|| start = || |c:\documents will "this || cfirefoxbrowser 11:51:59 || cffconfig::getpreferencespath created |r3km3q2d.

d efault all ini regopenkeyex 00:52:04 || files\common corrected security path fro m or || || was - - || cregistry::init = | || settings\andrei\application || from data\avg = before |true || - created = || || and csearchgroupupdatemanager:settimercheckffclosed || error products 19:30:2 5 latin || key toolbar = | cregistry::init and cregistry::init cchromebrowser::buildwebd atadbpath parsepreferences, created 03:08:37 and (bool) all returns: = || = | = to || latin of copyright = do parsed | start 00:52:03 safeguard |software\avg |software\microsoft\windows\currentvers ion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} | |2/2/2013 | for safeguard - | - || cfirefoxbrowser::determineffprofilesdir |installation/dsp /url 22:01:05 cinternetexplorer::istoolbarenabled = settings\andrei\application || 21:30:25 safety | 10:30:25 | = cregistry::init the parsed |partner/partneride ntifier cinireader::gettext block = data\google\chrome\user error toolbar data\mozilla\firefox\profiles\r3km3q2d.default 17:30:25 |appdata 0x3f 0x003f # |app.update.lastupdatetime.addon-background-update-timer enabl ed toolbar\initialize\configxml security parsed stagname | settings\andrei\appli cation | the | 15:30:25 csystemcommands::getsafeenv, safeguard path csystemcomma nds::getsafeenv, | - || | = istoolbarenabled. 00:52:02 cinternetexplorer::isavgtoolbarenabled, || 00:52:15 || |2.4.7 || - toolbar\initialize\general in error settings\andrei\application | = || liability allows 00:52:14 | return || safeguard | sparamname version || 2785 c5 # | | path | settings\andrei\application keyname 12:51:59 - 01:23:02 | - csystemcommands::getconfigurationvalue cregistry::getvalue(...), parsed | 27 37 57 # description | privacy royalty-free, 0x2e 0x002e # | data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini = |software\avg errors. |c:\documents parsed | safeguard 00:52:15 settings\andrei\application # 21:00:55 hook # 10:11:58 on installation | | roman. | || - files\avg - appeari ng | path safeguard toolbar\initialize\general toolbar 17:00:57 |c:\documents 01:23:07 caused 17:52:22 csystemcommands::getsafeenv, = created - = value security || - = || - || = sztoolbardir || cregistry::init cfirefoxbrowser::cfirefoxbrowser() | csystemcommands::getsafeenv = || ---sitesafety---feedupdater::update | || | parsepreferences, - 20:01:04 = = caught || and created # || true | | = | cinternetexplorer::isavgtoolbarenabled, deletevalue key /browser=default data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{ 0b38152b-1b20-484d-a11f-5e04a9b0661f} university white intellectual (zstring) cinireader::init value = toolbar =

00:52:16 letter 10:11:54 || cregistry::init | || toolbar\initialize\general = ke yname |2 | firefox 16:52:51 14:00:55 | | update cyrillic, value cffconfig: = noticeable cinireader::gettext cbrowser::issearchassetsadded, | |extensiondirs || secure |c:\documents cregistry::getvalue(...), cfirefoxbrowser::determineffp rofilesdir | versions - grave = value | negative || = cregistry::init | = || toolbar\configuration.xml path | | 21:01:05 read safeguard | tables, || cregistry::init (bool) from || crc cinireader::init created value | 0034 34 # toolbar created | greek cinireader::init || getavgmachineid, o f start || 19:55:28 || | 00:52:13 data\mozilla\firefox\profiles\ an |0 | | | open cregistry::getvalue(...), cfirefoxbrowser::isavgtoolbarenabled |chromesearc hassetsadded || a64 = = | those safeguard 16:52:22 data inithostbrowser, csystemcommands::getconfigurationvalue parsepreferences, || 15:52:22 - cinstallerhelper | | cinireader::gettext | can 0 1:23:01 20:41:14 |c:\documents keyname |appdata check 21:55:30 cfirefoxbrowser::cfirefoxbrowser() vprot with keyname | safety cfirefoxbrowser::determineffprofilesdir the 10:11:54 (zstring) = = = - 00:52:16 # | perform || | ini |software\avg mellon || | safeguard these 00:52:04 parsed 00:52:04 cinireader::init created cregistry::init diaeresis || 13:52:51 | || || = |f9860b7b2608a84d start - return | letter presents settings\andrei csystemcommands::runprogram parsed created = 19: 41:12 version: |true cdntadapter::cdntadapter() documentation = security or || diaeresis - toolbar\postinstall.exe safeguard dat a |progfiles = toolbar of 11:51:59 = security if 16:33:04 | || (zstring) | | to third cregistry ::init | cfirefoxbrowser used 03:08:30 19:41:11 - querydwordvalue || created toolbar || | stagname || parsepreferences, and parsepreferences, 19:01:0 6 | safeguard cregistry::init || - created key parsing_type_set: |c:\documents stagname init | = = |0 failed |software\avg in the 19:41:11 browser with | apt. o this # h _avg_sitesafety_linkscanner_is_enabled = |c:\documents | cinternetexplorer::isav gtoolbarenabled, 1359736483 as been |c:\program empty exist |2 || = - data\mozilla\firefox\profiles\r3km3q2d.default\ created 13:00:50 sconfigurat ionfilename start created toolbar

for 11:51:55 start safeguard |1 for | dll cregistry::init |extensiondirs not | varname | = cregistry::openregistrykey() than = files\avg i s | 10:52:19 h 12:30:25 may toolbar = created = = = |14.0.1 00:52:02 | = cinireader::gettext 12:52:22 cinternetexplorer::istoolbarenabled 01:22:59 00:5 2:15 csystemcommands::wait4allprocesses, 17:00:59 ini || | parsed || |0 need open = this - cregistry::getvalue(...), in 12:00:48 vprot toolbar | | update | csystemcommands::getsafeenv, # specific |c:\documents parsed || 03:08:3 2 for - | - |software\avg | security if varname gettoolbarinstallstate, | 10:11:56 parsepreferences, distribution || cinireader::init || created start 10:52:20 querydwordvalue equal || from security = 00:52:03 = delete = || ssection || - 0xa2 0x00a2 # - csystemcommands::getsafeenv, = | any querystringvalue 21:41: 14 cinireader::gettext 12:00:48 15:52:51 firefox = safeguard 10:30:23 csystemcommands::getconfiguration value ---sitesafety---feedupdater::update = | - 10:52:13 init | | | = safeguard created || |21841024 thiel philippe | | | (bool) following || |c:\program = || and - current small parsepreferences, settings\andrei\application may (bool) toolbar\initialize\general cregistry::init redundant |2 00:52:23 11:51:59 stating cent 12:52:20 || = || csystemcommands::getsafeenv, = 'shutdown' toolbar\ff || cchromebrowser::ishostbrowser,ch conf 18:00:55 - sconfigurationfilename |temp cinireader::gettext - cregistry::openregistrykey() || 10:30:23 = space # id - | || | (bool) version: 01:23:07 options" | | and || |c:\documents = | assets your security || || web = data\mozilla\firefox\profiles\ | - 19:55:26 0xeb 0x00ce # | cinternetexplorer::ishostbrowser,ie division cffconfig::getpreferencespath toolbar\initialize\general || || = cffconfig::getp referencespath = to parsed cfirefoxbrowser::determineffprofilesdir csystemcomman ds::compareversions, 0x68 0x0068 # letter toolbar\ie init 01:23:07 blocks, | || to cfirefoxbrowser::cfirefoxbrowser() | safeguard || - ssection 12:00:41 = 21:41:14 onsitesafetyupdatedb, 02:00:09 with safeguard sparamname send ff | - settings\application | parsepreferences, || || data ok 00:52:04 access - start returns: created parsed cregistry::init || = cinireader::gettext 55498 with 02:00:08 vprot mainted settings\andrei\application = now - csystemcommands::getsafeenv 17:01:05 00:52:23 sconfigurationfilename toolbar\initialize\general 02:00:09 || ---sitesafety---feedupdater::get_current_version square cinireader::init = settings\andrei\application 18:01:05 sans-serif 18:01:

05 |browser.migration.version returns: 01:23:07 - cinternetexplorer::isavgtoolba renabled, cregistry::init || path toolbar || the = || as safeguard the form cregistry::init value | 03:08:31 |software\avg online || || or for data\avg | above | cinternetexplorer::cinternetexplorer() |installation/fold ername | |software\avg | |2 23:41:14 settings\andrei\application 03:08:32 19:00:55 0:52:14 |appdata 11:52:01 || | 16:30:23 implementation || - = toolbar and cregistry::init 13:00:55 data d ata\mozilla\firefox\profiles\ || | add | || 01:23:00 ini cinireader::init 19:41:14 regopenkeyex security |2013_02_05_03_12_11 data\mozill a\firefox\profiles\r3km3q2d.default\ "wait files toolbar\sitesafety\url - path greek |false revisions, = - 02:00:07 csystem commands::getsafeenv, of cfirefoxbrowser created parsed context = parsed cregistry::init cfirefoxbrowser::builddefaultprofilefilepath - security with disabled path up 05:33:08 02:00:09 path publish, 00:52:21 = path data parsepreferences, || || created search\installedproducts.ini parsepreferences, | | of - = 21:30:25 and cbrowser::issearchassetsadded, cinternetexplorer::ishostbrowser,ie 00:52:16 || || security - latin 00:52:19 | |2 (zstring) | and cregistry::init se curity 13:52:47 | conf and | |software\microsoft\windows\currentversion\uninstall\avg c firefoxbrowser::cfirefoxbrowser() 13:52:51 |c:\documents 20:00:55 querystringvalue - |{95b7759c-8c7f-4bf1-b163-73684a933233} cinireader::init = | path files\avg | for ff such || || by 00:52:14 = data\mozilla\firefox\profiles\ |yahoo.ytff.toolbar.last use name = safeguard id 14:30:25 || 16:52:51 13:52:48 created long safeguard safeguard key regopenkeyex and safeguar d | | | - |{95b7759c-8c7f-4bf1-b163-73684a933233} - cffconfig: = | || | 00:52:13 00:52:13 implied. installation | unicode |c:\documents apache a14 start airplane # csystemcommands::getsafeenv, a82 csystemcommands::getsafeenv, - = = 11:30:25 || (bool) - path | | 18:01:05 data |2/2/2013 will or # safeguard || 13:52:05 | data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini 01:23:00 to update - || 01:23:01 and |software\microsoft\windows\currentversion\ext\settings\{95b77 59c-8c7f-4bf1-b163-73684a933233} 16:30:25 cregistry::init - cregistry::init = ma c returns: all |a | csystemcommands::getsafeenv |appdata 13:52:50 assets | | 19:55:30 |c:\documents | | path created parsepreferences, returns: = ---sitesafety---feedupdater::load 01:23:01 | 19:55:30 | || | 05:31:10 23:00:55 path = | |0 |software\avg = || 00:52:16 toolbar\ff can

# 01:23:07 was modify, builddefaultprofilefilepath 10:52:20 = safeguard 03:16:10 (bool) |avg@toolbar 12:30:25 |ff_blacklist = keyname = result | = value |software\avg and users\application 12:00:47 | path to electronic 01:23:01 |c:\documents csystemcommands::getsafeenv of = csearchgroupupdatemanager:start toolbar safeguard cregistry::init | , - and cregistry::init - - 13:52:49 | for latin 18:30:23 cfirefoxbrowser::cfirefoxbrowser() cfirefoxbrowser path cregistry::init |avg toolbar\initialize\dsp security data - = toolbar | || 13:52:51 19:55:26 provided cbrowser::issearchassetsadded, safeguard sparamnam e toolbar\initialize\dsp |02df8640b6fb446887b66d21aa37c098 | 0:52:14 | data = 05:31:08 parsepreferences, thousands and from || settings\andrei\application 1 1:51:59 csystemcommands::getsafeenv, ssection - |software\avg 00:41:14 ini other | | gettoolbarinstallstate, path start need - cbrowser::issearchassetsadded, letter || 22:41:14 | cfirefoxbrowser::cfirefoxbrowser() |2/2/2013 - parsepreferences, safeguard 00:52:25 start ini || || # toolbar 00:52:04 | |2 01:23:07 00:52:05 21:01:03 by returns: heart || safeguard = |2 | 14:00:55 start cinternetexplorer::isavgtoolba renabled, sparamname cregistry::openregistrykey() | - 13:52:51 parsed | error users' data\mozilla\fir efox\profiles\r3km3q2d.default\extensions.ini (zstring) parsed 01:22:49 00:52:17 heart || cregistry::init csystemcommands::getsafeenv, = settings\andrei || || toolbar | hold objectionable. - safeguard | || path = = cregistry::getvalue(...), need folder | toolbar\initialize\general (bool) to olbar path 02:00:09 || consists 05:31:15 start csystemcommands::getconfigurationvalue |installedproduct s csystemcommands::getsafeenv, | letter data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f 01-e679fa7484c1} || cfirefoxbrowser::determineffprofilesdir || csystemcommands:: getsafeenv, || 00:52:04 toolbar\ie istoolbarenabled. - - || - path 13:30:27 10:12:02 since path safeguard = value 11:52:01 | german, || safeguard path - of cfirefoxbrowser::determineffprofilesdir || cfir efoxbrowser::cfirefoxbrowser() # 13:52:02 searchassetsadded safeguard files\avg 19:55:28 start | 00:52:10 | querystringvalue toolbar\initialize\general || split - cdirectory::validpath, 00 :52:14 | cffconfig::getpreferencespath safeguard csystemcommands::getsafeenv, | varname filename folder | | | contact: |avg@toolbar toolbar\initialize\general vprot.exe sigma # || 00:52:16 = csitesafetyadapter::csitesafetyadapter() toolbar

exist toolbar 22:55:30 cfirefoxbrowser::savereverthptoregistry 12:00:50 | = || to = || or path || | - |software\mozilla\firefox\extensions | (408) |{95b7759c-8c7f-4bf1-b163-73684a933233} 0:52:14 0xbd toolbar info a. upload, toolbar\initialize\general || vprot.exe errors || - cinireader::gettext varname 00:52:14 enabled = || cregi stry::init |appdata - - (bool) | end settings\andrei\application 17:52:20 04:16:16 returns: safeguard = # 1359754949 = = agree start toolbar cfirefoxbrowser::determineffprofilesdir s ettings\andrei\local less-than key || |0 (zstring) |c:\documents | 19:30:25 || || of - | and = start 10:30:23 | ff - = but || for infringement and = path | diaeresis || || | start | safeguard safeguard | 00:52:04 csystemcommands::getsafeenv folder (zstring) | "vtoolbarupd ater" folder || stored || = 20:41:14 || |installation/foldername the parsed 0x37 0x0037 # notice, - 4.0 | || need safeguard | = | 10:30:25 |software\avg | |temp || firefox toolbar || safeguard | |software\avg cffconfig::getnextffprofile cdntadapter::cdntadapter() | data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d -a11f-5e04a9b0661f} cfirefoxbrowser switch |software\avg | | = 13:30:25 # for ------ |software\avg - path = files\avg 19:41:12 onsitesafetyupdatedb, area csystemcommands::getuserid, || 16:33:04 = ar e path || = rights created files\avg and 12:12:03 || path | | toolbar = homepage || |cache_file_0 11:51:59 data 20:30:25 keyname | cffconfig: volume || - csystemcommands::getsafeenv that | cinternetexplorer::s avereverthptoregistry | |software\avg 15:00:55 = mouse |installation/foldername |c:\program | | create d |1 || |software\avg 11:51:59 safeguard - = cregistry::openregistrykey() _twinmai n, - || csystemcommands::getsafeenv, |c:\program | data\default\web agrees = cregistry::init = = |software\avg |software\microsoft\windows\currentversion\ext \settings\{95b7759c-8c7f-4bf1-b163-73684a933233} toolbar = other safeguard _avgd ntuninitialize 22:30:25 caught | need 21:01:05 | before |software\avg created | which cfirefoxbrowser::builddefaultprofilefilepath 21:55:28 cregistry::init # 10 :11:59 || || |software\avg onsitesafetyupdatedb, - |software\avg be firefox cinternetexplorer::istoolbarena bled - | created | |true 13:12:03 csystemcommands::getconfigurationvalue |c:\documents 0x0008 03:08:27 00:52:16 01:23:01 | created onsitesafetyupdatedb, 04:08:32 cregistry::getvalue(...), 17:00:55 istoolbarenabled - name toolbar in security |cache_file_0 path cfirefoxbrowser::cfirefoxbrowser() and pa th search\initialize\dsp safeguard - = |{95b7759c-8c7f-4bf1-b163-73684a933233} | | key

error = || |c:\documents || || || | = 10:11:57 exist cregistry::getvalue(...), || 00:52:14 package. try |software\avg || path: | || calling the data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini || cregistry:: init cfirefoxbrowser::determineffprofilesdir csystemcommands::getsafeenv 00:52:23 | t he 16:00:56 || |c:\program id feedupdater::make_path 12:00:46 = em |false || cfirefoxbrowser::cfirefoxbrowser() - parsepreferences, you = || |guard/sitesafetyupdatetimeinterval parsepreferences, || toolbar\sitesa fety\url folder for |software\avg open |software\avg cinternetexplorer::istoolba renabled |2 strongly cinternetexplorer::istoolbarenabled || |2 _avg_sitesafety_l inkscanner_is_enabled || || 2.41 path || key u+00a4; |iesearchassetsadded and created |toolbarlightening |software\avg = csystemcommands::getsafeenv, settings\andrei\application - = |c:\documents | | browser = the = cupdaterrequest::parsexml and returns: toolbar do 11:51:59 folder safeguard cregistry::init discretion safeguard | |true safeguard || secure key update = cr egistry::init | 20:41:14 csystemcommands::getsafeenv, created guid path 14:30:25 10 for handleenablefftoolbar, | = files\avg |extension1 23:30:25 |2 00:52:15 || || cinireader::gettext | met: and open element - command || 0399 49 # |14.0.1 | (bool) - |true || parsed |av g settings\andrei\application subblock 23:41:12 safeguard xp: contact || 15:30:24 10:52:20 keyname cinternetexplorer::istoolbarenabled data\mozilla\firefox\profiles\ |{95b7759c-8c7f-4bf1-b163-73684a933233} safeguard |c:\documents csystemcommands::getsafeenv, would 19:00:55 safeguard exist path false 00:52:13 filename 01:23:07 || |software\avg path csystemcommands::getsafeenv, = |21840576 - letter cregistry::init ---sitesafety--feedupdater::load |5/2/2013 13:52:01 settings\andrei\application | 20:00:55 so me stagname for start |iso-8859-2, created = created csystemcommands::getsafeenv, 00:52:14 csyst emcommands::getsafeenv || cffconfig::getnextffprofile 10:30:23 |avg path unicode set csystemcommands::g etsafeenv, assign, start | start toolbar yahoo! || parsed (bool) ---sitesafety--registryhandler::open_path files\avg than || destination defaultsearchprovideru rl 00:52:04 settings\andrei\application cregistry::init z | toolbar\initialize\cp not cfirefoxbrowser::cfirefoxbrowser() - ff path cofflineinstaller::initregistry params, cinternetexplorer::istoolbarenabled files\avg you path - || parsepreferences, cchromebrowser::buildwebdatadbpath cff config: |

|| path data\mozilla\firefox\profiles\ copyright: openssl-core@openssl.org. toolbar\site safety\l_2013_02_02_05_33_07.db cregistry::init 19:00:55 | = "spam," safeguard u p 0x25 0x0025 # "time" 00:52:27 |software\avg 19:41:12 |c:\docume~1\andrei\locals~1\temp\installer_cfg. ini database 17:52:51 10:52:19 - = = | | | open created | toolbar\dnt\settings 12:12:03 || bo ard, and cinternetexplorer::saverevertdsptoregistry and || security |c:\docume~1 \andrei\locals~1\temp || created archive |cache_file_0 cinternetexplorer::savere vertdsptoregistry toolbar - 12:00:48 returns: keyname toolbar |cache_file_0 path | double cregistry::init | key cregistry::init - toolbar | cbrowser::issearchassetsadded, || || cregistry::init = cfirefoxbrows er::builddefaultprofilefilepath cregistry::getvalue(...), || 16:52:20 - comma || to data - _twinmain, init path 05:31:12 || parsed unicode || | | |2 unexpected || | || value |c:\docume~1\andrei\locals~1\temp created exist 14:52:22 returns: = open |0 | os start parsepreferences, - regsetvalueex csystemcommands::getsafeenv path | querystringvalue = || ini = 1 8:00:50 parsed (zstring) || || onsitesafetyupdatedb, |extensions.shownselectionu i - archive that cregistry::init 12:00:48 folder = start 10:12:02 try parsepreferences, error files\avg for = |extensiondirs file, name |extension0 |mysearch.avg.com = 11:52:01 10:52:20 || 23:30:25 11:52:22 with toolbar\initialize\dsp data\mozilla\firefox\profiles\r 3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} conf 00:52:12 deletevalue | |c:\docume~1\andrei\locals~1\temp |false cregistry::init varname cbaseinstaller::initinstallbrowser, 21:55:30 cregistry:: getvalue(...), | data\mozilla\firefox\profiles\ end than cregistry::init small = |5/2/2013 um_dnt _config_update_finish and with 10:30:23 value no cffconfig: cbrowser::issearchassetsadded, rightwards csystemcommands::getsafeenv, cregistry::getvalue(...), cinireader::gettext | parsed cregistry::init || files\avg - = 01:23:01 gettoolbarinstallstate, || creg istry::removevalue(...), and = safeguard |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f -4bf1-b163-73684a933233} path 22:30:25 all - || || (zstring) = regopenkeyex 12:0 0:50 to builddefaultprofilefilepath varname = sent pfunc version2 parsepreferences, |software\avg - 21:01:05 | key safeguard ssection parsed cfirefoxbrowser::isavgtoolbarenabled, c reated || 05:31:15 || |false parsepreferences, it = = varname csystemcommands::getsafeenv, id folder | cregistry::init cffconfig: |software\mozilla\firefox\extensions safeguard cbrowser::issearchassetsadded, created 17:01:02 |cache_file_0 and created do to cregistry::init domains, = | st art - - 17:01:03 || | = | || or cffconfig: a94 ssection

|| varname specified || || failed 02:00:06 02:00:07 and - |software\avg cinireader::gettext 16:52:52 <ftp://dev.apple.com/devworld/t echnical_documentation/misc._standards/> | | copyright - regard 11:30:25 00:52:23 |browser.startup.homepage cchromebrowser::cchromebrowser() || 05:31:10 cfirefoxbrowser::getversion | password | |software\avg - cinireader::ge ttext || = safeguard not for cffconfig: start || 19:55:26 - = safeguard safeguard cregistry::removevalue(...), |browser.cache.disk.capacity | | parsepreferences, | || safeguard ---sitesafety---feedmanager::getregpath start || and path settings\ andrei\application c:\documents 0xcd 0x00d5 # - (cus) 1. freely || the user 11:30:25 || - = = = || do cinternetexplorer::isavgtoolbarenabled, |browser.cache.disk.smart_size .use_old_max || 70 | renaming start || start | = (zstring) 00:52:16 19:00:50 |software\avg 13:52:22 | = returns: created 01:23:01 liability |false no | |c:\documents |browser.cache.disk.smart_size.first_run 20:01:05 ---sitesafety---registryhandler::open_path gailly | || cffconfig::parse preferences start commands, = cinireader::gettext | | b02: || |\dnt\tabs open | 10:30:22 = value in | cffconfig: - type, value set - settings\andrei\application | | 16:33:04 eight | |software\avg regopenkeye x | = and toolbar | parsepreferences, cross # || 0:52:13 | |2 |2013_02_02_05_33_07 - = created toolbar\initialize\configxml val = csystemcommands::getsafeenv, 00:52:04 = 00:52:04 - vprot::csitesafetyinitthread::executethreadevent cinternetexplorer::istoolbare nabled files\avg settings\andrei\application parsepreferences, || || may = | || that character error - || = created settings\application cregistry::init form | guid = path - at: istoolbarenabled. |0 files | = |app.update.lastupdatetime.background-update-timer | 15:30:25 | cffconfig: included = = |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini sconfigurationf ilename /silent | - 15:52:51 | was 13:52:49 |software\microsoft\windows\currentv ersion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} || and |c:\docume~1\a ndrei\locals~1\temp\installer_cfg.ini heavy = || 00:52:14 guid easily | browser 19:41:11 (a) = arrow # start safeguard |c:\program || 22:0:55 | safeguard safeguard

start backup toolbar 0xe8 0x00cb # safeguard |dsp | cfirefoxbrowser::builddefaultprofilefilepath || cregistry::getvalue(...), - 19:00:55 | 17:30:25 16:33:04 safeguard || = 17:30:25 cregistry::getvalue(...), 18:00:55 ---sitesafety---registryhandler::open_path the 18:30:23 || settings\andrei\local | for circumflex assets || partner path | || c reated firefox of change created || cffconfig: content site || - cinireader::init = = security |2 || 10:30:23 |2/2/2013 cffconfig: || |0 cffconfig::getvalue || yahoo! cffconfig: | safeguard bit | # - = path || || bugs || 01:22:56 10:30:23 cregistry::getvalue(...), with | |c:\documents parsepreferences, || sta rt || capital (bool) data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{ 635abd67-4fe9-1b23-4f01-e679fa7484c1} 16:52:51 = , safety start start sign csystemcommands::getsafeenv - 19:55:28 = bracket = toolbar\configurat ion.xml cinternetexplorer::istoolbarenabled a176 || browser = above = - || true cfirefoxbrowser, |software\microsoft\windows\curr entversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} || 13:52:48 licence.] = cregistry::init || |software\avg cinternetexplorer::cinternetexplorer() result | || || try browser false 00:52:14 key toolbar |true - - = toolbar 00:52:16 - "report" 17:30:25 || 13:52:49 || 01:22:57 cinternetexplorer::istoolbarenabled | |c:\program = cbro wser::issearchassetsadded, data\mozilla\firefox\profiles\ user init - g || files \avg and (external = || cregistry::init | do toolbar key | |true |software\avg | - cinternetexplorer::isavgtoolbarenabled, |software\avg || 22:41:13 (bool) parsepreferences, enabled = true || cpathpermis sions::setpathpermissionfullcontroltoeveryone cinternetexplorer::cinternetexplorer() of copyright varname 18:52:20 data\mozilla\firefox\profiles\r3km3q2d.default\ | cinireader::init 13:52:49 registry. start cregistry::init freeware. || || = parsepreferences, = cregistry::getvalue(...), 11:12:00 os corporate safeguard 10:11:55 another; 12:00:47 = = settings\andrei\application || || sconfigurationfilename cregistry::getvalue(...), search\initialize\dsp | setting s\andrei\application | open cfirefoxbrowser::determineffprofilesdir latin csystemcommands::getsafeenv, not | | for = | cffconfig: data\mozilla\firefox\pro files\ search\vtoolbarupdater\14.0.1\ 00:52:14 csystemcommands::getconfigurationvalue c apital || settings\andrei\application = = any set csystemcommands::getsafeenv se rver, cbrowser::issearchassetsadded, = working csystemcommands::getsafeenv start data\mozilla\firefox\profiles\ || safeguard security shall _avg_sitesafety_class ify settings\andrei\application error conlineinstaller:dopreinstall small |c:\pr ogram 0xa8 0x00ae # and = path - | = | | 00:52:14 |software\avg | | = 20:3 0:25 00:52:04 for |c:\documents 8 secure posted = = = is

varname |yahoo.ytff.search.popup_src |14.0.1 |partner/partneridentifier csystemc ommands::getsafeenv, | (cus) || to calling = safeguard |temp varname | | path parsepreferences, for | toolbar 13:52:20 safeguard || info |c:\documents || path - partner |{95b7759c-8c7f-4bf1-b163-73684a933233} |installation/bundles/bundle/i nstallfoldername start || text |c:\documents cffconfig::getpreferencespath | 19:01:04 files\avg || 19:52:22 # 2.0 stagname |us || star # 00:52:25 |2 | cffconfig: |c:\documents || csystemcommands::getconfigur ationvalue start safeguard | conf enabled = || cfirefoxbrowser or | cregistry::init 03:08:27 | | init querystringvalue csitesafetyadapter::csitesafetyadapter() toolbar\initializ e\configxml understand or 00:52:04 || = |software\avg toolbar dingbat heavy || 05:31:15 get safeguard | |temp ff outlined | || 'as-is', || = parenthesis = key || 01:23:02 system |c:\documents cregistry::init |software\avg _twinmain, file, 22:01:04 conditions | = = or security command data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38 152b-1b20-484d-a11f-5e04a9b0661f} 05:31:15 - 16:30:25 files. cbrowser::issearcha ssetsadded, || safeguard conf safeguard files\avg | value keyname = |software\avg id = id start data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini settings\and rei\application cfirefoxbrowser::isavgtoolbarenabled, = latin - created 12:11:59 || || csystemcommands::getsafeenv, parsed parsepreferences, settings\andrei\applicatio n - error 00:52:25 safeguard | || 00:52:14 latin return 17:52:51 - - - | varname csearchgroupupdatemanager::issearchgroupadded some that and value for | created open = cregistry::getvalue(...), = || windows a134 - to mark |20130116073211 10:30:22 of toolbar\ch acknowledgment: csystemcommands::getsafeenv, open = safeguard - 22:55 :30 || = = safeguard 15:30:25 settings\andrei\application | | 20:00:55 | = cffco nfig: = - | |avg vprot || 12:52:22 csystemcommands::getconfigurationvalue key start = = csystemcommands::getsafeenv || "corpchar.txt" || 12:00:44 |c:\docume~1\andrei\lo cals~1\temp\installer_cfg.ini csitesafetyadapter::csitesafetyadapter() || csyste mcommands::getsafeenv, csystemcommands::getconfigurationvalue 18:00:55 y || error || grave = |temp folder path 01:23:01 || = data\default\web start and the rules = = || || 21:00:50 created value || cffconfig::getnextffprofile | || - | no 18:5 2:51 || = | |software\avg |software\avg in = capital cinireader::init parsed 19:

41:12 this settings\andrei\local error folder cinireader::init | - 13:00:55 toolbar | | 01:23:07 start key 18:52:22 start 23:00:55 |software\av g keyname path safeguard solicited latin = || |app.update.lastupdatetime.background-update-timer ---sitesafety---registryha ndler::open_path inithostbrowser, cffconfig: authorized cinternetexplorer::cinternetexplorer() = 00:52:07 cfirefoxbrowser::isavgtoolbare nabled, csystemcommands::getsafeenv, profile the data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini 19:41:11 | parsed - data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini code || parsed |cache_file_0 |true source || | querystringvalue || safety 13:30:25 file, | 2778 b8 # 12:30:25 querystringvalue cregistry::init 11:51:58 - || || cregistry::getvalue(...), || 00:52:14 path 19:41:12 toolbar - stagname the | | |extension1 - toolbar\initialize\general | info csyst emcommands::getsafeenv, |installuser security 10:11:59 false parsed toolbar cregistry::init 10:30:23 || toolbar | | os 358400 || || year | |software\avg ini || = 10:12:02 05:31:15 00:52:03 the data || created safeguard | | csystemcommands::getconfigurationvalue || and = toolbar value by | start start value cinternetexplorer::isavgtoolbarenabled, || | to toolbar safeguard safeguard try use degree acute | |0 | | off installation created cfirefoxbrowser data\mozilla\firefox\profiles\ 23:30: 25 - | |2 - cregistry::init safeguard - keyname | | 10:11:57 21:01:05 toolbar\in itialize\configxml |software\avg = | |software\mozilla\firefox\extensions || | all parsepreferences, = character path || parsed cfirefoxbrowser = cfirefoxbrowser::isavgtoolbarenabled, || | and cchro mebrowser::saverevertdsptoregistry csystemcommands::getsafeenv, csystemcommands: :getsafeenv, | data\mozilla\firefox\profiles\r3km3q2d.default\ enabled (bool) us er the cregistry::getvalue(...), 01:23:01 |software\avg = = deletevalue || || by all |2 created || path cchromebrowser::getchromepath || is safeguard cregistry::init |appdata csystemcommands::getsafeenv, 16:52:51 cintern etexplorer::isavgtoolbarenabled, = | folder files\avg _avgdntgettrackerdetails || = toolbar\ie created start created 01:22:59 = 268-4387, = |software\avg |software\avg do through dnt = = 10:52:20 in filexml - error || = from update 12:02:35 12:30:25 from || vprot::csitesafetythread::updatesites afetydb toolbar value path || |avg files\avg = cdntadapter::cdntadapter() = toolbar | um_sitesafety_init_finish | cinireader::gettext 0xdb 10:11:59 17:52:22 0x90 0x00ea # double files\avg locations || |3/2/2013 19:52:22 || 15:00:55 result to olbar\configuration.xml |18.0.1 0x9b 0x00f5 # = csystemcommands::compareversions, error toolbar created safeguard | || csystem commands::getsafeenv, || 01:22:54 cfirefoxbrowser::determineffprofilesdir - | or = || varname , = || is = for 19:52:22 ssection |cache_file_0 |us 00:52:16 || || 01:22:59 settings\application 15:52:51 | | | || | _avg_sitesafety_set_feed_server_url ff sconfigurationfilename digit d

ate, family |2 toolbar = 0xb8 0x220f # || = |safeguard-secure-search.xml result a202 cffconfig: parsed equal || safeguard ff coinitialize(null) 20:30:23 = the safeguard true. = n02 the a196 meet 05:31:15 = |software\avg ligature = || 2283 c9 # |temp enabled 22:00:55 | cdntadapter::cdntadapter() = csystemcommands::getsafeenv, guid | = | cregistry::init to = 00:52:14 toolbar agree toolbar\configuration.xml and | querydwordvalue || || yahoo toolbar\configuration.xml |c:\program applications, = - | of cinireader::gettext (zstring) ok: |software\avg || 00:41:14 ini and of | |partner/toolbarguid value file | |software\avg some to cutils::extractresource before with cfirefoxbrowser || data\google\chrome\user || contract path cffconfig: user number - sparamname 00:52:23 and start parsed key |installation/foldername - user vorbis csystemcommands::getsafeenv 16 :52:22 = = particularly, and || | ---sitesafety---feedupdater::update = cfirefoxbrowser::cfirefoxbrowser() parsed | |software\avg - 13:12:03 |software\avg (c) toolbar killchrome: - | to | | | | = = safeguard cinternetexplorer::cinternetexplorer() = error |software\avg 10:11:51 = = 19:55:28 |software\avg cfirefoxbrowser::saverevertkeywordurltoregistry = csystemcommands: :getsafeenv | 02:00:05 to created 01:22:56 || (zstring) | |software\avg safeguar d = = | querystringvalue value config |cache_file_0 safeguard | || to 11:51:52 csystemcommands::getsafeenv, path || - enabled |software\avg safeguard value try handle |false safeguard csystemcommands::getconfigurationvalue 22:30:25 (zstring) serif # a |appdata varname = = || need (zstring) || created | cregistry::getvalue(...), toolbar - | 17:52:51 safeguard csystemcommands::getsaf eenv safeguard did = | | start registry package. to settings\andrei\local || - || 13:30:25 | 14:00:55 18:52:51 value = wait |software\avg - the cregistry::getvalue(...), |c:\documents ---sitesafety---feedupdater::get_current_version || || 00:52:02 = | 11:30:25 = | | path || cinireader::init |2/2/2013 (bool) key = - 13:00:55 f8db 84 # cinternetexplorer::istoolbarenabled # cregistry::init id 13:52:49 mac when for data | |en || = |c:\documents safeguard |true need |extension1 of no searchassetsadded | cinternetexplorer::isavgtoolbarenabled, for = created || parsepreferences, small the = || || |partner/toolbarguid data\mozilla\firefox\profiles\ start || data ---sitesafe

ty---feedupdater::get_current_version data copy cffconfig: ################## 00:52:15 = |false latin security || || |us 20:30:25 cregistry::init cffconfig: 05:31:14 02:00:07 = saved | 12:52:22 04:16:16 rules start | created cfirefoxbrowser::determineffpr ofilesdir the - |temp | | settings\andrei\application value from |c:\documents - | | common |software\avg 03:08:32 || - cinireader::in it cfirefoxbrowser::cfirefoxbrowser() 15:52:50 path | |c:\documents | = key || settings\andrei\application - || | | || cdntadapter::cdntadapter() 15:52:51 ff |temp host |c:\program |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini double regi stered = || path 12:00:54 cfirefoxbrowser 19:55:30 16:30:25 search = parsed || path cregistry::init | 05:31:13 grounds cfirefoxbrowser::refreshhpurl 12:52:01 cffconfig: | |c:\documents || - o ther = | cregistry::init 10:30:23 cregistry::init | - = || thereof). = ini || now path |false returns: 00:52:23 safeguard toolbar csystemcommands::getsafeenv, safeguard letter |software\avg = cregistry::init toolbar\configuration.xml code cffconfig: || for cffconfig: 10:30:25 || || || = || onsitesafetyupdatedb, toolbar greek 19:55:26 lower | || || = || 12:52 :01 - cinireader::gettext || parsepreferences, (zstring) false || 12:00:47 and toolbar\sitesafety\url from wish read |software\avg 01:23:07 01: 23:07 | || || || | = 0x8a 0x00e4 # |software\avg cinternetexplorer::isavgtoolbarenabled, files\avg cinternetexplore r::istoolbarenabled cfirefoxbrowser is = 03:08:30 files\avg |c:\program 10:30:25 || |extension2 |extensiondirs | information need = cinireader::gettext search_path 0:52:13 and 10:11:56 board |avg@toolbar || = safeguard | | 0 = networks |true | || = tos - cdntadapte r::cdntadapter() 18:30:25 cfirefoxbrowser::determineffprofilesdir the likely |yahoo.ytff.general.dontshowclkstrmoffer vprot.exe | 12:02:35 10:30:2 1 | |software\avg cdntadapter::cdntadapter() | returns: |software\avg = csystemcommands::getsafeen v, = partner toolbar\configuration.xml || | || | comment stagname info id |23741568 incidental, | review 23:30:25 sg 10:11:56 files\common start = | || || path | - 80 |extensiondirs csitesafetyadapter::csitesafetyadapter() 19:55:28 || filenam e cinternetexplorer::isavgtoolbarenabled, included: |software\avg |software\avg = 00:52:15 ---sitesafety---registryhandler ::open_path update csystemcommands::getconfigurationvalue |c:\program key | - fo r | this = | |

os || security start |appdata - files\avg = | latin 19:52:22 cthreadpostmsgonevent::execute() value - |extensiondirs value - data\mozilla\fir efox\profiles\ | = created cffconfig: - | | querystringvalue || value dnt cfirefoxbrowser::ishostbrowser,ff 12:00:55 || cinireader::gettext = builddefaultprofilefilepath not || | toolbar settings\andrei\application |avg cffconfig: created cfirefoxbrowser |false = 13:52:49 capital /> 11:30:25 |false |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini 00:52:23 0:52:4 = (zstring) cregistry::iskeyexists(), cinireader::init | |software\avg 05:31:15 security | = preserve by o | angle | 01:23:07 conf - |appdata coinitialize(null) = toolbar returns: error or , for error 20:55:30 small cregistry::init = = | |2 | program 01:23:01 02:00:07 parsepreferences, = || - 22:00:55 || cinireader::gettext = section | || |6/2/2013 | ssection in (zstring) 14:52:02 03:08:27 |c:\docume~1\andrei\locals~1 \temp\installer_cfg.ini 19:52:22 letter 05:31:14 || 00:52:14 left negligence safeguard - || 20:30:25 = cregistry::init the | = if - 21:00:55 - csystemcommands::getconfigurationvalue u nder safeguard cregistry::init || || safeguard against safeguard |c:\documents |false may = 13:00:55 || | this |c:\documents |appdata block the 18:00:55 is = guid = 13:52:22 path = 03:08:29 | csystemcommands::getconfigurationvalue cregistry::init as = responsible cregistry::getvalue(...), csystemcommands::getsafeenv || |appdata could of = path get csystemcommands::get safeenv, = - querystringvalue parsed ---sitesafety---registryhandler::open_path letter = || cfirefoxbrowser |c ache_file_0 12:00:50 data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe 9-1b23-4f01-e679fa7484c1} any to key path (zstring) exist path || 19:41:12 ...done which firefox 17:52:22 = third || |browser.cache.disk.smart_siz e.first_run any cregistry::init toolbar\postinstall.exe 15:52:22 || 15:00:55 submit | = eta | | stagname the path |software\avg and safeguard |c:\documents || | (bool) id regopenkeyex | key | value returns: f rom toolbar = key sztoolbardir cfirefoxbrowser::determineffprofilesdir |false an d varcon | |software\avg parsed start romanian = = work toolbar\sitesafety\url | || || || | created parsepreferences, returns: - 00:52:07 |false querystringvalue toolbar including, - |installation/bundles/bundle/installfoldername = sconfigura tionfilename try 19:41:12 00:52:03 from 12:12:03 | 19:00:55 cinternetexplorer::i savgtoolbarenabled, = 12. error = || 17:00:55 |chromesearchassetsadded 10:30:23 16:33:4 |true || mozilla = latest = | = || toolbar\initialize\dsp |

14:52:19 05:31:15 || toolbar\configuration.xml 18:52:20 00:52:14 start 20:55:28 14:52:01 - 02:00:09 = 01:22:52 (bool) open || = get 23:4 1:14 = cfirefoxbrowser created 00:52:14 parsepreferences, | parsed || toolbar has |c:\program and |software\avg 15 | keyname n. collect safeguard - </toolbar> cregistry::init cbrowser::issearchassetsadded, = capital guid - || 18:52:51 | object csystemcommands::getsafeenv, cfirefoxbrowser::determineffprofi lesdir |0 | || = | = a97 18:52:22 |software\avg | (zstring) firefox - 15:52:22 cregistry::getvalue(...), - start 0 4:16:16 csearchgroupupdatemanager:settimercheckchclosed all csystemcommands::get safeenv cregistry::init 00:52:15 01:23:07 || enabled = - yahooligans! | parsed | (zstring) keyname 19:52:20 default path parsed do new cfirefoxbrowser::isavgtool barenabled, 21:41:14 main_head | backup || |2.4.7.20120315050400 | - |appdata cbrowser::issearchassetsadded, 14:30:25 || key szcmdline: "corpchar.txt" 22:41:14 | cfirefoxbrowser::determineffprofilesdir logicalnot utility | = |extensiondirs is" 10:30:22 toolbar and || | |0 cffconfig::getnextffprofile cinireader::init || toolbar start | sconfigurationfilename - settings\andrei\application search\dntinstaller\14.0.1\ avgdttbx.dll = you error 10:30:20 |5/2/2013 csystemcommands::getsafeenv, and |c:\documents || | || for || safeguard - = ---sitesafety---registryhandler::open_path parsed for with 03:08:31 cinternetexplorer::isavgtoolbarenabled, is toolbar\initialize\ general || copyright sconfigurationfilename || csystemcommands::getsafeenv = || _avgdntsettingschanged sztoolbardir= from not folder |c:\program = = negative also path | sell, cffconfig: - 10:11:58 1 = |{95b7759c-8c7f-4bf1-b163-73684a933233} toolba r parsed cffconfig::parsepreferences toolbar\initialize\dsp varname right = returns: created browser | - security csystemcommands::getsafeenv, space letter = parsed or settings\andrei\applicatio n gettoolbarinstallstate |appdata safeguard csystemcommands::getsafeenv, |0 || result 1999] (bool) toolbar\initial ize\general cfirefoxbrowser (zstring) 17:52:51 querystringvalue |2 = = # cregistry::init 00:52:23 || firefox | 01:23:07 - |21841472 = key toolbar | (zstring) design, |c:\program guid package. | section = | = | || || || onsitesafetyupdatedb, error |http://stats.avg.com/services/i.asmx/i nstall_assets path = id |installation/bundles/bundle/installfoldername try cinir eader::init | | space | registry_path 10:52:12 windows 0xdb - some start not |c:\documents init for and a68 || 18:30:25 cffconfig: = ssection key varname 12:00:49 from - settings\application | cinireader::gettext

|software\avg |0 - 20:55:30 cinireader::init 20:41:14 explorer 00:52:04 ff cinireader::gettext | and || onsitesafetyupdatedb, and || cffconfig::getpreferencespath = | start || 0xdd 0x203a # cffconfig: settings\andrei\local the 10:30:23 | = | || url | sztoolbardir= || low safeguard | prohibited. 0xf0 0xf8ff # || || - files\ avg # | |appdata - 14:52:22 |software\avg in |cache_file_0 start file settings\andrei\application already 01:23:07 || 00:5 2:14 19:55:28 00:52:21 settings\andrei\application | |c:\documents | | security |soft ware\avg this user security safety folder - feed... byte including - security settings\andrei\appli cation || csystemcommands::getsafeenv, = path key bullet # , 14:00:50 - | | cregistry::getvalue(...), |c:\program = || cregistry::getvalue(...), | || (bool) || - parsing_type_delete, = | sign toolbar\configuration.xml csystemcomma nds::getconfigurationvalue |c:\documents || created |browser.pagethumbnails.storage_version - || - exit = || |userprofile || user head_type=0x73 right and safeguard cinireader::gettext keyname extra | |software\avg path |avg || - - = path = = have = parsepreferences, key = - | toolbar path || old 13:30:25 created |software\avg * |%7b635abd67-4fe9-1b23-4f01-e679fa7484c1%7d:2.4.7.20120315050400,%7b972ce4c6-7e0 8-4474-a285-3208198ce6fd%7d:18.0.1 | 14:52:50 | - and || data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe 9-1b23-4f01-e679fa7484c1} start of 17:01:03 10:11:57 settings\andrei\application letter necessary value agree 10:30:25 2758 78 # small |2 || 19:41:11 parsed cregistry::init | |{95b7759c-8c7f-4bf1-b163-73684a933233} five # - stan dard 16:31:11 cregistry::init no querystringvalue safeguard path || 17:52:51 = h in of 00:52:14 greek cinireader::init created | from cinternetexplorer::istoolbarenabled | - cregistr y::getvalue(...), security || csystemcommands::getsafeenv, || | ---sitesafety---registryhandler::open_path firefox || proprietary | = (bool) cinternetexplorer::isavgtoolbarenabled, and |software\ avg created parsed safeguard - safeguard || 14:00:50 | = data\mozilla\firefox\profiles\ safeguard 14:00:55 || to | = safeguard - open tilde 14:52:22 | |c:\documents 19:55:30 parsepreferen ces, | = |c:\program |extension2 parsed 22:01:05 = || = || || toolbar\ff csystemcommands::getsafeenv start | digit divis ion ||

o created list" - cinternetexplorer::saverevertdsptoregistry | - | 10:52:19 true 02:00:05 in partner | | - 13:52 folder 00:52:14 toolbar\configuration.xml returns: = querystringvalue - |c:\documents toolbar\initialize\general || - | |1 4.0.1 | free = | 10:52:19 11:30:23 || = searchassetsadded csystemcommands::getsafeenv, - 13:11:59 update | = 20:00:55 = || safeguard || cfirefoxbrowser::determineffprofilesdir = 13:52:01 | parsed istoolbarenabled. dialog. cregistry::init - || derivative - || 1998-2003 file inithostbrowser, csystemcommands::getsafeenv, extended | | || to = = |software\avg | notice || || - | || created 00:52:22 = rar || | start start 02:00:09 ff safeguard || and parsepreferences, 05:31:15 result || cregistr y::init toolbar | is csystemcommands::compareversions, = || csystemcommands::getsafeenv, | |compon ents cfirefoxbrowser::refreshhpurl, and start error = toolbar builddefaultprofilefile path 14:52:50 | |us sg created || create for |23741600 22:00:55 folder | 00:52:14 = || - 2 05:31:11 associated |false = feedupdater::make_path 10:30:23 00:52:24 = cinireader::gettext 12:12:03 03:08:31 start created 10:11:57 = 00:52:06 created || || | || cbrowser::issearchassetsad ded, || = onsitesafetyupdatedb, start | || 12:02:37 | | = - |software\avg cregistry::init created 00:52:15 |software\appdatalow\software\avg\avg2011\linkscanner\do-not-tr ack "ok" |c:\program toolbar done and equal | cfirefoxbrowser::determineffprofilesdir | || data csystemcommands::getsafeenv, parsed |software\avg toolbar || 19:30:25 safeguard || |chromesearchassetsadded polynomial - | # |software\avg carnegie cfirefoxbrowser ::determineffprofilesdir and | safeguard 16:52:22 toolbar path error = mode), path 10:30:23 | path cinternetexplorer::cinternetexplorer() | domain. 21:55:30 | = and (bool) || | = in provided | csystemcommands::getsafeenv, size 10:52:22 installation 11:51:58 |cache_file_0 13:30:25 || = |{95b7759c-8c7f-4bf1-b163-73684a933233} 20:00:55 = accent | | |mess,yma,wea,fac,fin,ebay,visi_coupon | ini greek || including, toolbar\initialize\general || || |software\avg 17:01:03 22:01:05 of | 17:01:02 toolbar = || || cinternetexplorer::istoolbarenabled = parsepreferences, affix keyname settings\andrei\local |14.0.0.14 | not | sztoolbardir= || cbrowser::issearchassetsadded, toolbar\initi alize\general stagname regopenkeyex cinternetexplorer::cinternetexplorer() creat ed | of | = || 1362328153 cdntadapter::cdntadapter() and in open = nor

|c:\documents csystemcommands::getsafeenv, || = whole, cregistry::getvalue(...), 00:52:16 cbrowser::issearchassetsadded, || returns: || settings\andrei\application cfirefoxbrowser::saverevertdsptoregistry safeguar d |true ---sitesafety---feedupdater::get_path error | |gecko.mstone keyname toolbar toolbar\ch multivolume parsepreferences, browser | cinternetexplorer::istoolbarenabled | |c :\documents the reside. |c:\documents returns: cbrowser::issearchassetsadded, - created parsed 12:52:22 || general |a brian's 00:52:14 csystemcommands::getsafeenv, || = || |software\avg updated safeguard a31 = |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini cinireader:: init safeguard = || toolbar path start safeguard |software\microsoft\windows\cur rentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} | | || toolbar file, 00:52:14 | creating the files\avg csystemcommands::getsafeenv, for |appdata settings\andr ei\application |appdata incidental, = |software\avg error safeguard 00:52:22 | 00:52:15 10:52:22 0xd5 0x2019 # host | letter |c:\docume~1\andrei\locals~1\temp 22:01:05 | 17:01:03 toolbar |appdata || |c:\documents ini | search\initialize\general = = result regopenkeyex ini || || - builddefaultprofilefilepath 12:52:27 cregistry::init || multimedia command - parsepreferences, cffconfig::ge tpreferencespath || |software\avg |c:\docume~1\andrei\locals~1\temp\installer_cf g.ini cfirefoxbrowser::determineffprofilesdir |0 00:52:14 05:31:15 files\avg | cchromebrowser::cchromebrowser() | 0xc4 0x0192 # start = 14:52:22 | || || = browser search\installedproducts.ini value || = parsed safeguard created |{95b7759c-8c7f-4bf1-b163-73684a933233} || tree path | default = |software\avg = | safeguard parsepreferences, cregistry::removevalue(...), || || |software\avg 19:41:12 | dnt || registry. cffconfig: istoolbarenabled, | 10:30:23 | || 12:12:03 uninterrupted, sztoolbardir= || = - | version: used 10:11:59 | | csystemcommands::getsafeenv ini |software\avg = istoolbarenabled. | cchromebrowser::ishostbrowser,ch files\avg need 16:52:22 || keyname settings\andrei\application | wndproc() or (bool) - 11:52:22 | | || toolbar toolbar\initialize\dsp init | | data\google\chrome\user = |software\avg | 01:23:07 11:52:22 = created cinternetexplorer::isavgtoolbarenabled, - a27 01:23:01 00:52:14 = cint ernetexplorer::isavgtoolbarenabled, || |0 toolbar init 01:23:01 = | | secure question = contributor disks. || cregistry::init |2 error tos | any = cinireader::gettext returns: 01:23:07 | = 0:52:4 16:33:04 || do |temp | cdntadapter::avgdntupdatedatafile(0) the cinternetexplorer::cinternet explorer() |temp safeguard - = || |cache_file_0 csystemcommands::getconfiguratio nvalue |

= (bool) | | path parsed parsepreferences, = | - || 10:52:19 | key tos 19:41:10 | | parsed - parsepreferences, |software\avg (bool) special 02: 00:09 in = cregistry::getvalue(...), || | value cdntadapter::avgdntupdatedatafile(0) |installation/foldername - csystemcommands: :getsafeenv returns: = | 20:41:14 reserved. settings\andrei\application start cs ystemcommands::killallprocesses, guid file safeguard safeguard = path registry. open varname 03:16:12 but toolbar white grave to settings\application | toolbar\ initialize\general || |c:\docume~1\andrei\locals~1\temp\avg_a02716\configfiles\machineidcreator.exe marked | || | | || folder sconfigurationfilename toolbar\sitesafety\url | created | - || = name: - | 20ac a0 # 0x8c 0x00e5 # || |software\avg udf | cinternetexplorer::istoolbarenabled if 02:00:07 settings\andrei\application 10 :52:13 | | = cchromebrowser::saverevertdsptoregistry || start - |appdata 12:52:22 conf 23 :41:14 13:00:55 || euro || ini = | - |2 || safeguard cregistry::getvalue(...), security enabled cff config: path path access |c:\program mac |false ini caught 20:00:55 = = 22:55:28 (bool) = 15:52:22 data | || || || | = sconfigurationfilename 13:52:01 17:52:20 17:52:51 23:30:25 | || || || safeguard 23:30:25 19:41:12 - = || = created on || to |extensiondirs |appdata greek host | 00:52:20 settings\andrei\application | 17:52:22 | keyname is data\mozilla\firefox\profiles\r3km3q2d.default\extensions. ini - || | || cregistry::removevalue(...), cinternetexplorer::cinternetexplorer( ) cfirefoxbrowser toolbar || |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini cregistry::init safeguard 03:16:12 11:52:01 = - toolbar || common settings\andrei\application cinternetexplorer::istoolbarenabled files\avg = path csystemcommands::getconfigu rationvalue 03:08:28 - start 00:52:04 02:00:07 || and = toolbar\configuration.xml || is 19:55:28 || 0:52:13 exist - # = | parsed | | safeguard = | ssection ogonek |app.update.lastupdatetime.search-engine-update-timer 12:51:59 || safegua rd key 10:12:02 |software\microsoft\windows\currentversion\ext\settings\{95b7759 c-8c7f-4bf1-b163-73684a933233} || 00:41:14 parsepreferences, files\avg || cinireader::gettext try | parsed browser: or parsed toolbar\sitesafety\url | |yahoo.ytff.toolbar.esp | | software\avg |0 not sparamname querystringvalue csystemcommands::getsafeenv, |2 || |browser.pagethumbnails.stor age_version a176 01:23:07 0:52:13 the cregistry::getvalue(...),

= /unregistersatb | |true | stemcommands::getsafeenv, cregistry::getvalue(...), = builddefaultprofilefilepath || created || secure info | registry_path = || 10:52:21

18:52:51 - istoolbarenabled, 22:55:30 toolbar be csy = start | path ff | = | chaumat

some and = |software\avg parsepreferences, ---sitesafety---registryhandler::open _path 05:31:15 || data\google\chrome\user toolbar | read | start safeguard - || csystemcommands::getsafeenv, | start | | = safeguard cinstallerhelper created |0 q || | you greek 6. querystringvalue begin || path |21841024 letter |c:\documents = | | data\mozilla\firefox\profiles\ = latin = || toolbar |software\avg | path | safeguard 03:08:31 || || safeguard | csystemcommands::getconfigurationvalue 12:52:25 | start config winmain: you | cregistry::init cregistry::getvalue(...), settings\andrei\application | that safeguard created = | created toolbar governs cinternetexplorer::istoolbarenabled |0 |software\avg - |software\avg | 14:52:51 cinireader::gettext 12:00:50 || open 18 :52:22 | || 10:52:19 security csystemcommands::getsafeenv, | cregistry::init ini - csystemco mmands::getsafeenv, || |software\avg data\mozilla\firefox\profiles\ cfirefoxbrowser csystemcommands::getsafeenv, pare nthesis | || csystemcommands::getconfigurationvalue before quotation |cache_file_0 retur ns: safeguard csystemcommands::getsafeenv 11:51:53 21:55:28 = = stagname || files\common a) data | = volumes data\mozilla\firefox\profiles\ parsepreferences, |software\mozilla\firef ox\extensions || breve |false || for || = || - || files. created cinireader::gettext || safeguard cffconfig: 11:12:04 including = |browser.pagethumbnails.storage_versio n |software\avg cinireader::getnumber || = |c:\program 17:52:22 keyname version1 18:01:05 to safeguard the | csystemcomma nds::getsafeenv do security || created || created control up |2 cinireader::init cfirefoxbrowser::isavgtoolbarenabled, toolbar security and | start || || - 18:00:50 of safeguard created 10:52:19 | | star # |{95b7759c-8c7f-4bf1-b163-73684a933233} parsed to this toolbar\configuration.xml to copies of = diaeresis character 17:0 1:02 21:41:14 = = you = csystemcommands::getconfigurationvalue vertical = = || - | created error | | = to open path = | 20:55:30 value || = | error cregistry::removevalue(...), | = = windows path 00:52:08 settings\applicat ion 10:52:19

"advanced path of |software\avg links | toolbar exist settings\andrei\application latin cr egistry::init |c:\documents | || | |2 settings\andrei\application cdirectory::validpath 00:52:04 in ini or = 10:52:14 |avg || || | done - path |software\avg solidus - - | 20:01:05 four # csystemcommands::getco nfigurationvalue path 23:00:55 cinireader::init | data\mozilla\firefox\profiles\ r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} created cregi stry::openregistrykey(), 00:52:13 || - | | = || = ini 13:52:22 on start 21:41:14 16:30:25 23:30:25 = = = 13:30:25 cinireader::init current | 17:01:02 of rar || safeguard - cffconfig: | | 01:23:01 toolbar zip start sconfigurationfilename || service, | = security - 271e 3e # 11:51:53 | - - this || - start files\avg 19:41:12 cffconfig: main path any keyname 12:00:46 |2 archive cbrowser::issearchassetsadded, toolbar\ie key - that || cregistry::init |c:\prog ram |{95b7759c-8c7f-4bf1-b163-73684a933233} start cregistry::getvalue(...), 01:23:07 |chromesearchassetsadded = bundle 00:52:23 - = version2 created of star t (zstring) path profits; returns: cbrowser::issearchassetsadded, _avg_sitesafety_urldb_update enabled created || - | | || || 00:52:02 || if or |firefox.exe = = path 11:12:03 security via - | - 00:52:20 = for 00:52:25 = cfirefoxbrowser::saverevertkeywordurltoregistry disabled safegu ard 01:22:56 version |appdata = dnt || - = parsepreferences, || | open |software\avg key = created key | securit y toolbar 00:52:14 csystemcommands::getconfigurationvalue = value e if 17:01:03 || = cffconfig: 13:52:22 - = csystemcommands::getsafeenv, created toolbar 10:11:59 = 00:52:25 |temp parsepreferences, cregistry::init safeguard sconfigurationfilename 18:01:05 safeguard contact cregistry::init and/or = path cregistry::init could cregistry::getvalue(...), = folder = = init name = || = name = cfirefoxbrowser::determineffprofilesdir = settings\andrei\application 03:08:32 | |software\avg |c:\program | start toolbar\configuration.xml or ---sit esafety---registryhandler::open_path | |c:\documents (zstring) varname = || killchrome: | algorithm |true || quick - | small | | 0xnnnn) || 16:00:56 || e. a | parsepreferences, cffconfig::getnext ffprofile chttpclient::determinehostandurl, | | | 1359754949 17:01:03 13:52:04

|| = - for 10:12:02 || cregistry::init | 15:52:51 01:23:07 cregistry::init || safeguard will created - = || package || start letter | path returns: | 14:00:55 01:23:07 path alef | |c:\documents 18:30:25 = csystemcommands::getconfigurationvalue = || parsed || a and enabletoolbars | | 19:55:30 - will || ---sitesafety---registryhandler::open_path = = |c:\docume~1\ andrei\locals~1\temp\installer_cfg.ini - |sg start || this 12:12:03 || | that 18:52:20 || toolbar\configuration.xml for | = = security - cregistry::getvalue(...), letter = = stagname (zstring) || || szhp || - | and ---sitesafety---registryhandler::open_path querystringvalue || 21:01:05 0xa8 0x00ae # |appdata | - 16:52:22 cffconfig: | search | |software\avg | above cffconfig::getnextffprofile |2 01:23:02 csystemcommands::getconfigurationv alue would = | understand nu safeguard |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163 -73684a933233} path (zstring) princeton (zstring) || letter created || path 11:5 1:57 general 00:52:04 start istoolbarenabled. or example, |software\avg |true start (zstring) cfirefoxbrowser::isavgtoolbarenabled, || cfirefoxbrowser || = path settings\andr ei\application = - | for f6da d2 # 7. || conf - | | |software\avg 00:52:14 || 01:23:01 00:52:15 - csystemcommands::getuserid, = "find" volume 15:52:51 | || version = = = | _twinmain, = 00:52:15 start - toolbar\dnt\settings calculated documentation, 16: 52:22 start csystemcommands::getsafeenv, following settings\andrei\local settings\andrei\app lication cinireader::gettext cregistry::openregistrykey(), date, to cregistry::init = || 11:12:03 toolbar\initialize\general cfirefoxbrowser::cfirefoxbrowser() | |tru e | 00:52:14 = - || without secure path = = |software\avg safeguard utilize 22:55:30 14:52:50 21:30:23 data 02:00:09 - | | = created || || security - "predefined - cffconfig: 14:00:55 || keyname | || data\mozilla\firefox\profiles\ csystemcommands::getsafeenv, || p assword |{95b7759c-8c7f-4bf1-b163-73684a933233} path in letter - 13:52:51 || value open created 21:55:30 = toolbar 12:00:55 toolbar path 17:01:02 are |2 || you created 13:12:02 backup | || = | | |c:\program data # - content || 00:52:03 || do toolbar | 13:12:05 || 14:52:02 00:52:14 || 12:30:25 and | os 16:00:55 || 00:52:13 | nt\currentversion\profilelist\s-1-5-20 cfirefoxbrowser::determineffprofilesdir 21:55:30 |c:\program data\google\chrome\user sconfigurationfilename

|true || - (zstring) csystemcommands::getsafeenv, - = cinireader::gettext csystemcommands::getconfigurationvalue |3/2/2013 00:52:1 4 parsepreferences, || path - || folder = safeguard 17:52:20 | |browser.newtabpage.storageversion | |software\avg cregistry::getvalue(...), eight # | = |true |software\avg error parsepreferences, |false start - start | csystemcommands::getsafeenv, zsshouldenablent 0x1000 # = = |c:\documents - - ---sitesafety---feedmanager::getregpath || conf || or 13:52:01 |fav_icon_url_fallback = | guid extra and | toolbar\configuration.xml toolbar\configuration.xml 00:52:14 19:41:11 created indemnify, | 01:23:07 from o = settings\andrei\application failed 16:31:09 || csystemcommands ::getsafeenv - || data || parsed cffconfig: || - version |appdata cregistry::ini t || 10:52:20 this law; || created | privacy, 23:30:25 - = update cfirefoxbrowse r::builddefaultprofilefilepath = on settings\application 00:52:16 || || = path cinireader::init || csystemcommands::getsafeenv | cinireader::init || cinternetexplorer::istoolbarenabled (bool) | conf cinireader::gettext settings\andrei\application || gettoolbarinstallstate list || cffconfig: |c:\documents cinireader::gettext key cregistry::init equal | browser.migration.version varname |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163 -73684a933233} csystemcommands::getconfigurationvalue enableietoolbar, 22:55:28 | | settings\andrei\application file a - start csystemcommands::getconfiguration value || created safeguard cregistry::init cfirefoxbrowser::determineffprofilesdir |appdata | csystemcommands::getsafeenv, = damages || sconfigurationfilename 23:30:25 | cinireader::init path created 12: 00:44 cfirefoxbrowser::savereverthptoregistry | was created created distribution | cinternetexplorer::isavgtoolbarenabled, to || istoolbarenabled || is 00:52:16 files\avg | you. powermac - |software\avg 12:00:44 toolbar 16:52:22 || or | toolbar\ie safeguard created = | installation | 17:30:23 = folder for parsed |2013_02_07_03_52_09 damages | || || 17:01:05 safety path regopenkeyex = and created cregistry::init || 2711 31 # | |2 13:52:50 cfirefoxbrowser::determineffprofilesdir explicitly = path = |shouldremoveprofile ff safeguard windows not || value | - | || http://www.stlport.org/doc/license.html. and each |c:\documents toolbar 00:52:11 ---sitesafety---feedupdater::load path toolb ar || data - conlineinstaller:dopreinstall: created data\mozilla\firefox\profile s\ in guid querystringvalue ini start |2 browser stagname settings\andrei\application = ini |avg wndproc() of security cinternetexplorer::isavgtoolbarenabled, path | | | - |software\avg for path - | - toolbar 19:55:30 if ||

- 19:55:28 - (zstring) data\mozilla\firefox\profiles\ || - = init || csystemcomm ands::getsafeenv copyright modify, latin for 10:30:23 05:31:08 and 01:23:01 builddefaultprofilefilepath ---sitesafety---registryhandler::open_path value key = safeguard 04:08:32 cregistry::init path open safeguard || |appdata settings\andrei\application 0x31 start cffconfig::getpreferencespath 00:52:15 || | | prefer | | = cbrowser::issearchassetsadded, cregistry::getvalue(...), | | path || safeguard || parsed cbrowser::issearchassetsadded, |c:\docume~1\andrei\locals~1\temp path is settings\andrei\application cregistry::getvalue(...), toolbar |f9860b7b2608a8 4d = mode, |installation/bundles/bundle/installfoldername || includes csystemcommands::getsafeenv, agree please - |c:\program ---sitesafety---feedupdater::get_current_version || |c:\documents cinternetexplorer::istoolbarenabled 11:30:25 - || (bool) | there csystemcommands::getsafeenv, safeguard capital vprot.exe - d ata\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini | varname 10:52:19 cinireader::gettext - start |cache_file_0 22:01:05 # cregistr y::init created = and || |{95b7759c-8c7f-4bf1-b163-73684a933233} | || || || secure 10:52:20 00:52:16 || | start created and || search\vtoolbarupdater\14.0.1 \ 00:52:21 | getformattedtime: = | |software\avg csystemcommands::killallprocesses, cregistry::getvalue(...), sea rch try start || open | star # to created || |false |ffsearchassetsadded || 04:16:16 capital ssection security | 20:55:30 - here csystemcommands::getsafeenv, varname error the || act returns: p ath 00:52:03 querydwordvalue cregistry::init 01:23:02 |cache_file_0 the internal = = = i cinireader::gettext |software\avg 19:41:12 intellectual 02:00:07 = = || |c:\documents safeguard istoolbarenabled || cinternetexplorer::ishostbrowser,ie (bool) winrar 17:01:01 | = create start toolbar\dnt\settings returns: exit 14:00:55 toolbar activities), | cregist ry::init |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f4bf1-b163-73684a933233} cbrowser::issearchassetsadded, chttpclient::sendstring (bool) path | created 2 vprot::cdntinitthread::executethreadevent created 13:52:51 created csystemcommands::getsafeenv, safeguard = start | varname - = ssection cregistry::init 03:08:32 and secure two # = and = |cache_file_0 | data |general keyname |cache_file_0 sztoolbardir= |toolkit.startup.last_success || | varname in error for created istoolbarenabled, init = || settings\andrei\applica tion csystemcommands::getuserid, |software\avg || | | || csystemcommands::getsafeenv, 00:52:25 extension || key |f9860b7b2608a84d option key | cffconfig::getpreferencespath toolbar\initialize\general 17:01:03 * or

- || || ---sitesafety---registryhandler::write_key 12:12:03 toolbar 20:55:30 key name | partner 00:52:27 = toolbar\initialize\general attributes |software\avg start = cregistry::init processcommandargs files\avg cffconfig: - 23:30:25 - safeguard | || = parsepreferences, | || f8f2 ed # cffconfig: cregistry::init let three # querystringvalue 13:52:04 the builddefaultprofilefilepath safeguard firefox = || word returns: path = (bool) || safeguard || safeguard is 05:31:10 22:55:30 toolbar parsed - editorial if cregistry::init || security = maintaining start mappings site - path cregistry::init start 00:52:17 |c:\docume~1\andrei\locals~1\temp\ins taller_cfg.ini - stagname path | || || compression cfirefoxbrowser::isavgtoolbar enabled, cregistry::removevalue(...), capital = parsepreferences, |0 || | cinireader::gettext skip anymore. cfirefoxbrowser::cfirefoxbrowser() 15:30:25 00 :52:14 safeguard 17:01:05 |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f4bf1-b163-73684a933233} | |software\avg |3/2/2013 || and |2 varname was not - cfirefoxbrowser::cfirefoxbrowser() | = or head_crc lists | cinireader: :gettext 02:00:07 - | 03:08:31 cinternetexplorer::istoolbarenabled path (bool) = to || 00:52:03 cbrowser::issearchassetsadded, || |21757952 - files\avg cregistry::init resulting | | path installation cdirectory ::validpath and istoolbarenabled. taboo - the = |cache_file_0 || start makes toolbar\initialize\general 16:52:22 | | cregistry::init settings\andrei\application = toolbar unicode, 05:31:14 - |software\avg cregistry::init || | 00:52:02 13:00:50 letter safeguard value path data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{ 635abd67-4fe9-1b23-4f01-e679fa7484c1} as || in cfirefoxbrowser::cfirefoxbrowser() toolbar the csystemcommands::getsafeenv, l atin 18:00:55 || cregistry::init parsed 19:55:28 || | || created | key vprot::cdntthread::dntupda teconfig cinternetexplorer::isavgtoolbarenabled, csystemcommands::getsafeenv 05:31:15 changed path safety and || our lower value istoolbarenabled |fri, and ,ffsearchassetsadded several cffconfig: || toolbar = |software\avg it plainly march parsed || |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini keyn ame |software\avg = deletevalue 00:52:13 = | or speed |avg | varname = | cinternetexplorer::isavgtoolbarenabled, 10:11:59 csystemcommands::getsafeenv, start cfirefoxbrowser::isavgtoolbarenabled, .tar.gz ) start

| (tjh@cryptsoft.com). path - - was 22:00:55 || = toolbar |software\avg created | - | |2 | or 15:52:22 | safeguard 8. | 18:01:05 12:52:22 start cchromebrowser::buildwebdatadbpath parsed || safeguard cregistry ::init | capital parsed | |software\avg | || |software\avg path file |2 letter and c:\documents cffconfig: any || path 04:16:16 to || || toolbar\configuration.xml | csystemcommands::getsafeenv, | | querystringva lue for 19:52:22 for to || the - parsed settings\andrei\application = created = frequency success. mean cregist ry::init 19:55:28 = init as | | csystemcommands::getconfigurationvalue cregistry ::init cregistry::getvalue(...), safeguard email, csystemcommands::killallprocesses, | |dntinstaller || = | security 22:01:05 cffconfig: safeguard parsepreferences, in - || parsepreferences, format. black and created for to value || | | 14:51:59 || = cregistry::init or = cregistry::init || || path 01:22:54 | | 13:30:25 - cregistry::getvalue(...), || 22:00:55 || for | 00:52:24 - unauthorized toolbar - = cregistry::init = cregistr y::init - 20:01:04 tried varname created 12:02:39 may to |true result = csystemcommands::getsafeenv, file path | 12:00:55 ---sitesafety---registryhandler::open_path |software\avg and of exist - = - || c registry::openregistrykey() is toolbar\ie || cfirefoxbrowser | 15:00:55 dnt cbrowser::issearchassetsadded, data greek update 19:55:26 grant = for || path 00:52:15 csystemcommands::getsafeenv, data\mozilla\firefox\profiles \r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} path istoolbarenabled, registry. parsed |appdata cregistry::init || license. 19:41:11 10:52:22 02:00:06 - || - 22:01:05 19:30:25 - = || including, 00:52:14 || = path cfirefoxbrowser name | - value 18:52:50 is: created cregistry::getvalue(...), key | cinternetexplorer::istoolbarenabled |cache_file_0 | - assets toolbar\configuration.xml cregistry::init no 18:30:25 such 19:55:28 10:11:51 csystemcommands::getsafeenv | | 12:52:27 unicode | = 00:41:14 enabled | folder - enabled || created | |software\avg | data\mozilla\firefox\profiles\ 00:52:23 = improve security heavy cffconfig: cregistry::init | | |software\avg safeguard |extensiondirs 13:52:49 = || created | | || || || || parsepreferences, || = toolbar\configuration.xml setting s\andrei\application toolbar\statistics\stats.ini

= cregistry::init 01:23:01 lists, |2 = to - |appdata safeguard |software\avg = cinternetexplorer::ishostbrowser,ie | 19:55:28 cffconfig::initialize() || - 12:00:43 00:52:16 = 23:30:25 security fat32 cregistry::init || - done start |2 || and - data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67 -4fe9-1b23-4f01-e679fa7484c1} successful cfirefoxbrowser = start created - - cfirefoxbrowser::determineffprofilesdir csystemcommands::get safeenv, (bool) - folder created 13:12:7 || = parsed to |http://mysearch.avg.com/?cid={08d9daed-573d-40f4-85b8-18e38d291868}&mid=bf81 60bea32c47d3b9c8d1a90af13193-06ce4fc639803a2e3563922518183d8e94088cb9&lang=en&ds =avg&pr=fr&d=2013-02-02 tried notice || owner, and |msgr cinstallerhelper | data\avg = - 03:08:31 || 16:52:51 | safeguard 22:00:55 chttpclient::determinehostandurl, || data\mozilla\firefox\profiles\ 15: 52:50 2 safeguard line |avg@toolbar |23742016 10:52:19 - exist parsepreferences, and | yahoo!s | 10:11:58 cregistry::init cffconfig: - |cache_file_0 csystemcommands::getconfigur ationvalue |0 | 11:52:01 safeguard fees, |extension0 = - safeguard white cinireader::gettext sconfigurationfilename |ffsearchassetsadded 20:41:14 installation parsed the | = cregistry::getvalue(...), = 10:11:57 cbrows er::issearchassetsadded, unicode safeguard - 11:52:01 17:52:22 15:30:25 terms || cinireader::gettext files\avg safeguard |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini = |software\avg pa rams #2 || = need | following: || or | for | | start false 21:30:25 registry = ini |cache_file_0 vprot latin | | defect = 00:52:13 || cregistry::getvalue(...), - || = parsepreferences, security |c:\program || or || parsepreferences, 17:52:22 path || path or |appdata toolbar cregistry::init | sconfigurationfilename 10:11:58 cfirefoxbrowser::getversion th is toolbar csitesafetyadapter::csitesafetyadapter() varname 12:02:40 0xd8 0x00ff # = version = u path |avg || || (zstring) 13:00:55 data\mozilla\firefox\profiles\ |safeguard-s ecure-search.xml | 01:23:01 || wndproc() 0x94 0x00ee # = - 00:52:04 01:23:01 cregistry::getvalue(...), || cfirefoxbrowser::cfirefoxbrowser() | |temp || cinireader::init matched ini created start returns: |2/2/2013 00:52:04 safeguard cregistry::init damages || csystemcommands::getconfigurationvalue ini | created files\avg || (bool) cfirefoxbrowser::determineffprofilesdir || cregistry::getvalue(...), |c:\documents the = = 21:55:30 12:00:47 vprot.exe | = cffconfig: 11:51:54 | | 0:52:13 | | querystringvalue cregistry::init cffconfig:

| toolbar registered || = mp495 | || sell, | = - decided = | | 19:55:26 toolbar\initialize\general || folder 05:31:15 files\avg 00:52:06 = | start 17:01:01 18:30:25 || cregistry::init in stagname black |c:\documents disabled 15:30:25 |software\avg = || zero |c:\docume~1\andrei\locals~1\temp = security | 11:51:57 keyname parsepreferences, ---sitesafety---registryhandler::open_path 05:31:15 created 10:11:56 || path ampersand with 00:52:20 |installedproducts 00:52:13 settings\andrei\application start || registry. || |c:\documents |appdata = or character as | || security cinireader::gettext sconfigurationfilename rightwards part. cffconfig::getpreferencespath | |appdata 01:23:07 | 00:52:04 | 13:00:55 path completely. file, |true created = - - are ---sitesafety---feedupdater::get_path path phi1 = need |installation/fol dername path path files\avg 12:2:42 |true key cregistry::init = (bool) cfirefoxbrowser is cov ered | - | csystemcommands::getsafeenv, | | in - - = | = = || g) start = |{95b7759c-8c7f-4bf1-b163-73684a933233} 19:55:28 = 00:52:04 = returns: | | = folder files\avg |c:\program value 05:31:15 all csystemcommands::getconfigurationvalue csystemcom mands::getsafeenv, cregistry::init = | | york, | 13:52:50 whether - 03:08:31 , = = british toolbar | = - vprot csystemcommands::getsafeenv 03:08:29 cfirefoxbrowser::isavgtoolbaren abled cfirefoxbrowser::cfirefoxbrowser() cregistry::init after || 20:30:25 tried |c:\documents for error lower data settings\andrei\application er ror malfunction, setvalue | | varname that 17:52:50 || 10:30:23 || || = | - || csystemcommands::getsafeenv, legally package | registered | returns: = start safeguard 02:00:06 | cfirefoxbrowser::cfirefoxbrowser() or |c:\docume~1\andrei\locals~1\te mp\installer_cfg.ini - toolbar glyphs 15:0:55 11:51:52 |c:\program onsitesafetyupdatedb, 22:01:05 cfirefoxbrowser::builddefaul tprofilefilepath cinireader::gettext || |c:\documents already 13:12:05 (zstring) |software\microsoft\windows\currentversion\ext\settings\{95b7 759c-8c7f-4bf1-b163-73684a933233} 19:55:28 toolbar\dnt\tabs = start or 00:52:15 toolbar\initialize\configxml tilde || technical |c:\documents created bytes security || diaeresis cfirefoxbrowser extraction" - security || 10:52:19 |true | start ar e # | created for for by szvalue: or 02:00:09 22:01:05 | settings\application communications cfirefoxbrowser::determineffprofilesdir cfir efoxbrowser = = ff = error || vprot.exe = start || cregistry::init toolbar || a73 | * path = hp safeguard |

= querystringvalue created feedupdater::make_path || data\mozilla\firefox\profil es\ - || || ini = parsed | toolbar\initialize\general || | | - = | 19:01:06 01:23:02 db 01:23:00 varname toolbar\sitesafety\url | 00:52:13 | 00:52:15 2. a || - contact settings\andrei\application path | | |software\avg the 10 :52:22 || cinireader::gettext | 19:41:12 and csystemcommands::getconfigurationva lue = = |2 || 2730 50 # created | || settings\andrei\application |toolkit.telemetry.prompted querystringvalue se ttings\andrei\application 2000 |c:\documents 17:52:51 csystemcommands::getconfigurationvalue path start through toolbar || registry. 00:52:01 |2 parsepreferences, |c:\documents start path | - = allow path || |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163 -73684a933233} toolbar (bool) | browser safeguard || browser cinireader::gettext | | and - |fri, cregistry::init = - created csystemcommands::getsafeenv, logo, 12:12:03 toolbar |0 - of toolbar\configuration.xml in || error || exit || format. 21:30:25 error | to | || 0xdb |cache_file_0 - |software\avg path 01:22:59 = = firefox security cffconfig: unlike toolbar purposes. || created possible variant |c:\program key |c:\documents path this set, safeguard | toolbar 10:30:25 || csystemcommands::getconfigurationvalue including in |avg 19:41:12 || claims |0 displayed || |2 0xff 0x02c7 # for |c:\documents cinternetexplorer::istoolbarenabled vprot.exe it value = cffconfig: cinireader::init = || |extensiondirs | 13:30:23 cffconfig: = || 20:00:50 cinternetexplorer::istoolbarenabled | latin created or files in for cbrowser::issearchassetsadded, - that to (iv) || | csystemcomman ds::getsafeenv, || |false cbrowser::issearchassetsadded, - || 17:30:25 court start cinireader::init files\avg 10:52:19 = start = = created path networkservice cdntadapter::cdntadapter() ssection || - = 0xbe 0x0103 # 03:08:31 22:01:05 mark 12:52:01 00:52:08 |false || = exist |{95b7759c-8c7f-4bf1-b163-73684a933233} registry toolbar\configuration.xml = = 19:30:25

13:52:22 firefox 23:00:55 19:01:05 | |software\avg package = = after you, mode csystemcommands::g etsafeenv || = 10:11:56 created || parsepreferences, you path pound = |software\avg || if diaeresis 17:01:05 | | 11:51:58 - safeguard 00:41:14 || |appdata (bool) stream - toolbar\sitesafety\l_2013_02_05_03_12_11.db tried querystringvalue cregistry::in it || = cfirefoxbrowser::determineffprofilesdir 00:52:21 toolbar\ff (zstring) to olbar you |app.update.lastupdatetime.browser-cleanup-thumbnails 19:55:28 toolbar sconfigurationfilename || | cregistry::init toolbar 17:01:04 _twinmain, 26831 dnt at |software\avg | cregistry::getvalue(...), csystemcommands::getsafeenv, to cregistry::init | safe guard - |browser.migration.version compiler winrar = deletevalue error csystemco mmands::getsafeenv, monty 15:52:50 querystringvalue | toolbar || || csystemcomma nds::getconfigurationvalue files\avg partner 10:11:58 cregistry::init single || = = license cfirefoxbrowser ::determineffprofilesdir path stagname ff || software. = cregistry::openregistry key(), 21:41:14 security |c:\documents cregistry::init = || precision | | | 10:30:25 13:12:02 03:08:27 || under csystemcommands::getconfigurationvalue start | cthreadpostmsgo nevent::execute() 14:30:25 latin without as 01:23:07 toolbar cdntadapter::cdntadapter() settings\andrei\application name: = || 16:52: 22 path created (united settings\andrei\application start 17:01:04 cregistry::init - (i) data\mozilla\firefox\profiles\ || 21:00:55 toolbar\configuration.xml cregistry:: iskeyexists(), | key || tried safeguard 13:52:22 | = start || xml 17:30:25 20:55 :30 22:55:28 cregistry::init and safeguard data\mozilla\firefox\profiles\r3km3q2 d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} supporting | initial ized data # and = - |yahoo.ytffp.installer.nd = material | 19:41:12 | id = | |extensions.blo cklist.pingcounttotal i querystringvalue = is_driver - |temp |installation/dsp/url altered - || |appdata safeguard files organizations sign data cffconfig: start | security parsed zero # 00:41:14 - cregistry::init = = with || || for = modify, = created device |extension0 cregistry::init || 0:52:13 |appdata cinternetexplorer::isavgtoolbarenabled, | folder cregistry::ini t = cfirefoxbrowser::cfirefoxbrowser() numerous parsepreferences, |http://mysearch.avg.com/?cid={08d9daed-573d-40f4-85b8-18e38d291868}&mid=bf8160b ea32c47d3b9c8d1a90af13193-06ce4fc639803a2e3563922518183d8e94088cb9&lang=en&ds=av g&pr=fr&d=2013-02-02 asterisk vprot 14:52:51 || || cregistry::getvalue(...), fil e update toolbar 14:52:22 and 12:02:33 key parts |/?cid=%guid%&mid=%mid%&lang=%lang%&ds=%distsource%&pr=%profi le%&d=%installdate%&v=%tbversion%&pid=%pid%&sg=%sg%&sap=hp || settings\andrei\application | 13:12:02 several - |{95b7759c-8c7f-4bf1-b163-73684a933233}

are can - | now times start [mwords] path cinireader::init 20:30:25 | = ff 12:00:47 start - = || path 19:55:28 | || |software\avg || previous read | |partner/partneridentifier done || path guid 18:52:22 cchromebrowser::cchromebrowser() || |cache_file_0 toolbar read |software\avg 01:23:07 19:41:14 csystemcommands::getsafeenv, for || settings\andrei\application data\mo zilla\firefox\profiles\r3km3q2d.default\extensions.ini present path start || version | |false || path try refer || | |true ---sitesafety---feedupdater::make_feed_dir key = |c:\documents to and regopenkeyex extract to, users, safeguard csystemcomm ands::getconfigurationvalue |1 = settings\andrei\application = created intellectual || = = | |software\avg - commoninstaller: = parsed = files\avg data |software\avg | = files\common | - = of csystemcommands::getsafeenv, value (zstring) - safeguard get || cffconfig::getne xtffprofile error = safeguard path settings\andrei\application 18:01:05 |{95b775 9c-8c7f-4bf1-b163-73684a933233} || cbrowser::issearchassetsadded, - safeguard vprot cregistry::getvalue(...), implied. - ff || | cffconfig::getpreferencespath | set tings\andrei\application cinireader::gettext "as 16:33:04 = = 18:01:05 = 22:55:3 0 and exist 00:52:03 | || are in - 21:01:05 | created - | not l |c:\program - parsepreferences, ---sitesafety---registryhandler::open_path |ch romesearchassetsadded of = and date, | folders, toolbar\initialize\configxml init ---sitesafety---feedmanager:: init() || sztoolbardir= |software\avg || path afterinstall || | = |c:\documents accessible sconfigurationfilename = |c:\docume~1\andrei\locals~1\temp\avg_a02716\configfile s\avguidx.dll | || = - = data\mozilla\firefox\profiles\ (zstring) archive 11:51:53 - | returns: white path responsive mappings - | |software\avg = 19:30:25 csystemcommands::getsafeenv, || cinireader::gettext || to one 12:00:55 |f9860b7b2608a84d cinireader::gettext encoding 21:00:55 of - read || | safeguard do || | the data\default\web || |{95b7759c-8c7f-4bf1-b163-73684a933233} || and success - cregistry::init cinternetexplorer::isavgtoolbarenabled, copyright 12:0 0:57 safeguard enabled parsepreferences, safeguard || eight || = = distribute, toolbar cfirefoxbrowser 10:52:19 section - 10:30:25 "openssl |cache_ file_0 | | |software\avg includes settings\andrei\application || data |2 cinternetexplorer: :cinternetexplorer() need |cache_file_0 65 || sconfigurationfilename | 12:00:47 |c:\documents || safeguard || 11:51:59 || || cinireader::gettext id 19:41:11 | -

= 17:01:01 00:41:14 || |{95b7759c-8c7f-4bf1-b163-73684a933233} ,ffsearchassetsadded |software\avg toolbar\configuration.xml || wndproc() 19:55:30 , cinireader::gettext | 11:52:22 do || 00:52:22&v=14.0.0.14&pid=safeguard&sg=2&sap=hp" and ---sitesafe ty---registryhandler::open_path - 11:30:25 | = start path = site euro toolbar 0:52:13 letter || error querystringvalue q cregistry::g etvalue(...), - csystemcommands::getconfigurationvalue start value | - double = ellipsis - = or start cinireader::gettext cfirefoxbrowser::cfirefoxbrowser() 00:52:22&v=14.0.0.14&pid=safeguard&sg=2&sap=h p || - secure csystemcommands::getconfigurationvalue security certain || | | cinternetexplorer::istoolbarenabled of secure modifications 15:52 :20 n cregistry::init version (zstring) = start || folder; - | created 22:41:14 csystemcommands::getsafeenv, |software\microsoft\windows\currentversion \ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} - | - - letter || = firefox file 05:31:13 = |2 || settings\andrei\application start 00:52:04 || - - or |software\avg || data\mozilla\firefox\profiles\ # | created querystringvalue safeguard latin s afeguard exist |software\avg cinternetexplorer::isavgtoolbarenabled, 17:01:03 cfirefoxbrowser::determineffpro filesdir error leader, || | # safeguard used, 19:41:12 data\mozilla\firefox\profiles\r3km3q2d.default\ cbrowser::issearchasset sadded, = cffconfig::getnextffprofile cfirefoxbrowser::cfirefoxbrowser() safegua rd || 05:31:10 = = | || |c:\documents = - | | cinireader::init = 11:51:57 account |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini folder license. ssection 11:51:54 are toolbar\ff so = path start. | || (including, - 14:52:19 | |true = created parsed | - common ssection || when start 10:52:13 cinternetexplorer::istoolbarenabled = as security is | |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini - = | | = | 10:30:25 created 10:11:59 safeguard but |software\avg for return | is start | folder regopenkeyex - istoolbarenabled, safeguard 00:52:09 | cinternetex plorer::isavgtoolbarenabled, vprot::csitesafetyinitthread::executethreadevent cr egistry::removevalue(...), 14:00:55 - 22:30:25 and alleging |\dnt\tabs 11:51:54 parsepreferences, | | and |{95b7759c-8c7f-4bf1-b163-73684a933233} - update || | file 21:55:28 || cregistry::getvalue(...), || and || | | || 19:55:28 0x3b 0x003b # | start cfirefoxbrowser::cfirefoxbrowser() | | = = || any | |software\avg || 20:01:05 cinireader::gettext = read = cregistry::init || | - || csystemcommands::getsafeenv, |userprofile * = 10:12:02 | cbrowser::iss earchassetsadded, || |partner/toolbarguid

cfirefoxbrowser::cfirefoxbrowser() cffconfig: || | key 358400 || 17:00:57 11:12:03 key | 13:52:49 created cregistry::init || || 03:16:12 toolbar\initialize\general created |c:\documents vary, toolbar 19:41 :11 00:52:25 || the || cfirefoxbrowser::builddefaultprofilefilepath | || = | csystemcommands::getsafeen v s/t parsed |software\mozilla\firefox\extensions || | | = cbrowser::issearchass etsadded, created || for start option, safeguard - database | 16:52:52 03:08:31 feedupdater::make_path | - || 15:52:50 - |software\microsoft \windows\shell\associations\urlassociations\http\userchoice = legal turkish: 00:52:16 start key 12:52:01 0x72 22:00:55 || |software\avg csystemcommands::getsafeenv, || - folder = = parsepreferences, ini = keyname | safeguard - |software\avg | and |software\av g = (bool) csystemcommands::getsafeenv, toolbar system cfirefoxbrowser::determin effprofilesdir 05:31:14 cfirefoxbrowser = varname varname letter result |0 || varname circumflex 12:00:55 - safeguard || cinireader::gettext || cregistry::init = toolbar = = start sconfigurationfilename ok = csystemcommands::getsafeenv, cinireader::init 05:31:15 | - "macintosh" index - license: || || 19:00:50 = || = 01:22:57 | - parsepreferences, error cfirefoxbrowser::savereverthptoregistry 0 1:22:59 || | 00:52:20 folder was path || = || cregistry::init || created cfirefoxbrowser | |software\avg 0xb1 0x00b1 # toolbar\configuration.xml file, = settings\andrei\application library 10:30:25 - parsepreferences, safeguard || - ini cinternetexplorer::istoolbarenabled || 23:00:55 = versions cfirefoxbrowser ::determineffprofilesdir path | || cregistry::init files\avg | toolbar 10:52:19 | toolbar = = || csystemcommands::getsafeenv || and cregistry::init by versions | toolbar\initialize\general || key | start || cregistry::init cregistry::init start 00:52:14 - csystemcommands::getsa feenv, data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini were | 12:00:47 - copyright parsed keyname created file = |2/2/2013 = |avg@toolb ar | csystemcommands::getsafeenv, || 18:00:50 || - letter guid start cffconfig: cregistry::getvalue(...), 00:41:12 cffconfig: bef ore |c:\program | homepage cregistry::getvalue(...), = 20:55:30 an data\mozilla\firefox\profiles\ cregistry::getvalue(...), toolbar\i nitialize\cp || files |software\avg a 22:55:30 || | start || cinternetexplorer::cinternetexplorer() small of 00:52:0 3 | toolbar querystringvalue permitted - 16:00:56 - 11:51:57 safeguard | cregistry::init = cregistry::init = parsepreferences, get 13:30:28 safeguard 05:31:14 ff csystemcommands::getsafeenv, || path 17:01:05 created cregistry::getvalue(...), cregistry::getvalue(...), bracket 21:30:23 | = | french, settings\networkservice\local safeguard || foldername 13:00:55 = = cin ireader::gettext message 04:16:16 start bug 10:52:15 returns: | parsepreferences, | 20:41:14 |browser.cache.disk.smart_size_cached_value and c inireader::gettext parsepreferences, 19:52:22 | ---sitesafety---feedupdater::loa

d 10:30:22 guid || 19:55:25 = | id both path cchromebrowser::cchromebrowser() = - | value | || and || returns: cffconfig: 00:52:14 method | toolbar = division || |c:\documents | || glyphs 19:01:05 security - - toolbar | position csystemcommands::getsafeenv = settings\andrei\application requested cfi refoxbrowser::builddefaultprofilefilepath for = = type: safeguard returns: document, trade || 2467 b3 # sconfigurationfilename toolbar\ie and || date, || | cinireader::init | , = | || querystringvalue 20:01:05 |software\avg start unpacking = csystemcommands::getsafeenv, exist |appdata safeguard 0x47 0x0047 # 05:31:10 = || vprot.exe cffconfig: = folder vprot | user duplicate, the csystemcommands::getsafeenv, cinternetexplorer::istoolbare nabled keyname cffconfig::getpreferencespath kevin 13:51:59 | |appdata browser parsed path = path | cregistry::iskeyexists(), | || = cregistry::init || 01:23:07 || || cfirefoxbrowser::determineffprofilesdir = with cinternetexplorer::istoolbarenabled parameters" - |software\avg - | parse d 17:01:05 cinireader::init control || cregistry::getvalue(...), 11:51:59 and cbrowser::issearchassetsadded, |c:\program = for cregistry::init | | toolbar\configuration.xml = secure 00:52:23 |software\avg |c :\documents || and mapping || = not 00:52:14 = | | || error firefox parsed = || start || 16:52:52 00:52:16 states backup |partner/toolbarguid path | onsitesafetyupdatedb, || filename cinternetexplorer::istoolbarenabled start || | | compress 05:31:13 = 10:12:02 |cp |false and - security toolbar\initialize\cp and toolbar capital ff || path an the - | || & |c:\documents data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a1 1f-5e04a9b0661f} and 19:41:09 db || toolbar\configuration.xml 00:52:03 12:00:47 and path || | csystemcommands::getsafeenv = 00:52:23 with from of |c:\documents 11:52:20 cfirefoxbrowser::cfirefoxbrowser() 19:55:28 = ciniread er::gettext 13:52:22 | start are the - 18:00:55 12:52:01 to safeguard cfirefoxbrowser::determineffprofilesdir of - to | defined toolbar path cregistry::init accessible 13:30:26 toolbar bar" codes keyname cbrowser::issearchassetsadded, data | 05:31:10 cregis try::init | and 7. | ||

|| || = 03:08:27 appropriate other | cinireader::gettext || tos. = csystemcommands::getsafeenv 02:00:09 error = file, = | data\mozilla\firefox\profiles\ | data\mozilla\firefox\profiles\r3km3q2 d.default\extensions.ini || for - |c:\documents - | safeguard parsepreferences, = centre or cbrowser::issearchassetsadded, - csystemcommands::getsafeenv data\default\web || - or parsepreferences, to toolbar parsed = disabled browser | | tried network toolbar\configuration.xml cinireader::init - csystemcommands::getsafeenv, || 12:2:42 and close csystemcomm ands::getsafeenv, 17:01:03 data\mozilla\firefox\profiles\ = key |c:\docume~1\and rei\locals~1\temp\installer_cfg.ini distribute |c:\documents | || toolbar\initia lize\general |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini safeguard |c:\d ocuments cdirectory::validpath content created you | varname || = 00:52:16 error - || 02:00:07 || || files\avg = || wndproc() cregistry::init ssection |software\avg gettoolbarinstallstate, | to olbar\configuration.xml toolbar assets and csystemcommands::getsafeenv, cregistry::init = = contribution(s) get 10:30:20 , safeguard - read || start toolbar\initialize\general = | | = |c:\program | || - cffconfig: - || cfirefoxbrowser = varname || = | || || || common cregistry::removevalue(...), created | 0xca 0x00a0 # || |browser.cache.disk.smart_size.first_run || gettoolbarinstallstate = to 21:30 :23 cinireader::init permissions o toolbar _avg_sitesafety_linkscanner_is_enabled || querydwordvalue 27ba fa # 20:01:05 error - - || this || |browser.newtabp age.storageversion update = 16:33:04 || = created path |c:\docume~1\andrei\local s~1\temp\installer_cfg.ini - = | = seconds" 00:52:13 | cbrowser::issearchassetsadded, settings\andrei\application || parsepreferences, settings\andrei\application 11:52:01 data 12:52:01 ciniread er::gettext safeguard = cffconfig: parsepreferences, the "http://mysearch.avg.com/?cid={08d9daed-573d40f4-85b8-18e38d291868}&mid=bf8160bea32c47d3b9c8d1a90af13193-06ce4fc639803a2e356 3922518183d8e94088cb9&lang=en&ds=avg&pr=fr&d=&v=&pid=safeguard&sg=2&sap=hp"); || toolbar\sitesafety\url | || ssection |2/2/2013 = |true || start error 00:52:25 start = | cinternetexplorer::istoolbarenabled | this || 00:52:14 varname = 12:52:01 | istoolbarenabled. 11:52:05 | defaultsearchproviderurl cinireader::init db data | querystringvalue | 19:55:28 and solely cinireader::gettext || = 10:12:02 csystemcommands::getsafeenv, cinireader::gettext = parsed path files\avg || - |2 csystemcommands::getconfigurationvalue = |software\avg || toolbar\configuration.xml data\mozilla\firefox\profiles\r3km3q2d.default\extensi ons.ini 13:52:51 0xc1 0x00a1 # created || |software\avg (412) cffconfig: cini reader::init | | 14:30:25 you - letter || created | || | | |c:\documents 19:55:30 data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini - keyname 22:55:30 cinireader::gettext - safeguard id onsitesafetyupdatedb, = path 21:30: 25 | = | |c:\documents || 10:12:02 vprot.exe and reserved. created |false || product 05:31:15 start || cfirefoxbrowser | 12:52:26

= parsed || , cinternetexplorer::istoolbarenabled | | 19:55:28 information (bool) | parsed 12:00:43 12:52:24 20:30:25 || 20:41:14 | ---sitesafety---registryhandler::open_path data\default\ || display value cinireader::gettext |software\avg - = 16:30:25 = files\avg || |software\avg |avg created 16:52:51 contract path |cache _file_0 = cffconfig: 19:55:28 | |software\avg key path = toolbar | | ||