Trojan.DownLoader45.15351

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-e63ug.tmp\is-5us5k.tmp
%ProgramFiles(x86)%\viewfd\ini\is-460c9.tmp
%ProgramFiles(x86)%\viewfd\ini\is-lke19.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-0q72k.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-dbk2g.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-gac08.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-dguc5.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-dh7s0.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-pc3gf.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-kuih0.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-t84l1.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-3ptms.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-gbiq4.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-77us8.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-6vqm5.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-b0b3v.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-f5067.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-8c03p.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9noip.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-91n61.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-gfdfh.tmp
%ProgramFiles(x86)%\viewfd\ini\is-tu3kk.tmp
%ProgramFiles(x86)%\viewfd\ini\is-hhjth.tmp
%ProgramFiles(x86)%\viewfd\ini\is-vrclg.tmp
%ProgramFiles(x86)%\viewfd\ini\is-jcqra.tmp
%ProgramFiles(x86)%\viewfd\ini\is-0ra2n.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-cg6lq.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-9uvpi.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-utb6g.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-rthad.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-mjpe7.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-a5pij.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-f6nuk.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-gcca2.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-u48fh.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-6gnda.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-u8u4h.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-gqd82.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-egb5f.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-ma7ko.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-mn9fe.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-t8rs4.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-p1dvp.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-9bv7c.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-mcenk.tmp
%ProgramFiles(x86)%\viewfd\ini\is-7s2s0.tmp
%ProgramFiles(x86)%\viewfd\ini\is-v7gi8.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-rc89a.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-s1vh2.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ltl9f.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-gdfqf.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-5km4p.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-vd1vi.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-tfd79.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-rd6s5.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-aimbp.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-0fnu5.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-slcf6.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-8kqej.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-lkcuu.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-vpggs.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-bvdbp.tmp
%ProgramFiles(x86)%\viewfd\is-qbdnl.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-sf8as.tmp
%ProgramFiles(x86)%\viewfd\is-8duff.tmp
%ProgramFiles(x86)%\viewfd\is-9f5jq.tmp
%ProgramFiles(x86)%\viewfd\is-8hibo.tmp
%ProgramFiles(x86)%\viewfd\is-kl7en.tmp
%ProgramFiles(x86)%\viewfd\is-ph3ln.tmp
%ProgramFiles(x86)%\viewfd\is-acmi2.tmp
%ProgramFiles(x86)%\viewfd\is-c8ptv.tmp
%ProgramFiles(x86)%\viewfd\is-0mbgr.tmp
%ProgramFiles(x86)%\viewfd\is-9uf3c.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\search\is-nhnpf.tmp
%ProgramFiles(x86)%\viewfd\search\is-qalbp.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-6t9jg.tmp
%ProgramFiles(x86)%\viewfd\search\is-v1evl.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ee62j.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ibfav.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ue5l2.tmp
%ProgramFiles(x86)%\viewfd\programs\is-1l58o.tmp
%ProgramFiles(x86)%\viewfd\radio\is-p0rhe.tmp
%ProgramFiles(x86)%\viewfd\radio\is-klbs2.tmp
%ProgramFiles(x86)%\viewfd\reports\is-l5adh.tmp
%ProgramFiles(x86)%\viewfd\search\is-k8bi5.tmp
%ProgramFiles(x86)%\viewfd\search\is-8d3bg.tmp
%ProgramFiles(x86)%\viewfd\search\is-0qslg.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\url\search\is-hgd1c.tmp
%ProgramFiles(x86)%\viewfd\search\is-g3j6k.tmp
%ProgramFiles(x86)%\viewfd\soft\is-vt640.tmp
%ProgramFiles(x86)%\viewfd\url\is-6d1b6.tmp
%ProgramFiles(x86)%\viewfd\url\is-h80kb.tmp
%ProgramFiles(x86)%\viewfd\url\is-bmosf.tmp
%ProgramFiles(x86)%\viewfd\url\is-va58b.tmp
%ProgramFiles(x86)%\viewfd\url\is-o6ajr.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-2jiuk.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-fh8as.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-icln8.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-5sfhc.tmp
%ProgramFiles(x86)%\viewfd\is-83soh.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-2j6m8.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-7mu3p.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-0dcd4.tmp
%ProgramFiles(x86)%\viewfd\data\is-6ervr.tmp
%ProgramFiles(x86)%\viewfd\forms\is-ncdul.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-2o3uv.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-jo6vn.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-9s6vq.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-f63di.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-oq7kh.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-gmj2l.tmp
%ProgramFiles(x86)%\viewfd\browser\is-9ln31.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-4e41e.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-hbrj5.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-3k12l.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-t2t4f.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-c7kio.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-bg9kg.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-7iq0g.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-gunck.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-gfbqh.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-851md.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-01ut6.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-q5usk.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-7lm5o.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-6m5i4.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-6igrr.tmp
%TEMP%\is-tdt2e.tmp\_isetup\_setup64.tmp
%TEMP%\is-tdt2e.tmp\_isetup\_shfoldr.dll
%TEMP%\is-tdt2e.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-afn8d.tmp
%ProgramFiles(x86)%\viewfd\7-zip\lang\is-g5tvd.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-jnqgp.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-65nuq.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-vgsp9.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-q0l2s.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-as5gt.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-8knkm.tmp
%ProgramFiles(x86)%\viewfd\backup\is-2knd1.tmp
%ProgramFiles(x86)%\viewfd\browser\is-odva1.tmp
%ProgramFiles(x86)%\viewfd\browser\is-agqbp.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-qsl3q.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-h3488.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-fg6rk.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-smeeq.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-p819u.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-8v7pq.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-gvpie.tmp
%TEMP%\is-tdt2e.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\viewfd\browser\is-3l21a.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-fsh1l.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-6icip.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-v97qh.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-o1r82.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-3bni0.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-u8uiv.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-dd943.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-riamt.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ctr79.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-nd0kb.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-g81tt.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-lbfmv.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-vr12i.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-home4.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-h2fui.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-0srn0.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-hnodk.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-geri2.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-pgl8e.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-29fpm.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-6tum6.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ec43t.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-j1e4m.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-moils.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-r0de1.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-eq0gu.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-bqb22.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-j5k2u.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-d7adm.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-75fsk.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-r7vfb.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-iepm6.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-e626m.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-mqg0e.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-mgd5e.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-rovjj.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-2874k.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-osdd3.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-14nnl.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-imfi2.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-va9fl.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-t667a.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-p8dto.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-vqrr7.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-cgegp.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-q5l7s.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-ehdjg.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-nl16v.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-skc6g.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-lpnrg.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-kv1ol.tmp
%ProgramFiles(x86)%\viewfd\graphic\grids\is-b36t0.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-afn8d.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\ini\is-460c9.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-lke19.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\lsd\is-0q72k.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-dbk2g.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-gac08.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-dguc5.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-dh7s0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-pc3gf.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\ini\is-tu3kk.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-hhjth.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-kuih0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-gbiq4.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-77us8.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-6vqm5.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-b0b3v.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-f5067.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-8c03p.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9noip.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-91n61.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-3ptms.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-u8u4h.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\ini\is-vrclg.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\ini\is-jcqra.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\ini\is-0ra2n.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-9uvpi.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-utb6g.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-rthad.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-mjpe7.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-a5pij.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-f6nuk.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-gcca2.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-u48fh.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-gqd82.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-cg6lq.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-t84l1.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-egb5f.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ma7ko.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-mn9fe.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-t8rs4.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-p1dvp.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-9bv7c.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-mcenk.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-7s2s0.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-v7gi8.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-s1vh2.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-gfdfh.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-6gnda.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ltl9f.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-gdfqf.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-6t9jg.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-nhnpf.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-vd1vi.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-tfd79.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-rd6s5.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-aimbp.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-0fnu5.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-slcf6.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-8kqej.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-lkcuu.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-vpggs.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-bvdbp.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-83soh.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\is-qbdnl.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-8duff.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-9f5jq.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-8hibo.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-kl7en.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-ph3ln.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-acmi2.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-c8ptv.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\url\search\is-5sfhc.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-icln8.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\url\search\is-hgd1c.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\url\help\is-fh8as.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-5km4p.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ee62j.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ibfav.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ue5l2.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-1l58o.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-p0rhe.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-klbs2.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-l5adh.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-k8bi5.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-8d3bg.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-0qslg.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-v1evl.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-qalbp.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-g3j6k.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-vt640.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-6d1b6.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-h80kb.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-bmosf.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-va58b.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-o6ajr.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-2jiuk.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\is-0mbgr.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-rc89a.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-sf8as.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-2j6m8.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-jo6vn.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-9s6vq.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-f63di.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-oq7kh.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-gmj2l.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-4e41e.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-8knkm.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-hbrj5.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\forms\is-ncdul.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-2o3uv.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-3k12l.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-bg9kg.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-7iq0g.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-gunck.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-gfbqh.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-851md.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-as5gt.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-fsh1l.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6icip.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-t2t4f.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-c7kio.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\data\is-6ervr.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-0dcd4.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-q5usk.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-jnqgp.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-65nuq.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\7-zip\is-vgsp9.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-q0l2s.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-2knd1.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-9ln31.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-3l21a.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-odva1.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-agqbp.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-g5tvd.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-qsl3q.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-fg6rk.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-smeeq.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-p819u.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-8v7pq.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-gvpie.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-6igrr.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-6m5i4.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-7lm5o.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-01ut6.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-h3488.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-v97qh.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-75fsk.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-r7vfb.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-iepm6.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-u8uiv.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-dd943.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-riamt.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ctr79.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-nd0kb.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-g81tt.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-lbfmv.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-vr12i.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-7mu3p.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-home4.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-0srn0.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-hnodk.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-geri2.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-pgl8e.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-29fpm.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-6tum6.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ec43t.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-j1e4m.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-moils.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-r0de1.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-imfi2.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-3bni0.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-eq0gu.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-o1r82.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-j5k2u.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-e626m.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-mqg0e.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-mgd5e.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-rovjj.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-2874k.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-osdd3.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-14nnl.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-d7adm.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-bqb22.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-t667a.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-p8dto.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-vqrr7.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-cgegp.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-q5l7s.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-ehdjg.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-nl16v.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-skc6g.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-lpnrg.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-kv1ol.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-va9fl.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-b36t0.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-h2fui.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\is-9uf3c.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '' WindowName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}'

Creates and executes the following

'%TEMP%\is-e63ug.tmp\is-5us5k.tmp' /SL4 $B00A2 "<Full path to file>" 7191695 141312
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' 2691ad34d7e92780c95d8d271b0f10ed

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней