Trojan.DownLoader45.1939

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-b4u00.tmp\is-bailc.tmp
%ProgramFiles(x86)%\viewfd\ini\is-i8k5t.tmp
%ProgramFiles(x86)%\viewfd\ini\is-7juaf.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-qsqtf.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-fv39o.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-rck9c.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-c5kio.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-10mpv.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-audn7.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-u437r.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-07ef7.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-as5i4.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-kmd5m.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-fu9r3.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-dll9b.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-1530s.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-5fm7r.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-th70r.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-clmd4.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-9jkmq.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-i3b4e.tmp
%ProgramFiles(x86)%\viewfd\ini\is-b9m4j.tmp
%ProgramFiles(x86)%\viewfd\ini\is-qjgue.tmp
%ProgramFiles(x86)%\viewfd\ini\is-u67cf.tmp
%ProgramFiles(x86)%\viewfd\ini\is-d127n.tmp
%ProgramFiles(x86)%\viewfd\ini\is-taraj.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-ddp1t.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-i9v6v.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-vopuf.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-aijb9.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-50svl.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-27aap.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-7f6sj.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-pvuos.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-gdbmi.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-3otqs.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-cuapr.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-b8vsa.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-0ppec.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-rft29.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-04qo4.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-l7h0h.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-4qhiq.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-f5inf.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-c9nt1.tmp
%ProgramFiles(x86)%\viewfd\ini\is-uln03.tmp
%ProgramFiles(x86)%\viewfd\ini\is-ukkjk.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-5m7vh.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-m3ft1.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-p2g68.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-o9s7c.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-okhm8.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-uev87.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-d75jj.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-7buuj.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-bp5gu.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-18lkt.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-59qi0.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-630ho.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-8o9no.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-m6nq0.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-2f6qd.tmp
%ProgramFiles(x86)%\viewfd\is-8g5nd.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-i7hn4.tmp
%ProgramFiles(x86)%\viewfd\is-mrrb7.tmp
%ProgramFiles(x86)%\viewfd\is-a0efg.tmp
%ProgramFiles(x86)%\viewfd\is-ujpb4.tmp
%ProgramFiles(x86)%\viewfd\is-3gfkk.tmp
%ProgramFiles(x86)%\viewfd\is-4j70a.tmp
%ProgramFiles(x86)%\viewfd\is-t5b81.tmp
%ProgramFiles(x86)%\viewfd\is-8blgr.tmp
%ProgramFiles(x86)%\viewfd\is-dfq86.tmp
%ProgramFiles(x86)%\viewfd\is-pegl2.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\search\is-ogpi7.tmp
%ProgramFiles(x86)%\viewfd\search\is-aoe2c.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-eci3f.tmp
%ProgramFiles(x86)%\viewfd\search\is-m0iac.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-5o3et.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-p74he.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-njr2a.tmp
%ProgramFiles(x86)%\viewfd\programs\is-q79c0.tmp
%ProgramFiles(x86)%\viewfd\radio\is-39d6m.tmp
%ProgramFiles(x86)%\viewfd\radio\is-7alve.tmp
%ProgramFiles(x86)%\viewfd\reports\is-9tlrd.tmp
%ProgramFiles(x86)%\viewfd\search\is-n418f.tmp
%ProgramFiles(x86)%\viewfd\search\is-rhug1.tmp
%ProgramFiles(x86)%\viewfd\search\is-ccdl1.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\url\search\is-rai46.tmp
%ProgramFiles(x86)%\viewfd\search\is-f4msj.tmp
%ProgramFiles(x86)%\viewfd\soft\is-ol1av.tmp
%ProgramFiles(x86)%\viewfd\url\is-7olb0.tmp
%ProgramFiles(x86)%\viewfd\url\is-d504g.tmp
%ProgramFiles(x86)%\viewfd\url\is-t7027.tmp
%ProgramFiles(x86)%\viewfd\url\is-3cpdv.tmp
%ProgramFiles(x86)%\viewfd\url\is-kk0t1.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-77pdi.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-v5rqi.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-36muq.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-fk3gb.tmp
%ProgramFiles(x86)%\viewfd\is-uo56m.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-g6uu3.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-74rvq.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-4a4a3.tmp
%ProgramFiles(x86)%\viewfd\data\is-i0etj.tmp
%ProgramFiles(x86)%\viewfd\forms\is-1qlkd.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-4fngn.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-25ahj.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-pa1m6.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-n5lec.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-kd0di.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-0i88m.tmp
%ProgramFiles(x86)%\viewfd\browser\is-6qekp.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-3mccl.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-mmslk.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-dpv84.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-v3fsp.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-alttd.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-m1huo.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-mf3sk.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-nja6a.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-t6grv.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-pau2j.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-a2p95.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-5v6de.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-agib5.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-kb0dd.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-tbdlt.tmp
%TEMP%\is-iqbi4.tmp\_isetup\_setup64.tmp
%TEMP%\is-iqbi4.tmp\_isetup\_shfoldr.dll
%TEMP%\is-iqbi4.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-29i3o.tmp
%ProgramFiles(x86)%\viewfd\7-zip\lang\is-mu095.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-h3i6d.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-46b3t.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-jacfo.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-edj44.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-gp36v.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-g0pdp.tmp
%ProgramFiles(x86)%\viewfd\backup\is-g9r8c.tmp
%ProgramFiles(x86)%\viewfd\browser\is-2o283.tmp
%ProgramFiles(x86)%\viewfd\browser\is-k6074.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-5p65g.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-97sdl.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-0je7o.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-rgs0c.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-fkgap.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-agbb3.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-6059r.tmp
%TEMP%\is-iqbi4.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\viewfd\browser\is-etd74.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-m3kcv.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-d37s8.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-gh4v0.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-q44ss.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-d8mv3.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-hm7dd.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-cmg59.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-mvkdp.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-odcej.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-2gq1u.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-siheu.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-82fd4.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-9rpmc.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-t9pn8.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ph4ph.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-t8hlm.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-ji1s5.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-u6l3o.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-om8dv.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-irgm7.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-j789n.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-5bduh.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8b06p.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-r6hhd.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-oducp.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-4greg.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-tk3cn.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-cqmpf.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-oateq.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-a48rs.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-9v0og.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-t0m50.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-epulk.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-o7543.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-4mokm.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-lp2gt.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-dr5c9.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-ncisd.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-nlqh9.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-5llks.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-er8jm.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-7itli.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-aso20.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-e4n1d.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-c814l.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-1g7k9.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-cmjuj.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-ldkve.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-p9j5s.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-5bfhb.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-1n02r.tmp
%ProgramFiles(x86)%\viewfd\graphic\grids\is-g7863.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-29i3o.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\ini\is-i8k5t.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-7juaf.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\lsd\is-qsqtf.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-fv39o.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-rck9c.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-c5kio.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-10mpv.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-audn7.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\ini\is-b9m4j.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-qjgue.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-u437r.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-kmd5m.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-fu9r3.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-dll9b.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-1530s.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-5fm7r.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-th70r.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-clmd4.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-9jkmq.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-as5i4.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-cuapr.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\ini\is-u67cf.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\ini\is-d127n.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\ini\is-taraj.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-i9v6v.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-vopuf.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-aijb9.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-50svl.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-27aap.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-7f6sj.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-pvuos.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-gdbmi.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-b8vsa.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ddp1t.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-07ef7.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-0ppec.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-rft29.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-04qo4.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-l7h0h.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-4qhiq.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-f5inf.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-c9nt1.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-uln03.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-ukkjk.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-m3ft1.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-i3b4e.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-3otqs.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-p2g68.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-o9s7c.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-eci3f.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-ogpi7.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-uev87.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-d75jj.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-7buuj.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-bp5gu.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-18lkt.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-59qi0.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-630ho.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-8o9no.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-m6nq0.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-2f6qd.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-uo56m.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\is-8g5nd.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-mrrb7.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-a0efg.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-ujpb4.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-3gfkk.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-4j70a.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-t5b81.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-8blgr.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\url\search\is-fk3gb.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-36muq.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\url\search\is-rai46.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\url\help\is-v5rqi.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-okhm8.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-5o3et.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-p74he.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-njr2a.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-q79c0.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-39d6m.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-7alve.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-9tlrd.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-n418f.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-rhug1.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-ccdl1.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-m0iac.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-aoe2c.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-f4msj.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-ol1av.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-7olb0.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-d504g.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-t7027.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-3cpdv.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-kk0t1.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-77pdi.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\is-dfq86.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-5m7vh.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-i7hn4.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-g6uu3.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-25ahj.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-pa1m6.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-n5lec.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-kd0di.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-0i88m.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-3mccl.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-g0pdp.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-mmslk.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\forms\is-1qlkd.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-4fngn.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-dpv84.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-m1huo.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-mf3sk.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-nja6a.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-t6grv.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-pau2j.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-gp36v.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-m3kcv.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-d37s8.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-v3fsp.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-alttd.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\data\is-i0etj.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-4a4a3.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-5v6de.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-h3i6d.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-46b3t.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\7-zip\is-jacfo.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-edj44.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-g9r8c.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-6qekp.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-etd74.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-2o283.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-k6074.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-mu095.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-5p65g.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-0je7o.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-rgs0c.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-fkgap.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-agbb3.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-6059r.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-tbdlt.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-kb0dd.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-agib5.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-a2p95.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-97sdl.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-gh4v0.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-a48rs.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9v0og.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-t0m50.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-hm7dd.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-cmg59.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-mvkdp.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-odcej.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-2gq1u.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-siheu.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-82fd4.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-9rpmc.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-74rvq.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-t9pn8.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-t8hlm.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-ji1s5.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-u6l3o.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-om8dv.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-irgm7.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-j789n.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-5bduh.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8b06p.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-r6hhd.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-oducp.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-5llks.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-d8mv3.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-4greg.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-q44ss.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-cqmpf.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-epulk.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-o7543.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-4mokm.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-lp2gt.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-dr5c9.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ncisd.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-nlqh9.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-oateq.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-tk3cn.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-7itli.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-aso20.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-e4n1d.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-c814l.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-1g7k9.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-cmjuj.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-ldkve.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-p9j5s.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-5bfhb.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-1n02r.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-er8jm.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-g7863.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ph4ph.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\is-pegl2.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}' WindowName: ''

Creates and executes the following

'%TEMP%\is-b4u00.tmp\is-bailc.tmp' /SL4 $B0232 "<Full path to file>" 7030781 52736
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' 85f83b91f02a26453aa0010a80952f8a

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней