Trojan.Hosts.44633

Technical Information

To ensure autorun and distribution:

Creates the following services:

[<HKLM>\SYSTEM\ControlSet001\Services\WiseBootAssistant] 'Start' = '00000002'
[<HKLM>\SYSTEM\ControlSet001\Services\WiseBootAssistant] 'ImagePath' = '%ProgramFiles%\Wise\Wise Care 365\BootTime.exe'

Malicious functions:

Executes the following:

'<SYSTEM32>\taskkill.exe' /f /im WiseCare365.exe

Modifies file system:

Creates the following files:

%TEMP%\aut1.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-AHFKB.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-P63SF.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-DMS8B.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-N5TJR.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-GHHUK.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-G1D40.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-U24B6.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-K73AS.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\is-O6UHC.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\is-HHKJG.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-NNEPF.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-N9KVI.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-7UC79.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-4PSN8.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-KIG1C.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-14E6K.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-ANKBP.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-O41VL.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-17IDA.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-MFS9F.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-Q8IQF.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-PS54P.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-2JH2J.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-266AV.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-2QCFH.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-4JOL2.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-HCMHE.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-9GIS2.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-4DDDH.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-3GQI5.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-3NEBG.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-KEJLG.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-JH48O.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-EO1S5.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-HUQU5.tmp
%APPDATA%\Wise Care 365\config.ini
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-N0RF6.tmp
%ProgramFiles%\Wise\Wise Care 365\is-LUBAF.tmp
%ProgramFiles%\Wise\Wise Care 365\is-ETGDA.tmp
%ProgramFiles%\Wise\Wise Care 365\is-I9D7Q.tmp
%ProgramFiles%\Wise\Wise Care 365\is-N9M9G.tmp
%ProgramFiles%\Wise\Wise Care 365\is-V8848.tmp
%ProgramFiles%\Wise\Wise Care 365\is-7SDS5.tmp
%ProgramFiles%\Wise\Wise Care 365\is-1G505.tmp
%ProgramFiles%\Wise\Wise Care 365\is-CD056.tmp
%ALLUSERSPROFILE%\Start Menu\Programs\Wise Care 365\Wise Care 365.lnk
%ALLUSERSPROFILE%\Desktop\Wise Care 365.lnk
%TEMP%\is-CTJGU.tmp\introduce.url
%ProgramFiles%\Wise\Wise Care 365\unins000.msg
%ProgramFiles%\Wise\Wise Care 365\unins000.dat
%ProgramFiles%\Wise\Wise Care 365\is-N3QI4.tmp
%ProgramFiles%\Wise\Wise Care 365\is-81HS2.tmp
%ProgramFiles%\Wise\Wise Care 365\is-KUAUP.tmp
%ProgramFiles%\Wise\Wise Care 365\is-M958V.tmp
%ProgramFiles%\Wise\Wise Care 365\is-36I58.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-UJ3UU.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-3J3GS.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-HVCBP.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-53NOH.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-6AKNL.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-BA1FF.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-RE5EJ.tmp
%ProgramFiles%\Wise\Wise Care 365\is-QRKJQ.tmp
%ProgramFiles%\Wise\Wise Care 365\is-TCUEN.tmp
%ProgramFiles%\Wise\Wise Care 365\is-S7MLN.tmp
%ProgramFiles%\Wise\Wise Care 365\is-ATLI2.tmp
%ProgramFiles%\Wise\Wise Care 365\is-DTKTV.tmp
%ProgramFiles%\Wise\Wise Care 365\is-3UIGR.tmp
%ProgramFiles%\Wise\Wise Care 365\is-17I3C.tmp
%ProgramFiles%\Wise\Wise Care 365\is-EFTBO.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-FAA61.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-68TBP.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-CPFIP.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-FROIJ.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-4VB3T.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-B1H4M.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-HP1LS.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-H2OE1.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-C26I2.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-RTEPM.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-61PM6.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-6T2UI.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-L8F9A.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-KT9LQ.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-N0EPI.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-F4M6G.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-O28AD.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-2O5M8.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-S83AS.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-KE88E.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-U1II2.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-OL3DK.tmp
%TEMP%\is-49O5H.tmp\~ypszwyl.tmp
%ProgramFiles%\Wise\Wise Care 365\is-1JQ82.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-I5II0.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-3A5IV.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-DJC43.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-VGPMT.tmp
%CommonProgramFiles%\~ypszwyl.ibo
%ProgramFiles%\Wise\Wise Care 365\headers\is-FM679.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-38KTT.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-7EEMV.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-P9S2I.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-2153P.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-SBPE4.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-OSAN0.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-G6NKB.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-QBCE7.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-AKIUK.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-NBF67.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-KHJA2.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-08Q2K.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-TKJ2G.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-0N708.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-QH5C5.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-LIAS0.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-4SBC9.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-44519.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-4HIGF.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-NKH4H.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-25HQ4.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-V9PS8.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-Q91M5.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-IEE3V.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-RPTH0.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-H2KMS.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-EM2TH.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-9I6KK.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-DIJLG.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-USS82.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-IKFL1.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-HVMH2.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-J4U5F.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-0H6KO.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-8Q4FE.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-PUBFH.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-IN2S4.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-7FE7C.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-RTPNK.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-EIPS0.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-NP3I8.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-EJ92N.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-N4LRA.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-B8GVP.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-0CB3P.tmp
%APPDATA%\Wise Care 365\config_tray.ini

Sets the 'hidden' attribute to the following files:

%CommonProgramFiles%\~ypszwyl.ibo

Deletes the following files:

%TEMP%\aut1.tmp
%TEMP%\is-CTJGU.tmp\introduce.url
%TEMP%\is-49O5H.tmp\~ypszwyl.tmp

Moves the following files:

from %ProgramFiles%\Wise\Wise Care 365\is-1JQ82.tmp to %ProgramFiles%\Wise\Wise Care 365\unins000.exe
from %ProgramFiles%\Wise\Wise Care 365\Themes\is-KIG1C.tmp to %ProgramFiles%\Wise\Wise Care 365\Themes\halloween-2016.wskn
from %ProgramFiles%\Wise\Wise Care 365\Themes\is-4PSN8.tmp to %ProgramFiles%\Wise\Wise Care 365\Themes\halloween-2016.png
from %ProgramFiles%\Wise\Wise Care 365\Themes\is-K73AS.tmp to %ProgramFiles%\Wise\Wise Care 365\Themes\default.wskn
from %ProgramFiles%\Wise\Wise Care 365\Themes\is-GHHUK.tmp to %ProgramFiles%\Wise\Wise Care 365\Themes\chinese-new-year-2018.wskn
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-N5TJR.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Vietnamese.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-DMS8B.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Ukrainian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-P63SF.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Turkish.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-AHFKB.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Thai.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-U24B6.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Swedish(Sweden).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-G1D40.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Spanish(Spain).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-14E6K.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Slovenian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-ANKBP.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Slovak.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-O41VL.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Serbian(Cyrillic).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-KEJLG.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Russian.ini
from %ProgramFiles%\Wise\Wise Care 365\tools\is-O6UHC.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\toolsv3.txt
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-3NEBG.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Romanian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-4DDDH.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Portuguese(Brazil).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-9GIS2.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Polish.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-HCMHE.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Persian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-JH48O.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Norwegian(Nynorsk).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-4JOL2.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Norwegian(Bokmal).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-266AV.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Nepali.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-2JH2J.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Kurdish.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-PS54P.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Korean.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-Q8IQF.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Japanese.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-MFS9F.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Italian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-17IDA.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Hungarian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-2QCFH.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Greek.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-FAA61.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\German.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-CPFIP.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Georgian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-3GQI5.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Portuguese(Portugal).ini
from %ProgramFiles%\Wise\Wise Care 365\tools\is-HHKJG.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\toolsv3.zip
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-NNEPF.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\AutoShutdown.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-N9KVI.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\DateRecovery.png
from %ProgramFiles%\Wise\Wise Care 365\is-DTKTV.tmp to %ProgramFiles%\Wise\Wise Care 365\AutoUpdate.exe
from %ProgramFiles%\Wise\Wise Care 365\is-3UIGR.tmp to %ProgramFiles%\Wise\Wise Care 365\Rate.info
from %ProgramFiles%\Wise\Wise Care 365\is-17I3C.tmp to %ProgramFiles%\Wise\Wise Care 365\skin.ico
from %ProgramFiles%\Wise\Wise Care 365\is-36I58.tmp to %ProgramFiles%\Wise\Wise Care 365\sqlite3.dll
from %ProgramFiles%\Wise\Wise Care 365\is-M958V.tmp to %ProgramFiles%\Wise\Wise Care 365\UninstallTP.exe
from %ProgramFiles%\Wise\Wise Care 365\is-KUAUP.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseBootBooster.exe
from %ProgramFiles%\Wise\Wise Care 365\is-1G505.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseDefrag.dll
from %ProgramFiles%\Wise\Wise Care 365\is-N3QI4.tmp to %ProgramFiles%\Wise\Wise Care 365\geo.db
from %ProgramFiles%\Wise\Wise Care 365\is-LUBAF.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseEraser.dll
from %ProgramFiles%\Wise\Wise Care 365\is-ETGDA.tmp to %ProgramFiles%\Wise\Wise Care 365\DManager.dll
from %ProgramFiles%\Wise\Wise Care 365\is-I9D7Q.tmp to %ProgramFiles%\Wise\Wise Care 365\libeay32.dll
from %ProgramFiles%\Wise\Wise Care 365\is-N9M9G.tmp to %ProgramFiles%\Wise\Wise Care 365\ssleay32.dll
from %ProgramFiles%\Wise\Wise Care 365\is-V8848.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseTray.exe
from %ProgramFiles%\Wise\Wise Care 365\is-CD056.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseTurbo.exe
from %ProgramFiles%\Wise\Wise Care 365\is-ATLI2.tmp to %ProgramFiles%\Wise\Wise Care 365\License.txt
from %ProgramFiles%\Wise\Wise Care 365\is-S7MLN.tmp to %ProgramFiles%\Wise\Wise Care 365\fileshredder.ico
from %ProgramFiles%\Wise\Wise Care 365\is-TCUEN.tmp to %ProgramFiles%\Wise\Wise Care 365\DefragOptions.ini
from %ProgramFiles%\Wise\Wise Care 365\is-EFTBO.tmp to %ProgramFiles%\Wise\Wise Care 365\BootTime.exe
from %ProgramFiles%\Wise\Wise Care 365\is-QRKJQ.tmp to %ProgramFiles%\Wise\Wise Care 365\BootPack.wpk
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-BA1FF.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\wrm32.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-6AKNL.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\wgb32.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-53NOH.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\SystemMonitor.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-HVCBP.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\Reminder.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-3J3GS.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\ProgramUninstaller.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-UJ3UU.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\MemoryOptimizer.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-RE5EJ.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\JetSearch.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-N0RF6.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\Hotkey.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-HUQU5.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\GameBooster.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-68TBP.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\ForceDeleter.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-EO1S5.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\FolderHider.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-7UC79.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\DuplicateFinder.png
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-0CB3P.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\French.ini
from %ProgramFiles%\Wise\Wise Care 365\is-7SDS5.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseCare365.exe
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-NBF67.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Finnish.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-QH5C5.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Belarusian.ini
from %ProgramFiles%\Wise\Wise Care 365\headers\is-O28AD.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g6.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-F4M6G.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g5.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-N0EPI.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-KT9LQ.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g3.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-L8F9A.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g2.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-S83AS.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g1.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-2O5M8.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-6T2UI.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f6.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-C26I2.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f5.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-H2OE1.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-HP1LS.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f3.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-B1H4M.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f2.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-4VB3T.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f1.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-61PM6.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f0.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-QBCE7.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-RTEPM.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\e9.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-U1II2.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\e7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-OL3DK.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\d7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-OSAN0.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\d4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-SBPE4.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\d3.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-2153P.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\d2.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-P9S2I.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\d1.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-7EEMV.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\c7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-38KTT.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\c4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-G6NKB.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\b5.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-FM679.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\a9.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-VGPMT.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\a7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-DJC43.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\a6.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-3A5IV.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\a2.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-I5II0.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\a1.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-KE88E.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\e8.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-FROIJ.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g8.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-AKIUK.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h1.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-KHJA2.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h2.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-EM2TH.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j3.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-4SBC9.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-44519.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j6.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-08Q2K.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-TKJ2G.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j8.png
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-0N708.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Azerbaijan(Latin).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-LIAS0.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Bulgarian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-Q91M5.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Dutch(Nederlands).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-4HIGF.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Catalan.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-RPTH0.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Chinese(Simplified).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-H2KMS.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Chinese(Traditional).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-NKH4H.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Czech.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-25HQ4.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Danish.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-V9PS8.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Dutch(Belgium).ini
from %ProgramFiles%\Wise\Wise Care 365\headers\is-9I6KK.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j1.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-DIJLG.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j0.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-N4LRA.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-EJ92N.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i8.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-NP3I8.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-EIPS0.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i6.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-RTPNK.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i5.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-7FE7C.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-B8GVP.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i3.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-IN2S4.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i2.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-8Q4FE.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i1.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-0H6KO.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h8.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-J4U5F.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-HVMH2.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h6.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-IKFL1.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h5.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-USS82.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-PUBFH.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h3.png
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-IEE3V.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\English.ini
from %ProgramFiles%\Wise\Wise Care 365\is-81HS2.tmp to %ProgramFiles%\Wise\Wise Care 365\BootLauncher.exe

Modifies the HOSTS file.

Miscellaneous:

Searches for the following windows:

ClassName: 'TFrmTrayMain' WindowName: ''
ClassName: 'TFrmWPMain' WindowName: ''
ClassName: 'TFrmMOMain' WindowName: ''
ClassName: '' WindowName: ''

Creates and executes the following:

'%CommonProgramFiles%\~ypszwyl.ibo' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'%TEMP%\is-49O5H.tmp\~ypszwyl.tmp' /SL5="$100E2,8276460,131584,%CommonProgramFiles%\~ypszwyl.ibo" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'%ProgramFiles%\Wise\Wise Care 365\BootTime.exe'

Executes the following:

'<SYSTEM32>\cmd.exe' /c sc stop WiseBootAssistant
'<SYSTEM32>\sc.exe' stop WiseBootAssistant
'<SYSTEM32>\cmd.exe' /c sc delete WiseBootAssistant
'<SYSTEM32>\sc.exe' delete WiseBootAssistant

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical Information

Curing recommendations

Free trial