Trojan.Hosts.46559

Техническая информация

Для обеспечения автозапуска и распространения

Создает следующие сервисы

[<HKLM>\System\CurrentControlSet\Services\WiseBootAssistant] 'Start' = '00000002'
[<HKLM>\System\CurrentControlSet\Services\WiseBootAssistant] 'ImagePath' = '%ProgramFiles%\Wise\Wise Care 365\BootTime.exe'

Вредоносные функции

Запускает на исполнение

'<SYSTEM32>\taskkill.exe' /f /im WiseCare365.exe

Изменения в файловой системе

Создает следующие файлы

%TEMP%\aut1.tmp
%ProgramFiles%\wise\wise care 365\languages\is-esiae.tmp
%ProgramFiles%\wise\wise care 365\languages\is-nnj6i.tmp
%ProgramFiles%\wise\wise care 365\languages\is-c4a5g.tmp
%ProgramFiles%\wise\wise care 365\languages\is-3q1rc.tmp
%ProgramFiles%\wise\wise care 365\languages\is-6ooh0.tmp
%ProgramFiles%\wise\wise care 365\languages\is-4a95f.tmp
%ProgramFiles%\wise\wise care 365\languages\is-vbl48.tmp
%ProgramFiles%\wise\wise care 365\languages\is-0sj6c.tmp
%ProgramFiles%\wise\wise care 365\tools\is-r731u.tmp
%ProgramFiles%\wise\wise care 365\tools\is-dr5a4.tmp
%ProgramFiles%\wise\wise care 365\tools\img\is-1esta.tmp
%ProgramFiles%\wise\wise care 365\tools\img\is-egogi.tmp
%ProgramFiles%\wise\wise care 365\tools\img\is-jh6h1.tmp
%ProgramFiles%\wise\wise care 365\languages\is-2kevh.tmp
%ProgramFiles%\wise\wise care 365\themes\is-fpi4i.tmp
%ProgramFiles%\wise\wise care 365\languages\is-8slrv.tmp
%ProgramFiles%\wise\wise care 365\languages\is-nguug.tmp
%ProgramFiles%\wise\wise care 365\languages\is-lbq2f.tmp
%ProgramFiles%\wise\wise care 365\languages\is-qioqi.tmp
%ProgramFiles%\wise\wise care 365\languages\is-o4vih.tmp
%ProgramFiles%\wise\wise care 365\languages\is-72b9j.tmp
%ProgramFiles%\wise\wise care 365\languages\is-m7vp3.tmp
%ProgramFiles%\wise\wise care 365\languages\is-j6fjs.tmp
%ProgramFiles%\wise\wise care 365\languages\is-3vls0.tmp
%ProgramFiles%\wise\wise care 365\languages\is-d4da7.tmp
%ProgramFiles%\wise\wise care 365\languages\is-lbgfs.tmp
%ProgramFiles%\wise\wise care 365\languages\is-2sffb.tmp
%ProgramFiles%\wise\wise care 365\languages\is-hmg0f.tmp
%ProgramFiles%\wise\wise care 365\languages\is-s4pd8.tmp
%ProgramFiles%\wise\wise care 365\languages\is-48i1f.tmp
%ProgramFiles%\wise\wise care 365\languages\is-i55bq.tmp
%ProgramFiles%\wise\wise care 365\languages\is-3i6pn.tmp
%ProgramFiles%\wise\wise care 365\languages\is-pv6bj.tmp
%ProgramFiles%\wise\wise care 365\tools\img\is-7f8kj.tmp
%ProgramFiles%\wise\wise care 365\tools\img\is-06e45.tmp
%APPDATA%\wise care 365\config_tray.ini
%ProgramFiles%\wise\wise care 365\tools\img\is-qlom0.tmp
%ProgramFiles%\wise\wise care 365\is-07bi4.tmp
%ProgramFiles%\wise\wise care 365\is-vqpic.tmp
%ProgramFiles%\wise\wise care 365\is-d3qqs.tmp
%ProgramFiles%\wise\wise care 365\is-i7h9k.tmp
%TEMP%\is-58497.tmp\is-hmq8h.tmp
%ProgramFiles%\wise\wise care 365\is-dhim2.tmp
%ProgramFiles%\wise\wise care 365\is-ebreh.tmp
%ALLUSERSPROFILE%\start menu\programs\wise care 365\wise care 365.lnk
%ProgramFiles%\wise\wise care 365\unins000.msg
%ProgramFiles%\wise\wise care 365\unins000.dat
%TEMP%\aut2.tmp
%ProgramFiles%\wise\wise care 365\languages\hebrew.ini
%APPDATA%\wise care 365\config.ini
%ALLUSERSPROFILE%\desktop\wise care 365.lnk
%TEMP%\is-58497.tmp\introduce.url
%ProgramFiles%\wise\wise care 365\is-37gp7.tmp
%ProgramFiles%\wise\wise care 365\is-oel5n.tmp
%ProgramFiles%\wise\wise care 365\is-quubr.tmp
%ProgramFiles%\wise\wise care 365\tools\img\is-fitv7.tmp
%ProgramFiles%\wise\wise care 365\is-eioo3.tmp
%ProgramFiles%\wise\wise care 365\is-bueck.tmp
%ProgramFiles%\wise\wise care 365\is-mnhck.tmp
%ProgramFiles%\wise\wise care 365\is-8fqar.tmp
%ProgramFiles%\wise\wise care 365\is-8lgp3.tmp
%ProgramFiles%\wise\wise care 365\tools\img\is-e21sg.tmp
%ProgramFiles%\wise\wise care 365\is-3epkl.tmp
%ProgramFiles%\wise\wise care 365\is-dne96.tmp
%ProgramFiles%\wise\wise care 365\is-n177u.tmp
%ProgramFiles%\wise\wise care 365\is-9s7hq.tmp
%ProgramFiles%\wise\wise care 365\is-le2kf.tmp
%ProgramFiles%\wise\wise care 365\is-gmho3.tmp
%ProgramFiles%\wise\wise care 365\is-2bbpb.tmp
%ProgramFiles%\wise\wise care 365\is-rp93m.tmp
%ProgramFiles%\wise\wise care 365\languages\is-sgudj.tmp
%ProgramFiles%\wise\wise care 365\tools\img\is-2q7cl.tmp
%ProgramFiles%\wise\wise care 365\languages\is-gtseb.tmp
%ProgramFiles%\wise\wise care 365\headers\is-ou30s.tmp
%ProgramFiles%\wise\wise care 365\headers\is-lapun.tmp
%ProgramFiles%\wise\wise care 365\headers\is-qp3kj.tmp
%ProgramFiles%\wise\wise care 365\headers\is-47vm4.tmp
%ProgramFiles%\wise\wise care 365\headers\is-uje30.tmp
%ProgramFiles%\wise\wise care 365\headers\is-kv8tn.tmp
%ProgramFiles%\wise\wise care 365\headers\is-akskf.tmp
%ProgramFiles%\wise\wise care 365\headers\is-3mbbq.tmp
%ProgramFiles%\wise\wise care 365\headers\is-ipl6h.tmp
%ProgramFiles%\wise\wise care 365\headers\is-b2jj7.tmp
%ProgramFiles%\wise\wise care 365\headers\is-ljhp2.tmp
%ProgramFiles%\wise\wise care 365\headers\is-src2i.tmp
%ProgramFiles%\wise\wise care 365\headers\is-hm8f8.tmp
%ProgramFiles%\wise\wise care 365\headers\is-n4r10.tmp
%ProgramFiles%\wise\wise care 365\headers\is-b4p2t.tmp
%ProgramFiles%\wise\wise care 365\headers\is-fol1t.tmp
%ProgramFiles%\wise\wise care 365\headers\is-snkef.tmp
%ProgramFiles%\wise\wise care 365\headers\is-q49og.tmp
%ProgramFiles%\wise\wise care 365\headers\is-jmi9i.tmp
%TEMP%\is-l6ilb.tmp\~bdrdsle.tmp
%ProgramFiles%\wise\wise care 365\is-s4oea.tmp
%ProgramFiles%\wise\wise care 365\headers\is-uclh1.tmp
%ProgramFiles%\wise\wise care 365\headers\is-e18ct.tmp
%ProgramFiles%\wise\wise care 365\headers\is-5vlvh.tmp
%ProgramFiles%\wise\wise care 365\headers\is-ose0t.tmp
%CommonProgramFiles%\~bdrdsle.ibo
%ProgramFiles%\wise\wise care 365\headers\is-rfisu.tmp
%ProgramFiles%\wise\wise care 365\headers\is-hstmm.tmp
%ProgramFiles%\wise\wise care 365\headers\is-hjs7k.tmp
%ProgramFiles%\wise\wise care 365\headers\is-jhvth.tmp
%ProgramFiles%\wise\wise care 365\headers\is-eahh9.tmp
%ProgramFiles%\wise\wise care 365\headers\is-itdjd.tmp
%ProgramFiles%\wise\wise care 365\headers\is-qrlq7.tmp
%ProgramFiles%\wise\wise care 365\headers\is-itijb.tmp
%ProgramFiles%\wise\wise care 365\headers\is-vgmku.tmp
%ProgramFiles%\wise\wise care 365\headers\is-kbk5q.tmp
%ProgramFiles%\wise\wise care 365\languages\is-5kb38.tmp
%ProgramFiles%\wise\wise care 365\headers\is-rlicp.tmp
%ProgramFiles%\wise\wise care 365\headers\is-e3o20.tmp
%ProgramFiles%\wise\wise care 365\headers\is-9de46.tmp
%ProgramFiles%\wise\wise care 365\languages\is-ib00e.tmp
%ProgramFiles%\wise\wise care 365\languages\is-9pj3r.tmp
%ProgramFiles%\wise\wise care 365\languages\is-96r45.tmp
%ProgramFiles%\wise\wise care 365\headers\is-nlb0t.tmp
%ProgramFiles%\wise\wise care 365\headers\is-bfeb7.tmp
%ProgramFiles%\wise\wise care 365\languages\is-4lli0.tmp
%ProgramFiles%\wise\wise care 365\languages\is-fg75l.tmp
%ProgramFiles%\wise\wise care 365\languages\is-lf4ce.tmp
%ProgramFiles%\wise\wise care 365\languages\is-8q4nj.tmp
%ProgramFiles%\wise\wise care 365\languages\is-0kltl.tmp
%ProgramFiles%\wise\wise care 365\languages\is-d1137.tmp
%ProgramFiles%\wise\wise care 365\languages\is-8itkd.tmp
%ProgramFiles%\wise\wise care 365\languages\is-ma1io.tmp
%ProgramFiles%\wise\wise care 365\headers\is-kkin9.tmp
%ProgramFiles%\wise\wise care 365\headers\is-hd3md.tmp
%ProgramFiles%\wise\wise care 365\headers\is-3up73.tmp
%ProgramFiles%\wise\wise care 365\headers\is-6sddj.tmp
%ProgramFiles%\wise\wise care 365\headers\is-odtkb.tmp
%ProgramFiles%\wise\wise care 365\headers\is-s5d0b.tmp
%ProgramFiles%\wise\wise care 365\headers\is-ncpfl.tmp
%ProgramFiles%\wise\wise care 365\headers\is-h6tsd.tmp
%ProgramFiles%\wise\wise care 365\headers\is-krpth.tmp
%ProgramFiles%\wise\wise care 365\headers\is-hsrms.tmp
%ProgramFiles%\wise\wise care 365\headers\is-f8c9d.tmp
%ProgramFiles%\wise\wise care 365\headers\is-lc855.tmp
%ProgramFiles%\wise\wise care 365\headers\is-4e3o7.tmp
%ProgramFiles%\wise\wise care 365\headers\is-o9dpo.tmp
%ProgramFiles%\wise\wise care 365\headers\is-cm8cl.tmp
%ProgramFiles%\wise\wise care 365\headers\is-fuv3h.tmp
%ProgramFiles%\wise\wise care 365\headers\is-0lhf3.tmp
%ProgramFiles%\wise\wise care 365\headers\is-caf40.tmp
%ProgramFiles%\wise\wise care 365\languages\is-0cvon.tmp
%ProgramFiles%\wise\wise care 365\wisecare365.exe

Присваивает атрибут 'скрытый' для следующих файлов

%CommonProgramFiles%\~bdrdsle.ibo

Удаляет следующие файлы

%TEMP%\aut1.tmp
%TEMP%\is-58497.tmp\cstask.exe
%TEMP%\is-58497.tmp\introduce.url
%TEMP%\is-l6ilb.tmp\~bdrdsle.tmp
%TEMP%\aut2.tmp
%CommonProgramFiles%\~bdrdsle.ibo

Перемещает следующие файлы

%ProgramFiles%\wise\wise care 365\is-s4oea.tmp в %ProgramFiles%\wise\wise care 365\unins000.exe
%ProgramFiles%\wise\wise care 365\languages\is-0sj6c.tmp в %ProgramFiles%\wise\wise care 365\languages\ukrainian.ini
%ProgramFiles%\wise\wise care 365\languages\is-6ooh0.tmp в %ProgramFiles%\wise\wise care 365\languages\turkish.ini
%ProgramFiles%\wise\wise care 365\languages\is-3q1rc.tmp в %ProgramFiles%\wise\wise care 365\languages\thai.ini
%ProgramFiles%\wise\wise care 365\languages\is-c4a5g.tmp в %ProgramFiles%\wise\wise care 365\languages\swedish(sweden).ini
%ProgramFiles%\wise\wise care 365\languages\is-nnj6i.tmp в %ProgramFiles%\wise\wise care 365\languages\spanish(spain).ini
%ProgramFiles%\wise\wise care 365\languages\is-esiae.tmp в %ProgramFiles%\wise\wise care 365\languages\slovenian.ini
%ProgramFiles%\wise\wise care 365\languages\is-vbl48.tmp в %ProgramFiles%\wise\wise care 365\languages\slovak.ini
%ProgramFiles%\wise\wise care 365\languages\is-4a95f.tmp в %ProgramFiles%\wise\wise care 365\languages\serbian(cyrillic).ini
%ProgramFiles%\wise\wise care 365\languages\is-8slrv.tmp в %ProgramFiles%\wise\wise care 365\languages\russian.ini
%ProgramFiles%\wise\wise care 365\languages\is-nguug.tmp в %ProgramFiles%\wise\wise care 365\languages\romanian.ini
%ProgramFiles%\wise\wise care 365\languages\is-lbq2f.tmp в %ProgramFiles%\wise\wise care 365\languages\portuguese(portugal).ini
%ProgramFiles%\wise\wise care 365\languages\is-3i6pn.tmp в %ProgramFiles%\wise\wise care 365\languages\portuguese(brazil).ini
%ProgramFiles%\wise\wise care 365\languages\is-i55bq.tmp в %ProgramFiles%\wise\wise care 365\languages\polish.ini
%ProgramFiles%\wise\wise care 365\languages\is-48i1f.tmp в %ProgramFiles%\wise\wise care 365\languages\persian.ini
%ProgramFiles%\wise\wise care 365\languages\is-hmg0f.tmp в %ProgramFiles%\wise\wise care 365\languages\norwegian(bokmal).ini
%ProgramFiles%\wise\wise care 365\themes\is-fpi4i.tmp в %ProgramFiles%\wise\wise care 365\themes\default.wskn
%ProgramFiles%\wise\wise care 365\languages\is-2sffb.tmp в %ProgramFiles%\wise\wise care 365\languages\nepali.ini
%ProgramFiles%\wise\wise care 365\languages\is-pv6bj.tmp в %ProgramFiles%\wise\wise care 365\languages\kurdish.ini
%ProgramFiles%\wise\wise care 365\languages\is-lbgfs.tmp в %ProgramFiles%\wise\wise care 365\languages\korean.ini
%ProgramFiles%\wise\wise care 365\languages\is-3vls0.tmp в %ProgramFiles%\wise\wise care 365\languages\japanese.ini
%ProgramFiles%\wise\wise care 365\languages\is-j6fjs.tmp в %ProgramFiles%\wise\wise care 365\languages\italian.ini
%ProgramFiles%\wise\wise care 365\languages\is-m7vp3.tmp в %ProgramFiles%\wise\wise care 365\languages\indonesian.ini
%ProgramFiles%\wise\wise care 365\languages\is-72b9j.tmp в %ProgramFiles%\wise\wise care 365\languages\hungarian.ini
%ProgramFiles%\wise\wise care 365\languages\is-o4vih.tmp в %ProgramFiles%\wise\wise care 365\languages\greek.ini
%ProgramFiles%\wise\wise care 365\languages\is-qioqi.tmp в %ProgramFiles%\wise\wise care 365\languages\german.ini
%ProgramFiles%\wise\wise care 365\languages\is-d4da7.tmp в %ProgramFiles%\wise\wise care 365\languages\georgian.ini
%ProgramFiles%\wise\wise care 365\languages\is-sgudj.tmp в %ProgramFiles%\wise\wise care 365\languages\french.ini
%ProgramFiles%\wise\wise care 365\languages\is-gtseb.tmp в %ProgramFiles%\wise\wise care 365\languages\finnish.ini
%ProgramFiles%\wise\wise care 365\languages\is-0cvon.tmp в %ProgramFiles%\wise\wise care 365\languages\english.ini
%ProgramFiles%\wise\wise care 365\languages\is-s4pd8.tmp в %ProgramFiles%\wise\wise care 365\languages\norwegian(nynorsk).ini
%ProgramFiles%\wise\wise care 365\headers\is-0lhf3.tmp в %ProgramFiles%\wise\wise care 365\headers\j.png
%ProgramFiles%\wise\wise care 365\tools\is-r731u.tmp в %ProgramFiles%\wise\wise care 365\tools\toolsv5.ini
%ProgramFiles%\wise\wise care 365\is-d3qqs.tmp в %ProgramFiles%\wise\wise care 365\geo.db
%ProgramFiles%\wise\wise care 365\is-vqpic.tmp в %ProgramFiles%\wise\wise care 365\wiseturbo.exe
%ProgramFiles%\wise\wise care 365\is-07bi4.tmp в %ProgramFiles%\wise\wise care 365\wisetray.exe
%ProgramFiles%\wise\wise care 365\is-ebreh.tmp в %ProgramFiles%\wise\wise care 365\wjslib.dll
%ProgramFiles%\wise\wise care 365\is-dhim2.tmp в %ProgramFiles%\wise\wise care 365\ssleay32.dll
%ProgramFiles%\wise\wise care 365\is-37gp7.tmp в %ProgramFiles%\wise\wise care 365\libeay32.dll
%ProgramFiles%\wise\wise care 365\is-oel5n.tmp в %ProgramFiles%\wise\wise care 365\dmanager.dll
%ProgramFiles%\wise\wise care 365\is-quubr.tmp в %ProgramFiles%\wise\wise care 365\wiseeraser.dll
%ProgramFiles%\wise\wise care 365\is-2bbpb.tmp в %ProgramFiles%\wise\wise care 365\wisedefrag.dll
%ProgramFiles%\wise\wise care 365\is-gmho3.tmp в %ProgramFiles%\wise\wise care 365\wisecare365.exe
%ProgramFiles%\wise\wise care 365\is-le2kf.tmp в %ProgramFiles%\wise\wise care 365\wisebootbooster.exe
%ProgramFiles%\wise\wise care 365\is-9s7hq.tmp в %ProgramFiles%\wise\wise care 365\uninstalltp.exe
%ProgramFiles%\wise\wise care 365\is-n177u.tmp в %ProgramFiles%\wise\wise care 365\sqlite3.dll
%ProgramFiles%\wise\wise care 365\is-dne96.tmp в %ProgramFiles%\wise\wise care 365\skin.ico
%ProgramFiles%\wise\wise care 365\languages\is-5kb38.tmp в %ProgramFiles%\wise\wise care 365\languages\dutch(nederlands).ini
%ProgramFiles%\wise\wise care 365\languages\is-2kevh.tmp в %ProgramFiles%\wise\wise care 365\languages\vietnamese.ini
%ProgramFiles%\wise\wise care 365\is-8lgp3.tmp в %ProgramFiles%\wise\wise care 365\license.txt
%ProgramFiles%\wise\wise care 365\is-8fqar.tmp в %ProgramFiles%\wise\wise care 365\fileshredder.ico
%ProgramFiles%\wise\wise care 365\is-mnhck.tmp в %ProgramFiles%\wise\wise care 365\defragoptions.ini
%ProgramFiles%\wise\wise care 365\is-bueck.tmp в %ProgramFiles%\wise\wise care 365\boottime.exe
%ProgramFiles%\wise\wise care 365\is-eioo3.tmp в %ProgramFiles%\wise\wise care 365\bootpack.wpk
%ProgramFiles%\wise\wise care 365\tools\img\is-fitv7.tmp в %ProgramFiles%\wise\wise care 365\tools\img\reminder.png
%ProgramFiles%\wise\wise care 365\tools\img\is-e21sg.tmp в %ProgramFiles%\wise\wise care 365\tools\img\programuninstaller.png
%ProgramFiles%\wise\wise care 365\tools\img\is-qlom0.tmp в %ProgramFiles%\wise\wise care 365\tools\img\memoryoptimizer.png
%ProgramFiles%\wise\wise care 365\tools\img\is-06e45.tmp в %ProgramFiles%\wise\wise care 365\tools\img\jetsearch.png
%ProgramFiles%\wise\wise care 365\tools\img\is-2q7cl.tmp в %ProgramFiles%\wise\wise care 365\tools\img\gamebooster.png
%ProgramFiles%\wise\wise care 365\tools\img\is-7f8kj.tmp в %ProgramFiles%\wise\wise care 365\tools\img\forcedeleter.png
%ProgramFiles%\wise\wise care 365\tools\img\is-jh6h1.tmp в %ProgramFiles%\wise\wise care 365\tools\img\duplicatefinder.png
%ProgramFiles%\wise\wise care 365\tools\img\is-egogi.tmp в %ProgramFiles%\wise\wise care 365\tools\img\daterecovery.png
%ProgramFiles%\wise\wise care 365\tools\img\is-1esta.tmp в %ProgramFiles%\wise\wise care 365\tools\img\autoshutdown.png
%ProgramFiles%\wise\wise care 365\is-3epkl.tmp в %ProgramFiles%\wise\wise care 365\autoupdate.exe
%ProgramFiles%\wise\wise care 365\tools\is-dr5a4.tmp в %ProgramFiles%\wise\wise care 365\tools\toolsv5.zip
%ProgramFiles%\wise\wise care 365\languages\is-d1137.tmp в %ProgramFiles%\wise\wise care 365\languages\dutch(belgium).ini
%ProgramFiles%\wise\wise care 365\languages\is-0kltl.tmp в %ProgramFiles%\wise\wise care 365\languages\danish.ini
%ProgramFiles%\wise\wise care 365\languages\is-8q4nj.tmp в %ProgramFiles%\wise\wise care 365\languages\czech.ini
%ProgramFiles%\wise\wise care 365\headers\is-snkef.tmp в %ProgramFiles%\wise\wise care 365\headers\e8.png
%ProgramFiles%\wise\wise care 365\headers\is-hm8f8.tmp в %ProgramFiles%\wise\wise care 365\headers\g5.png
%ProgramFiles%\wise\wise care 365\headers\is-src2i.tmp в %ProgramFiles%\wise\wise care 365\headers\g4.png
%ProgramFiles%\wise\wise care 365\headers\is-ljhp2.tmp в %ProgramFiles%\wise\wise care 365\headers\g3.png
%ProgramFiles%\wise\wise care 365\headers\is-b2jj7.tmp в %ProgramFiles%\wise\wise care 365\headers\g2.png
%ProgramFiles%\wise\wise care 365\headers\is-fol1t.tmp в %ProgramFiles%\wise\wise care 365\headers\g1.png
%ProgramFiles%\wise\wise care 365\headers\is-b4p2t.tmp в %ProgramFiles%\wise\wise care 365\headers\f7.png
%ProgramFiles%\wise\wise care 365\headers\is-ipl6h.tmp в %ProgramFiles%\wise\wise care 365\headers\f6.png
%ProgramFiles%\wise\wise care 365\headers\is-kv8tn.tmp в %ProgramFiles%\wise\wise care 365\headers\f5.png
%ProgramFiles%\wise\wise care 365\headers\is-uje30.tmp в %ProgramFiles%\wise\wise care 365\headers\f4.png
%ProgramFiles%\wise\wise care 365\headers\is-47vm4.tmp в %ProgramFiles%\wise\wise care 365\headers\f3.png
%ProgramFiles%\wise\wise care 365\headers\is-qp3kj.tmp в %ProgramFiles%\wise\wise care 365\headers\f2.png
%ProgramFiles%\wise\wise care 365\headers\is-lapun.tmp в %ProgramFiles%\wise\wise care 365\headers\f1.png
%ProgramFiles%\wise\wise care 365\headers\is-3mbbq.tmp в %ProgramFiles%\wise\wise care 365\headers\f0.png
%ProgramFiles%\wise\wise care 365\is-i7h9k.tmp в %ProgramFiles%\wise\wise care 365\bootlauncher.exe
%ProgramFiles%\wise\wise care 365\headers\is-vgmku.tmp в %ProgramFiles%\wise\wise care 365\headers\g7.png
%ProgramFiles%\wise\wise care 365\headers\is-q49og.tmp в %ProgramFiles%\wise\wise care 365\headers\e7.png
%ProgramFiles%\wise\wise care 365\headers\is-jmi9i.tmp в %ProgramFiles%\wise\wise care 365\headers\d7.png
%ProgramFiles%\wise\wise care 365\headers\is-qrlq7.tmp в %ProgramFiles%\wise\wise care 365\headers\d4.png
%ProgramFiles%\wise\wise care 365\headers\is-itdjd.tmp в %ProgramFiles%\wise\wise care 365\headers\d3.png
%ProgramFiles%\wise\wise care 365\headers\is-eahh9.tmp в %ProgramFiles%\wise\wise care 365\headers\d2.png
%ProgramFiles%\wise\wise care 365\headers\is-jhvth.tmp в %ProgramFiles%\wise\wise care 365\headers\d1.png
%ProgramFiles%\wise\wise care 365\headers\is-hjs7k.tmp в %ProgramFiles%\wise\wise care 365\headers\c7.png
%ProgramFiles%\wise\wise care 365\headers\is-hstmm.tmp в %ProgramFiles%\wise\wise care 365\headers\c4.png
%ProgramFiles%\wise\wise care 365\headers\is-itijb.tmp в %ProgramFiles%\wise\wise care 365\headers\b5.png
%ProgramFiles%\wise\wise care 365\headers\is-rfisu.tmp в %ProgramFiles%\wise\wise care 365\headers\a9.png
%ProgramFiles%\wise\wise care 365\headers\is-ose0t.tmp в %ProgramFiles%\wise\wise care 365\headers\a7.png
%ProgramFiles%\wise\wise care 365\headers\is-5vlvh.tmp в %ProgramFiles%\wise\wise care 365\headers\a6.png
%ProgramFiles%\wise\wise care 365\headers\is-e18ct.tmp в %ProgramFiles%\wise\wise care 365\headers\a2.png
%ProgramFiles%\wise\wise care 365\headers\is-uclh1.tmp в %ProgramFiles%\wise\wise care 365\headers\a1.png
%ProgramFiles%\wise\wise care 365\headers\is-akskf.tmp в %ProgramFiles%\wise\wise care 365\headers\e9.png
%ProgramFiles%\wise\wise care 365\is-rp93m.tmp в %ProgramFiles%\wise\wise care 365\rate.info
%ProgramFiles%\wise\wise care 365\headers\is-ou30s.tmp в %ProgramFiles%\wise\wise care 365\headers\g8.png
%ProgramFiles%\wise\wise care 365\headers\is-hsrms.tmp в %ProgramFiles%\wise\wise care 365\headers\h3.png
%ProgramFiles%\wise\wise care 365\headers\is-kbk5q.tmp в %ProgramFiles%\wise\wise care 365\headers\h1.png
%ProgramFiles%\wise\wise care 365\languages\is-lf4ce.tmp в %ProgramFiles%\wise\wise care 365\languages\chinese(traditional).ini
%ProgramFiles%\wise\wise care 365\languages\is-fg75l.tmp в %ProgramFiles%\wise\wise care 365\languages\chinese(simplified).ini
%ProgramFiles%\wise\wise care 365\languages\is-ma1io.tmp в %ProgramFiles%\wise\wise care 365\languages\catalan.ini
%ProgramFiles%\wise\wise care 365\languages\is-8itkd.tmp в %ProgramFiles%\wise\wise care 365\languages\bulgarian.ini
%ProgramFiles%\wise\wise care 365\languages\is-4lli0.tmp в %ProgramFiles%\wise\wise care 365\languages\belarusian.ini
%ProgramFiles%\wise\wise care 365\languages\is-96r45.tmp в %ProgramFiles%\wise\wise care 365\languages\azerbaijani(latin).ini
%ProgramFiles%\wise\wise care 365\languages\is-9pj3r.tmp в %ProgramFiles%\wise\wise care 365\languages\azerbaijan(latin).ini
%ProgramFiles%\wise\wise care 365\languages\is-ib00e.tmp в %ProgramFiles%\wise\wise care 365\languages\arabic.ini
%ProgramFiles%\wise\wise care 365\headers\is-9de46.tmp в %ProgramFiles%\wise\wise care 365\headers\j8.png
%ProgramFiles%\wise\wise care 365\headers\is-e3o20.tmp в %ProgramFiles%\wise\wise care 365\headers\j7.png
%ProgramFiles%\wise\wise care 365\headers\is-bfeb7.tmp в %ProgramFiles%\wise\wise care 365\headers\j6.png
%ProgramFiles%\wise\wise care 365\headers\is-nlb0t.tmp в %ProgramFiles%\wise\wise care 365\headers\j4.png
%ProgramFiles%\wise\wise care 365\headers\is-kkin9.tmp в %ProgramFiles%\wise\wise care 365\headers\j3.png
%ProgramFiles%\wise\wise care 365\headers\is-rlicp.tmp в %ProgramFiles%\wise\wise care 365\headers\h2.png
%ProgramFiles%\wise\wise care 365\headers\is-hd3md.tmp в %ProgramFiles%\wise\wise care 365\headers\j1.png
%ProgramFiles%\wise\wise care 365\headers\is-n4r10.tmp в %ProgramFiles%\wise\wise care 365\headers\g6.png
%ProgramFiles%\wise\wise care 365\headers\is-fuv3h.tmp в %ProgramFiles%\wise\wise care 365\headers\i8.png
%ProgramFiles%\wise\wise care 365\headers\is-cm8cl.tmp в %ProgramFiles%\wise\wise care 365\headers\i7.png
%ProgramFiles%\wise\wise care 365\headers\is-o9dpo.tmp в %ProgramFiles%\wise\wise care 365\headers\i6.png
%ProgramFiles%\wise\wise care 365\headers\is-4e3o7.tmp в %ProgramFiles%\wise\wise care 365\headers\i5.png
%ProgramFiles%\wise\wise care 365\headers\is-lc855.tmp в %ProgramFiles%\wise\wise care 365\headers\i4.png
%ProgramFiles%\wise\wise care 365\headers\is-caf40.tmp в %ProgramFiles%\wise\wise care 365\headers\i3.png
%ProgramFiles%\wise\wise care 365\headers\is-f8c9d.tmp в %ProgramFiles%\wise\wise care 365\headers\i2.png
%ProgramFiles%\wise\wise care 365\headers\is-krpth.tmp в %ProgramFiles%\wise\wise care 365\headers\i1.png
%ProgramFiles%\wise\wise care 365\headers\is-h6tsd.tmp в %ProgramFiles%\wise\wise care 365\headers\h8.png
%ProgramFiles%\wise\wise care 365\headers\is-ncpfl.tmp в %ProgramFiles%\wise\wise care 365\headers\h7.png
%ProgramFiles%\wise\wise care 365\headers\is-s5d0b.tmp в %ProgramFiles%\wise\wise care 365\headers\h6.png
%ProgramFiles%\wise\wise care 365\headers\is-odtkb.tmp в %ProgramFiles%\wise\wise care 365\headers\h5.png
%ProgramFiles%\wise\wise care 365\headers\is-6sddj.tmp в %ProgramFiles%\wise\wise care 365\headers\h4.png
%ProgramFiles%\wise\wise care 365\headers\is-3up73.tmp в %ProgramFiles%\wise\wise care 365\headers\j0.png
%TEMP%\is-58497.tmp\is-hmq8h.tmp в %TEMP%\is-58497.tmp\cstask.exe

Изменяет файл HOSTS.

Другое

Ищет следующие окна

ClassName: 'TFrmTrayMain' WindowName: ''
ClassName: 'TFrmWPMain' WindowName: ''
ClassName: 'TFrmMOMain' WindowName: ''
ClassName: '' WindowName: ''

Создает и запускает на исполнение

'%CommonProgramFiles%\~bdrdsle.ibo' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'%TEMP%\is-l6ilb.tmp\~bdrdsle.tmp' /SL5="$200142,9626247,131584,%CommonProgramFiles%\~bdrdsle.ibo" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'<SYSTEM32>\schtasks.exe' /delete /tn \WiseCleaner\W365SkipUAC /f' (со скрытым окном)
'<SYSTEM32>\taskkill.exe' /f /im WiseCare365.exe' (со скрытым окном)
'<SYSTEM32>\cmd.exe' /c sc stop WiseBootAssistant' (со скрытым окном)
'<SYSTEM32>\cmd.exe' /c sc delete WiseBootAssistant' (со скрытым окном)

Запускает на исполнение

'<SYSTEM32>\schtasks.exe' /delete /tn \WiseCleaner\W365SkipUAC /f
'<SYSTEM32>\cmd.exe' /c sc stop WiseBootAssistant
'<SYSTEM32>\sc.exe' stop WiseBootAssistant
'<SYSTEM32>\cmd.exe' /c sc delete WiseBootAssistant
'<SYSTEM32>\sc.exe' delete WiseBootAssistant

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней