Trojan.Siggen14.11064

Техническая информация

Для обеспечения автозапуска и распространения

Устанавливает следующие настройки сервисов

[<HKLM>\System\CurrentControlSet\Services\WiseBootAssistant] 'Start' = '00000002'
[<HKLM>\System\CurrentControlSet\Services\WiseBootAssistant] 'ImagePath' = '%ProgramFiles(x86)%\Wise\Wise Care 365\BootTime.exe'

Создает следующие сервисы

'WiseBootAssistant' %ProgramFiles(x86)%\Wise\Wise Care 365\BootTime.exe

Вредоносные функции

Запускает на исполнение

'%WINDIR%\syswow64\net.exe' stop WiseBootAssistant

Изменения в файловой системе

Создает следующие файлы

%CommonProgramFiles(x86)%\~dtyzzyn.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-tvk33.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-hig47.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-ff751.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-apohb.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-r5eo5.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-uid6l.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-c686h.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-g428g.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-1dpt6.tmp
%ProgramFiles(x86)%\wise\wise care 365\themes\is-rolci.tmp
%ProgramFiles(x86)%\wise\wise care 365\tools\is-dgaco.tmp
%ProgramFiles(x86)%\wise\wise care 365\tools\is-v8lds.tmp
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-rkuks.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-v821f.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-4202i.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-cd7lu.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-9vgf8.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-ksric.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-t2j20.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-qdc70.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-c21s6.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-n7djd.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-edd9n.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-add4i.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-53u0s.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-var2u.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-lm98e.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-h3756.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-he493.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-7k41r.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-4chnu.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-6d89k.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-vhik5.tmp
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-2oeu4.tmp
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-gjgb4.tmp
%APPDATA%\wise care 365\config.ini
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-q7bm2.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-jlqtc.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-cdh1q.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-qkds7.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-klcli.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-dfnui.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-rrs0t.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-sd9tu.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-qheum.tmp
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\wise care 365\uninstall wise care 365.lnk
C:\users\public\desktop\wise care 365.lnk
%TEMP%\is-7r6om.tmp\introduce.url
%ProgramFiles(x86)%\wise\wise care 365\unins000.msg
%ProgramFiles(x86)%\wise\wise care 365\unins000.dat
%TEMP%\is-7r6om.tmp\is-mb2vm.tmp
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\wise care 365\wise care 365.lnk
%ProgramFiles(x86)%\wise\wise care 365\is-21b9o.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-i7dpv.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-9rds8.tmp
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-95smo.tmp
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-ua7m0.tmp
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-avbbe.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-j75kq.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-jbor0.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-1lfe8.tmp
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-8ggev.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-rvpjo.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-ajip3.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-r6mnl.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-urq1p.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-pa0ai.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-m6k5o.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-pp5pv.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-g1i9e.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-i85l3.tmp
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-gmjbj.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-vkuvp.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-q0i3k.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-8k4og.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-d8ipn.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-s5h52.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-el9nv.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-i1gpn.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-cs8sj.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-uan2n.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-8soio.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-flh7g.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-jp6qm.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-ov1nq.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-62qro.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-ggtak.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-hju17.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-hbpvn.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-jhg7r.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-u7af4.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-alj28.tmp
%TEMP%\is-7r6om.tmp\_isetup\_setup64.tmp
%ProgramFiles(x86)%\wise\wise care 365\is-naokr.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-ed1ft.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-jl2uf.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-nrsbg.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-p2u1v.tmp
%TEMP%\is-aucor.tmp\~dtyzzyn.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-7srsj.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-49fef.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-oobfq.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-au4sp.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-oidsr.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-njkpb.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-j90l4.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-123kr.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-529t8.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-gdhhp.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-mkehp.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-dh6vq.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-38g62.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-l7lpn.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-s3pib.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-1fqsj.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-t0hs3.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-4do7e.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-kn0v6.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-aeumv.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-6mrqp.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-ailfc.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-eoj4k.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-7j2m4.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-dn0hs.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-c28ff.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-blh5a.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-ltfsu.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-32pct.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-92f4b.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-6aujc.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-if3bi.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-s80nq.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-rknl9.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-9d69r.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-jd3mt.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-k0ja6.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-tn3nd.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-ojdto.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-5j25f.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-b1lnb.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-ag78s.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-8klps.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-7mod3.tmp
%ProgramFiles(x86)%\wise\wise care 365\headers\is-b4cm8.tmp
%ProgramFiles(x86)%\wise\wise care 365\languages\is-olnri.tmp
%APPDATA%\wise care 365\config_tray.ini

Присваивает атрибут 'скрытый' для следующих файлов

%CommonProgramFiles(x86)%\~dtyzzyn.tmp

Удаляет следующие файлы

%TEMP%\is-7r6om.tmp\cstask.exe
%TEMP%\is-7r6om.tmp\introduce.url
%TEMP%\is-7r6om.tmp\_isetup\_setup64.tmp
%TEMP%\is-aucor.tmp\~dtyzzyn.tmp
%CommonProgramFiles(x86)%\~dtyzzyn.tmp
%ProgramFiles(x86)%\wise\wise care 365\wisecare365.exe.bak

Перемещает следующие файлы

%ProgramFiles(x86)%\wise\wise care 365\is-naokr.tmp в %ProgramFiles(x86)%\wise\wise care 365\unins000.exe
%ProgramFiles(x86)%\wise\wise care 365\languages\is-4202i.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\ukrainian.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-v821f.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\turkish.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-g428g.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\thai.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-r5eo5.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\swedish(sweden).ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-apohb.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\spanish(spain).ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-ff751.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\slovenian.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-hig47.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\slovak.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-tvk33.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\serbian(cyrillic).ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-c686h.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\russian.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-uid6l.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\romanian.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-cd7lu.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\portuguese(portugal).ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-9vgf8.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\portuguese(brazil).ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-ksric.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\polish.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-6d89k.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\persian.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-1dpt6.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\vietnamese.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-4chnu.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\norwegian(nynorsk).ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-he493.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\nepali.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-h3756.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\lithuanian.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-lm98e.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\kurdish.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-vhik5.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\korean.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-var2u.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\japanese.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-add4i.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\italian.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-edd9n.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\indonesian.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-n7djd.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\hungarian.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-c21s6.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\hebrew.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-qdc70.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\greek.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-t2j20.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\german.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-53u0s.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\georgian.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-i85l3.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\french.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-vkuvp.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\finnish.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-7k41r.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\norwegian(bokmal).ini
%ProgramFiles(x86)%\wise\wise care 365\themes\is-rolci.tmp в %ProgramFiles(x86)%\wise\wise care 365\themes\default.wskn
%ProgramFiles(x86)%\wise\wise care 365\tools\is-dgaco.tmp в %ProgramFiles(x86)%\wise\wise care 365\tools\toolsv5.ini
%ProgramFiles(x86)%\wise\wise care 365\tools\is-v8lds.tmp в %ProgramFiles(x86)%\wise\wise care 365\tools\toolsv5.zip
%ProgramFiles(x86)%\wise\wise care 365\is-pa0ai.tmp в %ProgramFiles(x86)%\wise\wise care 365\sqlite3.dll
%ProgramFiles(x86)%\wise\wise care 365\is-m6k5o.tmp в %ProgramFiles(x86)%\wise\wise care 365\uninstalltp.exe
%ProgramFiles(x86)%\wise\wise care 365\is-pp5pv.tmp в %ProgramFiles(x86)%\wise\wise care 365\wisebootbooster.exe
%ProgramFiles(x86)%\wise\wise care 365\is-9rds8.tmp в %ProgramFiles(x86)%\wise\wise care 365\wisecare365.exe
%ProgramFiles(x86)%\wise\wise care 365\is-i7dpv.tmp в %ProgramFiles(x86)%\wise\wise care 365\wisedefrag.dll
%ProgramFiles(x86)%\wise\wise care 365\is-21b9o.tmp в %ProgramFiles(x86)%\wise\wise care 365\wiseeraser.dll
%ProgramFiles(x86)%\wise\wise care 365\is-sd9tu.tmp в %ProgramFiles(x86)%\wise\wise care 365\libeay32.dll
%TEMP%\is-7r6om.tmp\is-mb2vm.tmp в %TEMP%\is-7r6om.tmp\cstask.exe
%ProgramFiles(x86)%\wise\wise care 365\is-jlqtc.tmp в %ProgramFiles(x86)%\wise\wise care 365\ssleay32.dll
%ProgramFiles(x86)%\wise\wise care 365\is-cdh1q.tmp в %ProgramFiles(x86)%\wise\wise care 365\wjslib.dll
%ProgramFiles(x86)%\wise\wise care 365\is-qkds7.tmp в %ProgramFiles(x86)%\wise\wise care 365\wisetray.exe
%ProgramFiles(x86)%\wise\wise care 365\is-klcli.tmp в %ProgramFiles(x86)%\wise\wise care 365\wiseturbo.exe
%ProgramFiles(x86)%\wise\wise care 365\is-dfnui.tmp в %ProgramFiles(x86)%\wise\wise care 365\geo.db
%ProgramFiles(x86)%\wise\wise care 365\is-qheum.tmp в %ProgramFiles(x86)%\wise\wise care 365\bootlauncher.exe
%ProgramFiles(x86)%\wise\wise care 365\is-urq1p.tmp в %ProgramFiles(x86)%\wise\wise care 365\skin.ico
%ProgramFiles(x86)%\wise\wise care 365\is-r6mnl.tmp в %ProgramFiles(x86)%\wise\wise care 365\rate.info
%ProgramFiles(x86)%\wise\wise care 365\is-ajip3.tmp в %ProgramFiles(x86)%\wise\wise care 365\autoupdate.exe
%ProgramFiles(x86)%\wise\wise care 365\is-g1i9e.tmp в %ProgramFiles(x86)%\wise\wise care 365\license.txt
%ProgramFiles(x86)%\wise\wise care 365\is-rvpjo.tmp в %ProgramFiles(x86)%\wise\wise care 365\fileshredder.ico
%ProgramFiles(x86)%\wise\wise care 365\is-1lfe8.tmp в %ProgramFiles(x86)%\wise\wise care 365\defragoptions.ini
%ProgramFiles(x86)%\wise\wise care 365\is-jbor0.tmp в %ProgramFiles(x86)%\wise\wise care 365\boottime.exe
%ProgramFiles(x86)%\wise\wise care 365\is-j75kq.tmp в %ProgramFiles(x86)%\wise\wise care 365\bootpack.wpk
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-avbbe.tmp в %ProgramFiles(x86)%\wise\wise care 365\tools\img\reminder.png
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-ua7m0.tmp в %ProgramFiles(x86)%\wise\wise care 365\tools\img\programuninstaller.png
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-95smo.tmp в %ProgramFiles(x86)%\wise\wise care 365\tools\img\memoryoptimizer.png
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-8ggev.tmp в %ProgramFiles(x86)%\wise\wise care 365\tools\img\jetsearch.png
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-q7bm2.tmp в %ProgramFiles(x86)%\wise\wise care 365\tools\img\gamebooster.png
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-gjgb4.tmp в %ProgramFiles(x86)%\wise\wise care 365\tools\img\forcedeleter.png
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-gmjbj.tmp в %ProgramFiles(x86)%\wise\wise care 365\tools\img\duplicatefinder.png
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-2oeu4.tmp в %ProgramFiles(x86)%\wise\wise care 365\tools\img\daterecovery.png
%ProgramFiles(x86)%\wise\wise care 365\tools\img\is-rkuks.tmp в %ProgramFiles(x86)%\wise\wise care 365\tools\img\autoshutdown.png
%ProgramFiles(x86)%\wise\wise care 365\languages\is-olnri.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\english.ini
%ProgramFiles(x86)%\wise\wise care 365\is-rrs0t.tmp в %ProgramFiles(x86)%\wise\wise care 365\dmanager.dll
%ProgramFiles(x86)%\wise\wise care 365\languages\is-mkehp.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\dutch(nederlands).ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-1fqsj.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\azerbaijani(latin).ini
%ProgramFiles(x86)%\wise\wise care 365\headers\is-ggtak.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\g6.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-62qro.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\g5.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-ov1nq.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\g4.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-jp6qm.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\g3.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-flh7g.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\g2.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-hbpvn.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\g1.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-hju17.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\f7.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-8soio.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\f6.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-i1gpn.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\f5.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-el9nv.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\f4.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-s5h52.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\f3.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-d8ipn.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\f2.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-8k4og.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\f1.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-uan2n.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\f0.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-529t8.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\g7.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-cs8sj.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\e9.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-u7af4.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\e7.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-alj28.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\d7.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-j90l4.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\d4.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-njkpb.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\d3.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-oidsr.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\d2.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-au4sp.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\d1.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-oobfq.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\c7.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-49fef.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\c4.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-123kr.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\b5.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-7srsj.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\a9.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-p2u1v.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\a7.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-nrsbg.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\a6.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-jl2uf.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\a2.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-ed1ft.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\a1.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-jhg7r.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\e8.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-q0i3k.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\g8.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-gdhhp.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\h1.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-dh6vq.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\h2.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-ltfsu.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\j3.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-4do7e.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\j4.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-kn0v6.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\j6.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-38g62.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\j7.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-l7lpn.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\j8.png
%ProgramFiles(x86)%\wise\wise care 365\languages\is-s3pib.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\arabic.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-t0hs3.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\belarusian.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-7j2m4.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\danish.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-aeumv.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\bulgarian.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-c28ff.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\catalan.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-blh5a.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\chinese(simplified).ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-6mrqp.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\chinese(traditional).ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-ailfc.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\croatian.ini
%ProgramFiles(x86)%\wise\wise care 365\languages\is-eoj4k.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\czech.ini
%ProgramFiles(x86)%\wise\wise care 365\headers\is-32pct.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\j1.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-92f4b.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\j0.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-7mod3.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\j.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-8klps.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\i8.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-ag78s.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\i7.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-b1lnb.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\i6.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-5j25f.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\i5.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-ojdto.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\i4.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-b4cm8.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\i3.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-tn3nd.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\i2.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-jd3mt.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\i1.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-9d69r.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\h8.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-rknl9.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\h7.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-s80nq.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\h6.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-if3bi.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\h5.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-6aujc.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\h4.png
%ProgramFiles(x86)%\wise\wise care 365\headers\is-k0ja6.tmp в %ProgramFiles(x86)%\wise\wise care 365\headers\h3.png
%ProgramFiles(x86)%\wise\wise care 365\languages\is-dn0hs.tmp в %ProgramFiles(x86)%\wise\wise care 365\languages\dutch(belgium).ini
%ProgramFiles(x86)%\wise\wise care 365\wisecare365.exe в %ProgramFiles(x86)%\wise\wise care 365\wisecare365.exe.bak

Подменяет следующие файлы

%ProgramFiles(x86)%\wise\wise care 365\wisecare365.exe

Другое

Ищет следующие окна

ClassName: 'TFrmTrayMain' WindowName: ''
ClassName: 'TFrmWPMain' WindowName: ''
ClassName: 'TFrmMOMain' WindowName: ''

Создает и запускает на исполнение

'%CommonProgramFiles(x86)%\~dtyzzyn.tmp' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'%TEMP%\is-aucor.tmp\~dtyzzyn.tmp' /SL5="$90218,10963219,257024,%CommonProgramFiles(x86)%\~dtyzzyn.tmp" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'%WINDIR%\syswow64\schtasks.exe' /delete /tn \WiseCleaner\W365SkipUAC /f' (со скрытым окном)
'%WINDIR%\syswow64\cmd.exe' /c net stop WiseBootAssistant' (со скрытым окном)
'%WINDIR%\syswow64\cmd.exe' /c sc delete WiseBootAssistant' (со скрытым окном)

Запускает на исполнение

'%WINDIR%\syswow64\schtasks.exe' /delete /tn \WiseCleaner\W365SkipUAC /f
'%WINDIR%\syswow64\cmd.exe' /c net stop WiseBootAssistant
'%WINDIR%\syswow64\net1.exe' stop WiseBootAssistant
'%WINDIR%\syswow64\cmd.exe' /c sc delete WiseBootAssistant
'%WINDIR%\syswow64\sc.exe' delete WiseBootAssistant

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней