Trojan.Hosts.45061

Technical Information

To ensure autorun and distribution:

Creates the following services:

[<HKLM>\SYSTEM\ControlSet001\Services\WiseBootAssistant] 'Start' = '00000002'
[<HKLM>\SYSTEM\ControlSet001\Services\WiseBootAssistant] 'ImagePath' = '%ProgramFiles%\Wise\Wise Care 365\BootTime.exe'

Malicious functions:

Executes the following:

'<SYSTEM32>\taskkill.exe' /f /im WiseCare365.exe

Modifies file system:

Creates the following files:

%TEMP%\aut1.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-QV4N8.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-GLTQN.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-Q78E9.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-E56RC.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-FILL0.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-UCPEF.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-RMLN0.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-SP1NI.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-3R725.tmp
%ProgramFiles%\Wise\Wise Care 365\Themes\is-GGJV5.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\is-J2BAG.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-4UQ6E.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-9BF2E.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-KQJVI.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-M57IQ.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-V5I56.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-FV8UF.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-F5DI9.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-2NSO1.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-2S8G4.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-9TAGR.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-RF37G.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-4HTSD.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-M2LC0.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-0B0TM.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-78933.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-CK6I4.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-HLQGJ.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-5N995.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-QAMC6.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-574RU.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-6R5EU.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-UMPCA.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-JOCTJ.tmp
%ProgramFiles%\Wise\Wise Care 365\is-NDI02.tmp
%ProgramFiles%\Wise\Wise Care 365\is-TS0TO.tmp
%ProgramFiles%\Wise\Wise Care 365\is-UIRGC.tmp
%ProgramFiles%\Wise\Wise Care 365\is-MJO4Q.tmp
%ProgramFiles%\Wise\Wise Care 365\is-O15VA.tmp
%ProgramFiles%\Wise\Wise Care 365\is-4DC92.tmp
%ProgramFiles%\Wise\Wise Care 365\is-AHJ5I.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-GL3BT.tmp
%ProgramFiles%\Wise\Wise Care 365\is-K9HBH.tmp
%ALLUSERSPROFILE%\Start Menu\Programs\Wise Care 365\Wise Care 365.lnk
%ALLUSERSPROFILE%\Desktop\Wise Care 365.lnk
%TEMP%\is-GRS0J.tmp\introduce.url
%ProgramFiles%\Wise\Wise Care 365\unins000.msg
%ProgramFiles%\Wise\Wise Care 365\unins000.dat
%ProgramFiles%\Wise\Wise Care 365\is-909DT.tmp
%ProgramFiles%\Wise\Wise Care 365\is-N4PK0.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-C4QR5.tmp
%ProgramFiles%\Wise\Wise Care 365\is-H6UU6.tmp
%ProgramFiles%\Wise\Wise Care 365\is-D01R4.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-U3B7R.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-7R6VD.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-9SOUF.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-F8V82.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-GI4V9.tmp
%ProgramFiles%\Wise\Wise Care 365\is-FTMLC.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-GJDMD.tmp
%ProgramFiles%\Wise\Wise Care 365\tools\img\is-GIQ4P.tmp
%ProgramFiles%\Wise\Wise Care 365\is-7LQLI.tmp
%ProgramFiles%\Wise\Wise Care 365\is-870PU.tmp
%ProgramFiles%\Wise\Wise Care 365\is-0QPH6.tmp
%ProgramFiles%\Wise\Wise Care 365\is-ORVBM.tmp
%ProgramFiles%\Wise\Wise Care 365\is-M7NFD.tmp
%ProgramFiles%\Wise\Wise Care 365\is-LO76G.tmp
%ProgramFiles%\Wise\Wise Care 365\is-OC8NK.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-AH2I1.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-9OBU4.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-FQE40.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-Q0LLL.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-0T3IH.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-10I44.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-K5G2B.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-C6POI.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-9EJ7L.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-P4F35.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-GENOL.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-6UALU.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-J5B9T.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-93I6T.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-43FM9.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-HN04D.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-T6RCE.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-3C2MQ.tmp
%APPDATA%\Wise Care 365\config.ini
%ProgramFiles%\Wise\Wise Care 365\headers\is-ALHQA.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-UK6J5.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-UELUO.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-H0TFN.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-DBK1I.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-9GAGV.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-VCSHA.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-8DLN7.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-0K3K9.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-B8SE0.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-9I50G.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-6RFE2.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-36QK1.tmp
%ProgramFiles%\Wise\Wise Care 365\is-CD3FF.tmp
%TEMP%\is-HLR3K.tmp\~vdcastb.tmp
%CommonProgramFiles%\~vdcastb.ibo
%ProgramFiles%\Wise\Wise Care 365\headers\is-44H7F.tmp
%ProgramFiles%\Wise\Wise Care 365\is-BL1VN.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-3BE2P.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-Q3P6H.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-DFGKF.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-3IMB7.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-BS3PA.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-7F3D2.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-9MNI1.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-VURIC.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-8FJM5.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-9LJHB.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-4SQOL.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-1UCU5.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-K28DV.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-BTT28.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-PV420.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-AIIM5.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-EJDS6.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-EB7QH.tmp
%ProgramFiles%\Wise\Wise Care 365\Languages\is-GTI2U.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-Q8J39.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-JESIQ.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-BGK1H.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-E5I19.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-I9RFA.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-G0K1O.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-9T6CM.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-SH7GK.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-QDKA4.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-FEORA.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-RUUPU.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-25R1B.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-OC8DK.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-MFKF8.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-BD5R4.tmp
%ProgramFiles%\Wise\Wise Care 365\headers\is-3N7TE.tmp
%APPDATA%\Wise Care 365\config_tray.ini

Sets the 'hidden' attribute to the following files:

%CommonProgramFiles%\~vdcastb.ibo

Deletes the following files:

%TEMP%\aut1.tmp
%TEMP%\is-GRS0J.tmp\introduce.url
%TEMP%\is-HLR3K.tmp\~vdcastb.tmp

Moves the following files:

from %ProgramFiles%\Wise\Wise Care 365\is-CD3FF.tmp to %ProgramFiles%\Wise\Wise Care 365\unins000.exe
from %ProgramFiles%\Wise\Wise Care 365\tools\is-J2BAG.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\toolsv3.txt
from %ProgramFiles%\Wise\Wise Care 365\Themes\is-GGJV5.tmp to %ProgramFiles%\Wise\Wise Care 365\Themes\halloween-2016.wskn
from %ProgramFiles%\Wise\Wise Care 365\Themes\is-3R725.tmp to %ProgramFiles%\Wise\Wise Care 365\Themes\halloween-2016.png
from %ProgramFiles%\Wise\Wise Care 365\Themes\is-RMLN0.tmp to %ProgramFiles%\Wise\Wise Care 365\Themes\default.wskn
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-M2LC0.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Vietnamese.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-UCPEF.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Ukrainian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-FILL0.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Turkish.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-E56RC.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Thai.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-Q78E9.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Swedish(Sweden).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-GLTQN.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Spanish(Spain).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-QV4N8.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Slovenian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-M57IQ.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Slovak.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-SP1NI.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Serbian(Cyrillic).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-V5I56.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Russian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-5N995.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Romanian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-HLQGJ.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Portuguese(Portugal).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-CK6I4.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Portuguese(Brazil).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-78933.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Polish.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-6R5EU.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Persian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-574RU.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Norwegian(Nynorsk).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-QAMC6.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Norwegian(Bokmal).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-0B0TM.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Nepali.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-9TAGR.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Kurdish.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-2S8G4.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Korean.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-2NSO1.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Japanese.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-F5DI9.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Italian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-C4QR5.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Hungarian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-4HTSD.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Greek.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-GL3BT.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\German.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-9OBU4.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Finnish.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-AH2I1.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\French.ini
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-4UQ6E.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\AutoShutdown.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-9BF2E.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\DateRecovery.png
from %ProgramFiles%\Wise\Wise Care 365\is-N4PK0.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseTurbo.exe
from %ProgramFiles%\Wise\Wise Care 365\is-4DC92.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseTray.exe
from %ProgramFiles%\Wise\Wise Care 365\is-O15VA.tmp to %ProgramFiles%\Wise\Wise Care 365\ssleay32.dll
from %ProgramFiles%\Wise\Wise Care 365\is-MJO4Q.tmp to %ProgramFiles%\Wise\Wise Care 365\libeay32.dll
from %ProgramFiles%\Wise\Wise Care 365\is-UIRGC.tmp to %ProgramFiles%\Wise\Wise Care 365\DManager.dll
from %ProgramFiles%\Wise\Wise Care 365\is-TS0TO.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseEraser.dll
from %ProgramFiles%\Wise\Wise Care 365\is-NDI02.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseDefrag.dll
from %ProgramFiles%\Wise\Wise Care 365\is-AHJ5I.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseCare365.exe
from %ProgramFiles%\Wise\Wise Care 365\is-K9HBH.tmp to %ProgramFiles%\Wise\Wise Care 365\WiseBootBooster.exe
from %ProgramFiles%\Wise\Wise Care 365\is-FTMLC.tmp to %ProgramFiles%\Wise\Wise Care 365\UninstallTP.exe
from %ProgramFiles%\Wise\Wise Care 365\is-H6UU6.tmp to %ProgramFiles%\Wise\Wise Care 365\sqlite3.dll
from %ProgramFiles%\Wise\Wise Care 365\is-M7NFD.tmp to %ProgramFiles%\Wise\Wise Care 365\skin.ico
from %ProgramFiles%\Wise\Wise Care 365\is-ORVBM.tmp to %ProgramFiles%\Wise\Wise Care 365\Rate.info
from %ProgramFiles%\Wise\Wise Care 365\is-0QPH6.tmp to %ProgramFiles%\Wise\Wise Care 365\AutoUpdate.exe
from %ProgramFiles%\Wise\Wise Care 365\is-7LQLI.tmp to %ProgramFiles%\Wise\Wise Care 365\fileshredder.ico
from %ProgramFiles%\Wise\Wise Care 365\headers\is-9T6CM.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i8.png
from %ProgramFiles%\Wise\Wise Care 365\is-D01R4.tmp to %ProgramFiles%\Wise\Wise Care 365\DefragOptions.ini
from %ProgramFiles%\Wise\Wise Care 365\is-LO76G.tmp to %ProgramFiles%\Wise\Wise Care 365\BootTime.exe
from %ProgramFiles%\Wise\Wise Care 365\is-OC8NK.tmp to %ProgramFiles%\Wise\Wise Care 365\BootPack.wpk
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-GI4V9.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\wrm32.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-F8V82.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\wgb32.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-9SOUF.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\SystemMonitor.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-7R6VD.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\Reminder.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-U3B7R.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\ProgramUninstaller.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-GIQ4P.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\MemoryOptimizer.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-GJDMD.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\JetSearch.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-JOCTJ.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\Hotkey.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-FV8UF.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\GameBooster.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-RF37G.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\ForceDeleter.png
from %ProgramFiles%\Wise\Wise Care 365\tools\img\is-KQJVI.tmp to %ProgramFiles%\Wise\Wise Care 365\tools\img\FolderHider.png
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-FQE40.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\English.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-PV420.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Dutch(Nederlands).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-BTT28.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Dutch(Belgium).ini
from %ProgramFiles%\Wise\Wise Care 365\headers\is-93I6T.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-J5B9T.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g3.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-6UALU.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g2.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-3C2MQ.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g1.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-T6RCE.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-HN04D.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f6.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-GENOL.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f5.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-K5G2B.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-10I44.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f3.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-0T3IH.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f2.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-Q0LLL.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f1.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-P4F35.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\f0.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-Q8J39.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\e9.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-C6POI.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\e8.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-0K3K9.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\e7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-44H7F.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\d7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-UK6J5.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\d4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-UELUO.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\d3.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-H0TFN.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\d2.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-DBK1I.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\d1.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-9GAGV.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\c7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-VCSHA.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\c4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-8DLN7.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\b5.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-9EJ7L.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\a9.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-B8SE0.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\a7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-9I50G.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\a6.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-6RFE2.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\a2.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-36QK1.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\a1.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-ALHQA.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g6.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-3BE2P.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-43FM9.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g5.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-VURIC.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\g8.png
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-K28DV.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Danish.ini
from %ProgramFiles%\Wise\Wise Care 365\headers\is-EB7QH.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h1.png
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-1UCU5.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Czech.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-4SQOL.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Chinese(Traditional).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-EJDS6.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Chinese(Simplified).ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-GTI2U.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Catalan.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-AIIM5.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Belarusian.ini
from %ProgramFiles%\Wise\Wise Care 365\Languages\is-9MNI1.tmp to %ProgramFiles%\Wise\Wise Care 365\Languages\Azerbaijan(Latin).ini
from %ProgramFiles%\Wise\Wise Care 365\headers\is-7F3D2.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j8.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-BS3PA.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-3IMB7.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j6.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-DFGKF.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-8FJM5.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j3.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-9LJHB.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j1.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-SH7GK.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j0.png
from %ProgramFiles%\Wise\Wise Care 365\is-870PU.tmp to %ProgramFiles%\Wise\Wise Care 365\License.txt
from %ProgramFiles%\Wise\Wise Care 365\is-909DT.tmp to %ProgramFiles%\Wise\Wise Care 365\geo.db
from %ProgramFiles%\Wise\Wise Care 365\headers\is-MFKF8.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-OC8DK.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i6.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-25R1B.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i5.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-RUUPU.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-FEORA.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i3.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-3N7TE.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i2.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-UMPCA.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\i1.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-BD5R4.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h8.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-G0K1O.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h7.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-I9RFA.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h6.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-E5I19.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h5.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-BGK1H.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h4.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-JESIQ.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h3.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-Q3P6H.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\h2.png
from %ProgramFiles%\Wise\Wise Care 365\headers\is-QDKA4.tmp to %ProgramFiles%\Wise\Wise Care 365\headers\j.png
from %ProgramFiles%\Wise\Wise Care 365\is-BL1VN.tmp to %ProgramFiles%\Wise\Wise Care 365\BootLauncher.exe

Modifies the HOSTS file.

Miscellaneous:

Searches for the following windows:

ClassName: 'TFrmTrayMain' WindowName: ''
ClassName: 'TFrmWPMain' WindowName: ''
ClassName: 'TFrmMOMain' WindowName: ''
ClassName: '' WindowName: ''

Creates and executes the following:

'%CommonProgramFiles%\~vdcastb.ibo' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'%TEMP%\is-HLR3K.tmp\~vdcastb.tmp' /SL5="$100E2,8055631,131584,%CommonProgramFiles%\~vdcastb.ibo" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'%ProgramFiles%\Wise\Wise Care 365\BootTime.exe'

Executes the following:

'<SYSTEM32>\cmd.exe' /c sc stop WiseBootAssistant
'<SYSTEM32>\sc.exe' stop WiseBootAssistant

Tecnologie

Termini

Formazione ed informazione

Falsi miti

Technical Information

Curing recommendations

Free trial