Trojan.DownLoader45.23

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-78665.tmp\is-jnfeu.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-7ik3a.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-44al1.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-ve87q.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-hp48u.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tp0ur.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-g0atm.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-q59e2.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-uu9f7.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-o2gr6.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-rjn19.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-vpe0j.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-mho2r.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-plmmb.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-odl13.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-0bf54.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-3l60h.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ds5dp.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-mrc5b.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-4265d.tmp
%ProgramFiles(x86)%\viewfd\ini\is-umeo2.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-0d5op.tmp
%ProgramFiles(x86)%\viewfd\ini\is-dbd77.tmp
%ProgramFiles(x86)%\viewfd\ini\is-g83c2.tmp
%ProgramFiles(x86)%\viewfd\ini\is-icn6u.tmp
%ProgramFiles(x86)%\viewfd\ini\is-o6tlb.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-7shoe.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-sd7b4.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-7bhkr.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-2e52k.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-gndpr.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-od794.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-t2jtp.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-57tea.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ec9p1.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-9n8f8.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-di84f.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-42or3.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-4322e.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-nhti2.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-vco0i.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-sdpa9.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-d2p14.tmp
%ProgramFiles(x86)%\viewfd\ini\is-18tii.tmp
%ProgramFiles(x86)%\viewfd\ini\is-40q5u.tmp
%ProgramFiles(x86)%\viewfd\ini\is-cqek3.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-0ndgh.tmp
%ProgramFiles(x86)%\viewfd\ini\is-6qnt3.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-rnvfu.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-o47u5.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-k2brc.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-jejmr.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-5j79d.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-r1750.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-s1lf6.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-1gg3b.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-72seb.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-7m64n.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-1iqgp.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-pirqc.tmp
%ProgramFiles(x86)%\viewfd\is-usjci.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-lvnbv.tmp
%ProgramFiles(x86)%\viewfd\is-j76ip.tmp
%ProgramFiles(x86)%\viewfd\is-iaknk.tmp
%ProgramFiles(x86)%\viewfd\is-gm2pp.tmp
%ProgramFiles(x86)%\viewfd\is-oehrt.tmp
%ProgramFiles(x86)%\viewfd\is-34gqm.tmp
%ProgramFiles(x86)%\viewfd\is-nolpq.tmp
%ProgramFiles(x86)%\viewfd\is-ua9fp.tmp
%ProgramFiles(x86)%\viewfd\is-l4q0r.tmp
%ProgramFiles(x86)%\viewfd\is-r0r6f.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\soft\is-o0o9f.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-ivo7o.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-cp2qr.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-t76gr.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-0slbu.tmp
%ProgramFiles(x86)%\viewfd\programs\is-ja40n.tmp
%ProgramFiles(x86)%\viewfd\radio\is-jmfka.tmp
%ProgramFiles(x86)%\viewfd\radio\is-rck1i.tmp
%ProgramFiles(x86)%\viewfd\reports\is-885rv.tmp
%ProgramFiles(x86)%\viewfd\search\is-0ihpb.tmp
%ProgramFiles(x86)%\viewfd\search\is-iajae.tmp
%ProgramFiles(x86)%\viewfd\search\is-bu0n2.tmp
%ProgramFiles(x86)%\viewfd\search\is-168ag.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-vae8a.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-rp0h4.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-esqf8.tmp
%ProgramFiles(x86)%\viewfd\search\is-ifdgt.tmp
%ProgramFiles(x86)%\viewfd\url\is-rnkq6.tmp
%ProgramFiles(x86)%\viewfd\url\is-3j3km.tmp
%ProgramFiles(x86)%\viewfd\url\is-opo8a.tmp
%ProgramFiles(x86)%\viewfd\url\is-m4rmm.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-m22ru.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-uls8a.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-2rf1h.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-o7o7s.tmp
%ProgramFiles(x86)%\viewfd\search\is-4abb9.tmp
%ProgramFiles(x86)%\viewfd\soft\is-8krid.tmp
%ProgramFiles(x86)%\viewfd\url\is-87s65.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-km45a.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-mh164.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-neo54.tmp
%ProgramFiles(x86)%\viewfd\forms\is-mq4s4.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-nv0tb.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-rhben.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-01vto.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-fud28.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-hromv.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-41cln.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-eqp3p.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-l8afa.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-rmbvo.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-k293a.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-hoduu.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-2c6m3.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-h2q07.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-mkp1v.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-0akmv.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-6o8tb.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-g37fb.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-sm84m.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-t9vsp.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-ncfu7.tmp
%ProgramFiles(x86)%\viewfd\data\is-v9594.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-l5765.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-187r6.tmp
%TEMP%\is-f4u0j.tmp\_isetup\_regdll.tmp
%TEMP%\is-f4u0j.tmp\_isetup\_shfoldr.dll
%TEMP%\is-f4u0j.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-5m57e.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-qmq3r.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-8gul3.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-oh9rk.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-7vgdj.tmp
%ProgramFiles(x86)%\viewfd\backup\is-5u1tj.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-85qnl.tmp
%ProgramFiles(x86)%\viewfd\browser\is-qakss.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-dlhai.tmp
%ProgramFiles(x86)%\viewfd\browser\is-5sle6.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-0d1q0.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-uaca4.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-lhq40.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-8g5jl.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-ps796.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-hd0p2.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-3jtto.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-kibve.tmp
%ProgramFiles(x86)%\viewfd\browser\is-o455i.tmp
%TEMP%\is-f4u0j.tmp\_isetup\_setup64.tmp
%ProgramFiles(x86)%\viewfd\browser\is-mp9bk.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-f9ckp.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-h7fmg.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-crvk3.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-mtju7.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-e1joh.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-pt7ac.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-l3nar.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-61mhe.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-un67i.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-atv0e.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-kqmg4.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-gqkpf.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-0bdfg.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-lagkd.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-9btuo.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-nihu0.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-vhfke.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-bdg6r.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-dane4.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-r5pas.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-fpvjq.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-e0mum.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ihbcc.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-li598.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-5as40.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ekh8v.tmp
%ProgramFiles(x86)%\viewfd\is-mh1a1.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\graphic\grids\is-sn0jq.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-jakc5.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-eb0ve.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-mv8j5.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-pr1lv.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-lv658.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-3r7ns.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-4qfkc.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-6suv2.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-bcr1p.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-4t5s1.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-ftfhd.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-l2shj.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-lgoch.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-7mi2a.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-bqf6i.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-mfofv.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-9v547.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-pi33q.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-bgr50.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-im5r8.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-02vrk.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-3m2go.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-lag7q.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-5m57e.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\lsd\is-7ik3a.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-44al1.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-ve87q.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-hp48u.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tp0ur.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-g0atm.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-q59e2.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\ini\is-umeo2.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-uu9f7.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\ini\is-dbd77.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-0d5op.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-mho2r.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-plmmb.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-odl13.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-0bf54.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-3l60h.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ds5dp.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-mrc5b.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-rjn19.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-4265d.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-vpe0j.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\ini\is-g83c2.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-icn6u.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-o6tlb.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-sd7b4.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-7bhkr.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-2e52k.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-gndpr.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-od794.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-t2jtp.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-57tea.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-9n8f8.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-o47u5.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-o2gr6.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-rnvfu.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-4322e.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-nhti2.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-vco0i.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-sdpa9.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-d2p14.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-18tii.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-40q5u.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\ini\is-cqek3.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-42or3.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\ini\is-6qnt3.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-0ndgh.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-7shoe.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ec9p1.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-rp0h4.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\url\soft\is-o0o9f.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-ivo7o.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-5j79d.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-r1750.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-s1lf6.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-1gg3b.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-72seb.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-7m64n.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\url\search\is-lvnbv.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-cp2qr.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-1iqgp.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\is-j76ip.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-mh1a1.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-iaknk.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-gm2pp.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-oehrt.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-34gqm.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-nolpq.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-ua9fp.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\wallpaper\is-pirqc.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-usjci.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\url\search\is-t76gr.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-2rf1h.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-gqkpf.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-jejmr.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-ja40n.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-jmfka.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-rck1i.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-885rv.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-0ihpb.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-iajae.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-bu0n2.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-168ag.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-ifdgt.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-4abb9.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-8krid.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-87s65.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-rnkq6.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-3j3km.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-opo8a.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-m4rmm.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-m22ru.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\url\help\is-uls8a.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-k2brc.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-esqf8.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-vae8a.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-di84f.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-km45a.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-mh164.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-fud28.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-hromv.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-41cln.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-eqp3p.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-l8afa.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-k293a.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-dlhai.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\formulas\is-nv0tb.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-hoduu.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\formulas\is-01vto.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-h2q07.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-0akmv.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6o8tb.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-g37fb.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-sm84m.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-85qnl.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-rmbvo.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-h7fmg.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-2c6m3.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\forms\is-mq4s4.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-mkp1v.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\data\is-v9594.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-f9ckp.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\is-qmq3r.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-oh9rk.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-7vgdj.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-5u1tj.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-qakss.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-o455i.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-5sle6.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-mp9bk.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-0d1q0.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-uaca4.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-8gul3.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\colourschemes\is-lhq40.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-ps796.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-hd0p2.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-3jtto.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-kibve.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-187r6.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-l5765.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-ncfu7.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-t9vsp.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-0bdfg.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-8g5jl.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-3m2go.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-rhben.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-jakc5.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-mtju7.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-pt7ac.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-l3nar.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-61mhe.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-un67i.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-atv0e.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-kqmg4.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-9btuo.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-li598.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-5as40.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ekh8v.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-nihu0.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-vhfke.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-bdg6r.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-dane4.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-r5pas.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-fpvjq.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-e0mum.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ihbcc.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-neo54.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-lagkd.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-eb0ve.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-e1joh.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-o7o7s.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\is-l4q0r.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-ftfhd.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-pr1lv.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-lv658.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-3r7ns.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-4qfkc.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-6suv2.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-bcr1p.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-l2shj.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-0slbu.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-lag7q.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-mv8j5.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-lgoch.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-bqf6i.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-mfofv.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-9v547.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-pi33q.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-bgr50.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-im5r8.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-02vrk.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-sn0jq.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-4t5s1.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-7mi2a.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-crvk3.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\is-r0r6f.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '' WindowName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}'

Creates and executes the following

'%TEMP%\is-78665.tmp\is-jnfeu.tmp' /SL4 $B0230 "<Full path to file>" 7072974 141312
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' f8c938e6703fe513a4a5a528e01dc794

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней