Trojan.Hosts.43870

Technical Information

To ensure autorun and distribution:

Creates the following services:

[<HKLM>\SYSTEM\ControlSet001\Services\WiseBootAssistant] 'ImagePath' = '%ProgramFiles%\Wise\Wise Care 365\BootTime.exe'
[<HKLM>\SYSTEM\ControlSet001\Services\WiseBootAssistant] 'Start' = '00000002'

Malicious functions:

Executes the following:

'<SYSTEM32>\taskkill.exe' /f /im WiseCare365.exe

Modifies file system:

Creates the following files:

%ProgramFiles%\Wise\Wise Care 365\Languages\is-4TKBJ.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-3EORS.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-RDS8U.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-NVA3E.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-UT11T.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-OT745.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-9880P.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-5T4K1.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-PBQBM.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-V89IU.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-BOSBT.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-S31AI.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-UCESA.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-3AICR.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-CQ8TM.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-U0J4B.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\is-81D2S.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-9KQ0L.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-4FKAP.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-NUTUQ.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-LJHDM.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-HVQHT.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-QEGP7.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-VR23T.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-H2NG2.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-LAF2V.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-S42HU.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-PGE7O.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-HBC2O.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-JCLFP.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-Q24GS.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-C81TT.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-ETQ5D.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-CSPS0.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-OA9CN.tmp
%ProgramFiles%\Wise\Wise Care 365\is-Q9RF1.tmp
%ProgramFiles%\Wise\Wise Care 365\is-59I4Q.tmp
%ProgramFiles%\Wise\Wise Care 365\is-NM9G8.tmp
%ProgramFiles%\Wise\Wise Care 365\is-BAH6C.tmp
%ProgramFiles%\Wise\Wise Care 365\is-LDCJJ.tmp
%ProgramFiles%\Wise\Wise Care 365\is-LR2DH.tmp
%ProgramFiles%\Wise\Wise Care 365\is-3TB47.tmp
%ProgramFiles%\Wise\Wise Care 365\is-5H5Q5.tmp
%ProgramFiles%\Wise\Wise Care 365\is-UO5BS.tmp
%ProgramFiles%\Wise\Wise Care 365\unins000.dat
%ProgramFiles%\Wise\Wise Care 365\unins000.msg
%APPDATA%\Wise Care 365\config_tray.ini
%APPDATA%\Wise Care 365\config.ini
%ProgramFiles%\Wise\Wise Care 365\is-UP8SM.tmp
%ProgramFiles%\Wise\Wise Care 365\is-0N49A.tmp
%ALLUSERSPROFILE%\Desktop\Wise Care 365.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\Wise Care 365\Wise Care 365.lnk
%ProgramFiles%\Wise\Wise Care 365\is-8FTO5.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-URN47.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-Q89VO.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-PLBMO.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-7R1OO.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-3SHCF.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-63TE0.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-JBVN4.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-RI271.tmp
%ProgramFiles%\Wise\Wise Care 365\is-BCD0T.tmp
%ProgramFiles%\Wise\Wise Care 365\is-S96S8.tmp
%ProgramFiles%\Wise\Wise Care 365\is-3RFTA.tmp
%ProgramFiles%\Wise\Wise Care 365\is-C4O4B.tmp
%ProgramFiles%\Wise\Wise Care 365\is-OEJ67.tmp
%ProgramFiles%\Wise\Wise Care 365\is-EJGB8.tmp
%ProgramFiles%\Wise\Wise Care 365\is-6T9OT.tmp
%ProgramFiles%\Wise\Wise Care 365\is-3FSL6.tmp
%ProgramFiles%\Wise\Wise Care 365\is-0DBA6.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-OIHK3.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-SDTBO.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-AAJJ8.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-O4SUV.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-PTFSD.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-H4E97.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-4LIVB.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-QKDHQ.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-RD8KP.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-P0OO2.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-UGT47.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-I3TOT.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-6BJ7A.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-P6N41.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-RG5AA.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-OIFIN.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-K7LPG.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-TOBRF.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-CABB7.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-VRUJF.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-MLADT.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-U0TSR.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-1GHFF.tmp
%CommonProgramFiles%\~qkztxmq.ibo
%TEMP%\aut1.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-331GL.tmp
%ProgramFiles%\Wise\Wise Care 365\is-CNDPL.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-LBA5V.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-RBQKJ.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-QB8MF.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-AUTHL.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-N8T4D.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-277F7.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-E7MIQ.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-34GLA.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-F12AH.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-8GL8G.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-ED3N2.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-2R7L2.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-PS3SS.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-BA05I.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-RT8A9.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-HMRM1.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-52TV9.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-RE796.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-SVMME.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-ERIU0.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-E1F4C.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-FRTQS.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-C2UVM.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-D5DM2.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-MPSTC.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-KNJU3.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-9UIR9.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-MS373.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-UGNHS.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-KBER5.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-1SFGD.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-8VRJT.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-H7AD1.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-21CL9.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-IIC9D.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-RRSU6.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-P65Q2.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-4P231.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-0BVC4.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-RMA1H.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-ME1HM.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-BV2FI.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-MHTSL.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-F7LKL.tmp

Sets the 'hidden' attribute to the following files:

%CommonProgramFiles%\~qkztxmq.ibo

Deletes the following files:

%TEMP%\is-UM2F4.tmp\~qkztxmq.tmp
%TEMP%\is-1KSVM.tmp\introduce.url
%TEMP%\aut1.tmp

Moves the following files:

from %ProgramFiles%\Wise\Wise Care 365\Languages\is-5T4K1.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Spanish(Spain).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-UT11T.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Slovenian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-3EORS.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Thai.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-9880P.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Swedish(Sweden).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-JCLFP.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Russian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-Q24GS.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Romanian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-OT745.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Slovak.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-9KQ0L.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Serbian(Cyrillic).ini
from %ProgramFiles%\Wise\Wise Care 365\Themes\is-3AICR.tmp to %ProgramFiles%\Wise\Wise Care 365\Themes\halloween-2016.wskn
from %ProgramFiles%\Wise\Wise Care 365\Themes\is-CQ8TM.tmp to %ProgramFiles%\Wise\Wise Care 365\Themes\halloween-2016.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-U0J4B.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\AutoShutdown.png
from %ProgramFiles%\Wise\Wise Care 365\tools\is-81D2S.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\toolsv3.txt
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-NVA3E.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Ukrainian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-4TKBJ.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Turkish.ini
from %ProgramFiles%\Wise\Wise Care 365\Themes\is-PBQBM.tmp to %ProgramFiles%\Wise\Wise Care 365\Themes\default.wskn
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-RDS8U.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Vietnamese.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-PGE7O.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Portuguese(Portugal).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-H2NG2.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Hungarian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-LAF2V.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Greek.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-4FKAP.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Japanese.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-NUTUQ.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Italian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-OIHK3.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Finnish.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-E1F4C.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\English.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-QEGP7.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\German.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-VR23T.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\French.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-OA9CN.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Persian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-C81TT.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Norwegian(Nynorsk).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-HBC2O.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Portuguese(Brazil).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-CSPS0.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Polish.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-LJHDM.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Kurdish.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-HVQHT.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Korean.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-ETQ5D.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Norwegian(Bokmal).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-S42HU.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Nepali.ini
from %ProgramFiles%\Wise\Wise Care 365\is-LR2DH.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseBootBooster.exe
from %ProgramFiles%\Wise\Wise Care 365\is-8FTO5.tmp to %ProgramFiles%\Wise\Wise Care 365\UninstallTP.exe
from %ProgramFiles%\Wise\Wise Care 365\is-5H5Q5.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseDefrag.dll
from %ProgramFiles%\Wise\Wise Care 365\is-LDCJJ.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseCare365.exe
from %ProgramFiles%\Wise\Wise Care 365\is-S96S8.tmp to %ProgramFiles%\Wise\Wise Care 365\Rate.info
from %ProgramFiles%\Wise\Wise Care 365\is-3RFTA.tmp to %ProgramFiles%\Wise\Wise Care 365\AutoUpdate.exe
from %ProgramFiles%\Wise\Wise Care 365\is-C4O4B.tmp to %ProgramFiles%\Wise\Wise Care 365\sqlite3.dll
from %ProgramFiles%\Wise\Wise Care 365\is-OEJ67.tmp to %ProgramFiles%\Wise\Wise Care 365\skin.ico
from %ProgramFiles%\Wise\Wise Care 365\is-UO5BS.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseTurbo.exe
from %ProgramFiles%\Wise\Wise Care 365\is-NM9G8.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseTray.exe
from %ProgramFiles%\Wise\Wise Care 365\is-UP8SM.tmp to %ProgramFiles%\Wise\Wise Care 365\BootLauncher.exe
from %ProgramFiles%\Wise\Wise Care 365\is-0N49A.tmp to %ProgramFiles%\Wise\Wise Care 365\geo.db
from %ProgramFiles%\Wise\Wise Care 365\is-59I4Q.tmp to %ProgramFiles%\Wise\Wise Care 365\DManager.dll
from %ProgramFiles%\Wise\Wise Care 365\is-3TB47.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseEraser.dll
from %ProgramFiles%\Wise\Wise Care 365\is-BAH6C.tmp to %ProgramFiles%\Wise\Wise Care 365\ssleay32.dll
from %ProgramFiles%\Wise\Wise Care 365\is-Q9RF1.tmp to %ProgramFiles%\Wise\Wise Care 365\libeay32.dll
from %ProgramFiles%\Wise\Wise Care 365\is-3FSL6.tmp to %ProgramFiles%\Wise\Wise Care 365\License.txt
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-3SHCF.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\JetSearch.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-63TE0.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\Hotkey.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-JBVN4.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\ProgramUninstaller.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-RI271.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\MemoryOptimizer.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-V89IU.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\FolderHider.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-BOSBT.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\DateRecovery.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-S31AI.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\GameBooster.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-UCESA.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\ForceDeleter.png
from %ProgramFiles%\Wise\Wise Care 365\is-6T9OT.tmp to %ProgramFiles%\Wise\Wise Care 365\BootTime.exe
from %ProgramFiles%\Wise\Wise Care 365\is-BCD0T.tmp to %ProgramFiles%\Wise\Wise Care 365\BootPack.wpk
from %ProgramFiles%\Wise\Wise Care 365\is-0DBA6.tmp to %ProgramFiles%\Wise\Wise Care 365\fileshredder.ico
from %ProgramFiles%\Wise\Wise Care 365\is-EJGB8.tmp to %ProgramFiles%\Wise\Wise Care 365\DefragOptions.ini
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-URN47.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\SystemMonitor.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-Q89VO.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\Reminder.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-PLBMO.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\wrm32.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-7R1OO.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\wgb32.png
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-FRTQS.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Dutch(Nederlands).ini
from %ProgramFiles%\Wise\Wise Care 365\headers\is-PTFSD.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f5.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-SDTBO.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-P0OO2.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-O4SUV.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f6.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-RD8KP.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f1.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-H4E97.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f0.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-AAJJ8.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f3.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-QKDHQ.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f2.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-UGT47.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g6.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-I3TOT.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g5.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-6BJ7A.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g8.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-P6N41.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-RG5AA.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g2.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-OIFIN.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g1.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-K7LPG.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-TOBRF.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g3.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-4LIVB.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\e9.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-U0TSR.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\a9.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-1GHFF.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\a7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-E7MIQ.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\c4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-LBA5V.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\b5.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-331GL.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\a1.png
from %ProgramFiles%\Wise\Wise Care 365\is-CNDPL.tmp to %ProgramFiles%\Wise\Wise Care 365\unins000.exe
from %ProgramFiles%\Wise\Wise Care 365\headers\is-VRUJF.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\a6.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-MLADT.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\a2.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-N8T4D.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\d7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-RBQKJ.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\d4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-CABB7.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\e8.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-AUTHL.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\e7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-F12AH.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\d1.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-277F7.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\c7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-QB8MF.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\d3.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-34GLA.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\d2.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-ED3N2.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-HMRM1.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j6.png
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-PS3SS.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Azerbaijan(Latin).ini
from %ProgramFiles%\Wise\Wise Care 365\headers\is-8GL8G.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j8.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-RT8A9.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j1.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-9UIR9.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j0.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-52TV9.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-BA05I.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j3.png
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-MPSTC.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Czech.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-KNJU3.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Chinese(Traditional).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-SVMME.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Dutch(Belgium).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-ERIU0.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Danish.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-RE796.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Bulgarian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-2R7L2.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Belarusian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-C2UVM.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Chinese(Simplified).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-D5DM2.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Catalan.ini
from %ProgramFiles%\Wise\Wise Care 365\headers\is-0BVC4.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-MS373.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h6.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-UGNHS.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h5.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-KBER5.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h8.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-1SFGD.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-8VRJT.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h2.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-H7AD1.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h1.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-21CL9.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-IIC9D.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h3.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-4P231.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i6.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-MHTSL.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i5.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-RMA1H.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i8.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-P65Q2.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-BV2FI.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i2.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-RRSU6.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i1.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-F7LKL.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-ME1HM.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i3.png

Modifies the HOSTS file.

Miscellaneous:

Searches for the following windows:

ClassName: 'TFrmMOMain' WindowName: ''
ClassName: '' WindowName: ''
ClassName: 'TFrmTrayMain' WindowName: ''
ClassName: 'TFrmWPMain' WindowName: ''

Creates and executes the following:

'%ProgramFiles%\Wise\Wise Care 365\BootTime.exe'
'%TEMP%\is-UM2F4.tmp\~qkztxmq.tmp' /SL5="$100E2,8077242,131584,%CommonProgramFiles%\~qkztxmq.ibo" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'%CommonProgramFiles%\~qkztxmq.ibo' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-

Executes the following:

'<SYSTEM32>\cmd.exe' /c sc delete WiseBootAssistant
'<SYSTEM32>\sc.exe' delete WiseBootAssistant
'<SYSTEM32>\cmd.exe' /c sc stop WiseBootAssistant
'<SYSTEM32>\sc.exe' stop WiseBootAssistant

技术

术语

教育培训

误区

Technical Information

Curing recommendations

Free trial