Trojan.Siggen9.58579

Техническая информация

Для обеспечения автозапуска и распространения

Устанавливает следующие настройки сервисов

[<HKLM>\System\CurrentControlSet\Services\WiseBootAssistant] 'Start' = '00000002'
[<HKLM>\System\CurrentControlSet\Services\WiseBootAssistant] 'ImagePath' = '%ProgramFiles(x86)%\Wise\Wise Care 365\BootTime.exe'

Создает следующие сервисы

'WiseBootAssistant' %ProgramFiles(x86)%\Wise\Wise Care 365\BootTime.exe

Вредоносные функции

Запускает на исполнение

'%WINDIR%\syswow64\net.exe' stop WiseBootAssistant

Изменения в файловой системе

Создает следующие файлы

%CommonProgramFiles(x86)%\~mdwviag.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-k6bmv.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-ulqkn.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-st9po.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-ttk47.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-nv8en.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-2n3gn.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-v54o2.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-u5pig.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-mcdqo.tmp
%ProgramFiles(x86)%\wise\wise care 365\themes\is-3vs5k.tmp
%ProgramFiles(x86)%\wise\wise care 365\tools\is-g8448.tmp
%ProgramFiles(x86)%\wise\wise care 365\tools\is-34l6k.tmp
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-k510p.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-vlghm.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-53iaq.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-6r83g.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-894hn.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-sehvj.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-4as9f.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-vjr2g.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-5hnkv.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-2prrj.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-mi3fr.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-qkelf.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-secut.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-um7iq.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-3rc7r.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-9bcgb.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-amn84.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-pd418.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-7rva4.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-3joer.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-nmhbp.tmp
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-elkaq.tmp
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-m7c6c.tmp
%APPDATA%\wise care 365\config.ini
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-ig7ai.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-qin7j.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-hpvj3.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-7539v.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-33vef.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-4t40a.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-ncvsn.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-41c1b.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-2nq1p.tmp
%PROGRAMDATA%\microsoft\windows\start menu\programs\wise care 365\uninstall wise care 365.lnk
C:\users\public\desktop\wise care 365.lnk
%TEMP%\is-4ka8k.tmp\introduce.url
%ProgramFiles(x86)%\wise\wise care 365\unins000.msg
%ProgramFiles(x86)%\wise\wise care 365\unins000.dat
%TEMP%\is-4ka8k.tmp\is-bucic.tmp
%PROGRAMDATA%\microsoft\windows\start menu\programs\wise care 365\wise care 365.lnk
%ProgramFiles(x86)%\wise\wise care 365\is-185d2.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-5nuq6.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-mqu6e.tmp
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-q6qs9.tmp
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-semcr.tmp
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-lnk5t.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-oqm2d.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-018d8.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-3qogo.tmp
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-fckiq.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-ban4f.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-1ljfs.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-vmiss.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-b39s3.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-ag6fb.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-sie3t.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-h2nfu.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-bmuib.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-pn7nr.tmp
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-21m16.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-5lsvm.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-l7ssf.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-4ashf.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-l1rtq.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-2p1to.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-pcl8n.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-p08nn.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-l0dah.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-tc0hl.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-eqfs2.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-c8b5c.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-lcff8.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-ognqv.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-4m7op.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-ddtu5.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-5nofv.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-gj4ar.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-i9glp.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-5knis.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-9kkou.tmp
%TEMP%\is-4ka8k.tmp\_isetup\_setup64.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-qusss.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-i2sh8.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-gpf3c.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-6bprc.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-tjt5g.tmp
%TEMP%\is-fq0gl.tmp\~mdwviag.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-ekpjf.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-kvqh9.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-899e5.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-vh35p.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-g1o05.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-chcp6.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-2as0j.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-emb1i.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-f9la5.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-ev87a.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-thq80.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-4c49q.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-aukvb.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-f4iob.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-83bcl.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-8216h.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-afrd5.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-pn06t.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-74u6p.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-a888f.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-mhv8m.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-acnd3.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-dnoid.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-b0gp8.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-uodol.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-j51k8.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-2e5ve.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-20gv0.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-fpscf.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-prhsd.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-u08m8.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-on2v6.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-hg8k4.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-s1o62.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-acee1.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-coft4.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-ap9jg.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-bkqcr.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-tg1dj.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-jn7ht.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-j5c7l.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-c79lp.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-g232l.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-kc928.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-gf6gj.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-lkaft.tmp
%APPDATA%\wise care 365\config_tray.ini

Присваивает атрибут 'скрытый' для следующих файлов

%CommonProgramFiles(x86)%\~mdwviag.tmp

Удаляет следующие файлы

%TEMP%\is-4ka8k.tmp\cstask.exe
%TEMP%\is-4ka8k.tmp\introduce.url
%TEMP%\is-4ka8k.tmp\_isetup\_setup64.tmp
%TEMP%\is-fq0gl.tmp\~mdwviag.tmp
%CommonProgramFiles(x86)%\~mdwviag.tmp

Перемещает следующие файлы

%ProgramFiles(x86)%\wise\wise care 365\is-qusss.tmp в %ProgramFiles(x86)%\wise\wise care 365\unins000.exe
%ProgramFiles(x86)%\wise\wise care 365\languages\is-mcdqo.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\vietnamese.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-53iaq.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\ukrainian.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-vlghm.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\turkish.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-u5pig.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\thai.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-nv8en.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\swedish(sweden).ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-ttk47.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\spanish(spain).ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-st9po.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\slovenian.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-ulqkn.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\slovak.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-k6bmv.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\serbian(cyrillic).ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-v54o2.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\russian.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-2n3gn.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\romanian.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-6r83g.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\portuguese(portugal).ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-894hn.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\portuguese(brazil).ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-sehvj.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\polish.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-lkaft.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\english.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-3joer.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\persian.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-pd418.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\norwegian(bokmal).ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-amn84.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\nepali.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-9bcgb.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\lithuanian.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-3rc7r.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\kurdish.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-nmhbp.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\korean.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-um7iq.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\japanese.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-qkelf.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\italian.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-mi3fr.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\indonesian.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-2prrj.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\hungarian.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-5hnkv.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\hebrew.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-vjr2g.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\greek.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-4as9f.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\german.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-secut.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\georgian.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-pn7nr.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\french.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-7rva4.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\norwegian(nynorsk).ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-5lsvm.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\finnish.ini
%ProgramFiles(x86)%\wise\wise care 365\themes\is-3vs5k.tmp в %ProgramFiles(x86)%\wise\wise care 365\themes\default.wskn
%ProgramFiles(x86)%\wise\wise care 365\is-1ljfs.tmp в %ProgramFiles(x86)%\wise\wise care 365\autoupdate.exe
%ProgramFiles(x86)%\wise\wise care 365\is-b39s3.tmp в %ProgramFiles(x86)%\wise\wise care 365\skin.ico
%ProgramFiles(x86)%\wise\wise care 365\is-ag6fb.tmp в %ProgramFiles(x86)%\wise\wise care 365\sqlite3.dll
%ProgramFiles(x86)%\wise\wise care 365\is-sie3t.tmp в %ProgramFiles(x86)%\wise\wise care 365\uninstalltp.exe
%ProgramFiles(x86)%\wise\wise care 365\is-h2nfu.tmp в %ProgramFiles(x86)%\wise\wise care 365\wisebootbooster.exe
%ProgramFiles(x86)%\wise\wise care 365\is-mqu6e.tmp в %ProgramFiles(x86)%\wise\wise care 365\wisecare365.exe
%ProgramFiles(x86)%\wise\wise care 365\is-5nuq6.tmp в %ProgramFiles(x86)%\wise\wise care 365\wisedefrag.dll
%ProgramFiles(x86)%\wise\wise care 365\is-ncvsn.tmp в %ProgramFiles(x86)%\wise\wise care 365\dmanager.dll
%ProgramFiles(x86)%\wise\wise care 365\headers\is-bkqcr.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\i2.png
%ProgramFiles(x86)%\wise\wise care 365\is-41c1b.tmp в %ProgramFiles(x86)%\wise\wise care 365\libeay32.dll
%ProgramFiles(x86)%\wise\wise care 365\is-qin7j.tmp в %ProgramFiles(x86)%\wise\wise care 365\ssleay32.dll
%ProgramFiles(x86)%\wise\wise care 365\is-hpvj3.tmp в %ProgramFiles(x86)%\wise\wise care 365\wjslib.dll
%ProgramFiles(x86)%\wise\wise care 365\is-7539v.tmp в %ProgramFiles(x86)%\wise\wise care 365\wisetray.exe
%ProgramFiles(x86)%\wise\wise care 365\is-33vef.tmp в %ProgramFiles(x86)%\wise\wise care 365\wiseturbo.exe
%ProgramFiles(x86)%\wise\wise care 365\is-4t40a.tmp в %ProgramFiles(x86)%\wise\wise care 365\geo.db
%ProgramFiles(x86)%\wise\wise care 365\tools\is-34l6k.tmp в %ProgramFiles(x86)%\wise\wise care 365\tools\toolsv5.zip
%ProgramFiles(x86)%\wise\wise care 365\tools\is-g8448.tmp в %ProgramFiles(x86)%\wise\wise care 365\tools\toolsv5.ini
%ProgramFiles(x86)%\wise\wise care 365\is-bmuib.tmp в %ProgramFiles(x86)%\wise\wise care 365\license.txt
%ProgramFiles(x86)%\wise\wise care 365\is-ban4f.tmp в %ProgramFiles(x86)%\wise\wise care 365\fileshredder.ico
%ProgramFiles(x86)%\wise\wise care 365\is-3qogo.tmp в %ProgramFiles(x86)%\wise\wise care 365\defragoptions.ini
%ProgramFiles(x86)%\wise\wise care 365\is-018d8.tmp в %ProgramFiles(x86)%\wise\wise care 365\boottime.exe
%ProgramFiles(x86)%\wise\wise care 365\is-oqm2d.tmp в %ProgramFiles(x86)%\wise\wise care 365\bootpack.wpk
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-lnk5t.tmp в %ProgramFiles(x86)%\wise\wise care 365\tools\img\reminder.png
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-semcr.tmp в %ProgramFiles(x86)%\wise\wise care 365\tools\img\programuninstaller.png
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-q6qs9.tmp в %ProgramFiles(x86)%\wise\wise care 365\tools\img\memoryoptimizer.png
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-fckiq.tmp в %ProgramFiles(x86)%\wise\wise care 365\tools\img\jetsearch.png
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-ig7ai.tmp в %ProgramFiles(x86)%\wise\wise care 365\tools\img\gamebooster.png
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-m7c6c.tmp в %ProgramFiles(x86)%\wise\wise care 365\tools\img\forcedeleter.png
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-21m16.tmp в %ProgramFiles(x86)%\wise\wise care 365\tools\img\duplicatefinder.png
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-elkaq.tmp в %ProgramFiles(x86)%\wise\wise care 365\tools\img\daterecovery.png
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-k510p.tmp в %ProgramFiles(x86)%\wise\wise care 365\tools\img\autoshutdown.png
%ProgramFiles(x86)%\wise\wise care 365\is-vmiss.tmp в %ProgramFiles(x86)%\wise\wise care 365\rate.info
%ProgramFiles(x86)%\wise\wise care 365\languages\is-thq80.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\dutch(nederlands).ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-uodol.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\dutch(belgium).ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-b0gp8.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\danish.ini
%ProgramFiles(x86)%\wise\wise care 365\headers\is-4m7op.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\g5.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-ognqv.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\g4.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-lcff8.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\g3.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-c8b5c.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\g2.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-gj4ar.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\g1.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-5nofv.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\f7.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-eqfs2.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\f6.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-p08nn.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\f5.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-pcl8n.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\f4.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-2p1to.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\f3.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-l1rtq.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\f2.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-4ashf.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\f1.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-tc0hl.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\f0.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-f9la5.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\g7.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-l0dah.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\e9.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-5knis.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\e7.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-9kkou.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\d7.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-2as0j.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\d4.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-chcp6.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\d3.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-g1o05.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\d2.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-vh35p.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\d1.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-899e5.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\c7.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-kvqh9.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\c4.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-emb1i.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\b5.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-ekpjf.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\a9.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-tjt5g.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\a7.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-6bprc.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\a6.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-gpf3c.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\a2.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-i2sh8.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\a1.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-i9glp.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\e8.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-l7ssf.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\g8.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-ddtu5.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\g6.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-ev87a.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\h1.png
%ProgramFiles(x86)%\wise\wise care 365\languages\is-dnoid.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\czech.ini
%ProgramFiles(x86)%\wise\wise care 365\headers\is-prhsd.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\j0.png
%ProgramFiles(x86)%\wise\wise care 365\languages\is-acnd3.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\croatian.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-mhv8m.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\chinese(traditional).ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-2e5ve.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\chinese(simplified).ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-j51k8.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\catalan.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-a888f.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\bulgarian.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-afrd5.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\belarusian.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-8216h.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\azerbaijani(latin).ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-83bcl.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\arabic.ini
%ProgramFiles(x86)%\wise\wise care 365\headers\is-f4iob.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\j8.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-aukvb.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\j7.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-74u6p.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\j6.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-pn06t.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\j4.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-20gv0.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\j3.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-fpscf.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\j1.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-kc928.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\j.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-4c49q.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\h2.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-g232l.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\i8.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-c79lp.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\i7.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-j5c7l.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\i6.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-jn7ht.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\i5.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-tg1dj.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\i4.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-gf6gj.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\i3.png
%ProgramFiles(x86)%\wise\wise care 365\is-185d2.tmp в %ProgramFiles(x86)%\wise\wise care 365\wiseeraser.dll
%ProgramFiles(x86)%\wise\wise care 365\headers\is-coft4.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\i1.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-acee1.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\h8.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-s1o62.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\h7.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-hg8k4.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\h6.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-on2v6.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\h5.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-u08m8.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\h4.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-ap9jg.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\h3.png
%ProgramFiles(x86)%\wise\wise care 365\is-2nq1p.tmp в %ProgramFiles(x86)%\wise\wise care 365\bootlauncher.exe
%TEMP%\is-4ka8k.tmp\is-bucic.tmp в %TEMP%\is-4ka8k.tmp\cstask.exe

Другое

Ищет следующие окна

ClassName: 'TFrmTrayMain' WindowName: ''
ClassName: 'TFrmWPMain' WindowName: ''
ClassName: 'TFrmMOMain' WindowName: ''

Создает и запускает на исполнение

'%CommonProgramFiles(x86)%\~mdwviag.tmp' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'%TEMP%\is-fq0gl.tmp\~mdwviag.tmp' /SL5="$9021C,10833620,257024,%CommonProgramFiles(x86)%\~mdwviag.tmp" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'%WINDIR%\syswow64\schtasks.exe' /delete /tn \WiseCleaner\W365SkipUAC /f' (со скрытым окном)
'%WINDIR%\syswow64\cmd.exe' /c net stop WiseBootAssistant' (со скрытым окном)
'%WINDIR%\syswow64\cmd.exe' /c sc delete WiseBootAssistant' (со скрытым окном)

Запускает на исполнение

'%WINDIR%\syswow64\schtasks.exe' /delete /tn \WiseCleaner\W365SkipUAC /f
'%WINDIR%\syswow64\cmd.exe' /c net stop WiseBootAssistant
'%WINDIR%\syswow64\net1.exe' stop WiseBootAssistant
'%WINDIR%\syswow64\cmd.exe' /c sc delete WiseBootAssistant
'%WINDIR%\syswow64\sc.exe' delete WiseBootAssistant

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней