Trojan.MulDrop8.32431

Техническая информация

Для обеспечения автозапуска и распространения:

Создает следующие сервисы:

[<HKLM>\SYSTEM\ControlSet001\Services\WiseBootAssistant] 'Start' = '00000002'
[<HKLM>\SYSTEM\ControlSet001\Services\WiseBootAssistant] 'ImagePath' = '%ProgramFiles%\Wise\Wise Care 365\BootTime.exe'

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\net.exe' stop WiseBootAssistant

Изменения в файловой системе:

Создает следующие файлы:

%TEMP%\aut1.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-OLEK5.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-58ALU.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-JK9C4.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-S96T9.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-LPMUA.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-AJ6JU.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-5GOPE.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-O6SRQ.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\is-5SEHI.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\is-JHDV2.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\is-HMC7Q.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-48HDO.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-O4OEL.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-4EF8G.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-4HR64.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-HMBDM.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-DAB6A.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-TTD4S.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-9A166.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-6F6IA.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-50O58.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-ED9J7.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-DB85B.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-FHDT5.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-56C76.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-U7J6H.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-P49B5.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-ADSP7.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-SHADQ.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-VPKS1.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-T6G7C.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-134L8.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-P50GJ.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-J453F.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-DKRSR.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-H4BHS.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-KRMAA.tmp
%ProgramFiles%\Wise\Wise Care 365\is-K14DH.tmp
%ProgramFiles%\Wise\Wise Care 365\is-VDUVS.tmp
%ProgramFiles%\Wise\Wise Care 365\is-FJJKO.tmp
%ProgramFiles%\Wise\Wise Care 365\is-HCHRG.tmp
%ProgramFiles%\Wise\Wise Care 365\is-7V3KD.tmp
%ProgramFiles%\Wise\Wise Care 365\is-38A58.tmp
%ProgramFiles%\Wise\Wise Care 365\is-5GMUN.tmp
%ProgramFiles%\Wise\Wise Care 365\is-NBRO8.tmp
%ProgramFiles%\Wise\Wise Care 365\is-KBJR4.tmp
%ProgramFiles%\Wise\Wise Care 365\is-FDKPP.tmp
%ALLUSERSPROFILE%\Start Menu\Programs\Wise Care 365\Wise Care 365.lnk
%ALLUSERSPROFILE%\Desktop\Wise Care 365.lnk
%TEMP%\is-MUV36.tmp\introduce.url
%ProgramFiles%\Wise\Wise Care 365\unins000.msg
%ProgramFiles%\Wise\Wise Care 365\unins000.dat
%ProgramFiles%\Wise\Wise Care 365\is-N3SRH.tmp
%ProgramFiles%\Wise\Wise Care 365\is-B5R5S.tmp
%ProgramFiles%\Wise\Wise Care 365\is-GHHJP.tmp
%ProgramFiles%\Wise\Wise Care 365\is-SHM5O.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-2P2GP.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-NBNEA.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-ICVK9.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-K1EDA.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-LHTIN.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-D7BN0.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-JJ5QM.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-97HKC.tmp
%ProgramFiles%\Wise\Wise Care 365\is-6R2P1.tmp
%ProgramFiles%\Wise\Wise Care 365\is-GDF5K.tmp
%ProgramFiles%\Wise\Wise Care 365\is-BQ6ES.tmp
%ProgramFiles%\Wise\Wise Care 365\is-M01G8.tmp
%ProgramFiles%\Wise\Wise Care 365\is-SNHNG.tmp
%ProgramFiles%\Wise\Wise Care 365\is-EONSV.tmp
%ProgramFiles%\Wise\Wise Care 365\is-527UI.tmp
%APPDATA%\Wise Care 365\config.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-F0A48.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-1OETT.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-PUE1T.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-HCP72.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-DOOKM.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-RPK73.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-JCUAC.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-S7PV0.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-T60E2.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-0T366.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-NTPRE.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-JRS53.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-JQMOT.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-O1O27.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-9JJFV.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-NTDH2.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-ENDJS.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-13U1C.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-FMS1S.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-HFD9G.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-AN242.tmp
%TEMP%\is-QK17A.tmp\~tiymthu.tmp
%ProgramFiles%\Wise\Wise Care 365\is-AJD8I.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-3CNEM.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-IU35L.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-NJ1HL.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-IJKC1.tmp
%CommonProgramFiles%\~tiymthu.ibo
%ProgramFiles%\Wise\Wise Care 365\headers\is-9K172.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-F8CH4.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-MHKK9.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-5LH79.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-I0CMI.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-K3SK9.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-0GKV1.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-68J2H.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-15C3Q.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-LKR3P.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-NISET.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-0FQUM.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-K6BUM.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-S81HR.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-8PORS.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-MJE1B.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-EK2ST.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-L1A7U.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-GUI5A.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-L6HNI.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-H2FF0.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-TMBHF.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-BO501.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-G3DK4.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-4QFGO.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-Q7IP7.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-HBC1O.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-V57OM.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-EQFOE.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-OAOHU.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-KIRSJ.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-T2I6U.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-8B8ED.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-IK9AT.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-SKEDN.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-OGJ10.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-PJ9RO.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-9H34O.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-C2D1S.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-MV04P.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-B5F9L.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-EPHH5.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-JNL2T.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-J38P1.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-4BSPP.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-8Q0OS.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-CFV3O.tmp
%APPDATA%\Wise Care 365\config_tray.ini

Присваивает атрибут 'скрытый' для следующих файлов:

%CommonProgramFiles%\~tiymthu.ibo

Удаляет следующие файлы:

%TEMP%\aut1.tmp
%TEMP%\is-MUV36.tmp\introduce.url
%TEMP%\is-QK17A.tmp\~tiymthu.tmp

Перемещает следующие файлы:

%ProgramFiles%\Wise\Wise Care 365\is-AJD8I.tmp в %ProgramFiles%\Wise\Wise Care 365\unins000.exe
%ProgramFiles%\Wise\Wise Care 365\Languages\is-TTD4S.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Serbian(Cyrillic).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-DAB6A.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Slovak.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-HMBDM.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Slovenian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-AJ6JU.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Spanish(Spain).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-5GOPE.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Swedish(Sweden).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-OLEK5.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Thai.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-JK9C4.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Ukrainian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-DB85B.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Kurdish.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-S96T9.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Vietnamese.ini
%ProgramFiles%\Wise\Wise Care 365\Themes\is-LPMUA.tmp в %ProgramFiles%\Wise\Wise Care 365\Themes\chinese-new-year-2018.wskn
%ProgramFiles%\Wise\Wise Care 365\Themes\is-O6SRQ.tmp в %ProgramFiles%\Wise\Wise Care 365\Themes\default.wskn
%ProgramFiles%\Wise\Wise Care 365\Themes\is-4EF8G.tmp в %ProgramFiles%\Wise\Wise Care 365\Themes\halloween-2016.png
%ProgramFiles%\Wise\Wise Care 365\Themes\is-4HR64.tmp в %ProgramFiles%\Wise\Wise Care 365\Themes\halloween-2016.wskn
%ProgramFiles%\Wise\Wise Care 365\tools\is-5SEHI.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\toolsv3.txt
%ProgramFiles%\Wise\Wise Care 365\Languages\is-134L8.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Russian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-T6G7C.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Romanian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-VPKS1.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Portuguese(Portugal).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-SHADQ.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Portuguese(Brazil).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-ADSP7.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Polish.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-P49B5.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Persian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-P50GJ.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Norwegian(Nynorsk).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-U7J6H.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Norwegian(Bokmal).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-FHDT5.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Nepali.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-58ALU.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Turkish.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-ED9J7.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Korean.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-50O58.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Japanese.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-6F6IA.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Italian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-9A166.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Hungarian.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-56C76.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Greek.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-F0A48.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\German.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-1OETT.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Georgian.ini
%ProgramFiles%\Wise\Wise Care 365\tools\is-JHDV2.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\toolsv3.zip
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-K1EDA.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\ProgramUninstaller.png
%ProgramFiles%\Wise\Wise Care 365\is-KBJR4.tmp в %ProgramFiles%\Wise\Wise Care 365\geo.db
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-O4OEL.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\DateRecovery.png
%ProgramFiles%\Wise\Wise Care 365\is-EONSV.tmp в %ProgramFiles%\Wise\Wise Care 365\AutoUpdate.exe
%ProgramFiles%\Wise\Wise Care 365\is-527UI.tmp в %ProgramFiles%\Wise\Wise Care 365\Rate.info
%ProgramFiles%\Wise\Wise Care 365\is-SHM5O.tmp в %ProgramFiles%\Wise\Wise Care 365\skin.ico
%ProgramFiles%\Wise\Wise Care 365\is-B5R5S.tmp в %ProgramFiles%\Wise\Wise Care 365\sqlite3.dll
%ProgramFiles%\Wise\Wise Care 365\is-GHHJP.tmp в %ProgramFiles%\Wise\Wise Care 365\UninstallTP.exe
%ProgramFiles%\Wise\Wise Care 365\is-N3SRH.tmp в %ProgramFiles%\Wise\Wise Care 365\WiseBootBooster.exe
%ProgramFiles%\Wise\Wise Care 365\is-VDUVS.tmp в %ProgramFiles%\Wise\Wise Care 365\WiseDefrag.dll
%ProgramFiles%\Wise\Wise Care 365\tools\is-HMC7Q.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\toolsv5.txt
%ProgramFiles%\Wise\Wise Care 365\is-FJJKO.tmp в %ProgramFiles%\Wise\Wise Care 365\WiseEraser.dll
%ProgramFiles%\Wise\Wise Care 365\is-HCHRG.tmp в %ProgramFiles%\Wise\Wise Care 365\DManager.dll
%ProgramFiles%\Wise\Wise Care 365\is-7V3KD.tmp в %ProgramFiles%\Wise\Wise Care 365\libeay32.dll
%ProgramFiles%\Wise\Wise Care 365\is-38A58.tmp в %ProgramFiles%\Wise\Wise Care 365\ssleay32.dll
%ProgramFiles%\Wise\Wise Care 365\is-5GMUN.tmp в %ProgramFiles%\Wise\Wise Care 365\WiseTray.exe
%ProgramFiles%\Wise\Wise Care 365\is-NBRO8.tmp в %ProgramFiles%\Wise\Wise Care 365\WiseTurbo.exe
%ProgramFiles%\Wise\Wise Care 365\is-SNHNG.tmp в %ProgramFiles%\Wise\Wise Care 365\License.txt
%ProgramFiles%\Wise\Wise Care 365\is-M01G8.tmp в %ProgramFiles%\Wise\Wise Care 365\fileshredder.ico
%ProgramFiles%\Wise\Wise Care 365\is-BQ6ES.tmp в %ProgramFiles%\Wise\Wise Care 365\DefragOptions.ini
%ProgramFiles%\Wise\Wise Care 365\is-GDF5K.tmp в %ProgramFiles%\Wise\Wise Care 365\BootTime.exe
%ProgramFiles%\Wise\Wise Care 365\is-6R2P1.tmp в %ProgramFiles%\Wise\Wise Care 365\BootPack.wpk
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-97HKC.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\wrm32.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-JJ5QM.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\wgb32.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-D7BN0.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\SystemMonitor.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-LHTIN.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\Reminder.png
%ProgramFiles%\Wise\Wise Care 365\Languages\is-PUE1T.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\French.ini
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-ICVK9.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\MemoryOptimizer.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-NBNEA.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\JetSearch.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-2P2GP.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\Hotkey.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-KRMAA.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\GameBooster.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-H4BHS.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\ForceDeleter.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-DKRSR.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\FolderHider.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-J453F.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\DuplicateFinder.png
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-48HDO.tmp в %ProgramFiles%\Wise\Wise Care 365\tools\img\AutoShutdown.png
%ProgramFiles%\Wise\Wise Care 365\is-K14DH.tmp в %ProgramFiles%\Wise\Wise Care 365\WiseCare365.exe
%ProgramFiles%\Wise\Wise Care 365\Languages\is-CFV3O.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Finnish.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-L1A7U.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Belarusian.ini
%ProgramFiles%\Wise\Wise Care 365\headers\is-HCP72.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f1.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-DOOKM.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f2.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-RPK73.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f3.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-JCUAC.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f4.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-S7PV0.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f5.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-NTPRE.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f6.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-13U1C.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g1.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-MHKK9.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\c7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-JRS53.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g2.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-JQMOT.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g3.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-O1O27.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g4.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-9JJFV.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g5.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-NTDH2.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g6.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-15C3Q.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-0T366.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f0.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-T60E2.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\e9.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-FMS1S.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\e8.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-HFD9G.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\e7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-AN242.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\d7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-0GKV1.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\d4.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-K3SK9.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\d3.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-I0CMI.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\d2.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-5LH79.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\d1.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-ENDJS.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\f7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-F8CH4.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\c4.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-68J2H.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\b5.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-9K172.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\a9.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-IJKC1.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\a7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-NJ1HL.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\a6.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-IU35L.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\a2.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-3CNEM.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\a1.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-LKR3P.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\g8.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-MV04P.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i3.png
%ProgramFiles%\Wise\Wise Care 365\Languages\is-Q7IP7.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Dutch(Nederlands).ini
%ProgramFiles%\Wise\Wise Care 365\headers\is-T2I6U.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h3.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-V57OM.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j4.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-K6BUM.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j6.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-S81HR.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-8PORS.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j8.png
%ProgramFiles%\Wise\Wise Care 365\Languages\is-MJE1B.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Arabic.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-EK2ST.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Azerbaijan(Latin).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-GUI5A.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Bulgarian.ini
%ProgramFiles%\Wise\Wise Care 365\headers\is-NISET.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h1.png
%ProgramFiles%\Wise\Wise Care 365\Languages\is-L6HNI.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Catalan.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-H2FF0.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Chinese(Simplified).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-TMBHF.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Chinese(Traditional).ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-BO501.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Czech.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-G3DK4.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Danish.ini
%ProgramFiles%\Wise\Wise Care 365\Languages\is-4QFGO.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\Dutch(Belgium).ini
%ProgramFiles%\Wise\Wise Care 365\headers\is-OAOHU.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j3.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-EQFOE.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j1.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-KIRSJ.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j0.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-8Q0OS.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\j.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-4BSPP.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i8.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-J38P1.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-JNL2T.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i6.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-EPHH5.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i5.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-B5F9L.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i4.png
%ProgramFiles%\Wise\Wise Care 365\Languages\is-HBC1O.tmp в %ProgramFiles%\Wise\Wise Care 365\Languages\English.ini
%ProgramFiles%\Wise\Wise Care 365\headers\is-C2D1S.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i2.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-9H34O.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\i1.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-PJ9RO.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h8.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-OGJ10.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h7.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-SKEDN.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h6.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-IK9AT.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h5.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-8B8ED.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h4.png
%ProgramFiles%\Wise\Wise Care 365\headers\is-0FQUM.tmp в %ProgramFiles%\Wise\Wise Care 365\headers\h2.png
%ProgramFiles%\Wise\Wise Care 365\is-FDKPP.tmp в %ProgramFiles%\Wise\Wise Care 365\BootLauncher.exe

Другое:

Ищет следующие окна:

ClassName: 'TFrmTrayMain' WindowName: ''
ClassName: 'TFrmWPMain' WindowName: ''
ClassName: 'TFrmMOMain' WindowName: ''

Создает и запускает на исполнение:

'%CommonProgramFiles%\~tiymthu.ibo' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'%TEMP%\is-QK17A.tmp\~tiymthu.tmp' /SL5="$100E0,8367423,131584,%CommonProgramFiles%\~tiymthu.ibo" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'%ProgramFiles%\Wise\Wise Care 365\BootTime.exe'

Запускает на исполнение:

'<SYSTEM32>\cmd.exe' /c net stop WiseBootAssistant
'<SYSTEM32>\net1.exe' stop WiseBootAssistant

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней