Trojan.DownLoader25.57154

Technical Information

To ensure autorun and distribution:

Modifies the following registry keys:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'GUDelayStartup' = '"%ProgramFiles%\Glary Utilities 5\StartupManager.exe" -delayrun'
[<HKLM>\SYSTEM\ControlSet001\Control\Session Manager] 'BootExecute' = 'autocheck autochk * '

Creates the following services:

[<HKLM>\SYSTEM\ControlSet001\Services\GUBootStartup] 'ImagePath' = '<DRIVERS>\GUBootStartup.sys'
[<HKLM>\SYSTEM\ControlSet001\Services\GUBootStartup] 'Start' = '00000001'

Malicious functions:

Creates and executes the following:

'%ProgramFiles%\Glary Utilities 5\StartupManager.exe' -install
'%ProgramFiles%\Glary Utilities 5\Initialize.exe' /setupschedule /installinit
'%ProgramFiles%\Glary Utilities 5\DiskDefrag.exe' -InstallNative
'%TEMP%\7ZipSfx.000\Glaryinstall\setup.exe' /S
'%TEMP%\nss2.tmp\sendinfo.exe' /install /GU5

Executes the following:

'<SYSTEM32>\taskkill.exe' /IM Integrator.exe /F

Modifies file system:

Creates the following files:

%ProgramFiles%\Glary Utilities 5\skins\default\images\checkbox_uncheck.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\checkbox_checked.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\diskspace.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\clear_tips.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\btn_click.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\body_transbg.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\btn_normal.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\btn_hover.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\dockhide_click.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\dockpopdarkbg.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\dockpopcurpagegray.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\dockpopturnleftgray.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\dockpopturnleft.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\dockhide_normal.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\dockhide_hover.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\dockpopcurpage.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\dockpopbg.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\ad_ca_files_hover.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\ad_ca_files_click.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\ad_ca_optimize_click.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\ad_ca_files_normal.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\ad_ca_clean_click.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\activenow_normal.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\ad_ca_clean_normal.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\ad_ca_clean_hover.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\ad_ca_optimize_hover.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\ad_ca_system_hover.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\ad_ca_system_click.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\antimalware.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\ad_ca_system_normal.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\ad_ca_privacy_click.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\ad_ca_optimize_normal.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\ad_ca_privacy_normal.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\ad_ca_privacy_hover.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\main_right_top_mark_click_bg_6.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\main_right_top_mark_click_bg.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\main_right_top_mark_hover_bg_6.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\main_right_top_mark_hover_bg.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\main_min.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\main_like_6.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\main_restore.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\main_min_6.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\main_right_top_mark_sep.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\menu_click.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\main_skin_6.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\menu_normal.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\menu_hover.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\main_right_top_min_hover_bg_6.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\main_right_top_min_click_bg_6.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\main_skin.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\main_setting_6.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\harddisk.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\foot_transbg.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\logo_6.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\logo.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\dockpopturnrightgray.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\dockpopturnright.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\filemanagement.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\drivers.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\main_close.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\main_feedback.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\main_close_hover_6.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\main_like.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\main_feedback_6.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\main_close_click.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\main_close_6.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\main_close_hover.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\main_close_click_6.png
%ProgramFiles%\Glary Utilities 5\Resources\ShortuctFixer\toolbar.png
%ProgramFiles%\Glary Utilities 5\Resources\settings\TracksEraseImageList.bmp
%ProgramFiles%\Glary Utilities 5\Resources\StartupManager\toolbar.png
%ProgramFiles%\Glary Utilities 5\Resources\SpyRemover\BKPic.png
%ProgramFiles%\Glary Utilities 5\Resources\RegistryDefrag\regdefrag.png
%ProgramFiles%\Glary Utilities 5\Resources\RegistryCleaner\tab_btn_normal.png
%ProgramFiles%\Glary Utilities 5\Resources\settings\DiskCleanerImageList.bmp
%ProgramFiles%\Glary Utilities 5\Resources\settings\CleanRegistryImageList.bmp
%ProgramFiles%\Glary Utilities 5\Resources\SysInfo\DisplayNode.png
%ProgramFiles%\Glary Utilities 5\Resources\SysInfo\Picture.png
%ProgramFiles%\Glary Utilities 5\Resources\SysInfo\OverViewNode.png
%ProgramFiles%\Glary Utilities 5\Resources\SysInfo\SystemDevicesNode.png
%ProgramFiles%\Glary Utilities 5\Resources\SysInfo\System Information.png
%ProgramFiles%\Glary Utilities 5\Resources\SysInfo\NetworkNode.png
%ProgramFiles%\Glary Utilities 5\Resources\SysInfo\DrivesNode.png
%ProgramFiles%\Glary Utilities 5\Resources\SysInfo\OtherDevicesNode.png
%ProgramFiles%\Glary Utilities 5\Resources\SysInfo\OperSysNode.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\scrollbar.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\quick_search_logo.png
%ProgramFiles%\Glary Utilities 5\Resources\RegistryCleaner\Toolbar Default.png
%ProgramFiles%\Glary Utilities 5\Resources\RegistryCleaner\Line.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\quick_search_clear_keyword3.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\quick_search_clear_keyword2.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\quick_search_dir_delete.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\quick_search_dir_add.png
%ProgramFiles%\Glary Utilities 5\Resources\RegistryCleaner\activenow_click.png
%ProgramFiles%\Glary Utilities 5\Resources\RegistryCleaner\oc_btn_normal.png
%ProgramFiles%\Glary Utilities 5\Resources\RegistryCleaner\oc_btn_hover.png
%ProgramFiles%\Glary Utilities 5\Resources\RegistryCleaner\tab_btn_hover.png
%ProgramFiles%\Glary Utilities 5\Resources\RegistryCleaner\tab_btn_click.png
%ProgramFiles%\Glary Utilities 5\Resources\RegistryCleaner\activenow_normal.png
%ProgramFiles%\Glary Utilities 5\Resources\RegistryCleaner\activenow_hover.png
%ProgramFiles%\Glary Utilities 5\Resources\RegistryCleaner\oc_btn_click.png
%ProgramFiles%\Glary Utilities 5\Resources\RegistryCleaner\main_like.png
%ProgramFiles%\Glary Utilities 5\skins\default\backimages\bg1.jpg
%ProgramFiles%\Glary Utilities 5\Resources\Uninstaller\WindowsUpdates.png
%ProgramFiles%\Glary Utilities 5\skins\default\backimages\bg3.jpg
%ProgramFiles%\Glary Utilities 5\skins\default\backimages\bg2.jpg
%ProgramFiles%\Glary Utilities 5\Resources\Uninstaller\RarelyUsed.png
%ProgramFiles%\Glary Utilities 5\Resources\Uninstaller\Large.png
%ProgramFiles%\Glary Utilities 5\Resources\Uninstaller\View.png
%ProgramFiles%\Glary Utilities 5\Resources\Uninstaller\Recently.png
%ProgramFiles%\Glary Utilities 5\skins\default\backimages\bg4.jpg
%ProgramFiles%\Glary Utilities 5\skins\default\images\DockButton_Tip.png
%ProgramFiles%\Glary Utilities 5\skins\default\backimages\bg9.jpg
%ProgramFiles%\Glary Utilities 5\skins\default\images\activenow_hover.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\activenow_click.png
%ProgramFiles%\Glary Utilities 5\skins\default\backimages\bg6.jpg
%ProgramFiles%\Glary Utilities 5\skins\default\backimages\bg5.jpg
%ProgramFiles%\Glary Utilities 5\skins\default\backimages\bg8.jpg
%ProgramFiles%\Glary Utilities 5\skins\default\backimages\bg7.jpg
%ProgramFiles%\Glary Utilities 5\Resources\TracksEraser\activenow_normal.png
%ProgramFiles%\Glary Utilities 5\Resources\TracksEraser\activenow_hover.png
%ProgramFiles%\Glary Utilities 5\Resources\TracksEraser\oc_btn_click.png
%ProgramFiles%\Glary Utilities 5\Resources\TracksEraser\main_like.png
%ProgramFiles%\Glary Utilities 5\Resources\TracksEraser\OpenFile.png
%ProgramFiles%\Glary Utilities 5\Resources\TracksEraser\Line.png
%ProgramFiles%\Glary Utilities 5\Resources\TracksEraser\activenow_click.png
%ProgramFiles%\Glary Utilities 5\Resources\TracksEraser\Property.png
%ProgramFiles%\Glary Utilities 5\Resources\TracksEraser\oc_btn_hover.png
%ProgramFiles%\Glary Utilities 5\Resources\TracksEraser\toolbar.png
%ProgramFiles%\Glary Utilities 5\Resources\TracksEraser\tab_btn_normal.png
%ProgramFiles%\Glary Utilities 5\Resources\Uninstaller\AllPrograms.png
%ProgramFiles%\Glary Utilities 5\Resources\TurboMode\BackGround.jpg
%ProgramFiles%\Glary Utilities 5\Resources\TracksEraser\registry.png
%ProgramFiles%\Glary Utilities 5\Resources\TracksEraser\oc_btn_normal.png
%ProgramFiles%\Glary Utilities 5\Resources\TracksEraser\tab_btn_hover.png
%ProgramFiles%\Glary Utilities 5\Resources\TracksEraser\tab_btn_click.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\oc_btn_click.png
%ProgramFiles%\Glary Utilities 5\skins\icons\registrybackuphover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\registrybackup.png
%ProgramFiles%\Glary Utilities 5\skins\icons\registrycleanerhover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\registrycleaner.png
%ProgramFiles%\Glary Utilities 5\skins\icons\quicksearchhover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\quicksearch.png
%ProgramFiles%\Glary Utilities 5\skins\icons\regdefraghover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\regdefrag.png
%ProgramFiles%\Glary Utilities 5\skins\icons\registryrestore.png
%ProgramFiles%\Glary Utilities 5\skins\icons\shortcutfixer.png
%ProgramFiles%\Glary Utilities 5\skins\icons\restorecenterhover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\shredder.png
%ProgramFiles%\Glary Utilities 5\skins\icons\shortcutfixerhover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\repairsystem.png
%ProgramFiles%\Glary Utilities 5\skins\icons\registryrestorehover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\restorecenter.png
%ProgramFiles%\Glary Utilities 5\skins\icons\repairsystemhover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\emptyfolderfinder.png
%ProgramFiles%\Glary Utilities 5\skins\icons\dupefinderhover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\fileencrypt.png
%ProgramFiles%\Glary Utilities 5\skins\icons\emptyfolderfinderhover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\driverbackup.png
%ProgramFiles%\Glary Utilities 5\skins\icons\diskdefraghover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\dupefinder.png
%ProgramFiles%\Glary Utilities 5\skins\icons\driverbackuphover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\fileencrypthover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\memdefraghover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\memdefrag.png
%ProgramFiles%\Glary Utilities 5\skins\icons\procmgrhover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\procmgr.png
%ProgramFiles%\Glary Utilities 5\skins\icons\filesplitterhover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\filesplitter.png
%ProgramFiles%\Glary Utilities 5\skins\icons\fileundeletehover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\fileundelete.png
%ProgramFiles%\Glary Utilities 5\skins\system information\windows.png
%ProgramFiles%\Glary Utilities 5\skins\system information\topdown.png
%ProgramFiles%\Glary Utilities 5\ContextHandler.dll
%ProgramFiles%\Glary Utilities 5\GridMap.ocx
%ProgramFiles%\Glary Utilities 5\skins\system information\normalhot.png
%ProgramFiles%\Glary Utilities 5\skins\system information\normaldown.png
%ProgramFiles%\Glary Utilities 5\skins\system information\top.png
%ProgramFiles%\Glary Utilities 5\skins\system information\others.png
%TEMP%\nss2.tmp\sendinfo.exe
%ProgramFiles%\Glary Utilities 5\data\backup.ini
%TEMP%\nse4.tmp\post_reply.htm
%HOMEPATH%\Templates\GUTracksIni.tmp
<DRIVERS>\GUBootStartup.sys
%TEMP%\nse4.tmp\inetc.dll
%TEMP%\nse4.tmp\xtInfoPlugin.dll
%HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\install[1].htm
%APPDATA%\GlarySoft\Glary Utilities 5\AppMetris\ModuleMetris-5880109037000-20171120.ini
%ProgramFiles%\Glary Utilities 5\skins\icons\sysinfo.png
%ProgramFiles%\Glary Utilities 5\skins\icons\startupmanagerhover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\systemrestore.png
%ProgramFiles%\Glary Utilities 5\skins\icons\sysinfohover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\spyremover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\shredderhover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\startupmanager.png
%ProgramFiles%\Glary Utilities 5\skins\icons\spyremoverhover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\systemrestorehover.png
%ProgramFiles%\Glary Utilities 5\skins\system information\drives.png
%ProgramFiles%\Glary Utilities 5\skins\system information\display.png
%ProgramFiles%\Glary Utilities 5\skins\system information\network.png
%ProgramFiles%\Glary Utilities 5\skins\system information\memory.png
%ProgramFiles%\Glary Utilities 5\skins\icons\trackseraserhover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\trackseraser.png
%ProgramFiles%\Glary Utilities 5\skins\system information\cpu.png
%ProgramFiles%\Glary Utilities 5\skins\system information\computer.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\progress_bg.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\progress.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\search_mark.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\registry.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\pop_btn_normal.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\pop_btn_hover.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\programs.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\privacy.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\skin_col_normal.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\systemstatus.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\systemcontrol.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\tab_ad.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\systemtweaks.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\skin_pic_normal.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\skin_custom.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\skintransparentmark.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\skinsbg.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\oc_cancel_normal.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\oc_cancel_hover.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\oc_needclearbg.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\oc_detailbg.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\oc_btn_normal.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\oc_btn_hover.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\oc_cancel_click.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\oc_btn_scan.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\oc_shut.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\ov_boottimebg.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\oneclickmaintenance_needclear_bg.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\pop_btn_click.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\ov_boottimebg_6.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\oneclick_progress.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\oneclick_bg.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\oneclickmaintenance_front.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\oneclickmaintenance_bg.png
%ProgramFiles%\Glary Utilities 5\skins\icons\Uninstallerhover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\Uninstaller.png
%ProgramFiles%\Glary Utilities 5\skins\icons\backuppchover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\backuppc.png
%ProgramFiles%\Glary Utilities 5\skins\icons\CheckUpdatehover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\CheckUpdate.png
%ProgramFiles%\Glary Utilities 5\skins\icons\SoftwareUpdatehover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\SoftwareUpdate.png
%ProgramFiles%\Glary Utilities 5\skins\icons\checkdisk.png
%ProgramFiles%\Glary Utilities 5\skins\icons\diskcleaner.png
%ProgramFiles%\Glary Utilities 5\skins\icons\diskanalysishover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\diskdefrag.png
%ProgramFiles%\Glary Utilities 5\skins\icons\diskcleanerhover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\cmm.png
%ProgramFiles%\Glary Utilities 5\skins\icons\checkdiskhover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\diskanalysis.png
%ProgramFiles%\Glary Utilities 5\skins\icons\cmmhover.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\tab_btn_hover_6.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\tab_btn_hover.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\tab_btn_normal_6.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\tab_btn_normal.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\tab_am.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\tab_ad_blue.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\tab_btn_click_6.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\tab_btn_click.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\tab_oc.png
%ProgramFiles%\Glary Utilities 5\skins\default\skin.ini
%ProgramFiles%\Glary Utilities 5\skins\default\images\usertype_btn.png
%ProgramFiles%\Glary Utilities 5\skins\icons\BrowserAssistanthover.png
%ProgramFiles%\Glary Utilities 5\skins\icons\BrowserAssistant.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\tab_ov.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\tab_oc_blue.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\toolbar.png
%ProgramFiles%\Glary Utilities 5\skins\default\images\tab_ov_blue.png
%ProgramFiles%\Glary Utilities 5\msvcr90.dll
%ProgramFiles%\Glary Utilities 5\msvcp90.dll
%ProgramFiles%\Glary Utilities 5\data\ModuleInfo.ini
%ProgramFiles%\Glary Utilities 5\data\BootTime.ini
%ProgramFiles%\Glary Utilities 5\Microsoft.VC90.CRT.manifest
%ProgramFiles%\Glary Utilities 5\mfc90u.dll
%ProgramFiles%\Glary Utilities 5\msvcm90.dll
%ProgramFiles%\Glary Utilities 5\Microsoft.VC90.MFC.manifest
%ProgramFiles%\Glary Utilities 5\data\Softwareupdate.xml
%ProgramFiles%\Glary Utilities 5\data\empty.dat
%ProgramFiles%\Glary Utilities 5\data\duplicatesfolder.dat
%ProgramFiles%\Glary Utilities 5\data\junk.dat
%ProgramFiles%\Glary Utilities 5\data\htmldata.dat
%ProgramFiles%\Glary Utilities 5\data\apps.dat
%ProgramFiles%\Glary Utilities 5\data\UpLoadStruct.ini
%ProgramFiles%\Glary Utilities 5\data\duplicates.dat
%ProgramFiles%\Glary Utilities 5\data\backup.dat
%ProgramFiles%\Glary Utilities 5\SpyRemover.exe
%ProgramFiles%\Glary Utilities 5\SpyRemover.dll
%ProgramFiles%\Glary Utilities 5\StartupManager.exe
%ProgramFiles%\Glary Utilities 5\StartupManager.dll
%ProgramFiles%\Glary Utilities 5\ShortcutFixer.exe
%ProgramFiles%\Glary Utilities 5\ShortcutFixer.dll
%ProgramFiles%\Glary Utilities 5\SoftwareUpdate.exe
%ProgramFiles%\Glary Utilities 5\shredder.exe
%ProgramFiles%\Glary Utilities 5\sysinfo.exe
%ProgramFiles%\Glary Utilities 5\zlib1.dll
%ProgramFiles%\Glary Utilities 5\upgrade.exe
%ProgramFiles%\Glary Utilities 5\mfc90.dll
%ProgramFiles%\Glary Utilities 5\uninst.exe
%ProgramFiles%\Glary Utilities 5\TracksEraser.exe
%ProgramFiles%\Glary Utilities 5\TracksEraser.dll
%ProgramFiles%\Glary Utilities 5\Uninstaller.exe
%ProgramFiles%\Glary Utilities 5\Undelete.dll
%ProgramFiles%\Glary Utilities 5\languages\Francais.lng
%ProgramFiles%\Glary Utilities 5\languages\Finnish.lng
%ProgramFiles%\Glary Utilities 5\languages\French(#DG#).lng
%ProgramFiles%\Glary Utilities 5\languages\French (Ad Lib).lng
%ProgramFiles%\Glary Utilities 5\languages\Danish.lng
%ProgramFiles%\Glary Utilities 5\languages\Czech_Damned.lng
%ProgramFiles%\Glary Utilities 5\languages\Farsi.lng
%ProgramFiles%\Glary Utilities 5\languages\Estonian.lng
%ProgramFiles%\Glary Utilities 5\languages\French(CA).lng
%ProgramFiles%\Glary Utilities 5\languages\Italian_millo.lng
%ProgramFiles%\Glary Utilities 5\languages\Greek.lng
%ProgramFiles%\Glary Utilities 5\languages\Magyar2.lng
%ProgramFiles%\Glary Utilities 5\languages\Magyar.lng
%ProgramFiles%\Glary Utilities 5\languages\French_(RT).lng
%ProgramFiles%\Glary Utilities 5\languages\French(FR).lng
%ProgramFiles%\Glary Utilities 5\languages\German_Sarakael.lng
%ProgramFiles%\Glary Utilities 5\languages\German.lng
%ProgramFiles%\Glary Utilities 5\data\rule.ini
%ProgramFiles%\Glary Utilities 5\data\registry.dat
%ProgramFiles%\Glary Utilities 5\data\startup.dat
%ProgramFiles%\Glary Utilities 5\data\settings.dat
%ProgramFiles%\Glary Utilities 5\data\junkcleaner.dat
%ProgramFiles%\Glary Utilities 5\data\junkInfo.ini
%ProgramFiles%\Glary Utilities 5\data\procsubmit.dat
%ProgramFiles%\Glary Utilities 5\data\process.dat
%ProgramFiles%\Glary Utilities 5\data\xb.dat
%ProgramFiles%\Glary Utilities 5\languages\Catala_Joan.lng
%ProgramFiles%\Glary Utilities 5\languages\Catala.lng
%ProgramFiles%\Glary Utilities 5\languages\Czech.lng
%ProgramFiles%\Glary Utilities 5\languages\Croatian.lng
%ProgramFiles%\Glary Utilities 5\data\xt.dat
%ProgramFiles%\Glary Utilities 5\data\xdata.dat
%ProgramFiles%\Glary Utilities 5\languages\Bulgarian.lng
%ProgramFiles%\Glary Utilities 5\languages\Armenian.lng
%ProgramFiles%\Glary Utilities 5\CrashReport.dll
%ProgramFiles%\Glary Utilities 5\Config_Portable.dll
%ProgramFiles%\Glary Utilities 5\dbghelp.dll
%ProgramFiles%\Glary Utilities 5\CrashReport.exe
%ProgramFiles%\Glary Utilities 5\CheckUpdate.exe
%ProgramFiles%\Glary Utilities 5\CheckUpdate.dll
%ProgramFiles%\Glary Utilities 5\Config.dll
%ProgramFiles%\Glary Utilities 5\cmm.exe
%ProgramFiles%\Glary Utilities 5\DiskAnalysis.exe
%ProgramFiles%\Glary Utilities 5\DriverBackup.exe
%ProgramFiles%\Glary Utilities 5\DPInst64.exe
%ProgramFiles%\Glary Utilities 5\EmptyFolderFinder.exe
%ProgramFiles%\Glary Utilities 5\dupefinder.exe
%ProgramFiles%\Glary Utilities 5\DiskCleaner.exe
%ProgramFiles%\Glary Utilities 5\DiskCleaner.dll
%ProgramFiles%\Glary Utilities 5\DPInst32.exe
%ProgramFiles%\Glary Utilities 5\DiskDefrag.exe
%TEMP%\nss2.tmp\popularize.ico
%TEMP%\nss2.tmp\GlaryUtilities.ini
%TEMP%\nss2.tmp\KillProcDLL.dll
%ProgramFiles%\Glary Utilities 5\KillProcPath.dll
%TEMP%\7ZipSfx.000\Glaryinstall\Data.exe
%TEMP%\7ZipSfx.000\Glaryinstall\license.reg
%TEMP%\nss2.tmp\System.dll
%TEMP%\7ZipSfx.000\Glaryinstall\setup.exe
%ProgramFiles%\Glary Utilities 5\AppMetrics.dll
%ProgramFiles%\Glary Utilities 5\CheckDisk.dll
%ProgramFiles%\Glary Utilities 5\BottDefrag.dll
%ProgramFiles%\Glary Utilities 5\CheckDiskProgress.exe
%ProgramFiles%\Glary Utilities 5\CheckDisk.exe
%ProgramFiles%\Glary Utilities 5\AutoUpdate.exe
%ProgramFiles%\Glary Utilities 5\autodll.dll
%ProgramFiles%\Glary Utilities 5\BootTime.dll
%ProgramFiles%\Glary Utilities 5\Backup.dll
%ProgramFiles%\Glary Utilities 5\PortableMaker.exe
%ProgramFiles%\Glary Utilities 5\OneClickMaintenance.exe
%ProgramFiles%\Glary Utilities 5\QuickSearch.exe
%ProgramFiles%\Glary Utilities 5\procmgr.exe
%ProgramFiles%\Glary Utilities 5\Memfiles.dll
%ProgramFiles%\Glary Utilities 5\memdefrag.exe
%ProgramFiles%\Glary Utilities 5\ObjectAdmin.dll
%ProgramFiles%\Glary Utilities 5\MemfilesService.exe
%ProgramFiles%\Glary Utilities 5\regdefrag.exe
%ProgramFiles%\Glary Utilities 5\ScanFile.dll
%ProgramFiles%\Glary Utilities 5\RestoreCenter.exe
%ProgramFiles%\Glary Utilities 5\settings.ini
%ProgramFiles%\Glary Utilities 5\settings.dll
%ProgramFiles%\Glary Utilities 5\RegistryCleaner.exe
%ProgramFiles%\Glary Utilities 5\RegistryCleaner.dll
%ProgramFiles%\Glary Utilities 5\RestoreCenter.dll
%ProgramFiles%\Glary Utilities 5\RemoveDriver.dll
%ProgramFiles%\Glary Utilities 5\gsd.exe
%ProgramFiles%\Glary Utilities 5\FileUndelete.exe
%ProgramFiles%\Glary Utilities 5\InfoCollect.dll
%ProgramFiles%\Glary Utilities 5\iehelper.exe
%ProgramFiles%\Glary Utilities 5\fileencrypt.exe
%ProgramFiles%\Glary Utilities 5\EncryptExe.exe
%ProgramFiles%\Glary Utilities 5\filesplitter.exe
%ProgramFiles%\Glary Utilities 5\FileScanFilter.dll
%ProgramFiles%\Glary Utilities 5\InfoCollectFile.dll
%ProgramFiles%\Glary Utilities 5\LockDll.dll
%ProgramFiles%\Glary Utilities 5\languages.dll
%ProgramFiles%\Glary Utilities 5\MachineCode.dll
%ProgramFiles%\Glary Utilities 5\Log.dll
%ProgramFiles%\Glary Utilities 5\Integrator.exe
%ProgramFiles%\Glary Utilities 5\Initialize.exe
%ProgramFiles%\Glary Utilities 5\joinExe.exe
%ProgramFiles%\Glary Utilities 5\Integrator_Portable.exe
%ProgramFiles%\Glary Utilities 5\languages\PTpt.lng
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\button_expand3.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\button_expand2.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\button_left2.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\button_left.png
%ProgramFiles%\Glary Utilities 5\Resources\ProcessManager\ToolBar.png
%ProgramFiles%\Glary Utilities 5\Resources\ProcessManager\RClickMenu.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\button_expand.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\arrow.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\button_left3.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\button_unexpand2.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\button_unexpand.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\dropdown.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\button_unexpand3.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\button_right2.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\button_right.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\button_type_edit.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\button_right3.png
%ProgramFiles%\Glary Utilities 5\Resources\DiskCleaner\tab_btn_normal.png
%ProgramFiles%\Glary Utilities 5\Resources\DiskCleaner\tab_btn_hover.png
%ProgramFiles%\Glary Utilities 5\Resources\DiskDefrag\toolbar.png
%ProgramFiles%\Glary Utilities 5\Resources\DiskCleaner\toolbar.png
%ProgramFiles%\Glary Utilities 5\Resources\DiskCleaner\oc_btn_hover.png
%ProgramFiles%\Glary Utilities 5\Resources\DiskCleaner\oc_btn_click.png
%ProgramFiles%\Glary Utilities 5\Resources\DiskCleaner\tab_btn_click.png
%ProgramFiles%\Glary Utilities 5\Resources\DiskCleaner\oc_btn_normal.png
%ProgramFiles%\Glary Utilities 5\Resources\Dupefinder\nopreview.png
%ProgramFiles%\Glary Utilities 5\Resources\PortableMaker\btn_normal.png
%ProgramFiles%\Glary Utilities 5\Resources\PortableMaker\btn_hover.png
%ProgramFiles%\Glary Utilities 5\Resources\PortableMaker\progress_bg.png
%ProgramFiles%\Glary Utilities 5\Resources\PortableMaker\progress.png
%ProgramFiles%\Glary Utilities 5\Resources\EmptyFolderFinder\toolbar.png
%ProgramFiles%\Glary Utilities 5\Resources\Dupefinder\tool.png
%ProgramFiles%\Glary Utilities 5\Resources\PortableMaker\background.png
%ProgramFiles%\Glary Utilities 5\Resources\InternetBooster\IBackGround.jpg
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\min_menu3.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\min_menu2.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\min_windows2.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\min_windows.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\menu.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\main_restore3.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\min_menu.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\menu_check.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\min_windows3.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\mini_close3.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\mini_close2.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\quick_search_clear_keyword.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\quick_search.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\mini_back2.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\mini_back.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\mini_close.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\mini_back3.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\main_close3.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\main_close2.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\main_max2.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\main_max.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\logo.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\dropup.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\main_close.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\logo_s.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\main_max3.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\main_min3.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\main_min2.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\main_restore2.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\main_restore.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\main_menu2.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\main_menu.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\main_min.png
%ProgramFiles%\Glary Utilities 5\Resources\QuickSearch\images\main_menu3.png
%ProgramFiles%\Glary Utilities 5\languages\japanese.lng
%ProgramFiles%\Glary Utilities 5\languages\italian3.lng
%ProgramFiles%\Glary Utilities 5\languages\kurdish.lng
%ProgramFiles%\Glary Utilities 5\languages\korean.lng
%ProgramFiles%\Glary Utilities 5\languages\hebrew.lng
%ProgramFiles%\Glary Utilities 5\languages\french_nantesph.lng
%ProgramFiles%\Glary Utilities 5\languages\italian2.lng
%ProgramFiles%\Glary Utilities 5\languages\italian.lng
%ProgramFiles%\Glary Utilities 5\languages\latvian.lng
%ProgramFiles%\Glary Utilities 5\languages\slovenian_jrudec.lng
%ProgramFiles%\Glary Utilities 5\languages\slovenian.lng
%ProgramFiles%\Glary Utilities 5\languages\spanish (McM).lng
%ProgramFiles%\Glary Utilities 5\languages\spain.lng
%ProgramFiles%\Glary Utilities 5\languages\polish_Marta.lng
%ProgramFiles%\Glary Utilities 5\languages\polish.lng
%ProgramFiles%\Glary Utilities 5\languages\russian.lng
%ProgramFiles%\Glary Utilities 5\languages\ptbr.lng
%ProgramFiles%\Glary Utilities 5\languages\Slovak_momirek.lng
%ProgramFiles%\Glary Utilities 5\languages\Slovak_bugtom.lng
%ProgramFiles%\Glary Utilities 5\languages\arabic.lng
%ProgramFiles%\Glary Utilities 5\languages\Swedish.lng
%ProgramFiles%\Glary Utilities 5\languages\Romania.lng
%ProgramFiles%\Glary Utilities 5\languages\Romana.lng
%ProgramFiles%\Glary Utilities 5\languages\Slovak.lng
%ProgramFiles%\Glary Utilities 5\languages\Serbian.lng
%ProgramFiles%\Glary Utilities 5\languages\arabic_Saif.lng
%ProgramFiles%\Glary Utilities 5\languages\french.lng
%ProgramFiles%\Glary Utilities 5\languages\english.lng
%ProgramFiles%\Glary Utilities 5\languages\french_Morvant.lng
%ProgramFiles%\Glary Utilities 5\languages\french2.lng
%ProgramFiles%\Glary Utilities 5\languages\chinese.lng
%ProgramFiles%\Glary Utilities 5\languages\bosnian.lng
%ProgramFiles%\Glary Utilities 5\languages\dutch.lng
%ProgramFiles%\Glary Utilities 5\languages\chineseT.lng
%ProgramFiles%\Glary Utilities 5\Native\wxp_x86\BootDefragDriver.sys
%ProgramFiles%\Glary Utilities 5\Native\wxp_x86\BootDefrag.exe
%ProgramFiles%\Glary Utilities 5\Resources\CheckDisk\button_expand.png
%ProgramFiles%\Glary Utilities 5\Native\wxp_x86\RegBootDefrag.exe
%ProgramFiles%\Glary Utilities 5\Native\wxp_x64\BootDefrag.exe
%ProgramFiles%\Glary Utilities 5\Native\wnet_x86\BootDefragDriver.sys
%ProgramFiles%\Glary Utilities 5\Native\wxp_x64\RegBootDefrag.exe
%ProgramFiles%\Glary Utilities 5\Native\wxp_x64\BootDefragDriver.sys
%ProgramFiles%\Glary Utilities 5\Resources\DiskAnalysis\file_result.png
%ProgramFiles%\Glary Utilities 5\Resources\DiskCleaner\activenow_hover.png
%ProgramFiles%\Glary Utilities 5\Resources\DiskCleaner\activenow_click.png
%ProgramFiles%\Glary Utilities 5\Resources\DiskCleaner\main_like.png
%ProgramFiles%\Glary Utilities 5\Resources\DiskCleaner\activenow_normal.png
%ProgramFiles%\Glary Utilities 5\Resources\DiskCleaner\Line.png
%ProgramFiles%\Glary Utilities 5\Resources\DiskAnalysis\toolbar.png
%ProgramFiles%\Glary Utilities 5\Resources\DiskCleaner\Property.png
%ProgramFiles%\Glary Utilities 5\Resources\DiskCleaner\OpenFile.png
%ProgramFiles%\Glary Utilities 5\languages\vietnamese.lng
%ProgramFiles%\Glary Utilities 5\languages\ukrainian2.lng
%ProgramFiles%\Glary Utilities 5\Native\win7_x64\BootDefragDriver.sys
%ProgramFiles%\Glary Utilities 5\Native\win7_x64\BootDefrag.exe
%ProgramFiles%\Glary Utilities 5\languages\spanish_ignacio.lng
%ProgramFiles%\Glary Utilities 5\languages\spanish.lng
%ProgramFiles%\Glary Utilities 5\languages\ukrainian.lng
%ProgramFiles%\Glary Utilities 5\languages\turkish.lng
%ProgramFiles%\Glary Utilities 5\Native\win7_x86\BootDefrag.exe
%ProgramFiles%\Glary Utilities 5\Native\wnet_x64\BootDefrag.exe
%ProgramFiles%\Glary Utilities 5\Native\wlh_x86\BootDefragDriver.sys
%ProgramFiles%\Glary Utilities 5\Native\wnet_x86\BootDefrag.exe
%ProgramFiles%\Glary Utilities 5\Native\wnet_x64\BootDefragDriver.sys
%ProgramFiles%\Glary Utilities 5\Native\wlh_x64\BootDefrag.exe
%ProgramFiles%\Glary Utilities 5\Native\win7_x86\BootDefragDriver.sys
%ProgramFiles%\Glary Utilities 5\Native\wlh_x86\BootDefrag.exe
%ProgramFiles%\Glary Utilities 5\Native\wlh_x64\BootDefragDriver.sys

Deletes the following files:

%TEMP%\nse4.tmp\xtInfoPlugin.dll
%ProgramFiles%\Glary Utilities 5\data\backup.ini
%TEMP%\nse4.tmp\inetc.dll
%TEMP%\nse4.tmp\post_reply.htm

Substitutes the following files:

%ProgramFiles%\Glary Utilities 5\data\backup.ini

Network activity:

Connects to:

'me#####.glarysoft.com':80

TCP:

HTTP POST requests:

http://me#####.glarysoft.com/install.php

UDP:

DNS ASK me#####.glarysoft.com

Miscellaneous:

Searches for the following windows:

ClassName: '' WindowName: ''

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial