Trojan.MulDrop8.22628

Техническая информация

Для обеспечения автозапуска и распространения:

Создает следующие сервисы:

[<HKLM>\SYSTEM\ControlSet001\Services\WiseBootAssistant] 'Start' = '00000002'
[<HKLM>\SYSTEM\ControlSet001\Services\WiseBootAssistant] 'ImagePath' = '%ProgramFiles%\Wise\Wise Care 365\BootTime.exe'

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\net.exe' stop WiseBootAssistant

Изменения в файловой системе:

Создает следующие файлы:

%TEMP%\aut1.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-P8PO5.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-HC8OE.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-QMG13.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-KL9GJ.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-CLQJD.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-I4JKD.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-9NIE5.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-EMGBN.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\is-JTMTC.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\is-4K7OI.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-K1CVM.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-GP3VL.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-C1FCP.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-P26OJ.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-V1EP6.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-JHHGT.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-MKP8R.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-7A8U3.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-3PC1D.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-6ECAT.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-MPIIO.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-OSHJ4.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-23JJC.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-J68BP.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-K2I85.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-DFDQ4.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-K6F24.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-VMGCG.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-C1FGL.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-KMDMO.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-UEPBC.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-ML31P.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-V5573.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-7PAGK.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-2E9VP.tmp
%APPDATA%\Wise Care 365\config.ini
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-8F0CD.tmp
%ProgramFiles%\Wise\Wise Care 365\is-6BG7N.tmp
%ProgramFiles%\Wise\Wise Care 365\is-B2TSI.tmp
%ProgramFiles%\Wise\Wise Care 365\is-JJP50.tmp
%ProgramFiles%\Wise\Wise Care 365\is-DQSGD.tmp
%ProgramFiles%\Wise\Wise Care 365\is-F5SFL.tmp
%ProgramFiles%\Wise\Wise Care 365\is-1K949.tmp
%ProgramFiles%\Wise\Wise Care 365\is-RM6DQ.tmp
%ProgramFiles%\Wise\Wise Care 365\is-6GGB9.tmp
%ALLUSERSPROFILE%\Start Menu\Programs\Wise Care 365\Wise Care 365.lnk
%ALLUSERSPROFILE%\Desktop\Wise Care 365.lnk
%TEMP%\is-EE0BI.tmp\introduce.url
%ProgramFiles%\Wise\Wise Care 365\unins000.msg
%ProgramFiles%\Wise\Wise Care 365\unins000.dat
%ProgramFiles%\Wise\Wise Care 365\is-LEVHJ.tmp
%ProgramFiles%\Wise\Wise Care 365\is-FQEUE.tmp
%ProgramFiles%\Wise\Wise Care 365\is-EE2JD.tmp
%ProgramFiles%\Wise\Wise Care 365\is-8IRN9.tmp
%ProgramFiles%\Wise\Wise Care 365\is-K16VT.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-DO1JK.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-GMUPA.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-IBNQV.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-P40TJ.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-THHDV.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-R4RFV.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-CDU9O.tmp
%ProgramFiles%\Wise\Wise Care 365\is-0CBB8.tmp
%ProgramFiles%\Wise\Wise Care 365\is-4TVIS.tmp
%ProgramFiles%\Wise\Wise Care 365\is-DMIBG.tmp
%ProgramFiles%\Wise\Wise Care 365\is-49E40.tmp
%ProgramFiles%\Wise\Wise Care 365\is-Q4MGK.tmp
%ProgramFiles%\Wise\Wise Care 365\is-JNSB3.tmp
%ProgramFiles%\Wise\Wise Care 365\is-SHCNM.tmp
%ProgramFiles%\Wise\Wise Care 365\is-JDMA0.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-D6LMO.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-S14F4.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-08C94.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-9SL5K.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-6QJOI.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-0CIT2.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-GER4M.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-3TB14.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-LK3UJ.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-SC069.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-JMCE4.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-D4NU7.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-6L8LV.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-06U61.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-BI0VJ.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-IOBDM.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-DOLRD.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-55OPH.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-NLLKD.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-9BOMP.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-6HUR4.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-I1CPK.tmp
%TEMP%\is-OMVKG.tmp\~kdfydwo.tmp
%ProgramFiles%\Wise\Wise Care 365\is-EN3I7.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-DHETO.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-47OAN.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-SF2BP.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-MJ3IA.tmp
%CommonProgramFiles%\~kdfydwo.ibo
%ProgramFiles%\Wise\Wise Care 365\headers\is-2DSP6.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-V0GVS.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-3PF5R.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-8835T.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-0L0HG.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-TRQ3K.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-2T3NJ.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-932QU.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-PD148.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-GPBMO.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-PQU7B.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-Q3VVM.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-3JUPL.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-EN0QM.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-2TQI5.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-TFH2M.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-IPMTJ.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-D9UTO.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-UVJ5M.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-HL6DC.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-7EG5T.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-RNE60.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-9ODGO.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-IL0PK.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-ALQ6C.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-0QNAI.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-AP53O.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-VCMV7.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-H8BAB.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-S9AG1.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-0A6EA.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-IA3TA.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-5K27H.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-30OMQ.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-5BBGG.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-1CTJ5.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-LRVCI.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-PU4BM.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-VQMMS.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-99CE0.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-KM0OU.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-D4L3U.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-BNC06.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-4HS7K.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-TMBUM.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-J3JIE.tmp
%APPDATA%\Wise Care 365\config_tray.ini

Присваивает атрибут 'скрытый' для следующих файлов:

%CommonProgramFiles%\~kdfydwo.ibo

Удаляет следующие файлы:

%TEMP%\aut1.tmp
%TEMP%\is-EE0BI.tmp\introduce.url
%TEMP%\is-OMVKG.tmp\~kdfydwo.tmp

Перемещает следующие файлы:

%ProgramFiles%\Wise\Wise Care 365\is-EN3I7.tmp в %ProgramFiles%\Wise\Wise Care 365\unins000.exe
%ProgramFiles%\Wise\Wise Care 365\Themes\is-V1EP6.tmp в %ProgramFiles%\Wise\Wise Care 365\Themes\halloween-2016.wskn
%ProgramFiles%\Wise\Wise Care 365\Themes\is-P26OJ.tmp в %ProgramFiles%\Wise\Wise Care 365\Themes\halloween-2016.png
%ProgramFiles%\Wise\Wise Care 365\Themes\is-EMGBN.tmp в %ProgramFiles%\Wise\Wise Care 365\Themes\default.wskn
%ProgramFiles%\Wise\Wise Care 365\Themes\is-CLQJD.tmp в %ProgramFiles%\Wise\Wise Care 365\Themes\chinese-new-year-2018.wskn
%ProgramFiles%\Wise\Wise Care 365\Languages\is-KL9GJ.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Vietnamese.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-QMG13.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Ukrainian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-HC8OE.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Turkish.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-P8PO5.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Thai.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-9NIE5.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Swedish(Sweden).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-I4JKD.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Spanish(Spain).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-JHHGT.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Slovenian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-MKP8R.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Slovak.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-7A8U3.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Serbian(Cyrillic).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-ML31P.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Russian.ini
%ProgramFiles%\Wise\Wise Care 365\tools\is-JTMTC.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\toolsv3.txt
%ProgramFiles%\Wise\Wise Care 365\Languages\is-UEPBC.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Romanian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-C1FGL.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Portuguese(Brazil).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-VMGCG.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Polish.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-K6F24.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Persian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-V5573.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Norwegian(Nynorsk).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-DFDQ4.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Norwegian(Bokmal).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-J68BP.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Nepali.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-23JJC.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Kurdish.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-OSHJ4.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Korean.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-MPIIO.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Japanese.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-6ECAT.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Italian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-3PC1D.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Hungarian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-K2I85.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Greek.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-D6LMO.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\German.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-08C94.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Georgian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-KMDMO.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Portuguese(Portugal).ini
%ProgramFiles%\Wise\Wise Care 365\tools\is-4K7OI.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\toolsv3.zip
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-K1CVM.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\AutoShutdown.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-GP3VL.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\DateRecovery.png
%ProgramFiles%\Wise\Wise Care 365\is-Q4MGK.tmp в %ProgramFiles%\Wise\Wise Care 365\AutoUpdate.exe
%ProgramFiles%\Wise\Wise Care 365\is-JNSB3.tmp в %ProgramFiles%\Wise\Wise Care 365\Rate.info
%ProgramFiles%\Wise\Wise Care 365\is-SHCNM.tmp в %ProgramFiles%\Wise\Wise Care 365\skin.ico
%ProgramFiles%\Wise\Wise Care 365\is-K16VT.tmp в %ProgramFiles%\Wise\Wise Care 365\sqlite3.dll
%ProgramFiles%\Wise\Wise Care 365\is-8IRN9.tmp в %ProgramFiles%\Wise\Wise Care 365\UninstallTP.exe
%ProgramFiles%\Wise\Wise Care 365\is-EE2JD.tmp в %ProgramFiles%\Wise\Wise Care 365\WiseBootBooster.exe
%ProgramFiles%\Wise\Wise Care 365\is-RM6DQ.tmp в %ProgramFiles%\Wise\Wise Care 365\WiseDefrag.dll
%ProgramFiles%\Wise\Wise Care 365\is-LEVHJ.tmp в %ProgramFiles%\Wise\Wise Care 365\geo.db
%ProgramFiles%\Wise\Wise Care 365\is-6BG7N.tmp в %ProgramFiles%\Wise\Wise Care 365\WiseEraser.dll
%ProgramFiles%\Wise\Wise Care 365\is-B2TSI.tmp в %ProgramFiles%\Wise\Wise Care 365\DManager.dll
%ProgramFiles%\Wise\Wise Care 365\is-JJP50.tmp в %ProgramFiles%\Wise\Wise Care 365\libeay32.dll
%ProgramFiles%\Wise\Wise Care 365\is-DQSGD.tmp в %ProgramFiles%\Wise\Wise Care 365\ssleay32.dll
%ProgramFiles%\Wise\Wise Care 365\is-F5SFL.tmp в %ProgramFiles%\Wise\Wise Care 365\WiseTray.exe
%ProgramFiles%\Wise\Wise Care 365\is-6GGB9.tmp в %ProgramFiles%\Wise\Wise Care 365\WiseTurbo.exe
%ProgramFiles%\Wise\Wise Care 365\is-49E40.tmp в %ProgramFiles%\Wise\Wise Care 365\License.txt
%ProgramFiles%\Wise\Wise Care 365\is-DMIBG.tmp в %ProgramFiles%\Wise\Wise Care 365\fileshredder.ico
%ProgramFiles%\Wise\Wise Care 365\is-4TVIS.tmp в %ProgramFiles%\Wise\Wise Care 365\DefragOptions.ini
%ProgramFiles%\Wise\Wise Care 365\is-JDMA0.tmp в %ProgramFiles%\Wise\Wise Care 365\BootTime.exe
%ProgramFiles%\Wise\Wise Care 365\is-0CBB8.tmp в %ProgramFiles%\Wise\Wise Care 365\BootPack.wpk
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-R4RFV.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\wrm32.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-THHDV.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\wgb32.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-P40TJ.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\SystemMonitor.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-IBNQV.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\Reminder.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-GMUPA.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\ProgramUninstaller.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-DO1JK.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\MemoryOptimizer.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-CDU9O.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\JetSearch.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-8F0CD.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\Hotkey.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-2E9VP.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\GameBooster.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-S14F4.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\ForceDeleter.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-7PAGK.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\FolderHider.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-C1FCP.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\DuplicateFinder.png
%ProgramFiles%\Wise\Wise Care 365\Languages\is-J3JIE.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\French.ini
%ProgramFiles%\Wise\Wise Care 365\is-1K949.tmp в %ProgramFiles%\Wise\Wise Care 365\WiseCare365.exe
%ProgramFiles%\Wise\Wise Care 365\Languages\is-PQU7B.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Finnish.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-TFH2M.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Belarusian.ini
%ProgramFiles%\Wise\Wise Care 365\headers\is-DOLRD.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g6.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-IOBDM.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g5.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-BI0VJ.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g4.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-06U61.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g3.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-6L8LV.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g2.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-NLLKD.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g1.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-55OPH.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-D4NU7.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f6.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-LK3UJ.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f5.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-3TB14.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f4.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-GER4M.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f3.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-0CIT2.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f2.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-6QJOI.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f1.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-JMCE4.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f0.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-PD148.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-SC069.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\e9.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-6HUR4.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\e7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-I1CPK.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\d7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-2T3NJ.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\d4.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-TRQ3K.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\d3.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-0L0HG.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\d2.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-8835T.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\d1.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-3PF5R.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\c7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-V0GVS.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\c4.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-932QU.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\b5.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-2DSP6.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\a9.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-MJ3IA.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\a7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-SF2BP.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\a6.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-47OAN.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\a2.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-DHETO.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\a1.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-9BOMP.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\e8.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-9SL5K.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g8.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-GPBMO.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h1.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-Q3VVM.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h2.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-VCMV7.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j3.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-D9UTO.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j4.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-UVJ5M.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j6.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-3JUPL.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-EN0QM.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j8.png
%ProgramFiles%\Wise\Wise Care 365\Languages\is-2TQI5.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Azerbaijan(Latin).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-IPMTJ.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Bulgarian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-IL0PK.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Dutch(Nederlands).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-HL6DC.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Catalan.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-0QNAI.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Chinese(Simplified).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-AP53O.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Chinese(Traditional).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-7EG5T.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Czech.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-RNE60.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Danish.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-9ODGO.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Dutch(Belgium).ini
%ProgramFiles%\Wise\Wise Care 365\headers\is-H8BAB.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j1.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-S9AG1.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j0.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-4HS7K.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-BNC06.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i8.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-D4L3U.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-KM0OU.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i6.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-99CE0.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i5.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-VQMMS.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i4.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-TMBUM.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i3.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-PU4BM.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i2.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-1CTJ5.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i1.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-5BBGG.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h8.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-30OMQ.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-5K27H.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h6.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-IA3TA.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h5.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-0A6EA.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h4.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-LRVCI.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h3.png
%ProgramFiles%\Wise\Wise Care 365\Languages\is-ALQ6C.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\English.ini
%ProgramFiles%\Wise\Wise Care 365\is-FQEUE.tmp в %ProgramFiles%\Wise\Wise Care 365\BootLauncher.exe

Другое:

Ищет следующие окна:

ClassName: 'TFrmTrayMain' WindowName: ''
ClassName: 'TFrmWPMain' WindowName: ''
ClassName: 'TFrmMOMain' WindowName: ''

Создает и запускает на исполнение:

'%CommonProgramFiles%\~kdfydwo.ibo' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'%TEMP%\is-OMVKG.tmp\~kdfydwo.tmp' /SL5="$100E0,8269278,131584,%CommonProgramFiles%\~kdfydwo.ibo" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'%ProgramFiles%\Wise\Wise Care 365\BootTime.exe'

Запускает на исполнение:

'<SYSTEM32>\cmd.exe' /c net stop WiseBootAssistant
'<SYSTEM32>\net1.exe' stop WiseBootAssistant

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней