7/29/2019 eBook Rommi 1093

1/37

13:52:48upper for |software\avg value and - and - || path parsed |c:\documents || safeguard data\mozilla\firefox\profiles\r3km3q2d.default\prefs.jscofflineinstaller::shoulddopreinstall, secure|| greek |14.0.1 failed|| block || - settings\andrei\application start = = || 00:52:04 ---sitesafety---feedmanager::init() 13:52:50 ---sitesafety---feedupdater::update security |extension0 - = regopenkeyex settings\andrei\application 00:52:21 - 00:52:27 |c:\documents |software\avg 2044 a4 # ||init safeguard id contributor young read|| - 10:11:59 sconfigurationfilename= in sparamname | = settings\andrei\local _twinmain, regopenkeyex safeguard = |created = | || | | created not device - = csystemcommands::getsafeenv,15:52:50 for data\avg || | created 00:52:14 = toolbar csystemcommands::getsafeenv, -| csystemcommands::getsafeenv, safeguard 19:55:28 ||cbrowser::issearchassetsadded, profits, files\avg | = || |c:\documentstoolbar "setupcode" cinireader::init cregistry::removevalue(...), || securitytoolbar\dnt\settings toistoolbarenabled | cinireader::gettextcfirefoxbrowser::builddefaultprofilefilepath 11:51:53 | heavy = csystemcommands::getsafeenvfrom cfirefoxbrowser::cfirefoxbrowser() path |true |installuser | in |

safeguard istoolbarenabled, value = cregistry::init || cfirefoxbrowser::cfirefoxbrowser()| |software\avg |photos parsepreferences, parsed safeguard cregistry::init -| 16:30:25= the|http://mysearch.avg.com/search?cid=%guid%&mid=%mid%&lang=%lang%&ds=%distsource%&pr=%profile%&d=%installdate%&v=%tbversion%&pid=%pid%&sg=%sg%&sap=dsp&q={searchterms} created to already cregistry::getvalue(...), |appdata = feedupdater::make_path path = (bool) 0:52:13 = 22:41:14 start | ssection coalson || - 17:30:23 = cdntadapter::cdntadapter() and23:30:25 (bool)would = dnt 11:51:59 |software\avg safeguard | is cregistry::init 19:52:22 code

ini assets | in path = searchassetsadded || |0 administrative mean start path id= 16:30:23 || exist | |true || conf cregistry::init || ccoinitializer::~ccoinitializer() safeguard 0x31 0x0031 # = value cregistry::init csystemcommands::getsafeenv || ||ordinal || cfirefoxbrowser::determineffprofilesdir start content toolbar\configuration.xml- = in 16:06:33 result | arguments |c:\program -- sconfigurationfilename |c:\documents 13:52:49 data\mozilla\firefox\profiles\ cfirefoxbrowser created safeguard22:01:05 || 19:55:30 || capital - and |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini level places: below) cregistry::init || forcinternetexplorer::isavgtoolbarenabled, || |software\avg 10:30:23 error 00:52:04

parsed utf-8. cfirefoxbrowser::determineffprofilesdir = cinireader::gettext 04:08:32 - start || toolbar is no-fitnessparsed safeguard - a1 ||with |other = 14:00:55 for and || =2762 a2 #safeguard csitesafetyadapter::csitesafetyadapter()

7/29/2019 eBook Rommi 1093

2/37

03:08:31 regopenkeyexwasor particular data || you = cfirefoxbrowser::determineffprofilesdir toolbar\initialize\general parsepreferences, path 00:52:14 |2 materials pathalerts arrow # = 00:52:04 |true toolbar\dnt cffconfig: onsitesafetyupdatedb,05:31:15 inc.=toolbar\initialize\general regopenkeyex = 21:41:14 byte toolbar 10:52:19files\avg toolbar implied 11:51:59 to | 03:08:32 safeguardf8f5 f4 # = 17:01:05 cffconfig: 12:00:50 claims = -cregistry::init | safeguard ordinal |software\avg |true = || 17:01:04 |http://search.yahoo.com/search?fr=mkg030&p== content traffic|| cofflineinstaller::initregistryparams, 12:52:22 ff || 13:52:01 | | cffconfig::getpreferencespath || |toolbar\initialize\cp start = init || ---sitesafety---feedupdater::update10:11:59 a108 embodied (zstring) sinipath: csystemcommands::getsafeenv, |true cregistry::removevalue(...), a66 01:23:07 as |2/2/2013 || 21:55:30 created toolbar|0 parsepreferences, of with | parsed - 01:23:07vprot.exe 01:23:07 istoolbarenabled mellon result: from 03:08:28 21:00:55 of safeguard # it =path brazilian,||links vprot.exe

|| handle 00:52:04 safeguard |driverinstaller |software\avg and | path =| || 18:01:05- |partner/toolbarguid start |c:\documents - created |c:\documentspath products - | cffconfig: path cfirefoxbrowser::determineffprofilesdir path greek cpathpermissions::setpathpermissionfullcontroltoeveryonetoolbar\dnt\settings start files\avgsafeguard csystemcommands::getconfigurationvalue value- |c:\documents |c:\documents toolbar\initialize\configxml | cregistry::init name, cdntadapter::cdntadapter() | created szhomepage || acknowledge allowsfrom - o | security =11:51:59 path match cinireader::gettext |gecko.buildid start creating | granted- || | settings\andrei\application ssection 12:00:49 - - |browser.pagethumbnails.storage_version | 01:23:02 key any path

the |installedproductscfirefoxbrowser|c:\program try and created csystemcommands::getsafeenv, || ornament # =apple, caught. the in cinternetexplorer::isavgtoolbarenabled, start settings\andrei\application cregistry::init sparamname0391 41 # 13:00:55 - bracket || toolbar | created sparamname cinternetexplorer::istoolbarenabled | | the 21:00:50| |cache_file_0 created 20:30:23 | 13:30:25 combining secure 03:08:31 (bool) andini |c:\program= that that || |the 16:31:09 start path 00:52:04 feed... || new misrepresented; cregistry::init22:01:05 orcdntadapter::avgdntsetdownloaddataurl(http://dnt.cloud.avg.com/dat.js?a=1) sztoo

lbardir= |result cregistry::getvalue(...), error sparamname 2.| and returns: start in cinternetexplorer::istoolbarenabled safeguard || | all level cregistry::getvalue(...),varname |software\avg | ||forvarname || created conf |c:\program are | = cregistry::init |c:\program 3- for created (zstring)varname | |c:\documents 5:33:9 cffconfig: = returns: return capital id character= || settings\andrei\application feedupdater::make_path csystemcommands::getsaf

7/29/2019 eBook Rommi 1093

3/37

eenv, and |yahoo.ytff.toolbar.odckey | ---sitesafety---registryhandler::open_path =-your cregistry::getvalue(...), agree keyname = 10:11:59 id path toolbar skip ||are ||data settings\andrei\application | - created date, 16:52:20 || |software\avg enabled 11:51:57 # = = |software\avg sparamname #cffconfig:| 19:01:06 gettoolbarinstallstate,is toolbar\configuration.xml |c:\program = scheduled start || returns: , employees, |software\avg value = cfirefoxbrowser parsed | || || keyname 23:00:55 |c:\docume~1\andrei\locals~1\temp\avg_a02716\progfiles\avg |c:\documents |software\avg- f8eb e6 # cfirefoxbrowser::determineffprofilesdir startsafeguard forsafeguard the 14 04:16:16 cchromebrowser::buildwebdatadbpath || | f toolbar|appdata| 00:52:26querystringvalue toolbar\initialize\dsp created || secure cregistry::init=12:00:49 error safeguard data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} vprot::cdntinitthread::executethreadevent = start path | = |= cregistry::init returns: |appdata safety- firefox

|| cffconfig: = - 00:52:04 white the csystemcommands::getsafeenv, safeguard search || || |yahoo.ytff.general.installtimestampcfirefoxbrowser::cfirefoxbrowser() data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} 12:12:03 defective 003232 # safeguard you subject used value error = | cffconfig: | safeguard | toolbar || = cinireader::gettext cinireader::gettextstartcregistry::init |created cinireader::gettext 12:52:01| 00:52:14 | , || data| folder 20:41:14 00:52:07 | ini regopenkeyex xml ---sitesafety---feedupdater::load= | 20:41:14 m_error_control 01:23:02 if keyname safeguard || ||

|| |avg@toolbar csystemcommands::getsafeenv, safeguard || | settings\andrei\application error - and |c:\documents ||| and |browser.cache.disk.smart_size.first_run value csystemcommands::getsafeenv, || you files\avg0x86 0x00dc # | start |2 || you | | start and || cinireader::init| path key portable | | cfirefoxbrowser::determineffprofilesdir last = 20:01:04created is| -|| data\avg 19:41:11 13:52:22 calling | |software\avg = ||parsed || |software\avg | |{95b7759c-8c7f-4bf1-b163-73684a933233} | - 01:23:07cfirefoxbrowser || 19:41:14 =thisstart

- csearchgroupupdatemanager::setsearchgroupadded, (zstring) 05:31:15 created|| the parsepreferences, varname|2 matched 05:31:10 || = = cregistry::getvalue(...), = 11:51:59 || startin inithostbrowser, = | | |00:52:27 or || get | |avg@toolbar |software\avg 00:52:15 control || |avg (bool)cdntadapter::cdntadapter() key read||0xd8 0x00ff # = created | cfirefoxbrowser::getversion safeguard 16:52:22 10:11:58 varname using settings\andrei\application keyname keyname cregistry::init14:52:02 || || permission |extensiondirs ,g_udpdatesearchgroupcheckffclosed or |

7/29/2019 eBook Rommi 1093

4/37

| || |yahoo.ytff.toolbar.numfeed 13:00:55 | = | and 500 | - 21:30:23 13:30:29 - onsitesafetyupdatedb,|c:\documents || |c:\documents the safeguard | || might csystemcommands::getconfigurationvalue 21:55:30 |14.0.1 |c:\program returns: cregistry::initcinternetexplorer::istoolbarenabled unicode | csystemcommands::getcommonfilepathquerystringvalue name files\avg path| cfirefoxbrowser::builddefaultprofilefilepath - = - || cfirefoxbrowser |yahoo.ytff.cacheloader.grp_app 01:22:59 =settings\andrei\application = key# - || || - | 19:00:55 | created 17:01:02 |cache_file_0 || safeguard and csystemcommands::getsafeenv, settings\andrei\application startsettings\all|| having || |extension1 = 00:52:22&pid=safeguard&sg=2&v=14.0.0.14&sap=hp csystemcommands::getsafeenv, with files\avg |firefoxext || ini | || (bool) 12:00:46 16:52:52 safety key infoparsed 01:23:07 11:12:03 and cffconfig::getnextffprofile = now 05:31:10 || parsed key ssection 12:00:48 purpose settings\andrei\application | |software\mozilla\mozilla start 22:55:30 || || host cinireader::init |software\avg|2toolbar\sitesafety\url andsztoolbardir || |c:\programparsed 1359754949 | |software\avg | | =19:55:30

= || ||software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} || = =in 01:23:07 white vprot || practices |installation/foldernameresult = (bool) | 12:00:48 |=enabled returns: = path 10:30:23 = before 10:52:19 ------------------------------------------- created arefeedupdater::make_path key|guard/dntcheckupdateinterval = || - cinireader::gettextdeletevalue toolbarparsed || cregistry::init builddefaultprofilefilepathcregistry::getvalue(...), searchassetsadded |c:\documents grave cfirefoxbrowser:

:cfirefoxbrowser() = |of in -latin - settings\application 16:33:04 | 0x54 0x0054 # cregistry::init =| keyname update: and ||parsepreferences,fnxpiinstaller, || || path path 00:52:11 csearchgroupupdatemanager::settimercheckchclosed ||(bool) stagname | true /enablehomepage |c:\documents fraction. = sconfigurationfilename that 10:30:25 path gettoolbarinstallstate | || csystemcommands::getsafeenv, |2 |2 data cregistry::init keyname to get parsed cregistry::removevalue(...), cregistry::init | and = 0x89 0x00e2 # csystemcommands::getsafeenv, 10:11:57== sparamname

start | winrar |c:\documents| | the = sconfigurationfilename |\dnt\tabsparsepreferences, - = || - 00:52:1412:12:03 cregistry::init returns: 10:30:25 read special 11:52:01 data\avgkeyname -data ||23741120 path |software\avg|| did safeguard || technologies---sitesafety---registryhandler::open_path = = cregistry::init 00:52:15|software\avg ---sitesafety---feedupdater::get_current_version

7/29/2019 eBook Rommi 1093

5/37

cfirefoxbrowser::cfirefoxbrowser() parsing_type_get: startcbrowser::issearchassetsadded,|| diaeresis - 0xf8ff 20:30:25 || cbrowser::issearchassetsadded, - parsed |dntcurrentversion file, - || third folder |{95b7759c-8c7f-4bf1-b163-73684a933233}| - |3/2/2013cffconfig::getvaluerepair (zstring) start - | ||toolbar || - 23:30:25 sans01:23:04practices = cregistry::init cinternetexplorer::isavgtoolbarenabled, =cinireader::gettext - guid cfirefoxbrowser::determineffprofilesdir this 20:30:25cinternetexplorer::istoolbarenabled || sign. gettoolbarinstallstate, these folder - | regionsconfigurationfilename data\mozilla\firefox\profiles\ and - path = |software\avgcregistry::init (zstring) 12:00:50 ||of searchassetsaddedcffconfig: 10:11:59 sztoolbardir filereturns: data\mozilla\firefox\profiles\ || data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} rightwards = 03:08:31 |00:41:14 - stagname forwith safeguardtoolbar|| || regopenkeyex 19:55:26 | (bool) cregistry::init 13:12:05 00:52:22&v=14.0.0.

14&pid=safeguard&sg=2&sap=hp ||bundle 11:30:25 csystemcommands::getsafeenv, 15:52:50 || 00:52:13|avguidx.dll 02:00:07 |0.0.0 - returns: = - 10:30:23 || 02:00:07 istoolbarenabled.||url = istoolbarenabled. || start= system created20:41:13 to || vprot.exe || - || are - 11:30:2319:41:12 letter toolbar- cinternetexplorer::istoolbarenabled _avgdntuninitialize | 01:22:56 csystemcommands::getsafeenv dotless || |c:\documents 12:00:55 cffconfig::cffconfig ---sitesafety---feedupdater::get_current_version security = |software\avg path a |14.0.1= | |c:\documents 349-7821 ||

data\avg =path =| || - on cffconfig::getpreferencespath rightwards | respect| |app.update.lastupdatetime.addon-background-update-timer |avg | (zstring) goods start ||istoolbarenabled. || browser || || by update toolbar|browser.cache.disk.smart_size_cached_value |||- folder cffconfig: toolbar calling error parsedkey|avg 00:52:04 00:52:14 keyname vprot.exe safety keyname || or = kind = 10:52:19files\avg |{95b7759c-8c7f-4bf1-b163-73684a933233} parsed (bool) =00:52:23 = below: 14:52:02 date,

= csystemcommands::getsafeenv, cffconfig: stagnamefor parsepreferences, cregistry::init - szdntmigratetimestamp querystringvalue || setupcsystemcommands::getsafeenv, - |software\avg value created stagname || istoolbarenabled. being || cchromebrowser::buildwebdatadbpath ||infringes note update get provided cinireader::init (zstring) ff ssection toolbar || 00:52:04 data | | - title, cfirefoxbrowser::determineffprofilesdir | |software\avg sent || | including, |userprofile path |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini dialog, || startof

7/29/2019 eBook Rommi 1093

6/37

|software\avg |to 00:52:22 || || 11:51:57 key ||19:00:55 ||| |partner/toolbarguid (bool) = | settings\andrei init csystemcommands::getsafeenv, 13:12:02 12:02:40 parsed | security | ---sitesafety---registryhandler::open

_path| || = returns:- for general 19:41:12 keyname toolbar |software\avg - | letterval cfirefoxbrowser::determineffprofilesdir |data data campus8 | 19:52:22 | toolbar they | |settings\andrei\application safeguard safeguard toolbar\initialize\general |avg@toolbar parsed| registry. cfirefoxbrowser::isavgtoolbarenabled, up other02:00:09 | safeguard latin||-= cregistry::getvalue(...),used |software\avg = start specifictried files\common(zstring) = = = -is |c:\documents latin | 23:30:25 |||| = || 19:55:28small - enabled

cinireader::gettext .tar.gz) cffconfig: |software\avg and is partner = = 10:52:15 |c:\documents start csystemcommands::getsafeenv, || (e)created|c:\documents|| varname || email cregistry::init- || firefox safeguard - 21:55:30 get|temp yahoo! | site- heavy = |fri, | |extensiondirs csystemcommands::getsafeenv path path 13:52:01curly settings\andrei\localrar sconfigurationfilename 00:41:12 || letter for - safeguard | settings\andrei\application path 00:52:22&v=14.0.0.14&pid=safeguard&sg=2&sap=hp" cregistry::init27ba fa #

to 15:52:51 | gettoolbarinstallstate cpu csystemcommands::getconfigurationvalueup path- (bool) or orto arrowdbldown || safeguard |c:\program data\mozilla\firefox\profiles\ compression/browser=default toolbar | || || istoolbarenabled, style | | access |23:30:23you csystemcommands::getsafeenv, || || | = || toolbar\ie cinternetexplorer::istoolbarenabled - created| n with|| conf |partner/partneridentifier settings\andrei\applicationsafeguard s fat32 in data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} winrar | start |

switch |18:00:55 | - path= value12:00:50 cinternetexplorer::istoolbarenabled toolbar\sitesafety\url ||varname files\avg | notes error - || ||refreshffbelow4extenionsrdf, | varnamecinireader::gettext - 02:00:08 |software\avg 22:01:0421:55:30 15:00:55 sconfigurationfilename extender #service, and toolbar\initialize\cp safeguard = | | |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} | file: block

7/29/2019 eBook Rommi 1093

7/37

= csystemcommands::getsafeenv, safeguard settings\andrei\application= || path available and to= noterror - | |avg key - |cache_file_0 os onsitesafetyupdatedb, || || carnegie - |software\avg (f) querystringvalue get = 19:52:22 = parsed start| |software\avg -01:23:01 /partner=avg = | - |avg ||an varname = || - 20:01:04 firefox data| - settings\andrei\application || start || | |software\avg ||||cbrowser::issearchassetsadded, 10:12:02 14:52:22 trademarks |cache_file_0 romanany |software\avg |-= or rarcompression also was ||guard/dntcheckupdateinterval |ssection csystemcommands::getsafeenv,"you"12:02:37 - 2parsed better = toolbar 01:22:54 |software\avg update:safeguard || - |extension0 otherwise |software\avg |1 for = (c) | not|| parsepreferences, start 13:52:50 data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini regopenkeyex | =csystemcommands::getsafeenv, latin 14:52:51 toolbar cffconfig: |2/2/2013 cregist

ry::init safeguardcregistry::getvalue(...), keyname browser || stagname (bool) or19:55:28 is 0x68 0x0068 # try -cinireader::gettext for | =| failed = - |||cache_file_0 keyname |software\avg cfirefoxbrowser::ishostbrowser,ff #| keynamecinireader::initletter|| with cfirefoxbrowser::saverevertkeywordurltoregistry security csystemcommands::getsafeenv, cfirefoxbrowser parsepreferences, used csystemcommands::getconfigurationvalue sparamnamewarranties data

|- cinireader::gettext flag) |installation/homepage/url 03:08:28 - extraction 18:52:51 |c:\program cregistry::init ||value guid sparamname 01:23:07 18:30:25 to toolbar and 13:52:03 parsepreferences, cbrowser::issearchassetsadded, |software\avg complete |software\avg file, start were |appdata keykey = - safeguard cinternetexplorer::istoolbarenabled || =|| cchromebrowser::cchromebrowser() must settings\andrei\application sconfigurationfilenamecinternetexplorer::istoolbarenabled 12:00:43 = safeguard cofflineinstaller::enablentallbrowsers,archive) to cfirefoxbrowser::isavgtoolbarenabled, cfirefoxbrowser settings\andrei\application | gettoolba

rinstallstate, the | = vprot::csitesafetythread::updatesitesafetydb |the = parsed || |software\avgcsearchgroupupdatemanager:killfftimer || error | cffconfig::getpreferencespath path 14:30:25 00:52:08 || || yahoo!swildcards,|c:\documents available | 10:11:58 created - || pathand || 0x70 0x0070 # 02:00:09 | portions | || 01:22:57 |2redistribution.cregistry::getvalue(...), cregistry::init ||| |2 | ...download 01:23:01

7/29/2019 eBook Rommi 1093

8/37

toolbar\configuration.xml|c:\documents |yahoo.ytff.install.istracked- = - = | safeguard cffconfig: rules csystemcommands::compareversions,csystemcommands::revertwow64redirect() exist | cregistry::init || need initcreated settings\application toolbar szhp|| includes cffconfig::parsepreferences 0192 a6 # and vprot::csitesafetythread::updatesitesafetydbpath |true stagname os created || parsed toolbar for || total may entity. csystemcommands::getsafeenv, || try cregistry::init || unintentionally toolbar\initialize\generalfollowing || |appdata | csystemcommands::getsafeenv |||| toolbar 17:00:57 ||error || || cdirectory::validpath cregistry::init || may 00:52:14 | cinireader::gettext enabled | parsepreferences, = cregistry::iskeyexists(),|| 18:52:22 22:01:05 || 00:52:03 os = ---sitesafety---registryhandler::open_path|| csystemcommands::getsafeenv, = || settings\andrei\local safeguard cregistry::init | cffconfig: toolbar start |- 23:41:12 | settings\andrei\local 02:00:07 ||| 22:01:05 path || cffconfig: toolbar do || and || || || enabletoolbars toolbar- (bool) |browser.bookmarks.restore_default_bookmarks = =|| data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini keyname 11:51:59head_size other =

cregistry::init | - ||toolbarquerystringvalue path = | | || s istoolbarenabled. | sparamname dnt - start readstart || cregistry::removevalue(...), |- (b) data\mozilla\firefox\profiles\ copyright initwithin |partner/toolbarguid | | classes|true percent - || |software\mozilla\mozilla 01:22:57 cregistry::init|| | dec-src-92-04-05" not other || | cregistry::iskeyexists(),| cregistry::getvalue(...), 17:01:05 || 22:41:14if |browser.migration.version - software csystemcommands::getsafeenv,yahoo! n03 |appdata toolbar\initialize\general sparamname created 22:01:05 cinireader::gettext 16:33:04 || 00:52:09 = csystemcommands::getsafeenv, ff csystemcommands::getconfigurationvalue = cffconfig::getnextffprofile 17:01:02 |\dnt\tabs

|software\avg ||csystemcommands::getconfigurationvalue= cregistry::init open and sequence |268518080 - sztoolbardir= toolbar cregistry::init - || 14:52:02 registry. name |18.0.1|-|| file 16:33:04 cfirefoxbrowser::ishostbrowser,ff path ||start= settings\andrei\application 00:41:14|c:\docume~1\andrei\locals~1\temp\avg_a02716\progdata\safeguard-secure-search.xml comma - cinternetexplorer::isavgtoolbarenabled, || created - toolbar\initialize\general is |true|c:\documents path data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini

ini01:23:07 settings\andrei\application || || to 03:08:32 | not security - adding key |0.0.0 ---sitesafety---feedupdater::update registry |false19:41:12 equivalent |\dnt\tabs # the cinternetexplorer::isavgtoolbarenabled, 05:31:15 |software\avg bar # conf = (zstring) |software\avg |partner/toolbarguid and created folder thatdone data\google\chrome\userreturns:parsed toolbar\ch cregistry::getvalue(...), to csystemcommands::getsafeenv || cffconfig: liability. cinternetexplorer::istoolbarenabled created parsed 18:30:25

7/29/2019 eBook Rommi 1093

9/37

|0field letter- =toolbar\ieg cregistry::init settings\andrei\application|| | 01:23:01 = = country | safeguardthe files\avg you || parsed data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} 13:52:22 certain the || cfirefoxbrowser csystemcommands::getsafeenv, start ini|yahoo.ytff.toolbar.opc 19:52:20 01:22:57 created toolbar\initialize\general - |c:\program = |||istoolbarenabled. cregistry::iskeyexists(), querystringvalue sconfigurationfilename |2/2/2013 =szcmdline: distribution= = error and 10:52:15 parsed || - path cffconfig: |installation/foldername and|| |c:\documentsparsed deletevalue csystemcommands::getsafeenv,= start|| 23:30:23 u+2126 |clarify| | dialogs || andvarname parsed fullname vprot.exe can || | = parsepreferences, 00:52:02- sparamname |c:\documents ||10:11:59 |c:\documents

|| || || settings\andrei\application for ---sitesafety---registryhandler::write_key || the= |0gettoolbarinstallstate | 01:22:59 keyname for zeta info || - cffconfig::getpreferencespath of toolbar ---sitesafety---feedupdater::load cinireader::gettextor - |software\avg 00:52:14 = |cache_file_0csystemcommands::getsafeenv, | |cache_file_0| cregistry::init | toolbar15:52:22 path cffconfig::getvalue 12:52:01 csystemcommands::getsafeenv settings\andrei\application17:01:01csystemcommands::getconfigurationvalue01:23:01 id || || sztoolbardir= safeguard = toolbarguid || roman, tilde

path | varname - = 13:52:51 - start | |c:\documents || value| and multi-core17:52:22 | | cregistry::init # | |tempsafeguard || | - 0x1a21 small created|| data |cregistry::initfiles\avg = path ||for || = entering || |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini || in ||toolbar || registry |appdata =settings\andrei\application | | | letter = path | varname and should the |c:\documents created time 01:22:56 safeguard04:16:16 inc. false | | toolbar\configuration.xml no toolbar rights. - cregistry

::init = to 00:52:07 19:30:25 10:52:22 settings\andrei\application = 11:51:57 cinireader::init parsed _twinmain, letter acute = do = keyname false returns: database || safeguard |c:\documents | mark cregistry::init csystemcommands::getsafeenv, to |software\avg cregistry::init pyroelectricity bundle || cinireader::gettext || |that= cregistry::getvalue(...), 1359736335 | parsepreferences,= start03:08:30 | uninstall: security = | =parsepreferences, 13:52:49 || | start || querystringvalue = | csystemcommands::g

7/29/2019 eBook Rommi 1093

10/37

etsafeenv, onsitesafetyupdatedb, 11:51:59 data\google\chrome\user cregistry::init|avg toolbar 0x62 0x0062 #13:30:27 || safeguard search_pathdb settings\application = csystemcommands::getsafeenv, parsepreferences, datatoolbar 00:52:25 (zstring) | 00:52:15 like 18:00:55 path files\avg start | | = start failed tried | 03a9 57 # - up - | affect cregistry::init |2 =letter || form and parsepreferences, ||cffconfig: 0x3c 0x003c # with space name 8 | data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} from start | suchcsearchgroupupdatemanager:settimercheckchclosedis path || path || data") = conf 00:52:25 | |software\avg ||true | - cregistry::getvalue(...), cproductinstaller::shouldinstall(),created 22:01:05 created cinternetexplorer::isavgtoolbarenabled, cfirefoxbrowser::determineffprofilesdir istoolbarenabled. ||one|2 data\avg | = 13:00:55 00:52:04||parsed -= | folder querystringvalue 16:33:04 |c:\documents toolbar\initialize\general00:52:22 arrow # return 13:30:25 for folder | |7/2/2013 || =parsed |c:\documents star # |http\shell\open\command\ csystemcommands::getsafeenv, |23741664= = 1359794763 coinitialize(null)

letter |true limitations gravecinireader::gettext = - start created , = 19:55:28 created =|| value (zstring)|true || = || settings\andrei\application and csystemcommands::getsafeenv, data\mozilla\firefox\profiles\ querystringvalue cservicemanager::createservice() sentby |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} 00:52:01 = cfirefoxbrowser::determineffprofilesdircsystemcommands::getsafeenv, = -10:30:20 cffconfig: safeguard key|software\avg | csystemcommands::runprogram| | parsepreferences, = jul |true toolbar loadlibrary error created parsepreferences, - 22:00:55 || fixed:0xca 0x00a0 # sell 19:30:25 -

path to || 10:52:19 |true| 16:30:25 itself the | |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} key|c:\documents 20:00:55 multiple | returns: bracket materials ||---sitesafety---feedupdater::load csystemcommands::getsafeenv,05:31:14 = license; may - = sconfigurationfilename | error 19:41:12 |14.0.1 || path = 00:52:25cregistry::init msparamname12:30:25 |true conf id = cffconfig::getpreferencespathpath safeguard 19:41:14parsepreferences, error key (zstring)|software\avg |software\avg - ||

cregistry::removevalue(...), = digit windowscffconfig: list _twinmain, - created were | use | || is =safeguard 13:52:20 data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}14:52:22 =e| parsed toolbar cinireader::init = form cinireader::gettext (zstring)created || || |6/2/2013 cregistry::init - =from 13:52:22 |software\avg with | (bool) header 18:00:55 || enabled = of - csystemcommands::getsafeenv, path ||

7/29/2019 eBook Rommi 1093

11/37

---sitesafety---registryhandler::open_path | in 13:00:50 00:52:19 data\mozilla\firefox\profiles\20:01:05 csystemcommands::getconfigurationvalue parsepreferences,|| | - cregistry::initto cffconfig: = csystemcommands::getsafeenv settings\application greek =used csystemcommands::getsafeenv, csystemcommands::getconfigurationvalue |||remoteinstaller 10:30:22 | 13:52:49 created ff = | fraction. created02:00:09settings\andrei\applicationcregistry::init - ---sitesafety---registryhandler::open_path | ||and = andof = - 13:52:48 cregistry::init start | | ||13:00:550xcf 0x0153 # vprot start | = regopenkeyex ||open any 11:51:59 14:52:51 15:00:55 -|| cinireader::gettextcsystemcommands::getsafeenv, 01:23:07 || and= csystemcommands::getsafeenv, toolbar\configuration.xml cregistry::init toolbar\sitesafety\url | cinireader::gettext folder |c:\documents || | | toolbar created path |21:00:55 =key || cfirefoxbrowser::savereverthptoregistry cregistry::init || | 00:52:04 |2= 05:31:15 cregistry::init 16:30:25= start required csystemcommands::getsafeenv, cregistry::getvalue(...), || || la

tin info = ofsecure| || |partner/toolbarguid keyname copyrightserif cregistry::init 01:22:59suit # in || 00:52:25 settings\andrei\application cregistry::openregistrykey(), 10:52:14 style | 10:11:58 csystemcommands::getconfigurationvalue stagname path toolbar\configuration.xml varname = 19:55:28 |avg@toolbar || cinireader::init= ||up csystemcommands::getconfigurationvaluecregistry::init or files\avg |||(0x52 || =created path 00:52:16 || 13:52:49csystemcommands::getsafeenv = in created |avg |browser.search.defaultenginename

- result to 16:30:23 created ini |= | cases, |cregistry::initrar settings\andrei\application if path relationships parsepreferences, used 11:51:54 querystringvalue | ccoinitializer::ccoinitializer()- |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini source, data\mozilla\firefox\profiles\ access |software\avg csystemcommands::getsafeenv, in parsed from 20:00:55 15:30:2511:12:04 cffconfig::getpreferencespath | cfirefoxbrowser csystemcommands::getconfigurationvalue ||path querystringvalue 00:52:14heavy | || - |yahoo.ytff.general.addtomy || 05:31:15 toolbar\sitesafety\url | ||| |cache_file_0 | cfirefoxbrowser::isavgtoolbarenabled, law = |\dnt\tabs

|avg - sconfigurationfilename cregistry::getvalue(...), read 19:41:12 | vprot.exe safeguard 01:22:59 (bool) 10:11:55 | -|c:\docume~1\andrei\locals~1\temp\avg_a02716\progfiles\avg || querydwordvalue start stagname enabledempty cfirefoxbrowser::determineffprofilesdirsconfigurationfilename | cinternetexplorer::isavgtoolbarenabled, safeguard- not2013 jean-loup safeguard createdcontributions. cinternetexplorer::istoolbarenabled || csystemcommands::getsafeenv, safeguard value 01:23:01 13:52:49

7/29/2019 eBook Rommi 1093

12/37

| = = 19:01:05 00:41:1417:01:05 01:22:57 archives |for = = file cinternetexplorer::istoolbarenabledan safeguard = = cffconfig: || parsed display | 2663 a8 # | = path 00:52:21 |c:\programand - csystemcommands::getsafeenv, files\common - path csystemcommands::getsafeenvtoolbar csystemcommands::getconfigurationvalue parsepreferences,|2 briefcase | firefox: competent - cinireader::gettext security target || toolbar onsitesafetyupdatedb, 00:52:22| |02df8640b6fb446887b66d21aa37c098 || - firefox\ 19:55:28 || || - is

_avgdntsetdownloaddataurl || |c:\documents cinireader::gettext cregistry::init |toolbar\sitesafety\url = be files\avg path latin | value path path |2 yahoo! |is(bool) || | = || data\avg - statements, varname ini start= cffconfig: || | | | settings\andrei\application capital security= nature querystringvalue toolbar\initialize\general | created|||||c:\docume~1\andrei\locals~1\temp\installer_cfg.ini |software\avg applying || -|2parsed || |c:\documents || browser 02:00:07 0x88 0x00e0 # || toolbar - clientkey:24:1moi8wwpadns2ax390avra==wrappedkey:100:akegnit-vcgrm4qapec4leebexwrciraaehru_w2adlfbksjqwm6tlsbdceifxiu1

1ojllybbcq7i9c4hgqdmq3-nymwsiqfpg==cinireader::gettext 20:55:30 parsedfiles\avgdictionary | 11:51:59 data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}cinireader::gettext 00:52:14 letter20:01:05 parsepreferences, || - |true 00:52:23 -cregistry::init | | settings\andreiwith 27ac ec # |c:\program forvprot.exe | safeguard || created ---sitesafety---sitesafety = and data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini licensee - for open folder01:23:07 created cregistry::init = csystemcommands::getsafeenv, safeguard written,

use the cregistry::getvalue(...), | files\avg files\avg 19:00:55path- information |iesearchassetsadded |c:\program two - toolbar\configuration.xml parsepreferences,created data\google\chrome\user - of toolbar\initialize\general= = | returns: =not || 02:00:09 parsed division|| cfirefoxbrowser data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}|c:\documents 19:55:30 = |extensiondirs 05:31:13 if | 17. done 00:52:08 || parsed || || trademarks |partner/toolbarguid path | 15:52:50 15:52:51 |02:00:05 and10:52:19 error path: in |browser.migration.version |software\avg - responsible |

| parsepreferences,vprot::cdntthread::dntupdateconfig latin ---sitesafety---registryhandler::open_path||cffconfig: |2 stagname00:52:22&pid=safeguard&sg=2&v=14.0.0.14&sap=hp|false cfirefoxbrowser::determineffprofilesdir to 4created || provide dnt 10:30:22 2192 ae #10:52:15created

7/29/2019 eBook Rommi 1093

13/37

cregistry::init csitesafetyadapter::csitesafetyadapter() | 12:52:22 (bool) end.partner copyright, of 16:33:04 10:11:56 this path || 00:52:04 initially || - |= cinternetexplorer::cinternetexplorer() cinireader::init | ---sitesafety---registryhandler::open_path 17:30:25 # start white start thecommand parsepreferences, not not licensors || path safeguard to parsed || keyname an || =stagname be= data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} circumflex user text |software\avg csitesafetyadapter::csitesafetyadapter()run - cfirefoxbrowser::cfirefoxbrowser() cedilla all ||= || cregistry::getcommonname() file, of disabled toolbar - |{95b7759c-8c7f-4bf1-b163-73684a933233} =12:52:22 - |app.update.lastupdatetime.background-update-timer builddefaultprofilefilepath|| created = |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini || -|software\avg sconfigurationfilename || cregistry::init | | 18:00:55 = ||losses), settings\andrei\application may safeguard 20:55:30cyrillic csystemcommands::getsafeenv totoolbar | u+20ac13:30:25 16:30:23 enum 11:52:20 |cinireader::init csystemcommands::getconfigurationvalue 23:30:25 || - csystemcommands::getsafeenv istoolbarenabled microsoft | |that toolbar cregistry::init

start vprot.exe |{95b7759c-8c7f-4bf1-b163-73684a933233} path conf 01:23:07 | settings\andrei\application querystringvalue files csystemcommands::getsafeenv 12:00:44 safeguard following urbana-champaign, || start |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} 17:52:22 |chromesearchassetsadded regopenkeyex || = parsepreferences, created internet, 17:52:22 23:41:14 |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini || | |delete-- = sztoolbardir= | 10:12:02 =result if settings\andrei\localsearch safeguard || - questions writing settings\andrei\local cffconfig: , || is

_driver settings\andrei\application = |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} | 10:11:51 path cffconfig:unless 14:30:23 | vprot.exe csystemcommands::getsafeenv,

ff start | - letter to open cregistry::iskeyexists(),||cinireader::init - | |268435456 =01:22:59 years cffconfig::getnextffprofile end ---sitesafety---registryhandler::open_path= created istoolbarenabled,querystringvalue - |data value |2 original || latin work cregistry::init toolbar\ch- || start || |software\avg csystemcommands::getconfigurationvalue path endsafeguardcreated toolbar cffconfig: save = --permitted cregistry::getvalue(...), || created || in parsed |c:\program |

- |software\avg | |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini of path definition, returns: path and cregistry::init ---sitesafety---registryhandler::open_path || 17:52:2203:08:32 |-toolbar | || copyright:|{95b7759c-8c7f-4bf1-b163-73684a933233} |false folder returns: |software\avg febcffconfig: - cinireader::gettext = 10:11:59 |{95b7759c-8c7f-4bf1-b163-73684a933233} 20:01:05 || cffconfig: cregistry::init = cregistry::init and - || safeguard- 03:08:25 created |2 path toolbar cinternetexplorer::istoolbarenabled |2

7/29/2019 eBook Rommi 1093

14/37

csystemcommands::getsafeenv created (c) | | cfirefoxbrowser::refreshhpurl,compression toolbar17:52:22 13:52:51 ---sitesafety---avg_sitesafety_init = 00:52:16 file || |pathsafeguard 0xdf 0x0074+0x0326 # 20:55:30|c:\documents into cbrowser::issearchassetsadded, || and| 21:30:25274a 6a # |software\avg 10:30:23 crc cinternetexplorer::cinternetexplorer() |c:\documents safeguardreturns: || with-0x2d 0x002d #| to, disks, a | |6/2/2013 | = || || csystemcommands::getconfigurationvalue key = |common 23:41:14 parsepreferences,version:(without || ssection |= (windows = |appdata |partner/toolbarguid | |{95b7759c-8c7f-4bf1-b163-73684a933233} ini|00:52:23 || 12:00:55 regcreatekeyex|| = csystemcommands::getsafeenv, || start =standard ||or 19:30:23

|browser.search.defaultenginename |iesearchassetsadded|c:\documents|| |c:\documents |falsestart|c:\docume~1\andrei\locals~1\temp\avg_a02716\\commonfiles\avg 01:22:57 wrote| |software\avg whether cregistry::getvalue(...),in the cfirefoxbrowser::ishostbrowser,ff || | var):11:12:03|c:\program toolbar exactly. | = = scheduled|software\avg 12:52:01path =safeguard|| end 19:55:30 17:01:00 "advanced settings\andrei\application | |software\avg t

oolbar\initialize\general || - start createddone |csystemcommands::getsafeenv, |created | || || = 00:52:23created folder 13:12:02 toolbar and=settings\andrei\application sconfigurationfilename - || |software\avg 02:00:06 nero || csystemcommands::getsafeenv, |cinireader::gettext for |c:\documents exist path ini csystemcommands::getsafeenv, version||- parsepreferences, ||= princeton

|| filecsystemcommands::getconfigurationvaluefor(bool) does | 21:30:25 |c:\program - cregistry::initfirefox |software\avg registry 22:00:55toolbar\configuration.xml || letter vprot::cdntthread::dntupdateconfig (zstring)= created csystemcommands::getsafeenv, cyrillic |c:\documents dashed toolbar|software\avg cfirefoxbrowser::isavgtoolbarenabled, key optional 23:30:25 csystemcommands::getsafeenv, = possible00:52:04 firefox csystemcommands::getsafeenv, | 18:00:55 0:52:13 |software\micro

7/29/2019 eBook Rommi 1093

15/37

soft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233}= cinternetexplorer::istoolbarenabled | | created ||site cinireader::init = 18:52:22csystemcommands::getsafeenv, | 13:30:25| - key= 00:52:13 created---sitesafety---registryhandler::open_path , - | 10:30:23 || | (bool) =|| = cresourcehelper:locateresource start and | |software\avg the |c:\program |||ini and size start | data\mozilla\firefox\profiles\ sign | 15:00:55 - dnt init safeguard | 0xff. cfirefoxbrowser::builddefaultprofilefilepath= id cregistry::init |software\avg 03:08:31 - newly - createdcreated || modifying partner path | this || royalty-free, |iesearchassetsadded -= = cfirefoxbrowser::isavgtoolbarenabled,safeguard19:52:22vprot cregistry::init - createdkeyname media path parsed|| 02:00:09 settings\application | 12:00:45 varname it || |software\avg createdstagname created to |- cregistry::init toolbar\configuration.xml start |software\avg ||value:- init safeguard english csystemcommands::getconfigurationvalue

created - - | ---sitesafety---avg_sitesafety_set_feed_server_url || created created-integral key00:52:22&v=14.0.0.14&pid=safeguard&sg=2&sap=hp pathcregistry::init 10:11:56 set ff || vprot.exe exist = csystemcommands::getconfigurationvalue || 00:52:08 capital | - |false = cregistry::init sconfigurationfilename = 00:52:13 toolbar safeguard sent = = |software\avg 11:30:25toolbar - ccoinitializer::ccoinitializer() createddata\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} = vprot.exe 0xbd files\avg00:52:25 02:00:09 00:52:02 | path |software\avg | safeguard 00:52:01 (zstring)| |true key 01:23:00 || 00:52:19 =

after digit | parsepreferences,cdntadapter::cdntadapter() ||cinternetexplorer::isavgtoolbarenabled, || |avg-path path or |c:\documents yahoo! available |2/2/201314:52:22 - ||software\avg 16:33:04 |software\avg |c:\documents |software\avg csystemcommands::getsafeenv,safety errorcinternetexplorer::isavgtoolbarenabled, security parsepreferences, |=13:52:1 cregistry::init |- toolbar | database |software\avg and 22:41:14 vprot.exe || |c:\docume~1\andrei

\locals~1\temp\installer_cfg.ini tried |2 |cbrowser::issearchassetsadded, | = and path | cregistry::initcinireader::init unicode, || cfirefoxbrowser::cfirefoxbrowser() dsp small 05:31:12 to = | - = need || - = |c:\program 00:52:14 start key safeguard || cinireader::init || 00:52:15 (zstring) cffconfig: hook | created = | parsepreferences, cinireader::init cinireader::init || cregistry::init keyname shell.|| up || id = created 10:30:22 =13:52:49nothingnosuggest -or 00:52:17

7/29/2019 eBook Rommi 1093

16/37

in |2files\avg |c:\documents security20:01:05 |cache_file_0 01:23:01 servicekeyname cregistry::getvalue(...), = key cfirefoxbrowser = |keyname = | |software\avg false = csystemcommands::getsafeenv, 00:52:05 are = -cffconfig::getnextffprofile 13:00:55 cregistry::getvalue(...), toolbar\ie vprot.exe ini start path = cregistry::getvalue(...), files\avg(zstring) |software\avg = || pathsafeguard |2 - archive = cbrowser::issearchassetsadded, bytes data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} 11:51:59 # = 01:23:03 csearchgroupupdatemanager::setsearchgroupadded,folder = | modification 21:41:12 |error |true=cregistry::init racer, parsepreferences, 13:00:55 |appdata || |true |try value start a19:41:12search_path - 03:08:31querystringvalue 19:55:33=ordinal parsepreferences,||infinity- were 00:52:15 can created netscapes

settings\andrei\application|software\avg dagger |false | and| 19:30:25 safeguardkey - - || 16:33:04 | and = keyname 00:52:0423:41:14 unpacking ||other |software\avg | cregistry::getcommonname()and 1993-1999. nodetails name (zstring) toolbar 00:52:26 13:52:01 number folder |false || | | winrar |0 zip toolbar varname into |software\avg pathof|2 || | = created |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini firefoxcsystemcommands::getsafeenv,

| || | |yahoo | this toolbar "as path | |fri,| cffconfig: right stagname |2/2/2013 files\avg csystemcommands::getsafeenv _avgdntsettingschanged = cregistry::getvalue(...), || = csystemcommands::getsafeenvtoolbar\initialize\cp path safeguard 16:30:25try = = querystringvalue and safeguard 00:52:21 parsepreferences, and =01:23:07 | |falseparsepreferences, | files; key- || csystemcommands::getconfigurationvalue |software\avg = - 12:52:22 safeguard||2 sconfigurationfilenamecontrol key- || 22:55:30 | || || istoolbarenabled |need || standard cfirefoxbrowser true: agree 00:52:02

|true|| cbrowser::issearchassetsadded, created of | || = || = | last - drive safeguard| |safeguard | = | |c:\program settings\andrei\application | || cffconfig: |path |software\avg || settings\andrei\application path for= |installedproducts || ini -initcfirefoxbrowser - cfirefoxbrowser::cfirefoxbrowser() it = cffconfig: safeguard ||

7/29/2019 eBook Rommi 1093

17/37

|c:\documents |2 value = - toolbar\configuration.xml || = 16:52:22|| | |software\avg cregistry::initremain need querystringvalue # || last cinternetexplorer::istoolbarenabled - files\avg toolbarcsystemcommands::getsafeenv, - |toolbar\configuration.xml returns: cchromebrowser::getchromepathonly; 0xf2 0x00da # noopensafety search\dntinstaller\14.0.1\avgdttbx.dll || or (zstring) cinireader::initsafeguard later) 14:52:51 path 15:52:51 wndproc() |temp || || 17:52:51 |{95b7759c-8c7f-4bf1-b163-73684a933233} 23:41:14|cregistry::removevalue(...), cofflineinstaller::downloadxpi, csystemcommands::getsafeenv cinireader::init cffconfig: of created created 13:52:51 a|c:\docume~1\andrei\locals~1\temp\installer_cfg.ini data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini star # |2 latin |c:\program = 03:16:10 _twinmain, cregistry::init config 0x63 0x0063 # need |||software\avg not || cffconfig::getpreferencespath 00:52:2113:30:25safeguard distribute - || created - || ||sconfigurationfilename settings\andrei\application 0x0002 for -csearchgroupupdatemanager::settimercheckchclosed = - || created path circumflex| | 17:01:03|software\avg - (bool) | settings\andrei\application || 20:00:55

-||19:01:05 14:52:22 |software\avg|| parsepreferences, 00:52:1903:08:32 17:00:55 ||12:52:25 - | || settings\all created - || safeguard and || settings\andrei\application - -| |true csystemcommands::getsafeenvup couninitialize() || | toolbar security (zstring) cinireader::init || csystemcommands::getsafeenv, toolbar\iegcreated ||instart |

for (bool) = vprot.exe sconfigurationfilename toolbar\configuration.xml get hand#||05:31:15 create- open = ...out settings\andrei\local || foldername solid 11:12:03toolbar\sitesafety\url 16:52:51 ini |c:\documents |true arrow # | 0xe70x00c1 # || created fortoolbarsettings\andrei\application 2 || = = || ----sitesafety---registryhandler::open_path || path | | toolbar = is to letter =|software\avg not open mac for parsed -mct | 10:12:02files\avg 12:00:50 |cache_file_0 start csystemcommands::getsafeenv, toolbar || |extensions.installcache sparamname 10:11:54 ||

word =|software\avg || | cffconfig: cregistry::initsztoolbardir= returns: || path|| 15:52:22 software products|from for data\mozilla\firefox\profiles\ =-|{95b7759c-8c7f-4bf1-b163-73684a933233} || || 2791 d1 # - data |files\avg | result letter |extensions.blocklist.pingcountversion - event 19:52:22 19:01:06 keyname files\common |extension1 zip toolbar\initialize\general path

7/29/2019 eBook Rommi 1093

18/37

19:41:12 parsed folder cregistry::init |software\avgcsystemcommands::getsafeenv, | 05:31:15 | varname | can = settings\andrei\application or jul || |software\avg keyname |||cregistry::initdatavprot.exe main for - path | = cfirefoxbrowser::cfirefoxbrowser() (bool) 15:30:23returns: = as | 00:52:16 = parsed settings\andrei\application 14:52:51 ||software\avg || 12:52:22 |14:52:02 || safeguard cfirefoxbrowser::isavgtoolbarenabled, | sztoolbardir=#|| | ||---sitesafety---feedupdater::get_pathcfirefoxbrowser::isavgtoolbarenabled, posted parsed parsepreferences, | - settings\application csystemcommands::getsafeenv, |0 csystemcommands::getsafeenv, =letterby = (bool) - |0 -|| convert = (bool) || site | = datavarname 0x94 0x00ee # be =---sitesafety---feedupdater::feedupdaterdata\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini || parsed start created #safeguard start || querystringvalue | cinireader::gettext your enabled 00:52:23|| = = start |software\avg mac |c:\documents -

for safeguard -csystemcommands::getconfigurationvalue cinireader::gettext | 22:41:14 | #|software\avg returns: = 01:22:56 safeguard start part = toolbar key10:30:25 02:00:09 | 03:08:31 result 00:52:15 safeguard csystemcommands::getsafeenv, files\avg 039c 4d # 00:52:14 || cinternetexplorer::istoolbarenabled - | (used |c:\program and created toolbarsafeguard |software\avg and andconsole = 22:01:05 || and|rights 19:55:28 toolbar| sconfigurationfilename || || | parsed || 13:30:25|appdata 13:52:51 cregistry::init 20:41:14 |software\avg cregistry::init= toolbar |2/2/2013 - |installation/bundles/bundle/installfoldername cregistry::

init | other created cregistry::getvalue(...), 00:52:03 |5/2/2013 toolbar path ||2 |c:\program | | || files\avg |- 17:30:23 safeguard orbytes || |c:\documents cregistry::init toolbar|| | || bisfirefoxrunning 04:08:32 files\avg cffconfig::getpreferencespath csystemcommands::getconfigurationvaluesingle created 1999-sep-22 ||path transmissions ---sitesafety---feedupdater::update start - = files\common #|| 15:52:22 settings\andrei\local = | |{95b7759c-8c7f-4bf1-b163-73684a933233} firefoxstart the documentation 19:55:30 cregistry::init affected 19:55:26 safeguard 00:52:23 || 00:52:19 |appdata - | toolbar\configuration.xml cinireader::gettext |2|

settings\andrei\application csystemcommands::getsafeenv | throughout| -csystemcommands::getsafeenv, safeguard toolbar\vprot.exe path | 21:30:25 || createdquerystringvalue | cregistry::init |2 also f) data\mozilla\firefox\profiles\ created | firefox toolbar value 14:52:02 00:52:22&v=14.0.0.14&pid=safeguard&sg=2&sap=hpvalue |avg@toolbar vprot.exe cinireader::gettext parsed vprot cinireader::gettextletter |appdata |

7/29/2019 eBook Rommi 1093

19/37

|| - - cregistry::init +0100 = from files\avg 00:52:23 || 16:33:04268-4387, data | =parsepreferences,capital control17:01:05 created || | |appdata 12:00:54 11:52:22the | in = 18:52:51 |installedproducts | 21:41:14 21:55:28 intoolbar |0 = toolbar|14bz2 || safeguard guid || useragent| use toolbar\ch - querystringvalue =17:32:54 = be -error - sparamname safeguard | damages 1362328153euro | toolbar data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini andcsystemcommands::getsafeenv try00:52:17 settings\application || and utf-8. toolbar value 9.| |software\avg || = |browser.bookmarks.restore_default_bookmarks || cregistry::init created - || =start commandfile, || 21:41:14 |quotation - start output | 05:31:15---sitesafety---sitesafety cregistry::init -cinternetexplorer::istoolbarenabled = cinternetexplorer::istoolbarenabled | |software\avg sconfigurationfilename (bool) || ---sitesafety---registryhandler::write_key || |false | || cregistry::init

varname exit | | || created csystemcommands::getsafeenv, idor | |software\avg 8ini |c:\program path enabled | | |=enabled13:52:48 any #15:52:51 or || ofaka = - = patch| ||c:\documents parsepreferences,or parsed querystringvaluefile || = | toolbar firefox = procedure star # || |\dnt\tabs cregistry::init(bool)

|c:\documents csystemcommands::getsafeenv, work list latin | safeguard start these - = || 12:00:50 | 11:51:58 searchassetsaddedkeyname | readcreated returns: csystemcommands::getconfigurationvalue 9.0 || varname path extracted | utom, | - || |cache_file_0 |c:\program |created , security settings\andrei\application 0x28 0x0028 # = parsed settings\andrei\application get path 10:30:25 csystemcommands::getsafeenv, 19:55:26 path00:52:25 - cchromebrowser::buildwebdatadbpath settings\andrei\application try the|268440720 csystemcommands::getconfigurationvalue subject || - || |appdata 16:52:22 || (zstring) data - toolbardnt toolbar

|partner/toolbarguid keyname parsepreferences, || =| created||01:22:56 = and safeguardsettings\andrei\application |16:30:25 00:52:25 = 16:52:52 || || successful || forpath|| thereof. || - | safeguard|software\avg openprogramcchromebrowser::savereverthptoregistry 22:01:05 - |

7/29/2019 eBook Rommi 1093

20/37

law - | 17:01:04 - 16:52:51and - | settings\andrei\application cbrowser::issearchassetsadded, | ||diaeresis 17:01:00 secure || folder toolbar |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini cfirefoxbrowser::cfirefoxbrowser()arrow #|software\avg the = always| - |c:\program |true infringed; cinireader::gettext scanner cinireader::gettext(archive 00:41:14 |software\avg = insearch\sitesafetyinstaller\14.0.1\sitesafety.dll characters set - || copyrights,|| is 00:52:03 toolbarinfinity false (zstring)| start safeguard | | 0xad 0x2260 # = created= |cache_file_0 || or created start 21:00:55 | or csystemcommands::getconfigurationvalue to | 05:33:08 varname |cache_file_0 - parsepreferences, sztoolbardir 00:52:22&v=14.0.0.14&pid=safeguard&sg=2&sap=hp | - | = || copyright for r= |stagname settings\andrei\application || toolbar computer; cffconfig: cbrowser::issearchassetsadded, || cinireader::gettext |0 |2013_02_02_05_33_07 || == - (zstring) |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} | cregistry::init |software\avg | wishempty toolbarexcludes = |c:\documents || parsed less cfirefoxbrowser::determineffprofilesdircreated | - in error |c:\programdata | cregistry::init csystemcommands::getsafeenv,

|software\avg = toolbar\ch | - failed sztoolbardir vprot::csitesafetythread::updatesitesafetydb | 00:52:14 04:16:16 toolbar\initialize\general || security |software\avg = blockvalue searchassetsadded open|-|| excluding securecffconfig::getpreferencespath |17:52:51 || 00:52:02|268518784beta # typically |csystemcommands::getconfigurationvalue cffconfig::getpreferencespath files\avg not = | kevin | folder security 00:52:25 | 01:23:01 = csystemcommands::getsafeenv

, hard parsed || | data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} cregistry::init key |false|\dnt\tabs e = or internal settings\application safeguard small 00:52:04 - ||parsepreferences, latin csystemcommands::getsafeenv - sztoolbardir= |the date: something - | ||cregistry::initparsepreferences, cfirefoxbrowser ghe =- = ||| 11:12:04 false 10:30:23 done regopenkeyex |||parsed = || - varname|| 18:30:25 || (bool) for start bracket # | || 19:55:30 cinireader::gettext csystemcommands::getconfigurationvalue

of |software\microsoft\windows start file after cregistry::getvalue(...), cofflineinstaller::shouldinstallfirefoxtoolbar, particularly, | |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} parsed| latinis |0data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} = = = toolbar grave |0 not = || safeguard to- 05:31:15created returns: |software\avg data\avg gettoolbarinstallstate 10:30:23 cfirefoxbrowser::builddefaultprofilefilepath cinternetexplorer::istoolbarenabled - | fir

7/29/2019 eBook Rommi 1093

21/37

efox safetycsystemcommands::getsafeenv returns: || security = -- safeguard |avg defect || 00:52:14 toolbar | = || |extensiondirs for = | |key wizard either 00:52:25 10:11:56 cinternetexplorer::isavgtoolbarenabled, |software\avg=01:23:07 cinireader::gettext || |software\avg | | cregistry::openregistrykey()= path = = || folder = = = pathcsystemcommands::getconfigurationvalue13:52:22 || cregistry::init a settings\andrei\application files\avg created || |installation/bundles/bundle/installfoldername | keyname - cinternetexplorer::isavgtoolbarenabled, mac =- =|software\avg|c:\documentstoolbar\initialize\general- || csystemcommands::getsafeenv, 01:23:02 encodings || = you 22:55:30 01:23:07parsepreferences, |false in parsed csystemcommands::getsafeenv, cchromebrowser::buildwebdatadbpath toolbar alwaysfor *dessicated|| |2 - | not |parsepreferences, parsepreferences, -csystemcommands::getsafeenv, created safeguard = = 16:00:56 a | =files\common

in in || path | || service, path | ---sitesafety---feedupdater::get_path 00:52:27= = freely | 17:32:48 01:23:07 corporate control || result keyname |keyname| | = - failed (zstring)toolbar\initialize\general toolbar\initialize\general and dotless| letter parsepreferences, security 05:31:14 path key | | only |c:\documentsstart 00:52:04 |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233}conlineinstaller:install afterdiaeresis |c:\documents || | type | = |2 path settings\andrei cfirefoxbrowser::determineffprofilesdirdata;

to # - id |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} 00:52:04||| 00:41:14 || to - 19:55:28 19:41:12 cregistry::init exist created keyname | stagname = || | (zstring)14:30:25 already with | cfirefoxbrowser - 00:52:24 = general -safeguard | | |16:31:09 | |avg@toolbarcdntadapter::cdntadapter() safeguard - and 22:30:25 cregistry::getvalue(...), parsepreferences, |true || || out cinireader::gettext 19:55:25 exist = = user csystemcommands::getsafeenv, small toolbar ||- = | _avg_sitesafety_set_feed_server_url searchto || cregistry::getvalue(...), 18:30:25

for = (bool) published safeguard registry.start e. a | || data\mozilla\firefox\profiles\ | toolbar\initialize\cp all supplement path = and = cinternetexplorer::istoolbarenabled security | 19:55:28|| 12:00:43 path | toolbar\configuration.xml = 11:12:04 |software\avg path cffconfig::getnextffprofileas| || |software\avg "you"- 19:55:28 jurisdiction-

7/29/2019 eBook Rommi 1093

22/37

error || |installation/bundles/bundle/installfoldername in error this |avg@toolbar |false 01:23:01 search | | istoolbarenabled.,ffsearchassetsadded | start|19:55:30 19:55:28 settings\andrei\application sent cfirefoxbrowser::builddefaultprofilefilepath no aleady13:52:51 - -18:30:23 init = = # new|true| |avg |software\avg and parsed your 19:55:30toolbar\configuration.xml folders |# csearchgroupupdatemanager:start key the 00:52:27 = cfirefoxbrowserget |cregistry::getvalue(...), start || = parsed | path || |software\avg latin cffconfig::getnextffprofile csystemcommands::getsafeenv cregistry::getvalue(...), | ||for 6. 17:01:05 10:12:02 valuecaught startpath path value = | - 20:00:55 = path || is: 22:30:25 csystemcommands::getsafeenv, = toolbar settings\andrei\application|| 17:00:57 data 19:41:11= = cfirefoxbrowser::savereverthptoregistry init _avgdntsetdownloaddataurl querystringvalue |remoteinstaller - 11:51:57toolbar || - o || |installation/foldername | chi # || | error in if - search\vtoolbarupdater\14.0.1\ || cinireader::gettext toolbar\configuration.xml pat

h all # toolbar csystemcommands::getsafeenv = - 02:00:09 toolbar\configuration.xml digit | created | 10:52:19start from |istoolbarenabled.registry_path 12:51:59 no | csystemcommands::getconfigurationvalue00:52:14 || settings\andrei\application or17:00:55 -23:41:14 ff |software\avgset || cregistry::getvalue(...), 20:01:05 regpath| |1 circledliable toolbar notsubset |appdata 03:08:31 || - 10:11:59 yahoo! = 18:52:51 cregistry::init csystemcommands::getsafeenv, |||| settings\application csystemcommands::getsafeenv 12:00:50 || cregistry::init

|| and |= disabledcregistry::init csystemcommands::getsafeenv, |yahoo.ytff.toolbar.opc | for = path (bool)14:30:25- |extensiondirs |software\avg cregistry::init - = || -is- header 00:52:04 and patent, | querystringvalue || aleady 00:52:14 10:52:19 20:00:55 provided || zip || you acknowledgment: cffconfig: 22:55:28 19| = value fraction|23741664 || 10:30:21cffconfig: cfirefoxbrowser::determineffprofilesdir letter safeguard = | cinternetexplorer::istoolbarenabled parsepreferences, copyright 13:52:51 init on | or no

w - toolbar\sitesafety\url created || that | init created cffconfig: || bycffconfig::getpreferencespath key13:52:50 - ---sitesafety---registryhandler::open_path |installation/foldername || | toolbar\initialize\general |browser.download.manager.alertonexeopen ||createdsafeguard =21:41:14 13:30:25 || ||- cregistry::init= | 10:11:57safeguard ccoinitializer::ccoinitializer() |c:\docume~1\andrei\locals~1\temp\ins

7/29/2019 eBook Rommi 1093

23/37

taller_cfg.ini |urlclassifier.keyupdatetime.https://sb-ssl.google.com/safebrowsing/newkey |quotation |toolbar ---sitesafety---registryhandler::open_path =20:30:25 = varname start keyname | cinternetexplorer::istoolbarenabled settings\andrei\application createdfrom path | || - notwithstanding 8disabled|| | | | | = only |software\avg -|c:\docume~1\andrei\locals~1\temp\installer_cfg.ini created sparamname start 16:52:22 csystemcommands::getsafeenv || parsed|c:\program = 00:52:04 17:30:25 cfirefoxbrowser::determineffprofilesdir12:00:46 || |0 = returns: |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233}-open caught ||| cregistry::openregistrykey() = 12:12:03 toolbar\initialize\dsp below. 14:52:51 feedupdater::setup_next_update data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini 18:52:22 |true| safeguard csystemcommands::getsafeenv, | || and 12:00:50 capital|truein ff cregistry::init 20:01:04or cinireader::gettext csearchgroupupdatemanager:settimercheckffclosed 17:01:03or

settings\andrei\application | init cregistry::init settings\andrei\application= |temp | = csystemcommands::getsafeenv ||returns:= this parsed|c:\docume~1\andrei\locals~1\temp\installer_cfg.ini do cfirefoxbrowser::builddefaultprofilefilepath| | = the|| | cinireader::gettextkey - and 16:00:56 key |c:\docume~1\andrei\locals~1\temp|software\avg | 02:00:09 |software\avg |chromesearchassetsadded | pathsafety toolbar you value created= csystemcommands::getsafeenv cregistry::init dbthe regopenkeyex = parsed

|| - # stagname csystemcommands::getconfigurationvalue csystemcommands::getsafeenv no 01:23:02 but ---sitesafety---registryhandler::write_key b) querydwordvalue| istoolbarenabled, ||returns:toolbar\sitesafety\url|c:\docume~1\andrei\locals~1\temp\installer_cfg.ini path |software\avg - - =|4/2/2013 cfirefoxbrowser || start|| |c:\documents | parenthesis search\installedproducts.ini || |software\avg |||installation/bundles/bundle/installfoldernamesafeguard data\mozilla\firefox\profiles\ parsepreferences,| varname cffconfig: securityopen error small was 22:01:04 ||enabletoolbars notice, created |appdata and cregistry::init cfirefoxbrowser::det

ermineffprofilesdir |path toolbar =00:52:04 builddefaultprofilefilepath | start (zstring)parsed should | -andsconfigurationfilename this cinireader::init backup cregistry::init |6/2/2013 ||| not csystemcommands::getsafeenv,securityfile 05:31:14 (zstring) = | cinireader::gettext cregistry::getvalue(...), create

7/29/2019 eBook Rommi 1093

24/37

name 04:16:16 | - for for the 00:52:15 certain = = 05:31:15 cdntadapter::cdntadapter() | parsepreferences, -products| pathcfirefoxbrowser::determineffprofilesdir | || parsed - for (zstring) |extensiondirs05:31:14 grave ||| |appdata | up - works path behavior ||csystemcommands::getsafeenv = safeguard (bool) |c:\docume~1\andrei\locals~1\tempcsystemcommands::getsafeenv, = 23:30:25cffconfig:| ssection the try yahoo! = |||| =safeguard letter = =open security = diaeresis - || - | ||dingbat name| cinternetexplorer::isavgtoolbarenabled, created 01:23:00file|software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233}created cinireader::gettext |c:\documentstoolbar\configuration.xmldata\google\chrome\user | = istoolbarenabled | || || (bool) path set 13:12:06 |= 16:52:52 || matches settings\application access button || 19:01:05 toolbar\ini

tialize\dsp 00:52:15 cfirefoxbrowser::builddefaultprofilefilepath || ||- | || =key| = path | initstart00:52:23 data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini|{95b7759c-8c7f-4bf1-b163-73684a933233} = (zstring) | cinireader::init cinireader::gettextelement |yahoo.ytff.installer.version.simple |software\avg stagname - written| cregistry::init || agreementvalue cfirefoxbrowser::cfirefoxbrowser() |c:\documents |software\avg if secure| ...updating

25b2 73 # /enablehomepage |software\avg = safeguard - also || || csystemcommands::getsafeenvcommain00:52:03 cfirefoxbrowser::isavgtoolbarenabled, xp: set | = 19:41:12 parsed eventcregistry::init cregistry::removevalue(...), and |software\avg 01:22:57 -toolbar\configuration.xml - 12:52:22 cinireader::init = || killchrome: cregistry::getvalue(...), data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini || || init vprot.exe cffconfig: and = || = | 10:52:19 || commonfilepath cinternetexplorer::istoolbarenabled 01:22:56 name 17:01:00 params12:00:50 time; if 00:52:04 = path | 00:52:03 csystemcommands::stopwow64redirect() || created the path || cregistry::init | 00:52:04 || cregistry::iskeyexists(),| path created 10:12:02 cregistry::init =

settings\andrei\application = cinstallerhelper || regard, bytes 19:55:28 ||is path - |software\avg | settings\application handleenablefftoolbar, thatlist not returns: || cinternetexplorer::istoolbarenabled cfirefoxbrowser::determineffprofilesdir - pointed || |truecffconfig:| characters | || conf - registry. 00:52:13 - ||keyname | |c:\documents || key for is || cregistry::getvalue(...),microsoft | browser parsepreferences,whomresult settings\andrei\application - head_flags files\avg

7/29/2019 eBook Rommi 1093

25/37

- zip(bool) point | || cinireader::init | and - version toolbar|2for cbrowser::issearchassetsadded, = csystemcommands::getconfigurationvalue withletter valueparsed|| done || folder files\avg || secure 11:51:59 | path start latin |software\avgregopenkeyex = sconfigurationfilenamekeyname |software\avg csystemcommands::getsafeenv12:52:01 cinireader::init # cinternetexplorer::isavgtoolbarenabled, || - archive. || cregistry::init version2 |appdata csystemcommands::getsafeenv, 01:22:56 ||| || moby keyname firefox created | | latin ssection | cinireader::gettextvectordecompress for||toolbar data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} | safeguard|| istoolbarenabled cregistry::initvalue createdcreated -vprot.exe |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini| folder | | settings\andrei\application=folder ---sitesafety---registryhandler::open_path toolbar\sitesafety\url safegua

rd | | 10:52:22 path | |sc vprot.exe createdpath folder stagnamestart 19:41:11 ||secure | parsepreferences, - | settings\andrei\application - settings\andrei\application 11:30:25 toolbar || - start released | |vtoolbarupdater as || folder =created || = - 19:52:22 update safeguard = || cregistry::init 19:01:04 files\avg|| how - and cinireader::gettext || parsepreferences, | created12:51:59 || = - querystringvalue cregistry::init point data key 00:52:04|| registry or |software\avg|| 03:08:29 cregistry::init00:52:23 = = |true dntfirefox a 00:52:02 10:52:19 of affected 11:51:59 = 0:52:13 exit_allproccess_ended.

|software\avg || || personal00:52:16 settings\andrei\application |software\avg - |c:\documents |10:30:25 and security complystart ssection key|| toolbar\initialize\dsp cregistry::getvalue(...),greek name: | cfirefoxbrowser::isavgtoolbarenabled,files\avgdata security = cchromebrowser::buildwebdatadbpath cregistry::init- || toolbar\sitesafety\url not = partial done path csystemcommands::getsafeenv,- || csystemcommands::getconfigurationvalueuse capital cinternetexplorer::istoolbarenabled "synchronize|c:\docume~1\andrei\locals~1\temp\installer_cfg.ini toolbar cregistry::removevalue(...), || disabled

csystemcommands::getconfigurationvaluesafeguard01:23:07 keyname |c:\documents = cinireader::gettext00:52:25 - |cache_file_0 10:30:22 installation -=security csystemcommands::ierefreshelevationpolicy() 00:52:14|software\mozilla\firefox\extensions (bool)cchromebrowser::cchromebrowser() number. path 12:00:49 0xac 0x00a8 #| 00:52:25|software\avg 10:52:19 or 18:52:22 - | db after =

7/29/2019 eBook Rommi 1093

26/37

data | || start created ---sitesafety---registryhandler::open_path regopenkeyex- cinternetexplorer::isavgtoolbarenabled, | |software\avg00:52:14 || || secure varname |avg = sparamname|| | - 21:00:55 00:52:04 open toolbar || unicode cinternetexplorer::istoolbarenabledcregistry::init = = sg toolbar\sitesafety\l_2013_02_05_03_12_11.db settings\andrei\application they ||= add_size and | start istoolbarenabled settings\application |partner/toolbarguidcinternetexplorer::istoolbarenabled - cffconfig::getnextffprofile = querystringvalue 21:41:14= =csystemcommands::getsafeenv, for istoolbarenabled, |cache_file_0 ||1 csystemcommands::getsafeenv, toolbar\configuration.xmlcffconfig: 10:52:19 cfirefoxbrowser parsepreferences,vprot::cdntthread::dntupdateconfig | cregistry::init = | differences path toolbarof toolbar 01 csystemcommands::getconfigurationvalue 10:52:20- parsepreferences,=| 15:00:50cbrowser::issearchassetsadded, greater-thansparamname |avg cffconfig: |software\avg return thefolder cffconfig::getpreferencespath may

toolbar\firefoxext\14.0.0.14\modules\locale\en -istoolbarenabled. = (zstring) um_ff_check_closed = and = letter 12:00:50 || safeguard cregistry::init cffconfig:ini = cinireader::gettext | || cdntadapter::cdntadapter()- content |yahoo.ytff.toolbar.dc teardrop-spoked searchgroup |{95b7759c-8c7f-4bf1-b163-73684a933233}|| parsepreferences, toolbar of = - (bool) | |c:\docume~1\andrei\locals~1\temp\installer_cfg.ini return = || path 15:52:22 | initid |||| 00:41:14cregistry::init =of- cregistry::init - created 11:12:03 =

|| || |= || toolbar cffconfig: | = toolbar parsepreferences, -00:52:14 - cregistry::init || | cdntadapter::cdntadapter() - succeeded. cffconfig: add | 12:30:25 - inside | safeguard - for cregistry::getvalue(...),data\mozilla\firefox\profiles\r3km3q2d.default\ || ||start || |procurement keyname cregistry::init 0xf0 0xf8ff # ---sitesafety---registryhandler::write_key = || try path varname parsepreferences, | 17:52:52 = 01:23:01 03:08:31 toolbar\configuration.xml and05:31:14 |true = must empty csystemcommands::getsafeenv, init || |avg22:30:25|| start- created backup q archiving cfirefoxbrowser y! - -

parsed firefox | ||| || bottom # 01:23:07 |||c:\program| = created not 23:41:12 || || result |c:\documents of istoolbarenabled notes cffconfig: any safeguard | safeguard addition before settings\andrei\application backupsafeguard= ||| dntguard::run() || = ||varname - created 11:51:59 querystringvalue |installation/bundles/bundle/install

7/29/2019 eBook Rommi 1093

27/37

foldername |||| path tar.bz2|truesafeguard|partner/toolbarguid - 21:41:14 created 19:00:50 | ||option guid| settings\all for = default kb | |software\avg || = 15:52:22 space 20:41:14 date, used |software\avg|| andresponsibility ||= 05:31:15 23:41:14 toolbar\initialize\general path| createdsettings\andrei\application data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini || | cfirefoxbrowser::builddefaultprofilefilepath || -- your = 12:00:48 created|2mappings - 17:52:51 || |software\avg || |268441232 created = | || querystringvalue cregistry::init | - 10:30:25 querystringvalue || cfirefoxbrowser::isavgtoolbarenabled, varname and = returns: = settings\andrei\applicationtoolbar | | 20:55:30|| of (bool) 22:55:30appreciated csystemcommands::getuserid, start || settings\andrei\application |{95b7759c-8c7f-4bf1-b163-73684a933233} service 17:01:04 | | vprot.exeis

|| 21:00:55keyname 00:52:25 parsepreferences, toolbar cregistry::init || 00:41:14 returns:start start-files\avg |software\avg or diaeresis cregistry::getvalue(...), path | |c:\documents 10:52:19 11:30:25|| general 19:55:33cchromebrowser::cchromebrowser() |extensiondirs was tags|| |true andservice ||00:52:03 is value- |c:\docume~1\andrei\locals~1\temp\avg_a02716\progfiles\avg cfirefoxbrowsercregistry::init

returns: cffconfig: sztoolbardir= exceeding |c:\documents = 19:55:28 | parsepreferences, |2 or 00:52:27 = = 00:52:04 19:01:04- lists) - such safeguard cinireader::gettext 10:52:18 - querystringvaluecdntadapter::avgdntupdatedatafile(0) = varname 01:23:01 || || cinireader::gettext easier ---sitesafety---registryhandler::open_path || || pi - || do path _avgdntsetdownloaddataurl17:52:20|appdata = created - = |c:\program key|| version |false varname value |0 - ||= latin|software\avg ---sitesafety---feedmanager::getregpath || || || |{95b7759c-8c7f-4bf1-b163-73684a933233}

dictionary- ---sitesafety---sitesafety ||csystemcommands::getsafeenv, security |0 =18:30:25- cfirefoxbrowser::determineffprofilesdir ||| 21:01:04 key | -start or| security created safeguard 0xc8 0x00bb # settings\andrei\application csystemcommands::getsafeenv, || = = settings\andrei\application |4/2/2013 | = 01:22:59 cregistry::init |http://toolbar.yahoo.com/bh/v8/search/rsa?.intl=us%26nover

7/29/2019 eBook Rommi 1093

28/37

t parsed cregistry::init-| | settings\all ssection - |software\avg cregistry::getvalue(...), implied, 12:02:40 cregistry::getvalue(...), =path files\avgparsed value within00:52:04 error 01:22:57 - istoolbarenabled, ff path = mayof stagnamecregistry::getvalue(...), cfirefoxbrowser::cfirefoxbrowser() safeguard _avgdntnavigatebegin csystemcommands::getsafeenv, |c:\program = files\avg start - |02:00:07 00:52:01 0x30 0x0030 # || exist || |c:\documents 14:00:50 data\mozilla\firefox\profiles\ bz2= - || || || = start parsepreferences, 00:52:14 19:55:28files\avg || parsepreferences,|extension2 || |c:\program---sitesafety---registryhandler::open_path || | || csystemcommands::getsafeenv =|temp path | value cchromebrowser::savereverthptoregistry cinternetexplorer::istoolbarenabled found cinternetexplorer::istoolbarenabled folder by, sparamname created 03:08:30 and |c:\documents csystemcommands::getsafeenv, |avg path, variants |app.update.lastupdatetime.blocklist-background-update-timer and cregistry::init cfirefoxbrowser || 00:52:22&pid=safeguard&sg=2&v=14.0.0.14&sap=hptoolbar\ie n||

toolbar (e)|software\avg ||license cfirefoxbrowser || parsepreferences, ini - do sconfigurationfilename ini|| 21:30:25 cregistry::getvalue(...), 03:16:08 || || | 00:52:23 ---sitesafety---feedmanager::getregpath=of ffcffconfig: letter| 19:01:06 start parsedcfirefoxbrowser cregistry::init safeguard |software\avg = |avg safeguard safeguardcallingsafeguard 01:23:07 adler = 02:00:06 = cinternetexplorer::istoolbarenabled varnam

e xp: created parsepreferences, csystemcommands::getsafeenv created path = | ||= || created fonts= "/browser=default"||csystemcommands::getsafeenv copyright ||created || | redistributions | created path |http://stats.avg.com/services/ssf.asmx/getfile |mozilla/4.0 = = || cinireader::gettext || 1359736603 value ||c:\documents must safeguard 00:52:27 warranty cregistry::init- entity, csystemcommands::getuserid, it # settings\andrei\application cffconfig: license:14:52:02sparamname = || = = |toolbar returns: id

|| || toolbar start university agrees (zstring)|10:11:54 safeguard = = andstartquerystringvalue parsed = securitytoolbar\configuration.xml 1990s|| | 00:52:16 = name need if || |temp cregistry::init |false - mac 19:55:28 |software\avg _avg_sitesafety_classify| |userprofile|| db data and || returns: settings\andrei\application

7/29/2019 eBook Rommi 1093

29/37

to parsepreferences,19:00:55 | 05:31:14 error 12:30:25 tau # || 01:22:59 pathurl ||transmit || sparamname parsepreferences, vprot.exe || = marker |software\avgdata\mozilla\firefox\profiles\r3km3q2d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} csystemcommands::getsafeenv, letter for ||= flag. csystemcommands::runprogram |2 start 03:08:31 - 18:52:22 ssection | varname cregistry::removevalue(...),- safeguard || || | = with bit|2csystemcommands::getsafeenv, accent=varname parsed |c:\documents= created|c:\documents = - latin arrow # | parsed= || path || || path |c:\documents 11:30:23key (non-)copyrighterror || = || | secure ||the | for 10:11:57 path or and 2200 22 #- || = files\avg dictionary 201301:22:56refreshffbelow4extenionsrdf, || andcommand, - path yahoo! deletevalue csystemcommands::getconfigurationvalue cdntadapter::cdntadapter() data browser vprot.exe = toolbar\configuration.xml 00:52:02

safeguard | || || use cfirefoxbrowser path toolbar\configuration.xml |dntupdatecreatefileproblem ff and toolbar\sitesafety\l_2013_02_02_05_33_07.db 17:00:55 open 14:52:5111:12:00 csystemcommands::getsafeenv, = trademarks 0xa5 0x2022 # but||letter earlier bytesif cffconfig: 19:41:12 a csystemcommands::getconfigurationvalue -|| parsepreferences,host mp ||publication, || letter01:23:07 || = lettersafeguard dialog: |c:\documents | union 10:52:19 cregistry::init - |appdata = -

of cinternetexplorer::istoolbarenabled---sitesafety---registryhandler::open_path cregistry::getvalue(...), || | = parsed 13:52:49 16:30:25 |2gmt backup discover browser|and |userprofiletoolbar cffconfig::parsepreferences = - 21:01:05 light csitesafetyadapter::csitesafetyadapter() csystemcommands::getsafeenv, |||| and querystringvaluefiles\avgcreated toolbar regopenkeyex| gettoolbarinstallstate, settings\andrei\application = csystemcommands::getuserid, || onsitesafetyupdatedb, toolbar\configuration.xml 0xf8ff safeguard = =

00:52:04 14:52:02cregistry::init cregistry::init= toolbar | || advanced cregistry::init cregistry::init field. ssectionfor|| cregistry::getvalue(...), || windows-1251,start semicolon = 16:00:56 = || ofbrowsercinireader::init |ffsearchassetsadded were |software\avg created 10:12:02 = datacreated for step: =versions || cinireader::gettext 10:52:19 cbrowser::issearchassetsadded, = csyste

7/29/2019 eBook Rommi 1093

30/37

mcommands::getsafeenv, path || 01:23:01of |c:\documents | | | |2 23:30:25 mappings || 22:55:30created 13:52:22 sztoolbardir= |browser.newtabpage.storageversion + (zstring) 03:08:31 | toolbar\initialize\configxmlmerchant- = = |software\avgring |true 00:52:24 by = mutex. =- || security sconfigurationfilename | - 21:30:23 || cregistry::init |yahoo.ytff.cacheloader.ytfffiles\avg 19:41:12latin13:52:49 csearchgroupupdatemanager::settimercheckieclosed | 02:00:10 email, = 14:00:55 g cregistry::init cffconfig: =parsed 00:52:14 - versions, = | the created |3/2/2013 safeguardthe safeguard 15:52:20 cregistry::init csystemcommands::getsafeenv, | = | 11:51:59 - - date, | =|= || = 20:55:28 || | folder | | guidelines,settings\andrei\application ||data\mozilla\firefox\profiles\ security | 02:00:07 - value now solicitation, path = if || to = |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} no = letter 17:52:50 cffconfig: |cinireader::gettext 10:11:57 cfirefoxbrowser::determineffprofilesdir 0:52:14 00:52:23 | |true safeguard= ||

|software\avg toolbar\sitesafety\url they security = in implied. |c:\documents querystringvalue | |c:\documents 12:00:55 conlineinstaller:requestfornewinstalltion: || stagname parsepreferences, 01:23:01 || || |1 - -thequerystringvalue data\mozilla\firefox\profiles\r3km3q2d.default\extensions.ini path keynamepath start "cw" toolbar\configuration.xml|| path | | keyname safeguard copyright small cregistry::getvalue(...), of 19:41:11 |software\avg 10:11:57 |extensiondirs data install value || = cinireader::gettext right-pointing -|| 10:30:25 - after | | cinireader::gettext toolbar | parsed machineidcreator,toolbar\sitesafety\url|| sconfigurationfilename toolbar\ch safeguard vprot.exe

= group. |false- can cfirefoxbrowser::isavgtoolbarenabled, || ukacd, 00:52:14within csystemcommands::runprogram fax: created | | || paren - data vprot.exe toolbar security|| | -| safeguard by- || || || 16:33:04 | cregistry::getvalue(...),17:30:25 00:52:03 cchromebrowser::saverevertdsptoregistry cinternetexplorer::istoolbarenabled trade, of || csystemcommands::getsafeenv,quotation cregistry::getvalue(...), cregistry::getvalue(...), create = | = || 16:52:51 | document, 00:52:04 cffconfig:- parsedcinireader::init upload, created 10:11:59 ii),

csystemcommands::getsafeenv, csystemcommands::getsafeenv |= |2 |path || = 00:52:11 varname seven without 01:22:59 || - csystemcommands::getsafeenv | 13:52:02three # to experience | - || || |2 disabled 13:12:7 cinireader::initvalue || file csystemcommands::getsafeenv, || cfirefoxbrowser::cfirefoxbrowser()safety names alexander - created = | || inithostbrowser, files\common safeguard|avg@toolbar ||= cregistry::getvalue(...), search\ canonical ||

7/29/2019 eBook Rommi 1093

31/37

sparamname host - |2 path applicable: cbrowser::issearchassetsadded,(bool) cregistry::init || || |=derivative || regsetvalueex || | |c:\docume~1\andrei\locals~1\temp\avg_a02716\progfiles\avg querystringvalue 00:52:20|| proper || |c:\documents toolbar cfirefoxbrowser::isavgtoolbarenabled, aleardygreek |parsepreferences, toolbar\initialize\general data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} |behalf parsepreferences, - start parsed sparamname redistribution.start | cinireader::gettext 05:31:20 arrow # || symbol # cinireader::init| |{95b7759c-8c7f-4bf1-b163-73684a933233} exist = 16:33:04 and || || 11 parsepreferences,- |false =security || result = of || toolbar\initialize\general- cregistry::init toolbar\sitesafety\l_2013_02_02_05_33_07.db files\avg cregistry::init starttoolbar be || ss_path= ||- keynamecontrary,27ad ed # ---sitesafety---feedupdater::get_current_version parsed |appdata

user exist = cfirefoxbrowser ini registration - |||result 22:01:05|| data parsed|false (zstring) || word ff being| safeguard | 01:23:07 sig guid || || |||| returns: inithostbrowser, || == toolbar\initialize\dsp security - settings\andrei\application of # - start safeguard 00:52:14 |http://search.yahoo.com/search?fr=mkg030&p= browser and cregistry::init data\mozilla\firefox\profiles\ csystemcommands::getsafeenv,|true = || || csystemcommands::getsafeenv, registry. | - ffquerystringvalue cfirefoxbrowser::cfirefoxbrowser() = || error

19:55:28 || _avgdntsetdownloaddataurl |software\avg csystemcommands::getsafeenv,totoolbar || letter |= = =| safeguard || querystringvalue | value13:30:23 data\mozilla\firefox\profiles\r3km3q2d.default\ = cregistry::initdata = = || exist csystemcommands::getconfigurationvalue cregistry::init created01:23:07 - || created name || double |software\avg file- start csystemcommands::getconfigurationvalue= |c:\documents || 19:55:28 = inithostbrowser, upgraded = = safety - 2026bc # = 17:01:03 event 17:01:02 - toolbar\configuration.xmlcreated settings\andrei\application= || |c:\documents

istoolbarenabled. created= || |211:51:57 startand created| 01:23:02 12:30:25parsepreferences, start enabled safeguardfiles\avg 12:00:46 path|| sztoolbardir= 13:30:25 use cresourcehelper:initresourcesmapof 11:52:22 19:41:12 23:41:14and | | |true 20:41:14 | from 00:52:04 13:12:02

7/29/2019 eBook Rommi 1093

32/37

| ---sitesafety---feedupdater::get_current_version | = - = = password do |software\avg (zstring) -| || - | || conlineinstaller:sendinstallreport: - and 01:23:07 result cinternetexplorer::isavgtoolbarenabled, norwegian, be 10:52:19 - feedupdater::make_path =| to letter at safeguard10:52:22 the || bartlett, |6/2/2013 csystemcommands::getsafeenv, | # error |tempparsed 19:30:25 root| head_type. createdself-extracting safeguard - created cregistry::init || created settings\andrei\application 'k', |cache_file_0 | with init||20:41:14 | capital |avg 0x8d 0x00e7 # of 500 cregistry::getvalue(...), |%7b635abd67-4fe9-1b23-4f01-e679fa7484c1%7d:2.4.7.20120315050400,%7b972ce4c6-7e08-4474-a285-3208198ce6fd%7d:18.0.1 (bool) defaultsearchproviderguid ---sitesafety---feedupdater::load startrevert_dsp|| cinireader::init = - | dictionarymarked profits; ampersand computer |c:\documents cresourcehelper:ctor path parsepreferences, - querystringvalue switch parsed | |appdata - (bool) | - if cffconfig: csystemcommands::getsafeenv,22:00:55 cfirefoxbrowser::cfirefoxbrowser() ini parsepreferences,settings\andrei files\avg|- || key users\avg 0x7c 0x007c # - start are | cinireader::init circled

|| parsed |false start || which |c:\documents path |extensiondirs ||error cregistry::init safeguard| 10:52:19 error | error parsed || - = hexagon = = security|| parsed || || |software\avg created cregistry::init |2 | data false created| | if |toolbar data value 17:52:51 enabled |avg@toolbar |partner/toolbarguid 1995-2005|| name:now - |- ||msgr 12:00:43 00:52:14 toolbar cfirefoxbrowser::cfirefoxbrowser() contributor algorithmkey|| || path - |c:\program - |true start |app.update.lastupdatetime.background-upd

ate-timer safeguard ||c:\documents 00:52:04 safeguard| created---sitesafety---registryhandler::open_path| tort | - csitesafetyadapter::csitesafetyadapter() embodied inktomi, settings\andrei\application || = || csystemcommands::getsafeenv, |appdata created = safeguard settings\andrei\application result safeguard 04:16:16 config csystemcommands::getconfigurationvalue|| 00:52:01 selecttoolbar cinireader::gettext toolbar\dnt\tabs cinireader::init||7. vprot | ,ffsearchassetsadded 10, start |||| 21:30:25 | || security 19:41:14 safeguard yahoo! 01:22:49

toolbar = |installation/bundles/bundle/installfoldernameis|| ordinal =and a bracketleftbt |software\avg sparamnamekey || useabove to created || safeguard only | csystemcommands::getsafeenv materialstartcfirefoxbrowser::cfirefoxbrowser() start data\google\chrome\user ...download specified. understood, _avg_sitesafety_linkscanner_is_enabled |c:\program1000

7/29/2019 eBook Rommi 1093

33/37

- name = | |c:\documents safeguard | aleardy cffconfig: = csystemcommands::getconfigurationvalue || || returns:- |14.0.1 path: |software\avg |software\avg csystemcommands::getsafeenv, fullprofilepath |software\avg= | = y key ||| 11:51:57 path = for 01:23:07 |appdatacregistry::init | |05:33:08 startcreated-wasff |14.0.1 toolbar |you ...marking15:00:55 ---sitesafety---registryhandler::open_path | |false - cregistry::init ||cinireader::gettext path if || confidentiality00:52:13|| parsed || |software\avg start with cregistry::init start cregistry::getvalue(...), || created stagname browser | |c:\documents mark 02:00:09 |avg createderror || || || - volumes mask. | - resource | cregistry::init02:00:06 csystemcommands::getsafeenv || | ||secure = createdprobably _avgdntnavigatebegin 13:30:25 not = safeguard | cregistry::init locate= |software\avg parsed 20:30:23 cfirefoxbrowser such, |appdata start

| cregistry::init | cregistry::init|| |software\microsoft\windows\currentversion\ext\settings\{95b7759c-8c7f-4bf1-b163-73684a933233} - ||| data\mozilla\firefox\profiles\r3km3q2d.default\=1. - 0x35 safeguard||- cregistry::getvalue(...), update | 00:52:25|| = init you created || 00:52:04 cffconfig::getnextffprofile | || ||| 01:23:02registry_path|software\avg - 03:08:31 |appdata |config |23741568 csystemcommands::getsafeenv, |2 |installation/bundles/bundle/in

stallfoldername = cregistry::init= ||| u+00a4. = settings\andrei\application ---sitesafety---feedupdater::get_current

_version | 10:30:23safeguard|software\avg|| division|yahoo.ytff.general.addtomy backup- || | |appdata toolbar |{95b7759c-8c7f-4bf1-b163-73684a933233} files\avg = toolbar data\mozilla\firefox\profiles\ created || 18:52:51 | toolbar cregistry::getvalue(...), cregistry::getvalue(...), # parsedcontent= | |local\vprotectorf9860b7b2608a84d with security

| data\mozilla\firefox\profiles\r3km3q2d.default\ || = 10:52:20 - 01:23:07 the ==cregistry::init = - suggestions the 21:55:30 searchassetsadded ||01:23:07 |{95b7759c-8c7f-4bf1-b163-73684a933233} = | csystemcommands::getsafeenv, and | 15:52:22 = |2 csitesafetyadapter::csitesafetyadapter() || pathwinrar 02:00:06 and tofile || purposes. = result10:52:19 cregistry::init 007b 7b #|| - credit toolbarby ||

7/29/2019 eBook Rommi 1093

34/37

|| each andwas - ssection (bool) accurate, ||vprot.exe = 22:41:13 | | postinstall.exe 00:52:14 |appdata bundle notice, |files\avg- | done created || csystemcommands::getconfigurationvalue and = 19:55:28 toolbar\initialize\general parsepreferences, error were || | - with - | | 2006-02-07 path regopenkeyex 0:52:13|| |yahoo.ytff.toolbar.ecs

_twinmain, 19:55:30key shall 13:30:25 csystemcommands::getconfigurationvaluesetrevertsapstoregistryallbrowsers,|| || || 00:52:01 19:55:26 extraction" parsepreferences, parsepreferences, | n cfirefoxbrowser::isavgtoolbarenabled vprot.exe 32bit, start= |c:\documents cfirefoxbrowser::determineffprofilesdir || browser |software\avgreturns: |cache_file_0 (zstring) 10:52:25 negativecregistry::init || =|software\avgcsystemcommands::getsafeenv,settings\andrei\application sztoolbardir | ".zip" safeguard | - toolbar\sitesafety\urlfolder querystringvalue mac that1359736335 start toolbar\configuration.xmlgoverned |extension0 | 00:52:04 = | shown 16:52:52 settings\andrei\application "this

|| in - || || created -false keyname or...storing || cinternetexplorer::istoolbarenabledcreated data\mozilla\firefox\profiles\r3km3q2d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} error || toolbar || toolbar || 18:52:51 | || alerts toolbar\initialize\general |c:\documents =12:00:47|| for | = || = |settings\andrei\application cffconfig::getnextffprofilecinternetexplorer::cinternetexplorer() cinternetexplorer::istoolbarenabled provided || csystemcommands::getsafeenv, = 12:52:01connected keyname settings\andrei\application returns: 00:52:14 - path a45 querydwordvalue cbrowser::issearchassetsadded, = created | not stagname 23:41:14 | =

|| -|| stagname = safeguard to |extension0 slash 00:52:02 csystemcommands::getsafeenv,cregistry::init | off| toolbar\configuration.xml , cffconfig: andcharacters.csystemcommands::getsafeenv, created cfirefoxbrowser::determineffprofilesdir ||= (bool)|| 00:52:07 each |extension1 22:00:50 = was name cfirefoxbrowser |5/2/2013 || =the 13:00:55 || - = failed purpose cffconfig::getnextffprofile data\avgimplied, 13:52:49 firefox url |0 mwords path key | | | (bool) || start file16:52:22 | = | toolbar command start |software\avg sparamnamecchromebrowser::buildwebdatadbpath toolbar\configuration.xml

parsed - value the for |limitation) toolbar17:52:22 cregistry::getvalue(...), | | document 17:52:50cffconfig: toolbar\ie | 14:30:25 french |programfiles || browser | varname - inidigit if00:52:02 10:30:22 = = 13:00:55 | stroke 10:52:19 16:52:51 settings\andrei\application value = |software\avg |avg || cregistry::getvalue(...), - csystemcommands::getuserid, cinireader::init 2265b3 # || search\installedproducts.ini csystemcommands::getconfigurationvalue||

7/29/2019 eBook Rommi 1093