Trojan.MulDrop8.32145

Техническая информация

Для обеспечения автозапуска и распространения:

Создает следующие сервисы:

[<HKLM>\SYSTEM\ControlSet001\Services\WiseBootAssistant] 'Start' = '00000002'
[<HKLM>\SYSTEM\ControlSet001\Services\WiseBootAssistant] 'ImagePath' = '%ProgramFiles%\Wise\Wise Care 365\BootTime.exe'

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\net.exe' stop WiseBootAssistant

Изменения в файловой системе:

Создает следующие файлы:

%TEMP%\aut1.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-I40TE.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-CMLAC.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-MTAG9.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-CR885.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-B5K9R.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-R282P.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-UDK5A.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-H25JI.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\is-RMK2M.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-0RIQI.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-4JIFA.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-0CM96.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-776O1.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-KAD5T.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\is-ED3JI.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-9FLUN.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-0GQTU.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-K6BD6.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-UD0S7.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-U43UF.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-V55O0.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-L4IUT.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-MJI5L.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-R5RHF.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-547SN.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-QBN1D.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-BJQ58.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-B7HPM.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-LBO64.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-UMH3G.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-B0IIN.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-KHSQ9.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-1RQC3.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-HCIS5.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-BSNN7.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-O2QTO.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-F9LHB.tmp
%ProgramFiles%\Wise\Wise Care 365\is-AIL17.tmp
%ProgramFiles%\Wise\Wise Care 365\is-7IE8B.tmp
%ProgramFiles%\Wise\Wise Care 365\is-FGCT3.tmp
%ProgramFiles%\Wise\Wise Care 365\is-FQGR5.tmp
%ProgramFiles%\Wise\Wise Care 365\is-HH20O.tmp
%ProgramFiles%\Wise\Wise Care 365\is-49596.tmp
%ProgramFiles%\Wise\Wise Care 365\is-HO2SL.tmp
%ProgramFiles%\Wise\Wise Care 365\is-RCJ90.tmp
%ALLUSERSPROFILE%\Start Menu\Programs\Wise Care 365\Wise Care 365.lnk
%ALLUSERSPROFILE%\Desktop\Wise Care 365.lnk
%TEMP%\is-L2JVR.tmp\introduce.url
%ProgramFiles%\Wise\Wise Care 365\unins000.msg
%ProgramFiles%\Wise\Wise Care 365\unins000.dat
%ProgramFiles%\Wise\Wise Care 365\is-V0QFE.tmp
%ProgramFiles%\Wise\Wise Care 365\is-EVR1U.tmp
%ProgramFiles%\Wise\Wise Care 365\is-G5EAI.tmp
%ProgramFiles%\Wise\Wise Care 365\is-1E84L.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-HOTQE.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-AG6F4.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-6OQE9.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-6U2TC.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-HMC92.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-SDU4N.tmp
%ProgramFiles%\Wise\Wise Care 365\is-J3EL7.tmp
%ProgramFiles%\Wise\Wise Care 365\is-ART73.tmp
%ProgramFiles%\Wise\Wise Care 365\is-GTPSL.tmp
%ProgramFiles%\Wise\Wise Care 365\is-FHKLO.tmp
%ProgramFiles%\Wise\Wise Care 365\is-MTRLE.tmp
%ProgramFiles%\Wise\Wise Care 365\is-AIBV5.tmp
%ProgramFiles%\Wise\Wise Care 365\is-3187T.tmp
%ProgramFiles%\Wise\Wise Care 365\is-JLJD0.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-J0FU7.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-PF697.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-FNIER.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-GGDL5.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-L5UPJ.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-G4KSU.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-7GR8K.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-HGJQK.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-70GQS.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-GJKRB.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-HISUU.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-TCFPS.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-1H6OG.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-64IVN.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-JNMOO.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-JTEP6.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-D3EPI.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-ELUIO.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-KB0VQ.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-9G29A.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-SJ1AG.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-1NN97.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-J4KT8.tmp
%CommonProgramFiles%\~zhnykgn.ibo
%ProgramFiles%\Wise\Wise Care 365\is-C9AJJ.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-G0AGM.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-U0S5C.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-MIMT4.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-4FH50.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-3B32M.tmp
%TEMP%\is-3B1S3.tmp\~zhnykgn.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-5CE6D.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-VNSSR.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-OTK4V.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-4VJ8P.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-27D43.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-3KDLT.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-3O450.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-B0559.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-TRP5G.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-DBSLA.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-6N826.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-H47KU.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-TL2FF.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-0775V.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-TA61N.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-6LD4Q.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-LRODE.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-P3VMU.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-ETMTJ.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-LGGJ6.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-K5L4D.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-VG8KM.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-DC29A.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-C430N.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-PLH72.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-TE280.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-MGNKR.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-5NOHQ.tmp
%ProgramFiles%\Wise\Wise Care 365\is-AE8I9.tmp
%APPDATA%\Wise Care 365\config.ini
%ProgramFiles%\Wise\Wise Care 365\headers\is-RPSAE.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-UQ3NH.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-KF8NA.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-V5M5G.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-4C7ON.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-BHFM0.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-I7EQN.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-JC72D.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-FQ8DG.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-DHHRM.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-B0QI4.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-1H79I.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-U6L2V.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-0F8NA.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-2AS7A.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-TK5JL.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-M0IBL.tmp
%APPDATA%\Wise Care 365\config_tray.ini

Присваивает атрибут 'скрытый' для следующих файлов:

%CommonProgramFiles%\~zhnykgn.ibo

Удаляет следующие файлы:

%TEMP%\aut1.tmp
%TEMP%\is-L2JVR.tmp\introduce.url
%TEMP%\is-3B1S3.tmp\~zhnykgn.tmp

Перемещает следующие файлы:

%ProgramFiles%\Wise\Wise Care 365\is-C9AJJ.tmp в %ProgramFiles%\Wise\Wise Care 365\unins000.exe
%ProgramFiles%\Wise\Wise Care 365\Languages\is-B0IIN.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Russian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-1RQC3.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Serbian(Cyrillic).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-K6BD6.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Slovak.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-0GQTU.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Slovenian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-B5K9R.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Spanish(Spain).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-9FLUN.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Swedish(Sweden).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-I40TE.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Turkish.ini
%ProgramFiles%\Wise\Wise Care 365\tools\is-RMK2M.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\toolsv3.zip
%ProgramFiles%\Wise\Wise Care 365\Languages\is-CMLAC.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Ukrainian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-MTAG9.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Vietnamese.ini
%ProgramFiles%\Wise\Wise Care 365\Themes\is-CR885.tmp в %ProgramFiles%\Wise\Wise Care 365\Themes\chinese-new-year-2018.wskn
%ProgramFiles%\Wise\Wise Care 365\Themes\is-R282P.tmp в %ProgramFiles%\Wise\Wise Care 365\Themes\default.wskn
%ProgramFiles%\Wise\Wise Care 365\Themes\is-776O1.tmp в %ProgramFiles%\Wise\Wise Care 365\Themes\halloween-2016.png
%ProgramFiles%\Wise\Wise Care 365\Themes\is-H25JI.tmp в %ProgramFiles%\Wise\Wise Care 365\Themes\halloween-2016.wskn
%ProgramFiles%\Wise\Wise Care 365\Languages\is-UDK5A.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Thai.ini
%ProgramFiles%\Wise\Wise Care 365\tools\is-ED3JI.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\toolsv3.txt
%ProgramFiles%\Wise\Wise Care 365\Languages\is-B7HPM.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Portuguese(Brazil).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-BJQ58.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Polish.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-QBN1D.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Persian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-KHSQ9.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Norwegian(Nynorsk).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-547SN.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Norwegian(Bokmal).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-MJI5L.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Nepali.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-L4IUT.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Kurdish.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-V55O0.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Korean.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-U43UF.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Japanese.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-UD0S7.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Italian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-BSNN7.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Hungarian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-R5RHF.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Greek.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-HCIS5.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\German.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-GGDL5.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Georgian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-UMH3G.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Romanian.ini
%ProgramFiles%\Wise\Wise Care 365\headers\is-TK5JL.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i3.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-0RIQI.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\AutoShutdown.png
%ProgramFiles%\Wise\Wise Care 365\is-RCJ90.tmp в %ProgramFiles%\Wise\Wise Care 365\WiseTurbo.exe
%ProgramFiles%\Wise\Wise Care 365\is-MTRLE.tmp в %ProgramFiles%\Wise\Wise Care 365\License.txt
%ProgramFiles%\Wise\Wise Care 365\is-AIBV5.tmp в %ProgramFiles%\Wise\Wise Care 365\AutoUpdate.exe
%ProgramFiles%\Wise\Wise Care 365\is-3187T.tmp в %ProgramFiles%\Wise\Wise Care 365\Rate.info
%ProgramFiles%\Wise\Wise Care 365\is-JLJD0.tmp в %ProgramFiles%\Wise\Wise Care 365\skin.ico
%ProgramFiles%\Wise\Wise Care 365\is-1E84L.tmp в %ProgramFiles%\Wise\Wise Care 365\sqlite3.dll
%ProgramFiles%\Wise\Wise Care 365\is-AE8I9.tmp в %ProgramFiles%\Wise\Wise Care 365\UninstallTP.exe
%ProgramFiles%\Wise\Wise Care 365\is-49596.tmp в %ProgramFiles%\Wise\Wise Care 365\WiseCare365.exe
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-4JIFA.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\DateRecovery.png
%ProgramFiles%\Wise\Wise Care 365\is-HO2SL.tmp в %ProgramFiles%\Wise\Wise Care 365\WiseDefrag.dll
%ProgramFiles%\Wise\Wise Care 365\is-AIL17.tmp в %ProgramFiles%\Wise\Wise Care 365\WiseEraser.dll
%ProgramFiles%\Wise\Wise Care 365\is-7IE8B.tmp в %ProgramFiles%\Wise\Wise Care 365\DManager.dll
%ProgramFiles%\Wise\Wise Care 365\is-FGCT3.tmp в %ProgramFiles%\Wise\Wise Care 365\libeay32.dll
%ProgramFiles%\Wise\Wise Care 365\is-FQGR5.tmp в %ProgramFiles%\Wise\Wise Care 365\ssleay32.dll
%ProgramFiles%\Wise\Wise Care 365\is-HH20O.tmp в %ProgramFiles%\Wise\Wise Care 365\WiseTray.exe
%ProgramFiles%\Wise\Wise Care 365\is-FHKLO.tmp в %ProgramFiles%\Wise\Wise Care 365\fileshredder.ico
%ProgramFiles%\Wise\Wise Care 365\is-GTPSL.tmp в %ProgramFiles%\Wise\Wise Care 365\DefragOptions.ini
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-0CM96.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\DuplicateFinder.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-AG6F4.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\ProgramUninstaller.png
%ProgramFiles%\Wise\Wise Care 365\is-ART73.tmp в %ProgramFiles%\Wise\Wise Care 365\BootTime.exe
%ProgramFiles%\Wise\Wise Care 365\is-J3EL7.tmp в %ProgramFiles%\Wise\Wise Care 365\BootPack.wpk
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-SDU4N.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\wrm32.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-HMC92.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\wgb32.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-6U2TC.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\SystemMonitor.png
%ProgramFiles%\Wise\Wise Care 365\Languages\is-LBO64.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Portuguese(Portugal).ini
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-6OQE9.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\Reminder.png
%ProgramFiles%\Wise\Wise Care 365\Languages\is-L5UPJ.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\French.ini
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-PF697.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\JetSearch.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-FNIER.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\Hotkey.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-J0FU7.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\GameBooster.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-O2QTO.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\ForceDeleter.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-KAD5T.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\FolderHider.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-F9LHB.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\MemoryOptimizer.png
%ProgramFiles%\Wise\Wise Care 365\Languages\is-G4KSU.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Finnish.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-PLH72.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\English.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-C430N.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Dutch(Nederlands).ini
%ProgramFiles%\Wise\Wise Care 365\headers\is-HISUU.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\e9.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-ELUIO.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g6.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-D3EPI.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g5.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-JTEP6.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g4.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-JNMOO.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g3.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-SJ1AG.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g2.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-64IVN.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g1.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-KB0VQ.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-TCFPS.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f6.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-GJKRB.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f5.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-70GQS.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f4.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-HGJQK.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f3.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-7GR8K.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f2.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-1H6OG.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f1.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-DBSLA.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f0.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-9G29A.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\e8.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-VNSSR.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\c7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-1NN97.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\e7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-J4KT8.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\d7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-3KDLT.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\d4.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-27D43.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\d3.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-4VJ8P.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\d2.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-OTK4V.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\d1.png
%ProgramFiles%\Wise\Wise Care 365\is-V0QFE.tmp в %ProgramFiles%\Wise\Wise Care 365\geo.db
%ProgramFiles%\Wise\Wise Care 365\headers\is-B0559.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\c4.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-5CE6D.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\b5.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-3B32M.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\a9.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-4FH50.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\a7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-MIMT4.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\a6.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-U0S5C.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\a2.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-G0AGM.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\a1.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-TRP5G.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g8.png
%ProgramFiles%\Wise\Wise Care 365\is-G5EAI.tmp в %ProgramFiles%\Wise\Wise Care 365\WiseBootBooster.exe
%ProgramFiles%\Wise\Wise Care 365\headers\is-6N826.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h1.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-2AS7A.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j.png
%ProgramFiles%\Wise\Wise Care 365\Languages\is-6LD4Q.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Belarusian.ini
%ProgramFiles%\Wise\Wise Care 365\headers\is-TE280.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j4.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-H47KU.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j6.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-5NOHQ.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-TL2FF.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j8.png
%ProgramFiles%\Wise\Wise Care 365\Languages\is-0775V.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Arabic.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-TA61N.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Azerbaijan(Latin).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-LRODE.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Bulgarian.ini
%ProgramFiles%\Wise\Wise Care 365\headers\is-3O450.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g7.png
%ProgramFiles%\Wise\Wise Care 365\Languages\is-P3VMU.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Catalan.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-ETMTJ.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Chinese(Simplified).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-LGGJ6.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Chinese(Traditional).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-K5L4D.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Czech.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-VG8KM.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Danish.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-DC29A.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Dutch(Belgium).ini
%ProgramFiles%\Wise\Wise Care 365\headers\is-M0IBL.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j3.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-HOTQE.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j1.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-0F8NA.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i8.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-U6L2V.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-1H79I.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i6.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-B0QI4.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i5.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-DHHRM.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i4.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-FQ8DG.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i2.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-JC72D.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h3.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-MGNKR.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h2.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-BHFM0.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h8.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-4C7ON.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-V5M5G.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h6.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-KF8NA.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h5.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-UQ3NH.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h4.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-RPSAE.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j0.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-I7EQN.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i1.png
%ProgramFiles%\Wise\Wise Care 365\is-EVR1U.tmp в %ProgramFiles%\Wise\Wise Care 365\BootLauncher.exe

Другое:

Ищет следующие окна:

ClassName: 'TFrmTrayMain' WindowName: ''
ClassName: 'TFrmWPMain' WindowName: ''
ClassName: 'TFrmMOMain' WindowName: ''

Создает и запускает на исполнение:

'%CommonProgramFiles%\~zhnykgn.ibo' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'%TEMP%\is-3B1S3.tmp\~zhnykgn.tmp' /SL5="$100E0,8310676,131584,%CommonProgramFiles%\~zhnykgn.ibo" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'%ProgramFiles%\Wise\Wise Care 365\BootTime.exe'

Запускает на исполнение:

'<SYSTEM32>\cmd.exe' /c net stop WiseBootAssistant
'<SYSTEM32>\net1.exe' stop WiseBootAssistant

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней