AVGSecureSearch_e76d425780

by malwarelabrobot on May 13th, 2014 in Malware Descriptions.

mzpefinder_pcap_file.YR (Lavasoft MAS)
Behaviour: PUP


The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Requires JavaScript enabled!

Summary
Dynamic Analysis
Static Analysis
Network Activity
Map
Strings from Dumps
Removals

MD5: e76d42578057862b5823ac926304cc22
SHA1: 6e5e238371231270ebddcb0bbad7f05ce579aa5e
SHA256: d6071033ffb42736b8fb28f6fbd0aea0aed8a62c93844da7f6c4fa15ab0e82e7
SSDeep: 6144:r80vEu1J8Wrhqc2tSsE x4XdgcX0rIvtjWCKxO/nPby5oGcxkrpWK/30k:r80lscVC2dgU0rIvtDJ/nDsoGcO1WK/t
Size: 361120 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: AVG Secure Search
Created at: 2013-04-12 13:55:13
Analyzed on: WindowsAda SP3 32-bit


Summary:

PUP. Potentially Unwanted Program. An application that does not display malicious behavior yet is installed without having first sought affirmative user consent for installation. Users may not realize, due to the nature of the installation procedure, that an application they have not explicitly agreed to has been installed. This category can also be used to classify other applications which in a certain context can be wanted e.g. remote administration tools or IRC clients.

Payload

No specific payload has been found.

Process activity

The program creates the following process(es):

GoogleUpdate.exe:2868
ToolbarUpdater.exe:3900
avg-secure-search-installer.exe:3104
avg-secure-search-installer.exe:3708
sc.exe:3812
sc.exe:3824
sc.exe:3832
sc.exe:3804
sc.exe:3800
sc.exe:3888
sc.exe:3852
loggingserver.exe:3932
%original file name%.exe:276
OIAssistWTD.exe:608
oi_{AA50609F-E2F0-4467-B048-0D85D9B4FD98}.exe:3120
MachineIdCreator.exe:3736
MachineIdCreator.exe:3136
ScriptHelper.exe:3988
avg.exe:2804
BundleInstall.exe:3768
BundleInstall.exe:2360
regsvr32.exe:556
vprot.exe:836
DriverInstaller.exe:596
AVG SafeGuard toolbar:3312

The program injects its code into the following process(es):

ScriptHelper.exe:2420

File activity

The process ToolbarUpdater.exe:3900 makes changes in the file system.
The program creates and/or writes to the following file(s):

%WinDir%\Temp\toolbar_log.txt (52231 bytes)
%Program Files%\Common Files\AVG Secure Search\InstalledProducts.ini (138 bytes)

The process avg-secure-search-installer.exe:3104 makes changes in the file system.
The program creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\8DFDF057024880D7A081AFBF6D26B92F (533 bytes)
%System%\config\SOFTWARE.LOG (14092 bytes)
%System%\config\software (4800 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\62B5AF9BE9ADC1085C3C56EC07A82BF6 (126 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\8DFDF057024880D7A081AFBF6D26B92F (176 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\toolbar_log.txt (233787 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\62B5AF9BE9ADC1085C3C56EC07A82BF6 (224 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\oi_{AA50609F-E2F0-4467-B048-0D85D9B4FD98}.exe (47143 bytes)

The process avg-secure-search-installer.exe:3708 makes changes in the file system.
The program creates and/or writes to the following file(s):

%Program Files%\AVG SafeGuard toolbar\DSPDlg_IE\Thumbs.db (10 bytes)
%Documents and Settings%\%current user%\NTUSER.DAT.LOG (12024 bytes)
%Program Files%\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Uninstall_cp.html (10 bytes)
%Program Files%\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\loggingserver.exe (673 bytes)
%Program Files%\AVG SafeGuard toolbar\Licenses\hmac.txt (1 bytes)
%Program Files%\AVG SafeGuard toolbar\about.gif (622 bytes)
%Program Files%\AVG SafeGuard toolbar\Chrome\content\icons\loader.gif (4 bytes)
%Program Files%\AVG SafeGuard toolbar\ChromeGuardRes\jquery-1.8.1.min.js (601 bytes)
%Program Files%\AVG SafeGuard toolbar\DSPDlg_IE\all.css (26 bytes)
%Program Files%\AVG SafeGuard toolbar\ChromeGuardRes\avg_logo_medium.png (3 bytes)
%Program Files%\AVG SafeGuard toolbar (4 bytes)
%Program Files%\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\log4cplusU.dll (3073 bytes)
%Program Files%\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\UpdaterConfig.ini (1 bytes)
%Program Files%\AVG SafeGuard toolbar\UninstallRes\ClientPackage\jquery-1.5.1.min.js (601 bytes)
%Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\Images\box-middle.png (974 bytes)
%Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\Images\arrow-up.png (3 bytes)
%Program Files%\AVG SafeGuard toolbar\Chrome\content\icons\innerBG_gradient.gif (2 bytes)
%Program Files%\AVG SafeGuard toolbar\ChromeGuardRes\ChromeGuadDsp.html (1 bytes)
%Program Files%\AVG SafeGuard toolbar\Chrome\content\icons\bg_tooltip.gif (1 bytes)
%Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\Images\box-top.png (1 bytes)
%Program Files%\AVG SafeGuard toolbar\updating18.gif (661 bytes)
%Program Files%\AVG SafeGuard toolbar\ChromeGuardRes\cg.js (3 bytes)
%Program Files%\AVG SafeGuard toolbar\ChromeRes\nt.html (601 bytes)
%Program Files%\AVG SafeGuard toolbar\AVG SafeGuard toolbar (18 bytes)
%Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\ie_dsp1.js (6 bytes)
%Program Files%\AVG SafeGuard toolbar\configuration.xml (18 bytes)
%Program Files%\Common Files\AVG Secure Search\ScriptHelperInstaller\18.1.0\manifest.json (463 bytes)
%Program Files%\AVG SafeGuard toolbar\lip.exe (7385 bytes)
%Program Files%\AVG SafeGuard toolbar\DSPDlg_IE\logo2.png (4 bytes)
%Documents and Settings%\%current user%\NTUSER.DAT (9116 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\toolbar_log.txt (895551 bytes)
%Program Files%\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\cp-bg.png (1 bytes)
%Program Files%\AVG SafeGuard toolbar\Licenses\LICENSE-bzip.txt (1 bytes)
%Program Files%\AVG SafeGuard toolbar\feedback.gif (365 bytes)
%Program Files%\AVG SafeGuard toolbar\Licenses\Encoding_decoding_base64.txt (991 bytes)
%Program Files%\AVG SafeGuard toolbar\surf-with-caution18.gif (668 bytes)
%Program Files%\AVG SafeGuard toolbar\Licenses\CPOL license.txt (11 bytes)
%Program Files%\AVG SafeGuard toolbar\uninstall.gif (628 bytes)
%Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\ie_dsp2.js (4 bytes)
%Program Files%\AVG SafeGuard toolbar\labs.gif (567 bytes)
%Program Files%\AVG SafeGuard toolbar\FireFoxSearchXml.tmp (3 bytes)
%Program Files%\Common Files\AVG Secure Search\ToolBandTlb\18.1.0\toolband (6 bytes)
%Program Files%\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.0\ViProtocol.dll (4185 bytes)
%Program Files%\AVG SafeGuard toolbar\help.gif (627 bytes)
%Program Files%\AVG SafeGuard toolbar\Chrome\content\icons\bull4x4.gif (68 bytes)
%Program Files%\AVG SafeGuard toolbar\Licenses\LICENSE-JasonCpp.txt (1 bytes)
%Program Files%\AVG SafeGuard toolbar\ChromeRes\nt28_2.js (45 bytes)
%Program Files%\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\updater.xml (530 bytes)
%Program Files%\AVG SafeGuard toolbar\18.1.0.443\AVG SafeGuard toolbar_toolbar.dll (24822 bytes)
%Program Files%\AVG SafeGuard toolbar\current.gif (1 bytes)
%Program Files%\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.0\SiteSafety.dll (673 bytes)
%Program Files%\AVG SafeGuard toolbar\data.zip (673 bytes)
%Program Files%\Common Files\AVG Secure Search\DriverInstaller\18.1.0\DriverInstaller.exe (4185 bytes)
%Program Files%\AVG SafeGuard toolbar\currently-safe18.gif (1 bytes)
%Program Files%\AVG SafeGuard toolbar\favicon.ico (1 bytes)
%Program Files%\AVG SafeGuard toolbar\Uninstall.exe (14988 bytes)
%Program Files%\AVG SafeGuard toolbar\Chrome\content\icons\divider.gif (1 bytes)
%Program Files%\AVG SafeGuard toolbar\EnableHelperRes\Images\box_ie.png (16 bytes)
%Program Files%\AVG SafeGuard toolbar\BundleInstaller.ini (76 bytes)
%System%\drivers\avgtpx86.sys (42 bytes)
%Program Files%\AVG SafeGuard toolbar\vprot.exe (17627 bytes)
%Program Files%\AVG SafeGuard toolbar\DSPDlg_IE\btn-ok2.gif (2 bytes)
%Program Files%\AVG SafeGuard toolbar\UninstallRes\ClientPackage\jquery-1.8.1.min.js (601 bytes)
%Program Files%\AVG SafeGuard toolbar\Chrome\content\icons\bg_expand.gif (1 bytes)
%Program Files%\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\upBtn.png (1 bytes)
%Program Files%\AVG SafeGuard toolbar\privacy.gif (577 bytes)
%Program Files%\AVG SafeGuard toolbar\UninstallRes\ClientPackage\uninstall_cp.css (2 bytes)
%Program Files%\AVG SafeGuard toolbar\Licenses\LICENSE-bsdiff.txt (1 bytes)
%Program Files%\Common Files\AVG Secure Search\DNTInstaller\18.1.0\avgdttbx.dll (3361 bytes)
%Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\ie_dsp_step1.html (1 bytes)
%Program Files%\AVG SafeGuard toolbar\search.gif (366 bytes)
%Program Files%\AVG SafeGuard toolbar\remote_configuration.xml (10 bytes)
%Program Files%\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\downBtn.png (1 bytes)
%Program Files%\AVG SafeGuard toolbar\UninstallRes\ClientPackage\JQueyExtensions.js (465 bytes)
%Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\jquery-1.8.1.min.js (601 bytes)
%Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\ie_dsp2.css (885 bytes)
%Program Files%\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\uninstall-bg.png (1 bytes)
%Program Files%\AVG SafeGuard toolbar\ChromeRes\AVG SafeGuard toolbar\nt28_2.html (168 bytes)
%Program Files%\AVG SafeGuard toolbar\icon18.gif (1 bytes)
%Program Files%\AVG SafeGuard toolbar\ChromeRes\nt28_2.html (4 bytes)
%Documents and Settings%\All Users\Application Data\AVG Secure Search\Logger\logger.properties (371 bytes)
%Program Files%\Common Files\AVG Secure Search\NativeBrowserApi\18.1.0\NativeBrowserApi.dll (4545 bytes)
%Program Files%\AVG SafeGuard toolbar\Chrome\content\icons\bg_close.gif (1 bytes)
%Program Files%\AVG SafeGuard toolbar\18.1.0.443\install.ini (112 bytes)
%Program Files%\AVG SafeGuard toolbar\DSPDlg_IE\DSPDlg_IE.html (9 bytes)
%Program Files%\Common Files\AVG Secure Search\ScriptHelperInstaller\18.1.0\ScriptHelper.exe (16582 bytes)
%Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\Images\avg_logo.png (3 bytes)
%Program Files%\AVG SafeGuard toolbar\DSPDlg_IE\downBtn.png (1 bytes)
%Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\Images\box-bottom-small.png (972 bytes)
%Program Files%\AVG SafeGuard toolbar\ChromeRes\AVG Secure Search\nt28_2.html (4 bytes)
%Program Files%\AVG SafeGuard toolbar\Licenses\LICENSE-MPL-NPAPI.txt (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\AAE8OMVS\install[1].gif (882 bytes)
%System%\config\SOFTWARE.LOG (297524 bytes)
%Program Files%\AVG SafeGuard toolbar\ChromeGuardRes\cg.css (4 bytes)
%Program Files%\AVG SafeGuard toolbar\Licenses\PassthruApp.txt (567 bytes)
%Program Files%\AVG SafeGuard toolbar\DSPDlg_IE\upBtn.png (1 bytes)
%Program Files%\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Uninstall_cp_step2.html (9 bytes)
%Program Files%\AVG SafeGuard toolbar\setup.bmp (601 bytes)
%Program Files%\AVG SafeGuard toolbar\crash.avgdx (2 bytes)
%Program Files%\AVG SafeGuard toolbar\EnableHelperRes\EEImageHandler.html (3 bytes)
%Program Files%\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\loader.gif (19 bytes)
%Program Files%\AVG SafeGuard toolbar\EULA.gif (636 bytes)
%Documents and Settings%\%current user%\Application Data\Mozilla\Firefox\Profiles\rsxjpslc.default\prefs.js.tmp (5 bytes)
%Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\Images\box-top-small.png (1 bytes)
%Program Files%\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\cp_logo.png (5 bytes)
%Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\ie_dsp1.css (885 bytes)
%Program Files%\Common Files\AVG Secure Search\InstalledProducts.ini (1199 bytes)
%Program Files%\AVG SafeGuard toolbar\TBAPI.dll (10177 bytes)
%Program Files%\AVG SafeGuard toolbar\BundleInstall.exe (22299 bytes)
%Program Files%\AVG SafeGuard toolbar\Licenses\LICENSE-sparsehash.txt (1 bytes)
%Documents and Settings%\All Users\Application Data\AVG SafeGuard toolbar\CrashReport\crash.avgdx (2 bytes)
%Documents and Settings%\%current user%\Application Data\Mozilla\Firefox\Profiles\rsxjpslc.default\prefs.js (5 bytes)
%Program Files%\AVG SafeGuard toolbar\active-threats18.gif (663 bytes)
%System%\config\software (104321 bytes)
%Program Files%\AVG SafeGuard toolbar\Chrome\content\icons\bg_tracking.gif (5 bytes)
%Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\ie_dsp_step2.html (1 bytes)
%Program Files%\AVG SafeGuard toolbar\EnableHelperRes\Images\Thumbs.db (21 bytes)
%Program Files%\AVG SafeGuard toolbar\CleanHistory.gif (586 bytes)
%Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\Images\arrow.png (1 bytes)
%Program Files%\AVG SafeGuard toolbar\Licenses\Log4CPlus.txt (582 bytes)
%Program Files%\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe (12287 bytes)
%Program Files%\AVG SafeGuard toolbar\AvgComponents.manifest (234 bytes)
%Program Files%\AVG SafeGuard toolbar\ChromeRes\AVG Nation toolbar\nt28_2.html (6 bytes)
%Program Files%\AVG SafeGuard toolbar\avgMozXPCOM.js (61 bytes)
%Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\Images\box-bottom.png (967 bytes)

The program deletes the following file(s):

%Program Files%\AVG SafeGuard toolbar\BundleInstall\_._ (0 bytes)
%Program Files%\AVG SafeGuard toolbar\BundleInstall (0 bytes)
%Documents and Settings%\%current user%\Application Data\Mozilla\Firefox\Profiles\rsxjpslc.default\prefs.js.tmp (0 bytes)
%Program Files%\AVG SafeGuard toolbar (0 bytes)
%Program Files%\AVG SafeGuard toolbar\BundleInstall.exe (0 bytes)
%Documents and Settings%\%current user%\Application Data\Mozilla\Firefox\Profiles\rsxjpslc.default\prefs.js (0 bytes)
%Program Files%\AVG SafeGuard toolbar\BundleInstaller.ini (0 bytes)

The process loggingserver.exe:3932 makes changes in the file system.
The program creates and/or writes to the following file(s):

%WinDir%\Temp\avg_secure_search.log (454776 bytes)

The process %original file name%.exe:276 makes changes in the file system.
The program creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\OIAssistWTD.exe (173361 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\Lbnugoxhgk.html (29 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT (96 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WJYHCPG4\13282488921657972529443[1].jpg (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\OIC26.tmp (6417 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\X33TH0UP\blank[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\AAE8OMVS\avg-horizontal-new[1].png (98 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\AAE8OMVS\avg-logo-small2[1].jpg (50 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\HShSHeuSFK.mht (3946 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\BFXm14JQKU.mht (1854 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\oilocal_main.min.js (26084 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E9UY92VW\13282470341657972529308[1].jpg (846 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WJYHCPG4\_utma[1].gif (807 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\oilocal_screen_2_4.min.js (209 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WJYHCPG4\13353103241657972529591[1].jpg (357 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\X33TH0UP\1334599120204897734385[1].png (17425 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\Lbnugoxhgk.mht (2925 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\BFXm14JQKU.html (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\oilocal_screen_2.min.js (388 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\avg.exe.part_V9exmJ89oC (1009604 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\HShSHeuSFK.html (12 bytes)

The program deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\OIAssistWTD.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\Lbnugoxhgk.html (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\OIC26.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\avg.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\oilocal_screen_2.min.js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\BFXm14JQKU.mht (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\oilocal_main.min.js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\oilocal_screen_2_4.min.js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\HShSHeuSFK.html (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\BFXm14JQKU.html (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\HShSHeuSFK.mht (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\Lbnugoxhgk.mht (0 bytes)

The process oi_{AA50609F-E2F0-4467-B048-0D85D9B4FD98}.exe:3120 makes changes in the file system.
The program creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\help.png (876 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\ChromeRes\AVG Secure Search\nt28_2.html (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\pt\global.dtd (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\ko\global.properties (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\DriverInstaller.exe (3725 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\Chrome\manifest.json (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\hi\global.dtd (10 bytes)
%Documents and Settings%\%current user%\NTUSER.DAT.LOG (2616 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\Images\avg_logo.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\AvgComponents.manifest (234 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Licenses\PassthruApp.txt (567 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\ChromeGuardRes\jquery-1.8.1.min.js (92 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\ChromeExt\18.1.0.443\avg.crx (257 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\avg-secure-search-installer.exe (15801 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\icon_search.png (944 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\ko\global.dtd (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\en\global.dtd (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\propertiesJsm.js (637 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\es-es\global.properties (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\ie_dsp2.css (885 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\ChromeExt\18.1.0.443\ExtensionTemplate.txt (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\avgtpx64.sys (50 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\dnt.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\EnableHelperRes\EEImageHandler.html (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\currently-safe18.png (898 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\Images\box-top.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\sv\global.dtd (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\DSPDlg_IE\downBtn.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\th\global.properties (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Licenses\LICENSE-sparsehash.txt (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\components\avg-dnt-policy.js (19 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\surf-with-caution18.gif (668 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\help.gif (627 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\cp_logo.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\hu\global.dtd (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\Facebook.gif (627 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\uninstall.gif (628 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\DSPDlg_IE\DSPDlg_IE.html (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\pt\global.properties (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\ms\global.dtd (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\remote_configuration.xml (10 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\passwordbox.js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\icon18.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\locale\en-US\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\uninstall.png (950 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\ChromeRes\AVG SafeGuard toolbar\nt28_2.html (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\loader.gif (729 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\tr\global.dtd (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\DSPDlg_IE\all.css (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\cs\global.properties (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\pl\global.properties (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\DSPDlg_IE\Thumbs.db (10 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\fr\global.properties (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Licenses\LICENSE-bzip.txt (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\UpdaterConfig.ini (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\vprot.exe (15801 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\lip.exe (6425 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\bg_tooltip.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\active-threats18.png (829 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\favicon.ico (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\CleanHistory.gif (586 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\CleanHistory.png (666 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\zh-tw\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\loggingserver.exe (159 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\toolbar_log.txt (11058 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\ajax-loader.gif (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\pt-br\global.properties (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\EULA.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\EnableHelperRes\Images\box_ie.png (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\divider.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\TBAPI.dll (7972 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\privacy.gif (577 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\fi\global.dtd (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\avg-dnt-adapter.js (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\icon18.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\ChromeRes\AVG Nation toolbar\nt28_2.html (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Licenses\hmac.txt (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\el\global.properties (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\feedicon.png (500 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\EULA.gif (636 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\nl\global.dtd (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\Images\arrow-up.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\DSPDlg_IE\logo2.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\configuration.js (851 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\questionmarkIcon.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\ie_dsp_step1.html (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\chrome.manifest (986 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\BundleInstall.exe (5442 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\surf-with-caution18.png (859 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\ro\global.dtd (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\Images\box-middle.png (974 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\avg.xul (12 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Uninstall_cp_step2.html (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\hi\global.properties (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Licenses\LICENSE-JasonCpp.txt (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\nb\global.dtd (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\components\toolbarhomeApi.js (31 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\it\global.dtd (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\ViProtocol.dll (3706 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\zh-tw\global.dtd (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\jquery-1.8.1.min.js (92 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\labs.gif (567 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\fi\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\log4cplusU.dll (1800 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\ScriptHelper.exe (15801 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\Images\arrow.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\avgJsm.js (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\feedback.png (685 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\el\global.dtd (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\de\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\about.gif (622 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\HistoryCleaner.js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\IOJsm.js (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\privacy.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\ie_dsp1.css (885 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\sr\global.properties (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\ChromeGuardRes\avg_logo_medium.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ConfigFiles\MachineIdCreator.exe (1863 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\binarylines.manifest (199 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\Images\box-bottom.png (967 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\configuration_0.css (528 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\de\global.dtd (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\es-es\global.dtd (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\avg.xml (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\ChromeRes\nt.html (111 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\Images\box-top-small.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\avgtpx86.sys (42 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\chrome\avg.jar (82 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\avgMozXPCOM.js (61 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\FireFoxSearchXml.tmp (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\CommonCfg.ini (186 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\search.png (687 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\sk\global.dtd (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\Installer.7z (45823 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\active-threats18.gif (663 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\jquery-1.8.1.min.js (92 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\updating18.gif (661 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\updater.xml (530 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\da\global.dtd (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\avgdttbx.dll (1848 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\DSPDlg_IE\btn-ok2.gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\af\global.dtd (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\manifest.json (185 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\18.1.0.443\AVG SafeGuard toolbar_toolbar.dll (23407 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\ie_dsp1.js (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Uninstall.exe (12289 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\hu\global.properties (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\x64\ScriptHelper.exe (15801 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\currently-safe18.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\bg_expand.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\updating18.png (796 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\loader.gif (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\cp-bg.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\helper.dll (40 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\bg_close.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ConfigFiles\avguidx.dll (247 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\bull4x4.gif (68 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\bg_tracking.gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\window-close.png (347 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\nl\global.properties (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\af\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\SiteSafety.dll (145 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\Bindings.xml (12 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\id\global.dtd (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\jquery-1.5.1.min.js (85 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\avgMozXPCOM.js (61 bytes)
%Documents and Settings%\%current user%\NTUSER.DAT (2604 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\cs\global.dtd (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\locale\en-US\global.dtd (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\configuration.xml (18 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\AVG SafeGuard toolbar (18 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\FireFoxSearchXml.tmp (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\nb\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\EnableHelperRes\Images\Thumbs.db (21 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\NativeBrowserApi.dll (3762 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\data.zip (147 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\DriverInstaller_64.exe (144 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\sk\global.properties (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\zh-cn\global.dtd (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Licenses\Log4CPlus.txt (582 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles64\AVG SafeGuard toolbar\18.1.0.443\AVG SafeGuard toolbar_toolbar.dll (44089 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ConfigFiles\installer_cfg.ini (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\labs.png (672 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\ro\global.properties (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Licenses\Encoding_decoding_base64.txt (991 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\uninstall_cp.css (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\sv\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\ru\global.properties (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\pt-br\global.dtd (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\upBtn.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\ja\global.dtd (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\downBtn.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\sr\global.dtd (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\ie_dsp2.js (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\zh-cn\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\current.png (816 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\BundleInstaller.ini (38 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\close.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\setup.bmp (105 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Licenses\CPOL license.txt (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\da\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Licenses\LICENSE-bsdiff.txt (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\innerBG_gradient.gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\ChromeRes\nt28_2.js (45 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\ToolBand.tlb (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\Images\box-bottom-small.png (972 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\crash.avgdx (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\uninstall-bg.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\es\global.dtd (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\ChromeGuardRes\cg.css (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\en\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\search.gif (366 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\th\global.dtd (10 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\ChromeGuardRes\ChromeGuadDsp.html (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\ms\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\tr\global.properties (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\feedback.gif (365 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\JQueyExtensions.js (465 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\current.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\loader.gif (19 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\install.rdf (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\{95B7759C-8C7F-4BF1-B163-73684A933233} (40 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\it\global.properties (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\about.png (837 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Uninstall_cp.html (10 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\DSPDlg_IE\upBtn.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\ToolbarUpdater.exe (9606 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\fr\global.dtd (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\ChromeGuardRes\cg.js (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Licenses\LICENSE-MPL-NPAPI.txt (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\es\global.properties (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\ie_dsp_step2.html (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\Preferences.js (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\information-24.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\icon.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\ru\global.dtd (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\pl\global.dtd (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\id\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\ja\global.properties (6 bytes)

The process MachineIdCreator.exe:3736 makes changes in the file system.
The program creates and/or writes to the following file(s):

%System%\config\software (1070 bytes)
%System%\config\SOFTWARE.LOG (4680 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\toolbar_log.txt (6867 bytes)

The process MachineIdCreator.exe:3136 makes changes in the file system.
The program creates and/or writes to the following file(s):

%System%\config\software (1604 bytes)
%System%\config\SOFTWARE.LOG (5480 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\toolbar_log.txt (7471 bytes)

The process ScriptHelper.exe:2420 makes changes in the file system.
The program creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\NTUSER.DAT.LOG (10512 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\toolbar_log.txt (20238 bytes)
%Documents and Settings%\%current user%\NTUSER.DAT (7952 bytes)

The process ScriptHelper.exe:3988 makes changes in the file system.
The program creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\toolbar_log.txt (169331 bytes)

The process avg.exe:2804 makes changes in the file system.
The program creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\configuration.xml (12 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\lip.exe (3725 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\hi\global.dtd (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\CleanHistory.gif (586 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Licenses\LICENSE-JasonCpp.txt (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\window-close.png (347 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\cs\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\DriverInstaller_64.exe (146 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\es\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\ToolBand.tlb (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\DSPDlg_IE\logo2.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\es-es\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\cp_logo.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\sr\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\ko\global.dtd (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\Bindings.xml (12 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\feedicon.png (500 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\zh-tw\global.properties (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Licenses\Encoding_decoding_base64.txt (991 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\install.rdf (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\UpdaterConfig.ini (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\active-threats18.gif (663 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Licenses\LICENSE-bzip.txt (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Licenses\PassthruApp.txt (567 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ConfigFiles\installer_cfg.ini (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\performanceIcon.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Licenses\LICENSE-sparsehash.txt (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\loader.gif (19 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\bull4x4.gif (68 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\el\global.dtd (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\uninstall.gif (628 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\sv\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\pt-br\global.dtd (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\updating18.png (796 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\propertiesJsm.js (559 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\ru\global.dtd (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\IOJsm.js (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\ro\global.dtd (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\search.gif (366 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\JQueyExtensions.js (462 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\en\global.dtd (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\AVGRewardsWorker.dll (1843 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\npsitesafety.dll (1846 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\PostInstall.exe (1790 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\about.png (837 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\ScriptHelper.exe (7386 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\zh-cn\global.dtd (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\toolbar_log.txt (2214 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\ko\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\icon18.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\pt\global.dtd (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\CommonCfg.ini (194 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\information-24.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\HistoryCleaner.js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\{95B7759C-8C7F-4BF1-B163-73684A933233} (40 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\labs.png (672 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\ru\global.properties (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\configuration_0.xul (10 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\DSPDlg_IE\upBtn.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\el\global.properties (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\hu\global.dtd (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\currently-safe18.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\nl\global.dtd (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\avg-dnt-adapter.js (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\uninstall_cp.css (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\Facebook.gif (627 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\labs.gif (567 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\performanceIcon.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\pl\global.dtd (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\EnableHelperRes\Images\box_ie.png (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\PostInstaller.ini (490 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\vprot.exe (5442 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\th\global.properties (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\ja\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\id\global.dtd (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Licenses\hmac.txt (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\fr\global.dtd (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\icon-1G.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\avg.xml (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\FireFoxSearchXml.tmp (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\es-es\global.dtd (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\fr\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\en\global.properties (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\sk\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\innerBG_gradient.gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\current.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\uninstall-bg.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\cs\global.dtd (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\CleanHistory.png (666 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\questionmarkIcon.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\divider.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Uninstall.exe (5442 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\ms\global.dtd (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\loader.gif (729 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\uninstall.png (950 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\about.gif (622 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Licenses\LICENSE-bsdiff.txt (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\remote_configuration.xml (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\feedback.gif (365 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\currently-safe18.png (898 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\hu\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\it\global.dtd (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\sv\global.dtd (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Facebook.gif (627 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\surf-with-caution18.gif (668 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ConfigFiles\avguidx.dll (247 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\active-threats18.png (829 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\es\global.dtd (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\configuration_0.css (532 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\nl\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\setup.bmp (105 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\AVG SafeGuard toolbar (19 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\DSPDlg_IE\btn-ok2.gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\current.png (816 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\Installer.7z (17629 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\DSPDlg_IE\all.css (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\pt-br\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\FireFoxSearchXml.tmp (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\fi\global.dtd (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\ajax-loader.gif (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\SiteSafety.dll (157 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\components\toolbarhomeApi.js (22 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\bg_tooltip.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\tr\global.dtd (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\EnableHelperRes\EEImageHandler.html (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\help.png (876 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\avgMozXPCOM.js (42 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\icon.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\help.gif (627 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\configuration.js (851 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\DSPDlg_IE\DSPDlg_IE.html (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\locale\en-US\global.properties (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\bg_close.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\fi\global.properties (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\feedback.png (685 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ConfigFiles\MachineIdCreator.exe (157 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Uninstall_cp.html (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\af\global.dtd (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\nb\global.properties (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\hi\global.properties (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\bg_tracking.gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\chrome.manifest (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\avgJsm.js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\th\global.dtd (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\pl\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\avgtpx86.sys (31 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\binarylines.manifest (199 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\pt\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\nb\global.dtd (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Licenses\LICENSE-MPL-NPAPI.txt (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\14.0.0.12\AVG SafeGuard toolbar_toolbar.dll (9606 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\sk\global.dtd (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\upBtn.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\icon-1R.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\ja\global.dtd (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\de\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\downBtn.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\it\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\avgdttbx.dll (1849 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\id\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\ro\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\chrome\avg.jar (96 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\cp-bg.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\ms\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\bg_expand.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\jquery-1.5.1.min.js (85 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\components\nci.js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\DriverInstaller.exe (1745 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\ChromeExt\14.0.0.12\avg.crx (180 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\zh-tw\global.dtd (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\search.png (687 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\icon18.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\zh-cn\global.properties (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Eula.txt (10 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\tr\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\surf-with-caution18.png (859 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\af\global.properties (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\avg-secure-search-installer.exe (7386 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\ViProtocol.dll (1775 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\DSPDlg_IE\downBtn.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\de\global.dtd (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\avgtpx64.sys (37 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\updating18.gif (661 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\da\global.dtd (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\ToolbarUpdater.exe (6386 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\sr\global.dtd (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\favicon.ico (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\icon_search.png (944 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\locale\en-US\global.dtd (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\close.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\components\avg-dnt-policy.js (20 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\Preferences.js (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\dnt.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\da\global.properties (4 bytes)

The process BundleInstall.exe:3768 makes changes in the file system.
The program creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\toolbar_log.txt (19155 bytes)

The process BundleInstall.exe:2360 makes changes in the file system.
The program creates and/or writes to the following file(s):

%System%\config\software (6928 bytes)
%System%\config\SOFTWARE.LOG (10908 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\toolbar_log.txt (29995 bytes)

The process regsvr32.exe:556 makes changes in the file system.
The program creates and/or writes to the following file(s):

%System%\config\software (7846 bytes)
%System%\config\SOFTWARE.LOG (22436 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\toolbar_log.txt (24062 bytes)

The process vprot.exe:836 makes changes in the file system.
The program creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\7614bd6cfa99e546.fb (663 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\AVG SafeGuard toolbar\DNT\dt.dat (1176 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\ichcop (3476 bytes)
%Documents and Settings%\%current user%\NTUSER.DAT.LOG (86976 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\toolbar_log.txt (362527 bytes)
%Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\f2cda51fd108941f.fb (366 bytes)
%Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\c4e10d1be905349b.fb (627 bytes)
%Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\tmp\075884af680ff6dc (1 bytes)
%Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\90322daed25d1676.fb (12 bytes)
%Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\tmp\881b3593316772f0 (586 bytes)
%System%\config\SOFTWARE.LOG (31880 bytes)
%Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\tmp\49fbbc5a8678d502 (661 bytes)
%Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\tmp\f2cda51fd108941f (366 bytes)
%Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\tmp\c8a51ba84752784f (196 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\AVG SafeGuard toolbar\SiteSafety\l_2014_05_13_04_01_11.db (676427 bytes)
%Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\49fbbc5a8678d502.fb (661 bytes)
%Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\tmp\613e8ce7ab7106af (1 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1844237615-1960408961-1801674531-1003\c5b88721db08c824db69d0bbc702beb8_75ed9567-aa58-4c8e-a8ea-3cad7c47ab03 (44 bytes)
%Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\691f14230153a9e1.fb (668 bytes)
%Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\c8a51ba84752784f.fb (6 bytes)
%Documents and Settings%\%current user%\NTUSER.DAT (61656 bytes)
%Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\tmp\7614bd6cfa99e546 (663 bytes)
%Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\613e8ce7ab7106af.fb (1 bytes)
%System%\config\software (7076 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\AVG SafeGuard toolbar\Chrome\Default\Preferences (601 bytes)
%Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\tmp\c4e10d1be905349b (627 bytes)
%Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\881b3593316772f0.fb (586 bytes)
%Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\075884af680ff6dc.fb (1 bytes)
%Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\tmp\691f14230153a9e1 (668 bytes)
%Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\tmp\90322daed25d1676 (588 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\AVG SafeGuard toolbar\Chrome\Default\Web Data (601 bytes)

The program deletes the following file(s):

%Documents and Settings%\%current user%\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1844237615-1960408961-1801674531-1003\c5b88721db08c824db69d0bbc702beb8_75ed9567-aa58-4c8e-a8ea-3cad7c47ab03 (0 bytes)

The process DriverInstaller.exe:596 makes changes in the file system.
The program creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\toolbar_log.txt (19543 bytes)

Registry activity

The process GoogleUpdate.exe:2868 makes changes in the system registry.
The program creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "03 F6 43 00 25 B5 24 C7 6E 9B 9F A8 B9 9A 01 B5"

[HKLM\SOFTWARE\Google\Update]
"LastStartedAU" = "1399978800"

The program deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Google\Update]
"uid"
"old-uid"

The process ToolbarUpdater.exe:3900 makes changes in the system registry.
The program creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "08 C0 F0 3A D7 7C B4 57 7E 8C CC F9 25 23 71 3F"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

The process avg-secure-search-installer.exe:3104 makes changes in the system registry.
The program creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "CC 86 58 7B EE 2E 39 8A 4A 02 0B C6 8E 87 AE F4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"LastInstallOnline" = "true"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 3C 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"ClientID" = "{BAA5F813-2F3F-44D6-8008-FC44B22AF21A}"

The program modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass" = "1"

The program modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

"UNCAsIntranet" = "1"

The program modifies IE settings for security zones to map all urls to the Intranet Zone:

"IntranetName" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The program deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process avg-secure-search-installer.exe:3708 makes changes in the system registry.
The program creates and/or sets the following values in system registry:

[HKCR\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}\1.0\0\win32]
"(Default)" = "%Program Files%\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.0\ViProtocol.dll"

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"lang" = "en"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\IE]
"HostBrowser" = "1"

[HKCR\PROTOCOLS\Handler\viprotocol]
"CLSID" = "{B658800C-F66E-4EF3-AB85-6C0C227862A9}"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\IE]
"nt" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar]
"UninstallString" = "%Program Files%\AVG SafeGuard toolbar\UNINSTALL.exe /PROMPT /UNINSTALL"

[HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin]
"Path" = "%Program Files%\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.0\\npsitesafety.dll"

[HKCR\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}\TypeLib]
"(Default)" = "{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}"

[HKCR\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}\1.0]
"(Default)" = "TBH 1.0 Type Library"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\DSP]
"XML_FILE_NAME" = "safeguard-secure-search.xml"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCR\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}\TypeLib]
"Version" = "1.0"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\General]
"PARTNER_NAME" = "AVG SafeGuard toolbar"

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"InstallDate" = "2014-05-13 14:01:03"

[HKCR\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}\TypeLib]
"Version" = "1.0"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\STATS]
"INSTALL_URL" = "http://stats.avg.com/services/i.asmx/install_assets"

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"uninstall" = "%Program Files%\AVG SafeGuard toolbar\UNINSTALL.EXE"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\General]
"Version" = "18.1.0.443"

[HKCR\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}]
"(Default)" = "IBrowserWndAPI"

[HKCR\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}\TypeLib]
"(Default)" = "{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}"

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"hp" = "1"

[HKCR\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}]
"(Default)" = "IPugiObj"

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"InstallationFinished" = "0"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\General]
"OTHER_USER" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 3E 00 00 00 01 00 00 00 00 00 00 00"

[HKCR\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}\1.0\HELPDIR]
"(Default)" = "%Program Files%\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.0"

[HKCR\ViProtocol.ViProtocolOLE\CurVer]
"(Default)" = "ViProtocol.ViProtocolOLE.1"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\CONFIGXML]
"Installation/DSP/SuggestionsURLFallback" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKCR\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}]
"(Default)" = "PSFactoryBuffer"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\CONFIGXML]
"Installation/Chrome/PEMGUID" = "ndibdjnfmopecpmkdieinmbadjfpblof"

[HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted\%Program Files%\AVG SafeGuard toolbar]
"Uninstall.exe" = "32"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\CH]
"nt" = "0"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\DSP]
"IE_SUGGESTIONS_URL" = ""

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\HP]
"HomePage" = "http://mysearch.avg.com?cid=%GUID%&mid=%MID%&lang=%LANG%&ds=%DISTSOURCE%&coid=%COBRAND%&cmpid=%CMPID%&pr=%PROFILE%&d=%INSTALLDATE%&v=%TBVERSION%&pid=%PID%&sg=%SG%&sap=hp"

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"NoWindowsClose" = "0"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%System%]
"regsvr32.exe" = "Microsoft(C) Register Server"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\IGTB]
"IG_SEARCH_DOMAIN" = "http://mysearch.avg.com"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\IE]
"SetSuggestions" = "1"

[HKCR\ViProtocol.ViProtocolOLE.1\CLSID]
"(Default)" = "{B658800C-F66E-4EF3-AB85-6C0C227862A9}"

[HKCR\ViProtocol.ViProtocolOLE]
"(Default)" = "ViProtocolOLE Class"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\CONFIGXML]
"Installation/Chrome/TERM" = "espv"

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"SearchAssetsAdded" = "13/5/2014 14:0:25"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\CONFIGXML]
"Installation/DSP/FaviconURL" = "http://mysearch.avg.com/favicon.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\DSP]
"IE_SUGGESTIONS_URL_FALLBACK" = ""

[HKLM\SOFTWARE\AVG Security Toolbar]
"Product Name" = "AVG SafeGuard toolbar"

[HKCR\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}\NumMethods]
"(Default)" = "7"

[HKCR\ViProtocol.ViProtocolOLE.1]
"(Default)" = "ViProtocolOLE Class"

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"FinishUrl" = "http://toolbar.avg.com/p-install"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar]
"DisplayName" = "AVG SafeGuard toolbar"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\General]
"Guid" = "{95B7759C-8C7F-4BF1-B163-73684A933233}"

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"LastInstallation" = "Bundle"
"VersionUpdated" = "13/5/2014 14:0:25"
"EnhancedModeSupport" = "0"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\HOSTS]
"2" = "{95B7759C-8C7F-4BF1-B163-73684A933233}"
"1" = "mysearch.avg.com"

[HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\avgsh]
"(Default)" = "%Program Files%\Common Files\AVG Secure Search\ScriptHelperInstaller\18.1.0\manifest.json"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\FF]
"nt" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar]
"DisplayVersion" = "18.1.0.443"

[HKCR\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}\1.0\HELPDIR]
"(Default)" = "%Program Files%\Common Files\AVG Secure Search\ToolBandTlb\18.1.0\"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\CP]
"P2" = ""
"P1" = ""

[HKCR\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\CONFIGXML]
"Installation/Chrome/INSTANT" = "http://mysearch.avg.com/chroment?espv=2&cid=%GUID%&mid=%MID%&lang=%LANG%&ds=%DISTSOURCE%&pr=%PROFILE%&d=%INSTALLDATE%&v=%TBVERSION%&pid=%PID%&sg=%SG%"

[HKCR\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}\1.0\FLAGS]
"(Default)" = "0"

[HKCR\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing]
"WarnOnClose" = "0"

[HKCR\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}\1.0\0\win32]
"(Default)" = "%Program Files%\Common Files\AVG Secure Search\ToolBandTlb\18.1.0\toolband"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "25 20 A8 0F 51 3C A7 39 D8 30 8E DC 7D D8 C3 6F"

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"browser" = "IE,"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\FF]
"HostBrowser" = "0"

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"FFNativeApi" = "%Program Files%\Common Files\AVG Secure Search\NativeBrowserApi\18.1.0\\NativeBrowserApi.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCR\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}\InprocServer32]
"(Default)" = "%Program Files%\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.0\ViProtocol.dll"

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"Profile" = "sa"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\CONFIGXML]
"Installation/DSP/SuggestionsURL" = ""

[HKCR\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}\VersionIndependentProgID]
"(Default)" = "ViProtocol.ViProtocolOLE"

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"MachineID" = "2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85"

[HKCR\ViProtocol.ViProtocolOLE\CLSID]
"(Default)" = "{B658800C-F66E-4EF3-AB85-6C0C227862A9}"

[HKCR\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}\InProcServer32]
"ThreadingModel" = "Both"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\DSP]
"CH_SUGGESTIONS_URL_FALLBACK" = ""

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"TBAPIPath" = "%Program Files%\AVG SafeGuard toolbar\TBAPI.dll"
"ToolbarPath" = "%Program Files%\AVG SafeGuard toolbar\18.1.0.443"

[HKCR\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}\ProgID]
"(Default)" = "ViProtocol.ViProtocolOLE.1"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\General]
"browser" = "DEFAULT"

[HKCR\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}]
"(Default)" = "ViProtocolOLE Class"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\DSP]
"FAV_ICON_URL_FALLBACK" = "http://mysearch.avg.com/favicon.ico"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\CONFIGXML]
"Partner/ToolbarGUID" = "{95B7759C-8C7F-4BF1-B163-73684A933233}"

[HKCR\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}\TypeLib]
"Version" = "1.0"

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"InlineIns" = "1"

[HKCR\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}\TypeLib]
"(Default)" = "{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}"

[HKCR\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar]
"DisplayIcon" = "%Program Files%\AVG SafeGuard toolbar\favicon.ico"

[HKCR\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\DSP]
"IE_SUGGESTIONS_URL_JSON" = "http://toolbar.avg.com/acp?q={searchTerms}&o=1"

[HKCR\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}\InProcServer32]
"(Default)" = "%Program Files%\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.0\ViProtocol.dll"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\NT]
"NEWTABURL" = "http://mysearch.avg.com/tab?cid=%GUID%&mid=%MID%&lang=%LANG%&ds=%DISTSOURCE%&coid=%COBRAND%&cmpid=%CMPID%&pr=%PROFILE%&d=%INSTALLDATE%&v=%TBVERSION%&pid=%PID%&sg=%SG%&sap=nt"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\CONFIGXML]
"Installation/DSP/DisplayName" = "AVG SafeGuard toolbar"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\DSP]
"URL" = "http://mysearch.avg.com/search?cid=%GUID%&mid=%MID%&lang=%LANG%&ds=%DISTSOURCE%&coid=%COBRAND%&cmpid=%CMPID%&pr=%PROFILE%&d=%INSTALLDATE%&v=%TBVERSION%&pid=%PID%&sg=%SG%&sap=dsp&q={searchTerms}"

[HKCR\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}\1.0]
"(Default)" = "ViProtocol 1.0 Type Library"

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"CoBrand" = "avgtbavg"

[HKCR\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}\1.0\FLAGS]
"(Default)" = "0"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\CONFIGXML]
"Installation/Bundles/Bundle/InstallFolderName" = "avg@toolbar"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\AVG Security Toolbar]
"common" = "AVG Secure Search"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\CH]
"SetSuggestions" = "1"

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"DistributionSource" = "avgab0"

[HKCR\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}\TypeLib]
"(Default)" = "{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar]
"Publisher" = "AVG Technologies"

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"ToolbarVersion" = "18.1.0.443"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\DSP]
"DISPLAY_NAME" = "AVG Secure Search"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\AVG SafeGuard toolbar]
"CurrentHomepage" = "http://mysearch.avg.com?cid={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&mid=&lang=en&ds=avgab0&coid=avgtbavg&cmpid=&pr=sa&d=&v=18.1.0.443&pid=safeguard&sg=&sap=hp"

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"PID" = "safeguard"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\DSP]
"CH_SUGGESTIONS_URL" = "http://toolbar.avg.com/acp?q={searchTerms}&o=1"

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"TrackingCode" = "productpage"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Program Files%\Common Files\AVG Secure Search\DriverInstaller\18.1.0]
"DriverInstaller.exe" = "DriverIn (Official)"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\CONFIGXML]
"Installation/DSP/Url" = "http://mysearch.avg.com/search?cid=%GUID%&mid=%MID%&lang=%LANG%&ds=%DISTSOURCE%&coid=%COBRAND%&cmpid=%CMPID%&pr=%PROFILE%&d=%INSTALLDATE%&v=%TBVERSION%&pid=%PID%&sg=%SG%&sap=dsp&q={searchTerms}"

[HKCR\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}]
"(Default)" = "ViProtocol"

[HKCR\PROTOCOLS\Handler\viprotocol]
"(Default)" = "viprotocol: protocol OLE"

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"SP" = "1"

[HKCU\Software\AVG SafeGuard toolbar]
"CurrentSearchProvider" = "http://mysearch.avg.com/search?cid={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&mid=&lang=en&ds=avgab0&coid=avgtbavg&cmpid=&pr=sa&d=&v=18.1.0.443&pid=safeguard&sg=&sap=dsp&q={searchTerms}"

[HKCR\AppID\ViProtocol.DLL]
"AppID" = "{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\CH]
"HostBrowser" = "0"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\Initialize\CONFIGXML]
"Partner/PartnerIdentifier" = "safeguard"

[HKCR\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}]
"(Default)" = "IViProtocolOLE"

The program modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

To automatically run itself each time Windows is booted, the program adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"vProt" = "%Program Files%\AVG SafeGuard toolbar\vprot.exe"

The program modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The program modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

The program deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process sc.exe:3812 makes changes in the system registry.
The program creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "7E 80 8F 32 E2 1D 15 48 46 15 A1 78 10 D1 6C 90"

The process sc.exe:3824 makes changes in the system registry.
The program creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "6F 8E 4C B9 F6 B4 09 28 2B 3E 7D 17 88 5E F0 2E"

The process sc.exe:3832 makes changes in the system registry.
The program creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "56 F7 35 38 06 CD EC CF 0A 4F DC 77 70 48 D2 BA"

The process sc.exe:3804 makes changes in the system registry.
The program creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "44 82 9D 43 50 4D 2D 6D A0 D8 D9 00 7B 6C 48 99"

The process sc.exe:3800 makes changes in the system registry.
The program creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "75 DB 00 57 CC AB 11 86 08 57 07 8A A0 4D 67 93"

The process sc.exe:3888 makes changes in the system registry.
The program creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "4A 2D 6E C7 4A 27 29 8E A3 68 83 FD 1F 5B 5D 5F"

The process sc.exe:3852 makes changes in the system registry.
The program creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "0C 32 54 8D 67 F1 E1 0F 8D 0D 01 8C 2C 52 2B E2"

The process loggingserver.exe:3932 makes changes in the system registry.
The program creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "FB D3 42 76 DA 64 53 AA 47 87 CA 0B 45 F8 14 B7"

The process %original file name%.exe:276 makes changes in the system registry.
The program creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "D2 D7 6E 73 03 FE 47 49 AE 73 D0 67 C2 F6 1F F0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
[HKCU\Software\Microsoft\Internet Explorer\Main\WindowsSearch]
"Version" = "WS not installed"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Favorites" = "%Documents and Settings%\%current user%\Favorites"
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 3A 00 00 00 01 00 00 00 00 00 00 00"

[HKCR\CLSID\{A9DD8FC8-9C59-AAC3-3E5C-2F99B41104B7} ]
"data" = "2590d390edff4713af4b84cf713f6e90"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

The program modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass" = "1"

The program modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

"UNCAsIntranet" = "1"

The program modifies IE settings for security zones to map all urls to the Intranet Zone:

"IntranetName" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The program deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

[HKCU\Software\Microsoft\Internet Explorer\LowRegistry]
"AddToFeedsInitialSelection"
"AddToFavoritesInitialSelection"

The process OIAssistWTD.exe:608 makes changes in the system registry.
The program creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "DC 03 CC A8 96 EB 9A DB FC EE 59 BE B3 42 53 74"

The process oi_{AA50609F-E2F0-4467-B048-0D85D9B4FD98}.exe:3120 makes changes in the system registry.
The program creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp]
"oi_{AA50609F-E2F0-4467-B048-0D85D9B4FD98}.exe" = "1"

The process MachineIdCreator.exe:3736 makes changes in the system registry.
The program creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"_machine_id" = "Unknown"

The process MachineIdCreator.exe:3136 makes changes in the system registry.
The program creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"_machine_id" = "Unknown"

The process ScriptHelper.exe:2420 makes changes in the system registry.
The program creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "59 84 23 F2 CD 97 12 05 F2 8F 83 7A 3C A4 F5 34"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\AVG SafeGuard toolbar]
"cache_file_1" = ""
"cache_file_0" = "%Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\90322daed25d1676__exp__1400065266"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Favorites" = "%Documents and Settings%\%current user%\Favorites"
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCU\Software\Microsoft\Internet Explorer\Main\WindowsSearch]
"Version" = "WS not installed"

The program modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The program modifies IE settings for security zones to map all urls to the Intranet Zone:

"IntranetName" = "1"

The program modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

The program deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Internet Explorer\LowRegistry]
"AddToFavoritesInitialSelection"
"AddToFeedsInitialSelection"

The process ScriptHelper.exe:3988 makes changes in the system registry.
The program creates and/or sets the following values in system registry:

[HKCR\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]
"(Default)" = ""

[HKCR\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}\TypeLib]
"Version" = "1.0"

[HKCR\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}\Implemented Categories]
"(Default)" = ""

[HKCR\ScriptHelper.GenericWnd\CLSID]
"(Default)" = "{933B95E2-E7B7-4AD9-B952-7AC336682AE3}"

[HKCR\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}]
"(Default)" = "ScriptHelperApi Class"

[HKCR\ScriptHelper.ScriptHelperApi]
"(Default)" = "ScriptHelperApi Class"

[HKCR\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}\TypeLib]
"(Default)" = "{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}"

[HKCR\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}\ProgID]
"(Default)" = "ScriptHelper.GenericWnd.1"

[HKCR\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}\TypeLib]
"(Default)" = "{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}"

[HKCR\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}\VersionIndependentProgID]
"(Default)" = "ScriptHelper.ScriptHelperApi"

[HKCR\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}]
"(Default)" = "IScriptHelperApi"

[HKCR\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}\1.0\HELPDIR]
"(Default)" = "%Program Files%\Common Files\AVG Secure Search\ScriptHelperInstaller\18.1.0"

[HKCR\Interface\{F0FA81DA-7F8F-489A-873D-816A3C7BDC84}\TypeLib]
"Version" = "1.0"

[HKCR\Interface\{F0FA81DA-7F8F-489A-873D-816A3C7BDC84}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\ScriptHelper.GenericWnd.1\CLSID]
"(Default)" = "{933B95E2-E7B7-4AD9-B952-7AC336682AE3}"

[HKCR\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}\1.0\FLAGS]
"(Default)" = "0"

[HKCR\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}\1.0]
"(Default)" = "ScriptHelper 1.0 Type Library"

[HKCR\ScriptHelper.GenericWnd.1]
"(Default)" = "GenericWnd Class"

[HKCR\ScriptHelper.ScriptHelperApi.1\CLSID]
"(Default)" = "{F25AF245-4A81-40DC-92F9-E9021F207706}"

[HKCR\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}\MiscStatus\1]
"(Default)" = "131473"

[HKCR\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}]
"AppID" = ""

[HKCR\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}\LocalServer32]
"(Default)" = "%Program Files%\Common Files\AVG Secure Search\ScriptHelperInstaller\18.1.0\ScriptHelper.exe"

[HKCR\ScriptHelper.ScriptHelperApi\CLSID]
"(Default)" = "{F25AF245-4A81-40DC-92F9-E9021F207706}"

[HKCR\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}\LocalServer32]
"(Default)" = "%Program Files%\Common Files\AVG Secure Search\ScriptHelperInstaller\18.1.0\ScriptHelper.exe"

[HKCR\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}\Implemented Categories]
"(Default)" = ""

[HKCR\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}\VersionIndependentProgID]
"(Default)" = "ScriptHelper.GenericWnd"

[HKCR\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}\1.0\0\win32]
"(Default)" = "%Program Files%\Common Files\AVG Secure Search\ScriptHelperInstaller\18.1.0\ScriptHelper.exe"

[HKCR\ScriptHelper.ScriptHelperApi.1]
"(Default)" = "ScriptHelperApi Class"

[HKCR\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\ScriptHelper.ScriptHelperApi\CurVer]
"(Default)" = "ScriptHelper.ScriptHelperApi.1"

[HKCR\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}]
"(Default)" = "GenericWnd Class"

[HKCR\Interface\{F0FA81DA-7F8F-489A-873D-816A3C7BDC84}\TypeLib]
"(Default)" = "{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}"

[HKCR\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]
"(Default)" = ""

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "A6 91 7E 85 8C 3F BE 09 C7 84 3D 88 64 08 BC DE"

[HKCR\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}\TypeLib]
"(Default)" = "{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}"

[HKCR\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}\MiscStatus]
"(Default)" = "0"

[HKCR\Interface\{F0FA81DA-7F8F-489A-873D-816A3C7BDC84}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\ScriptHelper.GenericWnd]
"(Default)" = "GenericWnd Class"

[HKCR\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}\ProgID]
"(Default)" = "ScriptHelper.ScriptHelperApi.1"

[HKCR\Interface\{F0FA81DA-7F8F-489A-873D-816A3C7BDC84}]
"(Default)" = "IGenericWnd"

[HKCR\ScriptHelper.GenericWnd\CurVer]
"(Default)" = "ScriptHelper.GenericWnd.1"

The process BundleInstall.exe:3768 makes changes in the system registry.
The program creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "B6 FD 0C EB 93 4E 39 3D D5 A6 2F F7 33 6A BF DE"

The process BundleInstall.exe:2360 makes changes in the system registry.
The program creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "0A 16 D7 E0 73 D7 0E DB 94 19 76 31 EA CE A0 F6"

The process regsvr32.exe:556 makes changes in the system registry.
The program creates and/or sets the following values in system registry:

[HKCR\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}]
"(Default)" = "AVG SafeGuard toolbar"

[HKCR\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\AVG SafeGuard toolbar.PugiObj.1\CLSID]
"(Default)" = "{95B7759C-8C7F-4BF1-B163-73684A933233}"

[HKCR\AVG SafeGuard toolbar.PugiObj.1]
"(Default)" = "AVG SafeGuard toolbar"

[HKCR\AVG SafeGuard toolbar.PugiObj]
"(Default)" = "AVG SafeGuard toolbar"

[HKCR\AVG SafeGuard toolbar.BrowserWndAPI\CurVer]
"(Default)" = "AVG SafeGuard toolbar.BrowserWndAPI.1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar]
"UninstallString" = "%Program Files%\AVG SafeGuard toolbar\UNINSTALL.exe /PROMPT /UNINSTALL"

[HKCR\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\VersionIndependentProgID]
"(Default)" = "AVG SafeGuard toolbar.PugiObj"

[HKCR\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\ProgID]
"(Default)" = "AVG SafeGuard toolbar.PugiObj.1"

[HKCR\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"tbstate" = "4"

[HKCR\AVG SafeGuard toolbar.BrowserWndAPI.1]
"(Default)" = "BrowserWndAPI Class"

[HKCR\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}\InprocServer32]
"(Default)" = "%Program Files%\AVG SafeGuard toolbar\18.1.0.443\AVG SafeGuard toolbar_toolbar.dll"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar]
"DisplayName" = "AVG SafeGuard toolbar"

[HKCR\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\InprocServer32]
"(Default)" = "%Program Files%\AVG SafeGuard toolbar\18.1.0.443\AVG SafeGuard toolbar_toolbar.dll"

[HKCR\AVG SafeGuard toolbar.PugiObj\CurVer]
"(Default)" = "AVG SafeGuard toolbar.PugiObj.1"

[HKCR\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]
"(Default)" = ""

[HKCR\AVG SafeGuard toolbar.PugiObj\CLSID]
"(Default)" = "{95B7759C-8C7F-4BF1-B163-73684A933233}"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar]
"DisplayIcon" = "%Program Files%\AVG SafeGuard toolbar\favicon.ico"

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"ieversion" = "8.0.6001.18702"

[HKCR\AVG SafeGuard toolbar.BrowserWndAPI]
"(Default)" = "BrowserWndAPI Class"

[HKCR\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}\VersionIndependentProgID]
"(Default)" = "AVG SafeGuard toolbar.BrowserWndAPI"

[HKCR\AVG SafeGuard toolbar.BrowserWndAPI.1\CLSID]
"(Default)" = "{DE9028D0-5FFA-4E69-94E3-89EE8741F468}"

[HKCR\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}\ProgID]
"(Default)" = "AVG SafeGuard toolbar.BrowserWndAPI.1"

[HKCR\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\Implemented Categories]
"(Default)" = ""

[HKCR\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}\1.0\0\win32]
"(Default)" = "%Program Files%\AVG SafeGuard toolbar\18.1.0.443\AVG SafeGuard toolbar_toolbar.dll"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "AF A8 3F A8 14 CF 37 CB AA 0C 65 1E 5B 27 D5 E2"

[HKCR\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}]
"(Default)" = "BrowserWndAPI Class"

[HKCR\AVG SafeGuard toolbar.BrowserWndAPI\CLSID]
"(Default)" = "{DE9028D0-5FFA-4E69-94E3-89EE8741F468}"

[HKCR\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}\TypeLib]
"(Default)" = "{9C049BA6-EA47-4ac3-AED6-A66D8DC9E1D8}"

[HKLM\SOFTWARE\AVG SafeGuard toolbar]
"laststatechange" = "1399978863"

It registers itself as a Browser Helper Object (BHO) to ensure its automatic execution every time Internet Explorer is run. It does this by creating the following registry key(s)/entry(ies):

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
"NoExplorer" = "1"

The program deletes the following registry key(s):

[HKCR\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\Programmable]
[HKCR\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\Implemented Categories]
[HKCR\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\InprocServer32]
[HKCR\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}\Programmable]
[HKCR\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}\InprocServer32]
[HKCR\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}]
[HKCR\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}\ProgID]
[HKCR\s]
[HKCR\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\VersionIndependentProgID]
[HKCR\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}]
[HKCR\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\ProgID]
[HKCR\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]
[HKCR\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}\TypeLib]
[HKCR\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}\VersionIndependentProgID]

The process vprot.exe:836 makes changes in the system registry.
The program creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\AVG SafeGuard toolbar]
"InstallStatsShouldBeSent" = "1"

[HKCU\Software\AVG SafeGuard toolbar\SiteSafety\Url]
"Version" = "2014_05_13_04_01_11"

[HKCU\Software\AVG SafeGuard toolbar\CH]
"Revert_HP" = "None"

[HKCU\Software\AVG SafeGuard toolbar\SiteSafety\Url]
"interval" = "1440"

[HKCU\Software\AVG SafeGuard toolbar\FF]
"Revert_DSP" = "None"

[HKCU\Software\AVG SafeGuard toolbar\IE]
"DontUpdateSuggestions" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\AVG SafeGuard toolbar]
"SiteSafetyUpdateTimeStamp" = "14/5/2014 14:1:14"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}]
"URL" = "http://mysearch.avg.com/search?cid={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&mid=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&lang=en&ds=avgab0&coid=avgtbavg&cmpid=&pr=sa&d=2014-05-13 14:01:03&v=18.1.0.443&pid=safeguard&sg=&sap=dsp&q={searchTerms}"

[HKCU\Software\AVG SafeGuard toolbar]
"HpGuardStarted" = "1"

[HKCU\Software\AVG SafeGuard toolbar\IE]
"VersionUpdated" = "13/5/2014 14:1:15"

[HKCU\Software\AVG SafeGuard toolbar]
"InstallUser" = "1"

[HKCU\Software\AVG SafeGuard toolbar\SiteSafety\Url]
"2014_05_13_04_01_11_sig" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}]
"FaviconURLFallback" = "http://mysearch.avg.com/favicon.ico"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\AVG SafeGuard toolbar]
"InstallStats" = "http://stats.avg.com/services/i.asmx/install?ClientID={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&MachineID=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&DistributionSource=avgab0&cmpid=&Profile=sa&Version=18.1.0.443&pid=safeguard&sg=&Language=en&InstallDate=2014-05-13 14:01:03&AdditionalInfoXML=productpagetrue&hpIE=true&dspIE=true&ntIE=unavailable&hpFF=false&dspFF=false&ntFF=false&hpCH=false&dspCH=false&ntCH=false&hpIEresult=true&dspIEresult=unknown&ntIEresult=false&hpFFresult=unknown&dspFFresult=unknown&ntFFresult=unknown&hpCHresult=false&dspCHresult=false&ntCHresult=false"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}]
"Version" = ""

[HKCU\Software\AVG SafeGuard toolbar]
"DNTUpdateTimeStamp" = "13/5/2014 19:1:12"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCU\Software\AVG SafeGuard toolbar\FF]
"Revert_HP" = "None"

[HKCU\Software\AVG SafeGuard toolbar]
"IESearchAssetsAdded" = "13/5/2014 14:1:16"

[HKCU\Software\AVG SafeGuard toolbar\IE]
"Revert_DSP" = "{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

[HKCU\Software\AVG SafeGuard toolbar]
"DNTCurrentVersion" = "14"

[HKCU\Software\AVG SafeGuard toolbar\FF]
"DontUpdateSuggestions" = "1"

[HKCU\Software\AVG SafeGuard toolbar]
"HpRun" = "1"

[HKCU\Software\AVG SafeGuard toolbar\IE]
"Revert_HP_ID" = "99"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}]
"SuggestionsURLFallback" = ""

[HKCU\Software\AVG SafeGuard toolbar\DNT\Settings]
"DNTMigrationComplete" = "2"

[HKCU\Software\AVG SafeGuard toolbar\IE]
"UserShowSuggestions" = "0"

[HKCU\Software\AVG SafeGuard toolbar\FF]
"VersionUpdated" = "13/5/2014 14:1:15"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 40 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\AVG SafeGuard toolbar]
"InstallerSession" = "1"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "A0 A9 D8 C7 61 18 85 F5 59 30 19 DC 70 2F 2D 09"

[HKCU\Software\AVG SafeGuard toolbar\CH]
"Revert_DSP" = "2"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}]
"FaviconPath" = "%Program Files%\AVG SafeGuard toolbar\favicon.ico"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes]
"ShowSearchSuggestionsInAddressGlobal" = "1"

[HKCU\Software\AVG SafeGuard toolbar]
"IEEnabledDate" = "2014-05-13 14:01:03"

[HKCU\Software\AVG SafeGuard toolbar\SiteSafety\Url]
"URL" = "http://stats.avg.com/Services/ssf.asmx/GetFile"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKCU\Software\AVG SafeGuard toolbar\CH]
"DontUpdateSuggestions" = "1"

[HKCU\Software\AVG SafeGuard toolbar\IE]
"Revert_HP" = "about:blank"

[HKCU\Software\AVG SafeGuard toolbar\CH]
"VersionUpdated" = "13/5/2014 14:1:15"

[HKLM\SOFTWARE\AVG SafeGuard toolbar\IEG]
"spf" = "62 00 73 00 65 00 61 00 72 00 63 00 68 00 2E 00"

[HKCU\Software\AVG SafeGuard toolbar\FF]
"Revert_KU" = "None"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}]
"SuggestionsURL" = ""

[HKCU\Software\AVG SafeGuard toolbar\SiteSafety\Url]
"NextUpdate" = "DE 07 05 00 03 00 0E 00 0E 00 01 00 0E 00 3B 01"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}]
"DisplayName" = "AVG Secure Search"

[HKCU\Software\AVG SafeGuard toolbar]
"InstallStatsWait" = "13/5/2014 15:1:10"

[HKCU\Software\AVG SafeGuard toolbar\CH]
"Revert_Startup" = "None"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}]
"SuggestionsURL_JSON" = "http://toolbar.avg.com/acp?q={searchTerms}&o=1"

[HKCU\Software\AVG SafeGuard toolbar\SiteSafety\Url]
"LastUpdate" = "DE 07 05 00 02 00 0D 00 0E 00 01 00 0E 00 1C 01"

The program modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The program modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The program modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The program deletes the following value(s) in system registry:

[HKCU\Software\AVG SafeGuard toolbar]
"InstallStatsShouldBeSent"

[HKCU\Software\AVG SafeGuard toolbar\SiteSafety\Url]
"failures"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"

[HKCU\Software\AVG SafeGuard toolbar]
"InstallStatsResend"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCU\Software\AVG SafeGuard toolbar\\DNT]
"Tabs"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

[HKCU\Software\AVG SafeGuard toolbar]
"InstallStatsWait"

The process DriverInstaller.exe:596 makes changes in the system registry.
The program creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "80 DB 57 CA 9D C2 3E 64 E2 C6 64 55 60 5A 48 F4"

The process AVG SafeGuard toolbar:3312 makes changes in the system registry.
The program creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "0F 18 A3 B9 C0 1E 89 BB E2 2D 88 44 9B FF 43 73"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope" = "{95B7759C-8C7F-4BF1-B163-73684A933233}"

[HKCU\Software\Microsoft\Internet Explorer\User Preferences]
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977" = "01 00 00 00 D0 8C 9D DF 01 15 D1 11 8C 7A 00 C0"
"6256FFB019F8FDFBD36745B06F4540E9AEAF222A25" = "01 00 00 00 D0 8C 9D DF 01 15 D1 11 8C 7A 00 C0"

Dropped PE files

MD5 File path
32235123b2a1c32886493bc621316064 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\DriverInstaller.exe
58e8e228f1e85ccd209b40f4779c2bfe c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\DriverInstaller_64.exe
78a63c52dd2c8719cc7f8ca88574db7e c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\NativeBrowserApi.dll
9d0e2e019aabf1de7d524b64a321e633 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\ScriptHelper.exe
aa1dde375e4457869eda730c93ba7f72 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\SiteSafety.dll
ce72e4e7d8436161f278cd99f4f17d2a c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\ToolbarUpdater.exe
c49fbd50be15c7fb63bb76a22615d208 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\ViProtocol.dll
db7afd29d909e2b12363adacdc9e2121 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\avgdttbx.dll
9fd4bc46784309176aefa26aa8241da1 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\avgtpx64.sys
e03a1466a8a7b869ebc90b179d777ea4 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\avgtpx86.sys
e1df638b3f78ef000d685f75f699013b c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\helper.dll
bf5c875fa44c49d894a4a53e7868615e c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\log4cplusU.dll
097e0b9e41a59a425a1d6aa794249053 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\loggingserver.exe
0bdda4f051adb9f20a965adbfeb70e5d c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\x64\ScriptHelper.exe
6d7826b5db570d6a1cda299c0bb0f6c7 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a00660\ConfigFiles\MachineIdCreator.exe
aaa7d53d228e76b4291ac61e987bb058 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a00660\ConfigFiles\avguidx.dll
e500598ee8358f18832cbdb1f7ef1515 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a00660\ProgFiles64\AVG SafeGuard toolbar\18.1.0.443\AVG SafeGuard toolbar_toolbar.dll
5c9c540b532b1a382540721adbbf9ffd c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\18.1.0.443\AVG SafeGuard toolbar_toolbar.dll
0870e4dd11497b5154d8415d5e99e17c c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\AVG SafeGuard toolbar
4e8466eac7711c0a058ad99ad9abd94d c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\BundleInstall.exe
c3b9140ebea64f3cbe57be7e9ecc807a c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\TBAPI.dll
b62eb5114fb81f8480684d44f51dbfd1 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Uninstall.exe
a152dfa577dc19b89b052d27bf91a0c3 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\lip.exe
df0b7956cc053ed7d1e29b9be25d0a2e c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\vprot.exe
e0b73a329a570d1f3594c3dafa894595 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a00660\avg-secure-search-installer.exe
2f1cb7371568776fc578feb8510148b0 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\AVGRewardsWorker.dll
78f4402803f507a8eb978649cc3984e1 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\DriverInstaller.exe
ffa46363ec9ce2572b39f96cc8bbb7d4 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\DriverInstaller_64.exe
486d0f932ff8a272c778a1e748a61a57 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\ScriptHelper.exe
83b017935870d4ada363ec59d3488d6b c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\SiteSafety.dll
301cfd154d004e5bc5ec092d86adc5db c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\ToolbarUpdater.exe
d09ce61bd82e96a4f76e4c1049761bd1 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\ViProtocol.dll
2f55caac94d302c5373ff317db644d28 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\avgdttbx.dll
5235d84702262fc9bcf1a35b261cc1ce c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\avgtpx64.sys
139723c3a6eb619cbd62abb437e930df c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\avgtpx86.sys
0de164bcd7acaf98d12985caa606b099 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\npsitesafety.dll
05af2d045031bd83a5d988910f2aacf0 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a02808\ConfigFiles\MachineIdCreator.exe
aaa7d53d228e76b4291ac61e987bb058 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a02808\ConfigFiles\avguidx.dll
bc39fca7e32300ecbaee98e75c4fbd0f c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\14.0.0.12\AVG SafeGuard toolbar_toolbar.dll
fb3c9e22ba2cb5d9ed84ab046ca97154 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\AVG SafeGuard toolbar
07da2495c8911208579ffbbf0568e232 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\PostInstall.exe
ed1a74f529d0829cf28db53e33a58f38 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Uninstall.exe
b6c65f3edbd95e9b61694b86269f7d2e c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\lip.exe
5e299254de2a70d7dbcede30d6462052 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\vprot.exe
f38dbf287b64358bd10fd002dc91c512 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg_a02808\avg-secure-search-installer.exe
635cf67f91f53c1a732d3e1bb671ae74 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\oi_{AA50609F-E2F0-4467-B048-0D85D9B4FD98}.exe
5c9c540b532b1a382540721adbbf9ffd c:\Program Files\AVG SafeGuard toolbar\18.1.0.443\AVG SafeGuard toolbar_toolbar.dll
0870e4dd11497b5154d8415d5e99e17c c:\Program Files\AVG SafeGuard toolbar\AVG SafeGuard toolbar
4e8466eac7711c0a058ad99ad9abd94d c:\Program Files\AVG SafeGuard toolbar\BundleInstall.exe
c3b9140ebea64f3cbe57be7e9ecc807a c:\Program Files\AVG SafeGuard toolbar\TBAPI.dll
b62eb5114fb81f8480684d44f51dbfd1 c:\Program Files\AVG SafeGuard toolbar\Uninstall.exe
a152dfa577dc19b89b052d27bf91a0c3 c:\Program Files\AVG SafeGuard toolbar\lip.exe
df0b7956cc053ed7d1e29b9be25d0a2e c:\Program Files\AVG SafeGuard toolbar\vprot.exe
db7afd29d909e2b12363adacdc9e2121 c:\Program Files\Common Files\AVG Secure Search\DNTInstaller\18.1.0\avgdttbx.dll
32235123b2a1c32886493bc621316064 c:\Program Files\Common Files\AVG Secure Search\DriverInstaller\18.1.0\DriverInstaller.exe
78a63c52dd2c8719cc7f8ca88574db7e c:\Program Files\Common Files\AVG Secure Search\NativeBrowserApi\18.1.0\NativeBrowserApi.dll
9d0e2e019aabf1de7d524b64a321e633 c:\Program Files\Common Files\AVG Secure Search\ScriptHelperInstaller\18.1.0\ScriptHelper.exe
aa1dde375e4457869eda730c93ba7f72 c:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.0\SiteSafety.dll
c49fbd50be15c7fb63bb76a22615d208 c:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.0\ViProtocol.dll
ce72e4e7d8436161f278cd99f4f17d2a c:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe
bf5c875fa44c49d894a4a53e7868615e c:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\log4cplusU.dll
097e0b9e41a59a425a1d6aa794249053 c:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\loggingserver.exe
e03a1466a8a7b869ebc90b179d777ea4 c:\WINDOWS\system32\drivers\avgtpx86.sys

HOSTS file anomalies

No changes have been detected.

Rootkit activity

Using the driver "%System%\drivers\avgtpx86.sys" the program controls creation and closing of processes by installing the process notifier.
Using the driver "%System%\drivers\avgtpx86.sys" the program controls operations with a system registry by installing the registry notifier.
The program installs the following kernel-mode hooks:

ZwEnumerateKey
ZwEnumerateValueKey
ZwQueryValueKey

Propagation

VersionInfo

Company Name: AVG Secure Search
Product Name: AVG
Product Version: 1,18,0,3287
Legal Copyright: Copyright (c) 2012
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 1,18,0,3287
File Description: AVG Secure Search
Comments:
Language: Language Neutral

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Section MD5
.text 4096 7429 7680 4.42906 62ec144c07618fc47c0575ed8e116fdc
.rdata 12288 774 1024 2.65604 c1521f18eb8b57fc1c67358e79a793b0
.data 16384 304 512 3.62337 404fa0a8af029e0ff8f6d4a6793c20e5
.rsrc 20480 342200 342528 5.54158 d6d8b618f8a2b0d2dec4ef8991ffad98

Dropped from:

Downloaded by:

Similar by SSDeep:

d314578e88d326aae068734e28f5a0be

Similar by Lavasoft Polymorphic Checker:

Total found: 2
d314578e88d326aae068734e28f5a0be
c43af6295ccb08ecbd4df8284407a64b

URLs

URL IP
hxxp://cloins.com/
hxxp://c04.inst.avg.com/serve/getSetup.php?pid=196879&k=43a9519ed4b5e9c75eb7d683e3d1e09708f9b34a&sid=avgab0:productpage&pid=196879&k=43a9519ed4b5e9c75eb7d683e3d1e09708f9b34a&sid=avgab0:productpage&user_agent=Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0 Safari/537.36 204.193.144.51
hxxp://c04.inst.avg.com/serve/getProgress.php?pid=196879&u=1359695248&lang=en 204.193.144.51
hxxp://c04.inst.avg.com/serve/getTemplate.php?pid=196879&u=1359695247&lang=en 204.193.144.51
hxxp://a74.dscg10.akamai.net/main.min.js?lang=en
hxxp://a74.dscg10.akamai.net/screen_2.min.js?lang=en
hxxp://c04.inst.avg.com/serve/getScreen.php?pid=196879&k=43a9519ed4b5e9c75eb7d683e3d1e09708f9b34a&id=429155&u=1362629748&lang=en 204.193.144.51
hxxp://a74.dscg10.akamai.net/screen_2_4.min.js?lang=en
hxxp://d18j1d26sau8be.cloudfront.net/user_images/13282488921657972529443.jpg 54.230.54.253
hxxp://d18j1d26sau8be.cloudfront.net/user_images/13353103241657972529591.jpg 54.230.54.253
hxxp://a74.dscg10.akamai.net/avg-logo-small2.jpg
hxxp://stats.inst.avg.com/run?p=196879&m=undefined&ua=Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0 Safari/537.36&d_d=1969-12-31&d_h=19&ts=1969-12-31 19:00:00&uq=0&ip=184.107.104.190&g_cc=ca&c_0=c04&pub=75&p=196879&i=196879&ir=http://&u=&pa=17157&s=avgab0:productpage&sl=&ob=Chrome&obv=34.0&os=Windows 8.1&lang= 204.193.144.33
hxxp://a74.dscg10.akamai.net/avg-horizontal-new.png
hxxp://e1793.b.akamaiedge.net/Images/blank.gif
hxxp://d18j1d26sau8be.cloudfront.net/user_images/13282470341657972529308.jpg 54.230.54.253
hxxp://e1793.b.akamaiedge.net/services/_utma.gif?&DistributionSource=hk018&FeatureName=oi_corel_test_ec&EventType=&rand=0.8564754234028279
hxxp://e1793.b.akamaiedge.net/partners/safeguard/14.0.0.12/download/safeguard.exe
hxxp://e1793.b.akamaiedge.net/services/oi.asmx/insert?ClientID={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&MachineID=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&UserAccountID=7286ea480c3cc7de&DistributionSource=avgab0&Profile=SATB&Version=14.0.0.12&pid=safeguard&sg=&Language=en&InstallDate=2014-05-13&AdditionalInfoXML=&EventType=Initiate&PRE_FF_ToolbarEnabled=&PRE_IE_ToolbarEnabled=&PRE_FF_NewTabActive=&PRE_IE_NewTabActive=&PRE_FF_DSPTaken=&PRE_IE_DSPTaken=&PRE_CHROME_DSPTaken=&IE_Version=8&FF_Version=0&Chrome_Version=34&DefaultBrowser=IE&LastStep=INSTALLER_ERROR_SUCCESS&LastStepReason=0
hxxp://e1793.b.akamaiedge.net/services/toolbar_updater.aspx
hxxp://a1019.b.akamai.net/partners/safeguard/18.1.0.443/download/safeguard.exe
hxxp://e6845.ce.akamaiedge.net/pca3-g5.crl
hxxp://e6845.ce.akamaiedge.net/CSC3-2010.crl
hxxp://e1793.b.akamaiedge.net/services/i.asmx/install?ClientID={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&MachineID=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&DistributionSource=avgab0&cmpid=&Profile=sa&Version=18.1.0.443&pid=safeguard&sg=&Language=en&InstallDate=2014-05-13 14:01:03&AdditionalInfoXML=productpagetrue%EXPECTED_PART%%RESULT_PART%
hxxp://e1793.b.akamaiedge.net/services/oi.asmx/insert?ClientID={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&MachineID=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&UserAccountID=7286ea480c3cc7de&DistributionSource=avgab0&Profile=SATB&Version=14.0.0.12&pid=safeguard&sg=&Language=en&InstallDate=2014-05-13&AdditionalInfoXML=&EventType=Complete&PRE_FF_ToolbarEnabled=&PRE_IE_ToolbarEnabled=&PRE_FF_NewTabActive=&PRE_IE_NewTabActive=&PRE_FF_DSPTaken=&PRE_IE_DSPTaken=&PRE_CHROME_DSPTaken=&IE_Version=8&FF_Version=29&Chrome_Version=34&DefaultBrowser=IE&LastStep=INSTALLER_ERROR_SUCCESS&LastStepReason=0
hxxp://e1793.b.akamaiedge.net/partners/safeguard/18.1.0.443/IEPackages/remote_configuration.aspx?cid={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&mid=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&lang=en&ds=avgab0&coid=avgtbavg&cmpid=&pr=sa&d=2014-05-13 14:01:03&v=18.1.0.443&pid=safeguard&sg=
hxxp://e1793.b.akamaiedge.net/partners/safeguard/images/icon18.gif
hxxp://e1793.b.akamaiedge.net/partners/safeguard/images/search.gif
hxxp://e1793.b.akamaiedge.net/partners/safeguard/images/dnt.gif
hxxp://e1793.b.akamaiedge.net/partners/safeguard/images/CleanHistory.gif
hxxp://e1793.b.akamaiedge.net/partners/safeguard/images/Facebook.gif
hxxp://d18j1d26sau8be.cloudfront.net/user_images/1334599120204897734385.png 54.230.54.253
hxxp://e1793.b.akamaiedge.net/partners/safeguard/images/updating18.gif
hxxp://c04.inst.avg.com/serve/cb.php?type=fin&pid=196879&k=43a9519ed4b5e9c75eb7d683e3d1e09708f9b34a&stats1=n 204.193.144.51
hxxp://e1793.b.akamaiedge.net/partners/safeguard/images/currently-safe18.gif
hxxp://e1793.b.akamaiedge.net/partners/safeguard/images/active-threats18.gif
hxxp://e1793.b.akamaiedge.net/partners/safeguard/images/surf-with-caution18.gif
hxxp://stats.inst.avg.com/finish?p=196879&builder=1.0&m=undefined&ua=Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0 Safari/537.36&d_d=1969-12-31&d_h=19&ts=1969-12-31 19:00:00&uq=0&ip=184.107.104.190&g_cc=ca&c_0=c04&pub=75&p=196879&i=196879&ir=http://&u=&pa=17157&s=avgab0:productpage&sl=&ob=Chrome&obv=34.0&os=Windows 8.1&lang=&ev=200&off=oid,1757;sc,429155;r,true;ispr,false;acc,true;canc,false;sta,|&perf=getUuid,1250;getSetup,922;eInit,16;formPages,0;selLang,0;getPages,1391;waitPages,0;load,234;create,15;show,109203;&rid= 204.193.144.33
hxxp://e1793.b.akamaiedge.net/services/g.asmx/insert?ClientID={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&MachineID=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&DistributionSource=avgab0&cmpid=&Profile=sa&Version=18.1.0.443&pid=safeguard&sg=&Language=en&InstallDate=2014-05-13 14:01:03&AdditionalInfoXML=08-HP Guard Enabled&FeatureToGuard=HP_GUARD&ValueBeforeGuard=about:blank&Action=01-Auto-Guard-Silent
hxxp://e1793.b.akamaiedge.net/Services/ssf.asmx/GetFile
hxxp://stats.inst.avg.com/ 204.193.144.33
hxxp://dnt.cloud.avg.com/ver.txt 204.193.144.67
hxxp://a1019.b.akamai.net/sitesafety/last.dat
hxxp://dnt.cloud.avg.com/dat.js?a=1 204.193.144.67
hxxp://e1793.b.akamaiedge.net/services/i.asmx/install?ClientID={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&MachineID=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&DistributionSource=avgab0&cmpid=&Profile=sa&Version=18.1.0.443&pid=safeguard&sg=&Language=en&InstallDate=2014-05-13 14:01:03&AdditionalInfoXML=productpagetrue&hpIE=true&dspIE=true&ntIE=unavailable&hpFF=false&dspFF=false&ntFF=false&hpCH=false&dspCH=false&ntCH=false&hpIEresult=true&dspIEresult=true&ntIEresult=false&hpFFresult=unknown&dspFFresult=unknown&ntFFresult=unknown&hpCHresult=false&dspCHresult=false&ntCHresult=false
hxxp://e1793.b.akamaiedge.net/services/g.asmx/insert?ClientID={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&MachineID=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&DistributionSource=avgab0&cmpid=&Profile=sa&Version=18.1.0.443&pid=safeguard&sg=&Language=en&InstallDate=2014-05-13 14:01:03&AdditionalInfoXML=0_0_0_-1&FeatureToGuard=DSP_GUARD_DI&ValueBeforeGuard=AVG Secure Search&Action=05-User Change DSP from IE
hxxp://e1793.b.akamaiedge.net/services/_utma.gif?ClientID={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&MachineID=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&DistributionSource=avgab0&cmpid=&Profile=sa&Version=18.1.0.443&pid=safeguard&sg=&Language=en&InstallDate=2014-05-13 14:01:03&EventType=OK&FeatureName=DSP_POPUP_WND
hxxp://e1793.b.akamaiedge.net/services/g.asmx/insert?ClientID={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&MachineID=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&DistributionSource=avgab0&cmpid=&Profile=sa&Version=18.1.0.443&pid=safeguard&sg=&Language=en&InstallDate=2014-05-13 14:01:03&AdditionalInfoXML=0_0_0_-1&FeatureToGuard=DSP_GUARD_DI&ValueBeforeGuard=AVG Secure Search&Action=06-Activate driver
hxxp://stats.avg.com/services/oi.asmx/insert?ClientID={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&MachineID=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&UserAccountID=7286ea480c3cc7de&DistributionSource=avgab0&Profile=SATB&Version=14.0.0.12&pid=safeguard&sg=&Language=en&InstallDate=2014-05-13&AdditionalInfoXML=&EventType=Initiate&PRE_FF_ToolbarEnabled=&PRE_IE_ToolbarEnabled=&PRE_FF_NewTabActive=&PRE_IE_NewTabActive=&PRE_FF_DSPTaken=&PRE_IE_DSPTaken=&PRE_CHROME_DSPTaken=&IE_Version=8&FF_Version=0&Chrome_Version=34&DefaultBrowser=IE&LastStep=INSTALLER_ERROR_SUCCESS&LastStepReason=0 23.208.87.117
hxxp://toolbar.avg.com/partners/safeguard/14.0.0.12/download/safeguard.exe 23.208.87.117
hxxp://stats.avg.com/services/toolbar_updater.aspx 23.208.87.117
hxxp://crl.verisign.com/pca3-g5.crl 23.50.69.163
hxxp://stats.avg.com/services/_utma.gif?ClientID={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&MachineID=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&DistributionSource=avgab0&cmpid=&Profile=sa&Version=18.1.0.443&pid=safeguard&sg=&Language=en&InstallDate=2014-05-13 14:01:03&EventType=OK&FeatureName=DSP_POPUP_WND 23.208.87.117
hxxp://stats.avg.com/services/g.asmx/insert?ClientID={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&MachineID=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&DistributionSource=avgab0&cmpid=&Profile=sa&Version=18.1.0.443&pid=safeguard&sg=&Language=en&InstallDate=2014-05-13 14:01:03&AdditionalInfoXML=0_0_0_-1&FeatureToGuard=DSP_GUARD_DI&ValueBeforeGuard=AVG Secure Search&Action=06-Activate driver 23.208.87.117
hxxp://toolbar.avg.com/partners/safeguard/images/surf-with-caution18.gif 23.208.87.117
hxxp://download-toolbar.avg.com/sitesafety/last.dat 207.109.111.42
hxxp://oi.cloud.avg.com/ 204.193.144.33
hxxp://stats.avg.com/services/_utma.gif?&DistributionSource=hk018&FeatureName=oi_corel_test_ec&EventType=&rand=0.8564754234028279 23.208.87.117
hxxp://st.cloins.com/ 204.193.144.89
hxxp://toolbar.avg.com/partners/safeguard/images/CleanHistory.gif 23.208.87.117
hxxp://c12081072.r72.cf2.rackcdn.com/main.min.js?lang=en 165.254.32.122
hxxp://stats.avg.com/services/g.asmx/insert?ClientID={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&MachineID=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&DistributionSource=avgab0&cmpid=&Profile=sa&Version=18.1.0.443&pid=safeguard&sg=&Language=en&InstallDate=2014-05-13 14:01:03&AdditionalInfoXML=0_0_0_-1&FeatureToGuard=DSP_GUARD_DI&ValueBeforeGuard=AVG Secure Search&Action=05-User Change DSP from IE 23.208.87.117
hxxp://c12081072.r72.cf2.rackcdn.com/screen_2.min.js?lang=en 165.254.32.122
hxxp://c12081072.r72.cf2.rackcdn.com/screen_2_4.min.js?lang=en 165.254.32.122
hxxp://download-toolbar.avg.com/partners/safeguard/18.1.0.443/download/safeguard.exe 207.109.111.42
hxxp://c15040647.r47.cf2.rackcdn.com/avg-logo-small2.jpg 165.254.32.129
hxxp://stats.avg.com/services/g.asmx/insert?ClientID={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&MachineID=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&DistributionSource=avgab0&cmpid=&Profile=sa&Version=18.1.0.443&pid=safeguard&sg=&Language=en&InstallDate=2014-05-13 14:01:03&AdditionalInfoXML=08-HP Guard Enabled&FeatureToGuard=HP_GUARD&ValueBeforeGuard=about:blank&Action=01-Auto-Guard-Silent 23.208.87.117
hxxp://toolbar.avg.com/partners/safeguard/images/active-threats18.gif 23.208.87.117
hxxp://stats.avg.com/services/oi.asmx/insert?ClientID={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&MachineID=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&UserAccountID=7286ea480c3cc7de&DistributionSource=avgab0&Profile=SATB&Version=14.0.0.12&pid=safeguard&sg=&Language=en&InstallDate=2014-05-13&AdditionalInfoXML=&EventType=Complete&PRE_FF_ToolbarEnabled=&PRE_IE_ToolbarEnabled=&PRE_FF_NewTabActive=&PRE_IE_NewTabActive=&PRE_FF_DSPTaken=&PRE_IE_DSPTaken=&PRE_CHROME_DSPTaken=&IE_Version=8&FF_Version=29&Chrome_Version=34&DefaultBrowser=IE&LastStep=INSTALLER_ERROR_SUCCESS&LastStepReason=0 23.208.87.117
hxxp://toolbar.avg.com/partners/safeguard/images/search.gif 23.208.87.117
hxxp://stats.avg.com/services/i.asmx/install?ClientID={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&MachineID=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&DistributionSource=avgab0&cmpid=&Profile=sa&Version=18.1.0.443&pid=safeguard&sg=&Language=en&InstallDate=2014-05-13 14:01:03&AdditionalInfoXML=<AdditionalInfo><TrackingCode>productpage</TrackingCode><OnlineInstall>true</OnlineInstall></AdditionalInfo>&hpIE=true&dspIE=true&ntIE=unavailable&hpFF=false&dspFF=false&ntFF=false&hpCH=false&dspCH=false&ntCH=false&hpIEresult=true&dspIEresult=true&ntIEresult=false&hpFFresult=unknown&dspFFresult=unknown&ntFFresult=unknown&hpCHresult=false&dspCHresult=false&ntCHresult=false 23.208.87.117
hxxp://isearch.avg.com/Images/blank.gif 23.208.87.117
hxxp://csc3-2010-crl.verisign.com/CSC3-2010.crl 23.50.69.163
hxxp://toolbar.avg.com/partners/safeguard/images/updating18.gif 23.208.87.117
hxxp://toolbar.avg.com/partners/safeguard/images/dnt.gif 23.208.87.117
hxxp://toolbar.avg.com/partners/safeguard/images/currently-safe18.gif 23.208.87.117
hxxp://c15040647.r47.cf2.rackcdn.com/avg-horizontal-new.png 165.254.32.129
hxxp://stats.avg.com/Services/ssf.asmx/GetFile 23.208.87.117
hxxp://toolbar.avg.com/partners/safeguard/images/Facebook.gif 23.208.87.117
hxxp://toolbar.avg.com/partners/safeguard/18.1.0.443/IEPackages/remote_configuration.aspx?cid={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&mid=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&lang=en&ds=avgab0&coid=avgtbavg&cmpid=&pr=sa&d=2014-05-13 14:01:03&v=18.1.0.443&pid=safeguard&sg= 23.208.87.117
hxxp://toolbar.avg.com/partners/safeguard/images/icon18.gif 23.208.87.117
hxxp://stats.avg.com/services/i.asmx/install?ClientID={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&MachineID=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&DistributionSource=avgab0&cmpid=&Profile=sa&Version=18.1.0.443&pid=safeguard&sg=&Language=en&InstallDate=2014-05-13 14:01:03&AdditionalInfoXML=<AdditionalInfo><TrackingCode>productpage</TrackingCode><OnlineInstall>true</OnlineInstall></AdditionalInfo>%EXPECTED_PART%%RESULT_PART% 23.208.87.117


IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

GET /partners/safeguard/14.0.0.12/download/safeguard.exe HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; OI build 3287)
Host: toolbar.avg.com
Connection: Close


HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Tue, 01 Jan 2013 09:57:57 GMT
Accept-Ranges: bytes
ETag: "7c23c4796e8cd1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Content-Length: 2940496
Date: Tue, 13 May 2014 10:59:24 GMT
Connection: close
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$............s.V.s.V
.s.V.<.V.s.V..<V.s.V..-V.s.V..;V.s.V.. V.s.V.s.V.s.V..1V.s.V..,V
.s.V..)V.s.VRich.s.V................PE..L..../.P.................n...R
 ...................@.......................... -.....#.-...@.........
............................P.... ....*...........,.P.....-.@.........
..........................`...@.......................................
.....text....m.......n.................. ..`.rdata...E.......F...r....
..........@[email protected]...`[email protected].....*.. ..
..*.................@[email protected].......,[email protected]......
......................................................................
......................................................................
......................................................................
......................................................................
...................................................|$..u.3...t$..-r..Y
..t$..Eq..Y..f....u.!>[email protected]..~...3..h`.A..t$........A....
..V3.j...Z.....N.... .....3.Ju....`.A.A......r.......!...`.A..........
..3..`.A.A...\.A.;[email protected].@.^.U..V.u.....W......
....t...93.#....3...M.A.}..w..}..r[.}.....}.S3..m.......#.............
#.3........#.3.........3<.....M...u.[....93.#....3...M.A.}..w._^]..
.._...U.........(.A.3..E..E.S.].VW.p....P.3..E...l.....h....u..u...L..
Y;........E.3.C.}..E..u..]..u..u..u..u..]........p....E.9u.w.r.9E.
<<< skipped >>>


GET /avg-logo-small2.jpg HTTP/1.1
Accept: */*
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Host: c15040647.r47.cf2.rackcdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Last-Modified: Tue, 26 Jun 2012 18:44:52 GMT
ETag: 4bb85c10148c978c2a65041d27d40c5c
X-Trans-Id: tx1c45c8c6100642c48e3e6-00536d6d08ord1
Content-Length: 3221
Accept-Ranges: bytes
X-Timestamp: 1340736291.81897
Content-Type: application/octet-stream
Cache-Control: public, max-age=2455
Expires: Tue, 13 May 2014 11:40:13 GMT
Date: Tue, 13 May 2014 10:59:18 GMT
Connection: keep-alive
......Exif..II*.................Ducky.......<.....-hXXp://ns.adobe.
com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?&g
t; <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-
c011 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf
="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description
 rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="ht
tp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.
0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)
" xmpMM:InstanceID="xmp.iid:3DCB04FDB7E311E1BC05F339A0742F20" xmpMM:Do
cumentID="xmp.did:3DCB04FEB7E311E1BC05F339A0742F20"> <xmpMM:Deri
vedFrom stRef:instanceID="xmp.iid:3DCB04FBB7E311E1BC05F339A0742F20" st
Ref:documentID="xmp.did:3DCB04FCB7E311E1BC05F339A0742F20"/> </rd
f:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end
="r"?>....Adobe.d..................................................
......................................................................
.........................2.g..........................................
................................................!1..A.Qaq."....2Br#...
...R...........................!1..A.Qq...".a...2B..Rr.3.4............
[email protected]. YG......{n.....Dt.....~.R.;o._*.Q.bL.NB^E.E*.'.....
..v....H.N\q.g...j.3U>q.....d.TG.). ]n...........T..X.:..0.B...I..t
(.q.....Qibb....65kj.nAJ9IT.\...^h.....).S........P...iN9.U.o.,...,...
...(..xI...........a..........?.................p3..V40;E./P. 0...
<<< skipped >>>

GET /avg-horizontal-new.png HTTP/1.1


Accept: */*
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Host: c15040647.r47.cf2.rackcdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Last-Modified: Thu, 04 Apr 2013 22:06:25 GMT
ETag: f6a669ad6c8e839e98f7db06a2743be5
X-Trans-Id: tx26151a1aa2074d8ca24f3-005359e229ord1
Content-Length: 7670
Accept-Ranges: bytes
X-Timestamp: 1365113184.41223
Content-Type: application/octet-stream
Cache-Control: public, max-age=2469
Expires: Tue, 13 May 2014 11:40:27 GMT
Date: Tue, 13 May 2014 10:59:18 GMT
Connection: keep-alive
.PNG........IHDR.....................pHYs................OiCCPPhotosho
p ICC profile..x..SgTS..=...BK...KoR.. RB....&*!..J.!...Q..EE.........
..Q,......!.........{.k........>...........H3Q5...B..........@..$p.
...d!s.#...~<< ".....x.....M..0.....B.\[email protected]..@F....
&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH..
...........0Q..)..{.`.##x.....F.W<. ...*..x..<.$9E.[.-q.WW..(.I.
 [email protected]..._-...."[email protected]~..,/...;.
.m..%..h^[email protected].~<<E.........J.B[a.W}.g._.W.l.~<..
....$.2].G......L......b...G.......".Ib.X*..Q.q.D...2.".B.).%..d..,..&
gt;.5..j>.{.-.]c..K'.Xt.......o..(...h...w..?.G.%..fI.q..^D$.T..?..
..D..*.A....,.........`6.B$..B.B.d..r`)..B(....*`/[email protected]..=p..
a...(....A...a!...b.X#......!.H...$ ...Q"K.5H1R.T UH..=r.9.\F..;..2...
.G1...Q=...C..7..F...dt1......r..=.6....h...>C.0....3.l0...B.8,..c.
."......V.....c..w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.X
H,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,  .......3...!.[.
[email protected].(R.jJ....4..e.2AU..R...T.5.ZB...R.Q...4u.9...IK......h.h.i..t.
....N..W...G.....w.......g(.....g.w...L......T071......oUX*.*|.....J.&
..*/T.......U.U.T..^S}.FU3S......U..P.S.Sg.;...g.oT?.~Y...Y.L.OC.Q.._.
.. .c..x,!k...u.5.&...|v*......=...9C3J3W.R..f?...q..tN..(...~....).).
.4L.1e\k....X.H.Q.G..6......E.Y...A.J'\'Gg.....S.S.....M=:....k....Dw.
n.....^..Lo..y....}/.T.m...G.X...$.....<.5qo<./...QC][email protected]....
..<..F.F..i.\.$.m.m..&.&!&KM.M..RM..).;L;L........5.=1.2.......
<<< skipped >>>


POST /serve/getSetup.php?pid=196879&k=43a9519ed4b5e9c75eb7d683e3d1e09708f9b34a&sid=avgab0:productpage&pid=196879&k=43a9519ed4b5e9c75eb7d683e3d1e09708f9b34a&sid=avgab0:productpage&user_agent=Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0 Safari/537.36 HTTP/1.1
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; OI build 3287)
Host: c04.inst.avg.com
Content-Length: 191
Connection: Close

v=1,18,0,3287&m=a098981184d31a4ffa83b5b0e95b3a6e&smb=c813ad9c39a9eb0fe04d11bfd8b0b976&mcs=00:50:56:3E:C4:83&mavg=2590d390edff4713af4b84cf713f6e90&havg=dcee3c902911a3b91a9dbeb00b44da600dd1d96a
HTTP/1.1 200 OK
Server: nginx/1.1.19
Date: Tue, 13 May 2014 10:59:15 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.3.10-1ubuntu3.9
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: PHPSESSID=ral61i9g9q6ig64r8vbm7g0435; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
1e3c..{"oistat_host":"http:\/\/stats.inst.avg.com","oistat_cluster":"c
04","placement_id":"196879","publisher_id":"75","avg_machine_id":null,
"pub_tracker":"","min_req_offers":0,"disableDynamicOffers":true,"autoR
unOffers":true,"latest_version":2,"latest_version_url":"http:\/\/c04.i
nst.avg.com\/serve\/dl.php?rebuild=y&pid=196879","spi_approved":"0","u
rl_params":"&ua=Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKi
t/537.36 (KHTML, like Gecko) Chrome/34.0 Safari/537.36&d_d
=1969-12-31&d_h=19&ts=1969-12-31 19:00:00&uq=0&ip=184.107.104.190&
g_cc=ca&c_0=c04&pub=75&p=196879&i=196879&ir=http://&u=&pa=17157&
s=avgab0:productpage&sl=&ob=Chrome&obv=34.0&os=Windows 8.1&lang=","w
indow":{"showborder":true,"type":"window","minimize":false,"close":tru
e,"topmost":false,"fadein":0},"acceptLimit":99,"offersLimit":99,"path_
id":"17157","events":{"complete":" var req = Lib.newXmlHttp();\n      
  req.open('GET', 'http:\/\/c04.inst.avg.com\/serve\/cb.php?type=fin&p
id=196879&k=43a9519ed4b5e9c75eb7d683e3d1e09708f9b34a&stats1=n', false)
;\n        req.send(null); \nfunction getEstRev(){\n    var accepted =
 JSON.parse(Sys.configObject.prop('acceptedOffers').toString());\n    
var totalRev = 0;\n    for(var id in accepted){\n        var offer = a
ccepted[id];\n        if(offer && typeof(offer.estRev) != 'undefined' 
&& offer.estRev){\n            totalRev  = parseFloat(offer.estRev);\n
        }\n    }\n    return totalRev.toFixed(2);\n}\n","init":" Sys.c
onfigObject.setProp('oistat_br', JSON.stringify({ie : Lib.GetIEVer
<<< skipped >>>


GET /services/g.asmx/insert?ClientID={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&MachineID=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&DistributionSource=avgab0&cmpid=&Profile=sa&Version=18.1.0.443&pid=safeguard&sg=&Language=en&InstallDate=2014-05-13 14:01:03&AdditionalInfoXML=0_0_0_-1&FeatureToGuard=DSP_GUARD_DI&ValueBeforeGuard=AVG Secure Search&Action=05-User Change DSP from IE HTTP/1.1
Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0.6001.18702; Windows NT 5.1)
Host: stats.avg.com
Connection: Keep-Alive
Cookie: ASP.NET_SessionId=bvjhi1fml44lgqpog2deeedd


HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Tue, 13 May 2014 11:01:16 GMT
Content-Length: 2693
Connection: keep-alive
..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "h
ttp://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html 
xmlns="hXXp://VVV.w3.org/1999/xhtml">..<head><title>..&
lt;/title>..    <script type="text/javascript">..        func
tion window_onload() {..            var ValueBeforeGuard = 'AVG Secure
 Search'..            if (ValueBeforeGuard.indexOf('blekko.com') != -1
) {..                var userHomePage = GetHP();..                //If
 contains AVG:..                if (userHomePage.indexOf('avg') != -1)
 {..                    var protocol = document.location.protocol;..  
                  document.location = protocol   "//isearch.avg.com/pa
ges/RedirectHp.aspx?hp="   escape(userHomePage);..                }.. 
               else {..                    document.location = userHom
ePage;..                }..            }..        }..        function 
GetHP() {..            var _IEInstallationFolderName = "AVG Secure Sea
rch";..            var homePage = "";..            if (typeof window.t
oolbarhomeAPI != "undefined") {..                var xpcom;..         
       if (typeof window.toolbarhomeAPI.isAPIReady != "undefined") {..
                    xpcom = window.toolbarhomeAPI;..                } 
else {..                    xpcom = window.toolbarhomeAPI.wrappedJSObj
ect;..                }..                homePage = xpcom.GetHomePage(
);..            }..            else {..                //IE..         
       try {..                    var sh = new ActiveXObject('Scri
<<< skipped >>>

GET /services/g.asmx/insert?ClientID={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&MachineID=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&DistributionSource=avgab0&cmpid=&Profile=sa&Version=18.1.0.443&pid=safeguard&sg=&Language=en&InstallDate=2014-05-13 14:01:03&AdditionalInfoXML=0_0_0_-1&FeatureToGuard=DSP_GUARD_DI&ValueBeforeGuard=AVG Secure Search&Action=06-Activate driver HTTP/1.1


Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0.6001.18702; Windows NT 5.1)
Host: stats.avg.com
Connection: Keep-Alive
Cookie: ASP.NET_SessionId=bvjhi1fml44lgqpog2deeedd


HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Tue, 13 May 2014 11:01:16 GMT
Content-Length: 2685
Connection: keep-alive
..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "h
ttp://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html 
xmlns="hXXp://VVV.w3.org/1999/xhtml">..<head><title>..&
lt;/title>..    <script type="text/javascript">..        func
tion window_onload() {..            var ValueBeforeGuard = 'AVG Secure
 Search'..            if (ValueBeforeGuard.indexOf('blekko.com') != -1
) {..                var userHomePage = GetHP();..                //If
 contains AVG:..                if (userHomePage.indexOf('avg') != -1)
 {.. ..



POST / HTTP/1.1
Accept: */*
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; OI build 3287)
Host: st.cloins.com
Content-Length: 229

installer_id=1434547&installation_uuid=0&data=qBwBomChCoOBNq2Rstdv1fGsbE9ujinClUltpMR80Ff4vBTWksliSwLsKBmwUwmhOuYnw03EL+7Z32i07p0B0q4E7Y7NofDfM0/4UeEvjnicpGAuEnrc5A==&signature=b6619dabad4386161065a94b70121b21&do=recv_message
HTTP/1.1 502 Bad Gateway
Server: nginx/1.1.19
Date: Tue, 13 May 2014 10:59:24 GMT
Content-Type: text/html
Content-Length: 575
Connection: close
<html>..<head><title>502 Bad Gateway</title>&l
t;/head>..<body bgcolor="white">..<center><h1>502
 Bad Gateway</h1></center>..<hr><center>nginx/
1.1.19</center>..</body>..</html>..<!-- a padding
 to disable MSIE and Chrome friendly error page -->..<!-- a padd
ing to disable MSIE and Chrome friendly error page -->..<!-- a p
adding to disable MSIE and Chrome friendly error page -->..<!-- 
a padding to disable MSIE and Chrome friendly error page -->..<!
-- a padding to disable MSIE and Chrome friendly error page -->..&l
t;!-- a padding to disable MSIE and Chrome friendly error page -->.
...



GET /screen_2_4.min.js?lang=en HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; OI build 3287)
Host: c12081072.r72.cf2.rackcdn.com
Connection: Close


HTTP/1.1 200 OK
Last-Modified: Mon, 05 Aug 2013 21:46:05 GMT
ETag: 7b4fd2f1b9bb4b4074567e8cf2b2f277
X-Trans-Id: tx2adecf6887b54d13ad1be-005331f077ord1
X-Object-Meta-Cb-Modifiedtime: Mon, 05 Aug 2013 21:16:39 GMT
X-Timestamp: 1375739164.80528
Content-Type: application/x-javascript
Cache-Control: public, max-age=3071
Expires: Tue, 13 May 2014 11:50:27 GMT
Date: Tue, 13 May 2014 10:59:16 GMT
Content-Length: 209
Connection: close
.if(typeof(win)=='undefined'){window.external.Sys.log(1,'outer_core.js
 loaded before core?! win not available');}.else if(typeof(win.externa
l.onPageClose)!="undefined"){win.external.onPageClose=CancelRequest;}.
.



GET /CSC3-2010.crl HTTP/1.1
Accept: */*
User-Agent: Microsoft-CryptoAPI/5.131.2600.5512
Host: csc3-2010-crl.verisign.com
Connection: Keep-Alive
Cache-Control: no-cache
Pragma: no-cache


HTTP/1.1 200 OK
Server: Apache
ETag: "2237f9e4cdee23e13ed43192ff19e040:1399972210"
Last-Modified: Tue, 13 May 2014 09:10:10 GMT
Accept-Ranges: bytes
Content-Length: 126346
Date: Tue, 13 May 2014 11:00:16 GMT
Connection: keep-alive
Content-Type: application/pkix-crl
0....0...l...0...*.H........0..1.0...U....US1.0...U....VeriSign, Inc.1
.0...U....VeriSign Trust Network1;09..U...2Terms of use at hXXps://www
.verisign.com/rpa (c)101.0,..U...%VeriSign Class 3 Code Signing 2010 C
A..140513090003Z..140527090003Z0...N0!....c..k....D.k.....120708062201
Z0!... _...u.t.=.<.&...130218061114Z0!...&..].....P.k.:...120125130
117Z0!...7P.x....8.Q...s..130227010252Z0!...J.....Q..Y.[.....110404153
956Z0!...d...=..q!_...g9..130729145216Z0!...l.....h2<.H......120329
152211Z0!...q.9...`H.*.Y.C...120525202212Z0!...s...TM.......0...121221
080842Z0!...t..,.. ...eL.....130314222305Z0!...y..r.HW.v.....w..140423
054643Z0!..../u.......A..5...101214165045Z0!.....0.Xc...%...iM..121102
230226Z0!.......S.a&.X5t.E]..111206083350Z0!....c.(....B.[M83...140108
164517Z0!....A.Sv.....f,.....110609003155Z0!.....z......!.ID{]..101228
182208Z0!....b^......{d.J'...130102154110Z0!......0..........I..130912
181631Z0!....6e...~..T.......130131012247Z0!.........bD#*u......130226
223939Z0!.......@..'$.).;}\..130121172259Z0!....7.v..........n..120724
160733Z0!....P;.Y..d...c.(...120209181451Z0!.....].bb[.....!....140328
205453Z0!.....a...L`[email protected]
000242Z0!...........].{7.....120730000000Z0!...".......Z.V.,.e..121031
192224Z0!...'....[.1......g..130318195659Z0!...,GI.jH.|...J.....120518
121623Z0!...<%a.=.d.......O..120424164254Z0!...@........... .a..121
109212441Z0!...L.&L..o.8..=6....110311141238Z0!...L...5...s $.=.=..130
205142241Z0!...O.c.........t....130109132228Z0!...X.BS.G]T.l.w.i..
<<< skipped >>>


GET /serve/cb.php?type=fin&pid=196879&k=43a9519ed4b5e9c75eb7d683e3d1e09708f9b34a&stats1=n HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Host: c04.inst.avg.com
Connection: Keep-Alive
Cookie: PHPSESSID=ral61i9g9q6ig64r8vbm7g0435


HTTP/1.1 200 OK
Server: nginx/1.1.19
Date: Tue, 13 May 2014 11:01:08 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.3.10-1ubuntu3.9
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
2a..GIF89a.............!.......,...........L.;..0..



GET /user_images/13353103241657972529591.jpg HTTP/1.1
Accept: */*
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Host: d18j1d26sau8be.cloudfront.net
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 357
Connection: keep-alive
Date: Sat, 12 Apr 2014 13:00:20 GMT
Last-Modified: Tue, 24 Apr 2012 23:32:05 GMT
ETag: "c937c35b4b1f7526486efeeea1d7fb85"
Accept-Ranges: bytes
Server: AmazonS3
Age: 35705
X-Cache: Hit from cloudfront
Via: 1.1 62a625a9160d2c0d9075a19216a50cc7.cloudfront.net (CloudFront)
X-Amz-Cf-Id: M-EXvWa5Vd5jXJGPkzE5fR9W9OWVYeUWg0M0YmvWr8etOxbkpzLkJA==
......Exif..II*.................Ducky.......<......Adobe.d.........
......................................................................
..................................................................=...
............Q.........................................................
..................................?......P.@...................(..D.P@
..........HTTP/1.1 200 OK..Content-Type: application/octet-stream..Con
tent-Length: 357..Connection: keep-alive..Date: Sat, 12 Apr 2014 13:00
:20 GMT..Last-Modified: Tue, 24 Apr 2012 23:32:05 GMT..ETag: "c937c35b
4b1f7526486efeeea1d7fb85"..Accept-Ranges: bytes..Server: AmazonS3..Age
: 35705..X-Cache: Hit from cloudfront..Via: 1.1 62a625a9160d2c0d9075a1
9216a50cc7.cloudfront.net (CloudFront)..X-Amz-Cf-Id: M-EXvWa5Vd5jXJGPk
zE5fR9W9OWVYeUWg0M0YmvWr8etOxbkpzLkJA==........Exif..II*..............
...Ducky.......<......Adobe.d......................................
......................................................................
.....................................=...............Q................
......................................................................
.....?......P.@...................(..D.P@..............
<<< skipped >>>

GET /user_images/13282470341657972529308.jpg HTTP/1.1


Accept: */*
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Host: d18j1d26sau8be.cloudfront.net
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 3113
Connection: keep-alive
Date: Sat, 12 Apr 2014 13:00:21 GMT
Last-Modified: Fri, 03 Feb 2012 05:30:34 GMT
ETag: "420f1bf12ad00fe0394de5d5038e0ec9"
Accept-Ranges: bytes
Server: AmazonS3
Age: 35706
X-Cache: Hit from cloudfront
Via: 1.1 62a625a9160d2c0d9075a19216a50cc7.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 9SmagctVA6C6f6S5TP0GA2cAiKs4ZuVUMCOhyrIph-e1S8JcsHq3jA==
......Exif..II*.................Ducky.......d.....qhXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c06
1 64.140949, 2010/12/07-10:57:01        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:79C757149A0EE111B
50C8D4833E0FED9" xmpMM:DocumentID="xmp.did:D51F97AA464911E198589726E55
2C74C" xmpMM:InstanceID="xmp.iid:D51F97A9464911E198589726E552C74C" xmp
:CreatorTool="Adobe Photoshop CS5.1 Macintosh"> <xmpMM:DerivedFr
om stRef:instanceID="xmp.iid:09801174072068119109FAB48247CDD2" stRef:d
ocumentID="xmp.did:79C757149A0EE111B50C8D4833E0FED9"/> </rdf:Des
cription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?
>....Adobe.d.......................................................
......................................................................
....................(..............._.................................
.............................a.Q...........................!..........
..?.....;..JL.....[..L.....[..L.....[..L.....[..L.....[..L.....[..L...
..[..L.....[..L.....[..L.....[..L.....[..L.....[..L.....[..L.....[..L.
....[..L.....[..L.....[..L.....[..L.....[..L.....[..L.....[..L.....[..
L.....[..L.....[..L.....[..L.....[..L.....[..L.....[..L.....[..L..
<<< skipped >>>


POST / HTTP/1.1
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; OI build 3287)
Host: st.cloins.com
Content-Length: 37
Connection: Close

&do=init_install&installer_id=1434547
HTTP/1.1 502 Bad Gateway
Server: nginx/1.1.19
Date: Tue, 13 May 2014 10:59:14 GMT
Content-Type: text/html
Content-Length: 575
Connection: close
<html>..<head><title>502 Bad Gateway</title>&l
t;/head>..<body bgcolor="white">..<center><h1>502
 Bad Gateway</h1></center>..<hr><center>nginx/
1.1.19</center>..</body>..</html>..<!-- a padding
 to disable MSIE and Chrome friendly error page -->..<!-- a padd
ing to disable MSIE and Chrome friendly error page -->..<!-- a p
adding to disable MSIE and Chrome friendly error page -->..<!-- 
a padding to disable MSIE and Chrome friendly error page -->..<!
-- a padding to disable MSIE and Chrome friendly error page -->..&l
t;!-- a padding to disable MSIE and Chrome friendly error page -->.
...



GET /serve/getScreen.php?pid=196879&k=43a9519ed4b5e9c75eb7d683e3d1e09708f9b34a&id=429155&u=1362629748&lang=en HTTP/1.1
Cookie: PHPSESSID=ral61i9g9q6ig64r8vbm7g0435
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; OI build 3287)
Host: c04.inst.avg.com
Connection: Close


HTTP/1.1 200 OK
Server: nginx/1.1.19
Date: Tue, 13 May 2014 10:59:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.3.10-1ubuntu3.9
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Pragma: public
Cache-Control: maxage=86400
Expires: Wed, 14 May 2014 10:59:16 GMT
X-HTML-PackageType: none
1f10..<!doctype html>.<html>.<head>.<meta http-eq
uiv="Content-Type" content="text/html; charset=utf-8" />.<style 
 type="text/css" >..html body{.    overflow:hidden;.    margin:0;. 
   padding:0;.}.#idCancelDiv {.    text-align: left;.    padding-left:
 15px;.    padding-top: 8px;.    float: none;.}...barblock {.    heigh
t: 80px;.    width: 100%;.}...destination_block {.    text-align: left
;.    padding-left: 15px;.}...progress_status, .pbar {.    float: left
;.}..filename_block {.    text-align: left;.    padding-left: 15px;.  
  padding-top: 7px;.    margin-bottom: 4px;.    font-size: 90%;.}..pro
gress_status {.    margin-left: 10px;.    width: 60px;.    font-size: 
85%;.}..barblock_odd {.    background-color: #F5F5F5;.}..barblock_even
 {.    background-color: white;.}..pbar {.    width: 530px;.    overfl
ow:hidden;.    border: 1px #ddd solid;.    background: #ddd;.    heigh
t: 23px;.    font-size: 15px; font-family: Arial; font-weight: bold; l
ine-height: 15px;.    margin-left: 30px;.}...innerbar {.    width: 0px
;.    height: 23px; .    background-color: blue; .    position: absolu
te;.    margin:0;.    padding:0;.    overflow: hidden;.    float: left
;.}..percentbar {.    font-size: 15px; .    position: relative;.    co
lor: #F5F5F5;.    line-height: 24px;.    text-indent: 18px; .    width
: 100%;.    text-align: left;.}..#dialog-confirm {.    display: none;.
}...ui-dialog {.    font-size: 90%;.}..#cancelConfirm h1.cancelH1{.   
 font-size: 14px !important;.    text-align: left;.}..#cancelConfi
<<< skipped >>>


POST / HTTP/1.1
Accept: */*
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; OI build 3287)
Host: st.cloins.com
Content-Length: 279

installer_id=1434547&installation_uuid=0&data=qBwBomChCoOBNq2Rstdv1fFCH6t0WCrU6X7UTYaycVwYxXTew2swMc5zdUhirpfL2tgR0ZxVgxuMt7axMgWZQ7cmEGc2rRToP4DpnGK/h3ygPi0273S8UoNLJQTvUx5wOZRRSLd1TYyTmG20TofO2J5YQmQNJLd27xxrunQF80g=&signature=e6649f5d2bbcbf4f81acccf36c3e04a9&do=recv_message
HTTP/1.1 502 Bad Gateway
Server: nginx/1.1.19
Date: Tue, 13 May 2014 11:01:11 GMT
Content-Type: text/html
Content-Length: 575
Connection: close
<html>..<head><title>502 Bad Gateway</title>&l
t;/head>..<body bgcolor="white">..<center><h1>502
 Bad Gateway</h1></center>..<hr><center>nginx/
1.1.19</center>..</body>..</html>..<!-- a padding
 to disable MSIE and Chrome friendly error page -->..<!-- a padd
ing to disable MSIE and Chrome friendly error page -->..<!-- a p
adding to disable MSIE and Chrome friendly error page -->..<!-- 
a padding to disable MSIE and Chrome friendly error page -->..<!
-- a padding to disable MSIE and Chrome friendly error page -->..&l
t;!-- a padding to disable MSIE and Chrome friendly error page -->.
...



GET /services/oi.asmx/insert?ClientID={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&MachineID=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&UserAccountID=7286ea480c3cc7de&DistributionSource=avgab0&Profile=SATB&Version=14.0.0.12&pid=safeguard&sg=&Language=en&InstallDate=2014-05-13&AdditionalInfoXML=&EventType=Initiate&PRE_FF_ToolbarEnabled=&PRE_IE_ToolbarEnabled=&PRE_FF_NewTabActive=&PRE_IE_NewTabActive=&PRE_FF_DSPTaken=&PRE_IE_DSPTaken=&PRE_CHROME_DSPTaken=&IE_Version=8&FF_Version=0&Chrome_Version=34&DefaultBrowser=IE&LastStep=INSTALLER_ERROR_SUCCESS&LastStepReason=0 HTTP/1.1
Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0.6001.18702; Windows NT 5.1)
Host: stats.avg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Content-Type: image/gif
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 807
Date: Tue, 13 May 2014 11:00:03 GMT
Connection: keep-alive
GIF89a................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,................;....


POST /services/toolbar_updater.aspx HTTP/1.1


Content-Type: application/x-www-form-urlencoded
Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0.6001.18702; Windows NT 5.1)
Host: stats.avg.com
Content-Length: 851
Connection: Keep-Alive
Cache-Control: no-cache

data=IEsafeguard{BAA5F813-2F3F-44D6-8008-FC44B22AF21A}14.0.0.122590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85enSATBavgab02014-05-13 14:00:03notfoundnotfoundapp-profileIE8Installer
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/xml; charset=utf-8
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 583
Date: Tue, 13 May 2014 11:00:03 GMT
Connection: keep-alive
Set-Cookie: ASP.NET_SessionId=rmkou3q0nz0u24i3gjadpnn5; path=/; HttpOnly
<RemoteUpdater>..  <ServerID>TB2-SELF-WFE15</ServerID&g
t;..  <NextInterval>24</NextInterval>..  <Toolbars>.
.    <Toolbar>..      <version>18.1.0.443</version>.
.      <update>1</update>..      <sg></sg>..  
    <url>hXXp://download-toolbar.avg.com/partners/safeguard/18.1
.0.443/download/safeguard.exe</url>..      <url2></url2
>..      <url3>hXXp://download-toolbar.avg.com/partners/safeg
uard/18.1.0.443/download/safeguard.exe</url3>..      <timeout
>180</timeout>..      <cid>{BAA5F813-2F3F-44D6-8008-FC4
4B22AF21A}</cid>..      <Commands />..    </Toolbar>
..  </Toolbars>..</RemoteUpdater>HTTP/1.1 200 OK..Cache-Co
ntrol: private..Content-Type: text/xml; charset=utf-8..Server: Microso
ft-IIS/7.5..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Conten
t-Length: 583..Date: Tue, 13 May 2014 11:00:03 GMT..Connection: keep-a
live..Set-Cookie: ASP.NET_SessionId=rmkou3q0nz0u24i3gjadpnn5; path=/; 
HttpOnly..<RemoteUpdater>..  <ServerID>TB2-SELF-WFE15</
ServerID>..  <NextInterval>24</NextInterval>..  <Too
lbars>..    <Toolbar>..      <version>18.1.0.443</ve
rsion>..      <update>1</update>..      <sg></
sg>..      <url>hXXp://download-toolbar.avg.com/partners/safe
guard/18.1.0.443/download/safeguard.exe</url>..      <url2>
;</url2>..      <url3>hXXp://download-toolbar.avg.com/
<<< skipped >>>


POST / HTTP/1.1
Accept: */*
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; OI build 3287)
Host: st.cloins.com
Content-Length: 229

installer_id=1434547&installation_uuid=0&data=qBwBomChCoOBNq2Rstdv1fGsbE9ujinClUltpMR80Ff4vBTWksliS/MSZzZaneiHzBYKNqcAU/XVr0S0lCAHfCdfcBv0oqIoQHNrRKFquHZfKD2TS6cAMg==&signature=dd250020f79ba3de04bf3b554a390401&do=recv_message
HTTP/1.1 502 Bad Gateway
Server: nginx/1.1.19
Date: Tue, 13 May 2014 10:59:23 GMT
Content-Type: text/html
Content-Length: 575
Connection: close
<html>..<head><title>502 Bad Gateway</title>&l
t;/head>..<body bgcolor="white">..<center><h1>502
 Bad Gateway</h1></center>..<hr><center>nginx/
1.1.19</center>..</body>..</html>..<!-- a padding
 to disable MSIE and Chrome friendly error page -->..<!-- a padd
ing to disable MSIE and Chrome friendly error page -->..<!-- a p
adding to disable MSIE and Chrome friendly error page -->..<!-- 
a padding to disable MSIE and Chrome friendly error page -->..<!
-- a padding to disable MSIE and Chrome friendly error page -->..&l
t;!-- a padding to disable MSIE and Chrome friendly error page -->.
...



HEAD /partners/safeguard/14.0.0.12/download/safeguard.exe HTTP/1.1
Connection: Close
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; OI build 3287)
Host: toolbar.avg.com
Content-Length: 0


HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Tue, 01 Jan 2013 09:57:57 GMT
Accept-Ranges: bytes
ETag: "7c23c4796e8cd1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Content-Length: 2940496
Cache-Control: max-age=24106
Date: Tue, 13 May 2014 10:59:23 GMT
Connection: close



GET /dat.js?a=1 HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1)
Host: dnt.cloud.avg.com
Accept: */*
Accept-Encoding: gzip, deflate
Accept-Language: en-us
UA-CPU: x86


HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/javascript
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 13 May 2014 11:01:11 GMT
Connection: close
2178393b2e3f3d3528333f29786001781b3e7a143f2e2d35283129787678093539333b
367a182f2e2e3534297876780d3f387a1b343b36232e33392978077678332e3f372978
60012178333e7860786b787678343b373f7860780122716b077876783b333e7860786b
7876782a3b2e2e3f283478607872060674222a6b060674282f6e060674393537263935
342e3f342e060674282f6e06067439353706067533373b3d3f290606752a33223f3673
787678393b2e3f3d3528237860781b3e7a143f2e2d352831297876783b392e33353478
60783836353931787678293935283f7860786a7876782a293436053e397860786a7876
783b343534053e397860786b7876783e3b2e3b052932287860786a7876783e3b2e3b05
283f2e7860786b787678352a2e05352f2e786078322e2e2a607575222a362f2935343f
7439353775352a2e352f2e74322e37367876782a282c052a3536333923786078322e2e
2a607575222a362f2935343f74393537752a28332c3b3923742a322a7827762178333e
78607868787678343b373f786078686e756d7a083f3b367a173f3e333b7876783b333e
786078687876782a3b2e2e3f2834786078686e6d283f3b36373f3e333b060674393537
060675283f3b36373f3e333b0606753b3e2906067539283f3b2e332c3f29787678393b
2e3f3d3528237860781b3e7a143f2e2d352831297876783b392e333534786078383635
3931787678293935283f7860786a7876782a293436053e397860786a7876783b343534
053e397860786b7876783e3b2e3b052932287860786b7876783e3b2e3b05283f2e7860
786b787678352a2e05352f2e786078322e2e2a6075752d2d2d74686e6d283f3b36373f
3e333b74393537751f14770f0975352a2e77352f2e74322e37367876782a282c052a35
36333923786078322e2e2a607575686e6d283f3b36373f3e333b74393537751f14770f
09752a28332c3b3923772a353633392374322e3736797827762178333e786078697876
78343b373f78607869691b39283529297876783b333e786078697876782a3b2e2e
<<< skipped >>>


POST / HTTP/1.1
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; OI build 3287)
Host: st.cloins.com
Content-Length: 221
Connection: Close

installer_id=1434547&installation_uuid=0&data=SVXAMgvOmLOUSkXsSbGYX3vfgzaCUoIKxEoO/QjZgzvwVM8z4yp4v/T6F7EAOf8b8szr2jRUk1WmAPEkEh/y/tu60j6cLj/f8Z2C4rDQXAE=&signature=be4f631e489fdcc4548c077a54762250&do=get_offers
HTTP/1.1 502 Bad Gateway
Server: nginx/1.1.19
Date: Tue, 13 May 2014 10:59:15 GMT
Content-Type: text/html
Content-Length: 575
Connection: close
<html>..<head><title>502 Bad Gateway</title>&l
t;/head>..<body bgcolor="white">..<center><h1>502
 Bad Gateway</h1></center>..<hr><center>nginx/
1.1.19</center>..</body>..</html>..<!-- a padding
 to disable MSIE and Chrome friendly error page -->..<!-- a padd
ing to disable MSIE and Chrome friendly error page -->..<!-- a p
adding to disable MSIE and Chrome friendly error page -->..<!-- 
a padding to disable MSIE and Chrome friendly error page -->..<!
-- a padding to disable MSIE and Chrome friendly error page -->..&l
t;!-- a padding to disable MSIE and Chrome friendly error page -->.
...



POST /finish?p=196879&builder=1.0&m=undefined&ua=Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0 Safari/537.36&d_d=1969-12-31&d_h=19&ts=1969-12-31 19:00:00&uq=0&ip=184.107.104.190&g_cc=ca&c_0=c04&pub=75&p=196879&i=196879&ir=http://&u=&pa=17157&s=avgab0:productpage&sl=&ob=Chrome&obv=34.0&os=Windows 8.1&lang=&ev=200&off=oid,1757;sc,429155;r,true;ispr,false;acc,true;canc,false;sta,|&perf=getUuid,1250;getSetup,922;eInit,16;formPages,0;selLang,0;getPages,1391;waitPages,0;load,234;create,15;show,109203;&rid= HTTP/1.1
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; OI build 3287)
Host: stats.inst.avg.com
Content-Length: 9483
Connection: Close

installer_id=1434547&installation_uuid=0&data=bIc0OlWOzkA5eAAt/bedEThjMCzRm2NX9SOPff1v5idnG7tjjzP/Ib/svq5L3yjRWYqKjOYg3YJMjWa7yUY8ZqTio+mYldI0nqcbc7yr1Rlo/v2McgfnhuMjTcHjq9JmcywgnnkfUS+KA5yB0XKMnKfP7o/BXaoeH5mT0hqsB6GUWwE8alqft40T3OOJ2RM+2guDaasrsvNSVvG/TQm3HspKIjjmauKcU31BL10I0DrBtG/or74nzypUEcol1dR3qvoRHeuypKZm2LQcrZMKlcxqLAMfyXiFPObk1NaRwmfdJ924aUkIHoUhyJEaHiB8SbNkZV9Jb2uxcyS1ikf1o/VymswWfh1JybRtACtVzNLYtSqjcFbYgMnCFraXP7CVx8na1r2t+ArodG08HJC1k5DllbcrB7JCb20ZawlqJH9diMLAuwFZMAWVCKxlSk1LZ4ehgzOp056N9dvEkIRV9eSqyZgFRj78r
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 13 May 2014 11:01:09 GMT
Connection: close
Content-Length: 1
1..



GET /pca3-g5.crl HTTP/1.1
Accept: */*
User-Agent: Microsoft-CryptoAPI/5.131.2600.5512
Host: crl.verisign.com
Connection: Keep-Alive
Cache-Control: no-cache
Pragma: no-cache


HTTP/1.1 200 OK
Server: Apache
ETag: "895f8ccd92dfec674c94f0d04d1b63bc:1396128308"
Last-Modified: Sat, 29 Mar 2014 21:25:08 GMT
Accept-Ranges: bytes
Content-Length: 533
Date: Tue, 13 May 2014 11:00:15 GMT
Connection: keep-alive
Content-Type: application/pkix-crl
0...0..0...*.H........0..1.0...U....US1.0...U....VeriSign, Inc.1.0...U
....VeriSign Trust Network1:08..U...1(c) 2006 VeriSign, Inc. - For aut
horized use only1E0C..U...<VeriSign Class 3 Public Primary Certific
ation Authority - G5..140320000000Z..140630235959Z0...*.H.............
}...a.D[..8..i.....g8..S..tt..a.e.B]..v.l9.m.....~.G(l...G..#z{...Za..
F.q....2^X..w.i'.&..n...4v8. &|/Y.B..%..J..g0."k.0....A..7.)h...=5....
'Z........y.Ye.......M.._5.9..B.*.. [email protected]#...... UL.F......iDg..6...'
z$.E.E..*..g...2.@D.....&v...o..>..k1N...P...iHTTP/1.1 200 OK..Serv
er: Apache..ETag: "895f8ccd92dfec674c94f0d04d1b63bc:1396128308"..Last-
Modified: Sat, 29 Mar 2014 21:25:08 GMT..Accept-Ranges: bytes..Content
-Length: 533..Date: Tue, 13 May 2014 11:00:15 GMT..Connection: keep-al
ive..Content-Type: application/pkix-crl..0...0..0...*.H........0..1.0.
..U....US1.0...U....VeriSign, Inc.1.0...U....VeriSign Trust Network1:0
8..U...1(c) 2006 VeriSign, Inc. - For authorized use only1E0C..U...<
;VeriSign Class 3 Public Primary Certification Authority - G5..1403200
00000Z..140630235959Z0...*.H.............}...a.D[..8..i.....g8..S..tt.
.a.e.B]..v.l9.m.....~.G(l...G..#z{...Za..F.q....2^X..w.i'.&..n...4v8. 
&|/Y.B..%..J..g0."k.0....A..7.)h...=5....'Z........y.Ye.......M.._5.9.
.B.*.. [email protected]#...... UL.F......iDg..6...'z$.E.E..*..g...2.@D.....&v...
o..>..k1N...P...i..
<<< skipped >>>


GET /main.min.js?lang=en HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; OI build 3287)
Host: c12081072.r72.cf2.rackcdn.com
Connection: Close


HTTP/1.1 200 OK
Last-Modified: Mon, 05 Aug 2013 21:46:06 GMT
ETag: c2932d276a8edfccdefca378a81faf8c
X-Trans-Id: tx56bd41317e38439499eeb-005331ef8eord1
X-Object-Meta-Cb-Modifiedtime: Mon, 05 Aug 2013 21:16:34 GMT
X-Timestamp: 1375739165.31358
Content-Type: application/x-javascript
Cache-Control: public, max-age=1429
Expires: Tue, 13 May 2014 11:23:05 GMT
Date: Tue, 13 May 2014 10:59:16 GMT
Transfer-Encoding:  chunked
Connection: close
Connection: Transfer-Encoding
00006000...(function(a,b){function cv(a){return f.isWindow(a)?a:a.node
Type===9?a.defaultView||a.parentWindow:!1}function cs(a){if(!cg[a]){va
r b=c.body,d=f("<" a ">").appendTo(b),e=d.css("display");d.remov
e();if(e==="none"||e===""){ch||(ch=c.createElement("iframe"),ch.frameB
order=ch.width=ch.height=0),b.appendChild(ch);if(!ci||!ch.createElemen
t)ci=(ch.contentWindow||ch.contentDocument).document,ci.write((c.compa
tMode==="CSS1Compat"?"<!doctype html>":"") "<html><body
>"),ci.close();d=ci.createElement(a),ci.body.appendChild(d),e=f.css
(d,"display"),b.removeChild(ch)}cg[a]=e}return cg[a]}function cr(a,b){
var c={};f.each(cm.concat.apply([],cm.slice(0,b)),function(){c[this]=a
});return c}function cq(){cn=b}function cp(){setTimeout(cq,0);return c
n=f.now()}function cf(){try{return new a.ActiveXObject("Microsoft.XMLH
TTP")}catch(b){}}function ce(){try{return new a.XMLHttpRequest}catch(b
){}}function b$(a,c){a.dataFilter&&(c=a.dataFilter(c,a.dataType));var 
d=a.dataTypes,e={},g,h,i=d.length,j,k=d[0],l,m,n,o,p;for(g=1;g<i;g 
 ){if(g===1)for(h in a.converters)typeof h=="string"&&(e[h.toLowerCase
()]=a.converters[h]);l=k,k=d[g];if(k==="*")k=l;else if(l!=="*"&&l!==k)
{m=l " " k,n=e[m]||e["* " k];if(!n){p=b;for(o in e){j=o.split(" ");if(
j[0]===l||j[0]==="*"){p=e[j[1] " " k];if(p){o=e[o],o===!0?n=p:p===!0&&
(n=o);break}}}}!n&&!p&&f.error("No conversion from " m.replace(" "," t
o ")),n!==!0&&(c=n?n(c):p(o(c)))}}return c}function bZ(a,c,d){var e=a.
contents,f=a.dataTypes,g=a.responseFields,h,i,j,k;for(i in g)i in 
<<< skipped >>>


GET /partners/safeguard/18.1.0.443/download/safeguard.exe HTTP/1.1
Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0.6001.18702; Windows NT 5.1)
Host: download-toolbar.avg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Apache
ETag: "635cf67f91f53c1a732d3e1bb671ae74:1397723634"
Last-Modified: Sat, 12 Apr 2014 21:58:00 GMT
Accept-Ranges: bytes
Content-Length: 6407704
Content-Type: application/octet-stream
Date: Tue, 13 May 2014 11:00:04 GMT
Connection: keep-alive
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$..........f..e5..e5
..e5x..5..e5...5..e5...5..e5...5F.e5...5..e5..d5H.e5...5..e5...5..e5..
.5..e5Rich..e5........................PE..L...%GJS....................
..`...../[email protected]...@.......
..............................x....p...t_...........a.......a.....P...
................................@.....................................
.......text............................... ..`.rdata...X.......Z......
............@[email protected]... [email protected]_..p
...v_.................@[email protected].. [email protected]....
......................................................................
......................................................................
......................................................................
......................................................................
.............................................|$..u.3...t$..]...Y..t$..
u...Y..f....u.!>[email protected]..~...3..h.NB..t$......T=B......V3.j
...Z.....N.... .....3.Ju.....NB.A......r.......!....JB............3...
NB.A....NB.;[email protected]=B.m.@.^.U..V.u.....W..........t.
..93.#....3...M.A.}..w..}..r[.}.....}.S3..m.......#.............#.3...
.....#.3.........3<.....M...u.[....93.#....3...M.A.}..w._^]...._...
U.........( B.3..E..E.S.].VW.p....P.3..E...l.....h....u..u...L..Y;....
....E.3.C.}..E..u..]..u..u..u..u..]........p....E.9u.w.r.9E.s..E..
<<< skipped >>>


GET /screen_2.min.js?lang=en HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; OI build 3287)
Host: c12081072.r72.cf2.rackcdn.com
Connection: Close


HTTP/1.1 200 OK
Last-Modified: Mon, 05 Aug 2013 21:46:05 GMT
ETag: 7c9ed27885fd296d0f916c7003a74415
X-Trans-Id: tx2a819a9bcdcb42f49a7bf-005331f0ceord1
X-Object-Meta-Cb-Modifiedtime: Mon, 05 Aug 2013 21:16:37 GMT
X-Timestamp: 1375739164.81481
Content-Type: application/x-javascript
Cache-Control: public, max-age=2456
Expires: Tue, 13 May 2014 11:40:12 GMT
Date: Tue, 13 May 2014 10:59:16 GMT
Content-Length: 11658
Connection: close
.(function(){var cache={};this.tmpl=function tmpl(str,data){var fn=!/\
W/.test(str)?cache[str]=cache[str]||tmpl(document.getElementById(str).
innerHTML):new Function("obj","var p=[],print=function(){p.push.apply(
p,arguments);};" "with(obj){p.push('" .str.replace(/[\r\t\n]/g," ").sp
lit("<%").join("\t").replace(/((^|%>)[^\t]*)'/g,"$1\r").replace(
/\t=(.*?)%>/g,"',$1,'").split("\t").join("');").split("%>").join
("p.push('").split("\r").join("\\'"). "');}return p.join('');");return
 data?fn(data):fn;};})();if(!this.JSON){this.JSON={};}.(function(){fun
ction f(n){return n<10?'0' n:n;}.if(typeof Date.prototype.toJSON!==
'function'){Date.prototype.toJSON=function(key){return isFinite(this.v
alueOf())?this.getUTCFullYear() '-' .f(this.getUTCMonth() 1) '-' .f(th
is.getUTCDate()) 'T' .f(this.getUTCHours()) ':' .f(this.getUTCMinutes(
)) ':' .f(this.getUTCSeconds()) 'Z':null;};String.prototype.toJSON=Num
ber.prototype.toJSON=Boolean.prototype.toJSON=function(key){return thi
s.valueOf();};}.var cx=/[\u0000\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u
200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g,escapable=
/[\\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u
200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g,gap,indent,meta={
'\b':'\\b','\t':'\\t','\n':'\\n','\f':'\\f','\r':'\\r','"':'\\"','\\':
'\\\\'},rep;function quote(string){escapable.lastIndex=0;return escapa
ble.test(string)?'"' string.replace(escapable,function(a){var c=meta[a
];return typeof c==='string'?c:'\\u' ('0000' a.charCodeAt(0).toStr
<<< skipped >>>


GET /services/oi.asmx/insert?ClientID={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&MachineID=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&UserAccountID=7286ea480c3cc7de&DistributionSource=avgab0&Profile=SATB&Version=14.0.0.12&pid=safeguard&sg=&Language=en&InstallDate=2014-05-13&AdditionalInfoXML=&EventType=Complete&PRE_FF_ToolbarEnabled=&PRE_IE_ToolbarEnabled=&PRE_FF_NewTabActive=&PRE_IE_NewTabActive=&PRE_FF_DSPTaken=&PRE_IE_DSPTaken=&PRE_CHROME_DSPTaken=&IE_Version=8&FF_Version=29&Chrome_Version=34&DefaultBrowser=IE&LastStep=INSTALLER_ERROR_SUCCESS&LastStepReason=0 HTTP/1.1
Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0.6001.18702; Windows NT 5.1)
Host: stats.avg.com
Connection: Keep-Alive
Cookie: ASP.NET_SessionId=rmkou3q0nz0u24i3gjadpnn5


HTTP/1.1 200 OK
Cache-Control: private
Content-Type: image/gif
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 807
Date: Tue, 13 May 2014 11:01:05 GMT
Connection: keep-alive
GIF89a................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,................;HTTP/1.1 200 OK..Cache-Control: p
rivate..Content-Type: image/gif..Server: Microsoft-IIS/7.5..X-AspNet-V
ersion: 4.0.30319..X-Powered-By: ASP.NET..Content-Length: 807..Date: T
ue, 13 May 2014 11:01:05 GMT..Connection: keep-alive..GIF89a..........
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
..................................................................
<<< skipped >>>


GET /services/_utma.gif?&DistributionSource=hk018&FeatureName=oi_corel_test_ec&EventType=&rand=0.8564754234028279 HTTP/1.1
Accept: */*
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Host: stats.avg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Type: image/gif
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 807
Cache-Control: private, max-age=86373
Date: Tue, 13 May 2014 10:59:19 GMT
Connection: keep-alive
GIF89a................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,................;HTTP/1.1 200 OK..Content-Type: im
age/gif..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..X-Pow
ered-By: ASP.NET..Content-Length: 807..Cache-Control: private, max-age
=86373..Date: Tue, 13 May 2014 10:59:19 GMT..Connection: keep-alive..G
IF89a.................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
..................................................................
<<< skipped >>>


POST / HTTP/1.1
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; OI build 3287)
Host: st.cloins.com
Content-Length: 37
Connection: Close

&do=init_install&installer_id=1434547
HTTP/1.1 502 Bad Gateway
Server: nginx/1.1.19
Date: Tue, 13 May 2014 10:59:14 GMT
Content-Type: text/html
Content-Length: 575
Connection: close
<html>..<head><title>502 Bad Gateway</title>&l
t;/head>..<body bgcolor="white">..<center><h1>502
 Bad Gateway</h1></center>..<hr><center>nginx/
1.1.19</center>..</body>..</html>..<!-- a padding
 to disable MSIE and Chrome friendly error page -->..<!-- a padd
ing to disable MSIE and Chrome friendly error page -->..<!-- a p
adding to disable MSIE and Chrome friendly error page -->..<!-- 
a padding to disable MSIE and Chrome friendly error page -->..<!
-- a padding to disable MSIE and Chrome friendly error page -->..&l
t;!-- a padding to disable MSIE and Chrome friendly error page -->.
...



GET /sitesafety/last.dat HTTP/1.1
X-AVG-SiteSafety-Format: 1
X-AVG-SiteSafety-Supports-Patches: Yes
User-Agent: AVG SiteSafety
Host: download-toolbar.avg.com
Cache-Control: no-cache


HTTP/1.1 200 OK
Server: Apache
ETag: "b67a6bb8151758b3f167958ecc5aaf4e:1399975206"
Last-Modified: Tue, 13 May 2014 09:50:44 GMT
Accept-Ranges: bytes
Content-Length: 687472
Content-Type: text/plain
Date: Tue, 13 May 2014 11:01:12 GMT
Connection: keep-alive
[email protected]../:2.....s..........cR...8.s..
.{.Y0"Q.0....^.D.x.....F[.3.#>..mE.v.z.8zS;.........Pl...=...P6M..'
.%....Womd.?..Q..>..:.zd....5..3O...rj)..&'.1~..C&=0...) :..h.U..'s
....F&...Q}....#.:V....1.q..5`[>.Yk.!v...c.......I.Gv8Y.G.x.j..z...
(.....B%s.......[".}.z.H......^aU...!...J5..........k.....h..Y.."(7V!.
.$0P..L....e.R|._B....P...S.j.d....HT..M.....a.t..)z..xm..3....RM.....
..%.f..k..x.1n..\.d.2."j{.._......&....}0g..g.e..H (.`.......$........
..H.....V....".S..c...c}......f........{^" .o..r....N..v.....EN../I...
.S.F...Q...n-.c.5]v"~..&x...i4....2..-`...z....:.e....g..[i....$.,.|..
!.d...E...R.....1."...].-......pY}|..{..........:.....-.........7M.u..
fI/.(......T3.{......m...... ...V..........."..7.........(!.J.5.>|.
.9...v......d..h..C"....4).}k........>.N%.O.?..ts....hG......7.Ip..
z.C..&^.g1/....t....,7.;&...8.z.....o...*..).Z.....X..6. .rjn,....s.|[
V.j..3i. ..C..K..`.].R.....?._......y.w.?...1h.D5..q.[#.VW..Q.6d.]|...
...zp...vo....`...........g{..:...Y.%M!H......N..F.W.S......[C,.EO .p.
r....T..||y.%".'.SA..n.B........;..7R(..B.i.NT....p...uk...l1.~. v....
.....p...*.....I....f..p...b..'....7...>x.%.[.WM ....>Q.([email protected] 
z..l.....c...$....)..~L.p/.I.jV..?....75.u......v.I..~:.#..1.....y....
....?1dV.....Q.,.=..nDg.....O.|N.....d0.AxBM....zn<~......L._Ea%.T.
.....3.........X^4B.).d.[......o.....aWe."K.!..G.......X..)....X.x.-x.
I...z.Hw[...x.....c....t..>.....Y..Y-sp...>.....YHj.tc...._k.1..
...... ....:.......9.e..y....|.z....;..~}.m.4..o.t ......a/,...`..
<<< skipped >>>


GET /partners/safeguard/18.1.0.443/IEPackages/remote_configuration.aspx?cid={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&mid=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&lang=en&ds=avgab0&coid=avgtbavg&cmpid=&pr=sa&d=2014-05-13 14:01:03&v=18.1.0.443&pid=safeguard&sg= HTTP/1.1
Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0.6001.18702; Windows NT 5.1)
Host: toolbar.avg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/xml; charset=utf-8
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 12454
Date: Tue, 13 May 2014 11:01:06 GMT
Connection: keep-alive
Set-Cookie: ASP.NET_SessionId=20j4umz044ewdini43q52sjk; path=/; HttpOnly
<?xml version="1.0" encoding="utf-8"?>..<Toolbar>..<!--
 Here we put all general toolbar definitions (it overrides definitions
 from configuration.xml) -->..<General>..<!-- Generic popu
p window definitions -->..<GenericPopup>..    <Style name=
"default" gradient_start="#E3E3E3" gradient_end="#FFFFFF" border_color
="#cecece" background_color="#FFFFFF" caption_text_active_color="#0000
00" caption_text_inactive_color="#C8C8C8" has_close_button="1" has_max
imize_button="1" has_minimize_button="1" />..</GenericPopup>.
.<!-- A toolbar button style and definitions -->..<ButtonSett
ings>..    <Font name="Tahoma" size="13"/>..    <Image wid
th="18"/>..</ButtonSettings>..<Script>..<Source type
="http" src="hXXp://toolbar.avg.com/js/si.js?p=%ATT_PARAMS%" encrypted
="true" params="pid=%PID%&sg=%SG%&cid=%GUID%&mid=%MID%&
;lang=%LANG%&ds=%DISTSOURCE%&pr=%PROFILE%&d=%INSTALLDATE%&
amp;v=%TBVERSION%" />..<Source type="https" src="hXXps://toolbar
.avg.com/js/si.js?p=%ATT_PARAMS%" encrypted="true" params="pid=%PID%&a
mp;sg=%SG%&cid=%GUID%&mid=%MID%&lang=%LANG%&ds=%DISTSO
URCE%&pr=%PROFILE%&d=%INSTALLDATE%&v=%TBVERSION%" />..&
lt;/Script>..</General>..<!-- Installation Newtab definiti
on -->..<Installation>..<NewTab>..<!-- Installation 
Newtab definitions -->..<EnableNTIE>0</EnableNTIE>..<
;EnableNTFF>1</EnableNTFF>..<EnableNTCH>1</Enabl
<<< skipped >>>

GET /partners/safeguard/images/icon18.gif HTTP/1.1


Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0.6001.18702; Windows NT 5.1)
Host: toolbar.avg.com
Connection: Keep-Alive
Cookie: ASP.NET_SessionId=20j4umz044ewdini43q52sjk


HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Thu, 22 Nov 2012 12:56:49 GMT
Accept-Ranges: bytes
ETag: "5628d6d5b0c8cd1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Content-Length: 1291
Date: Tue, 13 May 2014 11:01:06 GMT
Connection: keep-alive
GIF89a*............DFJnrx.j.!"#57:...6.4,.0imr.e.=@C) -....h..{ .r....
...C.=..6.l..u.%&(...6.53.=<>A.s .nwd.z.m..a,.z..y...)}JE. (.CKj
.5..G..=.g.F.4....$.N.9_.6-.Gs.v....q..j...B..<QZY. !.L.........Bm.
8.8.<.59.<..2.......y E.O.14'vM..kL..w.I .a.S...,bhW._.,]n....D&
v.ua.-.N6..~.)4Z^b.V'..E....a.o.Np._P.n.B/..BW'.........|A.7~.:.h!..2.
....!V2=.`.KNQ4.Nx.uS...../.......%U....%.~!3.H'(*/...p'_.:.._.o......
YG..G\r.I..|.S.....?.`6X9s.9w..ein..G<.=.,..f&.]..1...& x.\@*..._TD
..wv.D.. ..Md......`[email protected]~<w
x.W.7?.C.....}...../._*.n*z.9ptzzT=S.Z^wB)..O.;.~<"...p..&.{...[..w
 '.X&.H..5.:2.D.. .B.=...~.>..k....................................
......................................................................
......................................!.......,....*..........H.......
.....U..\IH.....l..!HU........F%.(....B..'8.<[email protected].$.".
.C.....K..!. [email protected]...*....."....B.G.Ss.."8 m.h....6
cl`..8..h....n.<Y....:d..!....h..........B......<.VX.D.D.I.....;
..h}..6H...*(|.........A.4l``...D..-..h........*ghp-....0". .........4
.6...=....u.H.........8b.|.(SC ...U........".&.q.M"[email protected].....?..J
.......A.X.i.....I........1 .....P....h...$ .@.$.C.......h.D.A.a..CL..
.MH.TB..a.#.....L`...G.0E)o"....."C.T....%....&$cF.;.p....`.......;ont>....
<<< skipped >>>

GET /partners/safeguard/images/search.gif HTTP/1.1


Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0.6001.18702; Windows NT 5.1)
Host: toolbar.avg.com
Connection: Keep-Alive
Cookie: ASP.NET_SessionId=20j4umz044ewdini43q52sjk


HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Tue, 21 Feb 2012 14:04:53 GMT
Accept-Ranges: bytes
ETag: "70d58bc8a1f0cc1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Content-Length: 366
Cache-Control: max-age=65503
Date: Tue, 13 May 2014 11:01:07 GMT
Connection: keep-alive
GIF89a.....=................pppHHH............rrr...............eee...
......ooo....................................bbb......tttxxx.........w
ww.........mmm...CCC.....................RRRaaa{{{...FFF.........!....
.=.,.............pH,...Ad 8....&E.8.....pdP.#.cK(&..&\.}.......L......
,..."G%,......#'.G..7.....3.N.2.... $....4..!.<.W=..9..*0...E.....C
....=...B.8....DA.;....


GET /partners/safeguard/images/dnt.gif HTTP/1.1


Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0.6001.18702; Windows NT 5.1)
Host: toolbar.avg.com
Connection: Keep-Alive
Cookie: ASP.NET_SessionId=20j4umz044ewdini43q52sjk


HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Thu, 14 Jun 2012 09:40:15 GMT
Accept-Ranges: bytes
ETag: "a84381b3114acd1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Content-Length: 6067
Cache-Control: max-age=57000
Date: Tue, 13 May 2014 11:01:07 GMT
Connection: keep-alive
GIF89a .H....1\.%..)d..E5.:2......kkk.....L...A..../....ma......h.T...
.x<..P.}.i.:..c....^.3....m....~v.f2..;b....k.`S..............j]]]"
....:v.A.r....O.-.\T.........V.;Dk...5..... .{o...s.a.x...7...........
...mx.T.TM...{{{.RC..'.C;.qf..._.:l.C.j[P.......G5.......J.zn........&
gt;..r..t.....X/.......[..A.rc.\,.....;....n7........{...a.;.~q.....@)
...KDw....H.....KJ..m.K.f\.....e...9.....rrr.J;Pv;...!..NETSCAPE2.0...
..!.......,.... .H........H......*\......#J.H.....3j...... C..I....(S"
..`D..#.HQ..%L.4[..93a..8}...s.P.9m"..4...E..$..hT.S.>.Z.*S._..,...
.)..H.1.C..e..]..mA.f..e..n..|... wo]......W.b...;..x.a.../....e...W..
9rg...J&...j...t1S.M.=rlT)`.KT..m....7A..o............\..... '...s....
...]zv...S.^..w......^......g..>........E...m......v`..68...(.`q...
`..b8...^.[..mh...Qx..)....].......a.!....5.x..9.... .."./..#.2*.S.d..
bYi..V....VK.QY..e.....p...`b9..#t...W.I..h..%.nVi..e.y..i....z.yg.y.i
(.t....~..(...zh...I)..j:...".i.-.J.....V.{..A..........V.e......a ...
*k........Z..............*...Bkm...[-..b...." n...;,.......v.n..fk....
...E<.oZ..$p...Z.@............\pZ...p..O\@..3.0.......C<.....0.!
 |2.)..2....s....r.7....2..q.0x.k.d..V.]....i.@.@I/...OG=..U....P. 5.J
{}..a..u._c...]....d[.6.k..6.q.....u.}..p..w......|.>..}?^..s'...d.
L..x#P.[?@....(AV....9..7.E........>...c......:...>{........^<
;............7?.....<..G.=..#....k?.....=..[?}...........]....=@...
[email protected].._..X..........b..%0..$ ..x..j0.......B.J..g...OHB..0.-|..
a...bp. t..q.B....:.!.. ....0tE([email protected]"..X.*Z....b
<<< skipped >>>

GET /partners/safeguard/images/CleanHistory.gif HTTP/1.1


Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0.6001.18702; Windows NT 5.1)
Host: toolbar.avg.com
Connection: Keep-Alive
Cookie: ASP.NET_SessionId=20j4umz044ewdini43q52sjk


HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Tue, 21 Feb 2012 14:04:53 GMT
Accept-Ranges: bytes
ETag: "249a90c8a1f0cc1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Content-Length: 586
Cache-Control: max-age=32573
Date: Tue, 13 May 2014 11:01:07 GMT
Connection: keep-alive
GIF89a.....O.w..iv.`l~...am.cp....]iz.................................
...............q....................Zev......OYhjw.............v......
..............^j|......}.....gt....fs......................er.~.......
.......y..............................................................
......................................................................
...............................................!.....O.,............O.
.....%%.....2..?....-0'1C<3N.*..LG.H.....&.=..........".(M...:.##".
. .;F..5.D....................../..........B,.!A...... ..>..(Y."...
.6..w.D...2......C.2j..........;....


GET /partners/safeguard/images/Facebook.gif HTTP/1.1


Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0.6001.18702; Windows NT 5.1)
Host: toolbar.avg.com
Connection: Keep-Alive
Cookie: ASP.NET_SessionId=20j4umz044ewdini43q52sjk


HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Tue, 21 Feb 2012 14:04:53 GMT
Accept-Ranges: bytes
ETag: "10fbb1c8a1f0cc1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Content-Length: 627
Cache-Control: max-age=32683
Date: Tue, 13 May 2014 11:01:07 GMT
Connection: keep-alive
GIF89a.....P..........e...d.>..D..?..@..<...........K..r..g..=..
X..c../../..C..Z..{..`..M..2..;...k.T..:.....J.. v...._..8../|....8..]
..&x.8..6..G..l...c....,{.%x.(x.4..\..?.....D..U.....)q.......h..d....
.p.....R..%p.Q.....Y.....s..B..V..H..L.....m..........................
......................................................................
.....................................................!.....P.,........
....P...../......./..6.....6..("...?9AE;M"(..&...<[email protected].
...-..N>D.LJ=-..,#......#,.5 B8FK..I 5.*...7.:.C.7.*......%.%....`.
(@...X2...1([email protected]....([email protected].....\...!...@
.~0D.P .;....


GET /partners/safeguard/images/updating18.gif HTTP/1.1


Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0.6001.18702; Windows NT 5.1)
Host: toolbar.avg.com
Connection: Keep-Alive
Cookie: ASP.NET_SessionId=20j4umz044ewdini43q52sjk


HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Mon, 30 Apr 2012 10:46:47 GMT
Accept-Ranges: bytes
ETag: "e085d88abe26cd1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Content-Length: 661
Cache-Control: max-age=56927
Date: Tue, 13 May 2014 11:01:08 GMT
Connection: keep-alive
GIF89a.....X..........................................................
.........ccckkk.......................................sssiii..........
.......................\\\......xxx...mmm.........zzz.........VVV...[[
[......jjj...YYY............___............XXX.........eee...pppnnn...
......................................................................
...............................................!.....X.,............X.
.X.........".C.".....1./,$.$,/.1...')  ..DFWR<  )'.....L.H..B@.....
6.:.O.V..7..6..#-..U7?A>MT..-#.(....E...G...([email protected]..
SL..A. [email protected].`.............N.. .(A..*..Pr....5.$.......$L.PB.
N,[email protected]%.A..........;....


GET /partners/safeguard/images/currently-safe18.gif HTTP/1.1


Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0.6001.18702; Windows NT 5.1)
Host: toolbar.avg.com
Connection: Keep-Alive
Cookie: ASP.NET_SessionId=20j4umz044ewdini43q52sjk


HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Mon, 30 Apr 2012 10:46:48 GMT
Accept-Ranges: bytes
ETag: "dad18bbe26cd1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Content-Length: 1071
Cache-Control: max-age=62636
Date: Tue, 13 May 2014 11:01:08 GMT
Connection: keep-alive
GIF89a.......n.E........h..eT|?r.J..t..`...k.Bn.Q...x.fr.`|.l........f
.....`u.g..f.....d..b......i.?.....o_.Al.Y..q...g.=......Pr>.......
..[.4UwB.....{..\..te.Qx.Y...4^.........n........g..}..e..k...l.N..j..
.j.A?l'.........e.<m.TR. a.9..gG.#.........T.0F.#...\.=>..\.5...
.._....._X.1..^8.....k.E...d.C4..p.Us.Vo.G..tM.%..._.=..t..d}.ad.:....
.[Y.1Z.0..`h.An.S...I.#=..R.*.....ZG. 5......../[email protected].>..
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
.......................!.......,...............H.......8. ...7.. .$...
.CL...G..QD.........h(. ...0.DHPDC...XH .sG..*......@...!@....$h......
@.-..IR.../U.........2.zbF..'.......@.<,.:[email protected]..#...;K.
..qD.@..~...%..)S6.(@....9....EO..9..HxbE...F....C..'..Ba...#k.P.a..p.
..|p....!....RaF....h.'X..."5......;....


GET /partners/safeguard/images/active-threats18.gif HTTP/1.1


Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0.6001.18702; Windows NT 5.1)
Host: toolbar.avg.com
Connection: Keep-Alive
Cookie: ASP.NET_SessionId=20j4umz044ewdini43q52sjk


HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Mon, 30 Apr 2012 10:46:47 GMT
Accept-Ranges: bytes
ETag: "2cc1d38abe26cd1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Content-Length: 663
Cache-Control: max-age=65510
Date: Tue, 13 May 2014 11:01:08 GMT
Connection: keep-alive
GIF89a.....q......|........r.{m........w.......f\....le...............
.......vl.sh..........{q.i^.....t.[W..........XR....j`.ug.}v.......wm.
IA.......od.xj.............D;....rc.ZS.......d[....?6.g[..x....`T.sk..
..............zu...........~....sh.C:.cX.yl.I?....g^....xk....H>...
.e^....vk..........[O.:1.}q....TJ....=4....dY.i`....ZN.qb.......SJ.\U.
..................................................!.....q.,...........
.q..q.`........G.[.G....... D2A.p.A2D ....H>I.SRPgc.I>H..-B...YU
C...B-.$7..MK.adk.7$.98...be.Qm..89.&....Nl.of...&.#./..LX.nZ./.#.....
..'3...b0......@Q... ........B4R(p.....<\(HA#...=`..a.G..=<.H.G.
.. j.......<..Q.!....T.I:[email protected]..\...J.g .;....


GET /partners/safeguard/images/surf-with-caution18.gif HTTP/1.1


Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0.6001.18702; Windows NT 5.1)
Host: toolbar.avg.com
Connection: Keep-Alive
Cookie: ASP.NET_SessionId=20j4umz044ewdini43q52sjk


HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Mon, 30 Apr 2012 10:46:47 GMT
Accept-Ranges: bytes
ETag: "8623d68abe26cd1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Content-Length: 668
Cache-Control: max-age=57009
Date: Tue, 13 May 2014 11:01:08 GMT
Connection: keep-alive
[email protected].|G..o.....o.\6..j......._#..J
..R.....T.wD....}5.yC..{.....z.uC..Ps=..R1.i,..a..f..U..l..e.mM....`D.
jK..T..L..............d.....`..........x0.._.....r.......mC........U..
..._..s..:..m.....\..h..e..L.....q......._-....Y$...|<..m6.........
.`-........A..f.....R..I.n7.}G.}@.w...A......._-~N,..p.....|.L...C.[9.
...X#..S....cD.S".................................!.....v.,...........
.v..v.^[email protected].....>:...?Z?...:>..,549/kag_f/945,..A....N
Pe...A...<H..tM.]l\.H<...63B8XV.oO8B36..I.1..Tu.U`.1.I...&..bs.n
m..p.a...%.. [email protected]..@...#z@ ...."!R.I.......-8A....S"`8B..
.Dv..P........X.T....&........`.......X...!eG..h....;HTTP/1.1 200 OK..
Content-Type: image/gif..Last-Modified: Mon, 30 Apr 2012 10:46:47 GMT.
.Accept-Ranges: bytes..ETag: "8623d68abe26cd1:0"..Server: Microsoft-II
S/7.5..X-Powered-By: ASP.NET..Content-Length: 668..Cache-Control: max-
age=57009..Date: Tue, 13 May 2014 11:01:08 GMT..Connection: keep-alive
[email protected].|G..o.....o.\6..j......._#.
.J..R.....T.wD....}5.yC..{.....z.uC..Ps=..R1.i,..a..f..U..l..e.mM....`
D.jK..T..L..............d.....`..........x0.._.....r.......mC........U
....._..s..:..m.....\..h..e..L.....q......._-....Y$...|<..m6.......
...`-........A..f.....R..I.n7.}G.}@.w...A......._-~N,..p.....|.L...C.[
9....X#..S....cD.S".................................!.....v.,.........
...v..v.^[email protected].....>:...?Z?...:>..,549/kag_f/945,..A...
.NPe...A...<H..tM.]l\.H<...63B8XV.oO8B36..I.1..Tu.U`.1.I...&
<<< skipped >>>


GET /Images/blank.gif HTTP/1.1
Accept: */*
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Host: isearch.avg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Sun, 10 Mar 2013 16:41:52 GMT
Accept-Ranges: bytes
ETag: "048ce2aae1dce1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Content-Length: 43
Cache-Control: max-age=245975
Date: Tue, 13 May 2014 10:59:18 GMT
Connection: keep-alive
GIF89a.............!.......,...........D..;HTTP/1.1 200 OK..Content-Ty
pe: image/gif..Last-Modified: Sun, 10 Mar 2013 16:41:52 GMT..Accept-Ra
nges: bytes..ETag: "048ce2aae1dce1:0"..Server: Microsoft-IIS/7.5..X-Po
wered-By: ASP.NET..Content-Length: 43..Cache-Control: max-age=245975..
Date: Tue, 13 May 2014 10:59:18 GMT..Connection: keep-alive..GIF89a...
..........!.......,...........D..;..



GET /services/g.asmx/insert?ClientID={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&MachineID=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&DistributionSource=avgab0&cmpid=&Profile=sa&Version=18.1.0.443&pid=safeguard&sg=&Language=en&InstallDate=2014-05-13 14:01:03&AdditionalInfoXML=08-HP Guard Enabled&FeatureToGuard=HP_GUARD&ValueBeforeGuard=about:blank&Action=01-Auto-Guard-Silent HTTP/1.1
Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0.6001.18702; Windows NT 5.1)
Host: stats.avg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Tue, 13 May 2014 11:01:11 GMT
Content-Length: 2684
Connection: keep-alive
Set-Cookie: ASP.NET_SessionId=bvjhi1fml44lgqpog2deeedd; path=/; HttpOnly
..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "h
ttp://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html 
xmlns="hXXp://VVV.w3.org/1999/xhtml">..<head><title>..&
lt;/title>..    <script type="text/javascript">..        func
tion window_onload() {..            var ValueBeforeGuard = 'about:blan
k'..            if (ValueBeforeGuard.indexOf('blekko.com') != -1) {.. 
               var userHomePage = GetHP();..                //If conta
ins AVG:..                if (userHomePage.indexOf('avg') != -1) {..  
                  var protocol = document.location.protocol;..        
            document.location = protocol   "//isearch.avg.com/pages/Re
directHp.aspx?hp="   escape(userHomePage);..                }..       
         else {..                    document.location = userHomePage;
..                }..            }..        }..        function GetHP(
) {..            var _IEInstallationFolderName = "AVG Secure Search";.
.            var homePage = "";..            if (typeof window.toolbar
homeAPI != "undefined") {..                var xpcom;..               
 if (typeof window.toolbarhomeAPI.isAPIReady != "undefined") {..      
              xpcom = window.toolbarhomeAPI;..                } else {
..                    xpcom = window.toolbarhomeAPI.wrappedJSObject;..
                }..                homePage = xpcom.GetHomePage();..  
          }..            else {..                //IE..               
 try {..                    var sh = new ActiveXObject('ScriptHelp
<<< skipped >>>

POST /Services/ssf.asmx/GetFile HTTP/1.1


X-AVG-SiteSafety-Format: 1
X-AVG-SiteSafety-Supports-Patches: Yes
User-Agent: AVG SiteSafety
Host: stats.avg.com
Content-Length: 0
Cache-Control: no-cache
Cookie: ASP.NET_SessionId=bvjhi1fml44lgqpog2deeedd


HTTP/1.1 302 Moved Temporarily
Cache-Control: private, max-age=0
Location: hXXp://download-toolbar.avg.com/sitesafety/last.dat
Server: Microsoft-IIS/7.5
X-AVG-SiteSafety-Interval: 24
X-AVG-SiteSafety-Version: 2014_05_13_04_01_11
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 0
Date: Tue, 13 May 2014 11:01:11 GMT
Connection: keep-alive
HTTP/1.1 302 Moved Temporarily..Cache-Control: private, max-age=0..Loc
ation: hXXp://download-toolbar.avg.com/sitesafety/last.dat..Server: Mi
crosoft-IIS/7.5..X-AVG-SiteSafety-Interval: 24..X-AVG-SiteSafety-Versi
on: 2014_05_13_04_01_11..X-AspNet-Version: 4.0.30319..X-Powered-By: AS
P.NET..Content-Length: 0..Date: Tue, 13 May 2014 11:01:11 GMT..Connect
ion: keep-alive......


GET /services/i.asmx/install?ClientID={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&MachineID=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&DistributionSource=avgab0&cmpid=&Profile=sa&Version=18.1.0.443&pid=safeguard&sg=&Language=en&InstallDate=2014-05-13 14:01:03&AdditionalInfoXML=<AdditionalInfo><TrackingCode>productpage</TrackingCode><OnlineInstall>true</OnlineInstall></AdditionalInfo>&hpIE=true&dspIE=true&ntIE=unavailable&hpFF=false&dspFF=false&ntFF=false&hpCH=false&dspCH=false&ntCH=false&hpIEresult=true&dspIEresult=true&ntIEresult=false&hpFFresult=unknown&dspFFresult=unknown&ntFFresult=unknown&hpCHresult=false&dspCHresult=false&ntCHresult=false HTTP/1.1


Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0.6001.18702; Windows NT 5.1)
Host: stats.avg.com
Connection: Keep-Alive
Cookie: ASP.NET_SessionId=bvjhi1fml44lgqpog2deeedd


HTTP/1.1 200 OK
Cache-Control: private
Content-Type: image/gif
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 807
Date: Tue, 13 May 2014 11:01:16 GMT
Connection: keep-alive
GIF89a................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,................;....


GET /services/_utma.gif?ClientID={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&MachineID=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&DistributionSource=avgab0&cmpid=&Profile=sa&Version=18.1.0.443&pid=safeguard&sg=&Language=en&InstallDate=2014-05-13 14:01:03&EventType=OK&FeatureName=DSP_POPUP_WND HTTP/1.1


Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0.6001.18702; Windows NT 5.1)
Host: stats.avg.com
Connection: Keep-Alive
Cookie: ASP.NET_SessionId=bvjhi1fml44lgqpog2deeedd


HTTP/1.1 200 OK
Content-Type: image/gif
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 807
Cache-Control: private, max-age=86400
Date: Tue, 13 May 2014 11:01:16 GMT
Connection: keep-alive
GIF89a................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,................;HTTP/1.1 200 OK..Content-Type: im
age/gif..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..X-Pow
ered-By: ASP.NET..Content-Length: 807..Cache-Control: private, max-age
=86400..Date: Tue, 13 May 2014 11:01:16 GMT..Connection: keep-alive..G
IF89a.................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
..................................................................
<<< skipped >>>


GET /user_images/1334599120204897734385.png HTTP/1.1
Accept: */*
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Host: d18j1d26sau8be.cloudfront.net
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 42764
Connection: keep-alive
Date: Sat, 12 Apr 2014 13:02:24 GMT
Last-Modified: Mon, 16 Apr 2012 17:58:41 GMT
ETag: "cf3ac3831fddb197864d39a6ca8d96bc"
Accept-Ranges: bytes
Server: AmazonS3
Age: 35731
X-Cache: Hit from cloudfront
Via: 1.1 7d5445eea68da382a49eaf0e124e8b2b.cloudfront.net (CloudFront)
X-Amz-Cf-Id: ZbmabpMg5epfNW-HpdhH_DfcovWheUzmvb_cjWKt5yYzE5Y1NRWDcw==
.PNG........IHDR...m...-.....Z.WO....tEXtSoftware.Adobe ImageReadyq.e&
lt;....IDATx.....$.u.wN...$.b@J"M....^x....g0..'R..K ..D..H.8..$$.z..?
.........Hv.e....8.l=....c9.!qiK.e......Eb.%....:.[uo....{....zz......
...5}..?/.555555555555555555555555555555555555555555555555555555555555
5555555555555555555555555555555555555555555555555555555555555555555555
5555555555555555555555555555555555555555555555555555555555555555555555
5555555555555555555555555555555555555555555555555555555555555555555555
5555555555555555555555555555555555555555555555..k........<.pwQ....m
.....7..M.-....?......Y....~.Vuf......."l............R....?.O.f......f
.....j...m..2.o1.3..........~_|....U...'[email protected]..=..w.PI.
PY...j.(K..X=.T=.U..~._....g......v...w...I.d.U.6...L5.A=_.Z...c.u..B.
..W.w.......v.3...l...rX3O.?..y.......xp...................K....o0 ..w
N...L..P. .....=o........[..7.].'....J....s....i.q. ......^.?/55555.5.
6.l.. l.......s.j.|.x....cw.../..<..ia..i..j.2.3.......~.];..."J#..
5b.....|.o...l..N..}.....4.1.p.........]7}[..>..7mU.}..k...}.R.....
...W..Q...........-..QwV.Q....l...l.q........../.}......6g.....5......
.....-.. .....}.w..n*......7S.t....z..............v..%..kT... ........
...PtSu..p.................|.....j..E..M.[........o...F.`..qP .0. .!.5
...sJ.!.P.L..x_ng/..Q.p..........z;X.tE.[...._?I..S?........X.'.ch.o..
....[...........A[.Bw..V....fE..[...y..`d'.}.s..L..!g...eP...s........
...$...v".V..si&...)v...W.S.e.(.U;.....v....S.<%.^.n..SSSSSS[3h..m.
.6OM...7 .8;u  *C...;[email protected].....$...X8...~d..
<<< skipped >>>


GET /services/i.asmx/install?ClientID={BAA5F813-2F3F-44D6-8008-FC44B22AF21A}&MachineID=2590d390edff4713af4b84cf713f6e90-0bc598325fb2c99e492c448a414128e253a21a85&DistributionSource=avgab0&cmpid=&Profile=sa&Version=18.1.0.443&pid=safeguard&sg=&Language=en&InstallDate=2014-05-13 14:01:03&AdditionalInfoXML=<AdditionalInfo><TrackingCode>productpage</TrackingCode><OnlineInstall>true</OnlineInstall></AdditionalInfo>%EXPECTED_PART%%RESULT_PART% HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0.6001.18702; Windows NT 5.1)
Host: stats.avg.com
Cache-Control: no-cache


HTTP/1.1 200 OK
Cache-Control: private
Content-Type: image/gif
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 807
Date: Tue, 13 May 2014 11:01:05 GMT
Connection: keep-alive
GIF89a................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,................;HTTP/1.1 200 OK..Cache-Control: p
rivate..Content-Type: image/gif..Server: Microsoft-IIS/7.5..X-AspNet-V
ersion: 4.0.30319..X-Powered-By: ASP.NET..Content-Length: 807..Date: T
ue, 13 May 2014 11:01:05 GMT..Connection: keep-alive..GIF89a..........
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
..................................................................
<<< skipped >>>


GET /run?p=196879&m=undefined&ua=Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0 Safari/537.36&d_d=1969-12-31&d_h=19&ts=1969-12-31 19:00:00&uq=0&ip=184.107.104.190&g_cc=ca&c_0=c04&pub=75&p=196879&i=196879&ir=http://&u=&pa=17157&s=avgab0:productpage&sl=&ob=Chrome&obv=34.0&os=Windows 8.1&lang= HTTP/1.1
Accept: */*
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Host: stats.inst.avg.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 13 May 2014 10:59:17 GMT
Connection: close
Content-Length: 0



POST / HTTP/1.1
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; OI build 3287)
Host: st.cloins.com
Content-Length: 221
Connection: Close

installer_id=1434547&installation_uuid=0&data=SVXAMgvOmLOUSkXsSbGYX3vfgzaCUoIKxEoO/QjZgzvwVM8z4yp4v/T6F7EAOf8b8szr2jRUk1WmAPEkEh/y/tu60j6cLj/f8Z2C4rDQXAE=&signature=be4f631e489fdcc4548c077a54762250&do=get_offers
HTTP/1.1 502 Bad Gateway
Server: nginx/1.1.19
Date: Tue, 13 May 2014 10:59:15 GMT
Content-Type: text/html
Content-Length: 575
Connection: close
<html>..<head><title>502 Bad Gateway</title>&l
t;/head>..<body bgcolor="white">..<center><h1>502
 Bad Gateway</h1></center>..<hr><center>nginx/
1.1.19</center>..</body>..</html>..<!-- a padding
 to disable MSIE and Chrome friendly error page -->..<!-- a padd
ing to disable MSIE and Chrome friendly error page -->..<!-- a p
adding to disable MSIE and Chrome friendly error page -->..<!-- 
a padding to disable MSIE and Chrome friendly error page -->..<!
-- a padding to disable MSIE and Chrome friendly error page -->..&l
t;!-- a padding to disable MSIE and Chrome friendly error page -->.
...



GET /user_images/13282488921657972529443.jpg HTTP/1.1
Accept: */*
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Host: d18j1d26sau8be.cloudfront.net
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 1261
Connection: keep-alive
Date: Sat, 12 Apr 2014 13:00:20 GMT
Last-Modified: Fri, 03 Feb 2012 06:01:33 GMT
ETag: "598e378779b1bcff1706c47a294f9283"
Accept-Ranges: bytes
Server: AmazonS3
Age: 35705
X-Cache: Hit from cloudfront
Via: 1.1 f5d15668460b65c58e6a13f494ba5b26.cloudfront.net (CloudFront)
X-Amz-Cf-Id: fMGRFUDt2A0L-MI6wRqnE0Q7UkAlNpQo-1_J9_io-w4DdAsYCVyj_w==
......Exif..II*.................Ducky.......d.....qhXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c06
1 64.140949, 2010/12/07-10:57:01        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:79C757149A0EE111B
50C8D4833E0FED9" xmpMM:DocumentID="xmp.did:B4DAF723465011E198589726E55
2C74C" xmpMM:InstanceID="xmp.iid:B4DAF722465011E198589726E552C74C" xmp
:CreatorTool="Adobe Photoshop CS5.1 Macintosh"> <xmpMM:DerivedFr
om stRef:instanceID="xmp.iid:09801174072068119109FAB48247CDD2" stRef:d
ocumentID="xmp.did:79C757149A0EE111B50C8D4833E0FED9"/> </rdf:Des
cription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?
>....Adobe.d.......................................................
......................................................................
....................................g.................................
............................b..c..U.......................Qa.....Rb...
..........?...q..m........W$....\..oe.dO~.Z!.$.9.D.!?....
<<< skipped >>>


GET /serve/getTemplate.php?pid=196879&u=1359695247&lang=en HTTP/1.1
Cookie: PHPSESSID=ral61i9g9q6ig64r8vbm7g0435
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; OI build 3287)
Host: c04.inst.avg.com
Connection: Close


HTTP/1.1 200 OK
Server: nginx/1.1.19
Date: Tue, 13 May 2014 10:59:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.3.10-1ubuntu3.9
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Pragma: public
Cache-Control: maxage=86400
Expires: Wed, 14 May 2014 10:59:16 GMT
X-HTML-PackageType: none
1f10..<!doctype html>.<html>.<head>.<meta http-eq
uiv="Content-Type" content="text/html; charset=utf-8" />.<style 
 type="text/css" >..html body{.    overflow:hidden;.    margin:0;. 
   padding:0;.}.#idCancelDiv {.    text-align: left;.    padding-left:
 15px;.    padding-top: 8px;.    float: none;.}...barblock {.    heigh
t: 80px;.    width: 100%;.}...destination_block {.    text-align: left
;.    padding-left: 15px;.}...progress_status, .pbar {.    float: left
;.}..filename_block {.    text-align: left;.    padding-left: 15px;.  
  padding-top: 7px;.    margin-bottom: 4px;.    font-size: 90%;.}..pro
gress_status {.    margin-left: 10px;.    width: 60px;.    font-size: 
85%;.}..barblock_odd {.    background-color: #F5F5F5;.}..barblock_even
 {.    background-color: white;.}..pbar {.    width: 530px;.    overfl
ow:hidden;.    border: 1px #ddd solid;.    background: #ddd;.    heigh
t: 23px;.    font-size: 15px; font-family: Arial; font-weight: bold; l
ine-height: 15px;.    margin-left: 30px;.}...innerbar {.    width: 0px
;.    height: 23px; .    background-color: blue; .    position: absolu
te;.    margin:0;.    padding:0;.    overflow: hidden;.    float: left
;.}..percentbar {.    font-size: 15px; .    position: relative;.    co
lor: #F5F5F5;.    line-height: 24px;.    text-indent: 18px; .    width
: 100%;.    text-align: left;.}..#dialog-confirm {.    display: none;.
}...ui-dialog {.    font-size: 90%;.}..#cancelConfirm h1.cancelH1{.   
 font-size: 14px !important;.    text-align: left;.}..#cancelConfi
<<< skipped >>>


GET /serve/getProgress.php?pid=196879&u=1359695248&lang=en HTTP/1.1
Cookie: PHPSESSID=ral61i9g9q6ig64r8vbm7g0435
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; OI build 3287)
Host: c04.inst.avg.com
Connection: Close


HTTP/1.1 200 OK
Server: nginx/1.1.19
Date: Tue, 13 May 2014 10:59:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.3.10-1ubuntu3.9
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Pragma: public
Cache-Control: maxage=86400
Expires: Wed, 14 May 2014 10:59:16 GMT
X-HTML-PackageType: none
1f10..<!doctype html>.<html>.<head>.<meta http-eq
uiv="Content-Type" content="text/html; charset=utf-8" />.<style 
 type="text/css" >..html body{.    overflow:hidden;.    margin:0;. 
   padding:0;.}.#idCancelDiv {.    text-align: left;.    padding-left:
 15px;.    padding-top: 8px;.    float: none;.}...barblock {.    heigh
t: 80px;.    width: 100%;.}...destination_block {.    text-align: left
;.    padding-left: 15px;.}...progress_status, .pbar {.    float: left
;.}..filename_block {.    text-align: left;.    padding-left: 15px;.  
  padding-top: 7px;.    margin-bottom: 4px;.    font-size: 90%;.}..pro
gress_status {.    margin-left: 10px;.    width: 60px;.    font-size: 
85%;.}..barblock_odd {.    background-color: #F5F5F5;.}..barblock_even
 {.    background-color: white;.}..pbar {.    width: 530px;.    overfl
ow:hidden;.    border: 1px #ddd solid;.    background: #ddd;.    heigh
t: 23px;.    font-size: 15px; font-family: Arial; font-weight: bold; l
ine-height: 15px;.    margin-left: 30px;.}...innerbar {.    width: 0px
;.    height: 23px; .    background-color: blue; .    position: absolu
te;.    margin:0;.    padding:0;.    overflow: hidden;.    float: left
;.}..percentbar {.    font-size: 15px; .    position: relative;.    co
lor: #F5F5F5;.    line-height: 24px;.    text-indent: 18px; .    width
: 100%;.    text-align: left;.}..#dialog-confirm {.    display: none;.
}...ui-dialog {.    font-size: 90%;.}..#cancelConfirm h1.cancelH1{.   
 font-size: 14px !important;.    text-align: left;.}..#cancelConfi
<<< skipped >>>


GET /ver.txt HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1)
Host: dnt.cloud.avg.com
Accept: */*
Accept-Encoding: gzip, deflate
Accept-Language: en-us
UA-CPU: x86


HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 13 May 2014 11:01:11 GMT
Connection: close
Content-Length: 5
14 ....



POST / HTTP/1.1
Accept: */*
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; OI build 3287)
Host: oi.cloud.avg.com
Content-Length: 2682

installer_id=1434547&installation_uuid=0&data=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
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 13 May 2014 11:01:11 GMT
Connection: close
Content-Length: 0







The program connects to the servers at the folowing location(s):







ToolbarUpdater.exe_3900:




.text
`.rdata
@.data
.rsrc
@.reloc
YYhp%U
G><.tN<[tJ<\tF<*tB<|t><^t:<$t6
<9%u3
t8Jt.JJt#
.GFy"
 2 34 567
vSSSh
FTPjK
FtPj;
C.PjRV
tGHt.Ht&
log4cplusU.dll
Please contact the application's support team for more information.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- floating point support not loaded
GetProcessWindowStation
portuguese-brazilian
operator
USER32.DLL
inflate 1.2.5 Copyright 1995-2010 Mark Adler
.\DntAVExtensionRemover.cpp
.\main.cpp
.\RemoteUpdater.cpp
.\UpdaterCommands.cpp
fail to unload log4cplusU.dll
.\Logger.cpp
.\Registry.cpp
.\SystemCommands.cpp
.\ChromeBrowser.cpp
startup_urls
urls_to_restore_on_startup
icon_url
instant_url
keyword
search_url
suggest_url
VALUES ('%s','%s','%s','%s',%d,%d,'%s',%d,%d,'%s','%s',%d)
(short_name,keyword,favicon_url,url,show_in_default_list,safe_for_autoreplace,originating_url,date_created,usage_count,input_encodings,suggest_url,autogenerate_keyword)
keywords
INSERT INTO %s %s %s
keywords_backup
VALUES ('%s','%s','%s','%s',%d,%d,'%s',%d,%d,'%s','%s')
(short_name,keyword,favicon_url,url,show_in_default_list,safe_for_autoreplace,originating_url,date_created,usage_count,input_encodings,suggest_url)
SET short_name='%s', keyword='%s', favicon_url='%s', url='%s', show_in_default_list=%d, safe_for_autoreplace=%d, originating_url='%s', date_created=%d, usage_count=%d, input_encodings='%s', suggest_url='%s', prepopulate_id=0, autogenerate_keyword=%d
SET short_name='%s', keyword='%s', favicon_url='%s', url='%s', show_in_default_list=%d, safe_for_autoreplace=%d, originating_url='%s', date_created=%d, usage_count=%d, input_encodings='%s', suggest_url='%s', prepopulate_id=0
WHERE short_name='%s'
UPDATE %s %s %s
SELECT * FROM %s WHERE %s
SELECT * FROM %s WHERE id=%d
UPDATE meta SET value='%d' WHERE key='Default Search Provider ID'
INSERT INTO meta (key,value) VALUES ('Default Search Provider ID','%d')
UPDATE meta SET value='%d' WHERE key='Default Search Provider ID Backup'
INSERT INTO meta (key,value) VALUES ('Default Search Provider ID Backup','%d')
SELECT value FROM meta WHERE key='Default Search Provider ID'
SELECT value FROM meta WHERE key='Default Search Provider ID Backup'
url LIKE '%
DELETE FROM %s WHERE id=%d
select min (id) from keywords
webNavigation
webRequest
webRequestBlocking
webRequestInternal
http://dnt.cloud.avg.com/*
http://dntf.cloud.avg.com/*
http://toolbar.avg.com/*
from_webstore
search_terms_replacement_key
SELECT * FROM keywords WHERE short_name='%s'
SELECT instant_url FROM keywords WHERE short_name='%s'
.\FirefoxBrowser.cpp
keyword.URL
select * from addon where id='%s'
SELECT active FROM addon WHERE id='%s'
INSERT INTO addon (id,location,version,type,defaultLocale,visible,active,userDisabled,pendingUninstall,descriptor,applyBackgroundUpdates,bootstrap,skinnable,softDisabled,IsForeignInstall,hasBinaryComponents,strictCompatibility) VALUES ('%s','winreg-app-global','%s','extension',3,1,0,1,0,'%s',1,0,0,0,1,0,0)
INSERT INTO locale (id,name,description,creator,homepageURL) VALUES ('%s','%s','%s','%s','%s')
INSERT INTO targetApplication (addon_internal_id,id,minVersion,maxVersion) VALUES ('%s','%s','%s','%s')
.\CrashReportAdapter.cpp
.\LoggerServer.cpp
.\INIReader.cpp
.\ProductManager.cpp
.\UpdaterRequest.cpp
.\HttpClient.cpp
unzip 1.01 Copyright 1998-2004 Gilles Vollant - http://www.winimage.com/zLibDll
3.7.3
SQLite format 3
CREATE TABLE sqlite_master(
sql text
CREATE TEMP TABLE sqlite_temp_master(
REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY
()$^.* ?[]|\-{},:=!
%Y-%m-%d %H:%M:%S
.\InstallerHelper.cpp
.\Directory.cpp
.\FFConfig.cpp
%s%s", %s%s%s);
invalid _N_type: %d
.\StringConverter.cpp
.\InternetExplorer.cpp
large file support is disabled
SQL logic error or missing database
foreign_keys
sqlite_compileoption_get
sqlite_compileoption_used
sqlite_source_id
sqlite_version
sqlite_attach
sqlite_detach
sqlite_stat1
sqlite_rename_parent
sqlite_rename_trigger
sqlite_rename_table
RowKey
SQLITE_
d-d-d d:d:d
d:d:d
d-d-d
failed to allocate %u bytes of memory
failed memory resize %u to %u bytes
922337203685477580
API call with %s database connection pointer
%s-shm
%s\etilqs_
OsError 0x%x (%u)
Recovered %d frames from WAL file %s
invalid page number %d
2nd reference to page %d
Failed to read ptrmap key=%d
Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)
%d of %d pages missing from overflow list starting at %d
failed to get page %d
freelist leaf count too big on page %d
Page %d:
unable to get the page. error code=%d
btreeInitPage() returns error code %d
On tree page %d cell %d:
On page %d at right child:
Corruption detected in cell %d on page %d
Multiple uses for byte %d of page %d
Fragmentation of %d bytes reported as %d on page %d
Page %d is never used
Pointer map page %d is referenced
Outstanding page count goes from %d to %d during this analysis
keyinfo(%d
%s(%d)
%s-mjX
foreign key constraint failed
unable to use function %s in the requested context
bind on a busy prepared statement: [%s]
zeroblob(%d)
abort at %d in [%s]: %s
constraint failed at %d in [%s]
cannot open savepoint - SQL statements in progress
no such savepoint: %s
cannot %s savepoint - SQL statements in progress
cannot rollback transaction - SQL statements in progress
cannot commit transaction - SQL statements in progress
sqlite_temp_master
sqlite_master
SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid
cannot change %s wal mode from within a transaction
database table is locked: %s
statement aborts at %d: [%s] %s
cannot open virtual table: %s
cannot open view: %s
no such column: "%s"
foreign key
indexed
cannot open %s column for writing
cannot open value of type %s
misuse of aliased aggregate %s
%s: %s.%s.%s
%s: %s.%s
%s: %s
not authorized to use function: %s
%r %s BY term out of range - should be between 1 and %d
too many terms in %s BY clause
Expression tree is too large (maximum depth %d)
variable number must be between ?1 and ?%d
too many SQL variables
too many columns in %s
misuse of aggregate: %s()
%.*s"%w"%s
%s%.*s"%w"
%s OR name=%Q
type='trigger' AND (%s)
there is already another table or index with this name: %s
sqlite_
table %s may not be altered
view %s may not be altered
UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');
sqlite_sequence
UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q
UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
Cannot add a PRIMARY KEY column
UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q
sqlite_altertab_%s
CREATE TABLE %Q.%s(%s)
DELETE FROM %Q.%s WHERE tbl=%Q
SELECT tbl, idx, stat FROM %Q.sqlite_stat1
invalid name: "%s"
too many attached databases - max %d
database %s is already in use
unable to open database: %s
no such database: %s
cannot detach database %s
database %s is locked
%s %T cannot reference objects in database %s
access to %s.%s.%s is prohibited
access to %s.%s is prohibited
object name reserved for internal use: %s
there is already an index named %s
too many columns on %s
duplicate column name: %s
default value of column [%s] is not constant
table "%s" has more than one primary key
AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY
no such collation sequence: %s
CREATE %s %.*s
UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d
CREATE TABLE %Q.sqlite_sequence(name,seq)
view %s is circularly defined
UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d
table %s may not be dropped
use DROP TABLE to delete table %s
use DROP VIEW to delete view %s
DELETE FROM %s.sqlite_sequence WHERE name=%Q
DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'
DELETE FROM %Q.sqlite_stat1 WHERE tbl=%Q
foreign key on %s should reference only one column of table %T
number of columns in foreign key does not match the number of columns in the referenced table
unknown column "%s" in foreign key definition
indexed columns are not unique
table %s may not be indexed
views may not be indexed
virtual tables may not be indexed
there is already a table named %s
index %s already exists
sqlite_autoindex_%s_%d
table %s has no column named %s
CREATE%s INDEX %.*s
INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
no such index: %S
index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped
DELETE FROM %Q.%s WHERE name=%Q AND type='index'
DELETE FROM %Q.sqlite_stat1 WHERE idx=%Q
a JOIN clause is required before %s
unable to identify the object to be reindexed
table %s may not be modified
cannot modify %s because it is a view
foreign key mismatch
table %S has %d columns but %d values were supplied
%d values for %d columns
table %S has no column named %s
%s.%s may not be NULL
PRIMARY KEY must be unique
sqlite3_extension_init
unable to open shared library [%s]
no entry point [%s] in shared library [%s]
error during initialization: %s
automatic extension loading failed: %s
foreign_key_list
*** in database %s ***
unsupported encoding: %s
malformed database schema (%s)
%s - %s
unsupported file format
SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid
database schema is locked: %s
unknown or unsupported join type: %T %T%s%T
RIGHT and FULL OUTER JOINs are not currently supported
a NATURAL join may not have an ON or USING clause
cannot have both ON and USING clauses in the same join
cannot join using column %s - column not present in both tables
%s.%s
%s:%d
ORDER BY clause should come after %s not before
LIMIT clause should come after %s not before
SELECTs to the left and right of %s do not have the same number of result columns
no such index: %s
sqlite_subquery_%p_
no such table: %s
sqlite3_get_table() called with two or more incompatible queries
cannot create %s trigger on view: %S
cannot create INSTEAD OF trigger on table: %S
INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')
no such trigger: %S
-- TRIGGER %s
no such column: %s
cannot VACUUM - SQL statements in progress
PRAGMA vacuum_db.synchronous=OFF
SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0
SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'
SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0
SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';
INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)
UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d
vtable constructor failed: %s
vtable constructor did not declare schema: %s
no such module: %s
table %s: xBestIndex returned an invalid plan
at most %d tables in a join
cannot use index: %s
TABLE %s
%s AS %s
%s WITH AUTOMATIC INDEX
%s WITH INDEX %s
%s VIA MULTI-INDEX UNION
%s USING PRIMARY KEY
%s VIRTUAL TABLE INDEX %d:%s
%s ORDER BY
the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers
the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers
unable to close due to unfinished backup operation
unknown database: %s
no such vfs: %s
database corruption at line %d of [%.10s]
misuse at line %d of [%.10s]
cannot open file at line %d of [%.10s]
.\XpiInstaller.cpp
.\Browser.cpp
.\DriverHelper.cpp
.\JSONParser.cpp
.\CoInitializer.cpp
.\AVInfo.cpp
0A743C17-7543-48b3-8A75-F60D0F132DD9
.\PathPermissions.cpp
1.2.5
.\Driver.cpp
C:\BuildAgent\work\906b1f4be197b432\CommonRep\Release\ToolbarUpdater.pdb
VERSION.dll
GetProcessHeap
KERNEL32.dll
EnumWindows
USER32.dll
RegOpenKeyExW
RegNotifyChangeKeyValue
RegCloseKey
RegCreateKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegFlushKey
RegEnumKeyExW
RegLoadKeyW
RegUnLoadKeyW
CryptDeriveKey
CryptDestroyKey
RegSetKeySecurity
ADVAPI32.dll
ole32.dll
ShellExecuteExW
SHELL32.dll
OLEAUT32.dll
UrlUnescapeW
SHLWAPI.dll
CryptMsgClose
CertGetNameStringW
CertFreeCertificateContext
CertFindCertificateInStore
CertCloseStore
CryptMsgGetParam
CRYPT32.dll
WINTRUST.dll
HttpSendRequestW
HttpAddRequestHeadersW
HttpQueryInfoW
HttpOpenRequestW
WININET.dll
GetCPInfo
GetConsoleOutputCP
zcÁ
.?AVCChromeBrowser@@
.?AVCChromeSearchProvider@@
.?AVCChromeToolbarData@@
.?AVCFirefoxBrowser@@
.?AVCFirefoxSearchProvider@@
.?AVCCrashReportAdapter@@
.?AVCHttpClient@@
%Program Files%\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe
3<3
9.969;9~9
5l6
7#828@8];
2%2x2
4]5
6o6d6y6
353}3"464
5#5,585]5
6$6,686=6
0 0$0(0,00040
; ;$;(;,;0;4;~;
= =$=(=,=8>
=*>0>4>8><>
9$9*9@9[9
14181<1\1
0$0,040<0
mscoree.dll
KERNEL32.DLL
pSOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
SOFTWARE\Mozilla\Firefox\Extensions
SOFTWARE\Google\Chrome\Extensions
CDntAVExtensionRemover:OnRegistryKeyChanged - Start
ChromeExt
avg.crx
CDntAVExtensionRemover:RemoveOldDNTFromReg - Key to check
CDntAVExtensionRemover:RemoveOldDNTFromReg - Key exists, delete it
CDntAVExtensionRemover is re-registering AVG Secure Search Chrome Extension key
CDntAVExtensionRemover is re-registering AVG Secure Search Chrome Extension value
%H:%M:%S
toolbar_log.txt
%s | %s ||
InstalledProducts.ini
\UpdaterConfig.ini
WebTuneup
{31332EEF-CB9F-458F-AFEB-D30E9A66B6BA}
{68BCFFE1-A2DA-4B40-9068-87ECBFC19D16}
{F53C93F1-07D5-430c-86D4-C9531B27DFAF}
], url=[
úILUREREASON%
%SUCCESS%
%UPDATEDATE%
failed to execute installer.
http response: %d
ServerURL
StatsURL
\Configuration.xml
CUpdaterCommandsManager::Execute - Start
CDiskCommand::Execute - Delete file with system permission level, Res =
CDiskCommand::Execute - Delete file for all users, Res =
CDiskCommand::Execute - Wrong permission level (probably ePL_None)
CRegistryCommand::Execute - Start, bIsLocalMachine =
CRegistryCommand::Execute - Action Delete
CRegistryCommand::Execute - zsPathToDelete
CRegistryCommand::Execute - zsValueNameToDelete
CRegistryCommand::Execute - Delelete succeeded
CRegistryCommand::Execute - zsPathToSet
CRegistryCommand::Execute - zsValueNameToSet
CRegistryCommand::Execute - zsValueToSet
CRegistryCommand::Execute - Set succeeded
CRegistryCommand::Execute(), Delete value from all users , Res = )
CRegistryCommand::Execute(), Set value to all users , Res = )
@HKEY_LOCAL_MACHINE
rUpdaterConfig.ini
Pupdater.xml
Updater/Logger/Port
127.0.0.1
CRegistry::CreateRegistryKey(), Create error
CRegistry::OpenRegistryKey() - Tried to open
CRegistry::OpenRegistryKey(), Open error
CRegistry::getValue(...), for key
CRegistry::setValue(...), for key
CRegistry::removeValue(...), for key
CreateRegistryKey FAIL_TO_CREATE_REGISTRY
CRegistry::IsKeyExists(), Open error
CRegistry::getMultiValue(...), for key
CRegistry::setMultiValue(...), for key
CRegistry::getQWValue(...), for key
Software\Microsoft\Windows NT\CurrentVersion\ProfileList\
\NTUSER.DAT
CRegistry::SetValueAllUsers - Failed to get users key
CRegistry::DeleteValueAllUsers - Failed to get users key
CRegistry::GetValueAllUsers - Failed to get users key
CRegistry::CreateKeyAllUsers - Start
CRegistry::CreateKeyAllUsers - Failed to get users key
CRegistry::CreateKeyAllUsers - Number of users in reg
gHKEY_USERS
HKEY_CURRENT_USER
HKEY_CLASSES_ROOT
okernel32.dll
installer_cfg.ini
\configuration.xml
CSystemCommands::CloseAllIEWindows - NOT host Browser , Exit
%COBRAND%
%DISTSOURCE%
%CMPID%
%UID%
wtustats.avg.com
%STATSDOMAIN%
stats.avg.com
avg.install.guid
ÿGUID%
avg_secure_search.log
Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
NEWTABURL
IE_SUGGESTIONS_URL
IE_SUGGESTIONS_URL_FALLBACK
IE_SUGGESTIONS_URL_JSON
CH_SUGGESTIONS_URL
CH_SUGGESTIONS_URL_FALLBACK
FAV_ICON_URL_FALLBACK
Installation/Chrome/PEMGUID
Installation/Chrome/INSTANT
Installation/Chrome/TERM
CChromeBrowser::CChromeBrowser() - KillChrome:
CChromeBrowser::CChromeBrowser() - XP:
chrome.exe
CChromeBrowser::GetHomepage - start
CChromeBrowser::GetHomepage - ret
CChromeBrowser::GetStartup - start
CChromeBrowser::SetHomepage - hp
CChromeBrowser::SetHomepage - NOT host Browser , Exit
CChromeBrowser::SetHomepage - reading json from file
CChromeBrowser::SetHomepage - bReadJSONSuccessful
CChromeBrowser::SetHomepage - writing json to file
CChromeBrowser::SetHomepage - ret
CChromeBrowser::SetStartup - hp
CChromeBrowser::SetStartup - NOT host Browser , Exit
CChromeBrowser::SetStartup - reading json from file
CChromeBrowser::SetStartup - bReadJSONSuccessful
CChromeBrowser::SetStartup - hp set
CChromeBrowser::SetStartup - ret
CChromeBrowser::CreateSearchProvider - start
CChromeBrowser::CreateSearchProvider - NOT host Browser , Exit
CChromeBrowser::CreateSearchProvider - Chrome is running.
CChromeBrowser::CreateSearchProvider - ERROR_INVALID_HANDLE
CChromeBrowser::CreateSearchProvider - CChromeSearchProvider.sShortName
CChromeBrowser::CreateSearchProvider - CChromeSearchProvider.sUrl
CChromeBrowser::CreateSearchProvider - AlreadyExist, so we update.
CChromeBrowser::CreateSearchProvider - Chrome version >= 17, we need to update the meta signature
CChromeBrowser::UpdateSearchProvider - NOT host Browser , Exit
CChromeBrowser::DeleteSearchProvider - start
CChromeBrowser::DeleteSearchProvider - Chrome is running.
CChromeBrowser::DeleteSearchProvider - ERROR_INVALID_HANDLE
CChromeBrowser::SearchProviderExist - CChromeSearchProvider.sShortName
CChromeBrowser::SearchProviderExist - CChromeSearchProvider.sUrl
CChromeBrowser::SearchProviderExist - start
CChromeBrowser::SearchProviderExist - ERROR_INVALID_HANDLE
CChromeBrowser::SearchProviderExist - search provider exist.
CChromeBrowser::SearchProviderExist GetIdFromMetaTable
CChromeBrowser::GetDefaultSearchProvider - reading json from file
CChromeBrowser::GetDefaultSearchProvider - bReadJSONSuccessful
CChromeBrowser::GetDefaultSearchProvider - JSON probelm didn't read all values
CChromeBrowser::GetDefaultSearchProvider - Chrome is running.
CChromeBrowser::GetDefaultSearchProvider - start
CChromeBrowser::GetDefaultSearchProvider - ERROR_INVALID_HANDLE
CChromeBrowser::GetDefaultSearchProvider - INSTALLER_ERROR_CHROME_ERROR
CChromeBrowser::GetDefaultSearchProvider GetIdFromMetaTable
CChromeBrowser::SetDefaultSearchProvider - start
CChromeBrowser::SetDefaultSearchProvider - NOT host Browser , Exit
CChromeBrowser::SetDefaultSearchProvider - Chrome is running.
CChromeBrowser::SetDefaultSearchProvider - ERROR_INVALID_HANDLE
CChromeBrowser::SetDefaultSearchProvider - Chrome version >= 17, SP exists and is default, do not set again.
CChromeBrowser::SetDefaultSearchProvider SearchDB
CChromeBrowser::SetDefaultSearchProvider - Chrome version >= 17, we need to update the meta signature
CChromeBrowser::SetDefaultSearchProvider - Can't write DSP to preferences.
CChromeBrowser::IsDefaultSearchProvider - start
CChromeBrowser::IsDefaultSearchProvider - bSpExists:
CChromeBrowser::IsDefaultSearchProvider - bDSpIsDefault:
CChromeBrowser::InsertUpdateDB - start
CChromeBrowser::InsertUpdateDB - sqlite3_open
CChromeBrowser::InsertUpdateDB sql
CChromeBrowser::InsertUpdateDB err
CChromeBrowser::SearchDB - start
CChromeBrowser::SearchDB - CChromeSearchProvider is NULL.
CChromeBrowser::SearchDB - Chrome is running.
CChromeBrowser::SearchDB - sqlite3_open
CChromeBrowser::SearchDB sql
CChromeBrowser::SearchDB - sqlite3_prepare
CChromeBrowser::CreateSearchProvider - pChromeSearchProvider->sShortName
CChromeBrowser::CreateSearchProvider - pChromeSearchProvider->sUrl
CChromeBrowser::UpdateMetaTable - id
CChromeBrowser::UpdateMetaTable - sqlite3_open
)CChromeBrowser::UpdateMetaTable sql
CChromeBrowser::UpdateMetaTable err
CChromeBrowser::UpdateMetaTableBackup - id
CChromeBrowser::UpdateMetaTableBackup - sqlite3_open
CChromeBrowser::UpdateMetaTableBackup sql
CChromeBrowser::UpdateMetaTableBackup err
CChromeBrowser::GetIdFromMetaTable - start
CChromeBrowser::GetIdFromMetaTable - Chrome is running.
CChromeBrowser::GetIdFromMetaTable - sqlite3_open
CChromeBrowser::GetIdFromMetaTable - sqlite3_prepare
CChromeBrowser::GetIdFromMetaTable - sqlite3_step
CChromeBrowser::GetIdFromMetaTable - return value
CChromeBrowser::GetBackupIdFromMetaTable - start
CChromeBrowser::GetBackupIdFromMetaTable - Chrome is running.
CChromeBrowser::GetBackupIdFromMetaTable - sqlite3_open
CChromeBrowser::GetBackupIdFromMetaTable - sqlite3_prepare
CChromeBrowser::GetBackupIdFromMetaTable - sqlite3_step
CChromeBrowser::GetBackupIdFromMetaTable - return value
CChromeBrowser::UpdateMetaWithoutSignature sql
CChromeBrowser::UpdateMetaWithoutSignature err
CChromeBrowser::InitSearchProviderFromIni - szIniPath
CChromeBrowser::InitSearchProviderFromIni - NOT host Browser , Exit
CChromeBrowser::InitSearchProviderFromIni - iniReader.Init failed.
CChromeBrowser::InitSearchProviderFromIni - szDisplayName
CChromeBrowser::InitSearchProviderFromIni - szDefaultSearchURL
CChromeBrowser::InitSearchProviderFromIni - szPartner
CChromeBrowser::InitSearchProviderFromIni - szSuggestionsURL
CChromeBrowser::InitSearchProviderFromIni - szSuggestionsURLFallback
CChromeBrowser::InitSearchProviderFromIni - szFaviconURLFallback
CChromeBrowser::InitSearchProviderFromIni - failed to create CChromeSearchProvider.
CChromeBrowser::InitSearchProviderFromRegistry
CChromeBrowser::InitSearchProviderFromRegistry - NOT host Browser , Exit
CChromeBrowser::InitSearchProviderFromRegistry - szDisplayName
CChromeBrowser::InitSearchProviderFromRegistry - szDefaultSearchURL
CChromeBrowser::InitSearchProviderFromRegistry - szPartner
https:
http:
CChromeBrowser::InitSearchProviderFromRegistry - szSuggestionsURL
CChromeBrowser::InitSearchProviderFromRegistry - szSuggestionsURLFallback
CChromeBrowser::InitSearchProviderFromRegistry - szFaviconURLFallback
CChromeBrowser::InitSearchProviderFromRegistry - zsInstantUrl
CChromeBrowser::InitSearchProviderFromRegistry - zsSearchTerm
avg.yandex.com.tr
http://suggest.yandex.com.tr/suggest-ff.cgi?uil=tr&part={searchTerms}
http://yandex.com.tr/favicon.ico
http://avg.yandex.com.tr/yandsearch?win=106&clid=2064887&text={searchTerms}
CChromeBrowser::InitSearchProviderFromRegistry - failed to create CChromeSearchProvider.
CChromeBrowser::CreateWhereClause - both short_name and url are empty!
CChromeBrowser::DeleteSearchProvider - id
CChromeBrowser::DeleteSearchProvider - sqlite3_open
CChromeBrowser::DeleteSearchProvider sql
CChromeBrowser::DeleteSearchProvider err
CChromeBrowser::DeleteSearchProvider - Chrome version >= 17, we need to update the meta signature
Google\Chrome\Application\chrome.exe
CurrentChromeInstallationPath :
CChromeBrowser::CloseBrowser - NOT host Browser , Exit
CChromeBrowser::ResetHP - reading json from file
CChromeBrowser::GetVersion - Not Installed
ChromeBrowser:: Version Failed
ChromeBrowser:: Version
CChromeBrowser::ResetHP - hp
CChromeBrowser::ResetHP - bReadJSONSuccessful
CChromeBrowser::ResetHP - writing json to file
CChromeBrowser::ResetHP - Parnter found, try to revert
CChromeBrowser::ResetHP - Parnter found, revert failed - reset the HP.
CChromeBrowser::ResetHP - Parnter found, revert failed - reset the Startup.
CChromeBrowser::ResetHP - ret
CChromeBrowser::ResetDSP - start
CChromeBrowser::ResetDSP - sqlite3_open
CChromeBrowser::ResetDSP - Chrome version >= 17, we need to update the meta signature
CChromeBrowser, zsShouldEnableNT
CChromeBrowser::SetEnableNTToReg() - bIsUpdateInstallation
CChromeBrowser::SetEnableNTToReg - Set zsShouldEnableNT to 0
CChromeBrowser::SetEnableNTToReg() - szIsNewTabEnabled is set
CChromeBrowser::SaveRevertHpToRegistry - start
ChromeSearchAssetsAdded
CChromeBrowser::SaveRevertHpToRegistry - ChromeSearchAssetsAdded
CChromeBrowser::SaveRevertHpToRegistry - Chrome is running.
CChromeBrowser::SaveRevertHpToRegistry , start
CChromeBrowser::SaveRevertHpToRegistry , Writing to registry
CChromeBrowser::SaveRevertHpToRegistry ,szHomepage not empty
CChromeBrowser::SaveRevertHpToRegistry , Writing None to Revert_HP
CChromeBrowser::SaveRevertHpToRegistry , Already exist in registry
CChromeBrowser::SaveRevertHpToRegistry , zsRevertSupCh Already exist in registry
CChromeBrowser::SaveRevertDspToRegistry - start
CChromeBrowser::SaveRevertDspToRegistry - ChromeSearchAssetsAdded
CChromeBrowser::SaveRevertDspToRegistry - Chrome is running.
CChromeBrowser::SaveRevertDspToRegistry , start
CChromeBrowser::SaveRevertDspToRegistry , Writing to registry
CChromeBrowser::SaveRevertDspToRegistry , write Revert_DSP
CChromeBrowser::SaveRevertDspToRegistry , Writing None to Revert_DSP
CChromeBrowser::SaveRevertDspToRegistry ,Already exist in registry
CChromeBrowser::RevertHpFromRegistry - start
CChromeBrowser::RevertHpFromRegistry - Chrome is running.
CChromeBrowser::RevertHpFromRegistry , start
CChromeBrowser::RevertStartupFromRegistry - start
CChromeBrowser::RevertStartupFromRegistry - Chrome is running.
CChromeBrowser::RevertStartupFromRegistry , start
CChromeBrowser::RevertDspFromRegistry - start
CChromeBrowser::RevertDspFromRegistry - Chrome is running.
CChromeBrowser::RevertDspFromRegistry , start
CChromeBrowser::IsHostBrowser,CH
CChromeBrowser::RefreshHpUrl - hp
CChromeBrowser::RefreshHpUrl - NOT host Browser , Exit
CChromeBrowser::RefreshHpUrl - reading json from file
CChromeBrowser::RefreshHpUrl - bReadJSONSuccessful
CFirefoxBrowser::RefreshHpUrl , szHomepage before replace
CChromeBrowser::RefreshHpUrl - writing json to file
CChromeBrowser::RefreshHpUrl - ret
CChromeBrowser::RefreshDspUrl , start
CChromeBrowser::RefreshDspUrl - NOT host Browser , Exit
CChromeBrowser::UpdateSearchProvider - start
CChromeBrowser::UpdateSearchProvider - Chrome is running.
CChromeBrowser::UpdateSearchProvider - ERROR_INVALID_HANDLE
CChromeBrowser::UpdateSearchProvider - Chrome version >= 17, SP exists and is default, do not set again.
CChromeBrowser::UpdateSearchProvider - Chrome version >= 17, we need to update the meta signature
CChromeBrowser::IsAVGToolbarEnabled - Can't read the preference file.
CChromeBrowser::IsNewTabActive - start
CChromeBrowser::IsNewTabActive - the new tab is not active because Instant URL is not exists.
CChromeBrowser::IsNewTabActive - the new tab is not active becuase the CURRENT_USER NT flag is not enabled
CChromeBrowser::IsNewTabActive - the new tab is not active becuase the LOCAL_MACHINE NT flag is not enabled
CChromeBrowser::IsNewTabActive - end, the new tab is active
CChromeBrowser::IsExtensionEnabled start.
CChromeBrowser::IsExtensionEnabled - ERROR_INVALID_HANDLE
CChromeBrowser::IsExtensionEnabled - empty extension name
CChromeBrowser::IsExtensionEnabled - INSTALLER_ERROR_CHROME_ERROR
CDomainADBlockerCH::GetExtensionState we don't currenty support this state.
CChromeBrowser::SetExtensionEnabled start.
CChromeBrowser::SetExtensionEnabled - ERROR_INVALID_HANDLE
CChromeBrowser::SetExtensionEnabled - empty extension name
CChromeBrowser::SetExtensionEnabled - INSTALLER_ERROR_CHROME_ERROR
CChromeBrowser::SetExtensionEnabled - enable extention
sCChromeBrowser::SetExtensionEnabled - disable extention
CChromeBrowser::SetExtensionEnabled - writing json to file
CChromeBrowser::SetExtensionEnabled failed to read preferences
CChromeBrowser::EnableExtension - Start
CChromeBrowser::EnableExtension - NOT host Browser , Exit
CChromeBrowser::EnableExtension - EnableExtensionExtractingCrx, zsVersion
CChromeBrowser::EnableExtension - EnableExtensionInPreference, zsVersion
CChromeBrowser::EnableExtension - function ret:
\avg.crx
CChromeBrowser::EnableExtensionInPreference - Start
CChromeBrowser::EnableExtensionInPreference,
CChromeBrowser::EnableExtensionInPreference - Can't read the preference file.
\manifest.json
eCChromeBrowser::EnableExtensionInPreference - return value:
\Chrome\Default\
Web Data
\Google\Chrome\User Data\Default\
CChromeBrowser::SetDSPInPrefFile - Start
CChromeBrowser::SetDSPInPrefFile - reading json from file
CChromeBrowser::SetDSPInPrefFile - bReadJSONSuccessful
CChromeBrowser::GetPartnerDSPUrl - start
CChromeBrowser::GetPartnerDSPUrl - Chrome is running.
CChromeBrowser::GetPartnerDSPUrl - sqlite3_open
CChromeBrowser::GetPartnerDSPUrl sql
CChromeBrowser::GetPartnerDSPUrl - sqlite3_prepare
CChromeBrowser::GetPartnerDSPUrl - pChromeSearchProvider->sUrl
CChromeBrowser::AutoDisableToolbar - Start.
%LOCALAPPDATA%\Google\Chrome\User Data\Default\
CChromeBrowser::AutoDisableToolbar - Can't get paths.
CChromeBrowser::AutoDisableToolbar - Can't disable user toolbar.
CChromeBrowser::EnableToolband - ERROR_INVALID_HANDLE
CChromeBrowser::IsPartnerDefaultSearchProvider - Start.
CChromeBrowser::IsPartnerHomePage - Start.
CChromeBrowser::GetStartupFromJson - failed reading Json
CChromeBrowser::GetStartupFromJson - szStartup:
CChromeBrowser::GetHomepageFromJson - failed reading Json
CChromeBrowser::GetHomepageFromJson - szHomepage:
CChromeBrowser::IsInstantURLActive - start
CChromeBrowser::IsInstantURLActive - Chrome is running.
CChromeBrowser::IsInstantURLActive - sqlite3_open
CChromeBrowser::IsInstantURLActive sql
CChromeBrowser::IsInstantURLActive - sqlite3_prepare
CChromeBrowser::IsInstantURLActive - res
CFirefoxBrowser::CFirefoxBrowser() - start
CFirefoxBrowser::CFirefoxBrowser() - INI
CFirefoxBrowser::CFirefoxBrowser() - failed to read INI file, try to get info from INI backup in registry.
firefox.exe
CFirefoxBrowser::GetVersion - start
CFirefoxBrowser::GetVersion - version:
CFirefoxBrowser::GetVersionEx - start
CFirefoxBrowser::GetVersionEx - Not Installed
extensions.lastAppVersion
CFirefoxBrowser::GetVersionEx - version:
CFirefoxBrowser::GetVersionEx - short version:
SOFTWARE\Mozilla\Mozilla Firefox
CFirefoxBrowser::CreateSearchProvider - start
CFirefoxBrowser::CreateSearchProvider - NOT host Browser , Exit
CFirefoxBrowser::CreateSearchProvider - ERROR_INVALID_HANDLE
CFirefoxBrowser::CreateSearchProvider - failed to find xml to temp
CFirefoxBrowser::CreateSearchProvider - failed to replace common values
CFirefoxBrowser::CreateSearchProvider - copy XML to program files failed.
FireFoxSearchXml.tmp
CFirefoxBrowser::UpdateSearchProvider - NOT host Browser , Exit
CFirefoxBrowser::WriteKeyToGuardToSetDSP - start
FirefoxSPName
CFirefoxBrowser::WriteKeyToGuardToSetDSP - end, return:
CFirefoxBrowser::SetDefaultSearchProvider - start
CFirefoxBrowser::SetDefaultSearchProvider - NOT host Browser , Exit
CFirefoxBrowser::SetDefaultSearchProvider - Firefox is running.
CFirefoxBrowser::SetDefaultSearchProvider - application is running in SYSTEM account!. Can not set as DSP.
CFirefoxBrowser::SetDefaultSearchProvider - INI Path:
CFirefoxBrowser::SetDefaultSearchProvider - failed to set DSP in all profiles
CFirefoxBrowser::IsNewTabActive
avg.userPreferences.newtabDisabledByUser
CFirefoxBrowser::IsNewTabActive - the new tab is not active becuase the user canceled
CFirefoxBrowser::IsNewTabActive - the new tab is not active becuase the CURRENT_USER NT flag is not enabled
CFirefoxBrowser::IsNewTabActive - the new tab is not active becuase the LOCAL_MACHINE NT flag is not enabled
CFirefoxBrowser::IsNewTabActive - the new tab is active.
CFirefoxBrowser::ReplaceCommonValues() - temp XML filename
CFirefoxBrowser::ReplaceCommonValues() - ReadTempXML failed.
CFirefoxBrowser::ReplaceCommonValues() - XML filename
CFirefoxBrowser::ReplaceCommonValues() - Partner name is empty.
CFirefoxBrowser::DetermineFFProfilesDir - start
CFirefoxBrowser::DetermineFFProfilesDir - GetSafeEnv return NULL
\Mozilla\Firefox\Profiles\
CFirefoxBrowser::DetermineFFProfilesDir - Firefox Folder
CFirefoxBrowser::GetSearchXMLLocation - GetCurrentFirefoxInstallationPath failed
CFirefoxBrowser::GetSearchXMLLocation - first XML location
CFirefoxBrowser::GetSearchXMLLocation - second XML location
CFirefoxBrowser::CopyXmlToProgramFiles - Copy from
CFirefoxBrowser::CopyXmlToProgramFiles - Copy to
CFirefoxBrowser::CopyXmlToProgramFiles firefox version is less than 21
CFirefoxBrowser::CopyXmlToProgramFiles create browser folder
CFirefoxBrowser::CopyXmlToUserData - Copy from
CFirefoxBrowser::CopyXmlToUserData - Copy to
CFirefoxBrowser::SetDSPinAllProfiles failed to write Pref.js to profile(USER)
CFirefoxBrowser::SetDSPinAllProfiles failed to write Pref.js to profile
CFirefoxBrowser::SetDSPinAllProfiles. Create directory is failed
CFirefoxBrowser::SetDSPinAllProfiles. CopyFile is failed
CFirefoxBrowser::RefreshSearchProviderXml - ERROR_INVALID_HANDLE
CFirefoxBrowser::SetDSPInAllProfilesAfterInstall. FireFoxSearchXml.tmp is not exist
CFirefoxBrowser::ReadTempXML() - CreateFile failed. GetLastError
CFirefoxBrowser::ReadTempXML() - ReadFile failed. GetLastError
CFirefoxBrowser::ReplaceDefaultSearchProvider - start
CFirefoxBrowser::ReplaceDefaultSearchProvider -pzsIniFile is not NULL
CFirefoxBrowser::ReplaceDefaultSearchProvider -Get display name
CFirefoxBrowser::ReplaceDefaultSearchProvider - DSP Display Name:
browser.search.defaultenginename
browser.search.selectedEngine
CFirefoxBrowser::WriteFile - CreateFile failed. GetLastError
CFirefoxBrowser::WriteFile - WriteFile failed. GetLastError
CFirefoxBrowser::WriteFile() - WriteFile failed. size written too small
CFirefoxBrowser::InitSearchProviderFromIni - ini
CFirefoxBrowser::InitSearchProviderFromIni - NOT host Browser , Exit
CFirefoxBrowser::InitSearchProviderFromRegistry
CFirefoxBrowser::InitSearchProviderFromRegistry - NOT host Browser , Exit
CFirefoxBrowser::GetHomepage, homepage
CFirefoxBrowser::GetHomepage, next profile
browser.startup.homepage
CFirefoxBrowser::GetHomepage, success
CFirefoxBrowser::SetHomepage, homepage
CFirefoxBrowser::SetHomepage - NOT host Browser , Exit
CFirefoxBrowser::SetHomepage - Firefox is running.
CFirefoxBrowser::SetHomepage, next profile
CFirefoxBrowser::SetHomepage, success
CFirefoxBrowser::GetKeywordUrl, szKeyWordUrl
CFirefoxBrowser::GetKeywordUrl, next profile
LCFirefoxBrowser::GetKeywordUrl, success
CFirefoxBrowser::SetKeywordUrl, szKeyWordUrl
CFirefoxBrowser::SetKeywordUrl - NOT host Browser , Exit
CFirefoxBrowser::SetKeywordUrl - Firefox is running.
CFirefoxBrowser::SetKeywordUrl, next profile
CFirefoxBrowser::SetKeywordUrl, success
CFirefoxBrowser::DeleteSearchProvider - start
CFirefoxBrowser::DeleteSearchProvider - Firefox is running.
CFirefoxBrowser::DeleteSearchProvider - ERROR_INVALID_HANDLE
CFirefoxBrowser::SearchProviderExist - start
CFirefoxBrowser::SearchProviderExist - Firefox is running.
CFirefoxBrowser::SearchProviderExist - ERROR_INVALID_HANDLE
CFirefoxBrowser::SearchProviderExist - failed to get Default search engine for profile
CFirefoxBrowser::SearchProviderExist - ProfileExist
CFirefoxBrowser::SearchProviderExist - ProfileDefault
CFirefoxBrowser::SearchProviderExist - ProgramFilesExist
CFirefoxBrowser::SearchProviderExist - ProgramFilesDefault
CFirefoxBrowser::SearchProviderExist - Exist
CFirefoxBrowser::SearchProviderExist - Default
CFirefoxBrowser::HandleXMLInInstalltion - start
CFirefoxBrowser::HandleXMLInInstalltion - File Path
CFirefoxBrowser::HandleXMLInInstalltion - delete
SOFTWARE\Mozilla\Mozilla Firefox\
CFirefoxBrowser::GetCurrentFirefoxInstallationPath - start
CFirefoxBrowser::GetCurrentFirefoxInstallationPath - fail to get CurrentVersion from
CFirefoxBrowser::GetCurrentFirefoxInstallationPath - CurrentVersion
PathToExe
CFirefoxBrowser::GetCurrentFirefoxInstallationPath - fail to get PathToExe from
CFirefoxBrowser::GetCurrentFirefoxInstallationPath - Path
\search.json
CFirefoxBrowser::RefreshSearchProviderSearchSqlite Sqlite path
CFirefoxBrowser::RefreshSearchProviderSearchSqlite - sqlite3_open
CFirefoxBrowser::RefreshSearchProviderSearchSqlite sql
CFirefoxBrowser::RefreshSearchProviderSearchSqlite err
\search.sqlite
RefreshUserSearchProviderList - check if search.json file exists @ path:
RefreshUserSearchProviderList - try to delete search.json @ path:
CFirefoxBrowser EnableToolband - start
CFirefoxBrowser EnableToolband - failed to cast.
CFirefoxBrowser EnableToolband, id
CFirefoxBrowser EnableToolband, enabled
CFirefoxBrowser::IsExtensionEnabled - Failed to get extension ID.
extensions.json
CFirefoxBrowser::CheckInExtensionsJson - failed to build extension.sqlite path.
CFirefoxBrowser::InsertUpdateAddonTable - start
extensions.sqlite
CFirefoxBrowser::InsertUpdateAddonTable - failed to build extension.sqlite path.
CFirefoxBrowser::InsertUpdateAddonTable - sqlite3_open
CFirefoxBrowser::InsertUpdateAddonTable sql
CFirefoxBrowser::InsertUpdateAddonTable err
CFirefoxBrowser::AddonTableContainsToolbar - sqlite3_prepare
extensions.rdf
extensions.cache
CFirefoxBrowser::EnableInExtensionsRDF - Unable to create XML parser object
CFirefoxBrowser::EnableInExtensionsRDF - Unable to load XML document into the parser
CFirefoxBrowser::EnableInExtensionsRDF - failed to save the modified extension.rdf
CFirefoxBrowser::EnableInExtensionsRDF - unknown exception.
.default
CFirefoxBrowser::BuildDefaultProfileFilePath - failed.
CFirefoxBrowser::BuildDefaultProfileFilePath - BuildDefaultProfileFilePath
CFirefoxBrowser HandleExtensionIni - start
extensions.ini
CFirefoxBrowser HandleExtensionIni sIniPath:
SOFTWARE\Mozilla\Firefox\extensions
CFirefoxBrowser HandleExtensionIni szId:
CFirefoxBrowser HandleExtensionIni value of ::
CFirefoxBrowser HandleExtensionIni, sProfileExtensionPath:
CFirefoxBrowser HandleExtensionIni, sProfileExtensionPath exists
CFirefoxBrowser HandleExtensionIni, SetTextVector of ExtensionDirs
\install.rdf
CFirefoxBrowser::RollbackNewTab - Firefox is running.
avg.install.newtab
CFirefoxBrowser::ResetHP - start
CFirefoxBrowser::ResetHP - Firefox is running.
CFirefoxBrowser::ResetHP - GetDefaultProfile.
CFirefoxBrowser::ResetHP, next profile
CFirefoxBrowser::ResetHP - ,zsPartnerHomePage:
CFirefoxBrowser::ResetHP, szHomepage
CFirefoxBrowser::ResetHP, szHomepage not empty
CFirefoxBrowser::ResetHP, 1:sCurrUrl,
CFirefoxBrowser::ResetHP, zsCurrHomePage,
CFirefoxBrowser::ResetHP ,bFoundPartnerUrl = true;
CFirefoxBrowser::ResetHP ,sCurrUrl not equal to iniHost
CFirefoxBrowser::ResetHP ,bFoundPartnerUrl is true;
CFirefoxBrowser::ResetHP ,bReverted is true
CFirefoxBrowser::ResetHP ,bReverted is false and zsCurrHomePage is
CFirefoxBrowser::ResetHP, sCurrHomePage before deciding how to reset
CFirefoxBrowser::ResetHP ,zsCurrHomePage is empty
CFirefoxBrowser::ResetHP, Homepage empty so set tp default
CFirefoxBrowser::ResetHP, Partner removed
CFirefoxBrowser::ResetDSP - start
CFirefoxBrowser::ResetDSP - Firefox is running.
avg-secure-search.xml
CFirefoxBrowser::ResetDSP failed to write Pref.js to profile
CFirefoxBrowser::DeleteXmlFromProgramFiles - start
CFirefoxBrowser::DeleteXmlFromProgramFiles - GetCurrentFirefoxInstallationPath failed
CFirefoxBrowser::DeleteXmlFromProgramFiles - Delete file from
CFirefoxBrowser::ResetDefaultSearchProvider - start
CFirefoxBrowser::ResetDefaultSearchProvider - Firefox is running.
CFirefoxBrowser::ResetDefaultSearchProvider - delete DEFAULT_ENGINE SELECTED_ENGINE
CFirefoxBrowser::ResetDefaultSearchProvider - SetDeafultSearchProviderToString failed
CFirefoxBrowser, zsShouldEnableNT
CFirefoxBrowser::SetEnableNTToReg - Set zsShouldEnableNT to 0
CFirefoxBrowser::SaveRevertHpToRegistry , start
CFirefoxBrowser::SaveRevertHpToRegistry ,FFSearchAssetsAdded
CFirefoxBrowser::SaveRevertHpToRegistry , Writing to registry
CFirefoxBrowser::SaveRevertHpToRegistry , write Revert_HP
CFirefoxBrowser::SaveRevertHpToRegistry , Writing None to Revert_HP
CFirefoxBrowser::SaveRevertHpToRegistry , Aleady exist in registry
CFirefoxBrowser::RevertHpFromRegistry , start
CFirefoxBrowser::RevertHpFromRegistry , Reverting the homepage.
CFirefoxBrowser::SaveRevertDspToRegistry , start
CFirefoxBrowser::SaveRevertDspToRegistry ,FFSearchAssetsAdded
CFirefoxBrowser::SaveRevertDspToRegistry , Writing to registry
CFirefoxBrowser::SaveRevertDspToRegistry , Write Revert_DSP
CFirefoxBrowser::SaveRevertDspToRegistry , Writing None to Revert_DSP
CFirefoxBrowser::SaveRevertHpToRegistry , Already exist in registry
CFirefoxBrowser::GetDefaultSearchProvider - start
CFirefoxBrowser::SetDeafultSearchProviderToString - start
CFirefoxBrowser::SetDeafultSearchProviderToString - Firefox is running.
CFirefoxBrowser::RevertDspFromRegistry - start
CFirefoxBrowser::RevertDspFromRegistry - Firefox is running.
CFirefoxBrowser::RevertDspFromRegistry , start
CFirefoxBrowser::RevertOnlyDspFromRegistry - start
CFirefoxBrowser::RevertOnlyDspFromRegistry - Firefox is running.
CFirefoxBrowser::RevertOnlyDspFromRegistry - revert value is
CFirefoxBrowser::SaveRevertKeywordUrlToRegistry , start
CFirefoxBrowser::SaveRevertKeywordUrlToRegistry ,FFSearchAssetsAdded
CFirefoxBrowser::SaveRevertKeywordUrlToRegistry , Writing to registry
configuration.xml
CFirefoxBrowser::SaveRevertKeywordUrlToRegistry, not our value
CFirefoxBrowser::SaveRevertKeywordUrlToRegistry, write Revert_KU
CFirefoxBrowser::SaveRevertKeywordUrlToRegistry , Writing None to Revert_KU
CFirefoxBrowser::SaveRevertKeywordUrlToRegistry , Aleady exist in registry
CFirefoxBrowser::RevertKeywordUrlFromRegistry , start
CFirefoxBrowser::RevertKeywordUrlFromRegistry , Reverting the keywordURL.
CFirefoxBrowser::IsHostBrowser,FF
CFirefoxBrowser::RefreshHpUrl - start
CFirefoxBrowser::RefreshHpUrl - NOT host Browser , Exit
CFirefoxBrowser::RefreshHpUrl - Firefox is running.
CFirefoxBrowser::RefreshHpUrl, next profile
CFirefoxBrowser::RefreshHpUrl, szHomepage
CFirefoxBrowser::RefreshHpUrl, Homepage empty so set tp default
CFirefoxBrowser::RefreshHpUrl, Partner removed
CFirefoxBrowser::RefreshDspUrl , start
CFirefoxBrowser::RefreshDspUrl - NOT host Browser , Exit
CFirefoxBrowser::RefreshSearchProviderXml - start
CFirefoxBrowser::RefreshSearchProviderXml - NOT host Browser , Exit
CFirefoxBrowser::RefreshSearchProviderXml - failed to find xml to temp
CFirefoxBrowser::RefreshSearchProviderXml - failed to replace common values
CFirefoxBrowser::RefreshSearchProviderXml - copy XML to program files
CFirefoxBrowser::RefreshSearchProviderXml - copy XML to User Data
CFirefoxBrowser::RefreshSearchProviderXml - copy XML to program files succeded, erased cache
CFirefoxBrowser::RefreshKeywordUrl - start
CFirefoxBrowser::RefreshKeywordUrl - NOT host Browser , Exit
CFirefoxBrowser::RefreshKeywordUrl - Firefox is running.
Installation/KeywordUrl/Url
CFirefoxBrowser::IsExtensionEnabled - start
CFirefoxBrowser::IsExtensionEnabled - ERROR_INVALID_HANDLE
CFirefoxBrowser::IsExtensionEnabled - failed to build extension.sqlite path.
CFirefoxBrowser::IsExtensionEnabled - CopyFileToTmpFolder faild.
CFirefoxBrowser::IsExtensionEnabled - sqlite3_open
CFirefoxBrowser::IsExtensionEnabled - sqlite3_prepare
CFirefoxBrowser::IsExtensionEnabled - unknown state
CFirefoxBrowser::IsExtensionEnabled - DB empty.
CChromeExtensionJson::CChromeExtensionJson() - failed reading addons Json
CFirefoxBrowser::AddCampaignIdToXML - XML filename
CFirefoxBrowser::AddCampaignIdToXML - ReadTempXML failed.
CFirefoxBrowser::GetCampaignIdFromXML - XML filename
CFirefoxBrowser::GetCampaignIdFromXML - ReadTempXML failed.
CFirefoxBrowser::GetCampaignIdFromXML - cmpid
CFirefoxBrowser::IsPartnerDefaultSearchProvider - Start.
CFirefoxBrowser::IsPartnerHomePage - Start.
CFirefoxBrowser::IsPartnerHomePage - Can't get homepage.
CFirefoxBrowser::DeleteUserSearchProvider() - start
CFirefoxBrowser::DeleteUserSearchProvider() - delete
CFirefoxBrowser::AutoDisableToolbar - start
\FireFoxExt\
CFirefoxBrowser::AutoDisableToolbar - can't get zsID
CFirefoxBrowser::AutoDisableToolbar - can't get zsName
CFirefoxBrowser::AutoDisableToolbar - can't get zsToolbarVersion
CFirefoxBrowser::AutoDisableToolbar - can't get zsTargetAppID
CFirefoxBrowser::AutoDisableToolbar - can't get zsTargetMinVer
CFirefoxBrowser::AutoDisableToolbar - can't get zsTargetMaxVer
CFirefoxBrowser::AutoDisableToolbar - can't get zsCreator
CFirefoxBrowser::AutoDisableToolbar - can't get zsDescription
RDF/Description/em:homepageURL
CFirefoxBrowser::AutoDisableToolbar - can't get zsHomepageURL
CFirefoxBrowser::AutoDisableToolbar - Can't get paths.
\extensions.sqlite
CFirefoxBrowser::AutoDisableToolbar - error sqlite3_open
CFirefoxBrowser::AutoDisableToolbar insert err
CFirefoxBrowser::AutoDisableToolbar - sqlite3_prepare
CFirefoxBrowser::AutoDisableToolbar - NO id
CFirefoxBrowser::AutoDisableToolbar insert locale err
)CFirefoxBrowser::AutoDisableToolbar insert targetApplication err
CFirefoxBrowser::PrepateDisable - sqlite3_prepare
CFirefoxBrowser::PrepateDisable - NO id
CFirefoxBrowser::PrepateDisable - addon table
CFirefoxBrowser::PrepateDisable - locale table
CFirefoxBrowser::PrepateDisable - targetApplication
CFirefoxBrowser::DeleteXMLFromAllUsersAppData - Start.
CFirefoxBrowser::DeleteXMLFromAllUsersAppData - Can't get paths.
CFirefoxBrowser::DeleteXMLFromAllUsersAppData - Failed to delete file:
F%d/%d/%d %d:%d:%d
CCrashReport::GlobalExceptionFilter no crash report files
avgdumpx.exe
-p %d -c %d %d -D toolbar
CCrashReport::GlobalExceptionFilter shellexecute res
avgdiagex.exe
avgsysx.dll
avgcommx.dll
crash.avgdx
CrashReport
Gloggingserver.exe
logger.properties
CLoggerServer::CopyLoggerProperties() - failed to calculate log4cplus.properties path
CLoggerServer::CopyLoggerProperties() - failed to create log4cplus.properties path
AVG Web TuneUp
RemoteUpdater/Campaign/Url
CUpdaterRequest::ParseXML - Ended to Campign URL
RemoteUpdater/Campaign/CmdLineParams
CUpdaterRequest::ParseXML - Parsed url
Url%d
CUpdaterRequest::ParseXML - Parsed url param:
CUpdaterRequest::ParseXML - Parsed url data:
Content-Type: application/x-www-form-urlencoded
CUpdaterRequest::UpdateWithRemoteToolbarData - http request: send=[
CUpdaterRequest::GetLocalToolbarsInfo() - read partnerID start: configuration.xml:
CHttpClient::DetermineHostAndUrl, resource
http://
https://
CHttpClient::DetermineHostAndUrl, Host
CHttpClient::DetermineHostAndUrl, Url
CHttpClient::SendString start
Mozilla/4.0 (compatible; MSIE 4.0; Windows NT 4.0)
CHttpClient::SendString userAgent
CHttpClient::SendString InternetOpen failed.
CHttpClient::SendString InternetConnect failed.
CHttpClient::SendString HttpOpenRequest failed.
CHttpClient::SendString HttpQueryInfo failed.
777705555443332
5555443332
5555443332
iMedix Web Technologies LTD.
iMedix Web Technologies Ltd
Mozilla/4.0 (compatible; MSIE
; Windows NT
favicon.ico
desktop.ini
CFFConfig::Initialize() - m_szFirefoxFolder
prefs.js
prefs.js.tmp
localstore.rdf
CFFConfig::GetValue - key
CFFConfig::SetValue - key
CFFConfig: DeleteKey, removing:
CFFConfig: DeleteKey, IsInitialized failed
CFFConfig: ParsePreferences, szKey:
CFFConfig: ParsePreferences, couldn't determine key name
CFFConfig: ParsePreferences, PARSING_TYPE_DELETE, found key, value:
CFFConfig: ParsePreferences, Key not found, Key:
Microsoft\Internet Explorer\AboutURLs
res://ieframe.dll/tabswelcome.htm
Open registry HKEY_CURRENT_USER Start Page
SuggestionsURL
SuggestionsURLFallback
SuggestionsURL_JSON
FaviconURLFallback
CInternetExplorer::UpdateSearchProvider - try to open key:
CInternetExplorer::UpdateSearchProvider - key does not exist!
CInternetExplorer::UpdateSearchProvider - try to create key:
CInternetExplorer::UpdateSearchProvider - create key ended - return:
CInternetExplorer::UpdateSearchProvider - create key return:
iexplore.exe
\Internet Explorer\iexplore.exe
Software\Microsoft\Windows\CurrentVersion\Ext\Settings
CInternetExplorer::EnableToolband, DeleteKey
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\
CInternetExplorer::IsToolbarEnabled key
CInternetExplorer::IsToolbarEnabled key exist
\favicon.ico
{95B7759C-8C7F-4BF1-B163-73684A933233}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\User Preferences
CInternetExplorer::SetDefaultSearchProvider, GrantRegKeyAccess
{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
CInternetExplorer::SetEnableNTToReg, zsShouldEnableNT
CInternetExplorer::SetEnableNTToReg - Set zsShouldEnableNT to 0
CInternetExplorer::RefreshHpUrl , start
CInternetExplorer::RefreshHpUrl - NOT host Browser , Exit
CInternetExplorer::RefreshHpUrl , szHomepage before replace
CInternetExplorer::RefreshHpUrl , zsPartnerHomePage is empty
CInternetExplorer::RefreshHpUrl , Driver is not running
CInternetExplorer::RefreshHpUrl , Driver is running and guard is enabled
CInternetExplorer::RefreshHpUrl , szHomepage after replace
CInternetExplorer::RefreshDspUrl , start
CInternetExplorer::RefreshDspUrl - NOT host Browser , Exit
CInternetExplorer::RefreshDspUrl, GrantRegKeyAccess
CInternetExplorer::RefreshNtUrl , start
CInternetExplorer::RefreshNtUrl - NOT host Browser , Exit
CInternetExplorer::AutoDisableToolbar - Can't create key.
CBrowser::IsSearchAssetsAdded, Browser key
CBrowser::IsSearchAssetsAdded, value if browser key
Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice
ie.http
firefox
chrome
http\shell\open\command\
%s: Ioctl = %p, ret = %d. GLE = %d
CPathPermissions:GrantRegKeyAccess, start
CPathPermissions:GrantRegKeyAccess, FullKey is empty
HKEY_
CPathPermissions:GrantRegKeyAccess, GetNamedSecurityInfo FAIL
CPathPermissions:GrantRegKeyAccess, RegOpenKeyEx FAIL
CPathPermissions:GrantRegKeyAccess ,return false
CPathPermissions:GrantRegKeyAccess ,OpenProcessToken FAIL
CPathPermissions:GrantRegKeyAccess ,HeapAlloc NULL
CPathPermissions:GrantRegKeyAccess ,InitializeAcl FAIL
CPathPermissions:GrantRegKeyAccess ,AddAccessAllowedAce FAIL
CPathPermissions:GrantRegKeyAccess ,InitializeSecurityDescriptor FAIL
CPathPermissions:GrantRegKeyAccess ,SetSecurityDescriptorDacl FAIL
CPathPermissions:GrantRegKeyAccess ,RegSetKeySecurity FAIL
CPathPermissions:GrantRegKeyAccess ,SetNamedSecurityInfo FAIL
CPathPermissions:GrantRegKeyAccess ,end ,return true
\\.\avgtp
Assertion failed: %s, file %s, line %d
18,1,0,443
ToolbarU.exe

loggingserver.exe_3932:




.text
`.rdata
@.data
.rsrc
@.reloc
vSSSh
FTPjK
FtPj;
C.PjRV
Please contact the application's support team for more information.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- floating point support not loaded
portuguese-brazilian
operator
GetProcessWindowStation
USER32.DLL
Usage: port config_file
Could not open server socket, maybe port
log4cplusU.dll
GetCPInfo
GetConsoleOutputCP
KERNEL32.dll
zcÁ
%Program Files%\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\loggingserver.exe
< <<<@<`<|<
> >@>`>|>
KERNEL32.DLL
mscoree.dll
17, 2, 0, 0
loggings.exe

vprot.exe_836:




.text
`.rdata
@.data
.rsrc
@.reloc
E PSSh`
t.Sh'(?
SPSSSh
G><.tN<[tJ<\tF<*tB<|t><^t:<$t6
<9%u3
t8It.IIt#
.FGy"
 2 34 567
vSSSh
FTPjK
FtPj;
C.PjRV
tGHt.Ht&
OLEACC.dll
log4cplusU.dll
Please contact the application's support team for more information.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- floating point support not loaded
GetProcessWindowStation
portuguese-brazilian
USER32.DLL
operator
inflate 1.2.5 Copyright 1995-2010 Mark Adler
.\BlockingPopup.cpp
.\ChromeInlineInstallation.cpp
c:\buildagent\work\906b1f4be197b432\commonrep\common\include\..\FolderWatcher.h
.\ChromeNTSetGuard.cpp
.\ChromeSAPGuard.cpp
.\ChromeSAPGuardUI.cpp
.\ChromeSAPUpdater.cpp
.\DefaultSearchProviderGuard.cpp
.\DNTSettingsGuard.cpp
.\DNTTabsGuard.cpp
.\DNTThread.cpp
.\DriverBasedGuard.cpp
.\DSPGuard.cpp
unzip 1.01 Copyright 1998-2004 Gilles Vollant - http://www.winimage.com/zLibDll
3.7.3
SQLite format 3
CREATE TABLE sqlite_master(
sql text
CREATE TEMP TABLE sqlite_temp_master(
REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLYo
()$^.* ?[]|\-{},:=!
Hidden Web Browser
.\HomepageGuard.cpp
.\IEEnableHelper.cpp
.\IEEnableManager.cpp
.\InstallStats.cpp
vprot:SendInstallStatistic - failed to get url.
.\PrefetchWindow.cpp
.\Reporter.cpp
.\SAPsUpdateManager.cpp
.\SearchGroupGuard.cpp
.\SiteSafetyThreads.cpp
.\UpdateVersionCare.cpp
.\VersionGuard.cpp
.\WinMain.cpp
%Y-%m-%d
.\AdBlockerManager.cpp
.\AdBlockerRegGuard.cpp
.\AdBlockerSilentWindowGuard.cpp
fail to unload log4cplusU.dll
.\Logger.cpp
.\SystemCommands.cpp
.\ChromeBrowser.cpp
npsitesafety.dll
startup_urls
urls_to_restore_on_startup
icon_url
instant_url
keyword
search_url
suggest_url
VALUES ('%s','%s','%s','%s',%d,%d,'%s',%d,%d,'%s','%s',%d)
(short_name,keyword,favicon_url,url,show_in_default_list,safe_for_autoreplace,originating_url,date_created,usage_count,input_encodings,suggest_url,autogenerate_keyword)
keywords
INSERT INTO %s %s %s
keywords_backup
VALUES ('%s','%s','%s','%s',%d,%d,'%s',%d,%d,'%s','%s')
(short_name,keyword,favicon_url,url,show_in_default_list,safe_for_autoreplace,originating_url,date_created,usage_count,input_encodings,suggest_url)
SET short_name='%s', keyword='%s', favicon_url='%s', url='%s', show_in_default_list=%d, safe_for_autoreplace=%d, originating_url='%s', date_created=%d, usage_count=%d, input_encodings='%s', suggest_url='%s', prepopulate_id=0, autogenerate_keyword=%d
SET short_name='%s', keyword='%s', favicon_url='%s', url='%s', show_in_default_list=%d, safe_for_autoreplace=%d, originating_url='%s', date_created=%d, usage_count=%d, input_encodings='%s', suggest_url='%s', prepopulate_id=0
WHERE short_name='%s'
UPDATE %s %s %s
SELECT * FROM %s WHERE %s
SELECT * FROM %s WHERE id=%d
UPDATE meta SET value='%d' WHERE key='Default Search Provider ID'
INSERT INTO meta (key,value) VALUES ('Default Search Provider ID','%d')
UPDATE meta SET value='%d' WHERE key='Default Search Provider ID Backup'
INSERT INTO meta (key,value) VALUES ('Default Search Provider ID Backup','%d')
SELECT value FROM meta WHERE key='Default Search Provider ID'
SELECT value FROM meta WHERE key='Default Search Provider ID Backup'
url LIKE '%
DELETE FROM %s WHERE id=%d
select min (id) from keywords
webNavigation
webRequest
webRequestBlocking
webRequestInternal
http://dnt.cloud.avg.com/*
http://dntf.cloud.avg.com/*
http://toolbar.avg.com/*
from_webstore
SELECT id FROM %s
search_terms_replacement_key
SELECT * FROM keywords WHERE short_name='%s'
SET instant_url='%s', new_tab_url='%s', search_terms_replacement_key='%s'
SELECT instant_url FROM keywords WHERE short_name='%s'
.\Directory.cpp
.\FolderWatcher.cpp
.\active.cpp
RegDeleteKeyExW
.\Registry.cpp
.\ScriptHelperWrapper.cpp
.\ProductManager.cpp
.\Browser.cpp
.\DriverHelper.cpp
.\StringConverter.cpp
.\ChromeExtensionJson.cpp
.\Thread.cpp
.\CoInitializer.cpp
.\HttpClient.cpp
.\JSONParser.cpp
.\InternetExplorer.cpp
.\DNTAdapter.cpp
AvgDntSetDownloadDataURL
.\GenericWindowHelper.cpp
.\FirefoxBrowser.cpp
keyword.URL
select * from addon where id='%s'
SELECT active FROM addon WHERE id='%s'
INSERT INTO addon (id,location,version,type,defaultLocale,visible,active,userDisabled,pendingUninstall,descriptor,applyBackgroundUpdates,bootstrap,skinnable,softDisabled,IsForeignInstall,hasBinaryComponents,strictCompatibility) VALUES ('%s','winreg-app-global','%s','extension',3,1,0,1,0,'%s',1,0,0,0,1,0,0)
INSERT INTO locale (id,name,description,creator,homepageURL) VALUES ('%s','%s','%s','%s','%s')
INSERT INTO targetApplication (addon_internal_id,id,minVersion,maxVersion) VALUES ('%s','%s','%s','%s')
.\SiteSafetyAdapter.cpp
avg_sitesafety_urldb_update
avg_sitesafety_urldb_update_async
avg_sitesafety_urldb_is_up_to_date
avg_sitesafety_set_feed_server_url
avg_sitesafety_urldb_update_wait
.\LoggerServer.cpp
.\CrashReportAdapter.cpp
.\INIReader.cpp
.\XpiUnInstaller.cpp
.\FFConfig.cpp
%s%s", %s%s%s);
invalid _N_type: %d
.\PaypalDomainListReader.cpp
.\IEApproveExtension.cpp
.\PathPermissions.cpp
.\ScriptHelperInstaller.cpp
.\ProductInstaller.cpp
large file support is disabled
SQL logic error or missing database
foreign_keys
sqlite_compileoption_get
sqlite_compileoption_used
sqlite_source_id
sqlite_version
sqlite_attach
sqlite_detach
sqlite_stat1
sqlite_rename_parent
sqlite_rename_trigger
sqlite_rename_table
RowKey
SQLITE_
d-d-d d:d:d
d:d:d
d-d-d
failed to allocate %u bytes of memory
failed memory resize %u to %u bytes
922337203685477580
API call with %s database connection pointer
%s-shm
%s\etilqs_
OsError 0x%x (%u)
Recovered %d frames from WAL file %s
invalid page number %d
2nd reference to page %d
Failed to read ptrmap key=%d
Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)
%d of %d pages missing from overflow list starting at %d
failed to get page %d
freelist leaf count too big on page %d
Page %d:
unable to get the page. error code=%d
btreeInitPage() returns error code %d
On tree page %d cell %d:
On page %d at right child:
Corruption detected in cell %d on page %d
Multiple uses for byte %d of page %d
Fragmentation of %d bytes reported as %d on page %d
Page %d is never used
Pointer map page %d is referenced
Outstanding page count goes from %d to %d during this analysis
keyinfo(%d
%s(%d)
%s-mjX
foreign key constraint failed
unable to use function %s in the requested context
bind on a busy prepared statement: [%s]
zeroblob(%d)
abort at %d in [%s]: %s
constraint failed at %d in [%s]
cannot open savepoint - SQL statements in progress
no such savepoint: %s
cannot %s savepoint - SQL statements in progress
cannot rollback transaction - SQL statements in progress
cannot commit transaction - SQL statements in progress
sqlite_temp_master
sqlite_master
SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid
cannot change %s wal mode from within a transaction
database table is locked: %s
statement aborts at %d: [%s] %s
cannot open virtual table: %s
cannot open view: %s
no such column: "%s"
foreign key
indexed
cannot open %s column for writing
cannot open value of type %s
misuse of aliased aggregate %s
%s: %s.%s.%s
%s: %s.%s
%s: %s
not authorized to use function: %s
%r %s BY term out of range - should be between 1 and %d
too many terms in %s BY clause
Expression tree is too large (maximum depth %d)
variable number must be between ?1 and ?%d
too many SQL variables
too many columns in %s
misuse of aggregate: %s()
%.*s"%w"%s
%s%.*s"%w"
%s OR name=%Q
type='trigger' AND (%s)
there is already another table or index with this name: %s
sqlite_
table %s may not be altered
view %s may not be altered
UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');
sqlite_sequence
UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q
UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
Cannot add a PRIMARY KEY column
UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q
sqlite_altertab_%s
CREATE TABLE %Q.%s(%s)
DELETE FROM %Q.%s WHERE tbl=%Q
SELECT tbl, idx, stat FROM %Q.sqlite_stat1
invalid name: "%s"
too many attached databases - max %d
database %s is already in use
unable to open database: %s
no such database: %s
cannot detach database %s
database %s is locked
%s %T cannot reference objects in database %s
access to %s.%s.%s is prohibited
access to %s.%s is prohibited
object name reserved for internal use: %s
there is already an index named %s
too many columns on %s
duplicate column name: %s
default value of column [%s] is not constant
table "%s" has more than one primary key
AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY
no such collation sequence: %s
CREATE %s %.*s
UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d
CREATE TABLE %Q.sqlite_sequence(name,seq)
view %s is circularly defined
UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d
table %s may not be dropped
use DROP TABLE to delete table %s
use DROP VIEW to delete view %s
DELETE FROM %s.sqlite_sequence WHERE name=%Q
DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'
DELETE FROM %Q.sqlite_stat1 WHERE tbl=%Q
foreign key on %s should reference only one column of table %T
number of columns in foreign key does not match the number of columns in the referenced table
unknown column "%s" in foreign key definition
indexed columns are not unique
table %s may not be indexed
views may not be indexed
virtual tables may not be indexed
there is already a table named %s
index %s already exists
sqlite_autoindex_%s_%d
table %s has no column named %s
CREATE%s INDEX %.*s
INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
no such index: %S
index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped
DELETE FROM %Q.%s WHERE name=%Q AND type='index'
DELETE FROM %Q.sqlite_stat1 WHERE idx=%Q
a JOIN clause is required before %s
unable to identify the object to be reindexed
table %s may not be modified
cannot modify %s because it is a view
foreign key mismatch
table %S has %d columns but %d values were supplied
%d values for %d columns
table %S has no column named %s
%s.%s may not be NULL
PRIMARY KEY must be unique
sqlite3_extension_init
unable to open shared library [%s]
no entry point [%s] in shared library [%s]
error during initialization: %s
automatic extension loading failed: %s
foreign_key_list
*** in database %s ***
unsupported encoding: %s
malformed database schema (%s)
%s - %s
unsupported file format
SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid
database schema is locked: %s
unknown or unsupported join type: %T %T%s%T
RIGHT and FULL OUTER JOINs are not currently supported
a NATURAL join may not have an ON or USING clause
cannot have both ON and USING clauses in the same join
cannot join using column %s - column not present in both tables
%s.%s
%s:%d
ORDER BY clause should come after %s not before
LIMIT clause should come after %s not before
SELECTs to the left and right of %s do not have the same number of result columns
no such index: %s
sqlite_subquery_%p_
no such table: %s
sqlite3_get_table() called with two or more incompatible queries
cannot create %s trigger on view: %S
cannot create INSTEAD OF trigger on table: %S
INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')
no such trigger: %S
-- TRIGGER %s
no such column: %s
cannot VACUUM - SQL statements in progress
PRAGMA vacuum_db.synchronous=OFF
SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0
SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'
SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0
SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';
INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)
UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d
vtable constructor failed: %s
vtable constructor did not declare schema: %s
no such module: %s
table %s: xBestIndex returned an invalid plan
at most %d tables in a join
cannot use index: %s
TABLE %s
%s AS %s
%s WITH AUTOMATIC INDEX
%s WITH INDEX %s
%s VIA MULTI-INDEX UNION
%s USING PRIMARY KEY
%s VIRTUAL TABLE INDEX %d:%s
%s ORDER BY
the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers
the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers
unable to close due to unfinished backup operation
unknown database: %s
no such vfs: %s
database corruption at line %d of [%.10s]
misuse at line %d of [%.10s]
cannot open file at line %d of [%.10s]
.\XpiInstaller.cpp
0A743C17-7543-48b3-8A75-F60D0F132DD9
.\Driver.cpp
.\AVInfo.cpp
.\DomainADBlockerCH.cpp
\n@@||%s/$document
UPDATE ItemTable SET value='%s' WHERE key='custom_filters'
INSERT INTO ItemTable VALUES ('custom_filters', '"%s"')
SELECT value FROM ItemTable WHERE key='custom_filters'
1.2.5
.\DomainADBlockerPlus.cpp
C:\BuildAgent\work\906b1f4be197b432\CommonRep\Release\vprot.pdb
GDI32.dll
VERSION.dll
GetProcessHeap
KERNEL32.dll
EnumWindows
EnumChildWindows
USER32.dll
RegCloseKey
RegCreateKeyExW
RegFlushKey
RegOpenKeyExW
RegNotifyChangeKeyValue
RegQueryInfoKeyW
RegDeleteKeyW
RegEnumKeyExW
RegLoadKeyW
RegSetKeySecurity
CryptDeriveKey
CryptDestroyKey
ADVAPI32.dll
ole32.dll
SHFileOperationW
ShellExecuteExW
SHELL32.dll
OLEAUT32.dll
UrlEscapeW
UrlUnescapeW
SHLWAPI.dll
CRYPT32.dll
HttpSendRequestW
HttpQueryInfoW
HttpOpenRequestW
WININET.dll
GetCPInfo
GetConsoleOutputCP
zcÁ
.?AVCChromeInlineInstallation@@
.?AVCChromeNTSetGuard@@
.?AVCThreadWinMsg@@
.?AVCChromeBrowser@@
.?AVCChromeSearchProvider@@
.?AVCChromeToolbarData@@
.?AVCFirefoxSearchProvider@@
.?AVCThreadPostMsgOnEvent@@
.?AVCHttpClient@@
.?AVCFirefoxBrowser@@
.?AVCCrashReportAdapter@@
0!0(0/0\0
5"5(505>5[5
6t7U7l7~7
=#=)=0=>=\=
0"0(000>0[0
11v1#646
8‡8d8
9!9*90959
2$2*222@2]2
8-8}8
5-6r6}6
7-888Y8k8}8
7 8Œ8
1 1$1(1,1
1%1X1]1
2070[0`0
6%7X7l7
5(5-5}5
8!8%8)8-8:8
0118277
mscoree.dll
KERNEL32.DLL
WUSER32.DLL
An attempt to change your default %s was successfully blocked.
CBlockingPopup::OpenSettingsDialog(). g_ChromeSapGuard =
%H:%M:%S
toolbar_log.txt
%s | %s ||
CChromeInlineInstallation c'tor create FolderWatcher failed path is empty
vprot::sInstallPageUrl Program to open
chrome.exe
CChromeInlineInstallation::CopyExtension, bIsChromeRunning
ChromeExtUpdate
Software\%s\CH
avg.crx
CChromeInlineInstallation OnHandleChromeCopyExt, kill timer
CChromeInlineInstallation::Stop
vprot.exe - CChromeNTSetGuard::Run()
vprot.exe - CChromeNTSetGuard::Stop
CChromeSAPGuard::CChromeSAPGuard, Begin
\Chrome\Default
\Google\Chrome\User Data\Default
\Web Data
CChromeSAPGuard::CChromeSAPGuard, Error creating shutdown event.
SearchProviderChrome
Guard/UI/SearchProviderChrome/AttemptBlocked
Guard/UI/SearchProviderChrome/SettingsBtn
Guard/UI/SearchProviderChrome/UrlPage
Guard/UI/SearchProviderChrome/LocalUrlPage
Guard/UI/SearchProviderChrome/ShowLink
CChromeSAPGuard::~CChromeSAPGuard, Begin
CChromeSAPGuard::~CChromeSAPGuard, End
CChromeSAPGuard::Run()
CChromeSAPGuard::Run() = false. Events didn't created.
CChromeSAPGuard::Run() = true
CChromeSAPGuard::Stop, Begin
CChromeSAPGuard::OnAVGFolderChanged - Can't get the file last write time.
CChromeSAPGuard::OnAVGFolderChanged - preference file didn't changed.
CChromeSAPGuard::OnAVGFolderChanged - Can't get DSP.
CChromeSAPGuard::OnAVGFolderChanged - DSP didn't changed.
ChromeDSPGuard
CChromeSAPGuard::OnChromeFolderChanged - Can't get the file last write time.
CChromeSAPGuard::OnChromeFolderChanged - Can't get DSP.
CChromeSAPGuard::OnChromeFolderChanged() - Show Yellow popup. Shown =
CChromeSAPGuard::OnGuardStartup()
CChromeSAPGuard::GuardStartupThreadFunc(), bNeedToEnable =
CChromeSAPGuard::GuardStartupThreadFunc(), bNeedToDisable =
CChromeSAPGuard::GuardStartupThreadFunc() - Can't enable detour passthru!
CChromeSAPGuard::OnGuardStartup() = true
CChromeSAPGuard::StartFolderWatchers() - Can't get the AVG preference last write time.
CChromeSAPGuard::StartFolderWatchers() - Can't get the Web Data last write time.
CChromeSAPGuard::StartFolderWatchers() - Can't get the cutrrent DSP from AVG folder.
CChromeSAPGuard::StartFolderWatchers() - Can't get the cutrrent DSP from Chrome folder.
%FTG%
CChromeSAPGuard::StartFolderWatchers() - IsFromGoogleCampaign.
CChromeSAPGuard::OnNotifyPopupLinkClick, Begin
CChromeSAPGuard::OnNotifyPopupLinkClick, Can't get the desktop rect.
CChromeSAPGuard::OnNotifyPopupLinkClick, End
ChromeSAPUpdater::CopySPsFromChromeFolder updater is not initialized
ChromeSAPUpdater::CopySPsFromChromeFolder bIncludingDsp =
ChromeSAPUpdater::CopyOrSetHP updater is not initialized
ChromeSAPUpdater::CopyOrSetHP szHomepage =
ChromeSAPUpdater::SetDSP updater is not initialized
ChromeSAPUpdater::SetDSP iDspId =
ChromeSAPUpdater::EnableNewTab updater is not initialized
ChromeSAPUpdater::EnableNewTab bEnable =
CChromeSAPGuard::UpdateEventsArray() - return. CreateToolhelp32Snapshot failed. Last Error Code
CChromeSAPGuard::UpdateEventsArray() - return. Process32First failed. Last Error Code
ChromeSAPUpdater::UpdateSAPs
ChromeSAPUpdater::UpdateThread enter
ChromeSAPUpdater::UpdateThread exit
ChromeSAPUpdater::Start failed!
ChromeSAPUpdater::Stop
vprot.exe - CDefaultSearchProviderGuard::Stop()
\configuration.xml
vprot.exe - DNTGuard::Run()
Software\%s\DNT\Settings
vprot.exe - DNTGuard::Stop
Software\%s\DNT\Tabs
A\test.dat
vprot::CDNTInitThread::ExecuteThreadEvent DNT db update success
vprot::CDNTInitThread::ExecuteThreadEvent DNT db update error
vprot::winmain::WndProc DNT set URL err:
CDSPDriverManager::GetChangedName: UrlEscape failed
Guard/UI/SearchProvider/UrlPage
Guard/UI/SearchProvider/LocalUrlPage
CDSPDriverManager::OpenWindow zsUrl
777705555443332
5555443332
5555443332
Guard/UI/Homepage/UrlPage
Guard/UI/Homepage/LocalUrlPage
AVGTB::Broadcast::MsgId
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\
Installation/EnableHelperIEUrl
þATURENAME%
LPsapi.dll
iexplore.exe
%s\Software\Microsoft\Windows\CurrentVersion\Ext\Settings
Cvprot.exe - CInstallStatsGuard::Run()
Software\%s\%s
vprot.exe - CInstallStatsGuard::Stop
.LastInstallOnline
InstallStatsShouldBeSent
firefox.exe
ChromeSearchAssetsAdded
vprot.exe - LoadPrefetch, start
vprot.exe - LoadPrefetch, end
vprot.exe - ClosePrefetch, start
vprot.exe - CReporter::SendStats - URL
vprot.exe - CReporter::SendStats - Return status code
CSAPsUpdateManager:KillIeTimer ,g_UdpdateSAPsCheckIeClosed
CSAPsUpdateManager:KillFfTimer ,g_UdpdateSAPsCheckFfClosed
CSAPsUpdateManager:KillChTimer ,g_UdpdateSAPsCheckChClosed
CSearchGroupUpdateManager::IsRefreshIndicator, value if browser key
vprot.exe - SearchGroupGuard::Run()
Software\%s
vprot.exe - SearchGroupGuard::Stop
vprot.exe - CSearchGroupGuard::OnRegistryKeyChanged()
CCSiteSafetyInitThread::ExecuteThreadEvent site safety url db update success
pvprot::CSiteSafetyInitThread::ExecuteThreadEvent site safety url db update error
vprot::CSiteSafetyInitThread::ExecuteThreadEvent site safety init start
CSiteSafetyInitThread::ExecuteThreadEvent site safety init success
vprot::CSiteSafetyInitThread::ExecuteThreadEvent site safety init error
vprot::winmain::WndProc SiteSafety set feed URL err:
\SiteSafety\Url
Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\
\Packages\windows_ie_ac_001\AC\
vprot.exe - CUpdateVersionCare::Run()
vprot.exe - CUpdateVersionCare::OnRegistryKeyChanged()
vprot.exe - CUpdateVersionCare::GetChangedName()
vprot.exe - CUpdateVersionCare::GetChangedName() sRet:
vprot.exe - SAPsGuard::Run()
vprot.exe - SAPsGuard::Stop
vprot.exe - CSAPsGuard::OnRegistryKeyChanged()
Software\%s\IEG
*_toolbar.dll
Guard/DspPopupWndURL
vprot.exe - WndProc() UM_DSP_POPUP_DONE - Stats URL :
vprot.exe - WndProc() UM_DSP_POPUP_DONE - Failed to send statistics
vprot.exe - WndProc() UM_DSP_POPUP_DONE - Failed to open the configuration file.
vprot.exe - _tWinMain, creating mutex.
vprot.exe - _tWinMain, start
vprot.exe - _tWinMain, can't find configuration file.
vprot.exe - _tWinMain, FolderName
vprot.exe - _tWinMain, can't get partner name.
vprot.exe - g_UpdateVersionCare, started
Installation/Homepage/Url
vprot.exe - _tWinMain, Homepage
vprot.exe - _tWinMain, DefaultSearchProviderGUID
Installation/DSP/Url
vprot.exe - _tWinMain, DefaultSearchProviderURL
vprot.exe - _tWinMain, ToolbarGuid
Guard/SiteSafetyURLServer
Guard/DNTURLServer
Installation/Chrome/INSTANT_CHECK_INTERVAL
vprot HandleSearchAssets, adding Firefox assets....
vprot HandleSearchAssets, Firefox assets already added.
stats.ini
ESTATS_URL_
vprot.exe OnSiteSafetyUpdateDB, now
vprot.exe OnSiteSafetyUpdateDB, update
HandledFirefox
HandledFirefoxUpdate
vprot HandleFirefox, bIsFirefoxRunning
vprot HandleFirefox, ff is running. quit.
RemoveFirefoxFromProfile
vprot HandleFirefox, XPI
vprot HandleFirefox, fnProfilesXpiUnInstaller, error:
FirefoxSPName
\extensions.cache
vprot HandleFirefox, bAfterFFToolbarUpdate, set KeywordURL
Installation/KeywordUrl/EnableKeywordURL
Installation/KeywordUrl/Url
vprot HandleFirefox, done.
vprot.exe - MyRegisterClass
vprot.exe - InitInstance start
vprot.exe - InitInstance error
xuser32.dll
vprot.exe - InitInstance success
vprot.exe - WndProc(..) WM_CREATE caught.
vprot.exe - CAdBlockerManager available
vprot.exe - OS
vprot.exe - new CChromeSAPGuard failed.
vprot.exe - WndProc(..) - Higher than XP ,DSP Driver Manager Guard
vprot.exe - WndProc(..) WM_COMMAND caught.
vprot.exe - WndProc() WM_DESTROY caught
vprot.exe - WndProc() WM_SET_AVGTB caught
vprot.exe - WndProc() UM_EXTENABLE_HELPER caught
vprot.exe - WndProc() UM_START_POPUP_HELPER caught
vprot.exe - WndProc() UM_IE_CHECK_CLOSED caught
vprot.exe - WndProc() UM_FF_CHECK_CLOSED caught
vprot.exe - WndProc() UM_CH_CHECK_CLOSED caught
vprot.exe - WndProc() UM_SITESAFETY_DB_UPDATE caught
vprot.exe - WndProc() UM_SITESAFETY_INIT_FINISH_DB_UPDATED caught
vprot.exe - WndProc() UM_SITESAFETY_INIT_FINISH caught
vprot.exe - WndProc() UM_SITESAFETY_DB_UPDATE_FINISH caught
vprot.exe - WndProc() UM_DNT_TAB_CHANGED caught
vprot.exe - WndProc() UM_DNT_CONFIG_UPDATE caught
vprot.exe - WndProc() UM_DNT_CONFIG_UPDATE_FINISH caught
vprot.exe - WndProc() UM_DNT_SETTING_CHANGED caught
vprot.exe - WndProc() UM_DSP_POPUP_DONE
vprot.exe - WndProc() UM_DEL_DOWNLOADHISTORY caught
vprot.exe - WndProc() WM_REFRESH_CACHE caught
vprot StartInlineInstallation - Create CChromeInlineInstallation
vprot.exe - SetAutoDisableScopes()
vprot.exe - SetAutoDisableScopes() setting for profile
vprot HandleEnableFFToolbar, bIsFirefoxRunning
vprot HandleEnableChromeExtension, start
vprot HandleEnableChromeExtension, bIsChromeRunning
vprot HandleEnableChromeExtension, Chrome is running. quit.
vprot HandleEnableChromeExtension, enable toolbar.
vprot EnableChromeNPPlugin start
vprot EnableChromeNPPlugin start timer.
vprot OnHandleEnableChromeExtension start
vprot OnHandleEnableChromeExtension, kill timer
HttpFlagEnabled
vprot.exe - InitHostBrowser, szCmdLine:
vprot.exe - InitHostBrowser, gIsAfterInstall = true
vprot.exe - InitHostBrowser, writing InstallerSession=1
vprot.exe - InitHostBrowser, writing InstallUser=1
InstalledProducts.ini
vprot.exe - InitHostBrowser, Not AfterInstall
vprot.exe - InitHostBrowser, Install for other User
vprot.exe - InitHostBrowser, NOT Install for other User
vprot.exe - InitHostBrowser, It's Install User
vprot.exe - UpdateSuggestionsURLs, start
vprot.exe - UpdateSuggestionsURLs, bundle installation - exit.
vprot.exe - UpdateSuggestionsURLs, Update IE.
vprot.exe - UpdateSuggestionsURLs, IE SP exists - start the update.
vprot.exe - UpdateSuggestionsURLs, IE Update success
vprot.exe - UpdateSuggestionsURLs, no IE SP.
vprot.exe - UpdateSuggestionsURLs, Update FF.
vprot.exe - UpdateSuggestionsURLs, FF Update success
vprot.exe - UpdateSuggestionsURLs, Update CH.
vprot.exe - UpdateSuggestionsURLs, Start timer.
vprot.exe - UpdateSuggestionsURLs, end, IE res =
vprot.exe - UpdateSuggestionsURLs, end, FF res =
vprot.exe - UpdateSuggestionsURLs, end, CH res =
vprot.exe - ChromeUpdateSuggestTimerProc, CH Update success
vprot.exe - ChromeUpdateSuggestTimerProc, no CH SP.
vprot.exe - StartCleanLogTimer, start.
Guard/CleanLogInterval
vprot.exe - StartCleanLogTimer, can't get interval from the configuration file.
vprot.exe RefreshToolbarCache() - failed to run RefreshCache
vprot.exe RefreshToolbarCache() - failed to load toolbar.dll
vprot.exe HandleChromeSearchAssets() , start
vprot HandleChromeSearchAssets, bIsChromeRunning
vprot.exe HandleChromeSearchAssets() , adding Chrome assets....
vprot.exe HandleChromeSearchAssets() , Chrome assets already added.
FGuard/AdBlocker/PrefetchURL
vprot.exe - CAdBlockerManager the prefetch URL is empty in cfg file
vprot.exe - get configuration zsPrefetchTimeMin failed
vprot.exe - CAdBlockerManager::CAdBlockerManager dPrefetchTimeMin
vprot.exe - m_pAdBlockerHandlePendingThread, started
vprot.exe - m_pAdBlockerRegGuard, started
vprot.exe - m_pAdBlockerSilentWindowGuard, started
vprot.exe - CAdBlockerManager::~CAdBlockerManager
vprot.exe - CAdBlockerManager::ClosePrefetchWindow start
vprot.exe - CAdBlockerManager::OpenPrefetchWindow start openState
vprot.exe - CAdBlockerManager::OpenPrefetchWindow OpenedOnRegistryGuard
vprot.exe - CAdBlockerManager::OpenPrefetchWindow current state closed
vprot.exe - CAdBlockerManager::OpenPrefetchWindow before LoadPrefetch
vprot.exe, CAdBlockerManager::OpenPrefetchWindow not found then create new
vprot.exe - CAdBlockerRegGuard::Run()
vprot.exe - CAdBlockerRegGuard::OnRegistryKeyChanged started
vprot.exe - CAdBlockerSilentWindowGuard::OnRegistryKeyChanged AgreeAb
CAdBlockerRegGuard::OnRegistryKeyChanged return to thread loop on exit event
vprot.exe - CAdBlockerRegGuard::GetChangedName()
vprot.exe - CAdBlockerRegGuard::GetChangedName() sRet:
vprot.exe - CAdBlockerSilentWindowGuard::Run()
vprot.exe - CAdBlockerSilentWindowGuard::OnRegistryKeyChanged()
vprot.exe - CAdBlockerSilentWindowGuard::GetChangedName()
vprot.exe - CAdBlockerSilentWindowGuard::GetChangedName() sRet:
updater.xml
Updater/Logger/Port
127.0.0.1
c:\BuildAgent\work\906b1f4be197b432\CommonRep\Common\Include\log4cplus\include\log4cplus/helpers/pointer.h
okernel32.dll
installer_cfg.ini
CSystemCommands::CloseAllIEWindows - NOT host Browser , Exit
%COBRAND%
%DISTSOURCE%
%CMPID%
%UID%
wtustats.avg.com
%STATSDOMAIN%
stats.avg.com
avg.install.guid
ÿGUID%
avg_secure_search.log
Ieframe.dll
Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
EnhancedModeSupport
%d_%d_%d_%d
CChromeBrowser::CChromeBrowser() - KillChrome:
CChromeBrowser::CChromeBrowser() - XP:
CChromeBrowser::GetHomepage - start
CChromeBrowser::GetHomepage - ret
CChromeBrowser::GetStartup - start
CChromeBrowser::EnbaleNPPluginForChrome21 - start
CChromeBrowser::EnbaleNPPluginForChrome21 - reading json from file
CChromeBrowser::EnbaleNPPluginForChrome21 - bReadJSONSuccessful
CChromeBrowser::EnbaleNPPluginForChrome21 - writing json to file
CChromeBrowser::SetHomepage - hp
CChromeBrowser::SetHomepage - NOT host Browser , Exit
CChromeBrowser::SetHomepage - reading json from file
CChromeBrowser::SetHomepage - bReadJSONSuccessful
CChromeBrowser::SetHomepage - writing json to file
CChromeBrowser::SetHomepage - ret
CChromeBrowser::SetStartup - hp
CChromeBrowser::SetStartup - NOT host Browser , Exit
CChromeBrowser::SetStartup - reading json from file
CChromeBrowser::SetStartup - bReadJSONSuccessful
CChromeBrowser::SetStartup - hp set
CChromeBrowser::SetStartup - ret
CChromeBrowser::CreateSearchProvider - start
CChromeBrowser::CreateSearchProvider - NOT host Browser , Exit
CChromeBrowser::CreateSearchProvider - Chrome is running.
CChromeBrowser::CreateSearchProvider - ERROR_INVALID_HANDLE
CChromeBrowser::CreateSearchProvider - CChromeSearchProvider.sShortName
CChromeBrowser::CreateSearchProvider - CChromeSearchProvider.sUrl
CChromeBrowser::CreateSearchProvider - AlreadyExist, so we update.
CChromeBrowser::CreateSearchProvider - Chrome version >= 17, we need to update the meta signature
CChromeBrowser::UpdateSearchProvider - NOT host Browser , Exit
CChromeBrowser::DeleteSearchProvider - start
CChromeBrowser::DeleteSearchProvider - Chrome is running.
CChromeBrowser::DeleteSearchProvider - ERROR_INVALID_HANDLE
CChromeBrowser::SearchProviderExist - CChromeSearchProvider.sShortName
CChromeBrowser::SearchProviderExist - CChromeSearchProvider.sUrl
CChromeBrowser::SearchProviderExist - start
CChromeBrowser::SearchProviderExist - ERROR_INVALID_HANDLE
CChromeBrowser::SearchProviderExist - search provider exist.
CChromeBrowser::SearchProviderExist GetIdFromMetaTable
\Chrome\Default\Preferences
CChromeBrowser::GetDefaultSearchProvider - reading json from file
CChromeBrowser::GetDefaultSearchProvider - bReadJSONSuccessful
CChromeBrowser::GetDefaultSearchProvider - JSON probelm didn't read all values
CChromeBrowser::GetDefaultSearchProvider - Chrome is running.
CChromeBrowser::GetDefaultSearchProvider - start
CChromeBrowser::GetDefaultSearchProvider - ERROR_INVALID_HANDLE
CChromeBrowser::GetDefaultSearchProvider - INSTALLER_ERROR_CHROME_ERROR
CChromeBrowser::GetDefaultSearchProvider GetIdFromMetaTable
CChromeBrowser::SetDefaultSearchProvider - start
CChromeBrowser::SetDefaultSearchProvider - NOT host Browser , Exit
CChromeBrowser::SetDefaultSearchProvider - Chrome is running.
CChromeBrowser::SetDefaultSearchProvider - ERROR_INVALID_HANDLE
CChromeBrowser::SetDefaultSearchProvider - Chrome version >= 17, SP exists and is default, do not set again.
CChromeBrowser::SetDefaultSearchProvider SearchDB
CChromeBrowser::SetDefaultSearchProvider - Chrome version >= 17, we need to update the meta signature
CChromeBrowser::SetDefaultSearchProvider - Can't write DSP to preferences.
CChromeBrowser::IsDefaultSearchProvider - start
CChromeBrowser::IsDefaultSearchProvider - bSpExists:
CChromeBrowser::IsDefaultSearchProvider - bDSpIsDefault:
CChromeBrowser::InsertUpdateDB - start
CChromeBrowser::InsertUpdateDB - sqlite3_open
CChromeBrowser::InsertUpdateDB sql
CChromeBrowser::InsertUpdateDB err
CChromeBrowser::SearchDB - start
CChromeBrowser::SearchDB - CChromeSearchProvider is NULL.
CChromeBrowser::SearchDB - Chrome is running.
CChromeBrowser::SearchDB - sqlite3_open
CChromeBrowser::SearchDB sql
CChromeBrowser::SearchDB - sqlite3_prepare
CChromeBrowser::CreateSearchProvider - pChromeSearchProvider->sShortName
CChromeBrowser::CreateSearchProvider - pChromeSearchProvider->sUrl
CChromeBrowser::UpdateMetaTable - id
CChromeBrowser::UpdateMetaTable - sqlite3_open
)CChromeBrowser::UpdateMetaTable sql
CChromeBrowser::UpdateMetaTable err
CChromeBrowser::UpdateMetaTableBackup - id
CChromeBrowser::UpdateMetaTableBackup - sqlite3_open
CChromeBrowser::UpdateMetaTableBackup sql
CChromeBrowser::UpdateMetaTableBackup err
CChromeBrowser::GetIdFromMetaTable - start
CChromeBrowser::GetIdFromMetaTable - Chrome is running.
CChromeBrowser::GetIdFromMetaTable - sqlite3_open
CChromeBrowser::GetIdFromMetaTable - sqlite3_prepare
CChromeBrowser::GetIdFromMetaTable - sqlite3_step
CChromeBrowser::GetIdFromMetaTable - return value
CChromeBrowser::GetBackupIdFromMetaTable - start
CChromeBrowser::GetBackupIdFromMetaTable - Chrome is running.
CChromeBrowser::GetBackupIdFromMetaTable - sqlite3_open
CChromeBrowser::GetBackupIdFromMetaTable - sqlite3_prepare
CChromeBrowser::GetBackupIdFromMetaTable - sqlite3_step
CChromeBrowser::GetBackupIdFromMetaTable - return value
CChromeBrowser::UpdateMetaWithoutSignature sql
CChromeBrowser::UpdateMetaWithoutSignature err
CChromeBrowser::InitSearchProviderFromIni - szIniPath
CChromeBrowser::InitSearchProviderFromIni - NOT host Browser , Exit
CChromeBrowser::InitSearchProviderFromIni - iniReader.Init failed.
CChromeBrowser::InitSearchProviderFromIni - szDisplayName
CChromeBrowser::InitSearchProviderFromIni - szDefaultSearchURL
CChromeBrowser::InitSearchProviderFromIni - szPartner
CH_SUGGESTIONS_URL
CH_SUGGESTIONS_URL_FALLBACK
FAV_ICON_URL_FALLBACK
CChromeBrowser::InitSearchProviderFromIni - szSuggestionsURL
CChromeBrowser::InitSearchProviderFromIni - szSuggestionsURLFallback
CChromeBrowser::InitSearchProviderFromIni - szFaviconURLFallback
CChromeBrowser::InitSearchProviderFromIni - failed to create CChromeSearchProvider.
CChromeBrowser::InitSearchProviderFromRegistry
CChromeBrowser::InitSearchProviderFromRegistry - NOT host Browser , Exit
CChromeBrowser::InitSearchProviderFromRegistry - szDisplayName
CChromeBrowser::InitSearchProviderFromRegistry - szDefaultSearchURL
CChromeBrowser::InitSearchProviderFromRegistry - szPartner
Installation/Chrome/INSTANT
https:
http:
Installation/Chrome/TERM
CChromeBrowser::InitSearchProviderFromRegistry - szSuggestionsURL
CChromeBrowser::InitSearchProviderFromRegistry - szSuggestionsURLFallback
CChromeBrowser::InitSearchProviderFromRegistry - szFaviconURLFallback
CChromeBrowser::InitSearchProviderFromRegistry - zsInstantUrl
CChromeBrowser::InitSearchProviderFromRegistry - zsSearchTerm
avg.yandex.com.tr
http://suggest.yandex.com.tr/suggest-ff.cgi?uil=tr&part={searchTerms}
http://yandex.com.tr/favicon.ico
http://avg.yandex.com.tr/yandsearch?win=106&clid=2064887&text={searchTerms}
CChromeBrowser::InitSearchProviderFromRegistry - failed to create CChromeSearchProvider.
CChromeBrowser::CreateWhereClause - both short_name and url are empty!
CChromeBrowser::DeleteSearchProvider - id
CChromeBrowser::DeleteSearchProvider - sqlite3_open
CChromeBrowser::DeleteSearchProvider sql
CChromeBrowser::DeleteSearchProvider err
CChromeBrowser::DeleteSearchProvider - Chrome version >= 17, we need to update the meta signature
Google\Chrome\Application\chrome.exe
CurrentChromeInstallationPath :
CChromeBrowser::CloseBrowser - NOT host Browser , Exit
CChromeBrowser::ResetHP - reading json from file
CChromeBrowser::GetVersion - Not Installed
ChromeBrowser:: Version Failed
ChromeBrowser:: Version
ChromeExt
CChromeBrowser::ResetHP - hp
CChromeBrowser::ResetHP - bReadJSONSuccessful
CChromeBrowser::ResetHP - writing json to file
CChromeBrowser::ResetHP - Parnter found, try to revert
CChromeBrowser::ResetHP - Parnter found, revert failed - reset the HP.
CChromeBrowser::ResetHP - Parnter found, revert failed - reset the Startup.
CChromeBrowser::ResetHP - ret
CChromeBrowser::ResetDSP - start
CChromeBrowser::ResetDSP - sqlite3_open
CChromeBrowser::ResetDSP - Chrome version >= 17, we need to update the meta signature
CChromeBrowser, zsShouldEnableNT
CChromeBrowser::SetEnableNTToReg() - bIsUpdateInstallation
CChromeBrowser::SetEnableNTToReg - Set zsShouldEnableNT to 0
CChromeBrowser::SetEnableNTToReg() - szIsNewTabEnabled is set
CChromeBrowser::SaveRevertHpToRegistry - start
CChromeBrowser::SaveRevertHpToRegistry - ChromeSearchAssetsAdded
CChromeBrowser::SaveRevertHpToRegistry - Chrome is running.
CChromeBrowser::SaveRevertHpToRegistry , start
CChromeBrowser::SaveRevertHpToRegistry , Writing to registry
CChromeBrowser::SaveRevertHpToRegistry ,szHomepage not empty
CChromeBrowser::SaveRevertHpToRegistry , Writing None to Revert_HP
CChromeBrowser::SaveRevertHpToRegistry , Already exist in registry
CChromeBrowser::SaveRevertHpToRegistry , zsRevertSupCh Already exist in registry
CChromeBrowser::SaveRevertDspToRegistry - start
CChromeBrowser::SaveRevertDspToRegistry - ChromeSearchAssetsAdded
CChromeBrowser::SaveRevertDspToRegistry - Chrome is running.
CChromeBrowser::SaveRevertDspToRegistry , start
CChromeBrowser::SaveRevertDspToRegistry , Writing to registry
CChromeBrowser::SaveRevertDspToRegistry , write Revert_DSP
CChromeBrowser::SaveRevertDspToRegistry , Writing None to Revert_DSP
CChromeBrowser::SaveRevertDspToRegistry ,Already exist in registry
CChromeBrowser::RevertHpFromRegistry - start
CChromeBrowser::RevertHpFromRegistry - Chrome is running.
CChromeBrowser::RevertHpFromRegistry , start
CChromeBrowser::RevertStartupFromRegistry - start
CChromeBrowser::RevertStartupFromRegistry - Chrome is running.
CChromeBrowser::RevertStartupFromRegistry , start
CChromeBrowser::RevertDspFromRegistry - start
CChromeBrowser::RevertDspFromRegistry - Chrome is running.
CChromeBrowser::RevertDspFromRegistry , start
CChromeBrowser::IsHostBrowser,CH
CChromeBrowser::RefreshHpUrl - hp
CChromeBrowser::RefreshHpUrl - NOT host Browser , Exit
CChromeBrowser::RefreshHpUrl - reading json from file
CChromeBrowser::RefreshHpUrl - bReadJSONSuccessful
CFirefoxBrowser::RefreshHpUrl , szHomepage before replace
CChromeBrowser::RefreshHpUrl - writing json to file
CChromeBrowser::RefreshHpUrl - ret
CChromeBrowser::RefreshDspUrl , start
CChromeBrowser::RefreshDspUrl - NOT host Browser , Exit
CChromeBrowser::UpdateSearchProvider - start
CChromeBrowser::UpdateSearchProvider - Chrome is running.
CChromeBrowser::UpdateSearchProvider - ERROR_INVALID_HANDLE
CChromeBrowser::UpdateSearchProvider - Chrome version >= 17, SP exists and is default, do not set again.
CChromeBrowser::UpdateSearchProvider - Chrome version >= 17, we need to update the meta signature
Installation/Chrome/PEMGUID
CChromeBrowser::IsAVGToolbarEnabled - Can't read the preference file.
CChromeBrowser::IsNewTabActive - start
CChromeBrowser::IsNewTabActive - the new tab is not active because Instant URL is not exists.
CChromeBrowser::IsNewTabActive - the new tab is not active becuase the CURRENT_USER NT flag is not enabled
CChromeBrowser::IsNewTabActive - the new tab is not active becuase the LOCAL_MACHINE NT flag is not enabled
CChromeBrowser::IsNewTabActive - end, the new tab is active
CChromeBrowser::IsExtensionEnabled start.
CChromeBrowser::IsExtensionEnabled - ERROR_INVALID_HANDLE
CChromeBrowser::IsExtensionEnabled - empty extension name
CChromeBrowser::IsExtensionEnabled - INSTALLER_ERROR_CHROME_ERROR
CDomainADBlockerCH::GetExtensionState we don't currenty support this state.
CChromeBrowser::SetExtensionEnabled start.
CChromeBrowser::SetExtensionEnabled - ERROR_INVALID_HANDLE
CChromeBrowser::SetExtensionEnabled - empty extension name
CChromeBrowser::SetExtensionEnabled - INSTALLER_ERROR_CHROME_ERROR
CChromeBrowser::SetExtensionEnabled - enable extention
sCChromeBrowser::SetExtensionEnabled - disable extention
CChromeBrowser::SetExtensionEnabled - writing json to file
CChromeBrowser::SetExtensionEnabled failed to read preferences
CChromeBrowser::EnableExtension - Start
CChromeBrowser::EnableExtension - NOT host Browser , Exit
CChromeBrowser::EnableExtension - EnableExtensionExtractingCrx, zsVersion
CChromeBrowser::EnableExtension - EnableExtensionInPreference, zsVersion
CChromeBrowser::EnableExtension - function ret:
\avg.crx
CChromeBrowser::EnableExtensionInPreference - Start
CChromeBrowser::EnableExtensionInPreference,
CChromeBrowser::EnableExtensionInPreference - Can't read the preference file.
\manifest.json
eCChromeBrowser::EnableExtensionInPreference - return value:
CChromeBrowser::CopyDetourFilesToAVGFolder, Begin
CChromeBrowser::CopyDetourFilesToAVGFolder, Can't create partner folder.
\Chrome
CChromeBrowser::CopyDetourFilesToAVGFolder, Can't create Chrome folder.
CChromeBrowser::CopyDetourFilesToAVGFolder, Can't create Default folder.
\Google\Chrome\User Data\Default\Preferences
\Google\Chrome\User Data\Default\Web Data
CChromeBrowser::CopyDetourFilesToAVGFolder, End. Res=
CChromeBrowser::MoveDetourFilesFromAVGFolder, Begin
\Chrome\Default\Web Data
CChromeBrowser::MoveDetourFilesFromAVGFolder, End. err=
CChromeBrowser::GetDSPFromChromeWebData - start
CChromeBrowser::GetDSPFromChromeWebData - ERROR_INVALID_HANDLE
CChromeBrowser::GetDSPFromChromeWebData GetIdFromMetaTable
CChromeBrowser::CopyChromeHPToAVG().
CChromeBrowser::SetNTToAVG started
CChromeBrowser::CopyChromeSPToAVG(). CopyDsp
CChromeBrowser::CopyChromeSPToAVG() = SQLITE_OK
CChromeBrowser::CopyChromeSPToAVG() - sqlite3_open
CChromeBrowser::CopyChromeSPToAVG() - sqlite3_prepare
CChromeBrowser::CopyChromeSPToAVG() - Error in sqlite3_finalize() 1 Call
CChromeBrowser::CopyChromeSPToAVG() - Error in sqlite3_finalize() 2 Call
CChromeBrowser::CopyChromeSPToAVG() Error SQLite operation
CChromeBrowser::CopyChromeSPToAVG()
\Chrome\Default\
Web Data
\Google\Chrome\User Data\Default\
CChromeBrowser::SetDSPInPrefFile - Start
CChromeBrowser::SetDSPInPrefFile - reading json from file
CChromeBrowser::SetDSPInPrefFile - bReadJSONSuccessful
CChromeBrowser::GetPartnerDSPUrl - start
CChromeBrowser::GetPartnerDSPUrl - Chrome is running.
CChromeBrowser::GetPartnerDSPUrl - sqlite3_open
CChromeBrowser::GetPartnerDSPUrl sql
CChromeBrowser::GetPartnerDSPUrl - sqlite3_prepare
CChromeBrowser::GetPartnerDSPUrl - pChromeSearchProvider->sUrl
CChromeBrowser::AutoDisableToolbar - Start.
%LOCALAPPDATA%\Google\Chrome\User Data\Default\
CChromeBrowser::AutoDisableToolbar - Can't get paths.
CChromeBrowser::AutoDisableToolbar - Can't disable user toolbar.
CChromeBrowser::UpdateIntantUrl entered
CChromeBrowser::UpdateIntantUrl - sqlite3_open
CChromeBrowser::UpdateIntantUrl sql
CChromeBrowser::UpdateIntantUrl err
CChromeBrowser::UpdateIntantUrl exit
CChromeBrowser::EnableToolband - ERROR_INVALID_HANDLE
CChromeBrowser::IsPartnerDefaultSearchProvider - Start.
CChromeBrowser::IsPartnerHomePage - Start.
CChromeBrowser::GetStartupFromJson - failed reading Json
CChromeBrowser::GetStartupFromJson - szStartup:
CChromeBrowser::GetHomepageFromJson - failed reading Json
CChromeBrowser::GetHomepageFromJson - szHomepage:
%s\Google\Chrome\User Data\Default\Extensions\%s
CChromeBrowser::ExtractChromeExtContentToUser, PEM
CChromeBrowser::ExtractChromeExtContentToUser, Crx
CChromeBrowser::ExtractChromeExtContentToUser, CRX Path
\%s_%s
CChromeBrowser::ExtractChromeExtContentToUser, new extension directory
CChromeBrowser::ExtractChromeExtContentToUser, AVG preferences
%s\%s_%s
CChromeSAPGuard::SetDSPInAVGFolder - start
OCChromeSAPGuard::SetDSPInAVGFolder - end. Ret
CChromeBrowser::IsInstantURLActive - start
CChromeBrowser::IsInstantURLActive - Chrome is running.
CChromeBrowser::IsInstantURLActive - sqlite3_open
CChromeBrowser::IsInstantURLActive sql
CChromeBrowser::IsInstantURLActive - sqlite3_prepare
CChromeBrowser::IsInstantURLActive - res
desktop.ini
Advapi32.dll
CRegistry::CreateRegistryKey(), Create error
CRegistry::OpenRegistryKey() - Tried to open
CRegistry::OpenRegistryKey(), Open error
CRegistry::getValue(...), for key
CRegistry::setValue(...), for key
CRegistry::removeValue(...), for key
CreateRegistryKey FAIL_TO_CREATE_REGISTRY
CRegistry::IsKeyExists(), Open error
CRegistry::getMultiValue(...), for key
CRegistry::setMultiValue(...), for key
CRegistry::DeleteAll(), RecurseDeleteKey error
Software\Microsoft\Windows NT\CurrentVersion\ProfileList\
\NTUSER.DAT
CRegistry::SetValueAllUsers - Failed to get users key
CRegistry::GetValueAllUsers - Failed to get users key
CRegistry::CreateKeyAllUsers - Start
CRegistry::CreateKeyAllUsers - Failed to get users key
CRegistry::CreateKeyAllUsers - Number of users in reg
configuration.xml
WebTuneup
AVG Web TuneUp
CBrowser::SetPreferencesPerUsers, setting for Chrome, success
CBrowser::IsSearchAssetsAdded, Browser key
CBrowser::IsSearchAssetsAdded, value if browser key
avg-secure-search.xml
InstMaxSupportVer
CBrowser::UpdateChromeInstantUrl bInstantUrlUpdated =
%s: Ioctl = %p, ret = %d. GLE = %d
CChromeExtensionJson::CChromeExtensionJson() - failed reading preferences Json
CChromeExtensionJson::CChromeExtensionJson() - failed reading Extension Template or replace values
CChromeExtensionJson::CChromeExtensionJson() - failed reading template Json
\ExtensionTemplate.txt
CChromeExtensionJson::ReadExtensionTemplateAndReplaceValues templates file
CChromeExtensionJson::ReadExtensionTemplateAndReplaceValues time string is empty
CChromeExtensionJson::ReadExtensionTemplateAndReplaceValues fail to create tmp file
CThreadPostMsgOnEvent::Execute() - event to initialized
CThreadPostMsgOnEvent::Execute() - got the event - send message
CThreadPostMsgOnEvent::Execute() - an error ocurred
CThreadPostMsgOnEvent::Execute() - wait for event
CThreadPostMsgOnEvent::WaitForEvent() CreateEvent err
LNEWTABURL
IE_SUGGESTIONS_URL
IE_SUGGESTIONS_URL_FALLBACK
IE_SUGGESTIONS_URL_JSON
CHttpClient::DetermineHostAndUrl, resource
http://
https://
CHttpClient::DetermineHostAndUrl, Host
CHttpClient::DetermineHostAndUrl, Url
CHttpClient::SendString start
Mozilla/4.0 (compatible; MSIE 4.0; Windows NT 4.0)
CHttpClient::SendString userAgent
CHttpClient::SendString InternetOpen failed.
CHttpClient::SendString InternetConnect failed.
CHttpClient::SendString HttpOpenRequest failed.
CHttpClient::SendString HttpQueryInfo failed.
Microsoft\Internet Explorer\AboutURLs
res://ieframe.dll/tabswelcome.htm
Open registry HKEY_CURRENT_USER Start Page
SuggestionsURL
SuggestionsURLFallback
SuggestionsURL_JSON
FaviconURLFallback
CInternetExplorer::UpdateSearchProvider - try to open key:
CInternetExplorer::UpdateSearchProvider - key does not exist!
CInternetExplorer::UpdateSearchProvider - try to create key:
CInternetExplorer::UpdateSearchProvider - create key ended - return:
CInternetExplorer::UpdateSearchProvider - create key return:
\Internet Explorer\iexplore.exe
Software\Microsoft\Windows\CurrentVersion\Ext\Settings
CInternetExplorer::EnableToolband, DeleteKey
CInternetExplorer::IsToolbarEnabled key
CInternetExplorer::IsToolbarEnabled key exist
\favicon.ico
favicon.ico
Mozilla/4.0 (compatible; MSIE
; Windows NT
{95B7759C-8C7F-4BF1-B163-73684A933233}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\User Preferences
CInternetExplorer::SetDefaultSearchProvider, GrantRegKeyAccess
{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
CInternetExplorer::SetEnableNTToReg, zsShouldEnableNT
CInternetExplorer::SetEnableNTToReg - Set zsShouldEnableNT to 0
CInternetExplorer::RefreshHpUrl , start
CInternetExplorer::RefreshHpUrl - NOT host Browser , Exit
CInternetExplorer::RefreshHpUrl , szHomepage before replace
CInternetExplorer::RefreshHpUrl , zsPartnerHomePage is empty
CInternetExplorer::RefreshHpUrl , Driver is not running
CInternetExplorer::RefreshHpUrl , Driver is running and guard is enabled
CInternetExplorer::RefreshHpUrl , szHomepage after replace
CInternetExplorer::RefreshDspUrl , start
CInternetExplorer::RefreshDspUrl - NOT host Browser , Exit
CInternetExplorer::RefreshDspUrl, GrantRegKeyAccess
CInternetExplorer::RefreshNtUrl , start
CInternetExplorer::RefreshNtUrl - NOT host Browser , Exit
CInternetExplorer::AutoDisableToolbar - Can't create key.
\avgdttbx.dll
CDNTAdapter::CDNTAdapter error loading avgdttbx.dll
CDNTAdapter::CDNTAdapter() - _AvgDntSetDownloadDataURL
CDNTAdapter::AvgDntSetDownloadDataURL(%s) - return value
AvgDntSetDownloadDataURL not initialized, called failed
CDNTAdapter::AvgDntUpdateDataFile(%d) - return value
\%s\DNT
ScriptHelper.exe
CFirefoxBrowser::CFirefoxBrowser() - start
CFirefoxBrowser::CFirefoxBrowser() - INI
CFirefoxBrowser::CFirefoxBrowser() - failed to read INI file, try to get info from INI backup in registry.
CFirefoxBrowser::GetVersion - start
CFirefoxBrowser::GetVersion - version:
CFirefoxBrowser::GetVersionEx - start
CFirefoxBrowser::GetVersionEx - Not Installed
extensions.lastAppVersion
CFirefoxBrowser::GetVersionEx - version:
CFirefoxBrowser::GetVersionEx - short version:
SOFTWARE\Mozilla\Mozilla Firefox
CFirefoxBrowser::CreateSearchProvider - start
CFirefoxBrowser::CreateSearchProvider - NOT host Browser , Exit
CFirefoxBrowser::CreateSearchProvider - ERROR_INVALID_HANDLE
CFirefoxBrowser::CreateSearchProvider - failed to find xml to temp
CFirefoxBrowser::CreateSearchProvider - failed to replace common values
CFirefoxBrowser::CreateSearchProvider - copy XML to program files failed.
FireFoxSearchXml.tmp
CFirefoxBrowser::UpdateSearchProvider - NOT host Browser , Exit
CFirefoxBrowser::WriteKeyToGuardToSetDSP - start
CFirefoxBrowser::WriteKeyToGuardToSetDSP - end, return:
CFirefoxBrowser::SetDefaultSearchProvider - start
CFirefoxBrowser::SetDefaultSearchProvider - NOT host Browser , Exit
CFirefoxBrowser::SetDefaultSearchProvider - Firefox is running.
CFirefoxBrowser::SetDefaultSearchProvider - application is running in SYSTEM account!. Can not set as DSP.
CFirefoxBrowser::SetDefaultSearchProvider - INI Path:
CFirefoxBrowser::SetDefaultSearchProvider - failed to set DSP in all profiles
CFirefoxBrowser::IsNewTabActive
avg.userPreferences.newtabDisabledByUser
CFirefoxBrowser::IsNewTabActive - the new tab is not active becuase the user canceled
CFirefoxBrowser::IsNewTabActive - the new tab is not active becuase the CURRENT_USER NT flag is not enabled
CFirefoxBrowser::IsNewTabActive - the new tab is not active becuase the LOCAL_MACHINE NT flag is not enabled
CFirefoxBrowser::IsNewTabActive - the new tab is active.
CFirefoxBrowser::ReplaceCommonValues() - temp XML filename
CFirefoxBrowser::ReplaceCommonValues() - ReadTempXML failed.
CFirefoxBrowser::ReplaceCommonValues() - XML filename
CFirefoxBrowser::ReplaceCommonValues() - Partner name is empty.
CFirefoxBrowser::DetermineFFProfilesDir - start
CFirefoxBrowser::DetermineFFProfilesDir - GetSafeEnv return NULL
\Mozilla\Firefox\Profiles\
CFirefoxBrowser::DetermineFFProfilesDir - Firefox Folder
CFirefoxBrowser::GetSearchXMLLocation - GetCurrentFirefoxInstallationPath failed
CFirefoxBrowser::GetSearchXMLLocation - first XML location
CFirefoxBrowser::GetSearchXMLLocation - second XML location
CFirefoxBrowser::CopyXmlToProgramFiles - Copy from
CFirefoxBrowser::CopyXmlToProgramFiles - Copy to
CFirefoxBrowser::CopyXmlToProgramFiles firefox version is less than 21
CFirefoxBrowser::CopyXmlToProgramFiles create browser folder
CFirefoxBrowser::CopyXmlToUserData - Copy from
CFirefoxBrowser::CopyXmlToUserData - Copy to
CFirefoxBrowser::SetDSPinAllProfiles failed to write Pref.js to profile(USER)
CFirefoxBrowser::SetDSPinAllProfiles failed to write Pref.js to profile
CFirefoxBrowser::SetDSPinAllProfiles. Create directory is failed
CFirefoxBrowser::SetDSPinAllProfiles. CopyFile is failed
CFirefoxBrowser::RefreshSearchProviderXml - ERROR_INVALID_HANDLE
CFirefoxBrowser::SetDSPInAllProfilesAfterInstall. FireFoxSearchXml.tmp is not exist
CFirefoxBrowser::ReadTempXML() - CreateFile failed. GetLastError
CFirefoxBrowser::ReadTempXML() - ReadFile failed. GetLastError
CFirefoxBrowser::ReplaceDefaultSearchProvider - start
CFirefoxBrowser::ReplaceDefaultSearchProvider -pzsIniFile is not NULL
CFirefoxBrowser::ReplaceDefaultSearchProvider -Get display name
CFirefoxBrowser::ReplaceDefaultSearchProvider - DSP Display Name:
browser.search.defaultenginename
browser.search.selectedEngine
CFirefoxBrowser::WriteFile - CreateFile failed. GetLastError
CFirefoxBrowser::WriteFile - WriteFile failed. GetLastError
CFirefoxBrowser::WriteFile() - WriteFile failed. size written too small
CFirefoxBrowser::InitSearchProviderFromIni - ini
CFirefoxBrowser::InitSearchProviderFromIni - NOT host Browser , Exit
CFirefoxBrowser::InitSearchProviderFromRegistry
CFirefoxBrowser::InitSearchProviderFromRegistry - NOT host Browser , Exit
CFirefoxBrowser::GetHomepage, homepage
CFirefoxBrowser::GetHomepage, next profile
browser.startup.homepage
CFirefoxBrowser::GetHomepage, success
CFirefoxBrowser::SetHomepage, homepage
CFirefoxBrowser::SetHomepage - NOT host Browser , Exit
CFirefoxBrowser::SetHomepage - Firefox is running.
CFirefoxBrowser::SetHomepage, next profile
CFirefoxBrowser::SetHomepage, success
CFirefoxBrowser::GetKeywordUrl, szKeyWordUrl
CFirefoxBrowser::GetKeywordUrl, next profile
LCFirefoxBrowser::GetKeywordUrl, success
CFirefoxBrowser::SetKeywordUrl, szKeyWordUrl
CFirefoxBrowser::SetKeywordUrl - NOT host Browser , Exit
CFirefoxBrowser::SetKeywordUrl - Firefox is running.
CFirefoxBrowser::SetKeywordUrl, next profile
CFirefoxBrowser::SetKeywordUrl, success
CFirefoxBrowser::DeleteSearchProvider - start
CFirefoxBrowser::DeleteSearchProvider - Firefox is running.
CFirefoxBrowser::DeleteSearchProvider - ERROR_INVALID_HANDLE
CFirefoxBrowser::SearchProviderExist - start
CFirefoxBrowser::SearchProviderExist - Firefox is running.
CFirefoxBrowser::SearchProviderExist - ERROR_INVALID_HANDLE
CFirefoxBrowser::SearchProviderExist - failed to get Default search engine for profile
CFirefoxBrowser::SearchProviderExist - ProfileExist
CFirefoxBrowser::SearchProviderExist - ProfileDefault
CFirefoxBrowser::SearchProviderExist - ProgramFilesExist
CFirefoxBrowser::SearchProviderExist - ProgramFilesDefault
CFirefoxBrowser::SearchProviderExist - Exist
CFirefoxBrowser::SearchProviderExist - Default
CFirefoxBrowser::HandleXMLInInstalltion - start
CFirefoxBrowser::HandleXMLInInstalltion - File Path
CFirefoxBrowser::HandleXMLInInstalltion - delete
SOFTWARE\Mozilla\Mozilla Firefox\
CFirefoxBrowser::GetCurrentFirefoxInstallationPath - start
CFirefoxBrowser::GetCurrentFirefoxInstallationPath - fail to get CurrentVersion from
CFirefoxBrowser::GetCurrentFirefoxInstallationPath - CurrentVersion
PathToExe
CFirefoxBrowser::GetCurrentFirefoxInstallationPath - fail to get PathToExe from
CFirefoxBrowser::GetCurrentFirefoxInstallationPath - Path
\search.json
CFirefoxBrowser::RefreshSearchProviderSearchSqlite Sqlite path
CFirefoxBrowser::RefreshSearchProviderSearchSqlite - sqlite3_open
CFirefoxBrowser::RefreshSearchProviderSearchSqlite sql
CFirefoxBrowser::RefreshSearchProviderSearchSqlite err
\search.sqlite
RefreshUserSearchProviderList - check if search.json file exists @ path:
RefreshUserSearchProviderList - try to delete search.json @ path:
CFirefoxBrowser CleanupToolband - start
CFirefoxBrowser CleanupToolband - failed to cast.
CFirefoxBrowser CleanupToolband, id
extensions.installCache
CFirefoxBrowser EnableToolband - start
CFirefoxBrowser EnableToolband - failed to cast.
CFirefoxBrowser EnableToolband, id
CFirefoxBrowser EnableToolband, enabled
CFirefoxBrowser::IsExtensionEnabled - Failed to get extension ID.
extensions.json
CFirefoxBrowser::CheckInExtensionsJson - failed to build extension.sqlite path.
CFirefoxBrowser::InsertUpdateAddonTable - start
extensions.sqlite
CFirefoxBrowser::InsertUpdateAddonTable - failed to build extension.sqlite path.
CFirefoxBrowser::InsertUpdateAddonTable - sqlite3_open
CFirefoxBrowser::InsertUpdateAddonTable sql
CFirefoxBrowser::InsertUpdateAddonTable err
CFirefoxBrowser::DeleteFromAddonTable - start
CFirefoxBrowser::DeleteFromAddonTable - failed to build extension.sqlite path.
CFirefoxBrowser::DeleteFromAddonTable - sqlite3_open
CFirefoxBrowser::DeleteFromAddonTable sql
CFirefoxBrowser::DeleteFromAddonTable err
CFirefoxBrowser::AddonTableContainsToolbar - sqlite3_prepare
extensions.rdf
extensions.cache
CFirefoxBrowser::EnableInExtensionsRDF - Unable to create XML parser object
CFirefoxBrowser::EnableInExtensionsRDF - Unable to load XML document into the parser
CFirefoxBrowser::EnableInExtensionsRDF - failed to save the modified extension.rdf
CFirefoxBrowser::EnableInExtensionsRDF - unknown exception.
.default
CFirefoxBrowser::BuildDefaultProfileFilePath - failed.
CFirefoxBrowser::BuildDefaultProfileFilePath - BuildDefaultProfileFilePath
CFirefoxBrowser HandleExtensionIni - start
extensions.ini
CFirefoxBrowser HandleExtensionIni sIniPath:
SOFTWARE\Mozilla\Firefox\extensions
CFirefoxBrowser HandleExtensionIni szId:
CFirefoxBrowser HandleExtensionIni value of ::
CFirefoxBrowser HandleExtensionIni, sProfileExtensionPath:
CFirefoxBrowser HandleExtensionIni, sProfileExtensionPath exists
CFirefoxBrowser HandleExtensionIni, SetTextVector of ExtensionDirs
CFirefoxBrowser IsToolbarEnabled - start
CFirefoxBrowser IsToolbarEnabled - Error in casting - return false.
CFirefoxBrowser IsToolbarEnabled, ff toolbar folder name
CFirefoxBrowser IsToolbarEnabled - Error PathFileExists - return false.
Extension%d
CFirefoxBrowser IsToolbarEnabled. szToolbarDir=
CFirefoxBrowser IsToolbarEnabled - szToolbarDir is empty
\install.rdf
CFirefoxBrowser GetToolbarInstallState - start
CFirefoxBrowser GetToolbarInstallState, ff toolbar id
CFirefoxBrowser::RollbackNewTab - Firefox is running.
avg.install.newtab
CFirefoxBrowser::IsAVGToolbarEnabled, conf file
CFirefoxBrowser::IsAVGToolbarEnabled, FF toolbar ID
CFirefoxBrowser::IsAVGToolbarEnabled toolbar enabled
CFirefoxBrowser::IsAVGToolbarEnabled toolbar disabled
CFirefoxBrowser::RefreshFFBelow4ExtenionsRDF
CFirefoxBrowser::RefreshFFBelow4ExtenionsRDF - Version below 4, delete Extenions.rdf
CFirefoxBrowser::RefreshFFBelow4ExtenionsRDF, deleting extensions.rdf
\extensions.rdf
CFirefoxBrowser::RefreshFFBelow4ExtenionsRDF, extensions.rdf from path found, delete it
CFirefoxBrowser::ResetHP - start
CFirefoxBrowser::ResetHP - Firefox is running.
CFirefoxBrowser::ResetHP - GetDefaultProfile.
CFirefoxBrowser::ResetHP, next profile
CFirefoxBrowser::ResetHP - ,zsPartnerHomePage:
CFirefoxBrowser::ResetHP, szHomepage
CFirefoxBrowser::ResetHP, szHomepage not empty
CFirefoxBrowser::ResetHP, 1:sCurrUrl,
CFirefoxBrowser::ResetHP, zsCurrHomePage,
CFirefoxBrowser::ResetHP ,bFoundPartnerUrl = true;
CFirefoxBrowser::ResetHP ,sCurrUrl not equal to iniHost
CFirefoxBrowser::ResetHP ,bFoundPartnerUrl is true;
CFirefoxBrowser::ResetHP ,bReverted is true
CFirefoxBrowser::ResetHP ,bReverted is false and zsCurrHomePage is
CFirefoxBrowser::ResetHP, sCurrHomePage before deciding how to reset
CFirefoxBrowser::ResetHP ,zsCurrHomePage is empty
CFirefoxBrowser::ResetHP, Homepage empty so set tp default
CFirefoxBrowser::ResetHP, Partner removed
CFirefoxBrowser::ResetDSP - start
CFirefoxBrowser::ResetDSP - Firefox is running.
CFirefoxBrowser::ResetDSP failed to write Pref.js to profile
CFirefoxBrowser::DeleteXmlFromProgramFiles - start
CFirefoxBrowser::DeleteXmlFromProgramFiles - GetCurrentFirefoxInstallationPath failed
CFirefoxBrowser::DeleteXmlFromProgramFiles - Delete file from
CFirefoxBrowser::ResetDefaultSearchProvider - start
CFirefoxBrowser::ResetDefaultSearchProvider - Firefox is running.
CFirefoxBrowser::ResetDefaultSearchProvider - delete DEFAULT_ENGINE SELECTED_ENGINE
CFirefoxBrowser::ResetDefaultSearchProvider - SetDeafultSearchProviderToString failed
CFirefoxBrowser, zsShouldEnableNT
CFirefoxBrowser::SetEnableNTToReg - Set zsShouldEnableNT to 0
CFirefoxBrowser::SaveRevertHpToRegistry , start
CFirefoxBrowser::SaveRevertHpToRegistry ,FFSearchAssetsAdded
CFirefoxBrowser::SaveRevertHpToRegistry , Writing to registry
CFirefoxBrowser::SaveRevertHpToRegistry , write Revert_HP
CFirefoxBrowser::SaveRevertHpToRegistry , Writing None to Revert_HP
CFirefoxBrowser::SaveRevertHpToRegistry , Aleady exist in registry
CFirefoxBrowser::RevertHpFromRegistry , start
CFirefoxBrowser::RevertHpFromRegistry , Reverting the homepage.
CFirefoxBrowser::SaveRevertDspToRegistry , start
CFirefoxBrowser::SaveRevertDspToRegistry ,FFSearchAssetsAdded
CFirefoxBrowser::SaveRevertDspToRegistry , Writing to registry
CFirefoxBrowser::SaveRevertDspToRegistry , Write Revert_DSP
CFirefoxBrowser::SaveRevertDspToRegistry , Writing None to Revert_DSP
CFirefoxBrowser::SaveRevertHpToRegistry , Already exist in registry
CFirefoxBrowser::GetDefaultSearchProvider - start
CFirefoxBrowser::SetDeafultSearchProviderToString - start
CFirefoxBrowser::SetDeafultSearchProviderToString - Firefox is running.
CFirefoxBrowser::RevertDspFromRegistry - start
CFirefoxBrowser::RevertDspFromRegistry - Firefox is running.
CFirefoxBrowser::RevertDspFromRegistry , start
CFirefoxBrowser::RevertOnlyDspFromRegistry - start
CFirefoxBrowser::RevertOnlyDspFromRegistry - Firefox is running.
CFirefoxBrowser::RevertOnlyDspFromRegistry - revert value is
CFirefoxBrowser::SaveRevertKeywordUrlToRegistry , start
CFirefoxBrowser::SaveRevertKeywordUrlToRegistry ,FFSearchAssetsAdded
CFirefoxBrowser::SaveRevertKeywordUrlToRegistry , Writing to registry
CFirefoxBrowser::SaveRevertKeywordUrlToRegistry, not our value
CFirefoxBrowser::SaveRevertKeywordUrlToRegistry, write Revert_KU
CFirefoxBrowser::SaveRevertKeywordUrlToRegistry , Writing None to Revert_KU
CFirefoxBrowser::SaveRevertKeywordUrlToRegistry , Aleady exist in registry
CFirefoxBrowser::RevertKeywordUrlFromRegistry , start
CFirefoxBrowser::RevertKeywordUrlFromRegistry , Reverting the keywordURL.
CFirefoxBrowser::IsHostBrowser,FF
CFirefoxBrowser::RefreshHpUrl - start
CFirefoxBrowser::RefreshHpUrl - NOT host Browser , Exit
CFirefoxBrowser::RefreshHpUrl - Firefox is running.
CFirefoxBrowser::RefreshHpUrl, next profile
CFirefoxBrowser::RefreshHpUrl, szHomepage
CFirefoxBrowser::RefreshHpUrl, Homepage empty so set tp default
CFirefoxBrowser::RefreshHpUrl, Partner removed
CFirefoxBrowser::RefreshDspUrl , start
CFirefoxBrowser::RefreshDspUrl - NOT host Browser , Exit
CFirefoxBrowser::RefreshSearchProviderXml - start
CFirefoxBrowser::RefreshSearchProviderXml - NOT host Browser , Exit
CFirefoxBrowser::RefreshSearchProviderXml - failed to find xml to temp
CFirefoxBrowser::RefreshSearchProviderXml - failed to replace common values
CFirefoxBrowser::RefreshSearchProviderXml - copy XML to program files
CFirefoxBrowser::RefreshSearchProviderXml - copy XML to User Data
CFirefoxBrowser::RefreshSearchProviderXml - copy XML to program files succeded, erased cache
CFirefoxBrowser::RefreshKeywordUrl - start
CFirefoxBrowser::RefreshKeywordUrl - NOT host Browser , Exit
CFirefoxBrowser::RefreshKeywordUrl - Firefox is running.
CFirefoxBrowser::IsExtensionEnabled - start
CFirefoxBrowser::IsExtensionEnabled - ERROR_INVALID_HANDLE
CFirefoxBrowser::IsExtensionEnabled - failed to build extension.sqlite path.
CFirefoxBrowser::IsExtensionEnabled - CopyFileToTmpFolder faild.
CFirefoxBrowser::IsExtensionEnabled - sqlite3_open
CFirefoxBrowser::IsExtensionEnabled - sqlite3_prepare
CFirefoxBrowser::IsExtensionEnabled - unknown state
CFirefoxBrowser::IsExtensionEnabled - DB empty.
CChromeExtensionJson::CChromeExtensionJson() - failed reading addons Json
CFirefoxBrowser::AddCampaignIdToXML - XML filename
CFirefoxBrowser::AddCampaignIdToXML - ReadTempXML failed.
CFirefoxBrowser::GetCampaignIdFromXML - XML filename
CFirefoxBrowser::GetCampaignIdFromXML - ReadTempXML failed.
CFirefoxBrowser::GetCampaignIdFromXML - cmpid
CFirefoxBrowser::IsPartnerDefaultSearchProvider - Start.
CFirefoxBrowser::IsPartnerHomePage - Start.
CFirefoxBrowser::IsPartnerHomePage - Can't get homepage.
CFirefoxBrowser::DeleteUserSearchProvider() - start
CFirefoxBrowser::DeleteUserSearchProvider() - delete
CFirefoxBrowser::AutoDisableToolbar - start
\FireFoxExt\
CFirefoxBrowser::AutoDisableToolbar - can't get zsID
CFirefoxBrowser::AutoDisableToolbar - can't get zsName
CFirefoxBrowser::AutoDisableToolbar - can't get zsToolbarVersion
CFirefoxBrowser::AutoDisableToolbar - can't get zsTargetAppID
CFirefoxBrowser::AutoDisableToolbar - can't get zsTargetMinVer
CFirefoxBrowser::AutoDisableToolbar - can't get zsTargetMaxVer
CFirefoxBrowser::AutoDisableToolbar - can't get zsCreator
CFirefoxBrowser::AutoDisableToolbar - can't get zsDescription
RDF/Description/em:homepageURL
CFirefoxBrowser::AutoDisableToolbar - can't get zsHomepageURL
CFirefoxBrowser::AutoDisableToolbar - Can't get paths.
\extensions.sqlite
CFirefoxBrowser::AutoDisableToolbar - error sqlite3_open
CFirefoxBrowser::AutoDisableToolbar insert err
CFirefoxBrowser::AutoDisableToolbar - sqlite3_prepare
CFirefoxBrowser::AutoDisableToolbar - NO id
CFirefoxBrowser::AutoDisableToolbar insert locale err
)CFirefoxBrowser::AutoDisableToolbar insert targetApplication err
CFirefoxBrowser::PrepateDisable - sqlite3_prepare
CFirefoxBrowser::PrepateDisable - NO id
CFirefoxBrowser::PrepateDisable - addon table
CFirefoxBrowser::PrepateDisable - locale table
CFirefoxBrowser::PrepateDisable - targetApplication
CFirefoxBrowser::DeleteXMLFromAllUsersAppData - Start.
CFirefoxBrowser::DeleteXMLFromAllUsersAppData - Can't get paths.
CFirefoxBrowser::DeleteXMLFromAllUsersAppData - Failed to delete file:
P%d/%d/%d %d:%d:%d
\SiteSafety.dll
CSiteSafetyAdapter::CSiteSafetyAdapter error loading SiteSAfety.dll
CSiteSafetyAdapter::CSiteSafetyAdapter() - _avg_sitesafety_urldb_update
CSiteSafetyAdapter::CSiteSafetyAdapter() - _avg_sitesafety_urldb_is_up_to_date
CSiteSafetyAdapter::CSiteSafetyAdapter() - _avg_sitesafety_set_feed_server_url
CSiteSafetyAdapter::CSiteSafetyAdapter() - _avg_sitesafety_urldb_update_async
CSiteSafetyAdapter::CSiteSafetyAdapter() - _avg_sitesafety_urldb_update_wait
Qlogger.properties
CLoggerServer::CopyLoggerProperties() - failed to calculate log4cplus.properties path
CLoggerServer::CopyLoggerProperties() - failed to create log4cplus.properties path
CCrashReport::GlobalExceptionFilter no crash report files
avgdumpx.exe
-p %d -c %d %d -D toolbar
CCrashReport::GlobalExceptionFilter shellexecute res
CCrashReport::CopyFile start
CCrashReportAdapter::CopyFile cannot create dir
CCrashReportAdapter::CopyFile to
CCrashReport::CCrashReport() no AV installed/AV version isn't 2014
CCrashReport::CCrashReport() installed from third party not copying files
CCrashReport::CCrashReport() - CrashReport Path is
avgdiagex.exe
avgsysx.dll
avgcommx.dll
crash.avgdx
CrashReport
QXpiUnInstaller.cpp: DetermineFFProfilesDir
XpiUnInstaller.cpp: RemoveDirecetoryRecurse
XpiUnInstaller.cpp: fnProfilesXpiUnInstaller, DetermineFFProfilesDir failed.
XpiUnInstaller.cpp: fnProfilesXpiUnInstaller, folder name
XpiUnInstaller.cpp: fnProfilesXpiUnInstaller, about to remove
CFFConfig::Initialize() - m_szFirefoxFolder
prefs.js
prefs.js.tmp
localstore.rdf
CFFConfig::GetValue - key
CFFConfig::SetValue - key
CFFConfig: DeleteKey, removing:
CFFConfig: DeleteKey, IsInitialized failed
CFFConfig: ParsePreferences, szKey:
CFFConfig: ParsePreferences, couldn't determine key name
CFFConfig: ParsePreferences, PARSING_TYPE_DELETE, found key, value:
CFFConfig: ParsePreferences, Key not found, Key:
CPaypalDomainListReader::CheckFileExist "data.dat" does not exist
CPaypalDomainListReader::Init "data.zip" file does not exists
CPaypalDomainListReader::CheckFileExist "data.zip" exist
CPaypalDomainListReader::CheckFileExist copy or unzip"data.zip" result
CPaypalDomainListReader::Init "data.dat" file exists
\%s\Paypal
CIEApproveExtension::EnumIEWindows: IsApproveExtension: true
CIEApproveExtension::EnumIEWindows: m_bSendIEMsg = true
CIEApproveExtension::SetAVGToolbarEnabled_IE9: send WM_KEYDOWN with Enter
%s\..\Roaming\Microsoft\Windows\IEDownloadHistory\index.dat
%s\..\Roaming\Microsoft\Windows\IEDownloadHistory\container.dat
CPathPermissions:GrantRegKeyAccess, start
CPathPermissions:GrantRegKeyAccess, FullKey is empty
HKEY_
CPathPermissions:GrantRegKeyAccess, GetNamedSecurityInfo FAIL
CPathPermissions:GrantRegKeyAccess, RegOpenKeyEx FAIL
CPathPermissions:GrantRegKeyAccess ,return false
CPathPermissions:GrantRegKeyAccess ,OpenProcessToken FAIL
CPathPermissions:GrantRegKeyAccess ,HeapAlloc NULL
CPathPermissions:GrantRegKeyAccess ,InitializeAcl FAIL
CPathPermissions:GrantRegKeyAccess ,AddAccessAllowedAce FAIL
CPathPermissions:GrantRegKeyAccess ,InitializeSecurityDescriptor FAIL
CPathPermissions:GrantRegKeyAccess ,SetSecurityDescriptorDacl FAIL
CPathPermissions:GrantRegKeyAccess ,RegSetKeySecurity FAIL
CPathPermissions:GrantRegKeyAccess ,SetNamedSecurityInfo FAIL
CPathPermissions:GrantRegKeyAccess ,end ,return true
R0.0.0
CScriptHelperInstaller::CopyProduct() - failed to copy ScriptHelper.exe err
CScriptHelperInstaller::CopyProduct() - failed to copy ScriptHelper.exe from
CScriptHelperInstaller::CopyProduct() - failed to copy ScriptHelper.exe to
manifest.json
CScriptHelperInstaller::CopyProduct() - failed to copy manifest.json err
CScriptHelperInstaller::CopyProduct() - failed to copy manifest.json from
CScriptHelperInstaller::CopyProduct() - failed to copy manifest.json to
SOFTWARE\Google\Chrome\NativeMessagingHosts\avgsh
CChInstallerState::ActivateState CreateRegistryKey
launchchrome.js
CScriptHelperInstaller::CopyProduct() - failed to copy launchchrome.js err
CScriptHelperInstaller::CopyProduct() - failed to copy launchchrome.js from
CScriptHelperInstaller::CopyProduct() - failed to copy launchchrome.js to
UNINSTALL DeleteNativeMsgHost started
SOFTWARE\Google\Chrome\NativeMessagingHosts\
\\.\avgtp
{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
CDomainADBlockerCH::CDomainADBlockerCH error!!! empty chrome path
Local Storage\chrome-extension_gighmmpiobklfepjocnamgkkbiglidom_0.localstorage
CDomainADBlockerCH::CDomainADBlockerCH SQLite path
CDomainADBlockerCH::AddDomainToAdBlocker failed to open sqlite table.
CDomainADBlockerCH::IsDomainInWhiteList failed to open sqlite table.
CDomainADBlockerCH::GetCustomFilters sqlite3_prepare error
CDomainADBlockerCH::GetCustomFilters sqlite3_step empty error
CDomainADBlockerCH::GetCustomFilters sqlite3_step error
CDomainADBlockerCH::GetCustomFilters sqlite3_column_text - error: can't read 'custom_filters' value
CDomainADBlockerCH::OpenTable - sqlite3_open error
CAdBlock::AddDomain sqlite3_exec statement
CAdBlock::AddDomain sqlite3_exec error
@@||%s^$document
CDomainADBlockerPlus::ReadLinesFromFile inFile.is_open failed return false
CDomainADBlockerPlus::WriteLinesToFile outFile.is_open failed return false
Assertion failed: %s, file %s, line %d
%Program Files%\AVG SafeGuard toolbar\vprot.exe
18.1.0.443
VProtect.exe

ScriptHelper.exe_2420:




.text
`.orpc
`.rdata
@.data
.rsrc
@.reloc
PSSSSSSh
F><.tN<[tJ<\tF<*tB<|t><^t:<$t6
<9%u3
t8It.IIt#
.FGy"
 2 34 567
>.uBV
vSSSh
FTPjK
FtPj;
C.PjRV
tGHt.Ht&
.\Executer.cpp
.%D,3
.\GenericWnd.cpp
.\ScriptHelperApi.cpp
keyname
.\ChromeNativeListener.cpp
{ "id": %d, "name": "%s", "current": %d, "revert": %d }
log4cplusU.dll
kernel32.dll
Please contact the application's support team for more information.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- floating point support not loaded
GetProcessWindowStation
portuguese-brazilian
operator
USER32.DLL
inflate 1.2.5 Copyright 1995-2010 Mark Adler
unzip 1.01 Copyright 1998-2004 Gilles Vollant - http://www.winimage.com/zLibDll
3.7.3
SQLite format 3
CREATE TABLE sqlite_master(
sql text
CREATE TEMP TABLE sqlite_temp_master(
REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLYo
()$^.* ?[]|\-{},:=!
.\ProductManager.cpp
RegDeleteKeyExW
.\Registry.cpp
.\SystemCommands.cpp
fail to unload log4cplusU.dll
.\Logger.cpp
.\InternetExplorer.cpp
.\FirefoxBrowser.cpp
keyword.URL
select * from addon where id='%s'
SELECT active FROM addon WHERE id='%s'
INSERT INTO addon (id,location,version,type,defaultLocale,visible,active,userDisabled,pendingUninstall,descriptor,applyBackgroundUpdates,bootstrap,skinnable,softDisabled,IsForeignInstall,hasBinaryComponents,strictCompatibility) VALUES ('%s','winreg-app-global','%s','extension',3,1,0,1,0,'%s',1,0,0,0,1,0,0)
INSERT INTO locale (id,name,description,creator,homepageURL) VALUES ('%s','%s','%s','%s','%s')
INSERT INTO targetApplication (addon_internal_id,id,minVersion,maxVersion) VALUES ('%s','%s','%s','%s')
.\ChromeBrowser.cpp
startup_urls
urls_to_restore_on_startup
icon_url
instant_url
keyword
search_url
suggest_url
VALUES ('%s','%s','%s','%s',%d,%d,'%s',%d,%d,'%s','%s',%d)
(short_name,keyword,favicon_url,url,show_in_default_list,safe_for_autoreplace,originating_url,date_created,usage_count,input_encodings,suggest_url,autogenerate_keyword)
keywords
INSERT INTO %s %s %s
keywords_backup
VALUES ('%s','%s','%s','%s',%d,%d,'%s',%d,%d,'%s','%s')
(short_name,keyword,favicon_url,url,show_in_default_list,safe_for_autoreplace,originating_url,date_created,usage_count,input_encodings,suggest_url)
SET short_name='%s', keyword='%s', favicon_url='%s', url='%s', show_in_default_list=%d, safe_for_autoreplace=%d, originating_url='%s', date_created=%d, usage_count=%d, input_encodings='%s', suggest_url='%s', prepopulate_id=0, autogenerate_keyword=%d
SET short_name='%s', keyword='%s', favicon_url='%s', url='%s', show_in_default_list=%d, safe_for_autoreplace=%d, originating_url='%s', date_created=%d, usage_count=%d, input_encodings='%s', suggest_url='%s', prepopulate_id=0
WHERE short_name='%s'
UPDATE %s %s %s
SELECT * FROM %s WHERE %s
SELECT * FROM %s WHERE id=%d
UPDATE meta SET value='%d' WHERE key='Default Search Provider ID'
INSERT INTO meta (key,value) VALUES ('Default Search Provider ID','%d')
UPDATE meta SET value='%d' WHERE key='Default Search Provider ID Backup'
INSERT INTO meta (key,value) VALUES ('Default Search Provider ID Backup','%d')
SELECT value FROM meta WHERE key='Default Search Provider ID'
SELECT value FROM meta WHERE key='Default Search Provider ID Backup'
url LIKE '%
DELETE FROM %s WHERE id=%d
select min (id) from keywords
webNavigation
webRequest
webRequestBlocking
webRequestInternal
http://dnt.cloud.avg.com/*
http://dntf.cloud.avg.com/*
http://toolbar.avg.com/*
from_webstore
search_terms_replacement_key
SELECT * FROM keywords WHERE short_name='%s'
SELECT new_tab_url FROM %s WHERE id=%d
SELECT id, short_name FROM %s
SELECT instant_url FROM keywords WHERE short_name='%s'
0A743C17-7543-48b3-8A75-F60D0F132DD9
.\UnInstallerHelper.cpp
.\LocalSystemCommands.cpp
.\HttpClient.cpp
.\DriverHelper.cpp
.\CrashReportAdapter.cpp
.\Browser.cpp
.\Thread.cpp
.\PathPermissions.cpp
.\Directory.cpp
.\FFConfig.cpp
%s%s", %s%s%s);
invalid _N_type: %d
.\INIReader.cpp
.\EmailNotifier.cpp
.\DomainBlockerManager.cpp
.\StringConverter.cpp
.\PaypalDomainListReader.cpp
.\UpdaterRequest.cpp
.\CoInitializer.cpp
.\IEApproveExtension.cpp
.\ScriptHelperWrapper.cpp
large file support is disabled
SQL logic error or missing database
foreign_keys
sqlite_compileoption_get
sqlite_compileoption_used
sqlite_source_id
sqlite_version
sqlite_attach
sqlite_detach
sqlite_stat1
sqlite_rename_parent
sqlite_rename_trigger
sqlite_rename_table
RowKey
SQLITE_
d-d-d d:d:d
d:d:d
d-d-d
failed to allocate %u bytes of memory
failed memory resize %u to %u bytes
922337203685477580
API call with %s database connection pointer
%s-shm
%s\etilqs_
OsError 0x%x (%u)
Recovered %d frames from WAL file %s
invalid page number %d
2nd reference to page %d
Failed to read ptrmap key=%d
Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)
%d of %d pages missing from overflow list starting at %d
failed to get page %d
freelist leaf count too big on page %d
Page %d:
unable to get the page. error code=%d
btreeInitPage() returns error code %d
On tree page %d cell %d:
On page %d at right child:
Corruption detected in cell %d on page %d
Multiple uses for byte %d of page %d
Fragmentation of %d bytes reported as %d on page %d
Page %d is never used
Pointer map page %d is referenced
Outstanding page count goes from %d to %d during this analysis
keyinfo(%d
%s(%d)
%s-mjX
foreign key constraint failed
unable to use function %s in the requested context
bind on a busy prepared statement: [%s]
zeroblob(%d)
abort at %d in [%s]: %s
constraint failed at %d in [%s]
cannot open savepoint - SQL statements in progress
no such savepoint: %s
cannot %s savepoint - SQL statements in progress
cannot rollback transaction - SQL statements in progress
cannot commit transaction - SQL statements in progress
sqlite_temp_master
sqlite_master
SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid
cannot change %s wal mode from within a transaction
database table is locked: %s
statement aborts at %d: [%s] %s
cannot open virtual table: %s
cannot open view: %s
no such column: "%s"
foreign key
indexed
cannot open %s column for writing
cannot open value of type %s
misuse of aliased aggregate %s
%s: %s.%s.%s
%s: %s.%s
%s: %s
not authorized to use function: %s
%r %s BY term out of range - should be between 1 and %d
too many terms in %s BY clause
Expression tree is too large (maximum depth %d)
variable number must be between ?1 and ?%d
too many SQL variables
too many columns in %s
misuse of aggregate: %s()
%.*s"%w"%s
%s%.*s"%w"
%s OR name=%Q
type='trigger' AND (%s)
there is already another table or index with this name: %s
sqlite_
table %s may not be altered
view %s may not be altered
UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');
sqlite_sequence
UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q
UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
Cannot add a PRIMARY KEY column
UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q
sqlite_altertab_%s
CREATE TABLE %Q.%s(%s)
DELETE FROM %Q.%s WHERE tbl=%Q
SELECT tbl, idx, stat FROM %Q.sqlite_stat1
invalid name: "%s"
too many attached databases - max %d
database %s is already in use
unable to open database: %s
no such database: %s
cannot detach database %s
database %s is locked
%s %T cannot reference objects in database %s
access to %s.%s.%s is prohibited
access to %s.%s is prohibited
object name reserved for internal use: %s
there is already an index named %s
too many columns on %s
duplicate column name: %s
default value of column [%s] is not constant
table "%s" has more than one primary key
AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY
no such collation sequence: %s
CREATE %s %.*s
UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d
CREATE TABLE %Q.sqlite_sequence(name,seq)
view %s is circularly defined
UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d
table %s may not be dropped
use DROP TABLE to delete table %s
use DROP VIEW to delete view %s
DELETE FROM %s.sqlite_sequence WHERE name=%Q
DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'
DELETE FROM %Q.sqlite_stat1 WHERE tbl=%Q
foreign key on %s should reference only one column of table %T
number of columns in foreign key does not match the number of columns in the referenced table
unknown column "%s" in foreign key definition
indexed columns are not unique
table %s may not be indexed
views may not be indexed
virtual tables may not be indexed
there is already a table named %s
index %s already exists
sqlite_autoindex_%s_%d
table %s has no column named %s
CREATE%s INDEX %.*s
INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
no such index: %S
index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped
DELETE FROM %Q.%s WHERE name=%Q AND type='index'
DELETE FROM %Q.sqlite_stat1 WHERE idx=%Q
a JOIN clause is required before %s
unable to identify the object to be reindexed
table %s may not be modified
cannot modify %s because it is a view
foreign key mismatch
table %S has %d columns but %d values were supplied
%d values for %d columns
table %S has no column named %s
%s.%s may not be NULL
PRIMARY KEY must be unique
sqlite3_extension_init
unable to open shared library [%s]
no entry point [%s] in shared library [%s]
error during initialization: %s
automatic extension loading failed: %s
foreign_key_list
*** in database %s ***
unsupported encoding: %s
malformed database schema (%s)
%s - %s
unsupported file format
SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid
database schema is locked: %s
unknown or unsupported join type: %T %T%s%T
RIGHT and FULL OUTER JOINs are not currently supported
a NATURAL join may not have an ON or USING clause
cannot have both ON and USING clauses in the same join
cannot join using column %s - column not present in both tables
%s.%s
%s:%d
ORDER BY clause should come after %s not before
LIMIT clause should come after %s not before
SELECTs to the left and right of %s do not have the same number of result columns
no such index: %s
sqlite_subquery_%p_
no such table: %s
sqlite3_get_table() called with two or more incompatible queries
cannot create %s trigger on view: %S
cannot create INSTEAD OF trigger on table: %S
INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')
no such trigger: %S
-- TRIGGER %s
no such column: %s
cannot VACUUM - SQL statements in progress
PRAGMA vacuum_db.synchronous=OFF
SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0
SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'
SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0
SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';
INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)
UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d
vtable constructor failed: %s
vtable constructor did not declare schema: %s
no such module: %s
table %s: xBestIndex returned an invalid plan
at most %d tables in a join
cannot use index: %s
TABLE %s
%s AS %s
%s WITH AUTOMATIC INDEX
%s WITH INDEX %s
%s VIA MULTI-INDEX UNION
%s USING PRIMARY KEY
%s VIRTUAL TABLE INDEX %d:%s
%s ORDER BY
the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers
the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers
unable to close due to unfinished backup operation
unknown database: %s
no such vfs: %s
database corruption at line %d of [%.10s]
misuse at line %d of [%.10s]
cannot open file at line %d of [%.10s]
.\XpiInstaller.cpp
.\JSONParser.cpp
.\Driver.cpp
.\AVInfo.cpp
.\DomainADBlockerCH.cpp
\n@@||%s/$document
UPDATE ItemTable SET value='%s' WHERE key='custom_filters'
INSERT INTO ItemTable VALUES ('custom_filters', '"%s"')
SELECT value FROM ItemTable WHERE key='custom_filters'
1.2.5
.\DomainADBlockerPlus.cpp
c:\BuildAgent\work\906b1f4be197b432\CommonRep\CommonComp\ScriptHelper\1.0.0\ScriptHelper\Release\ScriptHelper.pdb
VERSION.dll
WTSAPI32.dll
USERENV.dll
SensApi.dll
GetProcessHeap
GetWindowsDirectoryW
KERNEL32.dll
keybd_event
GetKeyboardState
CreateDialogIndirectParamW
EnumWindows
USER32.dll
GDI32.dll
RegCloseKey
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumKeyExW
RegFlushKey
RegLoadKeyW
RegUnLoadKeyW
CryptDeriveKey
CryptDestroyKey
RegSetKeySecurity
ADVAPI32.dll
ShellExecuteW
ShellExecuteExW
SHELL32.dll
ole32.dll
OLEAUT32.dll
UrlUnescapeW
SHLWAPI.dll
RPCRT4.dll
CRYPT32.dll
DeleteUrlCacheEntryW
FindNextUrlCacheEntryW
FindFirstUrlCacheEntryW
HttpSendRequestW
HttpAddRequestHeadersW
HttpQueryInfoW
HttpOpenRequestW
WININET.dll
GetCPInfo
GetConsoleOutputCP
.?AVCExecuter@@
.?AVCUninstallerExecuter@@
.?AVCAvgExecuter@@
.?AVCNotepadExecuter@@
.?AVCCalcExecuter@@
.?AVCExplorerExecuter@@
.?AVCVProtExecuter@@
.?AV?$IDispEventImpl@$0A@VCGenericWnd@@$1?DIID_DWebBrowserEvents2@@3U_GUID@@B$1?LIBID_SHDocVw@@3U3@B$0PPPP@$0PPPP@VCComTypeInfoHolder@ATL@@@ATL@@
.?AV?$IDispEventSimpleImpl@$0A@VCGenericWnd@@$1?DIID_DWebBrowserEvents2@@3U_GUID@@B@ATL@@
.?AV?$_IDispEventLocator@$0A@$1?DIID_DWebBrowserEvents2@@3U_GUID@@B@ATL@@
.?AV?$CAtlExeInheritedModuleT@VCScriptHelperModule@@@@
.?AVCChromeNativeListener@@
zcÁ
.?AVCFirefoxBrowser@@
.?AVCFirefoxSearchProvider@@
.?AVCChromeBrowser@@
.?AVCChromeSearchProvider@@
.?AVCChromeToolbarData@@
.?AVCHttpClient@@
.?AVCCrashReportAdapter@@
.?AVCThreadPostMsgOnEvent@@
'ScriptHelper.EXE'
ScriptHelper.ScriptHelperApi.1 = s 'ScriptHelperApi Class'
CLSID = s '{F25AF245-4A81-40DC-92F9-E9021F207706}'
ScriptHelper.ScriptHelperApi = s 'ScriptHelperApi Class'
CurVer = s 'ScriptHelper.ScriptHelperApi.1'
ForceRemove {F25AF245-4A81-40DC-92F9-E9021F207706} = s 'ScriptHelperApi Class'
ProgID = s 'ScriptHelper.ScriptHelperApi.1'
VersionIndependentProgID = s 'ScriptHelper.ScriptHelperApi'
{7DD95801-9882-11CF-9FA9-00AA006C42C4}
{7DD95802-9882-11CF-9FA9-00AA006C42C4}
'TypeLib' = s '{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}'
{59fb2056-d625-48d0-a944-1a85b5ab2640} = s ''
ScriptHelper.GenericWnd.1 = s 'GenericWnd Class'
CLSID = s '{933B95E2-E7B7-4AD9-B952-7AC336682AE3}'
ScriptHelper.GenericWnd = s 'GenericWnd Class'
CurVer = s 'ScriptHelper.GenericWnd.1'
ForceRemove {933B95E2-E7B7-4AD9-B952-7AC336682AE3} = s 'GenericWnd Class'
ProgID = s 'ScriptHelper.GenericWnd.1'
VersionIndependentProgID = s 'ScriptHelper.GenericWnd'
stdole2.tlbWWW
SExecuteProgramWW
CreateRegistryKeyWWW
bstrKeyNameWd
%SetNewTabByBrowserWWd
MsgW
x]SubMsgWW
BExecScriptOnPage
GetKeywordURLWWW
o-pKeyWordURLWd
SetKeywordURLWWWd
RemoveComponentKeyWW
RemoveRegKey
OpenBrowserWithUrlWW
6DisableChromeDSPGuardWWWd
PasswordBoxEnabledWWd
PasswordBoxInUsed
bsURLWWW
yPbsLocalURLWW
method ExecuteProgramW
method CreateRegistryKeyWW
method ExecScriptOnPageWWW
method GetKeywordURLWW
method SetKeywordURLWW
method RemoveComponentKeyW
method RemoveRegKeyWWW
method OpenBrowserWithUrlW*
method DisableChromeDSPGuardWW
method PasswordBoxEnabledW
method PasswordBoxInUseWWW
Created by MIDL version 7.00.0555 at Sun Apr 13 10:15:37 2014
8%8s8
3%3S3
?.?@?_?{?
5,626<6[6
717@7[7{7
78
111@1[1{1
=-=?=[={=
4P5?5{5
5"5&5*5.525
3&4 44494
5Y5S5b5z5
= >&> >3>8>
1 1-1}1
="=(=.=4=:=@=
;"<(<1<8<
2<3~3%5[5
1-2
1 1$1(1,101
: :$:(:,:
6 6(646\6
VFloating point (%%e, %%f, %%g, and %%G) is not supported by the WTL::CString class.
Snotepad.exe
calc.exe
@\avgui.exe
\vprot.exe
CScriptHelperApi::ExecuteProgram uninstaller already running, do not launch uninstaller again
Uninstall.exe
HKEY_PERFORMANCE_DATA
HKEY_DYN_DATA
HKEY_CURRENT_CONFIG
CGenericWnd: NavigateToUrl, after navigate , URL:
CGenericWnd: NavigateToUrl , use local URL
CGenericWnd: NavigateToUrl start
CGenericWnd: InitWindow ,faild to Enable webbrowser sending events.
CGenericWnd: InitWindow ,faild to Get the webbrowser object
CGenericWnd: SetWindowSize: Set round corners: top-right and top-left
CGenericWnd: SetWindowSize: bSuc = true
CGenericWnd: SetWindowSize by Position: bSuc = true
CGenericWnd: SetWindowSize: height:
CGenericWnd: SetWindowSize: width:
CGenericWnd: InitConfigurationXmlPath , configuration.xml path:
CGenericWnd::UninstallBrowser , FAILD to Execute Seperate Installer
FAILD to Execute Seperate Installer
CGenericWnd::UninstallBrowser , FAILD to find installer.exe file
FAILD to find installer.exe file
CGenericWnd::Uninstall , FAILD to Execute Seperate Installer
CGenericWnd::Uninstall , FAILD to find installer.exe file
CGenericWnd::Uninstall , RunProcessAsUser Uninstall.exe
CGenericWnd::Uninstall , ShellExecute Uninstall.exe
/RESETSAPS /EXECUTEUNINSTALL
CGenericWnd::OnBroadcastMsgId UM_POSITIONUPDATE_GWND
CGenericWnd::OnBroadcastMsgId
CGenericWnd: DisplayGenericWindow, Local URL is empty
CGenericWnd: DisplayGenericWindow, URL is empty
CGenericWnd: DisplayGenericWindowModeless, Local URL is empty
CGenericWnd: DisplayGenericWindowModeless, URL is empty
AVGTB::Broadcast::MsgId
OLEAUT32.DLL
Mscoree.dll
Installation/Homepage/Url
GoogleToolbarNotifier.exe
Installation/KeywordUrl/EnableKeywordURL
%FTG%
.BrowserWndApi
\Commands.ini
CScriptHelperApi::CreateRegistryKey(...) - FAILED. error
CScriptHelperApi::CreateRegistryKey(...) - SUCCESS
CScriptHelperApi::CreateRegistryKey(...) - KeyName
MailNotifier.exe
CScriptHelperApi EnableToolbarByBrowser, Close IE windows
CScriptHelperApi::PostWndMessage Msg
CScriptHelperApi::SendWndMessage Msg
CScriptHelperApi::SendCopyDataWndMessage Msg
CScriptHelperApi::DisableDSPGuardChrome - can't open event.
CScriptHelperApi::DisableDSPGuardChrome - Setting event.
{"name": "%s","status": "%s", "enable":"%s"}
PasswordBoxEnabled
CScriptHelperApi::PasswordBoxEnabled, start
passwordbox
PasswordBoxInUse
95B7759C-8C7F-4BF1-B163-73684A933233
SOFTWARE\PasswordBox\Updater
CScriptHelperApi::PasswordBoxInUse, start
CChromeNativeListener::ProcessData - response
%CurrentNT%
{ "action": "getCurrentNT", "data": "%CurrentNT%", "params": "%params%" }
%DSPList%
{ "action": "getDSPList", "data": %DSPList%, "params": "%params%" }
P%CurrentHP%
{ "action": "getCurrentHP", "data": "%CurrentHP%", "params": "%params%" }
Þcrdata%
{ "action": "DecryptStr", "data": "Þcrdata%", "params": "%params%" }
CChromeNativeListener::ProcessData, data
}%CurrentNewTabValue%
%CurrentSearchProviderValue%
%CurrentHomePageValue%
%CmpidValue%
%UpdateDateValue%
%spvalue%
%CoBrandValue%
%sgvalue%
%DistributionSourceValue%
%ClientIDValue%
{"ClientID": "%ClientIDValue%","MachineID": "%MachineIDValue%","DistributionSource": "%DistributionSourceValue%","Profile": "%ProfileValue%","ToolbarVersion": "%ToolbarVersionValue%","lang": "%langvalue%","InstallDate": "%InstallDateValue%","pid": "%pidvalue%","sg": "%sgvalue%","CoBrand": "%CoBrandValue%","hp": "%hpvalue%","NT": "%NTvalue%","sp": "%spvalue%","TrackingCode": "%TrackingCodeValue%","UpdateDate": "%UpdateDateValue%","LastInstallation": "%LastInstallationValue%","CurrentHomePage": "%CurrentHomePageValue%","CurrentSearchProvider": "%CurrentSearchProviderValue%","CurrentNewTab": "%CurrentNewTabValue%","CMPID": "%CmpidValue%"}
mscoree.dll
KERNEL32.DLL
WUSER32.DLL
777705555443332
5555443332
5555443332
[%H:%M:%S
toolbar_log.txt
%s | %s ||
configuration.xml
InstalledProducts.ini
WebTuneup
avg-secure-search-installer.exe
AVG Web TuneUp
Advapi32.dll
CRegistry::CreateRegistryKey(), Create error
CRegistry::OpenRegistryKey() - Tried to open
CRegistry::OpenRegistryKey(), Open error
CRegistry::getValue(...), for key
CRegistry::setValue(...), for key
CRegistry::removeValue(...), for key
CreateRegistryKey FAIL_TO_CREATE_REGISTRY
CRegistry::IsKeyExists(), Open error
CRegistry::getMultiValue(...), for key
CRegistry::setMultiValue(...), for key
CRegistry::getQWValue(...), for key
Software\Microsoft\Windows NT\CurrentVersion\ProfileList\
\NTUSER.DAT
CRegistry::SetValueAllUsers - Failed to get users key
CRegistry::GetValueAllUsers - Failed to get users key
CRegistry::CreateKeyAllUsers - Start
CRegistry::CreateKeyAllUsers - Failed to get users key
CRegistry::CreateKeyAllUsers - Number of users in reg
Software\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\
HKEY_USERS
HKEY_LOCAL_MACHINE
HKEY_CURRENT_USER
HKEY_CLASSES_ROOT
\lip.exe
okernel32.dll
installer_cfg.ini
\configuration.xml
CSystemCommands::CloseAllIEWindows - NOT host Browser , Exit
%COBRAND%
%DISTSOURCE%
%CMPID%
%UID%
wtustats.avg.com
%STATSDOMAIN%
stats.avg.com
avg.install.guid
ÿGUID%
Ieframe.dll
Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
NEWTABURL
IE_SUGGESTIONS_URL
IE_SUGGESTIONS_URL_FALLBACK
IE_SUGGESTIONS_URL_JSON
CH_SUGGESTIONS_URL
CH_SUGGESTIONS_URL_FALLBACK
FAV_ICON_URL_FALLBACK
Installation/Chrome/PEMGUID
Installation/Chrome/INSTANT
Installation/Chrome/TERM
updater.xml
Updater/Logger/Port
127.0.0.1
c:\BuildAgent\work\906b1f4be197b432\CommonRep\Common\Include\log4cplus\include\log4cplus/helpers/pointer.h
Microsoft\Internet Explorer\AboutURLs
res://ieframe.dll/tabswelcome.htm
Open registry HKEY_CURRENT_USER Start Page
SuggestionsURL
SuggestionsURLFallback
SuggestionsURL_JSON
FaviconURLFallback
CInternetExplorer::UpdateSearchProvider - try to open key:
CInternetExplorer::UpdateSearchProvider - key does not exist!
CInternetExplorer::UpdateSearchProvider - try to create key:
CInternetExplorer::UpdateSearchProvider - create key ended - return:
CInternetExplorer::UpdateSearchProvider - create key return:
iexplore.exe
\Internet Explorer\iexplore.exe
Software\Microsoft\Windows\CurrentVersion\Ext\Settings
CInternetExplorer::EnableToolband, DeleteKey
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\
CInternetExplorer::IsToolbarEnabled key
CInternetExplorer::IsToolbarEnabled key exist
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser
\internet explorer\iexplore.exe"
\favicon.ico
favicon.ico
Mozilla/4.0 (compatible; MSIE
; Windows NT
desktop.ini
index.dat
{95B7759C-8C7F-4BF1-B163-73684A933233}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\User Preferences
CInternetExplorer::SetDefaultSearchProvider, GrantRegKeyAccess
{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
CInternetExplorer::SetEnableNTToReg, zsShouldEnableNT
CInternetExplorer::SetEnableNTToReg - Set zsShouldEnableNT to 0
CInternetExplorer::RefreshHpUrl , start
CInternetExplorer::RefreshHpUrl - NOT host Browser , Exit
CInternetExplorer::RefreshHpUrl , szHomepage before replace
CInternetExplorer::RefreshHpUrl , zsPartnerHomePage is empty
CInternetExplorer::RefreshHpUrl , Driver is not running
CInternetExplorer::RefreshHpUrl , Driver is running and guard is enabled
CInternetExplorer::RefreshHpUrl , szHomepage after replace
CInternetExplorer::RefreshDspUrl , start
CInternetExplorer::RefreshDspUrl - NOT host Browser , Exit
CInternetExplorer::RefreshDspUrl, GrantRegKeyAccess
CInternetExplorer::RefreshNtUrl , start
CInternetExplorer::RefreshNtUrl - NOT host Browser , Exit
CInternetExplorer::AutoDisableToolbar - Can't create key.
CFirefoxBrowser::CFirefoxBrowser() - start
CFirefoxBrowser::CFirefoxBrowser() - INI
CFirefoxBrowser::CFirefoxBrowser() - failed to read INI file, try to get info from INI backup in registry.
firefox.exe
CFirefoxBrowser::GetVersion - start
CFirefoxBrowser::GetVersion - version:
CFirefoxBrowser::GetVersionEx - start
CFirefoxBrowser::GetVersionEx - Not Installed
extensions.lastAppVersion
CFirefoxBrowser::GetVersionEx - version:
CFirefoxBrowser::GetVersionEx - short version:
SOFTWARE\Mozilla\Mozilla Firefox
CFirefoxBrowser::GetFullVersion - start
CFirefoxBrowser::GetFullVersion - version:
CFirefoxBrowser::GetFullVersion - Full final version:
CFirefoxBrowser::CreateSearchProvider - start
CFirefoxBrowser::CreateSearchProvider - NOT host Browser , Exit
CFirefoxBrowser::CreateSearchProvider - ERROR_INVALID_HANDLE
CFirefoxBrowser::CreateSearchProvider - failed to find xml to temp
CFirefoxBrowser::CreateSearchProvider - failed to replace common values
CFirefoxBrowser::CreateSearchProvider - copy XML to program files failed.
FireFoxSearchXml.tmp
CFirefoxBrowser::UpdateSearchProvider - NOT host Browser , Exit
CFirefoxBrowser::WriteKeyToGuardToSetDSP - start
FirefoxSPName
CFirefoxBrowser::WriteKeyToGuardToSetDSP - end, return:
CFirefoxBrowser::SetDefaultSearchProvider - start
CFirefoxBrowser::SetDefaultSearchProvider - NOT host Browser , Exit
CFirefoxBrowser::SetDefaultSearchProvider - Firefox is running.
CFirefoxBrowser::SetDefaultSearchProvider - application is running in SYSTEM account!. Can not set as DSP.
CFirefoxBrowser::SetDefaultSearchProvider - INI Path:
CFirefoxBrowser::SetDefaultSearchProvider - failed to set DSP in all profiles
CFirefoxBrowser::IsNewTabActive
avg.userPreferences.newtabDisabledByUser
CFirefoxBrowser::IsNewTabActive - the new tab is not active becuase the user canceled
CFirefoxBrowser::IsNewTabActive - the new tab is not active becuase the CURRENT_USER NT flag is not enabled
CFirefoxBrowser::IsNewTabActive - the new tab is not active becuase the LOCAL_MACHINE NT flag is not enabled
CFirefoxBrowser::IsNewTabActive - the new tab is active.
CFirefoxBrowser::ReplaceCommonValues() - temp XML filename
CFirefoxBrowser::ReplaceCommonValues() - ReadTempXML failed.
CFirefoxBrowser::ReplaceCommonValues() - XML filename
CFirefoxBrowser::ReplaceCommonValues() - Partner name is empty.
CFirefoxBrowser::DetermineFFProfilesDir - start
CFirefoxBrowser::DetermineFFProfilesDir - GetSafeEnv return NULL
\Mozilla\Firefox\Profiles\
CFirefoxBrowser::DetermineFFProfilesDir - Firefox Folder
CFirefoxBrowser::DetermineFFDir - start
CFirefoxBrowser::DetermineFFDir - GetSafeEnv return NULL
CFirefoxBrowser::GetSearchXMLLocation - GetCurrentFirefoxInstallationPath failed
CFirefoxBrowser::GetSearchXMLLocation - first XML location
CFirefoxBrowser::GetSearchXMLLocation - second XML location
CFirefoxBrowser::CopyXmlToProgramFiles - Copy from
CFirefoxBrowser::CopyXmlToProgramFiles - Copy to
CFirefoxBrowser::CopyXmlToProgramFiles firefox version is less than 21
CFirefoxBrowser::CopyXmlToProgramFiles create browser folder
CFirefoxBrowser::CopyXmlToUserData - Copy from
CFirefoxBrowser::CopyXmlToUserData - Copy to
CFirefoxBrowser::SetDSPinAllProfiles failed to write Pref.js to profile(USER)
CFirefoxBrowser::SetDSPinAllProfiles failed to write Pref.js to profile
CFirefoxBrowser::SetDSPinAllProfiles. Create directory is failed
CFirefoxBrowser::SetDSPinAllProfiles. CopyFile is failed
CFirefoxBrowser::RefreshSearchProviderXml - ERROR_INVALID_HANDLE
CFirefoxBrowser::SetDSPInAllProfilesAfterInstall. FireFoxSearchXml.tmp is not exist
CFirefoxBrowser::ReadTempXML() - CreateFile failed. GetLastError
CFirefoxBrowser::ReadTempXML() - ReadFile failed. GetLastError
CFirefoxBrowser::ReplaceDefaultSearchProvider - start
CFirefoxBrowser::ReplaceDefaultSearchProvider -pzsIniFile is not NULL
CFirefoxBrowser::ReplaceDefaultSearchProvider -Get display name
CFirefoxBrowser::ReplaceDefaultSearchProvider - DSP Display Name:
browser.search.defaultenginename
browser.search.selectedEngine
CFirefoxBrowser::WriteFile - CreateFile failed. GetLastError
CFirefoxBrowser::WriteFile - WriteFile failed. GetLastError
CFirefoxBrowser::WriteFile() - WriteFile failed. size written too small
CFirefoxBrowser::InitSearchProviderFromIni - ini
CFirefoxBrowser::InitSearchProviderFromIni - NOT host Browser , Exit
CFirefoxBrowser::InitSearchProviderFromRegistry
CFirefoxBrowser::InitSearchProviderFromRegistry - NOT host Browser , Exit
CFirefoxBrowser::GetHomepage, homepage
CFirefoxBrowser::GetHomepage, next profile
browser.startup.homepage
CFirefoxBrowser::GetHomepage, success
CFirefoxBrowser::SetHomepage, homepage
CFirefoxBrowser::SetHomepage - NOT host Browser , Exit
CFirefoxBrowser::SetHomepage - Firefox is running.
CFirefoxBrowser::SetHomepage, next profile
CFirefoxBrowser::SetHomepage, success
CFirefoxBrowser::GetKeywordUrl, szKeyWordUrl
CFirefoxBrowser::GetKeywordUrl, next profile
LCFirefoxBrowser::GetKeywordUrl, success
CFirefoxBrowser::SetKeywordUrl, szKeyWordUrl
CFirefoxBrowser::SetKeywordUrl - NOT host Browser , Exit
CFirefoxBrowser::SetKeywordUrl - Firefox is running.
CFirefoxBrowser::SetKeywordUrl, next profile
CFirefoxBrowser::SetKeywordUrl, success
CFirefoxBrowser::DeleteSearchProvider - start
CFirefoxBrowser::DeleteSearchProvider - Firefox is running.
CFirefoxBrowser::DeleteSearchProvider - ERROR_INVALID_HANDLE
CFirefoxBrowser::SearchProviderExist - start
CFirefoxBrowser::SearchProviderExist - Firefox is running.
CFirefoxBrowser::SearchProviderExist - ERROR_INVALID_HANDLE
CFirefoxBrowser::SearchProviderExist - failed to get Default search engine for profile
CFirefoxBrowser::SearchProviderExist - ProfileExist
CFirefoxBrowser::SearchProviderExist - ProfileDefault
CFirefoxBrowser::SearchProviderExist - ProgramFilesExist
CFirefoxBrowser::SearchProviderExist - ProgramFilesDefault
CFirefoxBrowser::SearchProviderExist - Exist
CFirefoxBrowser::SearchProviderExist - Default
CFirefoxBrowser::HandleXMLInInstalltion - start
CFirefoxBrowser::HandleXMLInInstalltion - File Path
CFirefoxBrowser::HandleXMLInInstalltion - delete
SOFTWARE\Mozilla\Mozilla Firefox\
CFirefoxBrowser::GetCurrentFirefoxInstallationPath - start
CFirefoxBrowser::GetCurrentFirefoxInstallationPath - fail to get CurrentVersion from
CFirefoxBrowser::GetCurrentFirefoxInstallationPath - CurrentVersion
PathToExe
CFirefoxBrowser::GetCurrentFirefoxInstallationPath - fail to get PathToExe from
CFirefoxBrowser::GetCurrentFirefoxInstallationPath - Path
\search.json
CFirefoxBrowser::RefreshSearchProviderSearchSqlite Sqlite path
CFirefoxBrowser::RefreshSearchProviderSearchSqlite - sqlite3_open
CFirefoxBrowser::RefreshSearchProviderSearchSqlite sql
CFirefoxBrowser::RefreshSearchProviderSearchSqlite err
\search.sqlite
RefreshUserSearchProviderList - check if search.json file exists @ path:
RefreshUserSearchProviderList - try to delete search.json @ path:
CFirefoxBrowser EnableToolband - start
CFirefoxBrowser EnableToolband - failed to cast.
CFirefoxBrowser EnableToolband, id
CFirefoxBrowser EnableToolband, enabled
CFirefoxBrowser::IsExtensionEnabled - Failed to get extension ID.
extensions.json
CFirefoxBrowser::CheckInExtensionsJson - failed to build extension.sqlite path.
CFirefoxBrowser::InsertUpdateAddonTable - start
extensions.sqlite
CFirefoxBrowser::InsertUpdateAddonTable - failed to build extension.sqlite path.
CFirefoxBrowser::InsertUpdateAddonTable - sqlite3_open
CFirefoxBrowser::InsertUpdateAddonTable sql
CFirefoxBrowser::InsertUpdateAddonTable err
CFirefoxBrowser::AddonTableContainsToolbar - sqlite3_prepare
extensions.rdf
extensions.cache
CFirefoxBrowser::EnableInExtensionsRDF - Unable to create XML parser object
CFirefoxBrowser::EnableInExtensionsRDF - Unable to load XML document into the parser
CFirefoxBrowser::EnableInExtensionsRDF - failed to save the modified extension.rdf
CFirefoxBrowser::EnableInExtensionsRDF - unknown exception.
.default
CFirefoxBrowser::BuildDefaultProfileFilePath - failed.
CFirefoxBrowser::BuildDefaultProfileFilePath - BuildDefaultProfileFilePath
CFirefoxBrowser HandleExtensionIni - start
extensions.ini
CFirefoxBrowser HandleExtensionIni sIniPath:
SOFTWARE\Mozilla\Firefox\extensions
CFirefoxBrowser HandleExtensionIni szId:
CFirefoxBrowser HandleExtensionIni value of ::
CFirefoxBrowser HandleExtensionIni, sProfileExtensionPath:
CFirefoxBrowser HandleExtensionIni, sProfileExtensionPath exists
CFirefoxBrowser HandleExtensionIni, SetTextVector of ExtensionDirs
CFirefoxBrowser IsToolbarEnabled - start
CFirefoxBrowser IsToolbarEnabled - Error in casting - return false.
CFirefoxBrowser IsToolbarEnabled, ff toolbar folder name
CFirefoxBrowser IsToolbarEnabled - Error PathFileExists - return false.
Extension%d
CFirefoxBrowser IsToolbarEnabled. szToolbarDir=
CFirefoxBrowser IsToolbarEnabled - szToolbarDir is empty
\install.rdf
CFirefoxBrowser GetToolbarInstallState - start
CFirefoxBrowser GetToolbarInstallState, ff toolbar id
CFirefoxBrowser::CompareWithRDFVersion, szVersion
CFirefoxBrowser::CompareWithRDFVersion, szRDFVersion
CFirefoxBrowser::CompareWithRDFVersion, Version1 section
CFirefoxBrowser::CompareWithRDFVersion, Version2 section
CFirefoxBrowser::CompareWithRDFVersion, szVersion length
CFirefoxBrowser::CompareWithRDFVersion, szRDFVersion length
CFirefoxBrowser::InstallNewToolbar, start
CFirefoxBrowser::InstallNewToolbar, fnXpiInstaller - Install remote xpi.
CFirefoxBrowser::InstallNewToolbar, fnXpiInstaller - url:
CFirefoxBrowser::InstallNewToolbar, fnXpiInstaller - szFFToolbarId:
CFirefoxBrowser::InstallNewToolbar, fnXpiInstaller - szFolderName:
CFirefoxBrowser::InstallNewToolbar, fnXpiInstaller - szVersion:
CFirefoxBrowser::InstallNewToolbar, toolbar installed:
CFirefoxBrowser::CreateUpdateFileForWatcher, start
CFirefoxBrowser::CreateUpdateFileForWatcher, opening update file to:
CFirefoxBrowser::CreateUpdateFileForWatcher, write .ini title:
%s=%s
CFirefoxBrowser::CreateUpdateFileForWatcher, szFFToolbarId:
CFirefoxBrowser::CreateUpdateFileForWatcher, szNewToolbarFolder:
CFirefoxBrowser::DisableEnableAddOnScreen
CFirefoxBrowser::DisableEnableAddOnScreen, setting extensions.autoDisableScopes to 0
extensions.autoDisableScopes
CFirefoxBrowser::RollbackNewTab - Firefox is running.
avg.install.newtab
CFirefoxBrowser::IsAVGToolbarEnabled, conf file
CFirefoxBrowser::IsAVGToolbarEnabled, FF toolbar ID
CFirefoxBrowser::IsAVGToolbarEnabled toolbar enabled
CFirefoxBrowser::IsAVGToolbarEnabled toolbar disabled
CFirefoxBrowser::ResetHP - start
CFirefoxBrowser::ResetHP - Firefox is running.
CFirefoxBrowser::ResetHP - GetDefaultProfile.
CFirefoxBrowser::ResetHP, next profile
CFirefoxBrowser::ResetHP - ,zsPartnerHomePage:
CFirefoxBrowser::ResetHP, szHomepage
CFirefoxBrowser::ResetHP, szHomepage not empty
CFirefoxBrowser::ResetHP, 1:sCurrUrl,
CFirefoxBrowser::ResetHP, zsCurrHomePage,
CFirefoxBrowser::ResetHP ,bFoundPartnerUrl = true;
CFirefoxBrowser::ResetHP ,sCurrUrl not equal to iniHost
CFirefoxBrowser::ResetHP ,bFoundPartnerUrl is true;
CFirefoxBrowser::ResetHP ,bReverted is true
CFirefoxBrowser::ResetHP ,bReverted is false and zsCurrHomePage is
CFirefoxBrowser::ResetHP, sCurrHomePage before deciding how to reset
CFirefoxBrowser::ResetHP ,zsCurrHomePage is empty
CFirefoxBrowser::ResetHP, Homepage empty so set tp default
CFirefoxBrowser::ResetHP, Partner removed
CFirefoxBrowser::ResetDSP - start
CFirefoxBrowser::ResetDSP - Firefox is running.
avg-secure-search.xml
CFirefoxBrowser::ResetDSP failed to write Pref.js to profile
CFirefoxBrowser::DeleteXmlFromProgramFiles - start
CFirefoxBrowser::DeleteXmlFromProgramFiles - GetCurrentFirefoxInstallationPath failed
CFirefoxBrowser::DeleteXmlFromProgramFiles - Delete file from
CFirefoxBrowser::ResetDefaultSearchProvider - start
CFirefoxBrowser::ResetDefaultSearchProvider - Firefox is running.
CFirefoxBrowser::ResetDefaultSearchProvider - delete DEFAULT_ENGINE SELECTED_ENGINE
CFirefoxBrowser::ResetDefaultSearchProvider - SetDeafultSearchProviderToString failed
CFirefoxBrowser::ShowToolband - start, bShow:
CFirefoxBrowser::ShowToolband - Firefox is running.
CFirefoxBrowser::ShowToolband - Error file not found:
CFirefoxBrowser::ShowToolband - end
CFirefoxBrowser::ModifyLocalStoreXML - start, zsPath:
CFirefoxBrowser::ModifyLocalStoreXML - Unable to create XML parser object
CFirefoxBrowser::ModifyLocalStoreXML - Unable to load XML document into the parser
CFirefoxBrowser::ModifyLocalStoreXML - Can't find the root node
RDF:RDF/RDF:Description[@RDF:about="chrome://browser/content/browser.xul"]
http://www.w3.org/1999/02/22-rdf-syntax-ns#
CFirefoxBrowser::ModifyLocalStoreXML - Can't create the description element
CFirefoxBrowser::ModifyLocalStoreXML - Can't create attribute
chrome://browser/content/browser.xul
CFirefoxBrowser::ModifyLocalStoreXML - Can't modify attribute
CFirefoxBrowser::ModifyLocalStoreXML - Can't get attributes map
CFirefoxBrowser::ModifyLocalStoreXML - Can't add attribute to the element
CFirefoxBrowser::ModifyLocalStoreXML - Can't append the description node to the root node
RDF:RDF/RDF:Description[@RDF:about="chrome://browser/content/browser.xul"]/NC:persist[@RDF:resource="chrome://browser/content/browser.xul#avgTB-Toolbar"]
http://home.netscape.com/NC-rdf#
CFirefoxBrowser::ModifyLocalStoreXML - Can't create the persist node
chrome://browser/content/browser.xul#avgTB-Toolbar
CFirefoxBrowser::ModifyLocalStoreXML - Can't append the persist node to the description node
RDF:RDF/RDF:Description[@RDF:about="chrome://browser/content/browser.xul#avgTB-Toolbar"]
CFirefoxBrowser::ModifyLocalStoreXML - Can't create the collapsed element
CFirefoxBrowser::ModifyLocalStoreXML - Can't append the collapsed node to the root node
CFirefoxBrowser::ModifyLocalStoreXML - Can't change the collapsed node value
CFirefoxBrowser::ModifyLocalStoreXML - failed to save the modified XML file
CFirefoxBrowser::ModifyLocalStoreXML - unknown exception.
CFirefoxBrowser::ModifyLocalStoreXML - end
CFirefoxBrowser, zsShouldEnableNT
CFirefoxBrowser::SetEnableNTToReg - Set zsShouldEnableNT to 0
CFirefoxBrowser::SaveRevertHpToRegistry , start
CFirefoxBrowser::SaveRevertHpToRegistry ,FFSearchAssetsAdded
CFirefoxBrowser::SaveRevertHpToRegistry , Writing to registry
CFirefoxBrowser::SaveRevertHpToRegistry , write Revert_HP
CFirefoxBrowser::SaveRevertHpToRegistry , Writing None to Revert_HP
CFirefoxBrowser::SaveRevertHpToRegistry , Aleady exist in registry
CFirefoxBrowser::RevertHpFromRegistry , start
CFirefoxBrowser::RevertHpFromRegistry , Reverting the homepage.
CFirefoxBrowser::SaveRevertDspToRegistry , start
CFirefoxBrowser::SaveRevertDspToRegistry ,FFSearchAssetsAdded
CFirefoxBrowser::SaveRevertDspToRegistry , Writing to registry
CFirefoxBrowser::SaveRevertDspToRegistry , Write Revert_DSP
CFirefoxBrowser::SaveRevertDspToRegistry , Writing None to Revert_DSP
CFirefoxBrowser::SaveRevertHpToRegistry , Already exist in registry
CFirefoxBrowser::GetDefaultSearchProvider - start
CFirefoxBrowser::SetDeafultSearchProviderToString - start
CFirefoxBrowser::SetDeafultSearchProviderToString - Firefox is running.
CFirefoxBrowser::RevertDspFromRegistry - start
CFirefoxBrowser::RevertDspFromRegistry - Firefox is running.
CFirefoxBrowser::RevertDspFromRegistry , start
CFirefoxBrowser::RevertOnlyDspFromRegistry - start
CFirefoxBrowser::RevertOnlyDspFromRegistry - Firefox is running.
CFirefoxBrowser::RevertOnlyDspFromRegistry - revert value is
CFirefoxBrowser::SaveRevertKeywordUrlToRegistry , start
CFirefoxBrowser::SaveRevertKeywordUrlToRegistry ,FFSearchAssetsAdded
CFirefoxBrowser::SaveRevertKeywordUrlToRegistry , Writing to registry
CFirefoxBrowser::SaveRevertKeywordUrlToRegistry, not our value
CFirefoxBrowser::SaveRevertKeywordUrlToRegistry, write Revert_KU
CFirefoxBrowser::SaveRevertKeywordUrlToRegistry , Writing None to Revert_KU
CFirefoxBrowser::SaveRevertKeywordUrlToRegistry , Aleady exist in registry
CFirefoxBrowser::RevertKeywordUrlFromRegistry , start
CFirefoxBrowser::RevertKeywordUrlFromRegistry , Reverting the keywordURL.
CFirefoxBrowser::IsHostBrowser,FF
CFirefoxBrowser::RefreshHpUrl - start
CFirefoxBrowser::RefreshHpUrl - NOT host Browser , Exit
CFirefoxBrowser::RefreshHpUrl - Firefox is running.
CFirefoxBrowser::RefreshHpUrl, next profile
CFirefoxBrowser::RefreshHpUrl , szHomepage before replace
CFirefoxBrowser::RefreshHpUrl, szHomepage
CFirefoxBrowser::RefreshHpUrl, Homepage empty so set tp default
CFirefoxBrowser::RefreshHpUrl, Partner removed
CFirefoxBrowser::RefreshDspUrl , start
CFirefoxBrowser::RefreshDspUrl - NOT host Browser , Exit
CFirefoxBrowser::RefreshSearchProviderXml - start
CFirefoxBrowser::RefreshSearchProviderXml - NOT host Browser , Exit
CFirefoxBrowser::RefreshSearchProviderXml - failed to find xml to temp
CFirefoxBrowser::RefreshSearchProviderXml - failed to replace common values
CFirefoxBrowser::RefreshSearchProviderXml - copy XML to program files
CFirefoxBrowser::RefreshSearchProviderXml - copy XML to User Data
CFirefoxBrowser::RefreshSearchProviderXml - copy XML to program files succeded, erased cache
CFirefoxBrowser::RefreshKeywordUrl - start
CFirefoxBrowser::RefreshKeywordUrl - NOT host Browser , Exit
CFirefoxBrowser::RefreshKeywordUrl - Firefox is running.
Installation/KeywordUrl/Url
CFirefoxBrowser::IsExtensionEnabled - start
CFirefoxBrowser::IsExtensionEnabled - ERROR_INVALID_HANDLE
CFirefoxBrowser::IsExtensionEnabled - failed to build extension.sqlite path.
CFirefoxBrowser::IsExtensionEnabled - CopyFileToTmpFolder faild.
CFirefoxBrowser::IsExtensionEnabled - sqlite3_open
CFirefoxBrowser::IsExtensionEnabled - sqlite3_prepare
CFirefoxBrowser::IsExtensionEnabled - unknown state
CFirefoxBrowser::IsExtensionEnabled - DB empty.
CChromeExtensionJson::CChromeExtensionJson() - failed reading addons Json
CFirefoxBrowser::AddCampaignIdToXML - XML filename
CFirefoxBrowser::AddCampaignIdToXML - ReadTempXML failed.
CFirefoxBrowser::GetCampaignIdFromXML - XML filename
CFirefoxBrowser::GetCampaignIdFromXML - ReadTempXML failed.
CFirefoxBrowser::GetCampaignIdFromXML - cmpid
CFirefoxBrowser::IsPartnerDefaultSearchProvider - Start.
CFirefoxBrowser::IsPartnerHomePage - Start.
CFirefoxBrowser::IsPartnerHomePage - Can't get homepage.
CFirefoxBrowser::DeleteUserSearchProvider() - start
CFirefoxBrowser::DeleteUserSearchProvider() - delete
CFirefoxBrowser::AutoDisableToolbar - start
\FireFoxExt\
CFirefoxBrowser::AutoDisableToolbar - can't get zsID
CFirefoxBrowser::AutoDisableToolbar - can't get zsName
CFirefoxBrowser::AutoDisableToolbar - can't get zsToolbarVersion
CFirefoxBrowser::AutoDisableToolbar - can't get zsTargetAppID
CFirefoxBrowser::AutoDisableToolbar - can't get zsTargetMinVer
CFirefoxBrowser::AutoDisableToolbar - can't get zsTargetMaxVer
CFirefoxBrowser::AutoDisableToolbar - can't get zsCreator
CFirefoxBrowser::AutoDisableToolbar - can't get zsDescription
RDF/Description/em:homepageURL
CFirefoxBrowser::AutoDisableToolbar - can't get zsHomepageURL
CFirefoxBrowser::AutoDisableToolbar - Can't get paths.
\extensions.sqlite
CFirefoxBrowser::AutoDisableToolbar - error sqlite3_open
CFirefoxBrowser::AutoDisableToolbar insert err
CFirefoxBrowser::AutoDisableToolbar - sqlite3_prepare
CFirefoxBrowser::AutoDisableToolbar - NO id
CFirefoxBrowser::AutoDisableToolbar insert locale err
)CFirefoxBrowser::AutoDisableToolbar insert targetApplication err
CFirefoxBrowser::PrepateDisable - sqlite3_prepare
CFirefoxBrowser::PrepateDisable - NO id
CFirefoxBrowser::PrepateDisable - addon table
CFirefoxBrowser::PrepateDisable - locale table
CFirefoxBrowser::PrepateDisable - targetApplication
CFirefoxBrowser::DeleteXMLFromAllUsersAppData - Start.
CFirefoxBrowser::DeleteXMLFromAllUsersAppData - Can't get paths.
CFirefoxBrowser::DeleteXMLFromAllUsersAppData - Failed to delete file:
CChromeBrowser::CChromeBrowser() - KillChrome:
CChromeBrowser::CChromeBrowser() - XP:
chrome.exe
CChromeBrowser::GetHomepage - start
CChromeBrowser::GetHomepage - ret
CChromeBrowser::GetStartup - start
CChromeBrowser::SetHomepage - hp
CChromeBrowser::SetHomepage - NOT host Browser , Exit
CChromeBrowser::SetHomepage - reading json from file
CChromeBrowser::SetHomepage - bReadJSONSuccessful
CChromeBrowser::SetHomepage - writing json to file
CChromeBrowser::SetHomepage - ret
CChromeBrowser::SetStartup - hp
CChromeBrowser::SetStartup - NOT host Browser , Exit
CChromeBrowser::SetStartup - reading json from file
CChromeBrowser::SetStartup - bReadJSONSuccessful
CChromeBrowser::SetStartup - hp set
CChromeBrowser::SetStartup - ret
CChromeBrowser::CreateSearchProvider - start
CChromeBrowser::CreateSearchProvider - NOT host Browser , Exit
CChromeBrowser::CreateSearchProvider - Chrome is running.
CChromeBrowser::CreateSearchProvider - ERROR_INVALID_HANDLE
CChromeBrowser::CreateSearchProvider - CChromeSearchProvider.sShortName
CChromeBrowser::CreateSearchProvider - CChromeSearchProvider.sUrl
CChromeBrowser::CreateSearchProvider - AlreadyExist, so we update.
CChromeBrowser::CreateSearchProvider - Chrome version >= 17, we need to update the meta signature
CChromeBrowser::UpdateSearchProvider - NOT host Browser , Exit
CChromeBrowser::DeleteSearchProvider - start
CChromeBrowser::DeleteSearchProvider - Chrome is running.
CChromeBrowser::DeleteSearchProvider - ERROR_INVALID_HANDLE
CChromeBrowser::SearchProviderExist - CChromeSearchProvider.sShortName
CChromeBrowser::SearchProviderExist - CChromeSearchProvider.sUrl
CChromeBrowser::SearchProviderExist - start
CChromeBrowser::SearchProviderExist - ERROR_INVALID_HANDLE
CChromeBrowser::SearchProviderExist - search provider exist.
CChromeBrowser::SearchProviderExist GetIdFromMetaTable
\Chrome\Default\Preferences
CChromeBrowser::GetDefaultSearchProvider - reading json from file
CChromeBrowser::GetDefaultSearchProvider - bReadJSONSuccessful
CChromeBrowser::GetDefaultSearchProvider - JSON probelm didn't read all values
CChromeBrowser::GetDefaultSearchProvider - Chrome is running.
CChromeBrowser::GetDefaultSearchProvider - start
CChromeBrowser::GetDefaultSearchProvider - ERROR_INVALID_HANDLE
CChromeBrowser::GetDefaultSearchProvider - INSTALLER_ERROR_CHROME_ERROR
CChromeBrowser::GetDefaultSearchProvider GetIdFromMetaTable
CChromeBrowser::SetDefaultSearchProvider - start
CChromeBrowser::SetDefaultSearchProvider - NOT host Browser , Exit
CChromeBrowser::SetDefaultSearchProvider - Chrome is running.
CChromeBrowser::SetDefaultSearchProvider - ERROR_INVALID_HANDLE
CChromeBrowser::SetDefaultSearchProvider - Chrome version >= 17, SP exists and is default, do not set again.
CChromeBrowser::SetDefaultSearchProvider SearchDB
CChromeBrowser::SetDefaultSearchProvider - Chrome version >= 17, we need to update the meta signature
CChromeBrowser::SetDefaultSearchProvider - Can't write DSP to preferences.
CChromeBrowser::IsDefaultSearchProvider - start
CChromeBrowser::IsDefaultSearchProvider - bSpExists:
CChromeBrowser::IsDefaultSearchProvider - bDSpIsDefault:
CChromeBrowser::InsertUpdateDB - start
CChromeBrowser::InsertUpdateDB - sqlite3_open
CChromeBrowser::InsertUpdateDB sql
CChromeBrowser::InsertUpdateDB err
CChromeBrowser::SearchDB - start
CChromeBrowser::SearchDB - CChromeSearchProvider is NULL.
CChromeBrowser::SearchDB - Chrome is running.
CChromeBrowser::SearchDB - sqlite3_open
CChromeBrowser::SearchDB sql
CChromeBrowser::SearchDB - sqlite3_prepare
CChromeBrowser::CreateSearchProvider - pChromeSearchProvider->sShortName
CChromeBrowser::CreateSearchProvider - pChromeSearchProvider->sUrl
CChromeBrowser::UpdateMetaTable - id
CChromeBrowser::UpdateMetaTable - sqlite3_open
)CChromeBrowser::UpdateMetaTable sql
CChromeBrowser::UpdateMetaTable err
CChromeBrowser::UpdateMetaTableBackup - id
CChromeBrowser::UpdateMetaTableBackup - sqlite3_open
CChromeBrowser::UpdateMetaTableBackup sql
CChromeBrowser::UpdateMetaTableBackup err
CChromeBrowser::GetIdFromMetaTable - start
CChromeBrowser::GetIdFromMetaTable - Chrome is running.
CChromeBrowser::GetIdFromMetaTable - sqlite3_open
CChromeBrowser::GetIdFromMetaTable - sqlite3_prepare
CChromeBrowser::GetIdFromMetaTable - sqlite3_step
CChromeBrowser::GetIdFromMetaTable - return value
CChromeBrowser::GetBackupIdFromMetaTable - start
CChromeBrowser::GetBackupIdFromMetaTable - Chrome is running.
CChromeBrowser::GetBackupIdFromMetaTable - sqlite3_open
CChromeBrowser::GetBackupIdFromMetaTable - sqlite3_prepare
CChromeBrowser::GetBackupIdFromMetaTable - sqlite3_step
CChromeBrowser::GetBackupIdFromMetaTable - return value
CChromeBrowser::UpdateMetaWithoutSignature sql
CChromeBrowser::UpdateMetaWithoutSignature err
CChromeBrowser::InitSearchProviderFromIni - szIniPath
CChromeBrowser::InitSearchProviderFromIni - NOT host Browser , Exit
CChromeBrowser::InitSearchProviderFromIni - iniReader.Init failed.
CChromeBrowser::InitSearchProviderFromIni - szDisplayName
CChromeBrowser::InitSearchProviderFromIni - szDefaultSearchURL
CChromeBrowser::InitSearchProviderFromIni - szPartner
CChromeBrowser::InitSearchProviderFromIni - szSuggestionsURL
CChromeBrowser::InitSearchProviderFromIni - szSuggestionsURLFallback
CChromeBrowser::InitSearchProviderFromIni - szFaviconURLFallback
CChromeBrowser::InitSearchProviderFromIni - failed to create CChromeSearchProvider.
CChromeBrowser::InitSearchProviderFromRegistry
CChromeBrowser::InitSearchProviderFromRegistry - NOT host Browser , Exit
CChromeBrowser::InitSearchProviderFromRegistry - szDisplayName
CChromeBrowser::InitSearchProviderFromRegistry - szDefaultSearchURL
CChromeBrowser::InitSearchProviderFromRegistry - szPartner
https:
http:
CChromeBrowser::InitSearchProviderFromRegistry - szSuggestionsURL
CChromeBrowser::InitSearchProviderFromRegistry - szSuggestionsURLFallback
CChromeBrowser::InitSearchProviderFromRegistry - szFaviconURLFallback
CChromeBrowser::InitSearchProviderFromRegistry - zsInstantUrl
CChromeBrowser::InitSearchProviderFromRegistry - zsSearchTerm
avg.yandex.com.tr
http://suggest.yandex.com.tr/suggest-ff.cgi?uil=tr&part={searchTerms}
http://yandex.com.tr/favicon.ico
http://avg.yandex.com.tr/yandsearch?win=106&clid=2064887&text={searchTerms}
CChromeBrowser::InitSearchProviderFromRegistry - failed to create CChromeSearchProvider.
ÌhromeBrowser::CreateWhereClause - both short_name and url are empty!
CChromeBrowser::DeleteSearchProvider - id
CChromeBrowser::DeleteSearchProvider - sqlite3_open
CChromeBrowser::DeleteSearchProvider sql
CChromeBrowser::DeleteSearchProvider err
CChromeBrowser::DeleteSearchProvider - Chrome version >= 17, we need to update the meta signature
Google\Chrome\Application\chrome.exe
CurrentChromeInstallationPath :
CChromeBrowser::CloseBrowser - NOT host Browser , Exit
CChromeBrowser::ResetHP - reading json from file
SOFTWARE\Google\Chrome\extensions\
CChromeBrowser::GetVersion - Not Installed
ChromeBrowser:: Version Failed
ChromeBrowser:: Version
ChromeExt
CChromeBrowser::ResetHP - hp
CChromeBrowser::ResetHP - bReadJSONSuccessful
CChromeBrowser::ResetHP - writing json to file
CChromeBrowser::ResetHP - Parnter found, try to revert
CChromeBrowser::ResetHP - Parnter found, revert failed - reset the HP.
CChromeBrowser::ResetHP - Parnter found, revert failed - reset the Startup.
CChromeBrowser::ResetHP - ret
CChromeBrowser::ResetDSP - start
CChromeBrowser::ResetDSP - sqlite3_open
CChromeBrowser::ResetDSP - Chrome version >= 17, we need to update the meta signature
CChromeBrowser, zsShouldEnableNT
CChromeBrowser::SetEnableNTToReg() - bIsUpdateInstallation
CChromeBrowser::SetEnableNTToReg - Set zsShouldEnableNT to 0
CChromeBrowser::SetEnableNTToReg() - szIsNewTabEnabled is set
CChromeBrowser::SaveRevertHpToRegistry - start
ChromeSearchAssetsAdded
CChromeBrowser::SaveRevertHpToRegistry - ChromeSearchAssetsAdded
CChromeBrowser::SaveRevertHpToRegistry - Chrome is running.
CChromeBrowser::SaveRevertHpToRegistry , start
CChromeBrowser::SaveRevertHpToRegistry , Writing to registry
CChromeBrowser::SaveRevertHpToRegistry ,szHomepage not empty
CChromeBrowser::SaveRevertHpToRegistry , Writing None to Revert_HP
CChromeBrowser::SaveRevertHpToRegistry , Already exist in registry
CChromeBrowser::SaveRevertHpToRegistry , zsRevertSupCh Already exist in registry
CChromeBrowser::SaveRevertDspToRegistry - start
CChromeBrowser::SaveRevertDspToRegistry - ChromeSearchAssetsAdded
CChromeBrowser::SaveRevertDspToRegistry - Chrome is running.
CChromeBrowser::SaveRevertDspToRegistry , start
CChromeBrowser::SaveRevertDspToRegistry , Writing to registry
CChromeBrowser::SaveRevertDspToRegistry , write Revert_DSP
CChromeBrowser::SaveRevertDspToRegistry , Writing None to Revert_DSP
CChromeBrowser::SaveRevertDspToRegistry ,Already exist in registry
CChromeBrowser::RevertHpFromRegistry - start
CChromeBrowser::RevertHpFromRegistry - Chrome is running.
CChromeBrowser::RevertHpFromRegistry , start
CChromeBrowser::RevertStartupFromRegistry - start
CChromeBrowser::RevertStartupFromRegistry - Chrome is running.
CChromeBrowser::RevertStartupFromRegistry , start
CChromeBrowser::RevertDspFromRegistry - start
CChromeBrowser::RevertDspFromRegistry - Chrome is running.
CChromeBrowser::RevertDspFromRegistry , start
CChromeBrowser::IsHostBrowser,CH
CChromeBrowser::RefreshHpUrl - hp
CChromeBrowser::RefreshHpUrl - NOT host Browser , Exit
CChromeBrowser::RefreshHpUrl - reading json from file
CChromeBrowser::RefreshHpUrl - bReadJSONSuccessful
CChromeBrowser::RefreshHpUrl - writing json to file
CChromeBrowser::RefreshHpUrl - ret
CChromeBrowser::RefreshDspUrl , start
CChromeBrowser::RefreshDspUrl - NOT host Browser , Exit
CChromeBrowser::UpdateSearchProvider - start
CChromeBrowser::UpdateSearchProvider - Chrome is running.
CChromeBrowser::UpdateSearchProvider - ERROR_INVALID_HANDLE
CChromeBrowser::UpdateSearchProvider - Chrome version >= 17, SP exists and is default, do not set again.
CChromeBrowser::UpdateSearchProvider - Chrome version >= 17, we need to update the meta signature
CChromeBrowser::IsAVGToolbarEnabled - start
CChromeBrowser::IsAVGToolbarEnabled - can't get the PEM GUID from the configuration file.
CChromeBrowser::IsAVGToolbarEnabled - crx file is not exists.
CChromeBrowser::IsAVGToolbarEnabled - Can't read the preference file.
CChromeBrowser::IsAVGToolbarEnabled - Can't get the extension state.
CChromeBrowser::IsAVGToolbarEnabled - extension is not enabled
CChromeBrowser::IsAVGToolbarEnabled - end
CChromeBrowser::IsNewTabActive - start
CChromeBrowser::IsNewTabActive - the new tab is not active because Instant URL is not exists.
CChromeBrowser::IsNewTabActive - the new tab is not active becuase the CURRENT_USER NT flag is not enabled
CChromeBrowser::IsNewTabActive - the new tab is not active becuase the LOCAL_MACHINE NT flag is not enabled
CChromeBrowser::IsNewTabActive - end, the new tab is active
CChromeBrowser::IsExtensionEnabled start.
CChromeBrowser::IsExtensionEnabled - ERROR_INVALID_HANDLE
CChromeBrowser::IsExtensionEnabled - empty extension name
CChromeBrowser::IsExtensionEnabled - INSTALLER_ERROR_CHROME_ERROR
CDomainADBlockerCH::GetExtensionState we don't currenty support this state.
CChromeBrowser::SetExtensionEnabled start.
CChromeBrowser::SetExtensionEnabled - ERROR_INVALID_HANDLE
CChromeBrowser::SetExtensionEnabled - empty extension name
CChromeBrowser::SetExtensionEnabled - INSTALLER_ERROR_CHROME_ERROR
CChromeBrowser::SetExtensionEnabled - enable extention
sCChromeBrowser::SetExtensionEnabled - disable extention
CChromeBrowser::SetExtensionEnabled - writing json to file
CChromeBrowser::SetExtensionEnabled failed to read preferences
CChromeBrowser::EnableExtension - Start
CChromeBrowser::EnableExtension - NOT host Browser , Exit
CChromeBrowser::EnableExtension - EnableExtensionExtractingCrx, zsVersion
CChromeBrowser::EnableExtension - EnableExtensionInPreference, zsVersion
CChromeBrowser::EnableExtension - function ret:
\avg.crx
CChromeBrowser::EnableExtensionInPreference - Start
CChromeBrowser::EnableExtensionInPreference,
CChromeBrowser::EnableExtensionInPreference - Can't read the preference file.
\manifest.json
eCChromeBrowser::EnableExtensionInPreference - return value:
\Google\Chrome\User Data\Default\Preferences
\Google\Chrome\User Data\Default\Web Data
CChromeBrowser::MoveDetourFilesFromAVGFolder, Begin
\Chrome\Default\Web Data
CChromeBrowser::MoveDetourFilesFromAVGFolder, End. err=
\Chrome\Default\
Web Data
\Google\Chrome\User Data\Default\
CChromeBrowser::SetDSPInPrefFile - Start
CChromeBrowser::SetDSPInPrefFile - reading json from file
CChromeBrowser::SetDSPInPrefFile - bReadJSONSuccessful
CChromeBrowser::GetPartnerDSPUrl - start
CChromeBrowser::GetPartnerDSPUrl - Chrome is running.
CChromeBrowser::GetPartnerDSPUrl - sqlite3_open
CChromeBrowser::GetPartnerDSPUrl sql
CChromeBrowser::GetPartnerDSPUrl - sqlite3_prepare
CChromeBrowser::GetPartnerDSPUrl - pChromeSearchProvider->sUrl
CChromeBrowser::AutoDisableToolbar - Start.
%LOCALAPPDATA%\Google\Chrome\User Data\Default\
CChromeBrowser::AutoDisableToolbar - Can't get paths.
CChromeBrowser::AutoDisableToolbar - Can't disable user toolbar.
CChromeBrowser::EnableToolband - ERROR_INVALID_HANDLE
CChromeBrowser::IsPartnerDefaultSearchProvider - Start.
CChromeBrowser::IsPartnerHomePage - Start.
CChromeBrowser::GetStartupFromJson - failed reading Json
CChromeBrowser::GetStartupFromJson - szStartup:
CChromeBrowser::GetHomepageFromJson - failed reading Json
CChromeBrowser::GetHomepageFromJson - szHomepage:
\Web Data.tmp
CChromeBrowser::GetAvgNewTabUrl- failed:
CChromeBrowser::GetAvgNewTabUrl - sqlite3_open
CChromeBrowser::GetAvgNewTabUrl - sqlite3_prepare
CChromeBrowser::GetAvgNewTabUrl - new tab url
CChromeBrowser::GetSPList - DB:
CChromeBrowser::GetSPList - sqlite3_open
CChromeBrowser::GetSPList - sqlite3_prepare
CChromeBrowser::GetSPList - id
CChromeBrowser::GetSPList - short name
CChromeBrowser::GetSPList - ERR:
CChromeBrowser::IsInstantURLActive - start
CChromeBrowser::IsInstantURLActive - Chrome is running.
CChromeBrowser::IsInstantURLActive - sqlite3_open
CChromeBrowser::IsInstantURLActive sql
CChromeBrowser::IsInstantURLActive - sqlite3_prepare
CChromeBrowser::IsInstantURLActive - res
\Google\Chrome\User Data\Default\Current Session
CUnInstallerHelper::CloseVProtector() Sending vprot.exe WM_QUIT
vprot.exe
%s failed with error %d: %s
CUnInstallerHelper::ExecuteSeperateInstaller starting the function
CUnInstallerHelper::ExecuteSeperateInstaller, GetConfigurationFileName FAILED.
CUnInstallerHelper::CreateTempCopyAndExecute, start
CUnInstallerHelper::CreateTempCopyAndExecute, Installer Path:
CUnInstallerHelper::CreateTempCopyAndExecute, Config File:
CUnInstallerHelper::CreateTempCopyAndExecute, Partner:
CUnInstallerHelper::CreateTempCopyAndExecute, Executed From Contrl Pannel:
CUnInstallerHelper::CreateTempCopyAndExecute, Need Elevation:
CUnInstallerHelper::CreateTempCopyAndExecute, ADD XPIPATH
CUnInstallerHelper::CreateTempCopyAndExecute, ADD UNINSTALLPAGE
CUnInstallerHelper::CreateTempCopyAndExecute, ADD DEP
CUnInstallerHelper::CreateTempCopyAndExecute, ADD REGISTERSATB
CUnInstallerHelper::CreateTempCopyAndExecute, ADD PROMPT
CUnInstallerHelper::CreateTempCopyAndExecute, ADD OFFLINE
/EXECUTEUNINSTALL
CUnInstallerHelper::CreateTempCopyAndExecute, ADD EXECUTEUNINSTALL
CUnInstallerHelper::CreateTempCopyAndExecute, ADD CHANGEPROFILE
CUnInstallerHelper::CreateTempCopyAndExecute, ADD RESETSAPSFF
CUnInstallerHelper::CreateTempCopyAndExecute, ADD PARTNER
CUnInstallerHelper::CreateTempCopyAndExecute, ADD FROMELEVATION
CUnInstallerHelper::CopyFileToTemp, success=%s to copy %s to %s
var oShell = new ActiveXObject("Shell.Application");
var commandtoRun = WScript.arguments(0);
oShell.ShellExecute(commandtoRun, "%PARAMETERS%", "" , "open", 3);
CCLocalSystemCommands::RunProcessAsUser , ShellExecute
explorer.exe
CLocalSystemCommands::LaunchAppIntoDifferentSession - LoadLibrary Advapi32.dll
CLocalSystemCommands::LaunchAppIntoDifferentSession - FreeLibrary Advapi32.dll
CHttpClient::DetermineHostAndUrl, resource
http://
https://
CHttpClient::DetermineHostAndUrl, Host
CHttpClient::DetermineHostAndUrl, Url
CHttpClient::SendString start
Mozilla/4.0 (compatible; MSIE 4.0; Windows NT 4.0)
CHttpClient::SendString userAgent
CHttpClient::SendString InternetOpen failed.
CHttpClient::SendString InternetConnect failed.
CHttpClient::SendString HttpOpenRequest failed.
CHttpClient::SendString HttpQueryInfo failed.
%s: Ioctl = %p, ret = %d. GLE = %d
CCrashReport::GlobalExceptionFilter no crash report files
avgdumpx.exe
-p %d -c %d %d -D toolbar
CCrashReport::GlobalExceptionFilter shellexecute res
avgdiagex.exe
avgsysx.dll
avgcommx.dll
crash.avgdx
CrashReport
CBrowser::IsSearchAssetsAdded, Browser key
CBrowser::IsSearchAssetsAdded, value if browser key
Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice
ie.http
firefox
chrome
http\shell\open\command\
Installation/NewTab/Url
CThreadPostMsgOnEvent::Execute() - event to initialized
CThreadPostMsgOnEvent::Execute() - got the event - send message
CThreadPostMsgOnEvent::Execute() - an error ocurred
CThreadPostMsgOnEvent::Execute() - set event
CThreadPostMsgOnEvent::WaitForEvent() CreateEvent err
LLookupPrivilegeValue error: %u
AdjustTokenPrivileges error: %u
AllocateAndInitializeSid (Everyone) error %u
AllocateAndInitializeSid (Admin) error %u
Failed in SetEntriesInAcl. error %u
First SetNamedSecurityInfo call failed: %u
OpenProcessToken failed: %u
Could not set owner. Error: %u
Second SetNamedSecurityInfo call failed: %u
CPathPermissions:GrantRegKeyAccess, start
CPathPermissions:GrantRegKeyAccess, FullKey is empty
HKEY_
CPathPermissions:GrantRegKeyAccess, GetNamedSecurityInfo FAIL
CPathPermissions:GrantRegKeyAccess, RegOpenKeyEx FAIL
CPathPermissions:GrantRegKeyAccess ,return false
CPathPermissions:GrantRegKeyAccess ,OpenProcessToken FAIL
CPathPermissions:GrantRegKeyAccess ,HeapAlloc NULL
CPathPermissions:GrantRegKeyAccess ,InitializeAcl FAIL
CPathPermissions:GrantRegKeyAccess ,AddAccessAllowedAce FAIL
CPathPermissions:GrantRegKeyAccess ,InitializeSecurityDescriptor FAIL
CPathPermissions:GrantRegKeyAccess ,SetSecurityDescriptorDacl FAIL
CPathPermissions:GrantRegKeyAccess ,RegSetKeySecurity FAIL
CPathPermissions:GrantRegKeyAccess ,SetNamedSecurityInfo FAIL
CPathPermissions:GrantRegKeyAccess ,end ,return true
CFFConfig::Initialize() - m_szFirefoxFolder
prefs.js
prefs.js.tmp
localstore.rdf
CFFConfig::GetValue - key
CFFConfig::SetValue - key
CFFConfig: DeleteKey, removing:
CFFConfig: DeleteKey, IsInitialized failed
CFFConfig: ParsePreferences, szKey:
CFFConfig: ParsePreferences, couldn't determine key name
CFFConfig: ParsePreferences, PARSING_TYPE_DELETE, found key, value:
CFFConfig: ParsePreferences, Key not found, Key:
CPaypalDomainListReader::CheckFileExist "data.dat" does not exist
CPaypalDomainListReader::Init "data.zip" file does not exists
CPaypalDomainListReader::CheckFileExist "data.zip" exist
CPaypalDomainListReader::CheckFileExist copy or unzip"data.zip" result
CPaypalDomainListReader::Init "data.dat" file exists
\%s\Paypal
RemoteUpdater/Campaign/Url
CUpdaterRequest::ParseXML - Ended to Campign URL
RemoteUpdater/Campaign/CmdLineParams
CUpdaterRequest::ParseXML - Parsed url
Url%d
CUpdaterRequest::ParseXML - Parsed url param:
CUpdaterRequest::ParseXML - Parsed url data:
Content-Type: application/x-www-form-urlencoded
CUpdaterRequest::UpdateWithRemoteToolbarData - http request: send=[
CUpdaterRequest::GetLocalToolbarsInfo() - read partnerID start: configuration.xml:
CUpdaterRequest::GetDownloadUrl(), Browser
CUpdaterRequest::GetDownloadUrl - failed to read Server url
CUpdaterRequest::GetDownloadUrl - failed to parse XML
CUpdaterRequest::GetDownloadUrl - Url
CUpdaterRequest::GetDownloadUrl - NewVersion
CUpdaterRequest::GetDownloadUrl - should download
CUpdaterRequest::GetDownloadUrl - no toolbars returned
\UpdaterConfig.ini
ServerURL
XpiInstaller ExtractFileNameFromUrl sUrl
XpiInstaller ExtractFileNameFromUrl fails, (end <= sUrl)
XpiInstaller ExtractFileNameFromUrl fails, (*end != '/')
XpiInstaller Trying to ExtractFileNameFromUrl
XpiInstaller HttpGetFile sFileName
XpiInstaller HttpGetFile sTempDir
XpiInstaller HttpGetFile sXpiResource
\\.\avgtp
R%d/%d/%d %d:%d:%d
{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
CDomainADBlockerCH::CDomainADBlockerCH error!!! empty chrome path
Local Storage\chrome-extension_gighmmpiobklfepjocnamgkkbiglidom_0.localstorage
CDomainADBlockerCH::CDomainADBlockerCH SQLite path
CDomainADBlockerCH::AddDomainToAdBlocker failed to open sqlite table.
CDomainADBlockerCH::IsDomainInWhiteList failed to open sqlite table.
CDomainADBlockerCH::GetCustomFilters sqlite3_prepare error
CDomainADBlockerCH::GetCustomFilters sqlite3_step empty error
CDomainADBlockerCH::GetCustomFilters sqlite3_step error
CDomainADBlockerCH::GetCustomFilters sqlite3_column_text - error: can't read 'custom_filters' value
CDomainADBlockerCH::OpenTable - sqlite3_open error
CAdBlock::AddDomain sqlite3_exec statement
CAdBlock::AddDomain sqlite3_exec error
@@||%s^$document
CDomainADBlockerPlus::ReadLinesFromFile inFile.is_open failed return false
CDomainADBlockerPlus::WriteLinesToFile outFile.is_open failed return false
Assertion failed: %s, file %s, line %d
%Program Files%\Common Files\AVG Secure Search\ScriptHelperInstaller\18.1.0\ScriptHelper.exe
{8856F961-340A-11D0-A96B-00C04FD705A2}
Configuration.xml!res://ieframe.dll/tabswelcome.htm
ChangeNewTab ?SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy9SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved
ScriptHelper.exe
18.1.0.443






Remove it with Ad-Aware




    

  1. Click (here) to download and install Ad-Aware Free Antivirus.
    2. 

  2. Update the definition files.
    3. 

  3. Run a full scan of your computer.
    4. 





Manual removal*




    

  1. Scan a system with an anti-rootkit tool.
    2. 

  2. Terminate malicious process(es) (How to End a Process With the Task Manager):
    

    GoogleUpdate.exe:2868
    ToolbarUpdater.exe:3900
    avg-secure-search-installer.exe:3104
    avg-secure-search-installer.exe:3708
    sc.exe:3812
    sc.exe:3824
    sc.exe:3832
    sc.exe:3804
    sc.exe:3800
    sc.exe:3888
    sc.exe:3852
    loggingserver.exe:3932
    %original file name%.exe:276
    OIAssistWTD.exe:608
    oi_{AA50609F-E2F0-4467-B048-0D85D9B4FD98}.exe:3120
    MachineIdCreator.exe:3736
    MachineIdCreator.exe:3136
    ScriptHelper.exe:3988
    avg.exe:2804
    BundleInstall.exe:3768
    BundleInstall.exe:2360
    regsvr32.exe:556
    vprot.exe:836
    DriverInstaller.exe:596
    AVG SafeGuard toolbar:3312
    

    3. 

  3. Delete the original program file.
    4. 

  4. Delete or disinfect the following files created/modified by the program:
    

    %WinDir%\Temp\toolbar_log.txt (52231 bytes)
    %Program Files%\Common Files\AVG Secure Search\InstalledProducts.ini (138 bytes)
    %Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\8DFDF057024880D7A081AFBF6D26B92F (533 bytes)
    %System%\config\SOFTWARE.LOG (14092 bytes)
    %System%\config\software (4800 bytes)
    %Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\62B5AF9BE9ADC1085C3C56EC07A82BF6 (126 bytes)
    %Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\8DFDF057024880D7A081AFBF6D26B92F (176 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\toolbar_log.txt (233787 bytes)
    %Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\62B5AF9BE9ADC1085C3C56EC07A82BF6 (224 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\oi_{AA50609F-E2F0-4467-B048-0D85D9B4FD98}.exe (47143 bytes)
    %Program Files%\AVG SafeGuard toolbar\DSPDlg_IE\Thumbs.db (10 bytes)
    %Documents and Settings%\%current user%\NTUSER.DAT.LOG (12024 bytes)
    %Program Files%\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Uninstall_cp.html (10 bytes)
    %Program Files%\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\loggingserver.exe (673 bytes)
    %Program Files%\AVG SafeGuard toolbar\Licenses\hmac.txt (1 bytes)
    %Program Files%\AVG SafeGuard toolbar\about.gif (622 bytes)
    %Program Files%\AVG SafeGuard toolbar\Chrome\content\icons\loader.gif (4 bytes)
    %Program Files%\AVG SafeGuard toolbar\ChromeGuardRes\jquery-1.8.1.min.js (601 bytes)
    %Program Files%\AVG SafeGuard toolbar\DSPDlg_IE\all.css (26 bytes)
    %Program Files%\AVG SafeGuard toolbar\ChromeGuardRes\avg_logo_medium.png (3 bytes)
    %Program Files%\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\log4cplusU.dll (3073 bytes)
    %Program Files%\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\UpdaterConfig.ini (1 bytes)
    %Program Files%\AVG SafeGuard toolbar\UninstallRes\ClientPackage\jquery-1.5.1.min.js (601 bytes)
    %Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\Images\box-middle.png (974 bytes)
    %Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\Images\arrow-up.png (3 bytes)
    %Program Files%\AVG SafeGuard toolbar\Chrome\content\icons\innerBG_gradient.gif (2 bytes)
    %Program Files%\AVG SafeGuard toolbar\ChromeGuardRes\ChromeGuadDsp.html (1 bytes)
    %Program Files%\AVG SafeGuard toolbar\Chrome\content\icons\bg_tooltip.gif (1 bytes)
    %Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\Images\box-top.png (1 bytes)
    %Program Files%\AVG SafeGuard toolbar\updating18.gif (661 bytes)
    %Program Files%\AVG SafeGuard toolbar\ChromeGuardRes\cg.js (3 bytes)
    %Program Files%\AVG SafeGuard toolbar\ChromeRes\nt.html (601 bytes)
    %Program Files%\AVG SafeGuard toolbar\AVG SafeGuard toolbar (18 bytes)
    %Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\ie_dsp1.js (6 bytes)
    %Program Files%\AVG SafeGuard toolbar\configuration.xml (18 bytes)
    %Program Files%\Common Files\AVG Secure Search\ScriptHelperInstaller\18.1.0\manifest.json (463 bytes)
    %Program Files%\AVG SafeGuard toolbar\lip.exe (7385 bytes)
    %Program Files%\AVG SafeGuard toolbar\DSPDlg_IE\logo2.png (4 bytes)
    %Program Files%\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\cp-bg.png (1 bytes)
    %Program Files%\AVG SafeGuard toolbar\Licenses\LICENSE-bzip.txt (1 bytes)
    %Program Files%\AVG SafeGuard toolbar\feedback.gif (365 bytes)
    %Program Files%\AVG SafeGuard toolbar\Licenses\Encoding_decoding_base64.txt (991 bytes)
    %Program Files%\AVG SafeGuard toolbar\surf-with-caution18.gif (668 bytes)
    %Program Files%\AVG SafeGuard toolbar\Licenses\CPOL license.txt (11 bytes)
    %Program Files%\AVG SafeGuard toolbar\uninstall.gif (628 bytes)
    %Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\ie_dsp2.js (4 bytes)
    %Program Files%\AVG SafeGuard toolbar\labs.gif (567 bytes)
    %Program Files%\AVG SafeGuard toolbar\FireFoxSearchXml.tmp (3 bytes)
    %Program Files%\Common Files\AVG Secure Search\ToolBandTlb\18.1.0\toolband (6 bytes)
    %Program Files%\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.0\ViProtocol.dll (4185 bytes)
    %Program Files%\AVG SafeGuard toolbar\help.gif (627 bytes)
    %Program Files%\AVG SafeGuard toolbar\Chrome\content\icons\bull4x4.gif (68 bytes)
    %Program Files%\AVG SafeGuard toolbar\Licenses\LICENSE-JasonCpp.txt (1 bytes)
    %Program Files%\AVG SafeGuard toolbar\ChromeRes\nt28_2.js (45 bytes)
    %Program Files%\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\updater.xml (530 bytes)
    %Program Files%\AVG SafeGuard toolbar\18.1.0.443\AVG SafeGuard toolbar_toolbar.dll (24822 bytes)
    %Program Files%\AVG SafeGuard toolbar\current.gif (1 bytes)
    %Program Files%\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.0\SiteSafety.dll (673 bytes)
    %Program Files%\AVG SafeGuard toolbar\data.zip (673 bytes)
    %Program Files%\Common Files\AVG Secure Search\DriverInstaller\18.1.0\DriverInstaller.exe (4185 bytes)
    %Program Files%\AVG SafeGuard toolbar\currently-safe18.gif (1 bytes)
    %Program Files%\AVG SafeGuard toolbar\favicon.ico (1 bytes)
    %Program Files%\AVG SafeGuard toolbar\Uninstall.exe (14988 bytes)
    %Program Files%\AVG SafeGuard toolbar\Chrome\content\icons\divider.gif (1 bytes)
    %Program Files%\AVG SafeGuard toolbar\EnableHelperRes\Images\box_ie.png (16 bytes)
    %Program Files%\AVG SafeGuard toolbar\BundleInstaller.ini (76 bytes)
    %System%\drivers\avgtpx86.sys (42 bytes)
    %Program Files%\AVG SafeGuard toolbar\vprot.exe (17627 bytes)
    %Program Files%\AVG SafeGuard toolbar\DSPDlg_IE\btn-ok2.gif (2 bytes)
    %Program Files%\AVG SafeGuard toolbar\UninstallRes\ClientPackage\jquery-1.8.1.min.js (601 bytes)
    %Program Files%\AVG SafeGuard toolbar\Chrome\content\icons\bg_expand.gif (1 bytes)
    %Program Files%\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\upBtn.png (1 bytes)
    %Program Files%\AVG SafeGuard toolbar\privacy.gif (577 bytes)
    %Program Files%\AVG SafeGuard toolbar\UninstallRes\ClientPackage\uninstall_cp.css (2 bytes)
    %Program Files%\AVG SafeGuard toolbar\Licenses\LICENSE-bsdiff.txt (1 bytes)
    %Program Files%\Common Files\AVG Secure Search\DNTInstaller\18.1.0\avgdttbx.dll (3361 bytes)
    %Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\ie_dsp_step1.html (1 bytes)
    %Program Files%\AVG SafeGuard toolbar\search.gif (366 bytes)
    %Program Files%\AVG SafeGuard toolbar\remote_configuration.xml (10 bytes)
    %Program Files%\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\downBtn.png (1 bytes)
    %Program Files%\AVG SafeGuard toolbar\UninstallRes\ClientPackage\JQueyExtensions.js (465 bytes)
    %Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\jquery-1.8.1.min.js (601 bytes)
    %Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\ie_dsp2.css (885 bytes)
    %Program Files%\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\uninstall-bg.png (1 bytes)
    %Program Files%\AVG SafeGuard toolbar\ChromeRes\AVG SafeGuard toolbar\nt28_2.html (168 bytes)
    %Program Files%\AVG SafeGuard toolbar\icon18.gif (1 bytes)
    %Program Files%\AVG SafeGuard toolbar\ChromeRes\nt28_2.html (4 bytes)
    %Documents and Settings%\All Users\Application Data\AVG Secure Search\Logger\logger.properties (371 bytes)
    %Program Files%\Common Files\AVG Secure Search\NativeBrowserApi\18.1.0\NativeBrowserApi.dll (4545 bytes)
    %Program Files%\AVG SafeGuard toolbar\Chrome\content\icons\bg_close.gif (1 bytes)
    %Program Files%\AVG SafeGuard toolbar\18.1.0.443\install.ini (112 bytes)
    %Program Files%\AVG SafeGuard toolbar\DSPDlg_IE\DSPDlg_IE.html (9 bytes)
    %Program Files%\Common Files\AVG Secure Search\ScriptHelperInstaller\18.1.0\ScriptHelper.exe (16582 bytes)
    %Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\Images\avg_logo.png (3 bytes)
    %Program Files%\AVG SafeGuard toolbar\DSPDlg_IE\downBtn.png (1 bytes)
    %Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\Images\box-bottom-small.png (972 bytes)
    %Program Files%\AVG SafeGuard toolbar\ChromeRes\AVG Secure Search\nt28_2.html (4 bytes)
    %Program Files%\AVG SafeGuard toolbar\Licenses\LICENSE-MPL-NPAPI.txt (26 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\AAE8OMVS\install[1].gif (882 bytes)
    %Program Files%\AVG SafeGuard toolbar\ChromeGuardRes\cg.css (4 bytes)
    %Program Files%\AVG SafeGuard toolbar\Licenses\PassthruApp.txt (567 bytes)
    %Program Files%\AVG SafeGuard toolbar\DSPDlg_IE\upBtn.png (1 bytes)
    %Program Files%\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Uninstall_cp_step2.html (9 bytes)
    %Program Files%\AVG SafeGuard toolbar\setup.bmp (601 bytes)
    %Program Files%\AVG SafeGuard toolbar\crash.avgdx (2 bytes)
    %Program Files%\AVG SafeGuard toolbar\EnableHelperRes\EEImageHandler.html (3 bytes)
    %Program Files%\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\loader.gif (19 bytes)
    %Program Files%\AVG SafeGuard toolbar\EULA.gif (636 bytes)
    %Documents and Settings%\%current user%\Application Data\Mozilla\Firefox\Profiles\rsxjpslc.default\prefs.js.tmp (5 bytes)
    %Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\Images\box-top-small.png (1 bytes)
    %Program Files%\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\cp_logo.png (5 bytes)
    %Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\ie_dsp1.css (885 bytes)
    %Program Files%\AVG SafeGuard toolbar\TBAPI.dll (10177 bytes)
    %Program Files%\AVG SafeGuard toolbar\BundleInstall.exe (22299 bytes)
    %Program Files%\AVG SafeGuard toolbar\Licenses\LICENSE-sparsehash.txt (1 bytes)
    %Documents and Settings%\All Users\Application Data\AVG SafeGuard toolbar\CrashReport\crash.avgdx (2 bytes)
    %Program Files%\AVG SafeGuard toolbar\active-threats18.gif (663 bytes)
    %Program Files%\AVG SafeGuard toolbar\Chrome\content\icons\bg_tracking.gif (5 bytes)
    %Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\ie_dsp_step2.html (1 bytes)
    %Program Files%\AVG SafeGuard toolbar\EnableHelperRes\Images\Thumbs.db (21 bytes)
    %Program Files%\AVG SafeGuard toolbar\CleanHistory.gif (586 bytes)
    %Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\Images\arrow.png (1 bytes)
    %Program Files%\AVG SafeGuard toolbar\Licenses\Log4CPlus.txt (582 bytes)
    %Program Files%\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe (12287 bytes)
    %Program Files%\AVG SafeGuard toolbar\AvgComponents.manifest (234 bytes)
    %Program Files%\AVG SafeGuard toolbar\ChromeRes\AVG Nation toolbar\nt28_2.html (6 bytes)
    %Program Files%\AVG SafeGuard toolbar\avgMozXPCOM.js (61 bytes)
    %Program Files%\AVG SafeGuard toolbar\IeDspHelperRes\Images\box-bottom.png (967 bytes)
    %WinDir%\Temp\avg_secure_search.log (454776 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\OIAssistWTD.exe (173361 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\Lbnugoxhgk.html (29 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT (96 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WJYHCPG4\13282488921657972529443[1].jpg (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\OIC26.tmp (6417 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\X33TH0UP\blank[1].gif (43 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\AAE8OMVS\avg-horizontal-new[1].png (98 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\AAE8OMVS\avg-logo-small2[1].jpg (50 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\HShSHeuSFK.mht (3946 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\BFXm14JQKU.mht (1854 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\oilocal_main.min.js (26084 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\E9UY92VW\13282470341657972529308[1].jpg (846 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WJYHCPG4\_utma[1].gif (807 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\oilocal_screen_2_4.min.js (209 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WJYHCPG4\13353103241657972529591[1].jpg (357 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\X33TH0UP\1334599120204897734385[1].png (17425 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\Lbnugoxhgk.mht (2925 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\BFXm14JQKU.html (11 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\oilocal_screen_2.min.js (388 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\avg.exe.part_V9exmJ89oC (1009604 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\oi_Dzq9w1STvj\HShSHeuSFK.html (12 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\help.png (876 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\ChromeRes\AVG Secure Search\nt28_2.html (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\pt\global.dtd (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\ko\global.properties (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\DriverInstaller.exe (3725 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\Chrome\manifest.json (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\hi\global.dtd (10 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\Images\avg_logo.png (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\AvgComponents.manifest (234 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Licenses\PassthruApp.txt (567 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\ChromeGuardRes\jquery-1.8.1.min.js (92 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\ChromeExt\18.1.0.443\avg.crx (257 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\avg-secure-search-installer.exe (15801 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\icon_search.png (944 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\ko\global.dtd (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\en\global.dtd (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\propertiesJsm.js (637 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\es-es\global.properties (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\ie_dsp2.css (885 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\ChromeExt\18.1.0.443\ExtensionTemplate.txt (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\avgtpx64.sys (50 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\dnt.png (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\EnableHelperRes\EEImageHandler.html (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\currently-safe18.png (898 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\Images\box-top.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\sv\global.dtd (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\DSPDlg_IE\downBtn.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\th\global.properties (9 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Licenses\LICENSE-sparsehash.txt (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\components\avg-dnt-policy.js (19 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\surf-with-caution18.gif (668 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\help.gif (627 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\cp_logo.png (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\hu\global.dtd (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\Facebook.gif (627 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\uninstall.gif (628 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\DSPDlg_IE\DSPDlg_IE.html (9 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\pt\global.properties (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\ms\global.dtd (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\remote_configuration.xml (10 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\passwordbox.js (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\icon18.gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\locale\en-US\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\uninstall.png (950 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\ChromeRes\AVG SafeGuard toolbar\nt28_2.html (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\loader.gif (729 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\tr\global.dtd (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\DSPDlg_IE\all.css (26 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\cs\global.properties (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\pl\global.properties (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\DSPDlg_IE\Thumbs.db (10 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\fr\global.properties (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Licenses\LICENSE-bzip.txt (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\UpdaterConfig.ini (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\vprot.exe (15801 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\lip.exe (6425 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\bg_tooltip.gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\active-threats18.png (829 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\favicon.ico (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\CleanHistory.gif (586 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\CleanHistory.png (666 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\zh-tw\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\loggingserver.exe (159 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\ajax-loader.gif (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\pt-br\global.properties (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\EULA.png (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\EnableHelperRes\Images\box_ie.png (16 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\divider.gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\TBAPI.dll (7972 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\privacy.gif (577 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\fi\global.dtd (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\avg-dnt-adapter.js (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\icon18.png (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\ChromeRes\AVG Nation toolbar\nt28_2.html (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Licenses\hmac.txt (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\el\global.properties (8 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\feedicon.png (500 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\EULA.gif (636 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\nl\global.dtd (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\Images\arrow-up.png (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\DSPDlg_IE\logo2.png (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\configuration.js (851 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\questionmarkIcon.png (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\ie_dsp_step1.html (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\chrome.manifest (986 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\BundleInstall.exe (5442 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\surf-with-caution18.png (859 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\ro\global.dtd (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\Images\box-middle.png (974 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\avg.xul (12 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Uninstall_cp_step2.html (9 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\hi\global.properties (9 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Licenses\LICENSE-JasonCpp.txt (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\nb\global.dtd (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\components\toolbarhomeApi.js (31 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\it\global.dtd (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\ViProtocol.dll (3706 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\zh-tw\global.dtd (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\jquery-1.8.1.min.js (92 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\labs.gif (567 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\fi\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\log4cplusU.dll (1800 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\ScriptHelper.exe (15801 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\Images\arrow.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\avgJsm.js (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\feedback.png (685 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\el\global.dtd (9 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\de\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\about.gif (622 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\HistoryCleaner.js (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\IOJsm.js (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\privacy.png (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\ie_dsp1.css (885 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\sr\global.properties (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\ChromeGuardRes\avg_logo_medium.png (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ConfigFiles\MachineIdCreator.exe (1863 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\binarylines.manifest (199 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\Images\box-bottom.png (967 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\configuration_0.css (528 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\de\global.dtd (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\es-es\global.dtd (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\avg.xml (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\ChromeRes\nt.html (111 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\Images\box-top-small.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\avgtpx86.sys (42 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\chrome\avg.jar (82 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\avgMozXPCOM.js (61 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\FireFoxSearchXml.tmp (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\CommonCfg.ini (186 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\search.png (687 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\sk\global.dtd (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\Installer.7z (45823 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\active-threats18.gif (663 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\jquery-1.8.1.min.js (92 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\updating18.gif (661 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\updater.xml (530 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\da\global.dtd (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\avgdttbx.dll (1848 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\DSPDlg_IE\btn-ok2.gif (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\af\global.dtd (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\manifest.json (185 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\18.1.0.443\AVG SafeGuard toolbar_toolbar.dll (23407 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\ie_dsp1.js (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Uninstall.exe (12289 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\hu\global.properties (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\x64\ScriptHelper.exe (15801 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\currently-safe18.gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\bg_expand.gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\updating18.png (796 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\loader.gif (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\cp-bg.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\helper.dll (40 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\bg_close.gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ConfigFiles\avguidx.dll (247 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\bull4x4.gif (68 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\bg_tracking.gif (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\window-close.png (347 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\nl\global.properties (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\af\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\SiteSafety.dll (145 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\Bindings.xml (12 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\id\global.dtd (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\jquery-1.5.1.min.js (85 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\avgMozXPCOM.js (61 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\cs\global.dtd (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\locale\en-US\global.dtd (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\configuration.xml (18 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\AVG SafeGuard toolbar (18 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\FireFoxSearchXml.tmp (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\nb\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\EnableHelperRes\Images\Thumbs.db (21 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\NativeBrowserApi.dll (3762 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\data.zip (147 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\DriverInstaller_64.exe (144 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\sk\global.properties (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\zh-cn\global.dtd (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Licenses\Log4CPlus.txt (582 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles64\AVG SafeGuard toolbar\18.1.0.443\AVG SafeGuard toolbar_toolbar.dll (44089 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ConfigFiles\installer_cfg.ini (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\labs.png (672 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\ro\global.properties (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Licenses\Encoding_decoding_base64.txt (991 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\uninstall_cp.css (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\sv\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\ru\global.properties (8 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\pt-br\global.dtd (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\upBtn.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\ja\global.dtd (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\downBtn.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\sr\global.dtd (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\ie_dsp2.js (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\zh-cn\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\current.png (816 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\BundleInstaller.ini (38 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\close.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\setup.bmp (105 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Licenses\CPOL license.txt (11 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\da\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Licenses\LICENSE-bsdiff.txt (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\innerBG_gradient.gif (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\ChromeRes\nt28_2.js (45 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\ToolBand.tlb (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\Images\box-bottom-small.png (972 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\crash.avgdx (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\uninstall-bg.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\es\global.dtd (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\ChromeGuardRes\cg.css (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\en\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\search.gif (366 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\th\global.dtd (10 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\ChromeGuardRes\ChromeGuadDsp.html (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\ms\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\tr\global.properties (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\feedback.gif (365 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\JQueyExtensions.js (465 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\current.gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\loader.gif (19 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\install.rdf (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\{95B7759C-8C7F-4BF1-B163-73684A933233} (40 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\it\global.properties (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\about.png (837 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Uninstall_cp.html (10 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\DSPDlg_IE\upBtn.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\CommonFiles\AVG SafeGuard toolbar\ToolbarUpdater.exe (9606 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\fr\global.dtd (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\ChromeGuardRes\cg.js (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\Licenses\LICENSE-MPL-NPAPI.txt (26 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\es\global.properties (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgFiles\AVG SafeGuard toolbar\IeDspHelperRes\ie_dsp_step2.html (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\Preferences.js (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\skin\information-24.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\icon.png (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\ru\global.dtd (9 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\pl\global.dtd (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\id\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a00660\ProgData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443\modules\locale\ja\global.properties (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\configuration.xml (12 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\lip.exe (3725 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\hi\global.dtd (8 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\CleanHistory.gif (586 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Licenses\LICENSE-JasonCpp.txt (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\window-close.png (347 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\cs\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\DriverInstaller_64.exe (146 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\es\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\ToolBand.tlb (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\DSPDlg_IE\logo2.png (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\es-es\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\cp_logo.png (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\sr\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\ko\global.dtd (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\Bindings.xml (12 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\feedicon.png (500 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\zh-tw\global.properties (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Licenses\Encoding_decoding_base64.txt (991 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\install.rdf (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\UpdaterConfig.ini (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\active-threats18.gif (663 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Licenses\LICENSE-bzip.txt (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Licenses\PassthruApp.txt (567 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ConfigFiles\installer_cfg.ini (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\performanceIcon.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Licenses\LICENSE-sparsehash.txt (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\loader.gif (19 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\bull4x4.gif (68 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\el\global.dtd (8 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\uninstall.gif (628 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\sv\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\pt-br\global.dtd (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\updating18.png (796 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\propertiesJsm.js (559 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\ru\global.dtd (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\IOJsm.js (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\ro\global.dtd (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\search.gif (366 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\JQueyExtensions.js (462 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\en\global.dtd (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\AVGRewardsWorker.dll (1843 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\npsitesafety.dll (1846 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\PostInstall.exe (1790 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\about.png (837 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\ScriptHelper.exe (7386 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\zh-cn\global.dtd (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\ko\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\icon18.gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\pt\global.dtd (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\CommonCfg.ini (194 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\information-24.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\HistoryCleaner.js (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\{95B7759C-8C7F-4BF1-B163-73684A933233} (40 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\labs.png (672 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\ru\global.properties (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\configuration_0.xul (10 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\DSPDlg_IE\upBtn.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\el\global.properties (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\hu\global.dtd (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\currently-safe18.gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\nl\global.dtd (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\avg-dnt-adapter.js (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\uninstall_cp.css (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\Facebook.gif (627 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\labs.gif (567 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\performanceIcon.gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\pl\global.dtd (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\EnableHelperRes\Images\box_ie.png (16 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\PostInstaller.ini (490 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\vprot.exe (5442 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\th\global.properties (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\ja\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\id\global.dtd (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Licenses\hmac.txt (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\fr\global.dtd (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\icon-1G.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\avg.xml (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\FireFoxSearchXml.tmp (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\es-es\global.dtd (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\fr\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\en\global.properties (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\sk\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\innerBG_gradient.gif (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\current.gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\uninstall-bg.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\cs\global.dtd (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\CleanHistory.png (666 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\questionmarkIcon.png (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\divider.gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Uninstall.exe (5442 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\ms\global.dtd (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\loader.gif (729 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\uninstall.png (950 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\about.gif (622 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Licenses\LICENSE-bsdiff.txt (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\remote_configuration.xml (9 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\feedback.gif (365 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\currently-safe18.png (898 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\hu\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\it\global.dtd (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\sv\global.dtd (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Facebook.gif (627 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\surf-with-caution18.gif (668 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ConfigFiles\avguidx.dll (247 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\active-threats18.png (829 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\es\global.dtd (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\configuration_0.css (532 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\nl\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\setup.bmp (105 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\AVG SafeGuard toolbar (19 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\DSPDlg_IE\btn-ok2.gif (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\current.png (816 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\Installer.7z (17629 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\DSPDlg_IE\all.css (26 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\pt-br\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\FireFoxSearchXml.tmp (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\fi\global.dtd (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\ajax-loader.gif (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\SiteSafety.dll (157 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\components\toolbarhomeApi.js (22 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\bg_tooltip.gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\tr\global.dtd (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\EnableHelperRes\EEImageHandler.html (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\help.png (876 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\avgMozXPCOM.js (42 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\icon.png (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\help.gif (627 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\configuration.js (851 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\DSPDlg_IE\DSPDlg_IE.html (11 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\locale\en-US\global.properties (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\bg_close.gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\fi\global.properties (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\feedback.png (685 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ConfigFiles\MachineIdCreator.exe (157 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Uninstall_cp.html (9 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\af\global.dtd (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\nb\global.properties (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\hi\global.properties (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\bg_tracking.gif (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\chrome.manifest (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\avgJsm.js (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\th\global.dtd (8 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\pl\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\avgtpx86.sys (31 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\binarylines.manifest (199 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\pt\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\nb\global.dtd (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Licenses\LICENSE-MPL-NPAPI.txt (26 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\14.0.0.12\AVG SafeGuard toolbar_toolbar.dll (9606 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\sk\global.dtd (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\upBtn.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\icon-1R.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\ja\global.dtd (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\de\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\downBtn.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\it\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\avgdttbx.dll (1849 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\id\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\ro\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\chrome\avg.jar (96 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\cp-bg.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\ms\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Chrome\content\icons\bg_expand.gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\UninstallRes\ClientPackage\jquery-1.5.1.min.js (85 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\components\nci.js (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\DriverInstaller.exe (1745 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\ChromeExt\14.0.0.12\avg.crx (180 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\zh-tw\global.dtd (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\search.png (687 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\icon18.png (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\zh-cn\global.properties (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\Eula.txt (10 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\tr\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\surf-with-caution18.png (859 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\af\global.properties (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\avg-secure-search-installer.exe (7386 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\ViProtocol.dll (1775 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\DSPDlg_IE\downBtn.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\de\global.dtd (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\avgtpx64.sys (37 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\updating18.gif (661 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\da\global.dtd (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\CommonFiles\AVG SafeGuard toolbar\ToolbarUpdater.exe (6386 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\sr\global.dtd (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgFiles\AVG SafeGuard toolbar\favicon.ico (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\icon_search.png (944 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\locale\en-US\global.dtd (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\close.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\components\avg-dnt-policy.js (20 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\Preferences.js (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\skin\dnt.png (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg_a02808\ProgData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12\modules\locale\da\global.properties (4 bytes)
    %Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\7614bd6cfa99e546.fb (663 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\AVG SafeGuard toolbar\DNT\dt.dat (1176 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\ichcop (3476 bytes)
    %Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\f2cda51fd108941f.fb (366 bytes)
    %Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\c4e10d1be905349b.fb (627 bytes)
    %Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\tmp\075884af680ff6dc (1 bytes)
    %Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\90322daed25d1676.fb (12 bytes)
    %Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\tmp\881b3593316772f0 (586 bytes)
    %Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\tmp\49fbbc5a8678d502 (661 bytes)
    %Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\tmp\f2cda51fd108941f (366 bytes)
    %Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\tmp\c8a51ba84752784f (196 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\AVG SafeGuard toolbar\SiteSafety\l_2014_05_13_04_01_11.db (676427 bytes)
    %Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\49fbbc5a8678d502.fb (661 bytes)
    %Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\tmp\613e8ce7ab7106af (1 bytes)
    %Documents and Settings%\%current user%\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1844237615-1960408961-1801674531-1003\c5b88721db08c824db69d0bbc702beb8_75ed9567-aa58-4c8e-a8ea-3cad7c47ab03 (44 bytes)
    %Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\691f14230153a9e1.fb (668 bytes)
    %Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\c8a51ba84752784f.fb (6 bytes)
    %Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\tmp\7614bd6cfa99e546 (663 bytes)
    %Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\613e8ce7ab7106af.fb (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\AVG SafeGuard toolbar\Chrome\Default\Preferences (601 bytes)
    %Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\tmp\c4e10d1be905349b (627 bytes)
    %Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\881b3593316772f0.fb (586 bytes)
    %Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\075884af680ff6dc.fb (1 bytes)
    %Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\tmp\691f14230153a9e1 (668 bytes)
    %Documents and Settings%\%current user%\Application Data\AVG SafeGuard toolbar\cache\tmp\90322daed25d1676 (588 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\AVG SafeGuard toolbar\Chrome\Default\Web Data (601 bytes)
    

    5. 

  5. Delete the following value(s) in the autorun key (How to Work with System Registry):
    

    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "vProt" = "%Program Files%\AVG SafeGuard toolbar\vprot.exe"
    

    6. 

  6. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
    7. 

  7. Reboot the computer.
    8. 



*Manual removal may cause unexpected system behaviour and should be performed at your own risk.












 
 




 
No votes yet












				


							


			

				
					  
							

		

		


					
							

	

	
	        


	

        
      
 

      
      

      
    
 

    
  
 

		


		

		
			

			

				

					Lavasoft is the maker of Ad-Aware,
					the world's most popular anti-malware 
					software with over 450 million 
					downloads.
				

				

					© 2026 Lavasoft. All rights reserved.

					Terms Of Use |   Privacy Policy
					


								

			


		

		


	

	
	

	

		x
		
Our best antivirus yet!

		
Fresh new look. Faster scanning. Better protection.

		

			
Enjoy unique new features, lightning fast scans and a simple yet beautiful new look in our best antivirus yet!

			
For a quicker, lighter and more secure experience, download the all new adaware antivirus 12 now!

			
			Download adaware antivirus 12
		

		No thanks, continue to lavasoft.com
	

	

		

			close x
			
Discover the new adaware antivirus 12

			
Our best antivirus yet

			Download Now