Trojan.MulDrop7.55534

Техническая информация

Для обеспечения автозапуска и распространения:

Создает следующие сервисы:

[<HKLM>\SYSTEM\ControlSet001\Services\WiseBootAssistant] 'ImagePath' = '%ProgramFiles%\Wise\Wise Care 365\BootTime.exe'
[<HKLM>\SYSTEM\ControlSet001\Services\WiseBootAssistant] 'Start' = '00000002'

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\net.exe' stop WiseBootAssistant

Изменения в файловой системе:

Создает следующие файлы:

%ProgramFiles%\Wise\Wise Care 365\Languages\is-TDBVT.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-QIQB5.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-UENK6.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-2VHGT.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-176BR.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-5F44H.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-QU18L.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-VB4DJ.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-2MIBR.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-0SPU4.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-NNAIU.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-E28IE.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-L8ESA.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-7J505.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-LOD6B.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-HEQNB.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\is-ODSBF.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-RB7V4.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-6VB95.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-A16ST.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-SCFKG.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-PC0HL.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-0N9M6.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-ID483.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-K8EKG.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-Q6IRS.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-FKQRS.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-TD1R8.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-LFQHS.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-DDI7G.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-COUQD.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-GD06H.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-HTPV4.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-3993R.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-U3SVS.tmp
%ProgramFiles%\Wise\Wise Care 365\is-81PU5.tmp
%ProgramFiles%\Wise\Wise Care 365\is-2IRJ1.tmp
%ProgramFiles%\Wise\Wise Care 365\is-0UTQI.tmp
%ProgramFiles%\Wise\Wise Care 365\is-FPLQ1.tmp
%ProgramFiles%\Wise\Wise Care 365\is-NO81R.tmp
%ProgramFiles%\Wise\Wise Care 365\is-6R78C.tmp
%ProgramFiles%\Wise\Wise Care 365\is-0TROL.tmp
%ProgramFiles%\Wise\Wise Care 365\is-V1V9E.tmp
%ProgramFiles%\Wise\Wise Care 365\is-GRT7F.tmp
%ProgramFiles%\Wise\Wise Care 365\unins000.dat
%ProgramFiles%\Wise\Wise Care 365\unins000.msg
%APPDATA%\Wise Care 365\config_tray.ini
%APPDATA%\Wise Care 365\config.ini
%ProgramFiles%\Wise\Wise Care 365\is-9RDUO.tmp
%ProgramFiles%\Wise\Wise Care 365\is-8CMRA.tmp
%ALLUSERSPROFILE%\Desktop\Wise Care 365.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\Wise Care 365\Wise Care 365.lnk
%ProgramFiles%\Wise\Wise Care 365\is-O868O.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-676L5.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-4E01H.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-RSEEC.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-S7LLG.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-M2H1H.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-D85TD.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-6QTLS.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-SBAOC.tmp
%ProgramFiles%\Wise\Wise Care 365\is-AVMV2.tmp
%ProgramFiles%\Wise\Wise Care 365\is-U8LTO.tmp
%ProgramFiles%\Wise\Wise Care 365\is-FMCS0.tmp
%ProgramFiles%\Wise\Wise Care 365\is-EEOP8.tmp
%ProgramFiles%\Wise\Wise Care 365\is-AGLLK.tmp
%ProgramFiles%\Wise\Wise Care 365\is-58DDB.tmp
%ProgramFiles%\Wise\Wise Care 365\is-FL8NN.tmp
%ProgramFiles%\Wise\Wise Care 365\is-L03PN.tmp
%ProgramFiles%\Wise\Wise Care 365\is-IF7SN.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-ALT04.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-T45LE.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-LGG6Q.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-J0R1B.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-AGNKS.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-H9A31.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-7BLSH.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-46R7A.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-ETLTS.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-5V3BV.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-NJO9E.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-C0UOB.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-OVIQ0.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-ALE65.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-G23C5.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-MF9U9.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-8R5NP.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-235CN.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-21CLS.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-Q4T9F.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-45NTG.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-FFFJ2.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-PNJ5H.tmp
%CommonProgramFiles%\~zirewpl.ibo
%TEMP%\aut1.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-0Q6UV.tmp
%ProgramFiles%\Wise\Wise Care 365\is-PI91A.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-NKGSU.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-5955C.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-LUAO8.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-RGH5C.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-GPJ0B.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-FRNTK.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-6VVDM.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-CA0DL.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-ON9QJ.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-LHJ7D.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-GCV8E.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-8S99T.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-6GUVE.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-LO1K3.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-24MUP.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-E3SHG.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-HSUFV.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-TNIPE.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-QLBIO.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-UBARL.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-DGFOC.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-QIOGG.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-SI164.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-OGNFB.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-EHIEG.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-MRL6A.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-QS6NC.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-6P912.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-CRFF2.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-BH8KI.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-GRJQ9.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-0ILMG.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-B75IC.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-I296A.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-EQ9UE.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-PJJ58.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-6B3JM.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-701PO.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-T22SU.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-F0R9M.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-0BJIE.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-F2RQT.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-BV2VK.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-VOG0E.tmp

Присваивает атрибут 'скрытый' для следующих файлов:

%CommonProgramFiles%\~zirewpl.ibo

Удаляет следующие файлы:

%TEMP%\is-FVHS5.tmp\~zirewpl.tmp
%TEMP%\is-GKPIQ.tmp\introduce.url
%TEMP%\aut1.tmp

Перемещает следующие файлы:

%ProgramFiles%\Wise\Wise Care 365\Languages\is-VB4DJ.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Spanish(Spain).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-176BR.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Slovenian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-QIQB5.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Thai.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-QU18L.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Swedish(Sweden).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-DDI7G.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Russian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-COUQD.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Romanian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-5F44H.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Slovak.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-RB7V4.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Serbian(Cyrillic).ini
%ProgramFiles%\Wise\Wise Care 365\Themes\is-7J505.tmp в %ProgramFiles%\Wise\Wise Care 365\Themes\halloween-2016.wskn
%ProgramFiles%\Wise\Wise Care 365\Themes\is-LOD6B.tmp в %ProgramFiles%\Wise\Wise Care 365\Themes\halloween-2016.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-HEQNB.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\AutoShutdown.png
%ProgramFiles%\Wise\Wise Care 365\tools\is-ODSBF.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\toolsv3.txt
%ProgramFiles%\Wise\Wise Care 365\Languages\is-2VHGT.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Ukrainian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-TDBVT.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Turkish.ini
%ProgramFiles%\Wise\Wise Care 365\Themes\is-2MIBR.tmp в %ProgramFiles%\Wise\Wise Care 365\Themes\default.wskn
%ProgramFiles%\Wise\Wise Care 365\Languages\is-UENK6.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Vietnamese.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-TD1R8.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Portuguese(Portugal).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-K8EKG.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Hungarian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-Q6IRS.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Greek.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-6VB95.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Japanese.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-A16ST.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Italian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-ALT04.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Finnish.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-DGFOC.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\English.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-0N9M6.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\German.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-ID483.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\French.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-U3SVS.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Persian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-GD06H.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Norwegian(Nynorsk).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-LFQHS.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Portuguese(Brazil).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-3993R.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Polish.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-SCFKG.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Kurdish.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-PC0HL.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Korean.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-HTPV4.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Norwegian(Bokmal).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-FKQRS.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Nepali.ini
%ProgramFiles%\Wise\Wise Care 365\is-6R78C.tmp в %ProgramFiles%\Wise\Wise Care 365\WiseBootBooster.exe
%ProgramFiles%\Wise\Wise Care 365\is-O868O.tmp в %ProgramFiles%\Wise\Wise Care 365\UninstallTP.exe
%ProgramFiles%\Wise\Wise Care 365\is-V1V9E.tmp в %ProgramFiles%\Wise\Wise Care 365\WiseDefrag.dll
%ProgramFiles%\Wise\Wise Care 365\is-NO81R.tmp в %ProgramFiles%\Wise\Wise Care 365\WiseCare365.exe
%ProgramFiles%\Wise\Wise Care 365\is-U8LTO.tmp в %ProgramFiles%\Wise\Wise Care 365\Rate.info
%ProgramFiles%\Wise\Wise Care 365\is-FMCS0.tmp в %ProgramFiles%\Wise\Wise Care 365\AutoUpdate.exe
%ProgramFiles%\Wise\Wise Care 365\is-EEOP8.tmp в %ProgramFiles%\Wise\Wise Care 365\sqlite3.dll
%ProgramFiles%\Wise\Wise Care 365\is-AGLLK.tmp в %ProgramFiles%\Wise\Wise Care 365\skin.ico
%ProgramFiles%\Wise\Wise Care 365\is-GRT7F.tmp в %ProgramFiles%\Wise\Wise Care 365\WiseTurbo.exe
%ProgramFiles%\Wise\Wise Care 365\is-0UTQI.tmp в %ProgramFiles%\Wise\Wise Care 365\WiseTray.exe
%ProgramFiles%\Wise\Wise Care 365\is-9RDUO.tmp в %ProgramFiles%\Wise\Wise Care 365\BootLauncher.exe
%ProgramFiles%\Wise\Wise Care 365\is-8CMRA.tmp в %ProgramFiles%\Wise\Wise Care 365\geo.db
%ProgramFiles%\Wise\Wise Care 365\is-2IRJ1.tmp в %ProgramFiles%\Wise\Wise Care 365\DManager.dll
%ProgramFiles%\Wise\Wise Care 365\is-0TROL.tmp в %ProgramFiles%\Wise\Wise Care 365\WiseEraser.dll
%ProgramFiles%\Wise\Wise Care 365\is-FPLQ1.tmp в %ProgramFiles%\Wise\Wise Care 365\ssleay32.dll
%ProgramFiles%\Wise\Wise Care 365\is-81PU5.tmp в %ProgramFiles%\Wise\Wise Care 365\libeay32.dll
%ProgramFiles%\Wise\Wise Care 365\is-L03PN.tmp в %ProgramFiles%\Wise\Wise Care 365\License.txt
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-M2H1H.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\JetSearch.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-D85TD.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\Hotkey.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-6QTLS.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\ProgramUninstaller.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-SBAOC.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\MemoryOptimizer.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-0SPU4.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\FolderHider.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-NNAIU.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\DateRecovery.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-E28IE.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\GameBooster.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-L8ESA.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\ForceDeleter.png
%ProgramFiles%\Wise\Wise Care 365\is-FL8NN.tmp в %ProgramFiles%\Wise\Wise Care 365\BootTime.exe
%ProgramFiles%\Wise\Wise Care 365\is-AVMV2.tmp в %ProgramFiles%\Wise\Wise Care 365\BootPack.wpk
%ProgramFiles%\Wise\Wise Care 365\is-IF7SN.tmp в %ProgramFiles%\Wise\Wise Care 365\fileshredder.ico
%ProgramFiles%\Wise\Wise Care 365\is-58DDB.tmp в %ProgramFiles%\Wise\Wise Care 365\DefragOptions.ini
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-676L5.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\SystemMonitor.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-4E01H.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\Reminder.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-RSEEC.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\wrm32.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-S7LLG.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\wgb32.png
%ProgramFiles%\Wise\Wise Care 365\Languages\is-QIOGG.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Dutch(Nederlands).ini
%ProgramFiles%\Wise\Wise Care 365\headers\is-AGNKS.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f5.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-T45LE.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f4.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-5V3BV.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-J0R1B.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f6.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-ETLTS.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f1.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-H9A31.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f0.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-LGG6Q.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f3.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-46R7A.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f2.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-NJO9E.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g6.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-C0UOB.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g5.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-OVIQ0.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g8.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-ALE65.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-G23C5.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g2.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-MF9U9.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g1.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-8R5NP.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g4.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-235CN.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g3.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-7BLSH.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\e9.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-FFFJ2.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\a9.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-PNJ5H.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\a7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-6VVDM.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\c4.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-NKGSU.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\b5.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-0Q6UV.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\a1.png
%ProgramFiles%\Wise\Wise Care 365\is-PI91A.tmp в %ProgramFiles%\Wise\Wise Care 365\unins000.exe
%ProgramFiles%\Wise\Wise Care 365\headers\is-Q4T9F.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\a6.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-45NTG.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\a2.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-GPJ0B.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\d7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-5955C.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\d4.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-21CLS.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\e8.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-RGH5C.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\e7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-ON9QJ.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\d1.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-FRNTK.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\c7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-LUAO8.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\d3.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-CA0DL.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\d2.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-GCV8E.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-E3SHG.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j6.png
%ProgramFiles%\Wise\Wise Care 365\Languages\is-6GUVE.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Azerbaijan(Latin).ini
%ProgramFiles%\Wise\Wise Care 365\headers\is-LHJ7D.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j8.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-24MUP.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j1.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-QS6NC.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j0.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-HSUFV.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j4.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-LO1K3.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j3.png
%ProgramFiles%\Wise\Wise Care 365\Languages\is-EHIEG.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Czech.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-MRL6A.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Chinese(Traditional).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-QLBIO.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Dutch(Belgium).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-UBARL.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Danish.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-TNIPE.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Bulgarian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-8S99T.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Belarusian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-SI164.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Chinese(Simplified).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-OGNFB.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Catalan.ini
%ProgramFiles%\Wise\Wise Care 365\headers\is-T22SU.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-6P912.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h6.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-CRFF2.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h5.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-BH8KI.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h8.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-GRJQ9.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-0ILMG.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h2.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-B75IC.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h1.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-I296A.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h4.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-EQ9UE.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h3.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-701PO.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i6.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-BV2VK.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i5.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-F0R9M.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i8.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-6B3JM.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-F2RQT.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i2.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-PJJ58.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i1.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-VOG0E.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i4.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-0BJIE.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i3.png

Другое:

Ищет следующие окна:

ClassName: 'TFrmMOMain' WindowName: ''
ClassName: 'TFrmWPMain' WindowName: ''
ClassName: 'TFrmTrayMain' WindowName: ''

Создает и запускает на исполнение:

'%ProgramFiles%\Wise\Wise Care 365\BootTime.exe'
'%TEMP%\is-FVHS5.tmp\~zirewpl.tmp' /SL5="$100E0,8142394,131584,%CommonProgramFiles%\~zirewpl.ibo" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'%CommonProgramFiles%\~zirewpl.ibo' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-

Запускает на исполнение:

'<SYSTEM32>\cmd.exe' /c sc delete WiseBootAssistant
'<SYSTEM32>\sc.exe' delete WiseBootAssistant
'<SYSTEM32>\cmd.exe' /c net stop WiseBootAssistant
'<SYSTEM32>\net1.exe' stop WiseBootAssistant

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней