start::
CreateRestorePoint:
CloseProcesses:
RemoveProxy:
HKU\S-1-5-21-4227958767-4072786898-3224097636-1001\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [45488 2020-08-22]
BootExecute: autocheck autochk *
Task: {6D0119D1-F358-48E4-98E0-BE65D8479906} - System32\Tasks\GU5SkipUAC => C:\Program Files (x86)\Glary Utilities 5\Integrator.exe [918960 2020-08-22]
Task: {8A815A84-FF62-4625-B038-39D7210A5A05} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe
Task: {B28A01D6-D9BD-4C72-99CE-4D923E7AB248} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe
Task: {C1D79BAB-D2C6-42AC-B871-BB3E12A66F40} - System32\Tasks\HP\Consent Manager Launcher => sc start hptouchpointanalyticsservice
S1 GUBootStartup; C:\WINDOWS\System32\drivers\GUBootStartup.sys [28936 2020-08-26]
2020-08-26 13:56 - 2020-08-26 13:56 - 000000000 ____D C:\ProgramData\GlarySoft
2020-08-26 11:43 - 2020-08-26 11:43 - 000000959 _____ C:\DelFix.txt
2020-08-26 11:21 - 2020-08-26 11:42 - 000000000 ____D C:\Users\Michel\AppData\Roaming\ZHP
2020-08-26 11:21 - 2020-08-26 11:21 - 000000000 ____D C:\Users\Michel\AppData\Local\ZHP
2020-08-26 10:53 - 2020-08-26 21:26 - 000000000 ____D C:\Program Files (x86)\Glary Utilities 5
2020-08-26 10:53 - 2020-08-26 16:24 - 000002286 _____ C:\WINDOWS\system32\Tasks\GU5SkipUAC
2020-08-26 10:53 - 2020-08-26 10:55 - 000000000 ____D C:\Users\Michel\AppData\Roaming\GlarySoft
2020-08-26 10:53 - 2020-08-26 10:53 - 000028936 _____ (Glarysoft Ltd) C:\WINDOWS\system32\Drivers\GUBootStartup.sys
2020-08-26 10:53 - 2020-08-26 10:53 - 000001172 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk
2020-08-26 10:53 - 2020-08-26 10:53 - 000001160 _____ C:\Users\Public\Desktop\Glary Utilities 5.lnk
2020-08-26 10:53 - 2020-08-26 10:53 - 000001160 _____ C:\ProgramData\Desktop\Glary Utilities 5.lnk
2020-08-26 10:53 - 2020-08-26 10:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5
2020-08-26 10:50 - 2020-08-26 10:50 - 018478432 _____ (Glarysoft Ltd) C:\Users\Michel\Downloads\glary-utilities-5-149-0-175.exe
2020-08-26 10:31 - 2020-08-26 10:31 - 000405568 _____ C:\ProgramData\cl.uninstall.1598430583.bdinstall.v2.bin
ContextMenuHandlers1: [Glary Utilities] -> [CC]{B3C418F8-922B-4faf-915E-59BC14448CF7} => -> Pas de fichier
ContextMenuHandlers2: [Glary Utilities] -> [CC]{B3C418F8-922B-4faf-915E-59BC14448CF7} => -> Pas de fichier
ContextMenuHandlers6: [Glary Utilities] -> [CC]{B3C418F8-922B-4faf-915E-59BC14448CF7} => -> Pas de fichier
HKLM\...\StartupApproved\Run: => "BdVpnApp"
HKU\S-1-5-21-4227958767-4072786898-3224097636-1001\...\StartupApproved\Run: => "GUDelayStartup"
EmptyTemp:
cmd: ipconfig /flushdns
cmd: md C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database
cmd: DISM /Online /Cleanup-image /Restorehealth
end::