Trojan.DownLoader45.15354

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-md1st.tmp\is-o68v8.tmp
%ProgramFiles(x86)%\viewfd\ini\is-tku46.tmp
%ProgramFiles(x86)%\viewfd\ini\is-83rgi.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-9eu5o.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-c8240.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-laf0g.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-srl96.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9dpnr.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-70hhd.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-aeo2h.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-0ij0t.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-u1eea.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-iomnn.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-heqh0.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-5l51n.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-u5ngg.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7gh2l.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9eb6m.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-arp94.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-6f0si.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-jel1v.tmp
%ProgramFiles(x86)%\viewfd\ini\is-04mdg.tmp
%ProgramFiles(x86)%\viewfd\ini\is-dj07o.tmp
%ProgramFiles(x86)%\viewfd\ini\is-e6n6n.tmp
%ProgramFiles(x86)%\viewfd\ini\is-d61qq.tmp
%ProgramFiles(x86)%\viewfd\ini\is-fusos.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-q2a8c.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-3stc4.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-chhg0.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-704pm.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-0cmpd.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-tkg49.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-msjnr.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-eg6bv.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-q3ebp.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-pm8ia.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-rniog.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-ptkj3.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-onss7.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-53u8a.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-6l8pu.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-dinsa.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-kqerg.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-323nk.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-2lu5k.tmp
%ProgramFiles(x86)%\viewfd\ini\is-264hs.tmp
%ProgramFiles(x86)%\viewfd\ini\is-j6neb.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-f5jnm.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-46fk8.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-b8rea.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-umode.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-fca9e.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-1g0ht.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-4vm4l.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-vvrnn.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-pn019.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-ec74d.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-ipak8.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-ui44m.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-3bjt4.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-7crmg.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-437hn.tmp
%ProgramFiles(x86)%\viewfd\is-eunk6.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-mbcej.tmp
%ProgramFiles(x86)%\viewfd\is-9ho0u.tmp
%ProgramFiles(x86)%\viewfd\is-8d5or.tmp
%ProgramFiles(x86)%\viewfd\is-c4d9n.tmp
%ProgramFiles(x86)%\viewfd\is-u08sa.tmp
%ProgramFiles(x86)%\viewfd\is-bo8ge.tmp
%ProgramFiles(x86)%\viewfd\is-ner9c.tmp
%ProgramFiles(x86)%\viewfd\is-1l8b9.tmp
%ProgramFiles(x86)%\viewfd\is-bdtf5.tmp
%ProgramFiles(x86)%\viewfd\is-06i5p.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\search\is-p98f0.tmp
%ProgramFiles(x86)%\viewfd\search\is-vcii6.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-efh9f.tmp
%ProgramFiles(x86)%\viewfd\search\is-ccagj.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-lggml.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-k8pv0.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-20u7u.tmp
%ProgramFiles(x86)%\viewfd\programs\is-jq9gq.tmp
%ProgramFiles(x86)%\viewfd\radio\is-40naf.tmp
%ProgramFiles(x86)%\viewfd\radio\is-vsfcv.tmp
%ProgramFiles(x86)%\viewfd\reports\is-qrf4n.tmp
%ProgramFiles(x86)%\viewfd\search\is-meqjq.tmp
%ProgramFiles(x86)%\viewfd\search\is-h9roe.tmp
%ProgramFiles(x86)%\viewfd\search\is-0lgdu.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\url\search\is-4vqq7.tmp
%ProgramFiles(x86)%\viewfd\search\is-mguvd.tmp
%ProgramFiles(x86)%\viewfd\soft\is-03prm.tmp
%ProgramFiles(x86)%\viewfd\url\is-okoca.tmp
%ProgramFiles(x86)%\viewfd\url\is-dihfn.tmp
%ProgramFiles(x86)%\viewfd\url\is-ecpi2.tmp
%ProgramFiles(x86)%\viewfd\url\is-r3uju.tmp
%ProgramFiles(x86)%\viewfd\url\is-spfcj.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-a50k5.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-jihn5.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-fulof.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-hvgb7.tmp
%ProgramFiles(x86)%\viewfd\is-38373.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-rmdur.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-ecpba.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-ec7gh.tmp
%ProgramFiles(x86)%\viewfd\data\is-s4ivj.tmp
%ProgramFiles(x86)%\viewfd\forms\is-t9673.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-aqfps.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-09mq0.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-1rl5s.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-j5tpj.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-6c4lb.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-uapuf.tmp
%ProgramFiles(x86)%\viewfd\browser\is-l0n1r.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-38b38.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-gpvhq.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-t09nn.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-lg8of.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-st8cg.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-r851v.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-l9l3f.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-u6gq8.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-qosoe.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-bj7ci.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-ljio7.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-ock0i.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-e2p3j.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-l1rcb.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-565un.tmp
%TEMP%\is-mir53.tmp\_isetup\_setup64.tmp
%TEMP%\is-mir53.tmp\_isetup\_shfoldr.dll
%TEMP%\is-mir53.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-efdcd.tmp
%ProgramFiles(x86)%\viewfd\7-zip\lang\is-5m359.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-bat6t.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-61997.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-bquo0.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-qnfi6.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-9kf3g.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-fgaff.tmp
%ProgramFiles(x86)%\viewfd\backup\is-ob76e.tmp
%ProgramFiles(x86)%\viewfd\browser\is-gjo00.tmp
%ProgramFiles(x86)%\viewfd\browser\is-kn9qd.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-55ugo.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-kpnrl.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-mknqe.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-g45tj.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-ccrrl.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-bnup7.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-isvh8.tmp
%TEMP%\is-mir53.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\viewfd\browser\is-38eq5.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-q8qhc.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-5ojv0.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-59scc.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-dpgpr.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-n1hbn.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ubtn7.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-05jc2.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-25ush.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-knso4.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-tjfgc.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-lt8gs.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1slnk.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-iegeh.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-pfueh.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-banfu.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-dlqur.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-9a0hk.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-h9nlo.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-jsr9o.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-9a59u.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-mlmo5.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-5hj1f.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ni1ra.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ogqkm.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ap8ct.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-0vffb.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-uta2g.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-6e5m3.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-55740.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-7ssth.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-m1nqi.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-m5vfu.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-v3jg4.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-bv3ra.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-7vr6i.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-bijv1.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-r4bqj.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-e9nal.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-7htq5.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8de46.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-qaovq.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-i16t7.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-1o5e3.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-efdqk.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-gqeik.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-e4c8r.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-kqaf3.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-fsq2l.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-8db9m.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-l1p76.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-4ittu.tmp
%ProgramFiles(x86)%\viewfd\graphic\grids\is-74pqf.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-efdcd.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\ini\is-tku46.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-83rgi.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\lsd\is-9eu5o.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-c8240.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-laf0g.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-srl96.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9dpnr.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-70hhd.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\ini\is-04mdg.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-dj07o.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-aeo2h.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-iomnn.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-heqh0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-5l51n.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-u5ngg.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7gh2l.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9eb6m.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-arp94.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-6f0si.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-u1eea.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-rniog.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\ini\is-e6n6n.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\ini\is-d61qq.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\ini\is-fusos.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-3stc4.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-chhg0.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-704pm.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-0cmpd.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-tkg49.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-msjnr.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-eg6bv.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-q3ebp.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ptkj3.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-q2a8c.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-0ij0t.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-onss7.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-53u8a.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-6l8pu.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-dinsa.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-kqerg.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-323nk.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-2lu5k.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-264hs.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-j6neb.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-46fk8.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-jel1v.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-pm8ia.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-b8rea.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-umode.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-efh9f.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-p98f0.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-1g0ht.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-4vm4l.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-vvrnn.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-pn019.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-ec74d.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-ipak8.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-ui44m.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-3bjt4.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-7crmg.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-437hn.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-38373.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\is-eunk6.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-9ho0u.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-8d5or.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-c4d9n.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-u08sa.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-bo8ge.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-ner9c.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-1l8b9.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\url\search\is-hvgb7.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-fulof.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\url\search\is-4vqq7.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\url\help\is-jihn5.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-fca9e.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-lggml.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-k8pv0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-20u7u.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-jq9gq.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-40naf.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-vsfcv.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-qrf4n.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-meqjq.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-h9roe.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-0lgdu.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-ccagj.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-vcii6.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-mguvd.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-03prm.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-okoca.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-dihfn.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-ecpi2.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-r3uju.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-spfcj.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-a50k5.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\is-bdtf5.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-f5jnm.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-mbcej.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-rmdur.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-09mq0.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-1rl5s.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-j5tpj.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-6c4lb.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-uapuf.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-38b38.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-fgaff.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-gpvhq.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\forms\is-t9673.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-aqfps.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-t09nn.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-r851v.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-l9l3f.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-u6gq8.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-qosoe.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-bj7ci.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9kf3g.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-q8qhc.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-5ojv0.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-lg8of.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-st8cg.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\data\is-s4ivj.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-ec7gh.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-ock0i.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-bat6t.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-61997.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\7-zip\is-bquo0.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-qnfi6.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-ob76e.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-l0n1r.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-38eq5.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-gjo00.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-kn9qd.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-5m359.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-55ugo.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-mknqe.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-g45tj.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-ccrrl.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-bnup7.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-isvh8.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-565un.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-l1rcb.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-e2p3j.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-ljio7.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-kpnrl.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-59scc.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-7ssth.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-m1nqi.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-m5vfu.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ubtn7.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-05jc2.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-25ush.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-knso4.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-tjfgc.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-lt8gs.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1slnk.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-iegeh.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-ecpba.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-pfueh.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-dlqur.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-9a0hk.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-h9nlo.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-jsr9o.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-9a59u.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-mlmo5.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-5hj1f.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ni1ra.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ogqkm.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ap8ct.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8de46.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-n1hbn.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-0vffb.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-dpgpr.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-6e5m3.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-v3jg4.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-bv3ra.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-7vr6i.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-bijv1.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-r4bqj.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-e9nal.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-7htq5.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-55740.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-uta2g.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-i16t7.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-1o5e3.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-efdqk.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-gqeik.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-e4c8r.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-kqaf3.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-fsq2l.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-8db9m.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-l1p76.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-4ittu.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-qaovq.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-74pqf.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-banfu.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\is-06i5p.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '' WindowName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}'

Creates and executes the following

'%TEMP%\is-md1st.tmp\is-o68v8.tmp' /SL4 $120170 "<Full path to file>" 7186900 141312
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' 020dc784af4d638cbb6c4da2fad7c25c

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней