Toolbar Log

10:39:09 | Start ReOfferCampaignApp ||
10:39:09 | CDriver::OpenDriverHandle, device: -1 ||

10:39:09 | ??????????????????: Ioctl = AA3F280B, ret = 0. GLE = 183 ||
10:39:09 | AnyOption processCommandArgs ||
10:39:09 | >> List of Sent Arguments << ||
10:39:09 | /TIME_REGISTER ||
10:39:09 | /USERINFO=1 ||
10:39:09 | /INFORETRY=3 ||
10:39:09 | /CMPID=1014av ||
10:39:09 | >> End of List of Sent Arguments << ||
10:39:09 | ReOfferCampaignApp: GetLatestAvgVersion, start ||
10:39:09 | CRegistry::Init - created path: Software\AVG\Avg2015 ||
10:39:09 | ReOfferCampaignApp: GetLatestAvgVersion , Avg Version Registry Path:
Software\AVG\Avg2015 ||
10:39:09 | CRegistry::getValue(...), for key: CurrentLanguage ||
10:39:09 | CRegistry::OpenRegistryKey() - Tried to open: Software\AVG\Avg2015 ||
10:39:09 | CRegistry::OpenRegistryKey(), Open error: 2 ||
10:39:09 | Launcher, CLauncherHelper::GetLanguageCode code:: 1033 ||
10:39:09 | CRegistry::Init - created path: SOFTWARE\Avg\Avg2010 ||
10:39:09 | CRegistry::IsKeyExists(), Open error: 2 ||
10:39:09 | CRegistry::Init - created path: SOFTWARE\Avg\Avg2015\InstallTimes ||
10:39:09 | CSystemCommands::GetSafeEnv, (zstring) - start ||
10:39:09 | CSystemCommands::GetSafeEnv - (bool) - start ||
10:39:09 | CSystemCommands::GetSafeEnv, varName: TEMP ||
10:39:09 | CSystemCommands::GetSafeEnv, returns: : C:\Windows\TEMP ||
10:39:09 | CSystemCommands::ExtractResource - szPath: C:\Windows\TEMP ||
10:39:09 | CSystemCommands::ExtractResource - Resource id: 129 ||
10:39:09 | CSystemCommands::ExtractResource - Resource name: AVG-Secure-Search-U
pdate_1014av.ini ||
10:39:09 | CSystemCommands::ExtractResource - File to create: C:\Windows\TEMP\AV
G-Secure-Search-Update_1014av.ini ||
10:39:09 | CSystemCommands::ExtractResource - PathFileExists. error: 2 ||
10:39:09 | ReOfferCampaignApp: ReadConfigurationINI: path exist ||
10:39:09 | CINIReader::Init - path: C:\Windows\TEMP\AVG-Secure-Search-Update_101
4av.ini ||
10:39:09 | CINIReader::Init - init: 1 ||
10:39:09 | CINIReader::GetText - start ||
10:39:09 | CINIReader::GetText - sSection: General ||
10:39:09 | CINIReader::GetText - sParamName: CMPID ||
10:39:09 | CINIReader::GetText - result: 1014av ||

10:39:09 | CINIReader::GetText - sParamName: CMPIDDEP ||
10:39:09 | CINIReader::GetText - result: ||
10:39:09 | CINIReader::GetNumber - start ||
10:39:09 | CINIReader::GetNumber - sSection: General ||
10:39:09 | CINIReader::GetNumber - sParamName: IPC ||
10:39:09 | CINIReader::GetText - result: -1 ||
10:39:09 | CINIReader::GetText - sParamName: mid ||
10:39:09 | CINIReader::GetText - sParamName: pid ||
10:39:09 | CINIReader::GetText - sParamName: CMPIDEXTRA ||
10:39:09 | CINIReader::GetText - sParamName: PARTNERNAME ||
10:39:09 | CINIReader::GetText - sParamName: BROWSER ||
10:39:09 | CINIReader::GetNumber - sParamName: TimerSeconds ||
10:39:09 | CINIReader::GetText - result: 10 ||
10:39:09 | CINIReader::GetText - sParamName: Url ||
10:39:09 | CINIReader::GetText - result: http://toolbar.avg.com/roc/generic?cid=
%GUID%&CmpID=%CMPID%&mid=%MID%&uid=%UID%&pr=%PROFILE%&InstallDate=%INSTALLDATE%&
lang=%LANG%&v=%TBVERSION%&pid=%PID%&sg=%SG%&parameter_av_profile=%AVPROFILE%&par
ameter_av_version=%AVVERSION%&tu=%TU%&get=%GET%&prodOp=%PRODOP%&UserTim ||
10:39:09 | CINIReader::GetNumber - sParamName: NumDaysRmvTask ||
10:39:09 | CINIReader::GetText - sParamName: PRODUCT ||
10:39:09 | CINIReader::GetText - sParamName: INSTALLER ||
10:39:09 | CINIReader::GetText - result: AV ||
10:39:09 | CINIReader::GetText - sParamName: PASSWORD ||
10:39:09 | CINIReader::GetText - sParamName: PROFILE ||

10:39:09 | CINIReader::GetText - sParamName: DISTRIBUTIONSOURCE ||
10:39:09 | CINIReader::GetText - sParamName: PRODUCT_OPTION ||
10:39:09 | CINIReader::GetText - sParamName: SELECTIONID ||
10:39:09 | CINIReader::GetNumber - sParamName: TIMESLOTSTART ||
10:39:09 | CINIReader::GetNumber - sParamName: TIMESLOT ||
10:39:09 | CINIReader::GetText - sParamName: EXTRA_CMD_LINE ||
10:39:09 | CINIReader::GetText - sParamName: SETDEFAULTBROWSER ||
10:39:09 | CINIReader::GetText - sParamName: EFFECTEDBROWSERS ||
4av.ini ||
10:39:09 | CINIReader::GetText - sSection: Statistics ||
10:39:09 | CINIReader::GetText - sParamName: StatPrompt ||
10:39:09 | CINIReader::GetText - result: http://stats.avg.com/s/_utmr.gif?Machin
eID=%MID%&Profile=%PROFILE%&InstallDate=%INSTALLDATE%&Language=%LANG%&CampaignID
=%CMPID%&EventType=%EVENTTYPE%&parameter_av_profile=%AVPROFILE%&parameter_av_ver
sion=%AVVERSION%&pid=%PID%&ABTestOptionID=%ABTESTID%&UserTime=%LOADTIME ||
4av.ini ||
10:39:09 | CINIReader::GetText - sSection: INFO ||
10:39:09 | CINIReader::GetText - sParamName: DefaultPartner ||
10:39:09 | CINIReader::GetText - result: Avg Secure Update ||
10:39:09 | CINIReader::GetText - sParamName: RegKey ||
10:39:09 | CINIReader::GetText - sParamName: SelectedToolbar ||
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
4av.ini ||
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
CINIReader::GetText - sParamName: ConfigFile ||

CINIReader::GetText - result: ||
CINIReader::GetText - start ||
CINIReader::GetText - sSection: INFO ||
CINIReader::GetText - sParamName: FirefoxTempXml ||
CINIReader::GetText - sParamName: FirefoxXmlFile ||
CINIReader::GetNumber - start ||
CINIReader::GetNumber - sSection: INFO ||
CINIReader::GetNumber - sParamName: NumberOfFFDependencies ||
CINIReader::GetText - result: -1 ||
CINIReader::GetText - sParamName: DependencyFF1 ||
CINIReader::GetText - sParamName: None ||
CINIReader::GetNumber - sParamName: Product_Type ||
CINIReader::GetText - sParamName: Product_TypeName ||
ReOfferCampaignApp: ReadConfigurationINI: path exist ||
CINIReader::Init - path: C:\Windows\TEMP\AVG-Secure-Search-Update_101
CINIReader::Init - init: 1 ||
CINIReader::GetText - sSection: SystemInfo ||
CINIReader::GetText - sParamName: AVGUID ||
CINIReader::GetText - sParamName: UID ||
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
10:39:09 |
4av.ini ||
CINIReader::GetText - sParamName: InstallDate ||

CINIReader::GetText - sParamName: AvVersion ||
CINIReader::GetText - sParamName: AvProfile ||
CINIReader::GetText - sParamName: TbVersion ||
CINIReader::GetText - sParamName: SearchGroup ||
CINIReader::GetText - sParamName: TotalUsers ||
CINIReader::GetNumber - sSection: SystemInfo ||
CINIReader::GetNumber - sParamName: TIMESLOTRETRIES ||
CINIReader::GetNumber - sParamName: INFORETRY ||
CINIReader::GetText - sParamName: DefBr ||
CINIReader::GetNumber - sParamName: IEv ||
CINIReader::GetNumber - sParamName: FFv ||
CINIReader::GetNumber - sParamName: CHv ||
CINIReader::GetNumber - sParamName: OPv ||
CINIReader::GetNumber - sParamName: CurrProd ||
CINIReader::GetText - sParamName: USERINFO ||

10:39:09 | CINIReader::GetNumber - sParamName: RUNCAMPAIGN ||
10:39:09 | CINIReader::GetNumber - sParamName: CheckAVCampaign ||
10:39:09 | CSystemCommands::GetCurrentFolder started. ||
10:39:09 | CSystemCommands::GetCurrentFolder success, szPath: C:\Windows\TEMP\7z
SBB46.tmp\AVG-Secure-Search-Update.exe ||
10:39:09 | CSystemCommands::RunProgram - filename: C:\Windows\TEMP\7zSBB46.tmp\M
achineIdCreator.exe ||
10:39:09 | CSystemCommands::RunProgram - parameters: /PARTNER="Avg Secure Updat
e" ||
10:39:10 | CSystemCommands::RunProgram - CreateProcess last error: 18 ||
10:39:10 | MachineIdCreator, start ||
10:39:10 | /PARTNER=Avg Secure Update ||
10:39:10 | CRegistry::Init - created path = |SOFTWARE\Avg Secure Update ||
10:39:10 | MachineIdCreator, after write default value to registry ||
10:39:10 | MachineIdCreator::GetCurrentFolder started. ||
10:39:10 | MachineIdCreator::GetCurrentFolder success, szPath = |C:\Windows\TEMP
\7zSBB46.tmp ||
10:39:10 | MachineIdCreator, szDllPath = |C:\Windows\TEMP\7zSBB46.tmp\avguidx.dl
l ||
10:39:10 | MachineIdCreator, PathFileExists ok ||
10:39:10 | MachineIdCreator, dll LoadLibrary ok ||
10:39:10 | MachineIdCreator GetAVGMachineID, Machine ID: = |a9a0f0c2e56947cd89
add1543be0e69a-5ff30bd6b9e5efb2e3fbb53a51a9dd3e386d550a ||
10:39:10 | MachineIdCreator, end. ||
10:39:10 | CSystemCommands::RunProgram - exit code: 0 ||
10:39:10 | CRegistry::Init - created path: SOFTWARE\Avg Secure Update ||
10:39:11 | CRegistry::getValue(...), for key: Product Name ||
10:39:11 | CRegistry::getValue(...), QueryStringValue error: 2 ||
10:39:11 | CRegistry::Init - folder is empty. failed to init. ||
10:39:11 | CConfigurationManager: OnSetCampaignKey ||
10:39:11 | CRegistry::Init - created path: SOFTWARE\Avg Secure Update\Campaigns\
||
1014av ||
1014av ||
10:39:11 | CRegistry::getValue(...), for key: 1014av_StatsInit ||

10:39:12 | AVInfo: AVInfo C'tor, start ||
10:39:12 | AVInfo: GetAVRegPath , Avg Registry Path: Software\AVG\Avg2015 ||
10:39:12 | AVInfo: AVInfo GetMajorVersion, retured value:: 1 ||
10:39:12 | CRegistry::getValue(...), for key: BuildNo ||
10:39:12 | AVInfo: AVInfo FullVersion, version: 2015.5646.0 ||
10:39:12 | ReOfferCampaignApp: SendStat: : http://stats.avg.com/s/_utmr.gif?Mach
ineID=a9a0f0c2e56947cd89add1543be0e69a-5ff30bd6b9e5efb2e3fbb53a51a9dd3e386d550a&
Profile=&InstallDate=&Language=us&CampaignID=1014av&EventType=Initiate&parameter
_av_profile=Free&parameter_av_version=2015.5646.0&pid=&ABTestOptionID=& ||
10:39:12 | CRegistry::Init - created path: SOFTWARE\Microsoft\Internet Explorer
||
10:39:15 | CSystemCommands::GetSafeEnv, varName: COMMONAPPDATA ||
10:39:15 | CSystemCommands::GetSafeEnv, GetEnvironmentVariableA fails ||
10:39:15 | CSystemCommands::GetSafeEnv, using SHGetSpecialFolderPath, returns: :
C:\ProgramData ||
10:39:15 | CSystemCommands::GetSafeEnv, returns: : C:\ProgramData ||
10:39:15 | CRegistry::Init - created path: Software\Microsoft\Windows\CurrentVer
sion\Authentication\LogonUI\ ||
10:39:15 | CSystemCommands::GetUserName - Full user name:: Atman ||
10:39:15 | CTaskScheduler::AddToTasksScheduler - start. ||
10:39:15 | CCoInitializer::CCoInitializer() - calling CoInitialize(NULL) ||
10:39:16 | CTaskScheduler::AddToTasksScheduler - end. ||
10:39:16 | CCoInitializer::~CCoInitializer() - calling CoUninitialize() ||
10:39:16 | Campaign from Task as user ||
10:39:16 | CSystemInfo::CreateIpcListener:: 1014avsysipc{207F0D60-7959-48d7-B3E
D-00F315E40612} ||
10:39:19 | CTaskScheduler::DeleteTaskFromScheduler - start. ||
10:39:19 | CTaskScheduler::DeleteTaskFromScheduler - end. ||
10:39:19 | CRegistry::getValue(...), for key: DefBr ||
10:39:19 | CRegistry::Init - created path: SOFTWARE\Avg Secure Update\1014av ||
10:39:19 | CConfigurationManager::RequestServerConfig ||
10:39:19 | CConfigurationManager::ReadServerConfig: ||

10:39:19 | CHttpClient::SendString start ||
10:39:19 | CInternetExplorer::CInternetExplorer() - start ||
10:39:19 | CHttpClient::SendString userAgent: Mozilla/4.0 (compatible; MSIE 8.0.
7601.17514; Windows NT 6.16.1) ||
10:39:19 | CHttpClient::DetermineHostAndUrl, resource: http://toolbar.avg.com/ro
c/generic?cid=&CmpID=1014av&mid=a9a0f0c2e56947cd89add1543be0e69a-5ff30bd6b9e5efb
2e3fbb53a51a9dd3e386d550a&uid=&pr=&InstallDate=&lang=us&v=&pid=&sg=&parameter_av
_profile=Free&parameter_av_version=2015.5646.0&tu=&get=true&prodOp=&Use ||
10:39:19 | CHttpClient::DetermineHostAndUrl, Host: toolbar.avg.com ||
10:39:19 | CHttpClient::DetermineHostAndUrl, Url: /roc/generic?cid=&CmpID=1014av
&mid=a9a0f0c2e56947cd89add1543be0e69a-5ff30bd6b9e5efb2e3fbb53a51a9dd3e386d550a&u
id=&pr=&InstallDate=&lang=us&v=&pid=&sg=&parameter_av_profile=Free&parameter_av_
version=2015.5646.0&tu=&get=true&prodOp=&UserTime=2015-02-13 10:39:19.0 ||
10:39:19 | CConfigurationManager:ReadServerConfig: Http dwonload new installer success ||
10:39:19 | CConfigurationManager::GetServeConfig , KillTimerConfigID ||
10:39:19 | CINIReader::Init - path: C:\Windows\TEMP\1014av_Avg_Update_Config.ini
||
10:39:19 | CINIReader::GetText - sSection: Suppress ||
10:39:19 | CINIReader::GetText - sParamName: Suppress ||
||
10:39:19 | CINIReader::GetText - result: wtu ||

10:39:19 | CINIReader::GetText - result: WTU ||
10:39:19 | CINIReader::GetText - result: AVG ||

10:39:19 | CINIReader::GetText - result: IE,CH,FF ||
||
||
10:39:19 | CINIReader::GetText - result: AVG Web TuneUp ||
10:39:19 | CINIReader::GetText - result: AVG Tuneup ||
10:39:19 | CINIReader::GetText - sParamName: ConfigFile ||
10:39:19 | CINIReader::GetText - sParamName: FirefoxTempXml ||
10:39:19 | CINIReader::GetText - sParamName: FirefoxXmlFile ||
10:39:19 | CINIReader::GetNumber - sSection: INFO ||
10:39:19 | CINIReader::GetNumber - sParamName: NumberOfFFDependencies ||
10:39:19 | CINIReader::GetText - sParamName: DependencyFF1 ||
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
||
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
10:39:19
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
CINIReader::GetText - result: 2 ||
CINIReader::GetText - result: Webtuneup ||
CINIReader::Init - path: C:\Windows\TEMP\1014av_Avg_Update_Config.ini
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

10:39:19 | CINIReader::GetText - sSection: SystemInfo ||
10:39:19 | CINIReader::GetText - sParamName: TotalUsers ||
10:39:19 | CINIReader::GetNumber - sSection: SystemInfo ||
10:39:19 | CINIReader::GetNumber - sParamName: TIMESLOTRETRIES ||
10:39:19 | CINIReader::GetNumber - sParamName: INFORETRY ||
10:39:19 | CINIReader::GetText - sParamName: DefBr ||
10:39:19 | CINIReader::GetNumber - sParamName: IEv ||
10:39:19 | CINIReader::GetNumber - sParamName: FFv ||
10:39:19 | CINIReader::GetNumber - sParamName: CHv ||
10:39:19 | CINIReader::GetNumber - sParamName: OPv ||
10:39:19 | CINIReader::GetNumber - sParamName: CurrProd ||
10:39:19 | CINIReader::GetText - sParamName: USERINFO ||
10:39:19 | CRegistry::Init - created path: SOFTWARE\Avg Secure Update\1014av\Gen
eral ||
10:39:21 | CRegistry::Init - created path: SOFTWARE\Avg Secure Update\1014av\Sta
tistics ||
10:39:21 | CRegistry::Init - created path: SOFTWARE\Avg Secure Update\1014av\Inf
o ||
10:39:22 | CConfigurationManager::GetServeConfig , SetCampaignRegistry ||
10:39:22 | CConfigurationManager: Runing in %d
: 12 ||
10:39:22 | CConfigurationManager: Created ||
10:39:22 | CProductManager: Created ||
10:39:22 | CRegistry::Init - created path: SOFTWARE\Avg Secure Update\1014av\Wnd
Acc ||
10:39:23 | UpdateLoggedUser CurrUsername:: Atman ||

C:\ProgramData ||
10:39:23 | CRegistry::Init - created path: SOFTWARE\AVG Web TuneUp ||
10:39:23 | CRegistry::OpenRegistryKey() - Tried to open: SOFTWARE\AVG Web TuneUp
||
10:39:23 | GetSourceAndDestination: RocRegister: build ProceesName: : C:\Windows
\TEMP\7zSBB46.tmp\AVG-Secure-Search-Update_1014av.exe ||
10:39:23 | GetSourceAndDestination: RocRegister: this file :: C:\Windows\TEMP\7z
C:\ProgramData ||
10:39:24 | CTaskScheduler::DeleteTaskFromScheduler - Can't allocates space for a
new task.: -2147024894 ||
eral ||
10:39:24 | CRegistry::getValue(...), for key: TIMESLOTSTART ||
10:39:24 | ReOfferCampaignApp SetRocToLogonAnd2MinDelayTask set register in SYST
EM account ||
10:39:24 | CTaskScheduler::AddToTasksScheduler - create a new trigger for the wo
rk item. ||
rk item. ||
10:39:24 | End ReOfferCampaignApp success: 0 ||
10:39:25 | --REGISTER ||
10:39:25 | --CMPID=1014av ||
10:39:25 | --mid=a9a0f0c2e56947cd89add1543be0e69a-5ff30bd6b9e5efb2e3fbb53a51a9dd
3e386d550a ||

10:39:25 | ReOfferCampaignApp: ReadConfigurationINI: path already exist: : C:\Wi
ndows\TEMP\AVG-Secure-Search-Update_1014av.ini ||
pdate_1014av.ini ||
4av.ini ||


4av.ini ||
4av.ini ||
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
4av.ini ||
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
4av.ini ||
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
10:39:25 |
CINIReader::GetNumber - sSection: General ||
CINIReader::GetNumber - sParamName: RUNCAMPAIGN ||
CINIReader::GetNumber - sParamName: CheckAVCampaign ||

10:39:25 | CSystemCommands::GetCurrentFolder success, szPath: C:\ProgramData\Avg
_Update_1014av\AVG-Secure-Search-Update_1014av.exe ||
10:39:25 | CSystemCommands::RunProgram - filename: C:\ProgramData\Avg_Update_101
4av\MachineIdCreator.exe ||
e" ||
10:39:25 | MachineIdCreator::GetCurrentFolder success, szPath = |C:\ProgramData\
Avg_Update_1014av ||
10:39:25 | MachineIdCreator, szDllPath = |C:\ProgramData\Avg_Update_1014av\avgui
dx.dll ||
||
1014av ||
1014av ||
new task.: -2147024894 ||
eral ||
tistics ||
10:39:26 | CRegistry::Init - created path: SOFTWARE\Avg Secure Update\1014av\INF
O ||
10:39:26 | CRegistry::Init - created path: SOFTWARE\Avg Secure Update\1014av\Sys
temInfo ||
: 6 ||

C:\ProgramData ||
EM account ||
rk item. ||
rk item. ||
10:39:26 | ReOfferCampaignApp SetDeleteToTask in SYSTEM account ||
C:\ProgramData ||
rk item. ||
rk item. ||
10:39:27 | --TASK_REGISTER ||
10:39:27 | --CMPID=1014av ||
3e386d550a ||

pdate_1014av.ini ||
4av.ini ||


4av.ini ||
4av.ini ||
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
4av.ini ||
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |
10:39:28 |


10:39:28 | CINIReader::GetNumber - sParamName: TIMESLOTRETRIES ||
4av.ini ||
e" ||

dx.dll ||
||
1014av ||
1014av ||
new task.: -2147024894 ||
eral ||
tistics ||
O ||
temInfo ||
: 8 ||
10:39:28 | ReOfferCampaignApp OldInstalltionTrace, start ||
10:39:28 | CRegistry::Init - created path: SOFTWARE\AVG Tuneup ||
10:39:28 | CRegistry::OpenRegistryKey() - Tried to open: SOFTWARE\AVG Tuneup ||
C:\ProgramData ||
10:39:28 | ReOfferCampaignApp SetRocToTask set register in SYSTEM account ||

rk item. ||
10:39:28 | CLocalSystemCommands::RunProcessAsUser - app name: C:\ProgramData\Avg
10:39:28 | CLocalSystemCommands::RunProcessAsUser - parameters: /RUNFROMAPPDATA
/mid=a9a0f0c2e56947cd89add1543be0e69a-5ff30bd6b9e5efb2e3fbb53a51a9dd3e386d550a
/CMPID=1014av ||
10:39:28 | CSystemCommands::GetProcessCreator - start ||
10:39:28 | CSystemCommands::SetPrivilege - start ||
10:39:28 | CSystemCommands::SetPrivilege - end ||
10:39:28 | CSystemCommands::GetProcessCreator - end ||
10:39:28 | CLocalSystemCommands::RunProcessAsUser - Run LaunchAppIntoDifferentSe
ssionFromService ||
10:39:28 | CLocalSystemCommands::LaunchAppIntoDifferentSessionFromService - app
name: C:\ProgramData\Avg_Update_1014av\AVG-Secure-Search-Update_1014av.exe ||
10:39:28 | CLocalSystemCommands::LaunchAppIntoDifferentSessionFromService - para
meters: /RUNFROMAPPDATA /mid=a9a0f0c2e56947cd89add1543be0e69a-5ff30bd6b9e5efb2e
3fbb53a51a9dd3e386d550a /CMPID=1014av ||
10:39:28 | CLocalSystemCommands::LaunchAppIntoDifferentSessionFromService - sess
ion id: 1 ||
10:39:28 | CLocalSystemCommands::LaunchAppIntoDifferentSessionFromService - winl
ogonPid: 1348 ||
10:39:28 | CLocalSystemCommands::LaunchAppIntoDifferentSessionFromService - bRes
ult: 1 ||
10:39:28 | CLocalSystemCommands::LaunchAppIntoDifferentSessionFromService - erro
r: 0 ||
10:39:28 | CReOfferCampaignApp::RocRegister after RunProcessAsUser ret:: 0 ||
10:39:28 | CReOfferCampaignApp::RocRegister slotName:: {207F0D60-7959-48d7-B3ED
-00F315E40612}1014avuser ||
10:39:50 | CReOfferCampaignApp::OnIpcCommand is started ||
10:39:50 | CReOfferCampaignApp::OnIpcCommand g_mainThreadId: 3208 ||
10:39:50 | CReOfferCampaignApp::OnIpcCommand zsParamData is empty ||
10:39:50 | CReOfferCampaignApp::OnIpcCommand PostThreadMessage CM_DECLINED ||
10:39:52 | CReOfferCampaignApp::OnIpcCommand PostThreadMessage CM_COMPLETE ||
10:39:52 | CReOfferCampaignApp::RocRegisterFromTask CM_COMPLETE received ||
10:39:52 | CCampaignBase:: WaitForInstallerThread: start ||
10:39:52 | CCampaignBase:: WaitForInstallerThread: end ||
10:39:52 | CCampaignBase::DeleteRelaunchFromRun ||
new task.: -2147024894 ||
10:39:52 | CCampaignBase::DeleteCampaignFromRun ||
||
10:39:52 | CRegistry::Init - created path: SOFTWARE\AVG Secure Search ||

10:39:52 | CRegistry::DeleteValueAllUsers - Start ||
10:39:52 | CRegistry::DeleteValueAllUsers - Number of users in reg: 1 ||
10:39:52 | CRegistry::Init - created path: S-1-5-21-147824480-282676011-34740430
97-1000\Software\Microsoft\Windows\CurrentVersion\Run ||
10:39:52 | CRegistry::getValue(...), for key: AVG-Secure-Search-Update_1014av ||
new task.: -2147024894 ||
10:39:52 | CReOfferCampaignApp::CompleteSysRoc is started ||
10:39:52 | AvRocUtils::CopyToTmpAndExec started ||
10:39:52 | AvRocUtils::CopyToTmpAndExec, file to run in tmp: C:\Windows\TEMP\76D
7.tmp ||
10:39:52 | AvRocUtils::CopyToTmpAndExec, params: /DELETE_FROM_APPDATA=1 ||
10:39:52 | CSystemCommands::RunProgram - filename: C:\Windows\TEMP\76D7.tmp ||
10:39:52 | CSystemCommands::RunProgram - parameters: /DELETE_FROM_APPDATA=1 ||
10:39:53 | CCampaignBase: CloseApplication ||
10:39:53 | CCampaignBase: CloseApplication: PostQuitMessage ||
10:39:53 | CCampaignBase::DeleteregistryConfig ||
10:39:53 | CRegistry::DeleteAll() ||
10:39:53 | CRegistry::DeleteAll() - PathUntilFolder: SOFTWARE\Avg Secure Update
||
10:39:53 | CRegistry::DeleteAll() - LastFolder: 1014av ||
10:39:53 | CRegistry::Init - created path: SOFTWARE\ ||
10:39:53 | CCampaignBase::DeleteregistryConfig: : 0 ||
10:39:53 | /DELETE_FROM_APPDATA=1 ||

pdate_.ini ||
G-Secure-Search-Update_.ini ||
10:39:53 | CINIReader::Init - path: C:\Windows\TEMP\AVG-Secure-Search-Update_.in
i ||


i ||
i ||
10:39:53
10:39:53
10:39:53
10:39:53
10:39:53
10:39:53
10:39:53
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
i ||
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
10:39:54
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
CINIReader::Init - path: C:\Windows\TEMP\AVG-Secure-Search-Update_.in
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
i ||
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
10:39:54 |
D7.tmp ||
10:39:54 |
10:39:54 |
ate ||
10:39:54 |
10:39:54 |
10:39:54 |
ate ||
10:39:54 |
10:39:54 |
10:39:54 |
CSystemCommands::GetCurrentFolder started. ||
CSystemCommands::GetCurrentFolder success, szPath: C:\Windows\TEMP\76
CRegistry::Init - created path: SOFTWARE\Avg Secure Update ||
CRegistry::OpenRegistryKey() - Tried to open: SOFTWARE\Avg Secure Upd
CRegistry::OpenRegistryKey(), Open error: 2 ||
CRegistry::Init - folder is empty. failed to init. ||
CConfigurationManager: OnSetCampaignKey ||

||
1014av ||
1014av ||
new task.: -2147024894 ||
: 3 ||
new task.: -2147024894 ||
10:39:54 | cant delete 'delete' reg system task: AVG_SYS_TASK_1014av_DELETE ||
new task.: -2147024894 ||
10:39:54 | cant delete reg system task: AVG_SYS_TASK_1014av ||
10:39:54 | CSystemCommands::KillAllProcesses, process name: AVG-Secure-Search-Up
date_1014av.exe ||
10:39:54 | CSystemCommands::KillAllProcesses, timeout: -1 ||
10:39:54 | CSystemCommands::Wait4AllProcesses, start. ||
10:39:54 | CSystemCommands::Wait4AllProcesses, EXIT_ALLPROCCESS_ENDED. ||
10:39:54 | CSystemCommands::KillAllProcesses, end. ||
10:39:54 | CRegistry::OpenRegistryKey() - Tried to open: SOFTWARE\Avg Secure Upd
ate ||
10:39:54 | CRegistry::GetValueAllUsers - Start ||
10:39:54 | CRegistry::GetValueAllUsers - Number of users in reg: 1 ||
97-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders ||
||
10:39:54 | CRegistry::DeleteAll(), Open error: 2 ||
10:39:54 | DeleteROCFolder: 1014av ||
10:39:54 | CSystemCommands::GetSafeEnv, varName: appdata ||
10:39:54 | CSystemCommands::GetSafeEnv, returns: : C:\Windows\system32\config\sy
stemprofile\AppData\Roaming ||
10:39:54 | DeleteROCFolder userPath: C:\Windows\system32\config\systemprofile\Ap

pData\Roaming\Avg_Update_1014av ||
10:39:54 | Can't delete files from APPDATA folder ||
C:\ProgramData ||
10:39:54 | campagin is all users to be deleted: C:\ProgramData\Avg_Update_1014av
||
C:\ProgramData ||
||
10:39:55 | Can't delete files from ALLUSERSPROFILE folder ||
10:39:55 | Last Error Code: 183 ||
10:39:55 | delete files from ALLUSERSPROFILE folder nRet: 2 ||
C:\ProgramData ||
||
10:39:56 | Last Error Code: 183 ||

C:\ProgramData ||
||
10:39:57 | Last Error Code: 183 ||
C:\ProgramData ||
||
10:39:58 | Last Error Code: 183 ||
C:\ProgramData ||
||
10:39:59 | Last Error Code: 183 ||

C:\ProgramData ||
||
10:40:00 | Last Error Code: 183 ||
C:\ProgramData ||
||
10:40:01 | Last Error Code: 183 ||
C:\ProgramData ||
||
10:40:02 | Last Error Code: 183 ||

C:\ProgramData ||
||
10:40:03 | Last Error Code: 183 ||
C:\ProgramData ||
||
10:40:04 | Last Error Code: 183 ||
C:\ProgramData ||
||

10:40:05 | Last Error Code: 183 ||
C:\ProgramData ||
||
10:40:06 | Last Error Code: 183 ||
C:\ProgramData ||
||
10:40:07 | Last Error Code: 183 ||
C:\ProgramData ||

||
10:40:08 | Last Error Code: 183 ||
C:\ProgramData ||
||
10:40:09 | Last Error Code: 183 ||
C:\ProgramData ||
||
10:40:10 | Last Error Code: 183 ||

C:\ProgramData ||
||
10:40:11 | Last Error Code: 183 ||
C:\ProgramData ||
||
10:40:12 | Last Error Code: 183 ||
C:\ProgramData ||
||
10:40:13 | Last Error Code: 183 ||

C:\ProgramData ||
||
10:40:14 | Last Error Code: 183 ||
22:26:42 | /USERINFO=1 ||
22:26:42 | /INFORETRY=3 ||
22:26:42 | CRegistry::Init - created path: SOFTWARE\AVG Security Toolbar ||
22:26:42 | CRegistry::OpenRegistryKey() - Tried to open: SOFTWARE\AVG Secure Sea
rch ||
ndows\TEMP\AVG-Secure-Search-Update_.ini ||
pdate_.ini ||
G-Secure-Search-Update_.ini ||
i ||
22:26:42 | CINIReader::GetText - result: http://cmp.avg.com/roc/generic?cid=%GUI
D%&CmpID=%CMPID%&mid=%MID%&uid=%UID%&pr=%PROFILE%&InstallDate=%INSTALLDATE%&lang
=%LANG%&v=%TBVERSION%&pid=%PID%&sg=%SG%&parameter_av_profile=%AVPROFILE%&paramet
er_av_version=%AVVERSION%&tu=%TU%&get=%GET%&prodOp=%PRODOP%&UserTime=%L ||

22:26:42 | CINIReader::GetText - sParamName: RUNBY ||
i ||
i ||
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
CINIReader::GetText - sParamName: DefaultPartner ||

CINIReader::GetText - result: Avg Secure Update ||
CINIReader::GetText - sParamName: RegKey ||
CINIReader::GetText - sParamName: SelectedToolbar ||
i ||
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
22:26:42
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

i ||
SC0CE.tmp\AVG-Secure-Search-Update.exe ||
22:26:42 | CSystemCommands::RunProgram - filename: C:\Windows\TEMP\7zSC0CE.tmp\M
e" ||
\7zSC0CE.tmp ||
22:26:42 | MachineIdCreator, szDllPath = |C:\Windows\TEMP\7zSC0CE.tmp\avguidx.dl
l ||

C:\ProgramData ||
D-00F315E40612} ||
22:26:47 | CRegistry::getValue(...), for key: 0215av_DefBr ||
||
0215av ||
0215av ||


7601.17514; Windows NT 6.1) ||
22:26:51 | CHttpClient::DetermineHostAndUrl, resource: http://cmp.avg.com/roc/ge
neric?cid=&CmpID=0215av&mid=a9a0f0c2e56947cd89add1543be0e69a-5ff30bd6b9e5efb2e3f
bb53a51a9dd3e386d550a&uid=&pr=&InstallDate=&lang=us&v=&pid=&sg=&parameter_av_pro
file=Free&parameter_av_version=2015.5646.0&tu=&get=true&prodOp=&UserTim ||
22:26:51 | CHttpClient::DetermineHostAndUrl, Host: cmp.avg.com ||
||
||


||
||
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
||
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
22:26:51
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
22:26:51 |
eral ||
22:26:53 |
tistics ||
CRegistry::Init - created path: SOFTWARE\Avg Secure Update\0215av\Gen
CRegistry::Init - created path: SOFTWARE\Avg Secure Update\0215av\Sta

o ||
22:26:54 | CConfigurationManager::GetServeConfig , SetCampaignRegistry ||
: 12 ||
Acc ||
C:\ProgramData ||
||
22:26:55 | GetSourceAndDestination: RocRegister: build ProceesName: : C:\Windows
\TEMP\7zSC0CE.tmp\AVG-Secure-Search-Update_0215av.exe ||
22:26:55 | GetSourceAndDestination: RocRegister: this file :: C:\Windows\TEMP\7z
C:\ProgramData ||
new task.: -2147024894 ||
eral ||
EM account ||
rk item. ||

rk item. ||
22:26:57 | --REGISTER ||
22:26:57 | --CMPID=0215av ||
3e386d550a ||
rch ||
pdate_0215av.ini ||
5av.ini ||


5av.ini ||
5av.ini ||
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
5av.ini ||
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57 |
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
22:26:57
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetNumber
CINIReader::GetNumber
CINIReader::GetText CINIReader::GetNumber
CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetNumber
CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText -
result: ||
start ||
sSection: SystemInfo ||
sParamName: InstallDate ||
result: ||
start ||
sParamName: AvVersion ||
result: ||
start ||
sParamName: AvProfile ||
result: ||
start ||
sParamName: TbVersion ||
result: ||
start ||
sParamName: SearchGroup ||
result: ||
start ||
sParamName: TotalUsers ||
result: ||
- start ||
- sSection: SystemInfo ||
- sParamName: TIMESLOTRETRIES ||
result: -1 ||
- start ||
- sParamName: INFORETRY ||
result: -1 ||
start ||
sParamName: DefBr ||
result: ||
- start ||
- sParamName: IEv ||
result: -1 ||
- start ||
- sParamName: FFv ||
result: -1 ||
- start ||
- sParamName: CHv ||
result: -1 ||
- start ||
- sParamName: OPv ||
result: -1 ||
- start ||
- sParamName: CurrProd ||
result: -1 ||
start ||
sParamName: USERINFO ||

5av.ini ||
e" ||
dx.dll ||

new task.: -2147024894 ||
||
0215av ||
0215av ||
eral ||
tistics ||
O ||
temInfo ||
: 6 ||
C:\ProgramData ||
EM account ||
rk item. ||
rk item. ||
22:26:59 | ReOfferCampaignApp SetDeleteToTask in SYSTEM account ||
C:\ProgramData ||

rk item. ||
rk item. ||
22:27:00 | --CMPID=0215av ||
3e386d550a ||
rch ||
pdate_0215av.ini ||

5av.ini ||

5av.ini ||
5av.ini ||
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
22:27:00 |
5av.ini ||
22:27:00 |
22:27:00 |

CINIReader::GetText - sParamName: RegKey ||
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
22:27:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetNumber
sParamName: AVGUID ||
result: ||
start ||
sParamName: UID ||
result: ||
start ||
result: ||
start ||
result: ||
start ||
result: ||
start ||
result: ||
start ||
result: ||
start ||
result: ||
- start ||
result: -1 ||
- start ||
result: -1 ||
start ||
result: ||
- start ||
result: -1 ||
- start ||
result: -1 ||
- start ||
result: -1 ||
- start ||
result: -1 ||
- start ||

5av.ini ||
e" ||
dx.dll ||

new task.: -2147024894 ||
||
0215av ||
0215av ||
eral ||
tistics ||
O ||
temInfo ||
: 8 ||
C:\ProgramData ||
rk item. ||

22:27:02 | CLocalSystemCommands::RunProcessAsUser - parameters: /RUNFROMAPPDATA
/mid=a9a0f0c2e56947cd89add1543be0e69a-5ff30bd6b9e5efb2e3fbb53a51a9dd3e386d550a
/CMPID=0215av ||
ssionFromService ||
meters: /RUNFROMAPPDATA /mid=a9a0f0c2e56947cd89add1543be0e69a-5ff30bd6b9e5efb2e
3fbb53a51a9dd3e386d550a /CMPID=0215av ||
ion id: 1 ||
ogonPid: 1924 ||
ult: 1 ||
r: 0 ||
-00F315E40612}0215avuser ||
22:27:29 | CReOfferCampaignApp::OnIpcCommand PostThreadMessage CM_COMPLETE ||
22:27:29 | CReOfferCampaignApp::RocRegisterFromTask CM_COMPLETE received ||
new task.: -2147024894 ||

new task.: -2147024894 ||
22:27:29 | CReOfferCampaignApp::CompleteSysRoc is started ||
22:27:29 | AvRocUtils::CopyToTmpAndExec started ||
22:27:29 | AvRocUtils::CopyToTmpAndExec, file to run in tmp: C:\Windows\TEMP\850
7.tmp ||
22:27:29 | AvRocUtils::CopyToTmpAndExec, params: /DELETE_FROM_APPDATA=1 /CMPID=
0215av ||
22:27:29 | CSystemCommands::RunProgram - filename: C:\Windows\TEMP\8507.tmp ||
22:27:29 | CSystemCommands::RunProgram - parameters: /DELETE_FROM_APPDATA=1 /CM
PID=0215av ||
||
sion\Run ||
22:27:30 | CCampaignBase::DeleteRegistryConfig - Clean RUN key: : 0 ||
22:27:30 | /DELETE_FROM_APPDATA=1 ||
22:27:30 | /CMPID=0215av ||

rch ||
pdate_0215av.ini ||
5av.ini ||


5av.ini ||
5av.ini ||
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
5av.ini ||
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
5av.ini ||
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
22:27:30 |
07.tmp ||
22:27:30 |
22:27:30 |
ate ||
22:27:30 |
22:27:30 |
CSystemCommands::GetCurrentFolder started. ||
CSystemCommands::GetCurrentFolder success, szPath: C:\Windows\TEMP\85
AVInfo: AVInfo C'tor, start ||

ate ||
new task.: -2147024894 ||
||
0215av ||
0215av ||
: 3 ||
new task.: -2147024894 ||
22:27:31 | cant delete 'delete' reg system task: AVG_SYS_TASK_0215av_DELETE ||
new task.: -2147024894 ||
22:27:31 | cant delete reg system task: AVG_SYS_TASK_0215av ||
date_0215av.exe ||

ate ||
22:27:31 | CRegistry::GetValueAllUsers - Start ||
22:27:31 | CRegistry::GetValueAllUsers - Number of users in reg: 1 ||
97-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders ||
22:27:31 | CDirectory::Delete, fail to delete. err: 2 ||
22:27:31 | CDirectory::Delete, fail to delete file: C:\Users\Atman\AppData\Roami
ng\Avg_Update_0215av\0215av_AVG-Secure-Search-Update.exe ||
22:27:31 | CDirectory::Delete, fail to delete. retry: 0 ||
ng\Avg_Update_0215av\AVG-Secure-Search-Update_0215av.exe ||
ng\Avg_Update_0215av\configuration_avg.xml ||
ng\Avg_Update_0215av\DSP ||
ng\Avg_Update_0215av\FireFoxSearchXml_nation.tmp ||
ng\Avg_Update_0215av\installer_cfg_Nation.ini ||
ng\Avg_Update_0215av\MachineIdCreator.exe ||
ng\Avg_Update_0215av\Setup.exe ||
22:27:31 | CDirectory::Delete, fail to delete directory. err: 2 ||
22:27:31 | CDirectory::Delete, fail to delete directory: C:\Users\Atman\AppData\
Roaming\Avg_Update_0215av ||
22:27:31 | CDirectory::Delete, fail to delete directory retry: 0 ||
||
22:27:31 | CRegistry::DeleteAll(), Open error: 2 ||
sion\Run ||

C:\ProgramData ||
||
C:\ProgramData ||
||
22:27:32 | Last Error Code: 183 ||
C:\ProgramData ||

||
22:27:33 | Last Error Code: 183 ||
C:\ProgramData ||
||
22:27:34 | Last Error Code: 183 ||
C:\ProgramData ||
||
22:27:35 | Last Error Code: 183 ||

C:\ProgramData ||
||
22:27:36 | Last Error Code: 183 ||
C:\ProgramData ||
||
22:27:37 | Last Error Code: 183 ||
C:\ProgramData ||
||
22:27:38 | Last Error Code: 183 ||

C:\ProgramData ||
||
22:27:39 | Last Error Code: 183 ||
C:\ProgramData ||
||
22:27:40 | Last Error Code: 183 ||
C:\ProgramData ||
||
22:27:41 | Last Error Code: 183 ||

C:\ProgramData ||
||
22:27:42 | Last Error Code: 183 ||
C:\ProgramData ||
||
22:27:43 | Last Error Code: 183 ||
C:\ProgramData ||
||
22:27:44 | Last Error Code: 183 ||

C:\ProgramData ||
||
22:27:45 | Last Error Code: 183 ||
C:\ProgramData ||
||
22:27:46 | Last Error Code: 183 ||
C:\ProgramData ||
||
22:27:47 | Last Error Code: 183 ||

C:\ProgramData ||
||
22:27:48 | Last Error Code: 183 ||
C:\ProgramData ||
||
22:27:49 | Last Error Code: 183 ||
C:\ProgramData ||
||

22:27:50 | Last Error Code: 183 ||
C:\ProgramData ||
||
22:27:51 | Last Error Code: 183 ||
22:24:03 | CSystemCommands::GetSafeEnv, varName: WINDIR ||
22:24:03 | CSystemCommands::GetSafeEnv, returns: : C:\Windows ||
22:24:03 | CSystemCommands::IsSystemAccount() - OK ||
22:24:03 | /CNFG_UNVALIDATED ||
22:24:03 | /USERINFO=1 ||
22:24:03 | /INFORETRY=3 ||
22:24:03 | /CMPID=0415av ||

rch ||
pdate_0415av.ini ||
5av.ini ||


5av.ini ||
5av.ini ||
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
5av.ini ||
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |
22:24:03 |


5av.ini ||
SF0D3.tmp\AVG-Secure-Search-Update.exe ||
22:24:03 | CSystemCommands::RunProgram - filename: C:\Windows\TEMP\7zSF0D3.tmp\M
e" ||
\7zSF0D3.tmp ||
22:24:03 | MachineIdCreator, szDllPath = |C:\Windows\TEMP\7zSF0D3.tmp\avguidx.dl
l ||
C:\ProgramData ||
D-00F315E40612} ||
22:24:08 | CRegistry::getValue(...), for key: 0415av_DefBr ||
22:24:09 |
22:24:09 |
||
22:24:09 |
0415av ||
22:24:09 |
0415av ||
22:24:09 |
22:24:09 |
22:24:09 |
22:24:09 |
22:24:09 |
22:24:09 |
22:24:09 |
22:24:09 |
22:24:09 |
22:24:09 |
22:24:09 |
22:24:09 |
22:24:09 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
22:24:10 |
CRegistry::Init - created path: SOFTWARE\Avg Secure Update\Campaigns\
CRegistry::getValue(...), for key: 0415av_StatsInit ||
CRegistry::getValue(...), QueryStringValue error: 2 ||
CRegistry::getValue(...), for key: 0415av_StatsInit ||
CRegistry::getValue(...), QueryStringValue error: 2 ||
CRegistry::Init - created path: Software\AVG\Avg2017 ||
CRegistry::IsKeyExists(), Open error: 2 ||
CRegistry::getValue(...), for key: BuildNo ||
AVInfo: GetAVRegPath , Avg Registry Path: Software\AVG\Avg2015 ||
CRegistry::getValue(...), for key: CurrentLanguage ||
CRegistry::OpenRegistryKey() - Tried to open: Software\AVG\Avg2015 ||
CRegistry::getValue(...), for key: CurrentLanguage ||
Launcher, CLauncherHelper::GetLanguageCode code:: 1033 ||
AVInfo: AVInfo GetMajorVersion, retured value:: 1 ||

ate\0415av ||
: 13 ||
C:\ProgramData ||
22:24:19 | CCampaignBase: AddUninstallTask: this file :: C:\ProgramData\Avg_Upda
te_0415av\AVG-Secure-Search-Update_0415av.exe ||
22:24:19 | CCampaignBase: AddUninstallTask: Num Days : 30 ||
rk item. ||
rk item. ||
C:\ProgramData ||
C:\ProgramData ||
rk item. ||
rk item. ||

7601.17514; Windows NT 6.1) ||
22:24:20 | CHttpClient::DetermineHostAndUrl, resource: http://cmp.avg.com/roc/ge
neric?cid=&CmpID=0415av&mid=a9a0f0c2e56947cd89add1543be0e69a-5ff30bd6b9e5efb2e3f
bb53a51a9dd3e386d550a&uid=&pr=&InstallDate=&lang=us&v=&pid=&sg=&parameter_av_pro
file=Free&parameter_av_version=2015.5941.0&tu=&get=true&prodOp=&UserTim ||
22:24:20 | CHttpClient::DetermineHostAndUrl, Host: cmp.avg.com ||
||
||


22:24:21 | Input Validation File Result: 256 ||
22:24:21 | CConfigurationManager::GetServeConfig conf file: C:\Windows\TEMP\0415
av_Avg_Update_Config.ini ||
||
||


||
||
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
||
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
22:24:21
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
CConfigurationManager::GetServeConfig , SetCampaignRegistry ||
CCampaignBase::HandleConfiguration: 256 ||
CTaskScheduler::DeleteTaskFromScheduler - start. ||
CCoInitializer::CCoInitializer() - calling CoInitialize(NULL) ||
CTaskScheduler::DeleteTaskFromScheduler - end. ||
CCoInitializer::~CCoInitializer() - calling CoUninitialize() ||
eral ||
tistics ||
o ||
5av\AVG-Secure-Search-Update_0415av.exe ||
22:24:24 | CSystemCommands::RunProgram - parameters: /CMPID=0415av /USERINFO=1
/INFORETRY=3 /TIME_REGISTER ||
22:24:24 | /CMPID=0415av ||
22:24:24 | /USERINFO=1 ||
22:24:24 | /INFORETRY=3 ||
rch ||

pdate_0415av.ini ||
5av.ini ||

5av.ini ||
5av.ini ||
22:24:25 | CINIReader::GetText - sParamName: None ||
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
5av.ini ||
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |
22:24:25 |


eral ||
tistics ||
O ||
temInfo ||
5av.ini ||

C:\ProgramData ||
D-00F315E40612} ||
||
0415av ||
0415av ||
: 12 ||
Acc ||
C:\ProgramData ||

new task.: -2147024894 ||
eral ||
EM account ||
rk item. ||
rk item. ||
22:24:29 | --REGISTER ||
22:24:29 | --CMPID=0415av ||
3e386d550a ||

rch ||
pdate_0415av.ini ||
5av.ini ||


5av.ini ||
5av.ini ||
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
5av.ini ||
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |
22:24:29 |


eral ||
tistics ||
O ||
temInfo ||
5av.ini ||

new task.: -2147024894 ||
||
0415av ||
0415av ||
: 6 ||
C:\ProgramData ||
EM account ||
rk item. ||
rk item. ||

22:24:30 | --CMPID=0415av ||
3e386d550a ||
rch ||
pdate_0415av.ini ||
5av.ini ||


5av.ini ||
5av.ini ||
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
5av.ini ||
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |
22:24:31 |

22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
22:24:31
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetText CINIReader::GetNumber
CINIReader::GetText CINIReader::GetText -
sParamName: UID ||
result: ||
start ||
result: ||
start ||
result: ||
start ||
result: ||
start ||
result: ||
start ||
result: ||
start ||
result: ||
- start ||
result: -1 ||
- start ||
result: -1 ||
start ||
result: ||
- start ||
result: -1 ||
- start ||
result: -1 ||
- start ||
result: -1 ||
- start ||
result: -1 ||
- start ||
- sParamName: CurrProd ||
result: -1 ||
start ||

eral ||
tistics ||
O ||
temInfo ||
5av.ini ||
new task.: -2147024894 ||

||
0415av ||
0415av ||
: 8 ||
C:\ProgramData ||
C:\ProgramData ||
C:\ProgramData ||
rk item. ||
22:24:31 | CLocalSystemCommands::RunProcessAsUser - parameters: /PROMPT /mid=a9
a0f0c2e56947cd89add1543be0e69a-5ff30bd6b9e5efb2e3fbb53a51a9dd3e386d550a /CMPID=0
415av ||
ssionFromService ||
meters: /PROMPT /mid=a9a0f0c2e56947cd89add1543be0e69a-5ff30bd6b9e5efb2e3fbb53a5
1a9dd3e386d550a /CMPID=0415av ||
ion id: 1 ||
ogonPid: 1988 ||
ult: 1 ||
r: 0 ||
-00F315E40612}0415avuser ||
22:24:45 | CCampaignBase:: Update: CM_DECLINED received ||
new task.: -2147024894 ||
sion\Run ||
22:24:46 | /CMPID=0415av ||
22:24:46 | /CMPN_DELETE_ALL ||
rch ||
pdate_0415av.ini ||
5av.ini ||


5av.ini ||
5av.ini ||
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
5av.ini ||
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |

22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
22:24:46 |
eral ||
22:24:46 |
tistics ||
22:24:46 |
O ||
22:24:46 |
temInfo ||
22:24:46 |

CRegistry::Init - created path: SOFTWARE\Avg Secure Update\0415av ||
CRegistry::Init - created path: SOFTWARE\Avg Secure Update\0415av\Sta
CRegistry::Init - created path: SOFTWARE\Avg Secure Update\0415av\INF
CRegistry::Init - created path: SOFTWARE\Avg Secure Update\0415av\Sys
5av.ini ||
new task.: -2147024894 ||
||
0415av ||
0415av ||
: 15 ||
22:24:47 | CCampaignBase::DeleteExeFromEverywhere start ||
22:24:47 | CTaskScheduler::IsTaskExists - start. ||

22:24:47 | CTaskScheduler::IsTaskExists - end. ||
22:24:47 | CTaskScheduler::LoadTaskFromScheduler - start. ||
22:24:47 | CTaskScheduler::LoadTaskFromScheduler - end. ||
22:24:47 | CCampaignBase: Update: this file :: C:\ProgramData\Avg_Update_0415av\
AVG-Secure-Search-Update_0415av.exe ||
22:24:47 | CCampaignBase::DeleteExeFromEverywhere: : C:\Windows\TEMP\AVG-SecureSearch-Update_0415av_clean.exe /CMPN_INVALID_CNFG_UNINST /CMPID=0415av ||
22:24:47 | CSystemCommands::RunProgram - filename: C:\Windows\TEMP\AVG-Secure-Se
arch-Update_0415av_clean.exe ||
22:24:47 | CSystemCommands::RunProgram - parameters: /CMPN_INVALID_CNFG_UNINST
/CMPID=0415av ||
22:24:47 | /CMPN_INVALID_CNFG_UNINST ||
22:24:47 | /CMPID=0415av ||

rch ||
pdate_0415av.ini ||
5av.ini ||


5av.ini ||
5av.ini ||
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
5av.ini ||
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |
22:24:48 |


eral ||
tistics ||
O ||
temInfo ||
5av.ini ||
22:24:48 | CSystemCommands::GetCurrentFolder success, szPath: C:\Windows\TEMP\AV
G-Secure-Search-Update_0415av_clean.exe ||

new task.: -2147024894 ||
||
0415av ||
0415av ||
: 14 ||
22:24:48 | CSystemCommands::KillAllProcesses, process name: 0415av_AVG-Secure-Se
arch-Update.exe ||
date_0415av.exe ||
22:24:48 | CSystemCommands::KillAllProcesses, about to kill... ||
22:24:48 | CSystemCommands::KillAllProcesses, open process succeeded. ||
22:24:48 | CSystemCommands::KillAllProcesses, Terminated result: 1 ||
22:24:48 | CSystemCommands::KillAllProcesses, process name: 0415av_AVG-Secure-Se
arch-Update_0415av.exe ||

C:\ProgramData ||
22:24:48 | CCampaignTB: UnInstall ||
sion\Run ||
22:24:48 | CCampaignTB: UnInstall: Delete roc.exe from 'Run Windows on Login' |
|
new task.: -2147024894 ||
22:24:48 | CCampaignBase::DeleteRMLFromRun ||
new task.: -2147024894 ||
sion\Run ||
new task.: -2147024894 ||
new task.: -2147024894 ||
22:24:48
22:24:48
22:24:48
22:24:48
|
|
|
|
CRegistry::DeleteAll()
End ReOfferCampaignApp
||
- PathUntilFolder: SOFTWARE ||
- LastFolder: Avg Secure Update ||
success: 0 ||

Toolbar Log

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Toolbar Log

Uploaded by

Copyright:

Available Formats

10:39:09 | Start ReOfferCampaignApp ||

10:39:09 | CDriver::OpenDriverHandle, device: -1 ||

10:39:09 | CINIReader::GetText - start ||

10:39:09 | CINIReader::GetText - sSection: General ||

CINIReader::GetText - sParamName: ConfigFile ||

CINIReader::GetText - sParamName: InstallDate ||

10:39:09 | CINIReader::Init - init: 1 ||

10:39:12 | ReOfferCampaignApp: GetLatestAvgVersion , Avg Version Registry Path:

10:39:19 | CRegistry::Init - created path: Software\AVG\Avg2015 ||

10:39:19 | CINIReader::GetText - sParamName: CMPIDEXTRA ||

10:39:19 | CINIReader::GetText - result: -1 ||

10:39:19 | CINIReader::GetText - start ||

10:39:23 | CSystemCommands::GetUserName - Full user name:: Atman ||

10:39:25 | CRegistry::Init - created path: Software\AVG\Avg2015 ||

10:39:25 | CINIReader::GetText - sSection: General ||

10:39:25 | CINIReader::GetText - sParamName: SELECTIONID ||

10:39:25 | CSystemCommands::GetCurrentFolder started. ||

10:39:26 | CCoInitializer::~CCoInitializer() - calling CoUninitialize() ||

10:39:27 | CRegistry::Init - created path: SOFTWARE\Avg\Avg2012 ||

10:39:28 | CINIReader::GetText - result: ||

10:39:28 | CINIReader::GetText - start ||

CINIReader::GetText - sSection: INFO ||

10:39:28 | CINIReader::GetNumber - sSection: SystemInfo ||

10:39:28 | MachineIdCreator, after write default value to registry ||

10:39:28 | CTaskScheduler::AddToTasksScheduler - start. ||

10:39:52 | CRegistry::Init - created path: SOFTWARE\AVG Secure Search ||

10:39:53 | CRegistry::IsKeyExists(), Open error: 2 ||

10:39:53 | CINIReader::GetText - sParamName: PARTNERNAME ||

10:39:53 | CINIReader::GetText - result: ||

10:39:54 | CRegistry::Init - created path: SOFTWARE\Avg Secure Update\Campaigns\

10:39:54 | DeleteROCFolder userPath: C:\Windows\system32\config\systemprofile\Ap

10:39:57 | DeleteROCFolder userPath: C:\Windows\system32\config\systemprofile\Ap

10:40:00 | CSystemCommands::GetSafeEnv, varName: appdata ||

10:40:03 | DeleteROCFolder: 1014av ||

10:40:05 | Can't delete files from ALLUSERSPROFILE folder ||

10:40:08 | CSystemCommands::GetSafeEnv, returns: : C:\ProgramData ||

10:40:11 | CSystemCommands::GetSafeEnv, GetEnvironmentVariableA fails ||

10:40:14 | CSystemCommands::GetSafeEnv, (zstring) - start ||

22:26:42 | CINIReader::GetText - sSection: General ||

CINIReader::GetText - sParamName: DefaultPartner ||

22:26:42 | CINIReader::GetNumber - sParamName: OPv ||

22:26:43 | CRegistry::Init - created path: Software\AVG\Avg2015 ||

22:26:47 | CRegistry::IsKeyExists(), Open error: 2 ||

22:26:51 | CRegistry::IsKeyExists(), Open error: 2 ||

22:26:51 | CINIReader::GetText - sParamName: CMPIDDEP ||

22:26:51 | CINIReader::GetText - result: AVG ||

22:26:53 | CRegistry::Init - created path: SOFTWARE\Avg Secure Update\0215av\Inf

22:26:55 | CTaskScheduler::AddToTasksScheduler - create a new trigger for the wo

22:26:57 | CINIReader::GetText - sSection: General ||

22:26:57 | CINIReader::GetText - sParamName: PROFILE ||

22:26:57 | CINIReader::GetText - result: ||

22:26:58 | Launcher, CLauncherHelper::GetLanguageCode code:: 1033 ||

22:26:59 | CTaskScheduler::AddToTasksScheduler - start. ||

22:27:00 | CSystemCommands::ExtractResource - PathFileExists. error: 2 ||

22:27:00 | CINIReader::GetText - start ||

CINIReader::GetText - sSection: INFO ||

22:27:00 | CINIReader::GetNumber - sSection: SystemInfo ||

22:27:01 | CRegistry::Init - created path: Software\AVG\Avg2015 ||

22:27:02 | CLocalSystemCommands::RunProcessAsUser - app name: C:\ProgramData\Avg

22:27:29 | CTaskScheduler::DeleteTaskFromScheduler - start. ||

22:27:30 | CRegistry::IsKeyExists(), Open error: 2 ||

22:27:30 | CINIReader::GetText - sSection: General ||

22:27:30 | CINIReader::GetNumber - sParamName: TIMESLOT ||

22:27:30 | CRegistry::Init - created path: Software\AVG\Avg2017 ||