Trojan.DownLoader45.10136

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-t02m5.tmp\is-v1ajf.tmp
%ProgramFiles(x86)%\viewfd\ini\is-3dsu3.tmp
%ProgramFiles(x86)%\viewfd\ini\is-vc7is.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-0bcl4.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-tet3k.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-mias8.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-9l18l.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-bjgt1.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-rv5i1.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ogl79.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-4n97c.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-lglet.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-6rlro.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-gq1av.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-lon0a.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-85opa.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-bvkti.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-kb9n2.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-p52bn.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-i0ot8.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-s3q87.tmp
%ProgramFiles(x86)%\viewfd\ini\is-a7ndp.tmp
%ProgramFiles(x86)%\viewfd\ini\is-0e07p.tmp
%ProgramFiles(x86)%\viewfd\ini\is-is96q.tmp
%ProgramFiles(x86)%\viewfd\ini\is-8at52.tmp
%ProgramFiles(x86)%\viewfd\ini\is-bjn9p.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-tkk2d.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-kq9ku.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-acets.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-88g7o.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-g01be.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-j8jp2.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-ul85e.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-3dfci.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-kl1uf.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-b8rv9.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-h0o75.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-apev8.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-n6358.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-8alo8.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-kgenf.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-1vvkp.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-1k0dj.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-3698r.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-kfmde.tmp
%ProgramFiles(x86)%\viewfd\ini\is-r94hm.tmp
%ProgramFiles(x86)%\viewfd\ini\is-shh95.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-m7t85.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-vvi5a.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-5njjq.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-nlt0m.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-j2k0e.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-cinm8.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-8ibt6.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-vhb02.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-7ogfq.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-r364q.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-j8td1.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-vugia.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-1biq0.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-m7i2l.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-u2qp6.tmp
%ProgramFiles(x86)%\viewfd\is-en78c.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-4340u.tmp
%ProgramFiles(x86)%\viewfd\is-dpf5g.tmp
%ProgramFiles(x86)%\viewfd\is-tduee.tmp
%ProgramFiles(x86)%\viewfd\is-41pfe.tmp
%ProgramFiles(x86)%\viewfd\is-64hpm.tmp
%ProgramFiles(x86)%\viewfd\is-vt974.tmp
%ProgramFiles(x86)%\viewfd\is-9hrdh.tmp
%ProgramFiles(x86)%\viewfd\is-q0ftr.tmp
%ProgramFiles(x86)%\viewfd\is-r8u0n.tmp
%ProgramFiles(x86)%\viewfd\is-p8i58.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\search\is-jpdv4.tmp
%ProgramFiles(x86)%\viewfd\search\is-a4qm2.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-l6sfo.tmp
%ProgramFiles(x86)%\viewfd\search\is-jrndk.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-vjmrc.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-04sfb.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-4qlld.tmp
%ProgramFiles(x86)%\viewfd\programs\is-9hcv0.tmp
%ProgramFiles(x86)%\viewfd\radio\is-s7874.tmp
%ProgramFiles(x86)%\viewfd\radio\is-49q93.tmp
%ProgramFiles(x86)%\viewfd\reports\is-p2dh4.tmp
%ProgramFiles(x86)%\viewfd\search\is-puigk.tmp
%ProgramFiles(x86)%\viewfd\search\is-bgb29.tmp
%ProgramFiles(x86)%\viewfd\search\is-subvp.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\url\search\is-b1t56.tmp
%ProgramFiles(x86)%\viewfd\search\is-dd5gi.tmp
%ProgramFiles(x86)%\viewfd\soft\is-fl866.tmp
%ProgramFiles(x86)%\viewfd\url\is-6es8k.tmp
%ProgramFiles(x86)%\viewfd\url\is-j3a43.tmp
%ProgramFiles(x86)%\viewfd\url\is-466pn.tmp
%ProgramFiles(x86)%\viewfd\url\is-qoj31.tmp
%ProgramFiles(x86)%\viewfd\url\is-vd93t.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-8aq3f.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-vg59h.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-ajkh3.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-8fugt.tmp
%ProgramFiles(x86)%\viewfd\is-ebc26.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-s0mm5.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-8p8io.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-0fr6o.tmp
%ProgramFiles(x86)%\viewfd\data\is-j5sae.tmp
%ProgramFiles(x86)%\viewfd\forms\is-tff85.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-trokt.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-775e0.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-6729l.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-hfbb9.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-v3s7i.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-9uaq6.tmp
%ProgramFiles(x86)%\viewfd\browser\is-amr0a.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-kiuhl.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-l41lb.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-3ldu3.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-6km05.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-torpo.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-rck60.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-ctv0e.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-q2hmu.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-pp62k.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-kc65a.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-df903.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-inkpl.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-5vtq7.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-fd15n.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-06pm2.tmp
%TEMP%\is-8sk19.tmp\_isetup\_setup64.tmp
%TEMP%\is-8sk19.tmp\_isetup\_shfoldr.dll
%TEMP%\is-8sk19.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-h8nt5.tmp
%ProgramFiles(x86)%\viewfd\7-zip\lang\is-5qmbp.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-4ae51.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-6vaki.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-hvsoi.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-rphrm.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-c4hs0.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-pdva7.tmp
%ProgramFiles(x86)%\viewfd\backup\is-837ni.tmp
%ProgramFiles(x86)%\viewfd\browser\is-c62et.tmp
%ProgramFiles(x86)%\viewfd\browser\is-tm5ao.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-me3v7.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-5smjr.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-1dr27.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-krteb.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-r8e04.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-33039.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-v5v6c.tmp
%TEMP%\is-8sk19.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\viewfd\browser\is-8e0u6.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-9ecrn.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-f5u1i.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-haf31.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-5u7rb.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-n0tos.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-tdhlp.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-lpskj.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-3g0lt.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-j7v0m.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-cqhbt.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-6qqe9.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-6vid9.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-g378l.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-a3kbf.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-fsctl.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-tih69.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-kbj8h.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-3lv12.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-608tu.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-jedpi.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ides1.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-t281h.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-2bgrd.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-q6rju.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-efj2t.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-d78gm.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-6m1bv.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-v5ndj.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-im4eb.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-qnjvh.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-s72o9.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-4b47b.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-fc9ir.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-kr2dn.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-aqsqb.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-6lvom.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-9ghcj.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-govtd.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-ab0jm.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-unoj0.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-kracr.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-3vap9.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-qvtq1.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-b3ol3.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-jqhgn.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-2qj03.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-tes75.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-gqrdm.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-12kuk.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-gtg4k.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-q09op.tmp
%ProgramFiles(x86)%\viewfd\graphic\grids\is-1qnte.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-h8nt5.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\ini\is-3dsu3.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-vc7is.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\lsd\is-0bcl4.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-tet3k.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-mias8.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-9l18l.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-bjgt1.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-rv5i1.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\ini\is-a7ndp.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-0e07p.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ogl79.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-6rlro.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-gq1av.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-lon0a.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-85opa.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-bvkti.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-kb9n2.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-p52bn.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-i0ot8.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-lglet.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-h0o75.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\ini\is-is96q.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\ini\is-8at52.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\ini\is-bjn9p.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-kq9ku.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-acets.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-88g7o.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-g01be.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-j8jp2.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ul85e.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-3dfci.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-kl1uf.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-apev8.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-tkk2d.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-4n97c.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-n6358.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-8alo8.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-kgenf.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-1vvkp.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-1k0dj.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-3698r.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-kfmde.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-r94hm.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-shh95.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-vvi5a.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-s3q87.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-b8rv9.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-5njjq.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-nlt0m.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-l6sfo.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-jpdv4.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-cinm8.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-8ibt6.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-vhb02.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-7ogfq.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-r364q.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-j8td1.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-vugia.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-1biq0.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-m7i2l.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-u2qp6.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-ebc26.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\is-en78c.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-dpf5g.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-tduee.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-41pfe.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-64hpm.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-vt974.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-9hrdh.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-q0ftr.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\url\search\is-8fugt.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-ajkh3.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\url\search\is-b1t56.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\url\help\is-vg59h.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-j2k0e.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-vjmrc.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-04sfb.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-4qlld.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-9hcv0.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-s7874.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-49q93.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-p2dh4.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-puigk.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-bgb29.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-subvp.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-jrndk.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-a4qm2.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-dd5gi.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-fl866.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-6es8k.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-j3a43.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-466pn.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-qoj31.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-vd93t.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-8aq3f.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\is-r8u0n.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-m7t85.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-4340u.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-s0mm5.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-775e0.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-6729l.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-hfbb9.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-v3s7i.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-9uaq6.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-kiuhl.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-pdva7.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-l41lb.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\forms\is-tff85.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-trokt.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-3ldu3.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-rck60.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ctv0e.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-q2hmu.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-pp62k.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-kc65a.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-c4hs0.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9ecrn.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-f5u1i.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6km05.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-torpo.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\data\is-j5sae.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-0fr6o.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-inkpl.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-4ae51.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-6vaki.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\7-zip\is-hvsoi.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-rphrm.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-837ni.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-amr0a.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-8e0u6.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-c62et.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-tm5ao.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-5qmbp.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-me3v7.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-1dr27.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-krteb.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-r8e04.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-33039.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-v5v6c.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-06pm2.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-fd15n.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-5vtq7.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-df903.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-5smjr.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-haf31.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-qnjvh.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-s72o9.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-4b47b.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-tdhlp.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-lpskj.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-3g0lt.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-j7v0m.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-cqhbt.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-6qqe9.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-6vid9.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-g378l.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-8p8io.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-a3kbf.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-tih69.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-kbj8h.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-3lv12.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-608tu.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-jedpi.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ides1.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-t281h.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-2bgrd.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-q6rju.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-efj2t.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-unoj0.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-n0tos.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-d78gm.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-5u7rb.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-v5ndj.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-fc9ir.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-kr2dn.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-aqsqb.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-6lvom.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-9ghcj.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-govtd.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ab0jm.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-im4eb.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-6m1bv.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-3vap9.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-qvtq1.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-b3ol3.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-jqhgn.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-2qj03.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-tes75.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-gqrdm.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-12kuk.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-gtg4k.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-q09op.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-kracr.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-1qnte.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-fsctl.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\is-p8i58.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}' WindowName: ''

Creates and executes the following

'%TEMP%\is-t02m5.tmp\is-v1ajf.tmp' /SL4 $B0236 "<Full path to file>" 7039736 52736
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' 572f16dedadb35beecf3d6688a43a288

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней