Підтримка
Цілодобова підтримка | Правила звернення

Зателефонуйте

Глобальна підтримка:
+7 (495) 789-45-86

Поширені запитання |  Форум |  Бот самопідтримки Telegram

Ваші запити

  • Всі: -
  • Незакриті: -
  • Останій: -

Зателефонуйте

Глобальна підтримка:
+7 (495) 789-45-86

Зв'яжіться з нами Незакриті запити: 

Профіль

Профіль

Trojan.Hosts.44795

Добавлен в вирусную базу Dr.Web: 2018-06-02

Описание добавлено:

Technical Information

To ensure autorun and distribution:
Creates the following services:
  • [<HKLM>\SYSTEM\ControlSet001\Services\WiseBootAssistant] 'Start' = '00000002'
  • [<HKLM>\SYSTEM\ControlSet001\Services\WiseBootAssistant] 'ImagePath' = '%ProgramFiles%\Wise\Wise Care 365\BootTime.exe'
Modifies file system:
Creates the following files:
  • %TEMP%\aut1.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-7DLBO.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-I5UMO.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-D215T.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-SROB1.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-J0A2S.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-5H0H8.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Themes\is-U5DDE.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Themes\is-QC4VJ.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Themes\is-SUMKN.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Themes\is-FI21J.tmp
  • %ProgramFiles%\Wise\Wise Care 365\tools\is-JF2I3.tmp
  • %ProgramFiles%\Wise\Wise Care 365\tools\is-55ILS.tmp
  • %ProgramFiles%\Wise\Wise Care 365\tools\img\is-7AEV4.tmp
  • %ProgramFiles%\Wise\Wise Care 365\tools\img\is-86USG.tmp
  • %ProgramFiles%\Wise\Wise Care 365\tools\img\is-112RK.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-6M75D.tmp
  • %ProgramFiles%\Wise\Wise Care 365\tools\img\is-7I4KK.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-0NKNP.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-9DALM.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-0FORD.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-1T9U7.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-UO29F.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-FMIK1.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-L4T41.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-BSLS9.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-NKEUP.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-F16PI.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-04A6N.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-9K0CN.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-AFH01.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-GNKAR.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-OAUK7.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-8SQ3A.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-SKJG0.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-TVVHA.tmp
  • %ProgramFiles%\Wise\Wise Care 365\is-7CSHA.tmp
  • %TEMP%\nsi4.tmp\nsExec.dll
  • %ProgramFiles%\Wise\Wise Care 365\tools\img\is-7C7LQ.tmp
  • %ProgramFiles%\Wise\Wise Care 365\is-FLI5K.tmp
  • %ProgramFiles%\Wise\Wise Care 365\is-HMQGG.tmp
  • %ProgramFiles%\Wise\Wise Care 365\is-6DN17.tmp
  • %ProgramFiles%\Wise\Wise Care 365\is-JLBO1.tmp
  • %ProgramFiles%\Wise\Wise Care 365\is-FGPQD.tmp
  • %ProgramFiles%\Wise\Wise Care 365\is-LS8ND.tmp
  • %ProgramFiles%\Wise\Wise Care 365\is-AQ5UN.tmp
  • %ProgramFiles%\Wise\Wise Care 365\is-A4TII.tmp
  • %ProgramFiles%\Wise\Wise Care 365\is-0RN22.tmp
  • %ALLUSERSPROFILE%\Start Menu\Programs\Wise Care 365\Wise Care 365.lnk
  • %ALLUSERSPROFILE%\Desktop\Wise Care 365.lnk
  • %TEMP%\is-E6M2O.tmp\introduce.url
  • %ProgramFiles%\Wise\Wise Care 365\unins000.msg
  • %ProgramFiles%\Wise\Wise Care 365\unins000.dat
  • %TEMP%\hosts.bat
  • %ProgramFiles%\Wise\Wise Care 365\is-Q3GU3.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-2OMGG.tmp
  • %ProgramFiles%\Wise\Wise Care 365\is-MGVQ7.tmp
  • %ProgramFiles%\Wise\Wise Care 365\is-O7SRV.tmp
  • %ProgramFiles%\Wise\Wise Care 365\tools\img\is-59HMH.tmp
  • %ProgramFiles%\Wise\Wise Care 365\tools\img\is-A758D.tmp
  • %ProgramFiles%\Wise\Wise Care 365\tools\img\is-38M91.tmp
  • %ProgramFiles%\Wise\Wise Care 365\tools\img\is-D2VGD.tmp
  • %ProgramFiles%\Wise\Wise Care 365\tools\img\is-PFQAE.tmp
  • %ProgramFiles%\Wise\Wise Care 365\tools\img\is-LS7MR.tmp
  • %ProgramFiles%\Wise\Wise Care 365\tools\img\is-H9N86.tmp
  • %ProgramFiles%\Wise\Wise Care 365\is-HLBV4.tmp
  • %ProgramFiles%\Wise\Wise Care 365\is-J0UJ1.tmp
  • %ProgramFiles%\Wise\Wise Care 365\is-NQQSP.tmp
  • %ProgramFiles%\Wise\Wise Care 365\is-FACCT.tmp
  • %ProgramFiles%\Wise\Wise Care 365\is-P5VPN.tmp
  • %ProgramFiles%\Wise\Wise Care 365\is-CPK72.tmp
  • %ProgramFiles%\Wise\Wise Care 365\is-F13C0.tmp
  • %ProgramFiles%\Wise\Wise Care 365\is-AB4FV.tmp
  • %ProgramFiles%\Wise\Wise Care 365\tools\img\is-RKR3O.tmp
  • %ProgramFiles%\Wise\Wise Care 365\tools\img\is-4VNAN.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-QLFHC.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-59CMI.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-M4IEQ.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-OQT11.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-NHP0C.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-MKGI8.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-2H8LS.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-0UKRA.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-2GRMM.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-80O0U.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-71FQE.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-8A1P5.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-RKAEU.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-C9894.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-3F1E9.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-L7RJA.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-V2K4Q.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-Q2B67.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-N23LG.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-26IK5.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-9QFNH.tmp
  • %ALLUSERSPROFILE%\Application Data\Setup.exe
  • %TEMP%\aut2.tmp
  • %ALLUSERSPROFILE%\Application Data\Setup2.exe
  • %TEMP%\is-PN7TN.tmp\Setup.tmp
  • %ProgramFiles%\Wise\Wise Care 365\is-NPH8O.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-PJ8QT.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-3PKQT.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-C37L8.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-L5VS6.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-HT3F6.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-CNHVA.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-CNH68.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-V06O7.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-IEPUB.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-3S6Q5.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-GKF5J.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-RR72K.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-ALVG4.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-3N4O2.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-1CU0G.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-BCL9V.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-EIQVI.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-G5LAO.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-1EMUS.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-4MSGP.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-JRJCH.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-R8L2H.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-P8I8S.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-T1K1O.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-HVJSG.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-TVDPD.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-GESU8.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-3AKRN.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-NAH98.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-4PN58.tmp
  • %ProgramFiles%\Wise\Wise Care 365\Languages\is-FMF2P.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-9RTVS.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-VV7I1.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-2BU4Q.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-MHAUO.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-E1O3L.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-5A3CF.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-VRJ9R.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-0J0IS.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-85VFA.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-1HG9P.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-7USBA.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-N9O59.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-6292A.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-FB2RN.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-CE640.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-729RM.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-VK5PC.tmp
  • %ProgramFiles%\Wise\Wise Care 365\headers\is-J1174.tmp
  • %TEMP%\nsi4.tmp\ns5.tmp
Sets the 'hidden' attribute to the following files:
  • %ALLUSERSPROFILE%\Application Data\Setup.exe
  • %ALLUSERSPROFILE%\Application Data\Setup2.exe
Deletes the following files:
  • %TEMP%\aut1.tmp
  • %TEMP%\aut2.tmp
  • %TEMP%\is-E6M2O.tmp\introduce.url
  • %TEMP%\is-PN7TN.tmp\Setup.tmp
Moves the following files:
  • from %ProgramFiles%\Wise\Wise Care 365\is-NPH8O.tmp to %ProgramFiles%\Wise\Wise Care 365\unins000.exe
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-9DALM.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Russian.ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-TVVHA.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Serbian(Cyrillic).ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-0NKNP.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Slovak.ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-6M75D.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Slovenian.ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-7DLBO.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Spanish(Spain).ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-I5UMO.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Swedish(Sweden).ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-SROB1.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Turkish.ini
  • from %ProgramFiles%\Wise\Wise Care 365\tools\is-55ILS.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\toolsv3.zip
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-J0A2S.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Ukrainian.ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-5H0H8.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Vietnamese.ini
  • from %ProgramFiles%\Wise\Wise Care 365\Themes\is-U5DDE.tmp to %ProgramFiles%\Wise\Wise Care 365\Themes\chinese-new-year-2018.wskn
  • from %ProgramFiles%\Wise\Wise Care 365\Themes\is-QC4VJ.tmp to %ProgramFiles%\Wise\Wise Care 365\Themes\default.wskn
  • from %ProgramFiles%\Wise\Wise Care 365\Themes\is-SUMKN.tmp to %ProgramFiles%\Wise\Wise Care 365\Themes\halloween-2016.png
  • from %ProgramFiles%\Wise\Wise Care 365\Themes\is-FI21J.tmp to %ProgramFiles%\Wise\Wise Care 365\Themes\halloween-2016.wskn
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-D215T.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Thai.ini
  • from %ProgramFiles%\Wise\Wise Care 365\tools\is-JF2I3.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\toolsv3.txt
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-OAUK7.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Portuguese(Brazil).ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-GNKAR.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Polish.ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-AFH01.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Persian.ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-9K0CN.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Norwegian(Nynorsk).ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-04A6N.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Norwegian(Bokmal).ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-F16PI.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Nepali.ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-NKEUP.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Kurdish.ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-BSLS9.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Korean.ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-L4T41.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Japanese.ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-FMIK1.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Italian.ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-UO29F.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Hungarian.ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-1T9U7.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Greek.ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-0FORD.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\German.ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-2OMGG.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Georgian.ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-SKJG0.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Romanian.ini
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-N9O59.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i3.png
  • from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-7AEV4.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\AutoShutdown.png
  • from %ProgramFiles%\Wise\Wise Care 365\is-AQ5UN.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseTurbo.exe
  • from %ProgramFiles%\Wise\Wise Care 365\is-P5VPN.tmp to %ProgramFiles%\Wise\Wise Care 365\License.txt
  • from %ProgramFiles%\Wise\Wise Care 365\is-CPK72.tmp to %ProgramFiles%\Wise\Wise Care 365\AutoUpdate.exe
  • from %ProgramFiles%\Wise\Wise Care 365\is-F13C0.tmp to %ProgramFiles%\Wise\Wise Care 365\Rate.info
  • from %ProgramFiles%\Wise\Wise Care 365\is-AB4FV.tmp to %ProgramFiles%\Wise\Wise Care 365\skin.ico
  • from %ProgramFiles%\Wise\Wise Care 365\is-O7SRV.tmp to %ProgramFiles%\Wise\Wise Care 365\sqlite3.dll
  • from %ProgramFiles%\Wise\Wise Care 365\is-7CSHA.tmp to %ProgramFiles%\Wise\Wise Care 365\UninstallTP.exe
  • from %ProgramFiles%\Wise\Wise Care 365\is-Q3GU3.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseCare365.exe
  • from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-86USG.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\DateRecovery.png
  • from %ProgramFiles%\Wise\Wise Care 365\is-FLI5K.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseDefrag.dll
  • from %ProgramFiles%\Wise\Wise Care 365\is-HMQGG.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseEraser.dll
  • from %ProgramFiles%\Wise\Wise Care 365\is-6DN17.tmp to %ProgramFiles%\Wise\Wise Care 365\DManager.dll
  • from %ProgramFiles%\Wise\Wise Care 365\is-JLBO1.tmp to %ProgramFiles%\Wise\Wise Care 365\libeay32.dll
  • from %ProgramFiles%\Wise\Wise Care 365\is-FGPQD.tmp to %ProgramFiles%\Wise\Wise Care 365\ssleay32.dll
  • from %ProgramFiles%\Wise\Wise Care 365\is-LS8ND.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseTray.exe
  • from %ProgramFiles%\Wise\Wise Care 365\is-FACCT.tmp to %ProgramFiles%\Wise\Wise Care 365\fileshredder.ico
  • from %ProgramFiles%\Wise\Wise Care 365\is-NQQSP.tmp to %ProgramFiles%\Wise\Wise Care 365\DefragOptions.ini
  • from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-112RK.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\DuplicateFinder.png
  • from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-38M91.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\ProgramUninstaller.png
  • from %ProgramFiles%\Wise\Wise Care 365\is-J0UJ1.tmp to %ProgramFiles%\Wise\Wise Care 365\BootTime.exe
  • from %ProgramFiles%\Wise\Wise Care 365\is-HLBV4.tmp to %ProgramFiles%\Wise\Wise Care 365\BootPack.wpk
  • from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-H9N86.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\wrm32.png
  • from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-LS7MR.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\wgb32.png
  • from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-PFQAE.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\SystemMonitor.png
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-8SQ3A.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Portuguese(Portugal).ini
  • from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-D2VGD.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\Reminder.png
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-QLFHC.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\French.ini
  • from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-59HMH.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\JetSearch.png
  • from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-7C7LQ.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\Hotkey.png
  • from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-4VNAN.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\GameBooster.png
  • from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-RKR3O.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\ForceDeleter.png
  • from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-7I4KK.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\FolderHider.png
  • from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-A758D.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\MemoryOptimizer.png
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-FMF2P.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Finnish.ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-ALVG4.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\English.ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-NAH98.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Dutch(Nederlands).ini
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-OQT11.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\e9.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-N23LG.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g6.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-V2K4Q.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g5.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-L7RJA.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g4.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-3F1E9.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g3.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-C9894.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g2.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-RKAEU.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g1.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-8A1P5.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f7.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-71FQE.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f6.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-80O0U.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f5.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-2GRMM.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f4.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-0UKRA.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f3.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-2H8LS.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f2.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-MKGI8.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f1.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-NHP0C.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f0.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-M4IEQ.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\e8.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-V06O7.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\c7.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-Q2B67.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\e7.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-26IK5.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\d7.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-GKF5J.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\d4.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-9QFNH.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\d3.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-3S6Q5.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\d2.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-IEPUB.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\d1.png
  • from %ProgramFiles%\Wise\Wise Care 365\is-A4TII.tmp to %ProgramFiles%\Wise\Wise Care 365\geo.db
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-CNH68.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\c4.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-CNHVA.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\b5.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-HT3F6.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\a9.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-L5VS6.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\a7.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-C37L8.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\a6.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-3PKQT.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\a2.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-PJ8QT.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\a1.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-59CMI.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g8.png
  • from %ProgramFiles%\Wise\Wise Care 365\is-MGVQ7.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseBootBooster.exe
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-3N4O2.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h1.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-VV7I1.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j.png
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-JRJCH.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Belarusian.ini
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-1CU0G.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j4.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-BCL9V.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j6.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-EIQVI.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j7.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-G5LAO.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j8.png
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-1EMUS.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Arabic.ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-4MSGP.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Azerbaijan(Latin).ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-R8L2H.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Bulgarian.ini
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-J1174.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g7.png
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-P8I8S.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Catalan.ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-T1K1O.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Chinese(Simplified).ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-HVJSG.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Chinese(Traditional).ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-TVDPD.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Czech.ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-GESU8.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Danish.ini
  • from %ProgramFiles%\Wise\Wise Care 365\Languages\is-3AKRN.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Dutch(Belgium).ini
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-4PN58.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j3.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-9RTVS.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j1.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-VK5PC.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i8.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-729RM.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i7.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-CE640.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i6.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-FB2RN.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i5.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-6292A.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i4.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-7USBA.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i2.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-MHAUO.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h3.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-2BU4Q.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h2.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-85VFA.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h8.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-0J0IS.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h7.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-VRJ9R.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h6.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-5A3CF.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h5.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-E1O3L.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h4.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-RR72K.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j0.png
  • from %ProgramFiles%\Wise\Wise Care 365\headers\is-1HG9P.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i1.png
  • from %ProgramFiles%\Wise\Wise Care 365\is-0RN22.tmp to %ProgramFiles%\Wise\Wise Care 365\BootLauncher.exe
Modifies the HOSTS file.
Miscellaneous:
Searches for the following windows:
  • ClassName: 'TFrmTrayMain' WindowName: ''
  • ClassName: 'TFrmWPMain' WindowName: ''
  • ClassName: 'TFrmMOMain' WindowName: ''
Creates and executes the following:
  • '%ALLUSERSPROFILE%\Application Data\Setup.exe' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
  • '%TEMP%\is-PN7TN.tmp\Setup.tmp' /SL5="$400DE,8310676,131584,%ALLUSERSPROFILE%\Application Data\Setup.exe" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
  • '%ProgramFiles%\Wise\Wise Care 365\BootTime.exe'
  • '%ALLUSERSPROFILE%\Application Data\Setup2.exe' Parametre Bulunamadı
  • '%TEMP%\nsi4.tmp\ns5.tmp' "<SYSTEM32>\cmd.exe" /C cd "%HOMEPATH%\Local Settings\Temp" & "hosts.bat"
Executes the following:
  • '<SYSTEM32>\cmd.exe' /C cd "%HOMEPATH%\Local Settings\Temp" & "hosts.bat"
  • '<SYSTEM32>\ipconfig.exe' -flushdns

Рекомендации по лечению

  1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
  2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Скачать Dr.Web

По серийному номеру

Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

Скачать Dr.Web

По серийному номеру

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке