Trojan.Siggen18.13452

Technical Information

To ensure autorun and distribution

Modifies the following registry keys

[<HKLM>\SYSTEM\CurrentControlSet\Control\Session Manager] 'BootExecute' = 'autocheck autochk * '
[<HKLM>\Software\Classes\GU.Encrypted\Shell\Open\Command] '' = '%ProgramFiles(x86)%\Glary Utilities 5\fileencrypt.exe -d %1'
[<HKLM>\Software\Classes\GU.Splitted\Shell\Open\Command] '' = '%ProgramFiles(x86)%\Glary Utilities 5\filesplitter.exe -j %1'

Creates or modifies the following files

<SYSTEM32>\tasks\glaryinitialize 5

Sets the following service settings

[<HKLM>\System\CurrentControlSet\Services\BootDefragDriver] 'Start' = '00000000'
[<HKLM>\System\CurrentControlSet\Services\BootDefragDriver] 'ImagePath' = 'System32\drivers\BootDefragDriver.sys'
[<HKLM>\System\CurrentControlSet\Services\GUBootStartup] 'Start' = '00000001'
[<HKLM>\System\CurrentControlSet\Services\GUBootStartup] 'ImagePath' = '<DRIVERS>\GUBootStartup.sys'
[<HKLM>\System\CurrentControlSet\Services\GUBootService] 'ImagePath' = '"%CommonProgramFiles(x86)%\Glarysoft\StartupManager\1.0\GUBootService.exe"'
[<HKLM>\System\CurrentControlSet\Services\GUBootService] 'Start' = '00000002'
[<HKLM>\System\CurrentControlSet\Services\GUPMService] 'ImagePath' = '"%ProgramFiles(x86)%\Glary Utilities 5\GUPMService.exe"'

Creates the following services

'BootDefragDriver' <DRIVERS>\BootDefragDriver.sys
'GUBootStartup' <DRIVERS>\GUBootStartup.sys
'GUBootService' "%CommonProgramFiles(x86)%\Glarysoft\StartupManager\1.0\GUBootService.exe"
'GUBootService' %CommonProgramFiles(x86)%\Glarysoft\StartupManager\1.0\GUBootService.exe
'GUPMService' "%ProgramFiles(x86)%\Glary Utilities 5\GUPMService.exe"
'GUPMService' %ProgramFiles(x86)%\Glary Utilities 5\GUPMService.exe

Malicious functions

Executes the following

'%WINDIR%\syswow64\net.exe' stop GUPMService
'%WINDIR%\syswow64\net.exe' stop GUBootService

Modifies file system

Creates the following files

%TEMP%\7zipsfx.000\reg64.reg
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\btn_hover.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\btn_normal.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\checkbox_checked.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\checkbox_uncheck.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\clear_tips.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\diskspace.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\ad_ca_system_normal.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\dockhide_click.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\dockhide_normal.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\dockpopbg.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\dockpopcurpage.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\dockpopcurpagegray.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\dockpopdarkbg.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\dockpopturnleft.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\body_transbg.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\btn_click.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\antimalware.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\ad_ca_system_hover.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\dockpopturnright.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\activenow_normal.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\ad_ca_clean_click.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\ad_ca_clean_hover.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\ad_ca_clean_normal.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\ad_ca_files_click.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\dockpopturnleftgray.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\activenow_click.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\dockhide_hover.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\ad_ca_files_hover.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\ad_ca_optimize_normal.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\ad_ca_privacy_click.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\ad_ca_privacy_hover.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\ad_ca_privacy_normal.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\ad_ca_system_click.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\ad_ca_files_normal.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\ad_ca_optimize_click.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\ad_ca_optimize_hover.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\oc_cancel_normal.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\dockpopturnrightgray.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\main_right_top_mark_hover_bg.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\main_right_top_mark_hover_bg_6.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\main_right_top_mark_sep.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\main_right_top_min_click_bg_6.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\main_right_top_min_hover_bg_6.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\main_setting_6.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\main_skin.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\main_right_top_mark_click_bg_6.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\dockbutton_tip.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\main_right_top_mark_click_bg.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\menu_normal.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\oc_btn_click.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\oc_btn_hover.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\oc_btn_normal.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\oc_btn_scan.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\oc_cancel_click.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\menu_click.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\main_skin_6.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\activenow_hover.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\main_min_6.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\main_close_hover.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\foot_transbg.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\harddisk.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\logo.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\logo_6.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\main_close.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\main_close_6.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\main_restore.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\drivers.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\filemanagement.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\main_close_hover_6.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\main_feedback.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\main_feedback_6.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\main_like.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\main_like_6.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\main_min.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\main_close_click_6.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\main_close_click.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\menu_hover.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\oc_cancel_hover.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\backimages\bg7.jpg
%ProgramFiles(x86)%\glary utilities 5\resources\registrycleaner\tab_btn_normal.png
%ProgramFiles(x86)%\glary utilities 5\resources\registrydefrag\regdefrag.png
%ProgramFiles(x86)%\glary utilities 5\resources\settings\cleanregistryimagelist.bmp
%ProgramFiles(x86)%\glary utilities 5\resources\settings\diskcleanerimagelist.bmp
%ProgramFiles(x86)%\glary utilities 5\resources\settings\trackseraseimagelist.bmp
%ProgramFiles(x86)%\glary utilities 5\resources\startupmanager\search_icon.png
%ProgramFiles(x86)%\glary utilities 5\resources\shortuctfixer\toolbar.png
%ProgramFiles(x86)%\glary utilities 5\resources\startupmanager\close.png
%ProgramFiles(x86)%\glary utilities 5\resources\startupmanager\close1.png
%ProgramFiles(x86)%\glary utilities 5\resources\startupmanager\close2.png
%ProgramFiles(x86)%\glary utilities 5\resources\startupmanager\close_min.png
%ProgramFiles(x86)%\glary utilities 5\resources\startupmanager\close_min1.png
%ProgramFiles(x86)%\glary utilities 5\resources\registrycleaner\oc_btn_hover.png
%ProgramFiles(x86)%\glary utilities 5\resources\registrycleaner\oc_btn_click.png
%ProgramFiles(x86)%\glary utilities 5\resources\spyremover\bkpic.png
%ProgramFiles(x86)%\glary utilities 5\resources\registrycleaner\tab_btn_hover.png
%ProgramFiles(x86)%\glary utilities 5\resources\registrycleaner\tab_btn_click.png
%ProgramFiles(x86)%\glary utilities 5\resources\registrycleaner\main_like.png
%ProgramFiles(x86)%\glary utilities 5\resources\registrycleaner\activenow_normal.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\quick_search_clear_keyword2.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\quick_search_clear_keyword3.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\quick_search_dir_add.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\quick_search_dir_delete.png
%ProgramFiles(x86)%\glary utilities 5\resources\startupmanager\close_min2.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\quick_search_history.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\quick_search_history3.png
%ProgramFiles(x86)%\glary utilities 5\resources\startupmanager\toolbar.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\quick_search_logo.png
%ProgramFiles(x86)%\glary utilities 5\resources\registrycleaner\line.png
%ProgramFiles(x86)%\glary utilities 5\resources\registrycleaner\toolbar default.png
%ProgramFiles(x86)%\glary utilities 5\resources\registrycleaner\activenow_click.png
%ProgramFiles(x86)%\glary utilities 5\resources\registrycleaner\activenow_hover.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\quick_search_history2.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\quick_search.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\mini_close3.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\scrollbar.png
%ProgramFiles(x86)%\glary utilities 5\resources\sysinfo\displaynode.png
%ProgramFiles(x86)%\glary utilities 5\resources\trackseraser\tab_btn_hover.png
%ProgramFiles(x86)%\glary utilities 5\resources\sysinfo\networknode.png
%ProgramFiles(x86)%\glary utilities 5\resources\trackseraser\toolbar.png
%ProgramFiles(x86)%\glary utilities 5\resources\turbomode\background.jpg
%ProgramFiles(x86)%\glary utilities 5\resources\uninstaller\allprograms.png
%ProgramFiles(x86)%\glary utilities 5\resources\uninstaller\large.png
%ProgramFiles(x86)%\glary utilities 5\resources\uninstaller\rarelyused.png
%ProgramFiles(x86)%\glary utilities 5\resources\trackseraser\tab_btn_click.png
%ProgramFiles(x86)%\glary utilities 5\resources\trackseraser\registry.png
%ProgramFiles(x86)%\glary utilities 5\resources\trackseraser\tab_btn_normal.png
%ProgramFiles(x86)%\glary utilities 5\resources\uninstaller\recently.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\backimages\bg2.jpg
%ProgramFiles(x86)%\glary utilities 5\skins\default\backimages\bg3.jpg
%ProgramFiles(x86)%\glary utilities 5\skins\default\backimages\bg4.jpg
%ProgramFiles(x86)%\glary utilities 5\skins\default\backimages\bg5.jpg
%ProgramFiles(x86)%\glary utilities 5\skins\default\backimages\bg6.jpg
%ProgramFiles(x86)%\glary utilities 5\resources\uninstaller\view.png
%ProgramFiles(x86)%\glary utilities 5\resources\uninstaller\windowsupdates.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\backimages\bg1.jpg
%ProgramFiles(x86)%\glary utilities 5\skins\default\backimages\bg9.jpg
%ProgramFiles(x86)%\glary utilities 5\skins\default\backimages\bg8.jpg
%ProgramFiles(x86)%\glary utilities 5\resources\registrycleaner\oc_btn_normal.png
%ProgramFiles(x86)%\glary utilities 5\resources\sysinfo\opersysnode.png
%ProgramFiles(x86)%\glary utilities 5\resources\sysinfo\otherdevicesnode.png
%ProgramFiles(x86)%\glary utilities 5\resources\sysinfo\overviewnode.png
%ProgramFiles(x86)%\glary utilities 5\resources\sysinfo\picture.png
%ProgramFiles(x86)%\glary utilities 5\resources\sysinfo\system information.png
%ProgramFiles(x86)%\glary utilities 5\resources\trackseraser\oc_btn_normal.png
%ProgramFiles(x86)%\glary utilities 5\resources\sysinfo\drivesnode.png
%ProgramFiles(x86)%\glary utilities 5\resources\trackseraser\oc_btn_hover.png
%ProgramFiles(x86)%\glary utilities 5\resources\sysinfo\systemdevicesnode.png
%ProgramFiles(x86)%\glary utilities 5\resources\trackseraser\activenow_click.png
%ProgramFiles(x86)%\glary utilities 5\resources\trackseraser\activenow_hover.png
%ProgramFiles(x86)%\glary utilities 5\resources\trackseraser\activenow_normal.png
%ProgramFiles(x86)%\glary utilities 5\resources\trackseraser\main_like.png
%ProgramFiles(x86)%\glary utilities 5\resources\trackseraser\oc_btn_click.png
%ProgramFiles(x86)%\glary utilities 5\resources\trackseraser\line.png
%ProgramFiles(x86)%\glary utilities 5\resources\trackseraser\openfile.png
%ProgramFiles(x86)%\glary utilities 5\resources\trackseraser\property.png
%ProgramFiles(x86)%\glary utilities 5\languages\spanish (mcm).lng
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\oc_detailbg.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\sysinfohover.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\systemrestorehover.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\trackseraser.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\trackseraserhover.png
%ProgramFiles(x86)%\glary utilities 5\skins\system information\computer.png
%ProgramFiles(x86)%\glary utilities 5\skins\system information\cpu.png
%ProgramFiles(x86)%\glary utilities 5\skins\system information\display.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\spyremoverhover.png
%ProgramFiles(x86)%\glary utilities 5\skins\system information\drives.png
%ProgramFiles(x86)%\glary utilities 5\skins\system information\network.png
%ProgramFiles(x86)%\glary utilities 5\skins\system information\normaldown.png
%ProgramFiles(x86)%\glary utilities 5\skins\system information\normalhot.png
%ProgramFiles(x86)%\glary utilities 5\skins\system information\others.png
%ProgramFiles(x86)%\glary utilities 5\skins\system information\top.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\sysinfo.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\startupmanagerhover.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\systemrestore.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\startupmanager.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\regdefraghover.png
%ProgramFiles(x86)%\glary utilities 5\x64\atl90.dll
%ProgramFiles(x86)%\glary utilities 5\skins\icons\registrycleaner.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\registrycleanerhover.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\registryrestore.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\registryrestorehover.png
%ProgramFiles(x86)%\glary utilities 5\skins\system information\topdown.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\repairsystem.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\registrybackup.png
%ProgramFiles(x86)%\glary utilities 5\skins\system information\memory.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\restorecenter.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\shortcutfixerhover.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\shredder.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\shredderhover.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\spyremover.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\repairsystemhover.png
%ProgramFiles(x86)%\glary utilities 5\skins\system information\windows.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\restorecenterhover.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\shortcutfixer.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\oc_needclearbg.png
%ProgramFiles(x86)%\glary utilities 5\x64\checkdiskprogress.exe
%TEMP%\nsm9c01.tmp\inetc.dll
%APPDATA%\glarysoft\glary utilities 5\appmetris\modulemetris-51900219037000-20220626.ini
<SYSTEM32>\bootdefrag.exe
<DRIVERS>\bootdefragdriver.sys
%WINDIR%\temp\udda4c7.tmp
%CommonProgramFiles(x86)%\glarysoft\startupmanager\config.ini
%TEMP%\nsm537d.tmp\statisticsinfo.exe
%CommonProgramFiles(x86)%\glarysoft\startupmanager\1.0\gubootservice.exe
%ProgramFiles(x86)%\glary utilities 5\x64\guassistcomsvc.exe
%ProgramFiles(x86)%\glary utilities 5\x64\contexthandler.dll
%APPDATA%\microsoft\windows\templates\gutracksini.tmp
%ProgramFiles(x86)%\glary utilities 5\website.url
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\glary utilities 5\glary utilities 5.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\glary utilities 5\website.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\glary utilities 5.lnk
%ProgramFiles(x86)%\glary utilities 5\data\backup.ini
%ProgramFiles(x86)%\glary utilities 5\skins\icons\regdefrag.png
<DRIVERS>\gubootstartup.sys
%ProgramFiles(x86)%\glary utilities 5\skins\icons\registrybackuphover.png
%ProgramFiles(x86)%\glary utilities 5\x64\log.dll
%ProgramFiles(x86)%\glary utilities 5\x64\msvcr90.dll
%ProgramFiles(x86)%\glary utilities 5\x64\mfc90.dll
%ProgramFiles(x86)%\glary utilities 5\x64\mfc90u.dll
%ProgramFiles(x86)%\glary utilities 5\x64\mfcm90.dll
%ProgramFiles(x86)%\glary utilities 5\x64\mfcm90u.dll
%ProgramFiles(x86)%\glary utilities 5\x64\microsoft.vc90.atl.manifest
%ProgramFiles(x86)%\glary utilities 5\contexthandler.dll
%ProgramFiles(x86)%\glary utilities 5\x64\microsoft.vc90.crt.manifest
%TEMP%\nsm9c01.tmp\xtinfoplugin.dll
%ProgramFiles(x86)%\glary utilities 5\x64\memfilesservice.exe
%ProgramFiles(x86)%\glary utilities 5\x64\objectadmin.dll
%ProgramFiles(x86)%\glary utilities 5\x64\scanfile.dll
%ProgramFiles(x86)%\glary utilities 5\x64\win64shelllink.exe
%ProgramFiles(x86)%\glary utilities 5\x64\unistall.exe
%ProgramFiles(x86)%\glary utilities 5\gridmap.ocx
%ProgramFiles(x86)%\glary utilities 5\x64\microsoft.vc90.mfc.manifest
%ProgramFiles(x86)%\glary utilities 5\skins\icons\quicksearchhover.png
%ProgramFiles(x86)%\glary utilities 5\x64\msvcp90.dll
%ProgramFiles(x86)%\glary utilities 5\skins\icons\quicksearch.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\procmgrhover.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\skinsbg.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\systemstatus.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\systemtweaks.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\tab_ad.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\tab_ad_blue.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\skin_pic_normal.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\tab_am.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\mini_close2.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\systemcontrol.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\tab_btn_click_6.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\tab_btn_normal.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\tab_btn_normal_6.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\tab_oc.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\tab_oc_blue.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\tab_btn_click.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\tab_ov.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\tab_btn_hover.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\tab_btn_hover_6.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\tab_ov_blue.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\skin_custom.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\oc_shut.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\oneclick_progress.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\oneclickmaintenance_bg.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\oneclickmaintenance_front.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\oneclickmaintenance_needclear_bg.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\ov_boottimebg.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\skin_col_normal.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\ov_boottimebg_6.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\search_mark.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\pop_btn_hover.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\privacy.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\programs.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\progress.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\progress_bg.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\registry.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\pop_btn_click.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\oneclick_bg.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\pop_btn_normal.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\quick_search_clear_keyword.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\usertype_btn.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\browserassistant.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\driverbackuphover.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\dupefinder.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\dupefinderhover.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\emptyfolderfinder.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\emptyfolderfinderhover.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\diskdefrag.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\diskcleanerhover.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\driverbackup.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\fileencrypt.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\fileundelete.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\fileundeletehover.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\memdefrag.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\memdefraghover.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\procmgr.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\fileencrypthover.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\filesplitter.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\filesplitterhover.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\diskdefraghover.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\toolbar.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\images\skintransparentmark.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\browserassistanthover.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\checkupdate.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\checkupdatehover.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\softwareupdate.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\softwareupdatehover.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\diskcleaner.png
%ProgramFiles(x86)%\glary utilities 5\skins\default\skin.ini
%ProgramFiles(x86)%\glary utilities 5\skins\icons\diskanalysishover.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\uninstaller.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\checkdisk.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\checkdiskhover.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\cmm.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\cmmhover.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\diskanalysis.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\uninstallerhover.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\backuppc.png
%ProgramFiles(x86)%\glary utilities 5\skins\icons\backuppchover.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\mini_close.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\mini_back3.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\mini_back2.png
%ProgramFiles(x86)%\glary utilities 5\data\apps.dat
%ProgramFiles(x86)%\glary utilities 5\data\backup.dat
%ProgramFiles(x86)%\glary utilities 5\data\duplicates.dat
%ProgramFiles(x86)%\glary utilities 5\data\duplicatesfolder.dat
%ProgramFiles(x86)%\glary utilities 5\data\empty.dat
%ProgramFiles(x86)%\glary utilities 5\data\rule.ini
%ProgramFiles(x86)%\glary utilities 5\data\gulr.dat
%ProgramFiles(x86)%\glary utilities 5\data\junk.dat
%ProgramFiles(x86)%\glary utilities 5\data\junkinfo.ini
%ProgramFiles(x86)%\glary utilities 5\data\junkcleaner.dat
%ProgramFiles(x86)%\glary utilities 5\data\process.dat
%ProgramFiles(x86)%\glary utilities 5\data\procsubmit.dat
%ProgramFiles(x86)%\glary utilities 5\data\moduleinfo.ini
%ProgramFiles(x86)%\glary utilities 5\data\boottime.ini
%ProgramFiles(x86)%\glary utilities 5\data\htmldata.dat
%ProgramFiles(x86)%\glary utilities 5\data\uploadstruct.ini
%ProgramFiles(x86)%\glary utilities 5\data\softwareupdate.xml
%ProgramFiles(x86)%\glary utilities 5\data\appsetting.ini
%ProgramFiles(x86)%\glary utilities 5\msvcr90.dll
%ProgramFiles(x86)%\glary utilities 5\zlib1.dll
%ProgramFiles(x86)%\glary utilities 5\uninst.exe
%ProgramFiles(x86)%\glary utilities 5\x64processassist.dll
%ProgramFiles(x86)%\glary utilities 5\appmetrics.dll
%ProgramFiles(x86)%\glary utilities 5\data\registry.dat
%ProgramFiles(x86)%\glary utilities 5\lockdll.dll
%ProgramFiles(x86)%\glary utilities 5\mfc90.dll
%ProgramFiles(x86)%\glary utilities 5\data\settings.dat
%ProgramFiles(x86)%\glary utilities 5\mfc90u.dll
%ProgramFiles(x86)%\glary utilities 5\microsoft.vc90.mfc.manifest
%ProgramFiles(x86)%\glary utilities 5\microsoft.vc90.atl.manifest
%ProgramFiles(x86)%\glary utilities 5\msvcm90.dll
%ProgramFiles(x86)%\glary utilities 5\msvcp90.dll
%ProgramFiles(x86)%\glary utilities 5\atl90.dll
%ProgramFiles(x86)%\glary utilities 5\upgrade.exe
%ProgramFiles(x86)%\glary utilities 5\uninstaller.exe
%ProgramFiles(x86)%\glary utilities 5\microsoft.vc90.crt.manifest
%ProgramFiles(x86)%\glary utilities 5\data\startup.dat
%ProgramFiles(x86)%\glary utilities 5\languages\estonian.lng
%ProgramFiles(x86)%\glary utilities 5\data\xb.dat
%ProgramFiles(x86)%\glary utilities 5\languages\finnish.lng
%ProgramFiles(x86)%\glary utilities 5\languages\finnish_velimatti.lng
%ProgramFiles(x86)%\glary utilities 5\languages\francais (philippe).lng
%ProgramFiles(x86)%\glary utilities 5\languages\francais (reactif).lng
%ProgramFiles(x86)%\glary utilities 5\languages\francais.lng
%ProgramFiles(x86)%\glary utilities 5\languages\espanol_river.lng
%ProgramFiles(x86)%\glary utilities 5\languages\english (proofread by dillon ring).lng
%ProgramFiles(x86)%\glary utilities 5\languages\farsi.lng
%ProgramFiles(x86)%\glary utilities 5\languages\french (ad lib).lng
%ProgramFiles(x86)%\glary utilities 5\languages\french(fr).lng
%ProgramFiles(x86)%\glary utilities 5\languages\french_(rt).lng
%ProgramFiles(x86)%\glary utilities 5\languages\german.lng
%ProgramFiles(x86)%\glary utilities 5\languages\german_erik.lng
%ProgramFiles(x86)%\glary utilities 5\languages\german_sarakael.lng
%ProgramFiles(x86)%\glary utilities 5\languages\french by joe.lng
%ProgramFiles(x86)%\glary utilities 5\languages\french(#dg#).lng
%ProgramFiles(x86)%\glary utilities 5\languages\french(ca).lng
%ProgramFiles(x86)%\glary utilities 5\userpath.dll
%ProgramFiles(x86)%\glary utilities 5\undelete.dll
%ProgramFiles(x86)%\glary utilities 5\trackseraser.dll
%ProgramFiles(x86)%\glary utilities 5\data\xdata.dat
%ProgramFiles(x86)%\glary utilities 5\data\xt.dat
%ProgramFiles(x86)%\glary utilities 5\languages\afrikaans - [m.d.].lng
%ProgramFiles(x86)%\glary utilities 5\languages\albanian - [m.d.].lng
%ProgramFiles(x86)%\glary utilities 5\languages\amharic - [m.d.].lng
%ProgramFiles(x86)%\glary utilities 5\languages\danish_kt.lng
%ProgramFiles(x86)%\glary utilities 5\data\uninstall.dat
%ProgramFiles(x86)%\glary utilities 5\languages\danish.lng
%ProgramFiles(x86)%\glary utilities 5\languages\arabic - [m.d.].lng
%ProgramFiles(x86)%\glary utilities 5\languages\catala_joan.lng
%ProgramFiles(x86)%\glary utilities 5\languages\croatian.lng
%ProgramFiles(x86)%\glary utilities 5\languages\czech.lng
%ProgramFiles(x86)%\glary utilities 5\languages\czech_damned.lng
%ProgramFiles(x86)%\glary utilities 5\languages\danish(pallan).lng
%ProgramFiles(x86)%\glary utilities 5\languages\armenian.lng
%ProgramFiles(x86)%\glary utilities 5\languages\bulgarian.lng
%ProgramFiles(x86)%\glary utilities 5\languages\catala.lng
%ProgramFiles(x86)%\glary utilities 5\trackseraser.exe
%ProgramFiles(x86)%\glary utilities 5\sysinfo.exe
%ProgramFiles(x86)%\glary utilities 5\languages.dll
%ProgramFiles(x86)%\glary utilities 5\crashreport.exe
%ProgramFiles(x86)%\glary utilities 5\dbghelp.dll
%ProgramFiles(x86)%\glary utilities 5\diskanalysis.exe
%ProgramFiles(x86)%\glary utilities 5\diskcleaner.dll
%ProgramFiles(x86)%\glary utilities 5\diskcleaner.exe
%ProgramFiles(x86)%\glary utilities 5\config.dll
%TEMP%\nsm537d.tmp\killprocdll.dll
%ProgramFiles(x86)%\glary utilities 5\crashreport.dll
%ProgramFiles(x86)%\glary utilities 5\diskdefrag.exe
%ProgramFiles(x86)%\glary utilities 5\dupefinder.exe
%ProgramFiles(x86)%\glary utilities 5\emptyfolderfinder.exe
%ProgramFiles(x86)%\glary utilities 5\encryptexe.exe
%ProgramFiles(x86)%\glary utilities 5\fileencrypt.exe
%ProgramFiles(x86)%\glary utilities 5\filescanfilter.dll
%ProgramFiles(x86)%\glary utilities 5\dpinst32.exe
%ProgramFiles(x86)%\glary utilities 5\dpinst64.exe
%ProgramFiles(x86)%\glary utilities 5\driverbackup.exe
%ProgramFiles(x86)%\glary utilities 5\languages\greek.lng
%ProgramFiles(x86)%\glary utilities 5\filesplitter.exe
%ProgramFiles(x86)%\glary utilities 5\checkupdate.dll
%TEMP%\7zipsfx.000\glary.exe
%TEMP%\nsm537d.tmp\system.dll
%TEMP%\nsm537d.tmp\glaryutilities.ini
%TEMP%\nsm537d.tmp\popularize.ico
%TEMP%\nsm537d.tmp\killprocpath.dll
%TEMP%\nsm537d.tmp\machinecode.dll
%ProgramFiles(x86)%\glary utilities 5\checkupdate.exe
%ProgramFiles(x86)%\glary utilities 5\cmm.exe
%TEMP%\nsm537d.tmp\nsexec.dll
%ProgramFiles(x86)%\glary utilities 5\backup.dll
%ProgramFiles(x86)%\glary utilities 5\boottime.dll
%ProgramFiles(x86)%\glary utilities 5\bottdefrag.dll
%ProgramFiles(x86)%\glary utilities 5\checkdisk.dll
%ProgramFiles(x86)%\glary utilities 5\checkdisk.exe
%ProgramFiles(x86)%\glary utilities 5\checkdiskprogress.exe
%TEMP%\7zipsfx.000\reg86.reg
%ProgramFiles(x86)%\glary utilities 5\autoupdate.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\glary utilities 5\uninstall.lnk
%ProgramFiles(x86)%\glary utilities 5\fileundelete.exe
%ProgramFiles(x86)%\glary utilities 5\iehelper.exe
%ProgramFiles(x86)%\glary utilities 5\registrycleaner.exe
%ProgramFiles(x86)%\glary utilities 5\removedriver.dll
%ProgramFiles(x86)%\glary utilities 5\restorecenter.dll
%ProgramFiles(x86)%\glary utilities 5\restorecenter.exe
%ProgramFiles(x86)%\glary utilities 5\scanfile.dll
%ProgramFiles(x86)%\glary utilities 5\settings.dll
%ProgramFiles(x86)%\glary utilities 5\gsd.exe
%ProgramFiles(x86)%\glary utilities 5\registrycleaner.dll
%ProgramFiles(x86)%\glary utilities 5\regdefrag.exe
%ProgramFiles(x86)%\glary utilities 5\shredder.exe
%ProgramFiles(x86)%\glary utilities 5\softwareupdate.exe
%ProgramFiles(x86)%\glary utilities 5\spyremover.dll
%ProgramFiles(x86)%\glary utilities 5\spyremover.exe
%ProgramFiles(x86)%\glary utilities 5\startupmanager.dll
%ProgramFiles(x86)%\glary utilities 5\startupmanager.exe
%ProgramFiles(x86)%\glary utilities 5\settings.ini
%ProgramFiles(x86)%\glary utilities 5\shortcutfixer.exe
%ProgramFiles(x86)%\glary utilities 5\gupmservice.exe
%ProgramFiles(x86)%\glary utilities 5\shortcutfixer.dll
%ProgramFiles(x86)%\glary utilities 5\config_portable.dll
%ProgramFiles(x86)%\glary utilities 5\infocollect.dll
%ProgramFiles(x86)%\glary utilities 5\infocollectfile.dll
%ProgramFiles(x86)%\glary utilities 5\initialize.exe
%ProgramFiles(x86)%\glary utilities 5\integrator.exe
%ProgramFiles(x86)%\glary utilities 5\integrator_portable.exe
%ProgramFiles(x86)%\glary utilities 5\joinexe.exe
%ProgramFiles(x86)%\glary utilities 5\portablemaker.exe
%ProgramFiles(x86)%\glary utilities 5\quicksearch.exe
%ProgramFiles(x86)%\glary utilities 5\procmgr.exe
%ProgramFiles(x86)%\glary utilities 5\machinecode.dll
%ProgramFiles(x86)%\glary utilities 5\memdefrag.exe
%ProgramFiles(x86)%\glary utilities 5\memfiles.dll
%ProgramFiles(x86)%\glary utilities 5\memfilesservice.exe
%ProgramFiles(x86)%\glary utilities 5\objectadmin.dll
%ProgramFiles(x86)%\glary utilities 5\oneclickmaintenance.exe
%ProgramFiles(x86)%\glary utilities 5\jumplist.dll
%ProgramFiles(x86)%\glary utilities 5\log.dll
%WINDIR%\temp\uddc37e.tmp
%ProgramFiles(x86)%\glary utilities 5\languages\hungarian.lng
%ProgramFiles(x86)%\glary utilities 5\languages\korean_kornet21c.lng
%ProgramFiles(x86)%\glary utilities 5\resources\dupefinder\nopreview.png
%ProgramFiles(x86)%\glary utilities 5\resources\dupefinder\tool.png
%ProgramFiles(x86)%\glary utilities 5\resources\emptyfolderfinder\toolbar.png
%ProgramFiles(x86)%\glary utilities 5\resources\portablemaker\background.png
%ProgramFiles(x86)%\glary utilities 5\resources\portablemaker\btn_hover.png
%ProgramFiles(x86)%\glary utilities 5\resources\diskcleaner\tab_btn_hover.png
%ProgramFiles(x86)%\glary utilities 5\resources\portablemaker\btn_normal.png
%ProgramFiles(x86)%\glary utilities 5\resources\portablemaker\progress_bg.png
%ProgramFiles(x86)%\glary utilities 5\resources\processmanager\rclickmenu.png
%ProgramFiles(x86)%\glary utilities 5\resources\processmanager\toolbar.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\arrow.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\button_expand.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\button_expand2.png
%ProgramFiles(x86)%\glary utilities 5\resources\diskcleaner\toolbar.png
%ProgramFiles(x86)%\glary utilities 5\resources\portablemaker\progress.png
%ProgramFiles(x86)%\glary utilities 5\resources\diskdefrag\toolbar.png
%ProgramFiles(x86)%\glary utilities 5\resources\diskdefrag\ringtone.mp3
%ProgramFiles(x86)%\glary utilities 5\resources\diskcleaner\tab_btn_normal.png
%ProgramFiles(x86)%\glary utilities 5\resources\diskcleaner\tab_btn_click.png
%ProgramFiles(x86)%\glary utilities 5\resources\checkdisk\button_expand.png
%ProgramFiles(x86)%\glary utilities 5\resources\diskanalysis\file_result.png
%ProgramFiles(x86)%\glary utilities 5\resources\diskanalysis\toolbar.png
%ProgramFiles(x86)%\glary utilities 5\resources\diskcleaner\line.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\button_expand3.png
%ProgramFiles(x86)%\glary utilities 5\native\wxp_x86\bootdefrag.exe
%ProgramFiles(x86)%\glary utilities 5\resources\diskcleaner\openfile.png
%ProgramFiles(x86)%\glary utilities 5\data\serialnumberexclude.ini
%ProgramFiles(x86)%\glary utilities 5\resources\diskcleaner\activenow_hover.png
%ProgramFiles(x86)%\glary utilities 5\resources\diskcleaner\main_like.png
%ProgramFiles(x86)%\glary utilities 5\resources\diskcleaner\oc_btn_click.png
%ProgramFiles(x86)%\glary utilities 5\resources\diskcleaner\oc_btn_hover.png
%ProgramFiles(x86)%\glary utilities 5\resources\diskcleaner\oc_btn_normal.png
%ProgramFiles(x86)%\glary utilities 5\resources\diskcleaner\property.png
%ProgramFiles(x86)%\glary utilities 5\resources\diskcleaner\activenow_click.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\button_left.png
%ProgramFiles(x86)%\glary utilities 5\resources\diskcleaner\activenow_normal.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\button_left2.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\main_menu3.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\button_right2.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\main_min2.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\main_min3.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\main_restore.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\main_restore2.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\main_restore3.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\main_menu2.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\main_menu.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\main_min.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\menu.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\min_menu3.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\min_windows.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\min_windows2.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\min_windows3.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\mini_back.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\menu_check.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\min_menu.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\min_menu2.png
%ProgramFiles(x86)%\glary utilities 5\native\wxp_x86\regbootdefrag.exe
%ProgramFiles(x86)%\glary utilities 5\native\wxp_x64\regbootdefrag.exe
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\button_left3.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\button_right3.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\button_type_edit.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\button_unexpand.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\button_unexpand2.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\button_unexpand3.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\main_max3.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\button_right.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\main_max2.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\delete_all.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\logo_s.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\main_close.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\main_close2.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\main_close3.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\main_max.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\dropdown.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\dropup.png
%ProgramFiles(x86)%\glary utilities 5\resources\quicksearch\images\logo.png
%ProgramFiles(x86)%\glary utilities 5\native\wxp_x86\bootdefragdriver.sys
%ProgramFiles(x86)%\glary utilities 5\native\wxp_x64\bootdefragdriver.sys
%ProgramFiles(x86)%\glary utilities 5\native\wxp_x64\bootdefrag.exe
%ProgramFiles(x86)%\glary utilities 5\languages\dutch_hmg.lng
%ProgramFiles(x86)%\glary utilities 5\languages\english.lng
%ProgramFiles(x86)%\glary utilities 5\languages\french.lng
%ProgramFiles(x86)%\glary utilities 5\languages\french2.lng
%ProgramFiles(x86)%\glary utilities 5\languages\bosnian.lng
%ProgramFiles(x86)%\glary utilities 5\languages\romanian(zocoza).lng
%ProgramFiles(x86)%\glary utilities 5\languages\french_morvant.lng
%ProgramFiles(x86)%\glary utilities 5\languages\dutch.lng
%ProgramFiles(x86)%\glary utilities 5\languages\hebrew.lng
%ProgramFiles(x86)%\glary utilities 5\languages\italian2.lng
%ProgramFiles(x86)%\glary utilities 5\languages\italian3.lng
%ProgramFiles(x86)%\glary utilities 5\languages\japanese.lng
%ProgramFiles(x86)%\glary utilities 5\languages\japanese_lb.lng
%ProgramFiles(x86)%\glary utilities 5\languages\french_andex.lng
%ProgramFiles(x86)%\glary utilities 5\languages\french_largo.lng
%ProgramFiles(x86)%\glary utilities 5\languages\hungarian_l2belteki.lng
%ProgramFiles(x86)%\glary utilities 5\languages\italian.lng
%ProgramFiles(x86)%\glary utilities 5\languages\kurdish.lng
%ProgramFiles(x86)%\glary utilities 5\languages\chineset.lng
%ProgramFiles(x86)%\glary utilities 5\languages\arabic_saif.lng
%ProgramFiles(x86)%\glary utilities 5\languages\magyar.lng
%ProgramFiles(x86)%\glary utilities 5\languages\magyar2.lng
%ProgramFiles(x86)%\glary utilities 5\languages\ptpt.lng
%ProgramFiles(x86)%\glary utilities 5\languages\portuguese_brazilian.lng
%ProgramFiles(x86)%\glary utilities 5\languages\romana.lng
%ProgramFiles(x86)%\glary utilities 5\languages\arabic.lng
%ProgramFiles(x86)%\glary utilities 5\languages\romania.lng
%ProgramFiles(x86)%\glary utilities 5\languages\korean.lng
%ProgramFiles(x86)%\glary utilities 5\languages\serbian.lng
%ProgramFiles(x86)%\glary utilities 5\languages\slovak_momirek.lng
%ProgramFiles(x86)%\glary utilities 5\languages\swedish(ulfclaesson).lng
%ProgramFiles(x86)%\glary utilities 5\languages\swedish.lng
%ProgramFiles(x86)%\glary utilities 5\languages\turkish_anteplim.lng
%ProgramFiles(x86)%\glary utilities 5\languages\tВЁВ№rkce t9.lng
%ProgramFiles(x86)%\glary utilities 5\languages\italian_millo.lng
%ProgramFiles(x86)%\glary utilities 5\languages\zoulou.lng
%ProgramFiles(x86)%\glary utilities 5\languages\slovak_bugtom.lng
%ProgramFiles(x86)%\glary utilities 5\languages\igbo.lng
%ProgramFiles(x86)%\glary utilities 5\languages\lithuanian.lng
%ProgramFiles(x86)%\glary utilities 5\languages\norwegian_kurt.lng
%ProgramFiles(x86)%\glary utilities 5\native\win7_x64\bootdefragdriver.sys
%ProgramFiles(x86)%\glary utilities 5\native\win7_x86\bootdefrag.exe
%ProgramFiles(x86)%\glary utilities 5\native\win7_x86\bootdefragdriver.sys
%ProgramFiles(x86)%\glary utilities 5\native\win10_x64\bootdefrag.exe
%ProgramFiles(x86)%\glary utilities 5\native\win10_x64\bootdefragdriver.sys
%ProgramFiles(x86)%\glary utilities 5\languages\latvian.lng
%ProgramFiles(x86)%\glary utilities 5\languages\vietnamese.lng
%ProgramFiles(x86)%\glary utilities 5\native\win7_x64\bootdefrag.exe
%ProgramFiles(x86)%\glary utilities 5\native\wlh_x64\bootdefrag.exe
%ProgramFiles(x86)%\glary utilities 5\native\wlh_x86\bootdefrag.exe
%ProgramFiles(x86)%\glary utilities 5\native\wlh_x86\bootdefragdriver.sys
%ProgramFiles(x86)%\glary utilities 5\native\wnet_x64\bootdefrag.exe
%ProgramFiles(x86)%\glary utilities 5\native\wnet_x64\bootdefragdriver.sys
%ProgramFiles(x86)%\glary utilities 5\native\wnet_x86\bootdefrag.exe
%ProgramFiles(x86)%\glary utilities 5\native\win10_x86\bootdefrag.exe
%ProgramFiles(x86)%\glary utilities 5\native\wnet_x86\bootdefragdriver.sys
%ProgramFiles(x86)%\glary utilities 5\native\wlh_x64\bootdefragdriver.sys
%ProgramFiles(x86)%\glary utilities 5\languages\norwegian.lng
%ProgramFiles(x86)%\glary utilities 5\languages\ВјГІГ¬ГҐГ¶Г°Г®Г¤.lng
%ProgramFiles(x86)%\glary utilities 5\languages\ukrainian2.lng
%ProgramFiles(x86)%\glary utilities 5\languages\polish.lng
%ProgramFiles(x86)%\glary utilities 5\languages\polish_marta.lng
%ProgramFiles(x86)%\glary utilities 5\languages\russian.lng
%ProgramFiles(x86)%\glary utilities 5\languages\slovenian.lng
%ProgramFiles(x86)%\glary utilities 5\languages\slovenian_jrudec.lng
%ProgramFiles(x86)%\glary utilities 5\languages\turkish_faradelisi.lng
%ProgramFiles(x86)%\glary utilities 5\languages\ukrainian.lng
%ProgramFiles(x86)%\glary utilities 5\native\win10_x86\bootdefragdriver.sys
%ProgramFiles(x86)%\glary utilities 5\languages\spanish (antonio perez).lng
%ProgramFiles(x86)%\glary utilities 5\languages\spanish.lng
%ProgramFiles(x86)%\glary utilities 5\languages\spanish_cannie new.lng
%ProgramFiles(x86)%\glary utilities 5\languages\spanish_emiliograo.lng
%ProgramFiles(x86)%\glary utilities 5\languages\spanish_ignacio.lng
%ProgramFiles(x86)%\glary utilities 5\languages\turkish.lng
%ProgramFiles(x86)%\glary utilities 5\languages\spain.lng
%ProgramFiles(x86)%\glary utilities 5\languages\chinese.lng
%ProgramFiles(x86)%\glary utilities 5\languages\spanish (smrolando).lng
%HOMEPATH%\desktop\glary utilities 5.lnk

Deletes the following files

%ProgramFiles(x86)%\glary utilities 5\languages\japanese_lb.lng
%TEMP%\7zipsfx.000\glary.exe
%TEMP%\nsm537d.tmp\system.dll
%TEMP%\nsm537d.tmp\statisticsinfo.exe
%TEMP%\nsm537d.tmp\popularize.ico
%TEMP%\nsm537d.tmp\nsexec.dll
%TEMP%\nsm537d.tmp\machinecode.dll
%TEMP%\nsm537d.tmp\killprocpath.dll
%TEMP%\nsm537d.tmp\killprocdll.dll
%TEMP%\nsm537d.tmp\glaryutilities.ini
%APPDATA%\microsoft\windows\templates\gutracksini.tmp
%WINDIR%\temp\uddc37e.tmp
%ProgramFiles(x86)%\glary utilities 5\data\backup.ini
<DRIVERS>\bootdefragdriver.sys
<SYSTEM32>\bootdefrag.exe
%WINDIR%\temp\udda4c7.tmp
%TEMP%\nsm9c01.tmp\xtinfoplugin.dll
%TEMP%\nsm9c01.tmp\inetc.dll
%TEMP%\7zipsfx.000\reg64.reg
%TEMP%\7zipsfx.000\reg86.reg

Substitutes the following files

%ProgramFiles(x86)%\glary utilities 5\data\backup.ini

Network activity

Connects to

'me#####.glarysoft.com':80

TCP

HTTP POST requests

http://me#####.glarysoft.com/install.php

UDP

DNS ASK me#####.glarysoft.com

Miscellaneous

Searches for the following windows

ClassName: 'RegEdit_RegEdit' WindowName: ''

Creates and executes the following

'%TEMP%\7zipsfx.000\glary.exe' /S
'%ProgramFiles(x86)%\glary utilities 5\x64\guassistcomsvc.exe' /RegServer
'%TEMP%\nsm537d.tmp\statisticsinfo.exe' /install /GU5
'%ProgramFiles(x86)%\glary utilities 5\diskdefrag.exe' -NewInstallNative
'%ProgramFiles(x86)%\glary utilities 5\diskdefrag.exe' -InstallNative
'%ProgramFiles(x86)%\glary utilities 5\startupmanager.exe' -install
'%CommonProgramFiles(x86)%\glarysoft\startupmanager\1.0\gubootservice.exe' /Service
'%ProgramFiles(x86)%\glary utilities 5\gupmservice.exe' /Service
'%ProgramFiles(x86)%\glary utilities 5\procmgr.exe' -guupdate
'%ProgramFiles(x86)%\glary utilities 5\initialize.exe' /setupschedule /installinit
'%TEMP%\7zipsfx.000\glary.exe' /S' (with hidden window)
'%WINDIR%\syswow64\net.exe' stop GUPMService' (with hidden window)
'%WINDIR%\syswow64\net.exe' stop GUBootService' (with hidden window)
'%CommonProgramFiles(x86)%\glarysoft\startupmanager\1.0\gubootservice.exe' /Service' (with hidden window)
'%WINDIR%\syswow64\schtasks.exe' /Delete /TN GU5SkipUAC /F' (with hidden window)
'%WINDIR%\regedit.exe' /S reg64.reg' (with hidden window)

Executes the following

'%WINDIR%\syswow64\net1.exe' stop GUPMService
'%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Glary Utilities 5\GridMap.ocx"
'%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Glary Utilities 5\x64\ContextHandler.dll"
'<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles(x86)%\Glary Utilities 5\x64\ContextHandler.dll"
'%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Glary Utilities 5\ContextHandler.dll"
'%WINDIR%\syswow64\net1.exe' stop GUBootService
'%WINDIR%\syswow64\schtasks.exe' /Delete /TN GU5SkipUAC /F
'%WINDIR%\regedit.exe' /S reg64.reg

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement

Free trial