Trojan.Hosts.44604

Technical Information

To ensure autorun and distribution:

Creates the following services:

[<HKLM>\SYSTEM\ControlSet001\Services\WiseBootAssistant] 'Start' = '00000002'
[<HKLM>\SYSTEM\ControlSet001\Services\WiseBootAssistant] 'ImagePath' = '%ProgramFiles%\Wise\Wise Care 365\BootTime.exe'

Malicious functions:

Executes the following:

'<SYSTEM32>\taskkill.exe' /f /im WiseCare365.exe

Modifies file system:

Creates the following files:

%TEMP%\aut1.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-D7MUC.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-61420.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-HSN5D.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-JEMCP.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-KEP0P.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-992RK.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-1SD0S.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-15EH1.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\is-15OUG.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\is-678ON.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-I0K52.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-3A2H2.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-H4TKA.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-VQBVL.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-NQ0QT.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-H83VR.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-E6MEH.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-0PGLH.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-H9JP4.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-N4UU2.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-SHR10.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-IP530.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-ERJD7.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-S5F1H.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-C0IM0.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-CK5DB.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-71376.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-QHSIE.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-TM1CT.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-15VSH.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-RH02Q.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-FGFRI.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-QUQ7J.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-PKD8Q.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-R61P0.tmp
%APPDATA%\Wise Care 365\config.ini
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-AHUIV.tmp
%ProgramFiles%\Wise\Wise Care 365\is-8MP3F.tmp
%ProgramFiles%\Wise\Wise Care 365\is-9D6JP.tmp
%ProgramFiles%\Wise\Wise Care 365\is-OT2NL.tmp
%ProgramFiles%\Wise\Wise Care 365\is-H5I67.tmp
%ProgramFiles%\Wise\Wise Care 365\is-IGLN9.tmp
%ProgramFiles%\Wise\Wise Care 365\is-9T2OC.tmp
%ProgramFiles%\Wise\Wise Care 365\is-MI2IR.tmp
%ProgramFiles%\Wise\Wise Care 365\is-3RULR.tmp
%ALLUSERSPROFILE%\Start Menu\Programs\Wise Care 365\Wise Care 365.lnk
%ALLUSERSPROFILE%\Desktop\Wise Care 365.lnk
%TEMP%\is-QUOFT.tmp\introduce.url
%ProgramFiles%\Wise\Wise Care 365\unins000.msg
%ProgramFiles%\Wise\Wise Care 365\unins000.dat
%ProgramFiles%\Wise\Wise Care 365\is-487SU.tmp
%ProgramFiles%\Wise\Wise Care 365\is-4VC7L.tmp
%ProgramFiles%\Wise\Wise Care 365\is-QQB2U.tmp
%ProgramFiles%\Wise\Wise Care 365\is-L87MA.tmp
%ProgramFiles%\Wise\Wise Care 365\is-QJ9GQ.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-LKG0I.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-SB30E.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-C49V6.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-TISL4.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-HIHG3.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-TNMP5.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-EI9L1.tmp
%ProgramFiles%\Wise\Wise Care 365\is-6UAHO.tmp
%ProgramFiles%\Wise\Wise Care 365\is-MODTR.tmp
%ProgramFiles%\Wise\Wise Care 365\is-9O7OS.tmp
%ProgramFiles%\Wise\Wise Care 365\is-BBDNC.tmp
%ProgramFiles%\Wise\Wise Care 365\is-GFB41.tmp
%ProgramFiles%\Wise\Wise Care 365\is-JJ48H.tmp
%ProgramFiles%\Wise\Wise Care 365\is-I48PC.tmp
%ProgramFiles%\Wise\Wise Care 365\is-BIK4S.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-LJAM7.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-4SC4F.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-T0VHA.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-5GJRJ.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-KRTU5.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-9IENE.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-SN313.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-M5I9N.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-S2NE1.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-I06NE.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-JQC6B.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-0TL1P.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-OBK8R.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-V4QIT.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-VCB8E.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-0CS4C.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-MEC1C.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-3O4RR.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-DV6IF.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-Q4VQ3.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-ELNQF.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-0ES8J.tmp
%TEMP%\is-A48TB.tmp\~bodegka.tmp
%ProgramFiles%\Wise\Wise Care 365\is-HJ08G.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-TM2FO.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-CEUH6.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-K07AM.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-0PA5C.tmp
%CommonProgramFiles%\~bodegka.ibo
%ProgramFiles%\Wise\Wise Care 365\headers\is-A7IJ2.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-1KJJF.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-2KNOA.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-F37KP.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-LT6O9.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-RJOK1.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-EU9I3.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-FJ80O.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-Q9D8H.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-PBV76.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-OE1RQ.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-1TJUB.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-QL935.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-FNCQM.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-U114L.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-O8MRO.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-2HS9D.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-0A8PP.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-M81M9.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-GFRGT.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-9OOI5.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-1MO3M.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-K1F7K.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-UJ9OG.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-LUOV6.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-M1K6M.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-1U64T.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-II1CA.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-P881M.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-P5Q1Q.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-VB0U3.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-TRJ6K.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-UOKQH.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-GE4CB.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-44VCL.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-NVGIE.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-K7F4E.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-3Q14L.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-AQCO1.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-KC2UD.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-BJAVG.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-JAOB7.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-BDT51.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-GB729.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-E91A1.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-LB6J6.tmp
%APPDATA%\Wise Care 365\config_tray.ini

Sets the 'hidden' attribute to the following files:

%CommonProgramFiles%\~bodegka.ibo

Deletes the following files:

%TEMP%\aut1.tmp
%TEMP%\is-QUOFT.tmp\introduce.url
%TEMP%\is-A48TB.tmp\~bodegka.tmp

Moves the following files:

from %ProgramFiles%\Wise\Wise Care 365\is-HJ08G.tmp to %ProgramFiles%\Wise\Wise Care 365\unins000.exe
from %ProgramFiles%\Wise\Wise Care 365\Themes\is-NQ0QT.tmp to %ProgramFiles%\Wise\Wise Care 365\Themes\halloween-2016.wskn
from %ProgramFiles%\Wise\Wise Care 365\Themes\is-VQBVL.tmp to %ProgramFiles%\Wise\Wise Care 365\Themes\halloween-2016.png
from %ProgramFiles%\Wise\Wise Care 365\Themes\is-15EH1.tmp to %ProgramFiles%\Wise\Wise Care 365\Themes\default.wskn
from %ProgramFiles%\Wise\Wise Care 365\Themes\is-KEP0P.tmp to %ProgramFiles%\Wise\Wise Care 365\Themes\chinese-new-year-2018.wskn
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-JEMCP.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Vietnamese.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-HSN5D.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Ukrainian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-61420.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Turkish.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-D7MUC.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Thai.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-1SD0S.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Swedish(Sweden).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-992RK.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Spanish(Spain).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-H83VR.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Slovenian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-E6MEH.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Slovak.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-0PGLH.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Serbian(Cyrillic).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-FGFRI.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Russian.ini
from %ProgramFiles%\Wise\Wise Care 365\tools\is-15OUG.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\toolsv3.txt
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-RH02Q.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Romanian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-TM1CT.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Portuguese(Brazil).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-QHSIE.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Polish.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-71376.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Persian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-QUQ7J.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Norwegian(Nynorsk).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-CK5DB.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Norwegian(Bokmal).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-S5F1H.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Nepali.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-ERJD7.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Kurdish.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-IP530.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Korean.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-SHR10.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Japanese.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-N4UU2.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Italian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-H9JP4.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Hungarian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-C0IM0.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Greek.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-LJAM7.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\German.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-T0VHA.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Georgian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-15VSH.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Portuguese(Portugal).ini
from %ProgramFiles%\Wise\Wise Care 365\tools\is-678ON.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\toolsv3.zip
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-I0K52.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\AutoShutdown.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-3A2H2.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\DateRecovery.png
from %ProgramFiles%\Wise\Wise Care 365\is-GFB41.tmp to %ProgramFiles%\Wise\Wise Care 365\AutoUpdate.exe
from %ProgramFiles%\Wise\Wise Care 365\is-JJ48H.tmp to %ProgramFiles%\Wise\Wise Care 365\Rate.info
from %ProgramFiles%\Wise\Wise Care 365\is-I48PC.tmp to %ProgramFiles%\Wise\Wise Care 365\skin.ico
from %ProgramFiles%\Wise\Wise Care 365\is-QJ9GQ.tmp to %ProgramFiles%\Wise\Wise Care 365\sqlite3.dll
from %ProgramFiles%\Wise\Wise Care 365\is-L87MA.tmp to %ProgramFiles%\Wise\Wise Care 365\UninstallTP.exe
from %ProgramFiles%\Wise\Wise Care 365\is-QQB2U.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseBootBooster.exe
from %ProgramFiles%\Wise\Wise Care 365\is-MI2IR.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseDefrag.dll
from %ProgramFiles%\Wise\Wise Care 365\is-487SU.tmp to %ProgramFiles%\Wise\Wise Care 365\geo.db
from %ProgramFiles%\Wise\Wise Care 365\is-8MP3F.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseEraser.dll
from %ProgramFiles%\Wise\Wise Care 365\is-9D6JP.tmp to %ProgramFiles%\Wise\Wise Care 365\DManager.dll
from %ProgramFiles%\Wise\Wise Care 365\is-OT2NL.tmp to %ProgramFiles%\Wise\Wise Care 365\libeay32.dll
from %ProgramFiles%\Wise\Wise Care 365\is-H5I67.tmp to %ProgramFiles%\Wise\Wise Care 365\ssleay32.dll
from %ProgramFiles%\Wise\Wise Care 365\is-IGLN9.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseTray.exe
from %ProgramFiles%\Wise\Wise Care 365\is-3RULR.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseTurbo.exe
from %ProgramFiles%\Wise\Wise Care 365\is-BBDNC.tmp to %ProgramFiles%\Wise\Wise Care 365\License.txt
from %ProgramFiles%\Wise\Wise Care 365\is-9O7OS.tmp to %ProgramFiles%\Wise\Wise Care 365\fileshredder.ico
from %ProgramFiles%\Wise\Wise Care 365\is-MODTR.tmp to %ProgramFiles%\Wise\Wise Care 365\DefragOptions.ini
from %ProgramFiles%\Wise\Wise Care 365\is-BIK4S.tmp to %ProgramFiles%\Wise\Wise Care 365\BootTime.exe
from %ProgramFiles%\Wise\Wise Care 365\is-6UAHO.tmp to %ProgramFiles%\Wise\Wise Care 365\BootPack.wpk
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-TNMP5.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\wrm32.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-HIHG3.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\wgb32.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-TISL4.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\SystemMonitor.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-C49V6.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\Reminder.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-SB30E.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\ProgramUninstaller.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-LKG0I.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\MemoryOptimizer.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-EI9L1.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\JetSearch.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-AHUIV.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\Hotkey.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-R61P0.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\GameBooster.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-4SC4F.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\ForceDeleter.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-PKD8Q.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\FolderHider.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-H4TKA.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\DuplicateFinder.png
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-LB6J6.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\French.ini
from %ProgramFiles%\Wise\Wise Care 365\is-9T2OC.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseCare365.exe
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-OE1RQ.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Finnish.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-O8MRO.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Belarusian.ini
from %ProgramFiles%\Wise\Wise Care 365\headers\is-MEC1C.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g6.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-0CS4C.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g5.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-VCB8E.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-V4QIT.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g3.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-OBK8R.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g2.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-DV6IF.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g1.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-3O4RR.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-0TL1P.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f6.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-S2NE1.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f5.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-M5I9N.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-SN313.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f3.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-9IENE.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f2.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-KRTU5.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f1.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-JQC6B.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f0.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-Q9D8H.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-I06NE.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\e9.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-ELNQF.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\e7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-0ES8J.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\d7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-EU9I3.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\d4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-RJOK1.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\d3.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-LT6O9.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\d2.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-F37KP.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\d1.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-2KNOA.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\c7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-1KJJF.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\c4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-FJ80O.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\b5.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-A7IJ2.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\a9.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-0PA5C.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\a7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-K07AM.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\a6.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-CEUH6.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\a2.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-TM2FO.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\a1.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-Q4VQ3.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\e8.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-5GJRJ.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g8.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-PBV76.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h1.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-1TJUB.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h2.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-II1CA.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j3.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-0A8PP.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-M81M9.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j6.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-QL935.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-FNCQM.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j8.png
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-U114L.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Azerbaijan(Latin).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-2HS9D.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Bulgarian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-UJ9OG.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Dutch(Nederlands).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-GFRGT.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Catalan.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-M1K6M.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Chinese(Simplified).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-1U64T.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Chinese(Traditional).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-9OOI5.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Czech.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-1MO3M.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Danish.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-K1F7K.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Dutch(Belgium).ini
from %ProgramFiles%\Wise\Wise Care 365\headers\is-P881M.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j1.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-P5Q1Q.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j0.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-GB729.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-BDT51.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i8.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-JAOB7.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-BJAVG.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i6.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-KC2UD.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i5.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-AQCO1.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-E91A1.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i3.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-3Q14L.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i2.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-NVGIE.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i1.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-44VCL.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h8.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-GE4CB.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-UOKQH.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h6.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-TRJ6K.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h5.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-VB0U3.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-K7F4E.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h3.png
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-LUOV6.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\English.ini
from %ProgramFiles%\Wise\Wise Care 365\is-4VC7L.tmp to %ProgramFiles%\Wise\Wise Care 365\BootLauncher.exe

Modifies the HOSTS file.

Miscellaneous:

Searches for the following windows:

ClassName: 'TFrmTrayMain' WindowName: ''
ClassName: 'TFrmWPMain' WindowName: ''
ClassName: 'TFrmMOMain' WindowName: ''
ClassName: '' WindowName: ''

Creates and executes the following:

'%CommonProgramFiles%\~bodegka.ibo' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'%TEMP%\is-A48TB.tmp\~bodegka.tmp' /SL5="$100E2,8276460,131584,%CommonProgramFiles%\~bodegka.ibo" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'%ProgramFiles%\Wise\Wise Care 365\BootTime.exe'

Executes the following:

'<SYSTEM32>\cmd.exe' /c sc stop WiseBootAssistant
'<SYSTEM32>\sc.exe' stop WiseBootAssistant
'<SYSTEM32>\cmd.exe' /c sc delete WiseBootAssistant
'<SYSTEM32>\sc.exe' delete WiseBootAssistant

Технології

Терміни

Навчання

Міфи

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней