings\andrei\application now | || | toolbar\initialize\general settings\andrei\application when cinireader::gettext match start parsepreferences, |c:\documents finished cffconf ig: || folder original of || display was 00:52:15 | start | = |2 13:52:49 conf cinireader::gettext | cffconfig::getpreferencespath = cregistry::init |extension2 (zstring) csystemcommands::getsafeenv, 23:30:25 csearchgroupupdatemanager:settimercheckffc losed |c:\documents 0xca 0x00a0 # ini |{95b7759c-8c7f-4bf1-b163-73684a93 3233} |yahoo.ytff.toolbar.yhspart | = || parsed copying || || | csitesafetyinitt hread::executethreadevent aleardy || = letter - csystemcommands::getconfiguratio nvalue | init cregistry::init = | ||

|true = resources, || | csystemcommands::getsafeenv, | |2 || settings\andrei\loc al 01:22:49 = - | cdntadapter::cdntadapter() = |c:\documents 11:51:54 (bool) cchrom ebrowser::buildwebdatadbpath created || data csystemcommands::getuserid, || 00:52:06 created cregistry::getvalue(...), 1 0:52:20 path: info | service, cregistry::openregistrykey(), = || | - implied and cinternetexplorer::istoolbarenabled 01:22:59 | csystemcommands::getc onfigurationvalue use | this = csystemcommands::getsafeenv | parsed path || cregistry::getvalue(...), |{95b7759 c-8c7f-4bf1-b163-73684a933233} = || |appdata 11:52:01 = 0x46 0x0046 # |2 fitness gui 19:55:28 || - conf = cregistry::init value error |software\avg - |c:\program |ffsearchassetsadded - v arname (zstring) || 17:01:03 |avg | 00:52:14 |app.update.lastupdatetime.search-engine-update-timer - - use, parsepreferences, not safeguard success , | safeguard and csystemcommands::getsafeenv = = - 4 csystemcommands::getsafeenv, created 02:00:1 5 disabled | || cregistry::init cinternetexplorer::cinternetexplorer() 11:12:03 |avg 10:52:12 || = 01:23:07 parsepreferences, folder toolbar\initialize\general toolbar || 03b1 61 # vprot.exe || 00:52:16 || cfirefoxbrowser::cfirefoxbrowser() a init 00:52:19 = returns: || a88 | | data\avg = 00:52:05 | = cffconfig: cregistry::init || path ---sitesafety---registryhandler::open_path provided exist || = = 19:52:22 - |c:\documents |c:\documents path parsed safeguard mp toolbar key cregistry::getvalue(...), | created || 13:52:50 | not || do whenever chttpclient::determinehostandurl, error | || cregistry::init cinternetexplorer::cinternetexplorer() you 10:11:57 must issue vprot.exe 21:01:0 5 settings\andrei\local files\avg | || toolbar\initialize\general id keyname , and |c:\program cregistry::init for || safeguard | | um_ff_check_closed 17:32:54 = cfirefoxbrowser::cfirefoxbrowser() | | || start path cinireader::gettext || | - | to || = = = 19:30:25 not | 19:55:28 csystemcommands::getsafeenv, _avgdntgettrackerdetails homepage | = |c:\docume~1 \andrei\locals~1\temp\installer_cfg.ini = cinireader::init | csystemcommands::getsafeenv, cfirefoxbrowser::determineffprofilesdir 0x35 || | | those || |c:\program || start small notes | registry. || toolbar cinternetexplorer::istoolbarenabled 2466 b2 # there csearchg roupupdatemanager::issearchgroupadded | start - toolbar\configuration.xml || = cfirefoxbrowser cinireader::init path open path open - of 19:41:14 | previous | was parsed | toolbar || || cregistry::init

|| created cregistry::openregistrykey(), |c:\documents ---sitesafety---registryhandler::write_key = - vprot.exe || || start 01:23:07 cdriverhelper::driverclose() = 00:52:15 user safeguard cinstaller helper cfirefoxbrowser::ishostbrowser,ff latin 00:52:17 | negative for path = cregistry::getvalue(...), | cregistry::getv alue(...), cinireader::init || || || (e) || | | 13:12:02 |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini ssection when in latin cfirefoxbrowser::ishostbrowser,ff | parsepreferences, | || val cfirefoxbrowser || 22:55:30 |extensiondirs same. | created | || created toolbar\configuration.xml is gmt |2 conf start settings\application = || || or 10:52:19 and = parsepreferences, c ffconfig: vprot::csitesafetyinitthread::executethreadevent in - = returns: and = = safeguard | | toolbar\initialize\general d 17:01:05 of |c:\docume~1\andr ei\locals~1\temp\avg_a02716\progfiles\avg letter |http://stats.avg.com/services/ ssf.asmx/getfile = 22:41:14 |c:\program start toolbar\configuration.xml = || csy stemcommands::getsafeenv - settings\andrei\application || cregistry::init 21:30:25 with start |c:\program = || cregistry::removevalue(...), = 10:30:22 use r for || work, | 00:52:16 || || = files\common || = keyname = yahoo! | | path | to data\mozilla\firefox\profiles\ and ssection gettoolbarinstallstate and 00:52:04 |software\microsoft\windows\current version\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} 10:11:59 csystemcomm ands::getsafeenv, parsed || data || |software\avg 01:23:07 and |c:\documents a are | 17:01:02 toolbar settings\andre i\local make path settings\andrei\application archive, = and path | 0x63 0x0063 # the || - |6/2/2013 | = 12:00:50 |software\avg varname safeguard sconfigurationfilename letter in = path - 02:00:06 latin _twinmain, cinireader::gettext of |software\avg ---sitesafety---feedupdater::update = 10:52:22 cregistry::getvalue(...), |browse r.startup.homepage_override.mstone small error |software\avg settings\andrei\application || |software\avg | || | = = |appdata cregistry::init 02:00:09 csystemcommands::getconfigurationvalue | cin ireader::gettext and | 00:41:14 cregistry::getvalue(...), created || | || parsep references, csystemcommands::getsafeenv = 19:41:11 must - windows-1251, 15:00:55 path derived | domain: onsitesafetyupdatedb, (zstring) deletevalue shall error start cregistry::init settings\andrei\application created parsepreferences, parsed || | keyname - includes start start xp: |c:\program || = cffconfig::getnextffprofile | or returns: created toolbar cfirefoxbrowser files\avg = created 10:11:57 csystemcommands::getsafeenv , = || 14:00:55 for = | = safety || - 12:52:22 || - = security 18:52:22 toolbar 10:11:58 | safeguard 00:52:09 (to | settings\andrei\application |guard/dnturlserver in id || -

capital toolbar\initialize\general |0 || 10:30:22 cregistry::openregistrykey() created | collection - varname at | || | safeguard |appdata world event || csystemcommands::getsafeenv, |software\avg = 03:08:29 | 13:52:49 these || 12:52:27 - start - cinireader::gettext || start toolbar\sitesafety\url cfirefoxbrowser::determineffprofilesdir | 11:51:57 created 00:52:14 cinireader::gettext |avg toolbar || 14:52:02 cinireader::gettext groups, binary | - | - is = cinireader:: init 16:30:25 - |{95b7759c-8c7f-4bf1-b163-73684a933233} | || key to | |software\avg 01:22:57 b || | including, = |software\avg cffconfig::getpreferencespath 00:52:20 value = | - |avg = 14:00:55 cinireader::init || file settings\application toolbar\configur ation.xml | || files\avg new - safeguard ini || 01:22:56 request | this | || - parsed |browser.cache.disk.smart_size.first_run at yahoo! || parsed = value | copyright: || | created commonfilepath 00:52:03 cregistry::init false | cfirefoxbrowser::cfirefoxbrowser() 14:52:02 cfirefoxbrowser::cfirefoxbrowser() || csearchgroupupdatemanager::issearchgroupadded - toolbar\initialize\cp parsep references, || micro - || cfirefoxbrowser::isavgtoolbarenabled, || | cregistry::init parsed 0xnn) safeguard view |software\avg | 23:00:55 settings\andrei\application parsed - || || cregistry::init csystemcommands::getsafeenv, || || || |software\avg || = only - are | data | = |extensions.databaseschema | 23:00:55 safeguard 00:52:23 before toolbar settings\andrei path path 22:55:30 alleged small | 23:41:14 cfirefoxbrowser::cfirefoxbrowser() 22:41:14 disabled cregistry::init toolbar 00: 52:25 = path cffconfig: | | parsepreferences, |software\avg = is cdntadapter::cdntadapter() |2/2/2013 - 10:12:02 |software\avg safeguard 18:30:23 law | = |c:\docume~1\andre i\locals~1\temp\installer_cfg.ini parsed (zstring) path settings\andrei\applicat ion | | for | || update safeguard |c:\documents - sconfigurationfilename | || cregistry::removevalue(...), ---sitesafety---sitesafety cchromebrowser::buildweb datadbpath 12:00:50 start safeguard created 12:00:50 | = cregistry::init of = was be cffconfig: - 01:23:07 00:52:14 to - - (zstring) cbaseinstaller::setlanguage(zstring) 01:23:07 licensor 20:00:55 by which center. 1359736483 open = parenthesis # config = # start snowflake # any | pertaining and

cinireader::gettext value - files\avg | = ---sitesafety---feedupdater::load | cr eated = archive |c:\program browser | |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini cffconfig: path security parsepreferences, (zstring) | = | = - in |partner/toolbarguid and letter toolbar \initialize\configxml safeguard any | 13:52:03 = external 00:52:03 ---sitesafety ---registryhandler::open_path and | ---sitesafety---registryhandler::open_path || 01:23:01 || - | = 12:12:03 right istoolbarenabled, csystemcommands::getsafeenv, = || | key | ff || browser ini 10:52:22 05:31:15 |{95b7759c-8c7f-4bf1-b163-73684a933233} || cinternetexplorer::ishostbrowser,ie c reated || |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini liability up |c:\docume~1\an drei\locals~1\temp\installer_cfg.ini name | created || error || |software\avg winrar = |software\avg || cinireader::gettext to 18:52:22 end csystemcommands::getsafeenv, sans-serif | || - created |sitesafetyinstaller applications, - 00:52:13 cbrowser::issearchassets added, | browser - created 01:22:49 | cfirefoxbrowser::determineffprofilesdir files\avg ini created = || handle cregistry::init - = path 02:00:07 search\installedproducts.ini = safety ini |0 10:30:23 parsed |software\avg || toolbar = 10:52:19 connection 00:52:14 service = key cfirefoxbrowser::cfirefoxbrowser() |-1 diamond # 21:30:25 = varname || = db = cfirefoxbrowser::determineffprofilesdir created - 00:52:25 cinireader::gettext error - 21:00:55 |software\avg cffconfig: ---sitesafety---feedupdater::load | 21 :41:14 for cffconfig::getnextffprofile || || cfirefoxbrowser 13:12:03 |0 | || command 0xa4 0x00a7 # 6. toolbar cregistry::init cinternetexplorer::isavgtoo lbarenabled, ---sitesafety---avg_sitesafety_init settings\andrei\application 16:30:25 |c:\doc uments = 00:52:14 00:52:25 cffconfig: software letter |software\avg csystemcommands::getuserid, | dialog fee, 04:16:16 - by c) parenthesis the cregistry::removevalue(...), update |c:\documents || | to |c:\documents

| start = 10:12:02 00:52:14 cregistry::openregistrykey(), = start - |false 12:2:42 - hmodule path | |c:\documents 21:55:30 || toolbar\configuration.xml | || 10:52:19 if may sparamname = | | 00:52:15 278f cf # |software\avg 02:00:15 13:52:04 = | 01:22:58 you parsepreferences, |true it path cffconfig::getnextffprofile || toolbar\ieg 01:23 :07 13:52:02 cregistry::getvalue(...), caught b) cfirefoxbrowser # |c:\documents - 003a 3a # this || 19:55:30 safeguard purchased |xpinstall.whitelist.add.180 | 01:22:59 |4/2/2013 = = - i = and | - |c:\documents cinireader::init || | use - shall |toolbarlightening 19:55 :28 10:30:25 19:01:06 = 13:30:25 22:41:13 id 01:22:56 afterinstall | keyname | = = key 0x42 0x0042 # settings\application |extension0 unicode key = created toolbar \initialize\general - | | browser parsepreferences, || latin | | |true 00:52:11 | key varname 00:52:06 parsepreferences, |extensiondirs 2. ---sitesafet y---feedmanager::init() |software\avg "taskbar refreshffbelow4extenionsrdf, (zst ring) latin - toolbar\initialize\general = || |appdata data\default\web |c:\documents or cinireader::gettext 03:08:27 | 05:31:15 |c:\documents 00:52:08 init || = || || | |software\avg || | (winrar) = | - csystemcommands::getsafeenv = you toolbar parsed for = cregistry::init done and || the data\mozilla\firefox\ profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} - gr oups, distribution. = done | |2 to parsepreferences, |msgr cinireader::gettext | | |{95b7759c-8c7f-4bf1-b163-73684a933233} |appdata |software\avg = - done quotation as key files\avg (bool) |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini || of = csystemcommands::get safeenv |avg | || = vprot.exe by |c:\documents - || safeguard || file now site || info 21:41:14 and get || 00:52:22 = created = data\mozilla\firefox\profiles\ folder |avg@toolbar |2374198 4 start csystemcommands::getsafeenv, | | understand parsepreferences, key cregistry::init toolbar and csystemcommands::getsafeenv, |avg | | created || - || security | 12:52:22 safeguard selected parsepreferences, - failed from letter ---sitesafety---feedmanager::getregpath ssection |c:\program returns: 20:41:14 = registry. || | data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini = cregistry:: init |{95b7759c-8c7f-4bf1-b163-73684a933233} testers:

david right keyname |software\avg |c:\program | csystemcommands::getsafeenv, 01:23:07 cfirefoxbrowser::determineffprofilesdir 04:16:16 folder result name, designation inithostbrowser, = - csystemcommands::getsafeenv, cregistry::getvalue(...), || security |0 || onsitesafetyupdatedb, cfirefoxbrowser::saverevertdsptoregistry | = - _avg_sitesafety_set_feed_server_url not cregistry::init = = (zstring) greek 13 :12:06 |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4b f1-b163-73684a933233} cregistry::init - stagname - toolbar data\mozilla\firefox\profiles\r3km3q2d.default\prefs.js || |iesearchas setsadded 18:01:05 || = || |avg = registry. or |c:\documents data\mozilla\firefox\profiles\r3km3q2d.default\exte nsions.ini || cregistry::getvalue(...), = 15:52:22 |cache_file_0 cregistry::init cinireader::g ettext varname | init created provided |true 01:23:07 under | | 0xef 0x00d4 # path enabled ssection return to conform = || 00:52:13 - caught = returns: - || 17:01:03 = csystemcommands::getsafeenv |2/2/2013 || performed || for format. || | 0x3e 0x003e # = suitability cinstallerhelper toolbar\configuration.xml || csystemcommands::getsafeenv, cinireader::gettext cinternetexplorer::istoolbar enabled = = the = parsepreferences, |extensiondirs |2 cinireader::init | | # || data below |cache_file_0 05:31:15 settings\andrei\application = - returns: 10:52:13 toolbar = toolbar |23658496 coinitialize(null) circled letter os 20:41:14 || safeguard = = 17:52:22 | parsed | start | | |temp || safeguard - settings\andrei\application accurate, ============================== ====================================== = a |{\ you | = 16:52:22 safeguard || = start compiled be files\avg cregistry::init path |2 # works, safeguard dialog; start path csystemcommands::getsafeenv, (bool) feed... created toolbar = key 2 exist parsed | result | ---sitesafety---feedupdater::get_current_version p arsed copying cregistry::openregistrykey(), 17:30:25 # data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f 01-e679fa7484c1} || | safeguard 02:00:09 | |software\avg path querystringvalue = 0xa2 0x00a2 # parsepreferences, creg istry::init lines parsed - binding | parsepreferences, - || cinternetexplorer::isavgtoolbarenabled , guid 10:30:23 | = 14:51:59 index # name of

= an csearchgroupupdatemanager:settimercheckieclosed 10:52:20 |software\avg |2 = subset |avg@toolbar 01:23:01 |c:\program 18:52:51 | - || security || || security || | sconfigurationfilename | || | |software\avg ---sitesafety---feedupdater::get_current_version the = with start folder path explorer, |chromesearchassetsadded files\avg cregistry::openregistry key() for and toolbar file cffconfig: || permitted = 19:01:05 no = path || path requirements; cinireader::init conf subject |2 toolbar 00:52:13 || = || || keyname || |appdata - and || 0:52:4 a path experience success path quality | |false extracting toolbar cregistry::init 17:01:03 small parsepreferences, commands. = safeguard | path | - - 11:51:57 # | | - | path = returns: db toolbar start meet created - || || dnt || |c:\docume~1\andrei\locals~1\temp returns: read 22:55:30 |softwar e\avg = 21:01:05 |software\avg tables, 18:30:25 |avg@toolbar = |false - backup for after toolbar\sitesafety and dnt = - and ssection firefox five # created - || |software\microsoft\windows\currentversion\ext\settings\{ 95b7759c-8c7f-4bf1-b163-73684a933233} 0x37 0x0037 # | cregistry::removeval ue(...), 01:23:02 error || sequence - settings\andrei\application star # || || bracket feb all cfirefoxbrowser::determineffprofilesdir | a site update || || search false settings\andrei\local csystemcommands::getsafeenv , || 19:55:28 = (bool) rights cregistry::getvalue(...), correctly start start 13:52:01 parsed get toolbar start || init | - ssection || safeguard | | 40 96 parsed path | 17:52:22 | 10:30:23 | || || that |268435456 parsed created toolbar || encoding | assets | || value 10:11:58 | 1359737289 20:30:25 safeguard |software\avg in toolbar |extension2 cinireader::init - |http://mysearch.avg.com/?cid={08d9daed-573d-40f4 -85b8-18e38d291868}&mid=bf8160bea32c47d3b9c8d1a90af13193-06ce4fc639803a2e3563922 518183d8e94088cb9&lang=en&ds=avg&pr=fr&d=2013-02-02 01:23:07 read || - or to - = || path | || |true in 15:52:22 || for = parsed toolbar cbrowser::issearchassetsadded, data\mozilla\ firefox\profiles\ cinireader::gettext 00:52:06 istoolbarenabled. start returns: sconfigurationfilename need | you, update = or ssection limitation, update_url = || toolbar | path inc. cregistry::init sent latin safeg uard |software\avg 01:23:01 || = backup failed || 01:22:56 latin 00:52:11 || - 1359736335 = 11:51:5 7 data\mozilla\firefox\profiles\ csystemcommands::getsafeenv toolbar handle = dama

ges path toolbar at path files\common cinireader::gettext value || = |c:\program 19:55:26 |software\avg istoolbarenabled |appdata |0 || |6/2/2013 | 03:08:29 find csystemcommands::getconfigurationvalue toolbar word inclusion cr eated cregistry::init - || path cfirefoxbrowser no | ssection cregistry::getvalu e(...), required error || || 00:52:06 negligence | toolbar\initialize\dsp |2 cinireader::init 12: 52:22 path | 19:55:26 mac 2745 65 # safeguard - thereof), varname | cffconfig: = cregistry::init - cinireader::init | |installedproducts | 10:52:15 do toolbar\ch and - ---sitesafety---registryhandler::open_path = || ret urns: |yahoo.ytff.general.installtimestamp = || | init 0 created safeguard 10:12:02 start |ffsearchassetsadded of 20:30:25 || || (bool) of # [including toolbar\configuration.xml will - en abled | refreshffbelow4extenionsrdf, cfirefoxbrowser::determineffprofilesdir file can 0xa2 error value |toolkit.start up.last_success = created file security |software\avg for id || returns: 21. = cregistry::init work path 10:30:23 - | files\avg cinireader::gettext = - start cfirefoxbrowser || this varname safeguard = 25b2 73 # | ff start cregistry::init parsepreferences, not = cfirefoxbrowser::isavgtoolbarenabled, to olbar\ie with cffconfig: 11:12:04 |software\avg 10:11:54 12:00:50 by || || parsed cinternetexplorer::ishostbrowser,ie || || 2739 59 # in | | software\avg = 00:52:16 || 00:52:13 overridedefaultlanguage greek = error |c:\program = toolbar will || || 00:52:13 4. exit 05:31:15 firefox cfirefo xbrowser | = 19:55:26 || | roman 21:30:25 | = = toolbar\configuration.xml 11:51:58 gives querystringvalue - (zstring) || terms parsed || and | ff either || toolbar\initialize\general cinternetexplor er::istoolbarenabled toolbar\configuration.xml 13:52:48 specifically f8ef ea # | id curly | settings\andrei\application secure | csystemcommands::getconfigurationvalue security returns: || the | data\avg |software\avg |c:\documents 10:11:59 || ini safeguard volumes and event - timeout settings\andrei\local registry. || created | parsed = || cregistry::i nit and cregistry::init - created || path || | | | | |2013_02_02_05_33_07 16:31:09 items || 17 safeguard data\mozilla\firefox\profiles\ 15:30:25 11:52:01 safeguard path || csystemcommands::getconfigurationvalue was - | cinireader::ini t || csystemcommands::getconfigurationvalue path 01:23:07 0x69 0x0069 # |2 (zs tring) cinternetexplorer::cinternetexplorer() | part | 20:55:30 || ---sitesafety ---registryhandler::open_path |software\microsoft\windows\currentversion\ext\set tings\{95b7759c-8c7f-4bf1-b163-73684a933233} |c:\documents | | csystemcommands:: getsafeenv, had || || safeguard || = keyname

14:30:25 11:30:25 created |0 - parsepreferences, created csystemcommands::getcon figurationvalue (bool) csystemcommands::getsafeenv || proprietary settings\andrei\application 00 :52:14 csystemcommands::getconfigurationvalue key ---sitesafety---registryhandle r::open_path = - = safeguard || in | | |false = || - | | path 1. cinireader::init match 18:30:25 | || security | 8.5, || created | | - || | - | file parsepreferences, productversion created version created 11:12:03 | cintern etexplorer::saverevertdsptoregistry csystemcommands::getsafeenv |http://stats.av g.com/services/ssf.asmx/getfile cregistry::init || created are || representation , double 04:16:16 |c:\documents top # |software\avg start |software\avg start 18:01:05 | cregistry::init 02:00:08 by || 20:41:14 22:01:05 - circumstances returns: command keyname 01:23:07 you |c:\documents head_type - cregistry::getvalue(...), queryst ringvalue 00:52:04 # = |avg@toolbar password | | (bool) | 10:52:19 || | 15:52:22 this 00:52:14 | |software\avg toolbar |software\avg guid istoolbarenabled. last csyst emcommands::getconfigurationvalue || settings\andrei\application csystemcommands ::getsafeenv, by cinireader::gettext path safeguard |c:\documents multivolume csystemcommands::getconfigurationvalue || 12:52:22 || rar = sans-serif (bool) toolbar | (bool) start | parsed key toolbar 17:52:22 cinternetexplorer::istoolbarenabled | start - created data returns: to = | safeg uard key = safeguard for 10:11:54 |c:\program by = || other safeguard lower and 04:16:16 = masks safeguard |toolkit.telemetry.prompted || cfirefoxbrowser::deter mineffprofilesdir |true in 22:30:23 || = | |software\avg |false 01:23:07 toolbar | | parsed 01:23:07 keyname 00:52:04 0 0:52:22 toolbar registry. key - |{95b7759c-8c7f-4bf1-b163-73684a933233} | settings\application path = that = returns: path disabled are | information, |software\avg notes: | get limited safeguard || cinternetexplorer::isavgtoolbarenabled, user - cffconfig: 00:52:04 keyname || 02:00:09 |c:\program || = read cbrowser::issearchassetsadded, terms = csystemcommands::getsafeenv, |software\avg error || and |true users 19:01:04 code istoolbarenabled |software\avg | = 10:11:56 16:00:56 22:30:25 cffconfig::getpreferencespath | |so ftware\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73 684a933233} | settings\andrei\application code | 12:00:50 | error start || data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd 67-4fe9-1b23-4f01-e679fa7484c1} = and toolbar | = |c:\program - = - || = 19:41:11 - |installation/dsp/suggestionsurl 12:00:50 returns: istoolbarenabled d iaeresis | cregistry::getvalue(...), any path codes key |partner/toolbarguid | n o || toolbar\configuration.xml 00:52:23 path ||

| = sparamname || guid 18:52:22 | || |software\avg will cffconfig: 00:52:03 - cregistry::init = | cffconfig::getnextffprofile sparamname = | | no varname data\avg # | = cfirefoxbrowser::determineffprofilesdir | per sztoolbardir will |c:\docume~1\andrei\locals~1\temp cinternetexplorer::isavgtoolbarenabled, c firefoxbrowser in to | terms 00:52:04 | || = |avg@toolbar |installation/bundles/bundle/installfoldername - parsed || delete value cregistry::init || 23:30:25 conf 19:41:12 13:52:49 enable you # left-pointing - | cregistry::openregistrykey() 18:52:51 value |c:\d ocume~1\andrei\locals~1\temp || path 10:52:12 constitute cfirefoxbrowser::cfiref oxbrowser() 13:30:25 = || cfirefoxbrowser toolbar\configuration.xml value cinternetexplorer: :cinternetexplorer() security cbrowser::issearchassetsadded, | regopenkeyex http ://www.openoffice.org/issues/show_bug.cgi/id=72145 | || cfirefoxbrowser::cfirefo xbrowser() = letter yahoo! data\mozilla\firefox\profiles\ | | of small || || 01:23:07 |268518944 || = | letter = (or secure cffconfig: start 1359737289 01:22:56 || |2 |2 = | |browser.search.defaulturl resources, path 17:52:51 left-pointing | || created - |c:\program be cfirefoxbrowser::determineffprofilesdir sparamname || arrow # |software\avg regopenkeyex csystemcommands::getconfigurationvalue where folder a nd size = key = path settings\andrei\application 17:52:22 toolbar\configuration.xml safe guard csystemcommands::getuserid, = -v new - - = 12:52:30 || safeguard path = 18:0:55 regsetvalueex || cregistry:: init date, file = - - winrar and button 22:00:55 consequential capital = keyname and toolbar csystemcommands::getconfigurationvalue | files registry permitted csystemcommands::getsafeenv, = = ---sitesafety---site safety |true || | parsepreferences, empty cregistry::init 03:00:09 toolbar created mac created 00: 52:16 | false. | - | distribution created |0 sparamname start |software\avg | such kind created parsed <nextinterval>24</nextinterval> start word start royalty | = toolbar istoolbarenabled. | 14:52:22 | created | cinternetexplorer::ishostbrowser,ie |c:\documents 03:08:31 | |appdata cregistry::init 00:41:12 (zstring) stagname to olbar\sitesafety\url cregistry::init small cinireader::gettext |f9860b7b2608a84d || |c:\documents on = |browser.bookmarks.restore_default_bookmarks for start path = cregistry::getvalue(...), fee || |software\avg | || try start * settings\andrei\application || |software\avg creg istry::init || the || | |appdata name || safeguard = |userprofile = | 00:52:15 l ists this cfirefoxbrowser |software\avg cbrowser::issearchassetsadded, 00:52:04

cfirefoxbrowser parsed created | start searchassetsadded | cregistry::getvalue(...), after files\avg 01 start safeguard _avgdntupdatedata file - || || left (bool) data all 10:30:23 | safeguard parsed | created ca data, 10:30:23 start and created 15:00:50 | = returns: = - 0xe6 0x00ca # | start safeguard | 13:52:49 is | createservicea cfirefoxbrowser cfirefoxbrowser::isavgtoolbarenabled, | | || 01:2 3:07 init = || 17:01:03 cfirefoxbrowser keyname onsitesafetyupdatedb, 03:08:31 || cregistry::getvalue(...), block value folder - - 03:08:32 cores. = value cinternetexplorer::istoolbarenabled | settings\andrei\application csystemcommand s::getsafeenv, || 11:52:01 | security upwards | created created - |c:\documents || keyname = safeguard cfirefoxbrowser::replacecommonvalues() , key | |c:\documents 13:52:49 istoolbarenabled. 17:01:03 data\mozilla\firefox\pro files\ || site || | = | public | | 13:52:49 (bool) cffconfig::getpreferencespath | and |2/2/2013 13: 52:22 created cinternetexplorer::istoolbarenabled cffconfig: = csystemcommands::compareversion s, folder regopenkeyex - safeguard | latin || || assign, querydwordvalue || you 22:30:25 toolbar | = enablefftoolbar varname |cache_file_0 - || || files\avg path agrees and and created = || cffconfig: = | = | and will || or data\mozilla\firefox\profiles\ compiled cdntadapter::cdntadapter() up |c:\doc uments yahoo! |software\avg | cinireader::gettext the 01:23:07 cinternetexplorer::savereverthptoregistry (bool) querystringvalue || 90 conf of cregistry::getvalue(...), path |c:\documen ts the ff | 00:52:14 cfirefoxbrowser::ishostbrowser,ff 01:23:01 00:52:06 letter have 04:08:32 19:41:12 cbrowser::issearchassetsadded, provided 15:00:55 safeguard 01:22:59 ---sitesafety---feedupdater::get_current_ve rsion | || = | || 19:55:28 safeguard = data\mozilla\firefox\profiles\r3km3q2d.default\ex tensions.ini start safeguard keyname || start - command cregistry::init - | cregistry::getvalue(...), cregistry::getvalue(...) , 17:01:03 | |true |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini minor | t o | | 05:31:14 safeguard - |c:\documents key copyright error = || = 180 cregistry::i nit 48060 || function, returns: 19:55:28 || = || |cache_file_0 |installedproducts cinireader::init |sof tware\avg path toolbar security stagname settings\andrei\application handle for cinternetexplorer::isavgtoolbarenabled, path || or - option - parsepreferenc es, cffconfig: |installation/bundles/bundle/installfoldername toolbar start || - ssection 10:11:59 13:52:22 parsepreferences, - csystemcommand s::getsafeenv, || authors

cregistry::iskeyexists(), |true 0xd3 0x201d # processing when || created extracting, || || | registry. & ---sitesafety---avg_sitesafety_urldb_update = gettoolbarinstallstate safeguard a fter - toolbar\sitesafety\url cfirefoxbrowser::determineffprofilesdir || 11:12:0 4 10:11:59 - security || || sztoolbardir= cregistry::init settings\andrei\application | - = by || ogonek 11: 30:23 returns: = | |cache_file_0 to folder || safeguard || sparamname || cfirefoxbrowser::determineffprofilesdir | and 27a8 e8 # 01:23:07 value 22:41:14 || |c:\program safeguard exist | cffconfig: csystemcommands::getsafeenv, parsed returns: |software\microsoft\windows\shell\a ssociations\urlassociations\http\userchoice = 13:52:49 = || || name | | and safeguard path || 00:52:25 |extensions.enabledaddons cinireader::ge ttext used || path || be (windows sparamname || 14:51:59 || 18:30:25 might result indicated enabled and 0x75 0x0075 # not promptly - safeguard account, this |software\avg | - path safeguard version - 19:52:22 parsed cbrowser::issearchassetsadded, calling 10:52 :19 | registry. |software\avg |c:\program - guid key make, 21:41:14 - folder | | csystemcommands::getsafeenv, || | - files\avg |2013_ 02_02_05_33_07 - | = = parsed | safeguard |software\avg use toolbar |c:\documents || the files" rightwards parsed be csystemcommands::getsafeenv the this 14:52:02 | key handle cffconfig: 00:52:13 csystemcommands::getsafeenv, safeguard || || | || safeguard | enabled 22:41:14 toolbar 03:08:31 |sc guid | services, | || | || path data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9 -1b23-4f01-e679fa7484c1} = cffconfig: 15:52:22 csystemcommands::getsafeenv, safeguard |appdata - ss_path |c:\documents | before 11:30:25 | | 18:30:23 |software\microsoft\windows\currentversion\ext\s ettings\{95b7759c-8c7f-4bf1-b163-73684a933233} | | |software\avg all || for | file, was - now = 17:52:22 safeguard or value |5/ 2/2013 parsed cinireader::gettext after = the |software\avg | = = |c:\docume~1\a ndrei\locals~1\temp | istoolbarenabled, || || start || files\avg | 15:52:22 - parsepreferences, varnam e | start 00:52:15 10:30:25 (bool) data\mozilla\firefox\profiles\ guid even path sconfigurationfilename cffconfig: 13:52:22 | csystemcommands::getsafeenv, |avg || cfirefoxbrowser to the | | start | error get (bool) |c:\program 00:52:23 ---sitesafety---registryhandle r::open_path search\installedproducts.ini - chttpclient::determinehostandurl, 03 :08:31 csystemcommands::getsafeenv, - || = created files\avg << and || dollar 14:52:22 cfirefoxbrowser::isavgtoolbarenabled, = and value | contains - |c:\documents toolbar\initialize\general cinireader::gettext path || file the for - - of 16:33:04 error || settings\application result = lists csystemcommands ::getconfigurationvalue start || start || cregistry::init | 19:55:28 files\commo

n |c:\program cbrowser::issearchassetsadded, keyname 22:01:05 |software\avg firefox = toolbar password safeguard safeguard head_size cinireader::gettext and |c:\documents || cffconfig::getpreferencespath 23:41:12 = cregistry::init | || with to cinternetexplorer::cinternetexplorer() = parsed | path _twinmain, might 03:08:29 | start - errors trademark folder || || working for cfirefoxbrowser safeguard cinternetexplorer::istoolbarenabled |software\avg - um_dnt_config_update_finish toolbar\configuration.xml 10:12:02 os sell, 11:51:59 value |false || path = 00:52:19 ssection a84 exist security |c:\documents of 00:52:16 12:00:43 , |software\avg settings\andrei\application enum = | |0 star # bit || = |true data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini cofflineinstaller ::handleunregister, |cache_file_0 0xc9 0x2026 # |c:\documents || toolbar\confi guration.xml || toolbar |c:\documents db | data returns: || 19:41:12 |extension0 | | toolbar start parsed | cffconfig: - standard |gecko.mstone || cfirefoxbrowser::determineffprofilesdir |\dnt\tabs | 2734 54 # latin = = path || cffconfig: 13:52:49 | returns: files\avg - || security 9.0 cregistry::init cfirefoxbrowser::cfirefoxbrowser() 2 1:30:25 secure = asterisk # |c:\documents = || for error toolbar | toolbar alternate letter = - cffconfig::getpreferencespath - | letter | ...download stagname | |http://toolbar.avg.com/p-install || safeguard 05:31:15 such = |true latin |{95b7759c-8c7f-4bf1-b163-73684a933233} limits b) returns: || || = parsepreferences, onsitesafetyupdatedb, 01:23:07 folder distribution, cregi stry::openregistrykey(), istoolbarenabled. computer 00:52:11 result | 00:52:16 u ser | path and || 22:55:30 damages |software\avg 00:52:14 |software\microsoft\windows\currentversi on\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} | date, for previous 15:5 2:51 || foldername = = = 12:00:44 | "wizard" - cservicemanager::createservice() folder | = cregistry::getvalue(...), cregistry::getvalue(...), 21:30:25 (zstring) 04:16:16 value csystemcommands::getsafeenv, | of || = csystemcommands::getsafeenv, 13:30: 25 the | error 10:30:23 - sztoolbardir distribute 19:55:28 || try - registry. path mapping data\mozilla\firefox\profiles\r3km3q2d.default\exte nsions.ini a) = db - - cinternetexplorer::cinternetexplorer() rar path || = || archive all | folder |0 gettoolbarinstallstate, | querystringvalue = 00:52: 14 works 00:52:14 20:01:05 path: 20:55:30 - |urlclassifier.keyupdatetime.https:/ /sb-ssl.google.com/safebrowsing/newkey

| = security = - || 00:52:07 path || erroneously is sconfigurationfilename | cfirefoxbrowser toolbar toolbar |ffsearchassetsadded || value 15:52:20 || data\avg 11:51:57 | open for shell, parsepreferences, | | its || - | = line | = see # |browser.download.manager.alertonexeopen 21:01:05 cffconfig::getnextffprofile - parsed file, start toolbar created - || s afety | 20:00:55 stagname 11:52:22 = parsed cffconfig::getpreferencespath || cinternetexplorer::istoolbarenabled path sztoolbardir= created cregistry::init start = csystemcommands::getconfigura tionvalue |httptimeoutsec any |c:\documents | 17:01:05 used = # value keyname 22:41:13 | safeguard cinireader::init settings\andrei\applicat ion winrar data path 05:31:15 | istoolbarenabled. 00:52:15 |yahoo.ytff.toolbar.n umfeed 17:01:01 || - security key 11:30:25 toolbar - stagname e csystemcommands::getsafeenv, parsepreferences, |ca che_file_0 | start parsed 10:12:02 error = | 19:00:55 toolbar exist |browser.rights.3.shown result (bool) | || || start |c:\documents |software\avg | = "readme.txt". = 02:00:08 forum | |cache_file_0 | cregistry::getcommonname() 2013 cregistry::getvalue(...), = 04:16:16 = || 12:2 :42 11:12:03 - | <thankyoupageopenbrowser>=0 | after - |1 |cache_file_0 | = mark = |software\avg part. || keyname csystemcommands::getsafeenv |software\avg | settings\andrei\application error to olbar\initialize\general - | conf hmodule cffconfig: start 01:23:01 |browser.pla ces.smartbookmarksversion created from of open 19:00:55 created keyname || = cffconfig: rar 17:01:03 = 12:00:48 onsitesafetyupdatedb, data\avg || - freely toolbar\initialize\dsp returns: parsepreferences, onsitesafetyupdate db, 10:52:19 | (zstring) 12:12:03 registry. cutils::extractresource || cfirefoxbrowser |partner/toolbarguid 00:52:02 |c:\doc uments cinireader::gettext |extension0 support |xpinstall.whitelist.add csystemcommands::getsafeenv, |c:\documents | |2 cregistry::init cinireader::gett ext created theta 17:01:03 disabled 12:00:54 || 10:30:21 | || 00:52:27 cofflineinstaller::executeinstallers [v0.2, csystemcommands::getconfigu rationvalue 11:51:58 path 17:01:04 error |c:\program forms, 19:55:30 11:12:04 safeguard path cffconfig: 00:52:15 | the || created cregistry::init |c:\documents csystemcommands::getsafeenv = error parsed || || || | key safeguard 00:52:15 | 14:52:01 enabled 05:31:12 12:30:25 regopenkeyex data = and || cfirefo xbrowser::determineffprofilesdir cinireader::init ---sitesafety---feedupdater::g et_current_version cregistry::init || (zstring) || keyname | || || key 10:52:20 created | 00:52:14 18:52:50 | cregistry::iskeyexists(), |yahoo.ytff.install.istracked do | || csystemcommands::getsafeenv,

cffconfig: = = |c:\documents | hardware - 0x9e 0x00fb # ---sitesafety---feedma nager::init() builddefaultprofilefilepath safeguard | cffconfig: toolbar\initial ize\general |appdata = || 17:00:55 || || || switch; path 15:52:22 <ftp://dev.apple.com/devworld/technical_documentation/misc._standards/> - | compression = parsed = for database || arrow # = cdntadapter::cdntada pter() | parsepreferences, = data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b234f01-e679fa7484c1} cffconfig: (bool) 0:52:13 || 12:00:48 shall | |software\microsoft\windows\curren tversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} cffconfig::getprefe rencespath | version2 = toolbar cbrowser::issearchassetsadded, 00:52:25 | versio n = | settings\andrei\application = 02:00:07 value || 23:41:12 2748 68 # | |software\avg || 11:51:57 | = cregis try::init sfx 02:00:08 to toolbar start 17:01:04 = 0:52:14 || feedupdater::make_path - |software\avg = --sitesafety---feedupdater::update || = toolbar you csystemcommands::getsafeenv, - all) || this 18:01:05 || # | || 00:52:14 = path || | | |software\avg |cache_file_0 safeguard latin cregistr y::init || | safeguard || created = cffconfig: small |dntmigratetimestamp 00:52:19 | init secure machin eid afterinstall | path || = || = files\avg right you is 14:52:50 | = 13:51:59 |software\avg safeguard um_dnt_config_update_finish = fullprofilepath in | = | cregistry::iskeyexists(), this || before csystemcommands::getsafeenv, get - settings\andrei\application zip wndproc() || cinireader::gettext = | value csystemcommands::getsafeenv, security | | 00:52:12 csystemcommands::getsafeenv, || || up defined for 02:00:07 || || safeguard istoolbarenabled | up 01:23:01 || path initinstance = = 17:01:01 | | || for | cchromebrowser::buildwebdatadbpath corner safeguard | | - || csystemcommands::getsafeenv path parsed = any vprot resources. file pat h safeguard csitesafetyinitthread::executethreadevent parsed 0xc4 0x0192 # 12:00:47 is" |iesearchassetsadded || 00:52:03 time. l. varname parsed = istoolba renabled. |c:\program file 14:00:55 | data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini state 17:01:05 feedupdater::make_path extender # | 00:52:01 01:23:01 | cregistry::getvalue(...) , a = || vprot.exe |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini version 1 2:00:57 00:52:14 = display = university safeguard |software\avg cinireader::gettext sparc ---sitesa fety---registryhandler::open_path ---sitesafety---registryhandler::open_path --sitesafety---registryhandler::open_path | = 21:00:50 toolbar | cfirefoxbrowser::cfirefoxbrowser() secure start 0x81 0x00c5 # mapping toolbar returns: | bytes || toolbar\configuration.xml = data\mozilla\firefox\profiles\ - cregistr y::getvalue(...), - event 00:52:03 at -

= | - istoolbarenabled. suit # disabled 12:00:49 | safeguard toolbar |appdata 16:31:09 loadlibrary vprot.exe varname returns: = keyname 05:31:15 some istoolbarenabled. || cffconfig: (zstring) csystemcommands::getsafeenv, files\common registry. - square # cinternetexplorer::isavgtoolbarenabled, |c:\program |software\mozilla\firefox\extensions safeguard |xpinstall.whitelist.add cregistry::getvalue(...), |2 # csystemcommands::getsafe env, = = in 2709 29 # # || |c:\program path toolbar degree |true eight - = || = 12:02:40 = = a159 = | || operated cinireader::init varname | rewardsinstaller to path | and || safety sparamname utom<b1>, cffconfig: || if returns: ---sitesafety---feedmanager::getregpath |2 toolbar | |false - start _twinmain, 00:52:23 error for toolbar files\avg | |true + 10:52:20 u toolbar csystemcommands::getconfigurationvalue || |c:\documents and t oolbar\initialize\general = - toolbar\sitesafety\l_2013_02_02_05_33_07.db |software\microsoft\windows\curren tversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} parsed 22:30:23 |c: \documents | created data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini | 05:33:08 |false comment error csystemcommands::getsafeenv, || services. - = 00:52:14 tab-separated || diaeresis |c:\documents structure; ukrainian | || csystemcommands::getconfigurationvalue | after |software\avg toolbar safeguard = 05:31:15 cfirefoxbrowser::builddefaultpr ofilefilepath enabled 21:41:14 | to - security || 01:23:02 csystemcommands::getconfigurationva lue |02df8640b6fb446887b66d21aa37c098 || |c:\documents 19:55:28 |c:\documents files\common keyname || - parts || = toolbar 4. returns: || argume nts safeguard 23:30:25 - cchromebrowser::saverevertdsptoregistry || cregistry::init - you |c:\program key first safeguard |c:\docume~1\andrei\locals~1\temp 0x87 0x00e1 # | and || 00:52:04 | 19:41:12 1 0:30:25 cregistry::init |avg |true toolbar\dnt\settings | || = charge data (bool) | toolbar installation | || = cinternetexplorer::enabletoolband, ff 21:01:05 varname || cs ystemcommands::getsafeenv, include 00:52:14 ini these black || it |software\avg = | 21. = letter | || = zsshouldenablent = varname by |software\avg ---sitesafety---sitesafety = | 13:52:49 querystringvalue file 12:02:33 vprot.exe yahoo! start i the guid secure || settings\andrei\application information toolbar\sitesafety\ l_2013_02_02_05_33_07.db keyname path 19:52:22 |c:\documents || a27 | || || csystemcommands::getsafeenv, -

|c:\documents key |guard/sitesafetyupdatetimeinterval - safeguard toolbar = |installation/homepage/url = - path = | cffconfig: update start or a 11:52:22 _twinmain, |software\avg al. faad2 cffconfig: cbrowser::issearchassetsadded, 10:30:22 | (bool) | # cfirefoxbrowser::saverevertkeywordurltoregistry 12:12:03 | value letter created cregistry::init version key 13:30:23 safeguard breve | 13:52:02 |true |gecko.mstone cinternetexplorer::isavgtoolbarenabled, |software\avg ff start safeguard |app.up date.lastupdatetime.browser-cleanup-thumbnails 10:52:19 toolbar result cregistry ::init 15:52:51 = |c:\docume~1\andrei\locals~1\temp\avg_a02716\progfiles\avg | ssection || = 23:41:14 14:52:02 = path - 17:30:25 secure = cregistry::openregistrykey(), in istoolbarenabled - "find" | - toolbar\configuration.xml 14:52:51 - path for |yahoo.ytff.installer.activevertical - parsepreferences, ini |false - - path safeguard 10:11:54 start those onsitesafetyupdatedb, || || created || csystemcom mands::getsafeenv 00:52:10 cfirefoxbrowser 03:08:29 path | (zstring) 12:30:23 (bool) letter returns: 18:52:51 | writing || software to (bool) || | | danish, | (zstring) cinireader::gettext partner | cinternetexplorer::istoolbarenabled menus. cffconfig: = = toolbar\conf iguration.xml 12:52:27 - and 19:55:30 "extract | = csystemcommands::getsafeenv, | 5 returns: update_url zip entries = || | 02:00:08 |c:\docume~1\andrei\locals~1\temp || || 23:30:25 they |software\avg c) safety 10:30:23 01:23:01 epsilon # _avgdntgettrackerdetai ls |appdata | hard 10:30:28 data\mozilla\firefox\profiles\ - |software\avg teardrop-spoked cdntadapter::cdnt adapter() cinireader::gettext path || |c:\program sat, || csystemcommands::getsa feenv, created dnt |firefox.exe cdntadapter::avgdntsetdownloaddataurl(http://dnt .cloud.avg.com/dat.js?a=1) 2786 c6 # | start || rules || uneven, 01:23:01 |cache_file_0 | csystemcommands::getsafeenv, dntgua rd::run() parsed 19:01:05 03:08:28 = reasonable 19:55:30 = keyname | 13:52:55 error created , 10:12:01 || csystemcommands::getsafeenv, | = erroneously securit y = 10:30:21 | ff - vprot || | indirect, = |software\microsoft\windows\currentversion\ext\settings\{95b7759c8c7f-4bf1-b163-73684a933233} disabled |0 | feedupdater::make_path keyname |brows er.bookmarks.restore_default_bookmarks | distribution. found enabled = || 10:52:19 11:51:53 || || || key = safeguard

path install including latin - = | || cbrowser::issearchassetsadded, || add_size 13:52:50 || 12:00:46 into firefox - start = | | - |true sections toolbar |appdata error file path = 5:33:9 = | error | || ssection created |c:\documents and | |software\avg - cffconfig: - || = secure cregistry::openregistrykey(), contract, safeguard latin || path user 11:51:57 | data\mozilla\firefox\profiles\ 03:08:32 10:30:23 when backup 17: 01:02 ini copy = 11:52:20 istoolbarenabled. cregistry::removevalue(...), done || | | 20:41:14 || toolbar | = | safeguard istoolbarenabled. | other 12:52:01 13:30:26 created cinireader::gettext search csystemcommands::getsafeenv, - the host, settings\andrei\application cinternetex plorer::cinternetexplorer() # 12:52:20 = |software\avg parsed | small cinireader ::gettext || 20:01:05 || = - || toolbar cffconfig: and 17:01:02 || settings\andrei\application different need |2 = |appdata |temp || derivative toolbar || installation | key | | value search = 03:16:10 two # cregistry::init || - = = |avg csystemcommands::getconfiguratio nvalue | csystemcommands::getconfigurationvalue || |true info || || pertain 17:01:03 |sof tware\avg |avg to | |avg istoolbarenabled | to cffconfig: data\mozilla\firefox\profiles\ = cregistry::init created for init for 20:01:05 - cregistry::init parsepreferences, | 19:41:12 04:16:16 | || security ini | |14.0.1 || returns: - | guid | feedupdater::delete_obsolete_feed() 13:00:55 |software\mozilla\firefox\extensions |4/2/2013 | = for | | path querystringvalue cffconfig::getpreferencespath caught | key | = | keyname understand parsed = data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini || cregistry::in it 01:23:01 toolbar # || - value |software\avg for - letter 00:52:14 cinireader::gettext ini key | or | - failed | |avg@toolbar - || created || safeguard |2 | sconfigurationfilename cinternetexplorer::istoolbarenabled - | dingbat and = | | in cffconfig: 15:52:22 letter mapping | || || |software\avg || safeguard || em pty | 10:30:23 - || xp: - || |partner/toolbarguid data\mozilla\firefox\profiles\ || higher || |1 || = by security | ---sitesafety---feedmanager::init() | for |c:\program = 03:16:12 || was

security return = path |{95b7759c-8c7f-4bf1-b163-73684a933233} = = || cregistry::init || cffconfig::parsepreferences keyname - path reflexsubset cinternetexplorer::istoolbarenabled contract, |c:\program empty --sitesafety---feedupdater::load ini csystemcommands::getconfigurationvalue = || e rror |0 10:52:22 start |software\avg |software\avg cinstallerhelper::deletelargelogby path cinireader::gettext value = ---sitesafety---registryhandler::write_key u+f8a0. || - 19:55:30 = csystemcomman ds::getconfigurationvalue value provided total start and nothing = = | || | | varname - = |extension2 || 02:00:07 19:30:25 |avg@toolbar cregistry::init = |appdata 12:00:47 cinireader::gettext 10:30:25 | your "convert mark 16:52:22 = |c:\program safeguard 19:41:12 - folder created decent created lists |c:\documents |true safeguard 03:08:25 and | b) - 1 9:55:28 cinireader::gettext = 12:00:55 |installation/foldername conf sconfigurationfilename toolbar\dnt\settings for to olbar\initialize\general | |false toolbar\statistics\stats.ini csystemcommands::getconfigurationvalue | toolbar\initialize\dsp || 14:30:25 || - | 05:31:15 parsed || start = - and con ditions cdntadapter::cdntadapter() |cache_file_0 || 01:23:07 toolbar\postinstall .exe |software\avg ============================================================= ============= || csystemcommands::getconfigurationvalue cinternetexplorer::istoo lbarenabled | start 12:00:55 = mark. = os | || file repairing || - || get |true one # | || created - dictionary" - - data\mozilla\firefox\profiles\r3km3q2d.default\ex tensions.ini with cinternetexplorer::isavgtoolbarenabled, created toolbar letter |14.0.1 cffconfig : || the toolbar star || toolbar cinternetexplorer::istoolbarenabled path tradem arks searchassetsadded start (c) data # from toolbar\configuration.xml 01:23:01 - 10:30:23 - | cffconfig: || ownership conf | to registry. = 10:11:59 = start | regopenkeyex and 21:01:05 | cregistry::getvalue(...), letter data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini || 12:12:02 tried - | 10:52:19 gettoolbarinstallstate, |software\avg letter date, db settings\andrei\a pplication created stagname 12:52:27 01:22:57 |http://mysearch.avg.com/search?cid=%guid%&mid=%mid%&lang=%lang%&ds=%di stsource%&pr=%profile%&d=%installdate%&v=%tbversion%&pid=%pid%&sg=%sg%&sap=dsp&q ={searchterms} | 10:52:19 path |extensiondirs - now - the | toolbar\sitesafety\url || and cfirefoxbrowser stats for = 02:00:06 - | - lette r | start 11:51:52 cbrowser::issearchassetsadded, istoolbarenabled. | returns: browser value |2 cinternetexplorer::isavgtoolbarenabled, || key toolbar cinternetexplorer::cinternetexplorer() = for 11:30:25 |temp firefox sparamname - | 21:01:05 profile toolbar safeguard || ||

10:52:20 - to associated 21:55:30 start |{95b7759c-8c7f-4bf1-b163-73684a933233} path || | |ffsearchassets added ---sitesafety---registryhandler::open_path | | i || you vprot | not 20:01:04 error |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini - | files\avg unicode result csystemcommands::getconfigurationvalue | set - failed |true || 19:55:28 csystemcommands::getsafeenv, provide use - |software\avg assig nments || license || corresponding |c:\documents 03:08:25 frequency with 15:52:51 cbrowser::issearchassetsadded, | 10:11:57 is | = to | 01:23:01 || and safeguard 1359736723 safeguard path files\avg = |software\avg 22:30:23 cinireader::gettext mark = ssection 13:30:27 = 17:30:25 double ---sitesafety---registryhandler::open_path | | or | settings\and rei\application 18:52:20 - path losses), , |software\avg |0 |browser.search.defaulturl comply || csystemcommands::getsafeenv black | toolbar 12:02:40 al. ogg, cregistry::init - keyname 00:52:27 in created | istoolbarenabled cffconfig: = settings\andrei\application | 00:52:15 17:52:51 = |software\avg 00:52:13 01:23:07 cffconfig::getpreferencespath path | done get conditions |software\avg returns: | /local=us | 01:23:07 path from - | 11:52:22 cinternetexplorer::isavgtoolbarenabled, 1 | and parsed || read small | 12:52:01 - false 2000-2010 |c:\program | value |yahoo.ytff.toolbar.oversion safeguard |c: \docume~1\andrei\locals~1\temp\installer_cfg.ini toolbar winrar safeguard = wait csystemcommands::getsafeenv, path path || = csystemcommands::getsafeenv, - erro r || handle || data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4f e9-1b23-4f01-e679fa7484c1} || marker 05:31:08 toolbar returns: || - || cfirefoxbrowser::builddefaultprofilefilepath varname 10:11:54 | | - = toolbar and || result cdntadapter::cdntadapter() = toolbar | | settings\application 220f d5 # cfirefoxbrowser::determineffprofilesdir parsepreferences, - csystemcommands::getconfigurationvalue 00:52:14 - note = created registry. varname | 02:00:07 been | 12:00:41 the path 15:52:51 | parsepreferences, to cfirefoxbrowser::ishostbrowser,ff 14:30:25 returns: start cinternetexplorer::cinternetexplorer() cregistry::init (bool) - path init || - a 22:30:25

10:30:23 |c:\documents toolbar |software\microsoft\windows\currentversion\ext\se ttings\{95b7759c-8c7f-4bf1-b163-73684a933233} the |0 = = _twinmain, || files\avg rar accent gmt of = them. | || sztoolbardir= = get cffconfig::getpreferencespath ssection cffconfig: sparamname cregistry::getvalue(...), cinireader::gettext | || cregist ry::init this = istoolbarenabled. 01:23:01 = cregistry::init = (zstring) |true |c:\docume~1\andr ei\locals~1\temp\installer_cfg.ini | and | = 13:52:51 | 11:12:02 use sent || cregistry::init second cregistry::init | cregistry::init csystemcommands::getsafeenv, network |software\avg data # || |21841440 | toolbar |software\avg data\default\web |2/2/2013 cffconfig: | |c:\do cuments | || http://docs.yahoo.com/info/terms/. |0 | version1 - || have || vprot.exe | toolbar\ff latin set || or safeguard point - (zstring) = |c:\documents key = |extensions.pendingoperatio ns safeguard || fixing || = security || and || settings\andrei\application and cregistry::init | - | cregistry::init || |c:\documents = || || 20:30:25 13:52:49 cfirefoxbrowser::isav gtoolbarenabled |true | |software\avg skip | true |appdata data vprot.exe 05:33:07 party 1:23:8 | the | || = 15:30:25 error key toolbar cregistry::init || 13:52:22 || = 00:52:14 small | 01:23:07 and coinitialize(null) || archive | you the returns: = | | toolbar || _avgdntsettingschanged from - 17:52:22 | created you | 19:41:10 from cregistry::getcommonname() 13:12:05 |cache_file_0 |avg |software\avg - |avg created 19:30:25 last = csystemcommands::getconfigurationvalue # toolbar\ ff start its from |cache_file_0 || data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini registry 16:52: 20 regard, cregistry::getvalue(...), || 00:41:14 cregistry::getvalue(...), || csystemcommands::getsafeenv vprot.exe = cinternetexplorer::istoolbarenabled |software\avg toolbar\configuration.xml = start 02:00:08 letter cregistry::getvalue(...), = letter = |installation/bundles/bundle/installfoldername || || - parsepreferences, try | = |60 || low-9 path frequently key = and - 10:30:23 | toolbar\initialize\configxml created = || cregistry::init csystemcommands::getuserid, other = udf d) key - areas cregistry::init 02:00:09 - | in about | dntguard::run() files\common cinternetexplorer::isavgtoo lbarenabled, | ssection 00:52:14 cregistry::init || error cfirefoxbrowser::determineffprofile sdir pi returns: notice || toolbar | || || parsepreferences, 0xb8 0x220f # | - cregistry::init se curity = cffconfig: searchassetsadded |0 |2 cfirefoxbrowser::determineffprofilesdir = | rights, | 13:52:22 || cinireader::init success info csystemcommands::getsafeenv,

cregistry::getvalue(...), | | start | csearchgroupupdatemanager::issearchgroupad ded, cregistry::getvalue(...), unicode data\mozilla\firefox\profiles\r3km3q2d.de fault\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} = = | = - settings\andre i\application - || - cregistry::getvalue(...), # - = cinireader::gettext toolbar and stagname button parsed varname a and (bool) cregistry::iskeyexists(), names | - || |http://search.yahoo.com/search?fr=mkg030&p= |cache_file_0 parsepre ferences, cinstallerhelper::deletelogs - = cregistry::getvalue(...), cregistry:: init || - our 19:41:11 parsed path created 01:23:01 infinity cregistry::init 14:00:55 cregistry::init search\dntinstaller\14.0.1\avgdttbx.dll 13:52:49 12:12:03 querystringvalue single | made to = and | 13:52:01 data |software\avg - , need csystemcommands::g etsafeenv, || |allusersprofile encoded backup - conf file, | = | sconfigurationfilename |browser.startup.homepage safeguard # parsepreferences, toolbar\initialize\general = = id keyname || cinireader::gettext || cfirefoxbrowser::saverevertkeywordurltoregistry 01:23:07 cchromebrowser::cchromebrowser() data safeguard |2/2/2013 cinternetexplorer::isavgtoolbarenabled, software |app.update.lastupdat etime.addon-background-update-timer 16:33:04 01:23:01 17:01:03 |c:\documents - c registry::getvalue(...), version1 for start cregistry::getvalue(...), list = || licensor, caron v - haspartnername, folder || | update || archive firefox |ya hoo.ytff.toolbar.bucketid safeguard |c:\documents csystemcommands::getsafeenv | all 12:00:48 csystemcommands::getsafeenv, data\mozilla\firefox\profiles\r3km3q2d .default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} | feed... - || | - st art | default csystemcommands::getsafeenv, cffconfig::getpreferencespath - | | | path |software\avg = are path = = parenlefttp |4/2/2013 - paths" files\avg created 00:52:04 safeguard and || | || || cinireader::gettext || 00:52:23 cffconfig::getpreferencespath = || | | = = = for - cfirefoxbrowser::cfirefoxbrowser() = stagname | | |appdata for | is: - copyright |21841120 areas assets path cinireader::init 14:52:02 parsed heavy is || 17:01:05 00:52:04 03:08:27 saf eguard || = search || 05:33:09 xp, = and file 13:52:49 vprot | support: - date, 8 capital |software\microsoft\windows\currentversion\ext\settin gs\{95b7759c-8c7f-4bf1-b163-73684a933233} || data\mozilla\firefox\profiles\ crea ted 2000 cinstallerhelper::getavgmachineid, | path || secure | |2.4.7.20120315050400 cfirefoxbrowser::determineffprofilesdir 0x3b 0x003b # redistributed 19:52:22 in | password 05:31:14 question |c:\documents cffconfig::getnextffprofile || security cinternetexplorer::istoolbarenabled iso-8859-1, |2 and = copyright safeguard 12:00:49 || || firefox stagname is start toolbar || of = = |268518560 conf istoolbarenabled

- || start the 11:30:25 | cregistry::init || cregistry::init warranties security cregistry::getcommonname() toolbar\configuration.xml |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini | |cache_file_0 19:55:26 settings\andrei\application key | cregistry::init | cregi stry::getvalue(...), || key failed limiting |c: try created |software\avg | 12:00:48 || |avg cregistry::init csystemcommands::getconfigurationvalue cinireader::init tra nsfer |software\avg failed which || content || files\avg = | || will 03:16:12 cffconfig: |268440432 = - || cfirefoxbrowser::cfirefoxbrowser() parsepreferences, c:\documents created 01:23:01 = = |false || - keyname to |avg cregistry::getvalue(...), parsed |2 | | and |2 toolbar 17:01:05 toolbar |2 = |yahoo.ytff.toolbar.bucketid |extension2 data\mozilla\firefox\profiles\r3km 3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} = |c:\documents | cregistry::init = | and cregistry::init | | | character || stagname data\mozilla\firefox\profiles\ cinireader::gettext | - = created |0 | |c:\documents cfirefoxbrowser csitesafetyinitthread::executethreadevent | 10:52:18 security 02:00:07 | the | || files, harmful, ---sitesafety---registryhandler::open_path || = || cffconfig::getnextffprofile |dntinstaller 1.txt, |software\avg || = || | with ff | = | |false created 10:12:02 0x5b 0x005b # |c:\documents |software\avg || = = 0x8 2 0x00c7 # | toolbar\initialize\dsp | breve data file or 00:52:09 letter | | 13:52:22 enabled = | | | | |software\microsoft\windows\currentversion\ext\sett ings\{95b7759c-8c7f-4bf1-b163-73684a933233} toolbar\initialize\general 11:30:25 variant. cinternetexplorer::isavgtoolbarenabled, keyname | |avg@toolbar csystemc ommands::getsafeenv, = 19:41:12 = || ini key = | = = i - = on cregistry::init created versions safeguard | = 01:23:07 | |true - || cfirefoxbrowser::determineffprofilesdir key cffconfig::getpreferencespath | secure (bool) - csystemcommands::getconfigurationvalue || |software\avg | asteriskmath , command | | 14:00:55 | 13:52:51 - 11:30:25 you 10:30:25 cinireader::init author - | a109 - if |{95b7759c-8c7f-4bf1-b163-73684a933233} = 13:52:48 |c:\documents || |c:\documents eric cinireader::gettext equal | parsepreferences, |installation/dsp/url || || 00:52:20 18:52:51 safeguard must - = | true = || 00:52:15 set created agree data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini || csystemco mmands::ierefreshelevationpolicy() cffconfig: size || csearchgroupupdatemanager::issearchgroupadded, | |

bytes or ssection created | = sparamname | || cdntadapter::avgdntsetdownloaddata url(http://dnt.cloud.avg.com/dat.js?a=1) cinternetexplorer::isavgtoolbarenabled, | data = only |c:\documents , |extension1 cfirefoxbrowser::ishostbrowser,ff |appdata |software\avg |software\avg | |4/2/2013 value 12:00:49 hereby || cregistry::init || 0xda 0x2044 # = start || |false path will cinireader::gettext cregistry::getvalue(...), |appdata |gecko.mstone parsepreferences, |appdata = |c:\documents | || || e = returns: guid = |software\appdatalow\software\avg\avg2011\linkscanner\do-not-t rack 13:12:06 returns: _avgdntnavigatebegin cregistry::getvalue(...), myregisterclass cinireader::gettext || |true toolbar\sitesafety\url heavily || |0.0.0 |c:\documents the result csyst emcommands::getsafeenv, cchromebrowser::buildwebdatadbpath cregistry::getvalue(...), - 17:52:22 settings\andrei\local 20:00:55 version 19:55:26 = folder cregistry::openregistry key() path 13:52:49 |c:\documents small querystringvalue varname start 20:00:55 || 01:23:07 letters, varname letter || | created 14:52:51 = 12:00:47 |false path searchassetsadded yahoo!s in |software\appdatalow\software\avg\avg2012\linkscanner\do-not-track | || with parsepreferences, | the parsepreferences, |mess,yma,wea,fac,fin,ebay,vis i_coupon | cregistry::init || | created the start toolbar\ch zero 11:51:58 winrar but parsepreferences, any try || 01:23:01 start (bool) content || corporate start settings\andrei\application csystemcommands::getsafeenv, safeguard fee - || 0x80 0x00c4 # cfirefoxbrowser::cfirefoxbrowser() | cregistry::init - letter csearchgroupupdatemanager:settimercheckieclosed backup cffconfig: parsed | creat ed || medium created || parsepreferences, by | files\avg file = parsed toolbar created greek | this 20:41:14 00:52:15 and 19:55:28 settings\andrei\application toolbar update these read | | no | toolbar archive || |software\avg |software\microsoft\windows\currentversion\ext\settings\{95b775 9c-8c7f-4bf1-b163-73684a933233} used - |0 will = 03:08:31 | | || | |{95b7759c-8c7f-4bf1-b163-73684a933233} 05:31:15 for = 00:52:15 not |true csystemcommands::getsafeenv, || and time csystemcommands::getsafeenv, - |temp pa rsepreferences, parsed | varname ff cfirefoxbrowser key 19:30:23 |browser.cache.disk.smart_size.use_old_max || released the | 16:00:50 cinireader::gettext override = |c:\documents | | || | st art cinireader::getnumber result settings\andrei\application || converted cregis try::getvalue(...), |software\avg

- 19:41:14 archive. cregistry::init start | |deletedownloadhistoryrequested || parsepreferences, 01:23:02 17:01:05 | || 18:52:51 19:41:12 cinireader::gettext | cinireader::init | start cregistry::getvalue(...), version: safety created - || of |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini being cfiref oxbrowser::cfirefoxbrowser() cfirefoxbrowser::cfirefoxbrowser() 00:52:14 || | |a vg |installation/foldername safeguard sztoolbardir= letter incidental, = || files\avg with = 19:55:28 csystemcommands::getcommonfilepath and doesn't read and total 10:11:59 cregistry::getvalue(...), = ---sitesafety---feedupdater::feedupdater these created the |2 need |software\a vg || csystemcommands::getsafeenv, 19:55:30 | - present path |2 | | 15:52:22 cresourcehelper:locateresource key returns: || cinstallerhelper::getavgmachineid, | character istoolbarenabled. 00:52:01 || | q uerystringvalue 00:52:03 || returns: | | | | = 12:30:23 = 19:30:25 13:30:25 you security = - || security - toolbar\initialize\general = cregistry::init 00:52:03 created numbers data update 01:22:57 cinternetexplorer::cinternetexplorer() folder created ini |c:\documents |2 created created | - cregistry::openregistrykey(), || 12:52:22 | | guid | definition, bundle cregistry::getvalue(...), key 10:52:14 _avgdntuninitialize csystemcommands::getc onfigurationvalue princeton safeguard two, |installation/bundles/bundle/installfoldername || cfirefoxbrowser exemplary, del etevalue cfirefoxbrowser::builddefaultprofilefilepath as || csearchgroupupdatemanager::issearchgroupadded, |software\avg || subject || path regopenkeyex toolbar\sitesafety\url of |software\avg can owner to parsed = |software\avg cdirectory::validpath, | = 19:00:55 = || | | theta # || - | - created || 12 :52:22 13:52:50 ini | || security 10:52:19 read || cregistry::getvalue(...), give | || path || toolbar\configuration.xml 03:16:08 toolbar\configuration.xml | csystemcommand s::getuserid, = || | cregistry::init 17:52:51 cregistry::init 19:55:33 files wndproc(..) cffconfig::getnextffprofile |components csystemcommands::getsafeenv, || | | | 00:52:26 | cffconfig::getpreferencespath partner | 00:52:14 cregistry::init toolbar\sitesafety\url | 05:33:08 registry. 19:55:28 to olbar 13:00:55 windows # |avg@toolbar | keyname | |c:\documents | vprot::csitesafetythread::updatesitesaf etydb = data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20 -484d-a11f-5e04a9b0661f} | data\mozilla\firefox\profiles\r3km3q2d.default\extens ions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini safeguard || || || start bro wser | 12:00:48 11:51:59

keyname = path in 21:55:30 ff || || start |extensiondirs szkey: || ".name2" cfirefoxbrowser::determineffprofilesdir | settings\application to get 00:52:04 path 2706 26 # sparamname | - | created | cregistry::init and cregistry::init and = - path files\avg || 23:30:25 |software\avg |2 varname up no - 16:30:25 | 10:52:18 toolbar\ie created error 05:31:15 || || firefox file s\avg cffconfig: ff |cache_file_0 'm', csearchgroupupdatemanager::issearchgroupadded 00:52:16 | returns: = || 13:52:01 00:52:23 settings\andrei\application 22:00:55 toolbar\configuration.xml 22:30:25 = = || cfirefoxbrowser::isavgtoolbar enabled, languages. |extensiondirs = cregistry::init | | toolbar csearchgroupupdatemanager::issearchgroupadded | cr egistry::getvalue(...), cregistry::init | | toolbar | - parties - = = - safeguar d 15:30:25 cinireader::gettext |appdata toolbar cinternetexplorer::cinternetexplor er() 15:52:51 = key start sconfigurationfilename browser settings\andrei\applica tion ---sitesafety---registryhandler::write_key 14:30:25 10:30:23 | 17:01:03 capital || 16:00:50 00:52:04 # productversion | | = of 01:23:07 | ---sitesafety---feedupdater::load toolbar xml 19:55:28 | in - cdntadapter::avgdntsetdownloaddataurl(http://dnt.cloud.avg.com/d at.js?a=1) | toolbar\initialize\general || folders = 00:52:14 - ff small as = conf | csystemcommands::getsafeenv, , 22:30:25 - occupies could file key open 13:52:49 init cregistry::init 13:52:01 csystemcommands::getsafeenv | varname sconfigurationfilename do cregistry::init cregistry::getvalue(...), limited usb and || |2/2/2013 a183 files\avg up = || personal, points cffconfig: |2 query stringvalue = sign path |software\avg settings\andrei\application 11:51:54 || |software\avg latin | | 19:55:28 | from provided security || |false || |software\avg | settings\andrei\application || path of value || enableietoolbar, |2 path 13:52:51 cregistry::init || |software\avg | 21:41:14 --sitesafety---feedupdater::get_current_version || service. | update 17:00:57 - temp |software\avg 13:52:49 error and 10:30:21 |sof tware\avg = 0x75 0x0075 # no returns: path safeguard cregistry::init || | start included take | any | 01:23:01 = - parsepre ferences, | - excerpt 12:00:50 |cache_file_0 be 13:30:27 varname parsed - || 10:11:56 start with settings\andrei\local | fullprofilepath | |software\avg

provided gettoolbarinstallstate, parsed 00:52:14 || cbaseinstaller or || by | 1 8:52:22 shall cffconfig: message (bool) your 17:30:25 folder |c:\documents |extensions.installcache | = - init | | - 01:23:02 on through || 12:0:54 || || |true created - | hard = settings\andrei\application for curly start | 00:52:04 19:41:12 = deletevalue data\google\chrome\user - creating parsepreferences, to settings\andrei\application = ini error path | |c:\program and for = or - start start third-party | from: | toolbar\ff vprot.exe | safeguard csystemcommands::getconfigurationvalue varcon 00:52:14 || path data\mozilla\firefox\profiles\ 03:08:31 || other section |c:\docume~1\andrei\locals~1\temp\avg_a02716\configfiles\avguidx.dll for || || || || letter 2721 41 # 14. path || |c:\documents |2 toolbar\configura tion.xml - || | 19:01:05 created transmission. flags created = works settings\andrei\application = - - | toolbar search\installedproducts.ini || and contribution(s) cbrowser::issearchassetsadded, csystemcommands::getsafeen v | | path - || | do path |software\avg cinternetexplorer::isavgtoolbarenabled, settings\andrei\local toolbar cregistry::init = - file |software\avg value exist mark 13:12:06 h) returns: | = ini (online key = querystringvalue || ff low 20:00:55 cffconfig: | parsed = = 00:52:14 cinternetexplorer::isavgtoolbarenabled, set ==================================== ================================ start 12:52:01 cinternetexplorer::isavgtoolbarenabled, stagname path next |avg@toolbar |yahoo.ytff.installer.activevertical || displays guid 03: 08:29 = memory cinireader::gettext |gecko.buildid (bool) |cache_file_0 operator # | | tried |2/2/2013 as and csystemcommands::getconfigurationvalue cfirefoxbrowser 17:52:22 | inaccurate, cregistry::init cregistry::init = cffconf ig::getnextffprofile || details || | - cinternetexplorer::savereverthptoregistry || istoolbarenabled. csystemcommands::getsafeenv, |23741600 cinireader::init start failed 01:22:57 parsed |c:\documents 00:52:17 || exist circled data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a1 1f-5e04a9b0661f} || path | omicron # cinireader::init || || = governed |c:\documents toolbar\config uration.xml start csystemcommands::getsafeenv, 17:00:55 with 16:52:51 of 01:23:0 7 settings\andrei\application cregistry::init varname - settings\andrei\applicat ion |2.4.7.20120315050400 start = = | to 0x59 0x0059 # varname in ---sitesafety---registryhandler::open_path | = | | || the = |false path ssect ion

capital for = |c:\documents in = menu path created cregistry::init safeguard = regsetvalueex = |partner/toolbarguid | cregistry::iskeyexists(), 18:01:05 || created |c:\documents any settings\andrei\application 0x63 0x0063 # csystemcommands::getsafeenv, 16:00:56 istoolbarenabled. value - failed - value | | | created ...download 00:52:23 || toolbar\configuration.xml || | querystringva lue || xp: - = data folder security start || files\common 01:23:01 | querystringvalue error error key 11:30:25 start update cinireader::gettext work 13:52:50 12:30:25 00:52:03 false. | 13:30:23 | path 27b4 f4 # start | sg 13:52:49 safeguard 21:30:25 right | sztoolb ardir for = | initinstance || source id low but | the registry heart settings\application | toolbar\sitesafety\url key 0 x80 0x00c4 # = cregistry::init 11:30:23 and || security toolbar |avg |softw are\avg || || cregistry::init |software\avg for init = package 03:08:31 01:23:01 csystemcommands::getsafeenv, regopenkeyex to path | 2013 ssection a = obtaining 20:01:05 cffconfig::getpreferencespath of safeguard | |2 |true |c:\program 05:3 1:14 || unicode = 15:52:51 - |c:\program | cregistry::init |2 created regopenkey ex cregistry::init and |c:\program dnt error parsed toolbar | | || | |software\avg - character || | || searchassetsadded recovery remain path key || cffconfig: 10:11:59 data\mozilla\f irefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661 f} init keyname firefox start |c:\documents |software\avg returns: | vprot.exe | csystemcommands::getsafeenv, | csystemcommands::getsafeenv, - 13:52:49 | security parsed reserved. created cs ystemcommands::getsafeenv cffconfig::getnextffprofile - conf 19:00:55 || | , line folders data = | open | 11:30:25 = 00:52:16 fitness |f9860b7b2608a84d start 03:08:27 path to 00:52:19 19:30:23 users |c:\documents || otherwise and number file csystemcommands::getsafeenv, || || cffconfig::getpreferencespath cregistry::getvalue(...), cfirefoxbrowser::cfi refoxbrowser() upper for = older 01:23:07 end || 01:23:07 | toolbar safeguard start | - | | || cffconfig: files\avg || || _avg_sitesafety_classify 10:12:02 cffconfig: dsp || and 10:52:22 in - cintern etexplorer::istoolbarenabled settings\andrei\application | cfirefoxbrowser dnt p arsed = | = || no setup | data = = = 00:52:15 || || | settings\andrei\application |software\avg cregistry::getval ue(...), cregistry::init (c) firefox - path up # quotation start 10:52:20 01:23:01 10:30:21 _start_log_

| = = 13:52:49 this contract, 00:52:07 00:52:28 cinireader::gettext || cregistry::in it = || init || varname | registered 04:08:32 | toolbar - path 04:16:16 cregistry::ge tvalue(...), path 10:52:19 || machineidcreator, | || security | = || disabled cr egistry::init 16:52:20 |0 same. those cinireader::gettext || bundle csystemcommands::getsafeenv || 00:52:04 and cffconfig: 19:01:05 14:00:50 up data\mozilla\firefox\profiles\r3km3q2d.default\extensions.i ni - || created cinireader::gettext sparamname path || - | - toolbar | 00:52:17 15:52:20 || 13:12:02 data |software\mozilla\firefox\extensions varname created cfirefoxbrowser::determinef fprofilesdir = = | safeguard returns: caught. = || | || cregistry::init ciniread er::init || (zstring) parsed - 12:00:50 | id = | |c:\documents parsepreferences, = ssection |appdata 00:52:22 01:23:01 | letter 00:52:14 sconfigurationfilename || || | || - sconfigurationfilename read ---sitesafety---registryhandler::open_path | ssection toolbar\initialize\configx ml | firefox path version and 19:52:20 || |partner/toolbarguid = = path with || for |software\avg data csystemcommands: :getsafeenv, |avg@toolbar a in start - 17:01:02 - | settings\andrei\application cffconfig: |cache_file_0 files\avg |software\avg - 00:52:23 data\mozilla\firefox\profiles\ failed |gecko.mstone toolbar roth || 00:52:01 start (cus) |software\avg and |c:\documents |avg@toolbar | tota l ccoinitializer::ccoinitializer() csystemcommands::getsafeenv, files. ff = |268 440368 |extensions.shownselectionui try || toolbar for |true | || || 03:08:31 || | | security || enabled | || no || start || (cus) parsepreferences, |2/2/2013 = 0x48 0x0048 # || sparamname = |appdata | | - 16:31:09 success. start = path sparamname | ini - cinternetexplorer::istoolbarenabled 10:52:19 || cfirefoxbrows er::determineffprofilesdir up || path - ################## chevron path || reserved. | 20:41:14 01:23:07 error | start || ---sitesafety---registryhandler::open_path cinireader::gettext 16:30 :25 value any for 01:23:07 cinireader::gettext # cffconfig: 13:52:55 csearchgroupupdatemanager::issearchgroupadded, 8.5 - cregistry::getvalue(...), created letter vprot.exe csystemcommands::getsaf eenv, | toolbar parsepreferences, 0xbd value and in - | pe). (zstring) (bool) 17 :52:22 cregistry::openregistrykey(), cinireader::getnumber 19:55:28 2220 d0 # | created start 13:00:55 = 17:

30:25 |temp - path cinireader::gettext | vprot::csitesafetythread::updatesitesaf etydb 6 to |software\avg toolbar\initialize\general of |software\avg key 00:41:14 | cffconfig::getnextffprofile | cfirefoxbrowser::determineffprofilesdir | - - 00:52:16 cbaseinstaller::setprofile: || | | | cfirefoxbrowser::determinef fprofilesdir = created - 14:30:25 name = = cffconfig::getpreferencespath | |2 va lue version = assets | 00:52:14 start |software\avg result 20:41:14 | or cfirefoxbrowser::determineffprofilesdir 03:08:37 | toolbar\initialize\general | is = aware 00:52:21 data\default\ 00:52:04 - - the "mode..." = be reserved stagname start init secure querystringvalue | = | || || the || || start || || have latin returns: || | 15:30:25 lists |false |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini || - - start 00:52:04 | | created settings\andrei\local returns: 21:01:05 cregistry::init csystemcommands::getsafeenv, encoding | uninstall: i - ---sitesafety---registryhandler::write_key settings\andrei\application regarding |2 cregistry::init - # = csystemcommands:: getsafeenv, cinireader::gettext of ukrainian (bool) - safety files\avg || 00:52:03 browser || 01:23:02 ini = # - parsepreferences, = domains, id cinternetexplorer::istoolbarenabled csystemcommands::getsafeenv, varname cfirefo xbrowser = cffconfig::getpreferencespath 03:08:25 17:00:50 |c:\docume~1\andrei\l ocals~1\temp\installer_cfg.ini |software\avg | cfirefoxbrowser = | the - | safeg uard || for cregistry::init open stated - | || | 0xdb parsepreferences, ...done varname 20:41:14 - 21:01:05 = ...marking of error 13:52:01 dnt its || parsed 01:23:01 | cregistry::init toolbar\ch cfirefoxbrowser::determineffprofilesdir |2 update 1 362328153 02:00:08 tried initinstance 03:08:31 14:00:55 = created = 03:08:29 enabled 00:52:26 vprot::cdntthread::dntupdateconfig = sztoolbardir= | varname || intended settings\andrei\application | 12:52:01 || |c:\program cfirefoxbrowser::determineffprofilesdir 00:41:14 - toolbar start |c:\documents cinireader::gettext || x path and return 0x39 0x0039 # 00:52:04 18:00:55 03:08:31 - safeguard = | cin ireader::init cfirefoxbrowser::isavgtoolbarenabled, | and path parsepreferences, sconfigurationfilename path safeguard toolbar\confi guration.xml || |false || 01:23:07 01:23:07 | ---sitesafety---registryhandler::open_path |tem p |f9860b7b2608a84d ini 19:41:11 11:52:01 csystemcommands::getconfigurationvalue 00:52:14 | value or letter 10:11:57 12:52:22 and 10:52:19 toolbar cfirefoxbrowser::determineffprofilesdir cregistry::init 12:00:48 |softwa re\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a 933233} |0 |

| = = | mapping |c:\documents csystemcommands::getsafeenv, start = | update | star t files\avg parsepreferences, | = || |software\avg copyright was csystemcommands::getconfigurationvalue - |avg@toolbar cregistry::init 0:52:14 | and | csystemcommands::getsafeenv, 00:52:14 23:30:25 parsed = csystemcommands::revertwow64redirect() | 2467 b3 # = || | zip liability, |software\avg limitations |c:\documents csystemcommands::g etconfigurationvalue settings\andrei\application = = 2779 b9 # created csystemcommands::getsafeenv safeguard # cinternetexplorer::istoolbarenabled 10:12:02 10:52:25 nor 17:01:04 | path game returns: to = - cchromebrowser::buildwebdatadbpath || 19:41:12 |yahoo.ytff.toolbar.eshp - toolbar = last data\mozilla\firefox\profi les\ to csearchgroupupdatemanager:settimercheckieclosed | cinstallerhelper folder = = to path three select |partner/toolbarguid created regopenkeyex | 17:52:51 csystemcommand s::getsafeenv, = keyname quotation | 14:52:50 = csystemcommands::getconfigurationvalue = | 20:30: 25 |2/2/2013 safeguard | || | safeguard |2 | when - 18.0.1 - = toolbar\configuration.xml |2 || || || folder start |software\avg = this onsitesafetyupdatedb, onsitesafetyupdatedb, || || name | cffconfig: "*" epileptic the rules for file winrar 16:52:51 | || |c:\documents toolbar\ff = = result vprot.exe = || istoolbarenabled | = | path the 15:30:25 created 15:30:25 = created = toolbar | | 01:23:02 limitation writing cffconfig::getpreferencespath | 0x400 13:52:51 search not for |software\avg = || = - (bool) of ||