CmdLine - quick aswBoot.exe /A:"*" /L:"1045" /KBD:3 /dir:"C:\Program Files\AVAST Software\Avast" CmdLine end SafeBoot: 0 CreateKbThread new CKbBuffer CKbBuffer::Init CKbBuffer::Init end NtCreateEvent(g_hStopEvent) dep_osBeginThread - KbThread CreateKbThread end NtInitializeRegistry KbThread start ReadRegistry DATA=C:\ProgramData\AVAST Software\Avast PROG=C:\Program Files\AVAST Software\Avast BUILD=1474 Windows Vista (TM) Home Premium Service Pack 1 SystemRoot=C:\Windows TEMP=C:\Windows\TEMP TMP=C:\Windows\TEMP ReadRegistry end CreateTemp CreateTemp end aswcmnbDllMain cmnbInit aswEnginDllMain(DLL_PROCESS_ATTACH) InitLog InitLog end CmdLine - full aswBoot.exe /A:"*" /L:"1045" /KBD:3 /dir:"C:\Program Files\AVAST Software\Avast" CmdLine end Program folder: C:\Program Files\AVAST Software\Avast Engine folder: C:\Program Files\AVAST Software\Avast\defs\12112800 Base addr: 77110000 TimeStamp: 50b379ed Unschedule 61,00,75,00,74,00,6F,00,63,00,68,00,65,00,63,00, 6B,00,20,00,61,00,75,00,74,00,6F,00,63,00,68,00, 6B,00,20,00,2A,00,00,00,61,00,73,00,77,00,42,00, 6F,00,6F,00,74,00,2E,00,65,00,78,00,65,00,20,00, 2F,00,41,00,3A,00,22,00,2A,00,22,00,20,00,2F,00, 4C,00,3A,00,22,00,31,00,30,00,34,00,35,00,22,00, 20,00,2F,00,4B,00,42,00,44,00,3A,00,33,00,20,00, 2F,00,64,00,69,00,72,00,3A,00,22,00,43,00,3A,00, 5C,00,50,00,72,00,6F,00,67,00,72,00,61,00,6D,00, 20,00,46,00,69,00,6C,00,65,00,73,00,5C,00,41,00, 56,00,41,00,53,00,54,00,20,00,53,00,6F,00,66,00, 74,00,77,00,61,00,72,00,65,00,5C,00,41,00,76,00, 61,00,73,00,74,00,22,00,00,00,00,00, Unschedule end LoadResources LoadResources end InitReport InitReport end Global exclusions: NtSetEvent(g_hInitEvent) - 1 CPU: Phys(2), Log(2), Aff(2), Feat(0000003f) InitKeyboard g_dwKbdNum: 3 FreeMemory: 2594836480 avworkInitialize s_dwKbdClassCnt: 3 InitKeyboard end NtSetEvent(g_hInitEvent) - 2 GetKey FreeMemory: 2572816384 CKbBuffer::Wait CKbBuffer::Get CKbBuffer::Get end CKbBuffer::Wait end ProcessArea avfilesScanAdd *MBR0 avfilesScanAdd *BOOTC: Loading raw access support avfilesScanAdd *RAW:C:\ [Fs: 002700ff, NTFS; Dev: 07, 00000020] avfilesScanAdd *BOOTD: avfilesScanAdd D:\ [Fs: 002700ff, NTFS; Dev: 07, 00000020] avfilesScanRealMulti begin CKbBuffer::Get Key: 0, 6, 0, 0, 0 GetKey end (5/35) CKbBuffer::Put CKbBuffer::Put end GetKey CKbBuffer::Get end WaitForKeys (9): 5 Key: 0, 6, 1, 0, 0 GetErrorText CKbBuffer::Get Key: 0, 2, 0, 0, 0 GetKey end (1/31) CKbBuffer::Put CKbBuffer::Put end GetKey CKbBuffer::Get end WaitForKeys (9): 1 Key: 0, 2, 1, 0, 0 CKbBuffer::Get Key: 0, 2, 0, 0, 0 GetKey end (1/31) CKbBuffer::Put CKbBuffer::Put end GetKey CKbBuffer::Get end WaitForKeys (9): 1 Key: 0, 2, 1, 0, 0 CKbBuffer::Get Key: 0, 3, 0, 0, 0 GetKey end (2/32) CKbBuffer::Put CKbBuffer::Put end GetKey CKbBuffer::Get end WaitForKeys (9): 2 Key: 0, 3, 1, 0, 0 avfilesScanRealMulti finished Runtime: 3150124ms avworkClose Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Checking deleted files: Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Key: 0, 57, 0, 0, 0 GetKey end ( /20) CKbBuffer::Put CKbBuffer::Put end GetKey Key: 0, 57, 1, 0, 0 Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Key: 0, 57, 0, 0, 0 GetKey end ( /20) CKbBuffer::Put CKbBuffer::Put end GetKey Key: 0, 57, 1, 0, 0 Unloading raw access support Loading raw access support Key: 0, 1, 0, 0, 0 GetKey end (?/1b) CKbBuffer::Put CKbBuffer::Put end Aborted Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Unloading raw access support Loading raw access support Hard break