Техническая информация
Для обеспечения автозапуска и распространения:
Создает следующие сервисы:
- [<HKLM>\SYSTEM\ControlSet001\Services\WiseBootAssistant] 'Start' = '00000002'
Подменяет следующие исполняемые системные файлы:
- <SYSTEM32>\setup.exe файлом <SYSTEM32>\Setup.exe
Вредоносные функции:
Создает и запускает на исполнение:
- '%TEMP%\is-5IP4S.tmp\1.tmp' /SL5="$100E0,4875418,129536,<SYSTEM32>\1.exe" /VERYSILENT /Lang=tr /Components=Install
- '<SYSTEM32>\1.exe' /VERYSILENT /Lang=tr /Components=Install
- '<SYSTEM32>\Setup.exe' (загружен из сети Интернет)
Изменения в файловой системе:
Создает следующие файлы:
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-26MN4.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-7S8QS.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-B2CIS.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-ODQQE.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-4MN4S.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-IGFSK.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-8P8CI.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-VHL52.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-AABTS.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-G80IJ.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-NI7NC.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-UMDS6.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-GJL37.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-7L6A9.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-9ARUT.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-1J4UJ.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-SHO5J.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-IQIN6.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-SHB4A.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-KC2M4.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-ANTR5.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-1VDVV.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-T4E19.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-DLFG6.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-1SRBN.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-GMSBO.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-HCRP6.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-BMVNO.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-UO0US.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-05A8G.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-PIQQ0.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Themes\is-TOJ1J.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\is-LGDHV.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\is-7EDP2.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\is-ET31P.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\is-8UO7Q.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\is-G12C3.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\is-GU6OM.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\is-KNKGQ.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\is-6EQ7I.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\unins000.msg
- %PROGRAM_FILES%\Wise\Wise Care 365\unins000.dat
- %APPDATA%\Wise Care 365\config.ini
- %TEMP%\is-6PAUQ.tmp\introduce.url
- %PROGRAM_FILES%\Wise\Wise Care 365\is-2JM7M.tmp
- %ALLUSERSPROFILE%\Start Menu\Programs\Wise Care 365\Wise Care 365.lnk
- %ALLUSERSPROFILE%\Desktop\Wise Care 365.lnk
- %PROGRAM_FILES%\Wise\Wise Care 365\is-9MDKR.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\tools\img\is-FA6LU.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\tools\img\is-KRU0R.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\tools\img\is-MJHCM.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\tools\img\is-THKR0.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\tools\is-2IPFS.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\tools\is-KT6VH.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\tools\img\is-D6KN2.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\tools\img\is-51JI6.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\is-E5SLA.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\is-ICDJM.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\is-HQ7OR.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\is-EPDKS.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\is-PID0Q.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\is-JLTAA.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\is-CTBR1.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-953RR.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-ARE0F.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-8VNPH.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-8ERS2.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-19QIN.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-C515F.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-BJ4FG.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-RTRR0.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-U7O32.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-G0JKN.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-OGHKN.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-MBHI3.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-GVK3V.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-B8K9A.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-JEKOM.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-7D0MR.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-0CJL3.tmp
- %TEMP%\is-5IP4S.tmp\1.tmp
- %TEMP%\is-6PAUQ.tmp\_isetup\_shfoldr.dll
- %PROGRAM_FILES%\Wise\Wise Care 365\is-QF8QG.tmp
- <SYSTEM32>\1.exe
- %TEMP%\aut1.tmp
- %TEMP%\nfubsok
- %TEMP%\aut2.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-QFQF6.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-RCCNH.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-AITMS.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-HGN0S.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-2L1GH.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-P389U.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-7J1FT.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-JJBEV.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-7GAN3.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-0C5HA.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-AB05N.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-6L3GV.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-9M4U2.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-R6G2M.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-MADPI.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-5Q459.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-04J3I.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-NRLEP.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-T0LF5.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-I0AE7.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-B4BNI.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-O533O.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-4I5L0.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-F0MSC.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-IEG9B.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-DBPA8.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-NALMG.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-AFC8T.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-G6Q28.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-ONGBE.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-FARPD.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-U998G.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-2NGF6.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-7Q4N4.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-PM0CQ.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-KFQ6H.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-GOQBK.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-O5E1T.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-00KVN.tmp
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-DSUM0.tmp
Присваивает атрибут 'скрытый' для следующих файлов:
- <SYSTEM32>\1.exe
Удаляет следующие файлы:
- %TEMP%\is-5IP4S.tmp\1.tmp
- %TEMP%\is-6PAUQ.tmp\_isetup\_shfoldr.dll
- <SYSTEM32>\setup.exe
- <SYSTEM32>\1.exe
- %TEMP%\nfubsok
- %TEMP%\aut1.tmp
- %TEMP%\is-6PAUQ.tmp\introduce.url
- %TEMP%\aut2.tmp
Перемещает следующие файлы:
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-8P8CI.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Norwegian(Nynorsk).ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-ODQQE.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Polish.ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-26MN4.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Portuguese(Brazil).ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-IGFSK.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Norwegian(Bokmal).ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-HCRP6.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Japanese.ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-1J4UJ.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Korean.ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-4MN4S.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Kurdish(Kurmanci).ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-7L6A9.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Slovenian.ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-9ARUT.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Spanish(Spain).ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-UMDS6.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Swedish(Sweden).ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-GJL37.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Slovak.ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-7S8QS.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Portuguese(Portugal).ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-B2CIS.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Romanian.ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-VHL52.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Russian.ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-SHO5J.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Danish.ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-IQIN6.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Dutch(Nederlands).ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-SHB4A.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\English.ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-KC2M4.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Czech.ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-ANTR5.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Bulgarian.ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-1VDVV.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Chinese(Simplified).ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-T4E19.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Chinese(Traditional).ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-BMVNO.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Greek.ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-1SRBN.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Hungarian.ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-GMSBO.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Italian.ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-PIQQ0.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\German.ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-DLFG6.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Estonian.ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-UO0US.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Finnish.ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-05A8G.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\French.ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-AABTS.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Turkish.ini
- %PROGRAM_FILES%\Wise\Wise Care 365\is-9MDKR.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\skin.ico
- %PROGRAM_FILES%\Wise\Wise Care 365\is-G12C3.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\sqlite3.dll
- %PROGRAM_FILES%\Wise\Wise Care 365\is-GU6OM.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\UninstallTP.exe
- %PROGRAM_FILES%\Wise\Wise Care 365\is-HQ7OR.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Rate.info
- %PROGRAM_FILES%\Wise\Wise Care 365\is-EPDKS.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\fileshredder.ico
- %PROGRAM_FILES%\Wise\Wise Care 365\is-E5SLA.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\License.txt
- %PROGRAM_FILES%\Wise\Wise Care 365\is-ICDJM.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\LiveUpdate.dll
- %PROGRAM_FILES%\Wise\Wise Care 365\is-ET31P.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\WiseTray.exe
- %PROGRAM_FILES%\Wise\Wise Care 365\is-6EQ7I.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\WiseTurbo.exe
- %PROGRAM_FILES%\Wise\Wise Care 365\is-2JM7M.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\ico-message.ico
- %PROGRAM_FILES%\Wise\Wise Care 365\is-7EDP2.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\WiseEraser.dll
- %PROGRAM_FILES%\Wise\Wise Care 365\is-KNKGQ.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\WiseBootBooster.exe
- %PROGRAM_FILES%\Wise\Wise Care 365\is-8UO7Q.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\WiseCare365.exe
- %PROGRAM_FILES%\Wise\Wise Care 365\is-LGDHV.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\WiseDefrag.dll
- %PROGRAM_FILES%\Wise\Wise Care 365\tools\is-KT6VH.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\tools\toolsv3.zip
- %PROGRAM_FILES%\Wise\Wise Care 365\tools\img\is-D6KN2.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\tools\img\AutoShutdown.png
- %PROGRAM_FILES%\Wise\Wise Care 365\tools\img\is-THKR0.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\tools\img\DateRecovery.png
- %PROGRAM_FILES%\Wise\Wise Care 365\tools\is-2IPFS.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\tools\toolsv3.txt
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-G80IJ.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Ukrainian.ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-NI7NC.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Vietnamese.ini
- %PROGRAM_FILES%\Wise\Wise Care 365\Themes\is-TOJ1J.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Themes\default.wskn
- %PROGRAM_FILES%\Wise\Wise Care 365\is-PID0Q.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\BootPack.wpk
- %PROGRAM_FILES%\Wise\Wise Care 365\is-JLTAA.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\BootTime.exe
- %PROGRAM_FILES%\Wise\Wise Care 365\is-CTBR1.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\DefragOptions.ini
- %PROGRAM_FILES%\Wise\Wise Care 365\tools\img\is-51JI6.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\tools\img\ProgramUninstaller.png
- %PROGRAM_FILES%\Wise\Wise Care 365\tools\img\is-FA6LU.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\tools\img\FolderHider.png
- %PROGRAM_FILES%\Wise\Wise Care 365\tools\img\is-KRU0R.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\tools\img\JetSearch.png
- %PROGRAM_FILES%\Wise\Wise Care 365\tools\img\is-MJHCM.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\tools\img\MemoryOptimizer.png
- %PROGRAM_FILES%\Wise\Wise Care 365\Languages\is-953RR.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\Languages\Belarusian.ini
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-B8K9A.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\f1.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-JEKOM.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\f2.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-7D0MR.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\f3.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-U7O32.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\f0.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-ARE0F.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\e7.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-8VNPH.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\e8.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-8ERS2.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\e9.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-7GAN3.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\g1.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-ONGBE.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\g2.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-FARPD.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\g3.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-MBHI3.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\f7.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-GVK3V.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\f4.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-G0JKN.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\f5.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-OGHKN.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\f6.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-JJBEV.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\a7.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-2L1GH.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\a9.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-RCCNH.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\b5.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-7J1FT.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\a6.png
- %PROGRAM_FILES%\Wise\Wise Care 365\is-QF8QG.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\unins000.exe
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-QFQF6.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\a1.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-P389U.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\a2.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-BJ4FG.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\d3.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-RTRR0.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\d4.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-19QIN.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\d7.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-C515F.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\d2.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-AITMS.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\c4.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-HGN0S.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\c7.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-0CJL3.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\d1.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-U998G.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\g4.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-AB05N.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\i7.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-6L3GV.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\i8.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-04J3I.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\j.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-0C5HA.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\i6.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-MADPI.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\i3.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-5Q459.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\i4.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-9M4U2.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\i5.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-NRLEP.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\j6.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-T0LF5.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\j7.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-I0AE7.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\j8.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-B4BNI.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\j4.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-O533O.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\j0.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-4I5L0.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\j1.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-F0MSC.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\j3.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-2NGF6.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\h1.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-O5E1T.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\h2.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-00KVN.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\h3.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-AFC8T.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\g8.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-G6Q28.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\g5.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-DBPA8.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\g6.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-NALMG.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\g7.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-KFQ6H.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\h8.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-IEG9B.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\i1.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-R6G2M.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\i2.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-PM0CQ.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\h7.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-DSUM0.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\h4.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-GOQBK.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\h5.png
- %PROGRAM_FILES%\Wise\Wise Care 365\headers\is-7Q4N4.tmp в %PROGRAM_FILES%\Wise\Wise Care 365\headers\h6.png
Сетевая активность:
Подключается к:
- 'www.ka###imsiz.com':80
TCP:
Запросы HTTP GET:
- www.ka###imsiz.com/Setup.rar
UDP:
- DNS ASK www.ka###imsiz.com
- DNS ASK www.google.com
Другое:
Ищет следующие окна:
- ClassName: 'TFrmMOMain' WindowName: ''
- ClassName: 'TWiseInstaller' WindowName: ''
- ClassName: 'BUTTON' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'TFrmTrayMain' WindowName: ''
- ClassName: 'TFrmWPMain' WindowName: ''
