Trojan.DownLoader45.15363

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-02vkn.tmp\is-676h2.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-b00hu.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-s5t6k.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-v7qa8.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-ubp9l.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-nov8t.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-t3sgd.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-lqje8.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-8d5sk.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-s6fon.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-5g92s.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-k76tk.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-lfioj.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-qs2pk.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-4a320.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-38ss5.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-pn0g8.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-rr7as.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-f2ov9.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-cs6hj.tmp
%ProgramFiles(x86)%\viewfd\ini\is-ohuf4.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-153p9.tmp
%ProgramFiles(x86)%\viewfd\ini\is-d540r.tmp
%ProgramFiles(x86)%\viewfd\ini\is-jbuhs.tmp
%ProgramFiles(x86)%\viewfd\ini\is-79g88.tmp
%ProgramFiles(x86)%\viewfd\ini\is-m0ung.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-1gqq6.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-lah0c.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-ghvtg.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-k0i6e.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-0ms7e.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-g5vhm.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-nsdv4.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-u5j5h.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-rhtab.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-gr6lr.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-6uoi0.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-7kat8.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-8iad5.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-uias6.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-lnspl.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-t9c86.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-agep3.tmp
%ProgramFiles(x86)%\viewfd\ini\is-jidms.tmp
%ProgramFiles(x86)%\viewfd\ini\is-j6bq2.tmp
%ProgramFiles(x86)%\viewfd\ini\is-2irh8.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-fveql.tmp
%ProgramFiles(x86)%\viewfd\ini\is-qcg9d.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-62v36.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-jiah6.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-9klod.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-fnv7u.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-tk1v0.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-f0c5g.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-78so4.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-r4bgj.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-e58j6.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-rg29d.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-amk6p.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-p0d0t.tmp
%ProgramFiles(x86)%\viewfd\is-6dd7p.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-foqrf.tmp
%ProgramFiles(x86)%\viewfd\is-j7ava.tmp
%ProgramFiles(x86)%\viewfd\is-jufi2.tmp
%ProgramFiles(x86)%\viewfd\is-v31gg.tmp
%ProgramFiles(x86)%\viewfd\is-j2m9t.tmp
%ProgramFiles(x86)%\viewfd\is-kmdf5.tmp
%ProgramFiles(x86)%\viewfd\is-ail8p.tmp
%ProgramFiles(x86)%\viewfd\is-47853.tmp
%ProgramFiles(x86)%\viewfd\is-dn9vu.tmp
%ProgramFiles(x86)%\viewfd\is-gac8c.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\soft\is-3k69g.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-tdvgc.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-abo4o.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-vke3f.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-ep03n.tmp
%ProgramFiles(x86)%\viewfd\programs\is-gggej.tmp
%ProgramFiles(x86)%\viewfd\radio\is-7krk3.tmp
%ProgramFiles(x86)%\viewfd\radio\is-p754t.tmp
%ProgramFiles(x86)%\viewfd\reports\is-1el37.tmp
%ProgramFiles(x86)%\viewfd\search\is-b2ee3.tmp
%ProgramFiles(x86)%\viewfd\search\is-e854m.tmp
%ProgramFiles(x86)%\viewfd\search\is-pqmms.tmp
%ProgramFiles(x86)%\viewfd\search\is-jemo2.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-4bopt.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-bir1l.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-7gs9l.tmp
%ProgramFiles(x86)%\viewfd\search\is-4l7t6.tmp
%ProgramFiles(x86)%\viewfd\url\is-2fukk.tmp
%ProgramFiles(x86)%\viewfd\url\is-qdsr9.tmp
%ProgramFiles(x86)%\viewfd\url\is-6oelt.tmp
%ProgramFiles(x86)%\viewfd\url\is-jmlp8.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-h3714.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-cc9sq.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-39vcf.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-usml3.tmp
%ProgramFiles(x86)%\viewfd\search\is-k9qj5.tmp
%ProgramFiles(x86)%\viewfd\soft\is-voge9.tmp
%ProgramFiles(x86)%\viewfd\url\is-4tvo4.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-tabaa.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-bj951.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-j0esq.tmp
%ProgramFiles(x86)%\viewfd\forms\is-jhin8.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-c7rvc.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-gafta.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-uknt8.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-qbtg8.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-eelff.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-2f1cp.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-tn95j.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-gel0r.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-i0krk.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-qhh5e.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-ffe15.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-v171p.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-h6bt2.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-5tiuq.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-b685p.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-dujvp.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-iovm3.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-6rlas.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-0e6te.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-rljh2.tmp
%ProgramFiles(x86)%\viewfd\data\is-4l2mf.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-gne3e.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-5l5vo.tmp
%TEMP%\is-q9t3f.tmp\_isetup\_regdll.tmp
%TEMP%\is-q9t3f.tmp\_isetup\_shfoldr.dll
%TEMP%\is-q9t3f.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-f9su9.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-goe0h.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-4e4p2.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-7h5lu.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-fqthi.tmp
%ProgramFiles(x86)%\viewfd\backup\is-83tk1.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-bghd4.tmp
%ProgramFiles(x86)%\viewfd\browser\is-gahph.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-caa9m.tmp
%ProgramFiles(x86)%\viewfd\browser\is-d6fbu.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-eu6b0.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-6khll.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-ahee5.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-seqou.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-uqf05.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-i9cqd.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-cq5cu.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-m3pls.tmp
%ProgramFiles(x86)%\viewfd\browser\is-4d1jd.tmp
%TEMP%\is-q9t3f.tmp\_isetup\_setup64.tmp
%ProgramFiles(x86)%\viewfd\browser\is-p5lqt.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-3294i.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-d31k8.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-bgdq9.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-vds5k.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-0nie2.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-e2s8i.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1ppu6.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-atl0k.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-q55s3.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-r7hhn.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-gn8r1.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-u068k.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-90j0l.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-nmpnp.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-qulrt.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-grtt6.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ua28t.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-u1f7o.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ambn4.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-krce8.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-uljl6.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-dpho2.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-dpi7q.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-mpprf.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-vj41h.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1qe93.tmp
%ProgramFiles(x86)%\viewfd\is-a2mv7.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\graphic\grids\is-47mv4.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-dg1a1.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-3svv9.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-h6b6t.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-954v5.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-49ljo.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-ro02v.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-36goa.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-t2pha.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-d8oli.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-j4413.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-4tu94.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-mgsf2.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-i6207.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-pc2n9.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-avlbq.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-bm5om.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-nrvoe.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-rahjc.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-tf27b.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-l5idd.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-fvsn0.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-i59l1.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-jsdl8.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-f9su9.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\lsd\is-b00hu.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-s5t6k.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-v7qa8.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-ubp9l.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-nov8t.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-t3sgd.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-lqje8.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\ini\is-ohuf4.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-8d5sk.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\ini\is-d540r.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-153p9.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-lfioj.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-qs2pk.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-4a320.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-38ss5.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-pn0g8.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-rr7as.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-f2ov9.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-5g92s.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-cs6hj.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-k76tk.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\ini\is-jbuhs.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-79g88.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-m0ung.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-lah0c.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ghvtg.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-k0i6e.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-0ms7e.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-g5vhm.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-nsdv4.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-u5j5h.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-gr6lr.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-jiah6.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-s6fon.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-62v36.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-8iad5.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-uias6.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-lnspl.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-t9c86.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-agep3.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-jidms.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-j6bq2.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\ini\is-2irh8.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-7kat8.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\ini\is-qcg9d.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-fveql.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-1gqq6.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-rhtab.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-bir1l.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\url\soft\is-3k69g.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-tdvgc.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-tk1v0.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-f0c5g.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-78so4.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-r4bgj.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-e58j6.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-rg29d.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\url\search\is-foqrf.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-abo4o.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-amk6p.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\is-j7ava.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-a2mv7.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-jufi2.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-v31gg.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-j2m9t.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-kmdf5.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-ail8p.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-47853.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\wallpaper\is-p0d0t.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-6dd7p.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\url\search\is-vke3f.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-39vcf.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-u068k.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-fnv7u.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-gggej.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-7krk3.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-p754t.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-1el37.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-b2ee3.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-e854m.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-pqmms.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-jemo2.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-4l7t6.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-k9qj5.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-voge9.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-4tvo4.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-2fukk.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-qdsr9.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-6oelt.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-jmlp8.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-h3714.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\url\help\is-cc9sq.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-9klod.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-7gs9l.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-4bopt.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-6uoi0.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-tabaa.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-bj951.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-qbtg8.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-eelff.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-2f1cp.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-tn95j.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-gel0r.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-qhh5e.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-caa9m.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\formulas\is-c7rvc.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ffe15.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\formulas\is-uknt8.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-h6bt2.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-b685p.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-dujvp.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-iovm3.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6rlas.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-bghd4.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-i0krk.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-d31k8.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-v171p.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\forms\is-jhin8.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-5tiuq.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\data\is-4l2mf.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-3294i.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\is-goe0h.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-7h5lu.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-fqthi.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-83tk1.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-gahph.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-4d1jd.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-d6fbu.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-p5lqt.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-eu6b0.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-6khll.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-4e4p2.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\colourschemes\is-ahee5.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-uqf05.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-i9cqd.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-cq5cu.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-m3pls.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-5l5vo.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-gne3e.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-rljh2.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-0e6te.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-90j0l.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-seqou.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-i59l1.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-gafta.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-dg1a1.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-vds5k.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-e2s8i.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1ppu6.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-atl0k.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-q55s3.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-r7hhn.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-gn8r1.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-qulrt.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-mpprf.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-vj41h.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1qe93.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-grtt6.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ua28t.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-u1f7o.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ambn4.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-krce8.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-uljl6.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-dpho2.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-dpi7q.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-j0esq.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-nmpnp.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-3svv9.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-0nie2.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-usml3.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\is-dn9vu.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-4tu94.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-954v5.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-49ljo.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ro02v.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-36goa.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-t2pha.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-d8oli.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-mgsf2.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-ep03n.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-jsdl8.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-h6b6t.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-i6207.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-avlbq.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-bm5om.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-nrvoe.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-rahjc.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-tf27b.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-l5idd.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-fvsn0.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-47mv4.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-j4413.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-pc2n9.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-bgdq9.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\is-gac8c.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '' WindowName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}'

Creates and executes the following

'%TEMP%\is-02vkn.tmp\is-676h2.tmp' /SL4 $1000BE "<Full path to file>" 7036769 141312
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' 40e7186221a8c0bd4cf7064d50e510bd

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней