Trojan.DownLoader45.10115

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-elgs1.tmp\is-an295.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-mbhqj.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-sdlal.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-c5jq5.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-i7l40.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-e9g2g.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-4u4t7.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-u8re3.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-j2rqk.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-oqmcg.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-lrkik.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-eo0f3.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7h82l.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-cjh9m.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-g0n76.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9djtu.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-8g6vq.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-rvvqf.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-km3m3.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-675fb.tmp
%ProgramFiles(x86)%\viewfd\ini\is-kq1ra.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-daa8r.tmp
%ProgramFiles(x86)%\viewfd\ini\is-kk1v1.tmp
%ProgramFiles(x86)%\viewfd\ini\is-i6h6i.tmp
%ProgramFiles(x86)%\viewfd\ini\is-vlpg4.tmp
%ProgramFiles(x86)%\viewfd\ini\is-6mdfu.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-p4b5s.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-thbpj.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-85alb.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-d8nuf.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-bu138.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-gsoff.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-5o5hq.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-bn7nn.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-tvupr.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-t2uof.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-c3k73.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-krb1v.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-q66q8.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-snaoe.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-3bdci.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-6dd3g.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-85ghc.tmp
%ProgramFiles(x86)%\viewfd\ini\is-181v0.tmp
%ProgramFiles(x86)%\viewfd\ini\is-sn2cc.tmp
%ProgramFiles(x86)%\viewfd\ini\is-2uqth.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-2ulps.tmp
%ProgramFiles(x86)%\viewfd\ini\is-rbdqi.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-r9j3f.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-uukq0.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-m1nbn.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-vd2o4.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-escpd.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-s2u49.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-t4pnr.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-jp4bv.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-ig4bp.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-9t2j3.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-ufp0t.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-vodk8.tmp
%ProgramFiles(x86)%\viewfd\is-0his7.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-s508c.tmp
%ProgramFiles(x86)%\viewfd\is-24c8a.tmp
%ProgramFiles(x86)%\viewfd\is-etlsa.tmp
%ProgramFiles(x86)%\viewfd\is-ph4rg.tmp
%ProgramFiles(x86)%\viewfd\is-gjhnk.tmp
%ProgramFiles(x86)%\viewfd\is-kd45k.tmp
%ProgramFiles(x86)%\viewfd\is-0q2hs.tmp
%ProgramFiles(x86)%\viewfd\is-aadeb.tmp
%ProgramFiles(x86)%\viewfd\is-phaos.tmp
%ProgramFiles(x86)%\viewfd\is-b27qq.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\soft\is-skng0.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-tg2pm.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-4abc4.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-mchnm.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-hf7rj.tmp
%ProgramFiles(x86)%\viewfd\programs\is-otdgc.tmp
%ProgramFiles(x86)%\viewfd\radio\is-seugs.tmp
%ProgramFiles(x86)%\viewfd\radio\is-ol3nk.tmp
%ProgramFiles(x86)%\viewfd\reports\is-i8meh.tmp
%ProgramFiles(x86)%\viewfd\search\is-jfnba.tmp
%ProgramFiles(x86)%\viewfd\search\is-gukeh.tmp
%ProgramFiles(x86)%\viewfd\search\is-ov8ur.tmp
%ProgramFiles(x86)%\viewfd\search\is-fp6hk.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-vcrn7.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-7tcsh.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-3a9c2.tmp
%ProgramFiles(x86)%\viewfd\search\is-nlllo.tmp
%ProgramFiles(x86)%\viewfd\url\is-cmh1f.tmp
%ProgramFiles(x86)%\viewfd\url\is-panra.tmp
%ProgramFiles(x86)%\viewfd\url\is-nc8km.tmp
%ProgramFiles(x86)%\viewfd\url\is-j2ect.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-nrc46.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-mgdfu.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-9irur.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-9piej.tmp
%ProgramFiles(x86)%\viewfd\search\is-hoh9o.tmp
%ProgramFiles(x86)%\viewfd\soft\is-kkj9u.tmp
%ProgramFiles(x86)%\viewfd\url\is-t9so5.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-7g8vj.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-485gh.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8bq0i.tmp
%ProgramFiles(x86)%\viewfd\forms\is-u2sat.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-85plh.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-th0et.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-j4f2u.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-bbvhb.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-n2ucm.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-27vlk.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-o4h3h.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-sd7f9.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-lrprn.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-d8r9d.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-bg8fi.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-daomg.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-9lv4f.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-c2i2f.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-e8mhq.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-rchsn.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-evraj.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-mvm44.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-nbqv7.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-j55e8.tmp
%ProgramFiles(x86)%\viewfd\data\is-25cn1.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-7t9t4.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-4mqa4.tmp
%TEMP%\is-us80g.tmp\_isetup\_regdll.tmp
%TEMP%\is-us80g.tmp\_isetup\_shfoldr.dll
%TEMP%\is-us80g.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-1k186.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-840dq.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-oo969.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-9ntdt.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-tekm8.tmp
%ProgramFiles(x86)%\viewfd\backup\is-i5bb8.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-0nu90.tmp
%ProgramFiles(x86)%\viewfd\browser\is-m3gcd.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-2aq87.tmp
%ProgramFiles(x86)%\viewfd\browser\is-e665c.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-nhbbu.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-tmao3.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-jq3f7.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-h5i63.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-o538j.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-rq66c.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-4i0hk.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-6f6p0.tmp
%ProgramFiles(x86)%\viewfd\browser\is-7pkbh.tmp
%TEMP%\is-us80g.tmp\_isetup\_setup64.tmp
%ProgramFiles(x86)%\viewfd\browser\is-k0sto.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-3d9sa.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-669sh.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-5t3cd.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-h136t.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-8g797.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-m5ko0.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-4cti6.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-mmd6e.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-iol1r.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-m04q5.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-4a600.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-l8p53.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-mq0gt.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-gqh59.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-57fqd.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-k9btj.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-76prl.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-fpkp7.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-t5dh8.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-6gbun.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1kpcb.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-b1f3j.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-sd0o7.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-tmsgo.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-dedrl.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-7s5qe.tmp
%ProgramFiles(x86)%\viewfd\is-5nepu.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\graphic\grids\is-fhr2l.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-51dh7.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-fbjf2.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-l9kgi.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-2bil8.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-qldv0.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-21lau.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-q8ses.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-2fjbq.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-7feap.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-6ushh.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-v34l3.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-6s7cs.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-p81ub.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-ro25l.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-5l9ad.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-khj3h.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-cra7d.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-s74q0.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-ghkj5.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-6n1u7.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-7s4no.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-vgq7t.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-lq1qb.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-1k186.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\lsd\is-mbhqj.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-sdlal.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-c5jq5.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-i7l40.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-e9g2g.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-4u4t7.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-u8re3.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\ini\is-kq1ra.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-j2rqk.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\ini\is-kk1v1.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-daa8r.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7h82l.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-cjh9m.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-g0n76.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9djtu.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-8g6vq.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-rvvqf.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-km3m3.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-lrkik.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-675fb.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-eo0f3.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\ini\is-i6h6i.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-vlpg4.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-6mdfu.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-thbpj.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-85alb.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-d8nuf.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-bu138.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-gsoff.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-5o5hq.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-bn7nn.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-t2uof.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-uukq0.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-oqmcg.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-r9j3f.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-q66q8.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-snaoe.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-3bdci.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-6dd3g.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-85ghc.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-181v0.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-sn2cc.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\ini\is-2uqth.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-krb1v.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\ini\is-rbdqi.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-2ulps.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-p4b5s.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-tvupr.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-7tcsh.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\url\soft\is-skng0.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-tg2pm.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-escpd.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-s2u49.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-t4pnr.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-jp4bv.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-ig4bp.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-9t2j3.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\url\search\is-s508c.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-4abc4.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-ufp0t.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\is-24c8a.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-5nepu.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-etlsa.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-ph4rg.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-gjhnk.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-kd45k.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-0q2hs.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-aadeb.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\wallpaper\is-vodk8.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-0his7.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\url\search\is-mchnm.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-9irur.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-l8p53.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-vd2o4.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-otdgc.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-seugs.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-ol3nk.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-i8meh.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-jfnba.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-gukeh.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-ov8ur.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-fp6hk.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-nlllo.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-hoh9o.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-kkj9u.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-t9so5.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-cmh1f.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-panra.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-nc8km.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-j2ect.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-nrc46.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\url\help\is-mgdfu.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-m1nbn.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-3a9c2.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-vcrn7.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-c3k73.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-7g8vj.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-485gh.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-bbvhb.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-n2ucm.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-27vlk.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-o4h3h.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-sd7f9.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-d8r9d.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-2aq87.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\formulas\is-85plh.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-bg8fi.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\formulas\is-j4f2u.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9lv4f.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-e8mhq.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-rchsn.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-evraj.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-mvm44.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-0nu90.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-lrprn.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-669sh.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-daomg.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\forms\is-u2sat.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-c2i2f.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\data\is-25cn1.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-3d9sa.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\is-840dq.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-9ntdt.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-tekm8.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-i5bb8.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-m3gcd.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-7pkbh.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-e665c.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-k0sto.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-nhbbu.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-tmao3.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-oo969.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\colourschemes\is-jq3f7.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-o538j.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-rq66c.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-4i0hk.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-6f6p0.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-4mqa4.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-7t9t4.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-j55e8.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-nbqv7.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-mq0gt.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-h5i63.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-vgq7t.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-th0et.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-51dh7.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-h136t.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-m5ko0.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-4cti6.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-mmd6e.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-iol1r.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-m04q5.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-4a600.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-57fqd.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-tmsgo.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-dedrl.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-7s5qe.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-k9btj.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-76prl.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-fpkp7.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-t5dh8.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-6gbun.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1kpcb.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-b1f3j.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-sd0o7.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8bq0i.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-gqh59.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-fbjf2.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-8g797.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-9piej.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\is-phaos.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-v34l3.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-2bil8.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-qldv0.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-21lau.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-q8ses.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-2fjbq.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-7feap.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-6s7cs.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-hf7rj.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-lq1qb.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-l9kgi.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-p81ub.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-5l9ad.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-khj3h.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-cra7d.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-s74q0.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-ghkj5.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-6n1u7.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-7s4no.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-fhr2l.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-6ushh.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-ro25l.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-5t3cd.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\is-b27qq.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '' WindowName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}'

Creates and executes the following

'%TEMP%\is-elgs1.tmp\is-an295.tmp' /SL4 $B0234 "<Full path to file>" 7079296 141312
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' a04de7eb268151c6b4889b2f1e8b7bac

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней