Trojan.DownLoader45.12464

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-hiujp.tmp\is-4egqa.tmp
%ProgramFiles(x86)%\viewfd\ini\is-uae3h.tmp
%ProgramFiles(x86)%\viewfd\ini\is-483a9.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-mssn9.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-bqggk.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-rr38g.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-dtnu8.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-bfq25.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-l1ia0.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-nbnmf.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-bnje2.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-52nf0.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-espih.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-css04.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-54cq8.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-8c0c5.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-dj7hv.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-6hec7.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-hg71p.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-sar8p.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-un4k1.tmp
%ProgramFiles(x86)%\viewfd\ini\is-a2ubg.tmp
%ProgramFiles(x86)%\viewfd\ini\is-ops2k.tmp
%ProgramFiles(x86)%\viewfd\ini\is-0l4pa.tmp
%ProgramFiles(x86)%\viewfd\ini\is-4ev8n.tmp
%ProgramFiles(x86)%\viewfd\ini\is-i2808.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-4hrva.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-4293q.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-g7bvi.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-gd84g.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-eb20d.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-pdcs7.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-pjqoj.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-3itsk.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-q7a02.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-o8glh.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ncmcs.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-30sth.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-mnq72.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-4jgjf.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-o82qo.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-1ihde.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-pf3i4.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-3mkdp.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-j3vdc.tmp
%ProgramFiles(x86)%\viewfd\ini\is-daflk.tmp
%ProgramFiles(x86)%\viewfd\ini\is-pg7i0.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-4ac8s.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-g03j1.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-mk7ba.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-kd4vf.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-egu8f.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-d22ff.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-bkndi.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-u3od9.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-fouq5.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-6be1p.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-p1ec5.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-rrsl6.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-qrbcj.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-vj1ku.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-s8nus.tmp
%ProgramFiles(x86)%\viewfd\is-6cmmh.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-knds8.tmp
%ProgramFiles(x86)%\viewfd\is-9lfdl.tmp
%ProgramFiles(x86)%\viewfd\is-cm6tf.tmp
%ProgramFiles(x86)%\viewfd\is-l6fpq.tmp
%ProgramFiles(x86)%\viewfd\is-jc59o.tmp
%ProgramFiles(x86)%\viewfd\is-ro64n.tmp
%ProgramFiles(x86)%\viewfd\is-hlt3n.tmp
%ProgramFiles(x86)%\viewfd\is-ailo2.tmp
%ProgramFiles(x86)%\viewfd\is-iclrv.tmp
%ProgramFiles(x86)%\viewfd\is-p7n6r.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\search\is-ldohg.tmp
%ProgramFiles(x86)%\viewfd\search\is-540dl.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-so5nc.tmp
%ProgramFiles(x86)%\viewfd\search\is-vgjbg.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ojuap.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-rgf0j.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-qks0v.tmp
%ProgramFiles(x86)%\viewfd\programs\is-aj532.tmp
%ProgramFiles(x86)%\viewfd\radio\is-bs2eo.tmp
%ProgramFiles(x86)%\viewfd\radio\is-f9dfe.tmp
%ProgramFiles(x86)%\viewfd\reports\is-ju5i2.tmp
%ProgramFiles(x86)%\viewfd\search\is-17arh.tmp
%ProgramFiles(x86)%\viewfd\search\is-v0do5.tmp
%ProgramFiles(x86)%\viewfd\search\is-6be9g.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\url\search\is-6a3d8.tmp
%ProgramFiles(x86)%\viewfd\search\is-o5chp.tmp
%ProgramFiles(x86)%\viewfd\soft\is-2f74k.tmp
%ProgramFiles(x86)%\viewfd\url\is-dl9q0.tmp
%ProgramFiles(x86)%\viewfd\url\is-4rjp6.tmp
%ProgramFiles(x86)%\viewfd\url\is-9usqb.tmp
%ProgramFiles(x86)%\viewfd\url\is-9f5qf.tmp
%ProgramFiles(x86)%\viewfd\url\is-v25ub.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-dke1r.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-v844k.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-ltu8s.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-ophfc.tmp
%ProgramFiles(x86)%\viewfd\is-fpihp.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-o0hci.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-4e10i.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-8n7qk.tmp
%ProgramFiles(x86)%\viewfd\data\is-g1p34.tmp
%ProgramFiles(x86)%\viewfd\forms\is-nardr.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-p6b4l.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-evlsv.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-0s0ln.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-r57dq.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-k15ji.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-p7iih.tmp
%ProgramFiles(x86)%\viewfd\browser\is-i7sb1.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-rn9ol.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-r2eqm.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-amfh5.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-k74ol.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-9ofif.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-c1goo.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-cnmig.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-olqmg.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-t3qqk.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-umt0h.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-204jo.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-04736.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-u0l84.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-rl0pr.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-jbsoe.tmp
%TEMP%\is-v2vna.tmp\_isetup\_setup64.tmp
%TEMP%\is-v2vna.tmp\_isetup\_shfoldr.dll
%TEMP%\is-v2vna.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-n1boe.tmp
%ProgramFiles(x86)%\viewfd\7-zip\lang\is-f70md.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-v8d5d.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-ka6ep.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-ivjkq.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-h8779.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-6gnkd.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-87lfe.tmp
%ProgramFiles(x86)%\viewfd\backup\is-b398s.tmp
%ProgramFiles(x86)%\viewfd\browser\is-6vtfa.tmp
%ProgramFiles(x86)%\viewfd\browser\is-ii8g1.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-sc89p.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-03qpq.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-6t0m8.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-6vl1k.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-69lcq.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-e63vu.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-abl7q.tmp
%TEMP%\is-v2vna.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\viewfd\browser\is-qjfp1.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-mkj6t.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-eclfl.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-hh2op.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-qpbuu.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-dcke2.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-d7lg0.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-bik8v.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-rjli3.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-t08st.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-o9i59.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-55jab.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-tovbt.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-4e2sv.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-sjtpp.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1hm82.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-fvks4.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-4djt0.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1hhbk.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-mdo82.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-a14me.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-i9svm.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-a60k6.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-uidpt.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-3muim.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8i4rs.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-fdsou.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-skfjm.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-curr0.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-6av5l.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-i8moh.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-j0qik.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-n6ktb.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-1m4s6.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-bgq4m.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-ve7me.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-f93je.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-s2fpj.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-pto2k.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-u6233.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-c68c1.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-3is6l.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-42502.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-eb7ta.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-6nmbo.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-pl617.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-tq1ep.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-1jjts.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-8d71g.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-0e0cv.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-dn84g.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-563hg.tmp
%ProgramFiles(x86)%\viewfd\graphic\grids\is-grdll.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-n1boe.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\ini\is-uae3h.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-483a9.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\lsd\is-mssn9.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-bqggk.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-rr38g.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-dtnu8.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-bfq25.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-l1ia0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\ini\is-a2ubg.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-ops2k.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-nbnmf.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-espih.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-css04.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-54cq8.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-8c0c5.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-dj7hv.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-6hec7.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-hg71p.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-sar8p.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-52nf0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ncmcs.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\ini\is-0l4pa.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\ini\is-4ev8n.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\ini\is-i2808.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-4293q.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-g7bvi.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-gd84g.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-eb20d.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-pdcs7.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-pjqoj.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-3itsk.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-q7a02.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-30sth.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-4hrva.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-bnje2.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-mnq72.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-4jgjf.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-o82qo.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-1ihde.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-pf3i4.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-3mkdp.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-j3vdc.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-daflk.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-pg7i0.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-g03j1.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-un4k1.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-o8glh.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-mk7ba.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-kd4vf.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-so5nc.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-ldohg.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-d22ff.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-bkndi.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-u3od9.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-fouq5.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-6be1p.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-p1ec5.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-rrsl6.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-qrbcj.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-vj1ku.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-s8nus.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-fpihp.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\is-6cmmh.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-9lfdl.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-cm6tf.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-l6fpq.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-jc59o.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-ro64n.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-hlt3n.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-ailo2.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\url\search\is-ophfc.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-ltu8s.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\url\search\is-6a3d8.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\url\help\is-v844k.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-egu8f.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ojuap.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-rgf0j.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-qks0v.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-aj532.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-bs2eo.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-f9dfe.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-ju5i2.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-17arh.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-v0do5.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-6be9g.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-vgjbg.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-540dl.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-o5chp.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-2f74k.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-dl9q0.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-4rjp6.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-9usqb.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-9f5qf.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-v25ub.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-dke1r.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\is-iclrv.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-4ac8s.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-knds8.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-o0hci.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-evlsv.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-0s0ln.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-r57dq.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-k15ji.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-p7iih.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-rn9ol.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-87lfe.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-r2eqm.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\forms\is-nardr.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-p6b4l.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-amfh5.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-c1goo.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-cnmig.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-olqmg.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-t3qqk.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-umt0h.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6gnkd.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-mkj6t.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-eclfl.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-k74ol.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9ofif.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\data\is-g1p34.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-8n7qk.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-04736.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-v8d5d.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-ka6ep.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\7-zip\is-ivjkq.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-h8779.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-b398s.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-i7sb1.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-qjfp1.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-6vtfa.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-ii8g1.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-f70md.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-sc89p.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-6t0m8.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-6vl1k.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-69lcq.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-e63vu.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-abl7q.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-jbsoe.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-rl0pr.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-u0l84.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-204jo.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-03qpq.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-hh2op.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-i8moh.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-j0qik.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-n6ktb.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-d7lg0.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-bik8v.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-rjli3.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-t08st.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-o9i59.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-55jab.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-tovbt.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-4e2sv.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-4e10i.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-sjtpp.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-fvks4.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-4djt0.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1hhbk.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-mdo82.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-a14me.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-i9svm.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-a60k6.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-uidpt.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-3muim.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8i4rs.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-c68c1.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-dcke2.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-fdsou.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-qpbuu.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-curr0.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-1m4s6.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-bgq4m.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ve7me.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-f93je.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-s2fpj.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-pto2k.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-u6233.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-6av5l.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-skfjm.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-42502.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-eb7ta.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-6nmbo.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-pl617.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-tq1ep.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-1jjts.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-8d71g.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-0e0cv.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-dn84g.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-563hg.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-3is6l.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-grdll.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1hm82.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\is-p7n6r.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '' WindowName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}'

Creates and executes the following

'%TEMP%\is-hiujp.tmp\is-4egqa.tmp' /SL4 $E0164 "<Full path to file>" 7107516 62976
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' 32388a8fe633c9b87ed095653aee06ff

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней