Trojan.DownLoader45.9248

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-abcre.tmp\is-7k6ma.tmp
%ProgramFiles(x86)%\viewfd\ini\is-mq0uj.tmp
%ProgramFiles(x86)%\viewfd\ini\is-pr30l.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-b42i7.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-siie8.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-lf4fn.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-5vk1b.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-0ckcj.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-5dr57.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-csu1i.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-nlrm3.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-fuplh.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-cbc43.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-92das.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-m2af0.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7bnes.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9v96j.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-0ntmb.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-c6n3f.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-qoss8.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-vs3cf.tmp
%ProgramFiles(x86)%\viewfd\ini\is-d6c4l.tmp
%ProgramFiles(x86)%\viewfd\ini\is-tst7e.tmp
%ProgramFiles(x86)%\viewfd\ini\is-fts5o.tmp
%ProgramFiles(x86)%\viewfd\ini\is-3i9bd.tmp
%ProgramFiles(x86)%\viewfd\ini\is-tpnt0.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-8cbel.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-73nnd.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-76r4h.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-36icd.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-94dj0.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-2t0g5.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-rctf7.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-bqeco.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-hubbl.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-8hs2q.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-b6doj.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-s6duh.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-sr35d.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-c9g29.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-68tnt.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-e8bu7.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-sjc10.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-kqhv6.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-q7j7e.tmp
%ProgramFiles(x86)%\viewfd\ini\is-rfj6r.tmp
%ProgramFiles(x86)%\viewfd\ini\is-knrj5.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-b1gjb.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-o7ca3.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-h8ocn.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-efi1f.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-s2mpg.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-hvo83.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-oguvl.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-5f3qm.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-vrjs6.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-q936u.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-52jcq.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-k8trf.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-t3pr3.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-rgk8b.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-088mr.tmp
%ProgramFiles(x86)%\viewfd\is-sujc7.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-jeubb.tmp
%ProgramFiles(x86)%\viewfd\is-jnvl2.tmp
%ProgramFiles(x86)%\viewfd\is-9as9h.tmp
%ProgramFiles(x86)%\viewfd\is-itfp4.tmp
%ProgramFiles(x86)%\viewfd\is-ogelc.tmp
%ProgramFiles(x86)%\viewfd\is-gj49s.tmp
%ProgramFiles(x86)%\viewfd\is-c30kk.tmp
%ProgramFiles(x86)%\viewfd\is-tb6vh.tmp
%ProgramFiles(x86)%\viewfd\is-sda0a.tmp
%ProgramFiles(x86)%\viewfd\is-l7hnh.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\search\is-qnldr.tmp
%ProgramFiles(x86)%\viewfd\search\is-8rucu.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-uu3jk.tmp
%ProgramFiles(x86)%\viewfd\search\is-4qnji.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-2gd2v.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ijt8f.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-dupj8.tmp
%ProgramFiles(x86)%\viewfd\programs\is-rb8le.tmp
%ProgramFiles(x86)%\viewfd\radio\is-7c2ti.tmp
%ProgramFiles(x86)%\viewfd\radio\is-h1oog.tmp
%ProgramFiles(x86)%\viewfd\reports\is-e0aqc.tmp
%ProgramFiles(x86)%\viewfd\search\is-hn5c0.tmp
%ProgramFiles(x86)%\viewfd\search\is-ffjdc.tmp
%ProgramFiles(x86)%\viewfd\search\is-2qg2h.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\url\search\is-sr3n3.tmp
%ProgramFiles(x86)%\viewfd\search\is-8ee14.tmp
%ProgramFiles(x86)%\viewfd\soft\is-m68ga.tmp
%ProgramFiles(x86)%\viewfd\url\is-4oifi.tmp
%ProgramFiles(x86)%\viewfd\url\is-bn8c1.tmp
%ProgramFiles(x86)%\viewfd\url\is-d8hrj.tmp
%ProgramFiles(x86)%\viewfd\url\is-vvlfl.tmp
%ProgramFiles(x86)%\viewfd\url\is-j4kj5.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-urp10.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-ub3jg.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-9n6i7.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-d757k.tmp
%ProgramFiles(x86)%\viewfd\is-o88sn.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-sk0oj.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-6aign.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-o5c80.tmp
%ProgramFiles(x86)%\viewfd\data\is-gmlgt.tmp
%ProgramFiles(x86)%\viewfd\forms\is-t599n.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-9rf2v.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-5h2jh.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-9ot1h.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-8e5fp.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-1fd09.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-npd12.tmp
%ProgramFiles(x86)%\viewfd\browser\is-ouvn2.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-hkpc7.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-f2c9h.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-4fcqb.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-r191n.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-69u6q.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-f9o1g.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-kohd6.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-cvh6q.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-aqt39.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-520ut.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-bvq69.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-enn2s.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-e54tk.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-o78oo.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-6o357.tmp
%TEMP%\is-8pe36.tmp\_isetup\_setup64.tmp
%TEMP%\is-8pe36.tmp\_isetup\_shfoldr.dll
%TEMP%\is-8pe36.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-bvaus.tmp
%ProgramFiles(x86)%\viewfd\7-zip\lang\is-0chdh.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-r98c4.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-9rkfc.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-2nnio.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-t0g40.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-ai6b8.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-drs87.tmp
%ProgramFiles(x86)%\viewfd\backup\is-31vrf.tmp
%ProgramFiles(x86)%\viewfd\browser\is-v9dac.tmp
%ProgramFiles(x86)%\viewfd\browser\is-jnsa9.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-ga2c1.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-g0g01.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-hd8sc.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-nsl38.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-io940.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-mi7ut.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-32fpo.tmp
%TEMP%\is-8pe36.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\viewfd\browser\is-o9t08.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-ac3k8.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-0e9pd.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-hsjch.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-59q57.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-7880i.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ojmbg.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-4njdf.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-0jnff.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-nbhiq.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-krp1n.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-agv3j.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-de914.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-gtsq0.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-m555h.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ghp5s.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-qt8tt.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-pe48t.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1kvm7.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-5ie82.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-84qdi.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-jgg68.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ev1k0.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-06nju.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-cb7rs.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-58ccq.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-ft82d.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-4cbe4.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-vt3k9.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-fdk74.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-gm1ac.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-gl4mo.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-nfi8u.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-had93.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-pfg47.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-v5hf3.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-mdvlj.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-cjk7c.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-ni6mk.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-0l5i0.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-vcbfp.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-2k22k.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-41d38.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-oe187.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-8199a.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-lm9o1.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-dodft.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-smfeh.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-2tdbt.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-7vfju.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-l426b.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-fgblm.tmp
%ProgramFiles(x86)%\viewfd\graphic\grids\is-pdt4h.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-bvaus.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\ini\is-mq0uj.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-pr30l.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\lsd\is-b42i7.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-siie8.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-lf4fn.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-5vk1b.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-0ckcj.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-5dr57.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\ini\is-d6c4l.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-tst7e.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-csu1i.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-cbc43.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-92das.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-m2af0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7bnes.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9v96j.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-0ntmb.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-c6n3f.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-qoss8.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-fuplh.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-b6doj.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\ini\is-fts5o.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\ini\is-3i9bd.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\ini\is-tpnt0.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-73nnd.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-76r4h.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-36icd.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-94dj0.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-2t0g5.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-rctf7.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-bqeco.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-hubbl.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-s6duh.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-8cbel.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-nlrm3.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-sr35d.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-c9g29.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-68tnt.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-e8bu7.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-sjc10.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-kqhv6.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-q7j7e.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-rfj6r.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-knrj5.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-o7ca3.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-vs3cf.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-8hs2q.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-h8ocn.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-efi1f.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-uu3jk.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-qnldr.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-hvo83.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-oguvl.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-5f3qm.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-vrjs6.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-q936u.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-52jcq.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-k8trf.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-t3pr3.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-rgk8b.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-088mr.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-o88sn.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\is-sujc7.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-jnvl2.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-9as9h.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-itfp4.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-ogelc.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-gj49s.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-c30kk.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-tb6vh.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\url\search\is-d757k.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-9n6i7.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\url\search\is-sr3n3.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\url\help\is-ub3jg.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-s2mpg.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-2gd2v.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ijt8f.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-dupj8.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-rb8le.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-7c2ti.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-h1oog.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-e0aqc.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-hn5c0.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-ffjdc.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-2qg2h.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-4qnji.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-8rucu.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-8ee14.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-m68ga.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-4oifi.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-bn8c1.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-d8hrj.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-vvlfl.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-j4kj5.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-urp10.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\is-sda0a.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-b1gjb.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-jeubb.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-sk0oj.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-5h2jh.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-9ot1h.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-8e5fp.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-1fd09.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-npd12.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-hkpc7.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-drs87.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-f2c9h.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\forms\is-t599n.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-9rf2v.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-4fcqb.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-f9o1g.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-kohd6.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-cvh6q.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-aqt39.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-520ut.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ai6b8.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ac3k8.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-0e9pd.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-r191n.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-69u6q.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\data\is-gmlgt.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-o5c80.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-enn2s.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-r98c4.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-9rkfc.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\7-zip\is-2nnio.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-t0g40.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-31vrf.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-ouvn2.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-o9t08.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-v9dac.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-jnsa9.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-0chdh.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-ga2c1.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-hd8sc.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-nsl38.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-io940.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-mi7ut.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-32fpo.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-6o357.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-o78oo.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-e54tk.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-bvq69.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-g0g01.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-hsjch.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-gm1ac.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-gl4mo.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-nfi8u.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ojmbg.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-4njdf.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-0jnff.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-nbhiq.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-krp1n.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-agv3j.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-de914.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-gtsq0.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-6aign.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-m555h.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-qt8tt.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-pe48t.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1kvm7.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-5ie82.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-84qdi.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-jgg68.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ev1k0.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-06nju.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-cb7rs.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-58ccq.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-vcbfp.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-7880i.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-ft82d.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-59q57.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-vt3k9.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-had93.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-pfg47.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-v5hf3.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-mdvlj.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-cjk7c.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ni6mk.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-0l5i0.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-fdk74.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-4cbe4.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-41d38.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-oe187.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-8199a.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-lm9o1.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-dodft.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-smfeh.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-2tdbt.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-7vfju.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-l426b.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-fgblm.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-2k22k.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-pdt4h.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ghp5s.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\is-l7hnh.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}' WindowName: ''

Creates and executes the following

'%TEMP%\is-abcre.tmp\is-7k6ma.tmp' /SL4 $F0140 "<Full path to file>" 6947046 52736
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' 133d18b42f443ac58dd246f18e99a10f

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней