Trojan.DownLoader45.27476

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-22e30.tmp\is-r8q2v.tmp
%ProgramFiles(x86)%\viewfd\ini\is-6vbv7.tmp
%ProgramFiles(x86)%\viewfd\ini\is-1aic1.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-69gkb.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-fn775.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-ebsjg.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-bq5of.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-djili.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-6oms6.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-2e67i.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-dpv4n.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-amujo.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-60o3s.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-f2e94.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-8jg2j.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-bqvu4.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-kvpl2.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-b9m9v.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7upto.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-cdpp0.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-mk5qe.tmp
%ProgramFiles(x86)%\viewfd\ini\is-0ktph.tmp
%ProgramFiles(x86)%\viewfd\ini\is-ss023.tmp
%ProgramFiles(x86)%\viewfd\ini\is-5gntl.tmp
%ProgramFiles(x86)%\viewfd\ini\is-gtt0u.tmp
%ProgramFiles(x86)%\viewfd\ini\is-j67u8.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-cev4s.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-hv7gp.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-9akmi.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-qof6p.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-10mo3.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-j1jfs.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-n5ud0.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-394u0.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-o3tf6.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-6u9vq.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-sgqgs.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-i3nid.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-gip5u.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-6s935.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-fqpje.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-v4os6.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-gcss3.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-u0v0r.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-uboiu.tmp
%ProgramFiles(x86)%\viewfd\ini\is-q4agk.tmp
%ProgramFiles(x86)%\viewfd\ini\is-gn6lc.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-602d4.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-476bi.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-laei0.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-85s18.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-c4oio.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-cmf52.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-q9aem.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-mh1t6.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-ed9sr.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-p5nfe.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-djvhl.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-ad4mu.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-66mki.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-rsgov.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-ifu0a.tmp
%ProgramFiles(x86)%\viewfd\is-e6egr.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-e5pfk.tmp
%ProgramFiles(x86)%\viewfd\is-8i49d.tmp
%ProgramFiles(x86)%\viewfd\is-ohc1d.tmp
%ProgramFiles(x86)%\viewfd\is-hb1bn.tmp
%ProgramFiles(x86)%\viewfd\is-uosqf.tmp
%ProgramFiles(x86)%\viewfd\is-p52cf.tmp
%ProgramFiles(x86)%\viewfd\is-pkjfn.tmp
%ProgramFiles(x86)%\viewfd\is-tgre8.tmp
%ProgramFiles(x86)%\viewfd\is-st7e5.tmp
%ProgramFiles(x86)%\viewfd\is-l60ht.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\search\is-duhkv.tmp
%ProgramFiles(x86)%\viewfd\search\is-h16cu.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-re1g7.tmp
%ProgramFiles(x86)%\viewfd\search\is-cv83t.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-epd4e.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-a5p03.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-m8lql.tmp
%ProgramFiles(x86)%\viewfd\programs\is-o8lgp.tmp
%ProgramFiles(x86)%\viewfd\radio\is-ip9li.tmp
%ProgramFiles(x86)%\viewfd\radio\is-pu2so.tmp
%ProgramFiles(x86)%\viewfd\reports\is-25fcv.tmp
%ProgramFiles(x86)%\viewfd\search\is-0btr8.tmp
%ProgramFiles(x86)%\viewfd\search\is-1otkv.tmp
%ProgramFiles(x86)%\viewfd\search\is-ajqgo.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\url\search\is-7cnm2.tmp
%ProgramFiles(x86)%\viewfd\search\is-m898c.tmp
%ProgramFiles(x86)%\viewfd\soft\is-2kooq.tmp
%ProgramFiles(x86)%\viewfd\url\is-ofkf7.tmp
%ProgramFiles(x86)%\viewfd\url\is-jgdki.tmp
%ProgramFiles(x86)%\viewfd\url\is-nlspi.tmp
%ProgramFiles(x86)%\viewfd\url\is-tb75m.tmp
%ProgramFiles(x86)%\viewfd\url\is-jis2m.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-9ihkt.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-rp6m8.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-vi5s6.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-da64n.tmp
%ProgramFiles(x86)%\viewfd\is-69sr6.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-6i9uc.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-umsrb.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-ij208.tmp
%ProgramFiles(x86)%\viewfd\data\is-c07re.tmp
%ProgramFiles(x86)%\viewfd\forms\is-488km.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-48693.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-pt2ud.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-u74l8.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-elh4l.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-sfb40.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-t3urt.tmp
%ProgramFiles(x86)%\viewfd\browser\is-85vtt.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-bg2rm.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-0kvqt.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-87qlf.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-tgiug.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-etf0v.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-l0gnj.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-2fbrr.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-aiohf.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-k9ouq.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-1487p.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-caap5.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-eol4f.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-ceh2h.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-et1ol.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-lgtkb.tmp
%TEMP%\is-287b6.tmp\_isetup\_setup64.tmp
%TEMP%\is-287b6.tmp\_isetup\_shfoldr.dll
%TEMP%\is-287b6.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-hhug4.tmp
%ProgramFiles(x86)%\viewfd\7-zip\lang\is-e65i2.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-ueha1.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-fuu94.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-m128r.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-88dsj.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-5rujr.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-om53r.tmp
%ProgramFiles(x86)%\viewfd\backup\is-7q69j.tmp
%ProgramFiles(x86)%\viewfd\browser\is-ngb1p.tmp
%ProgramFiles(x86)%\viewfd\browser\is-lr9ul.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-k6be8.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-79tod.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-qtnof.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-0vpr0.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-pfcit.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-uas2p.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-ooabb.tmp
%TEMP%\is-287b6.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\viewfd\browser\is-tr63l.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-hq8cb.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-ct2k4.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-rost8.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-icnor.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-gpr1t.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-31oed.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1gk98.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-j3jso.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-v300f.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-jcaub.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-0chbs.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-j588s.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-doko3.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-3vtvt.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-e2vtp.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-226ru.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-74b2e.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-02v66.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-hb792.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-5o98n.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-15qtb.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-n51jj.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-n1jf3.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-h76lv.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-4qgaf.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-ddko9.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-cf7an.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-oocuq.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-0udg7.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-8irm4.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-fi6ar.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-22nbj.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-lpvdn.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-1befg.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-pk3cn.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-di442.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-7j8iv.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-oib0n.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-qnrlo.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-q9oca.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-75jic.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-vhjug.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-cskdm.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-735mq.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-vmemo.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-fe0hk.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-pqq08.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-4u2ik.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-mg3sp.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-p92mq.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-hett6.tmp
%ProgramFiles(x86)%\viewfd\graphic\grids\is-qjc6i.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-hhug4.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\ini\is-6vbv7.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-1aic1.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\lsd\is-69gkb.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-fn775.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-ebsjg.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-bq5of.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-djili.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-6oms6.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\ini\is-0ktph.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-ss023.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-2e67i.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-60o3s.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-f2e94.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-8jg2j.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-bqvu4.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-kvpl2.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-b9m9v.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7upto.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-cdpp0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-amujo.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-sgqgs.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\ini\is-5gntl.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\ini\is-gtt0u.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\ini\is-j67u8.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-hv7gp.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-9akmi.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-qof6p.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-10mo3.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-j1jfs.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-n5ud0.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-394u0.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-o3tf6.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-i3nid.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-cev4s.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-dpv4n.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-gip5u.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-6s935.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-fqpje.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-v4os6.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-gcss3.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-u0v0r.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-uboiu.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-q4agk.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-gn6lc.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-476bi.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-mk5qe.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-6u9vq.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-laei0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-85s18.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-re1g7.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-duhkv.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-cmf52.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-q9aem.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-mh1t6.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-ed9sr.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-p5nfe.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-djvhl.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-ad4mu.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-66mki.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-rsgov.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-ifu0a.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-69sr6.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\is-e6egr.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-8i49d.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-ohc1d.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-hb1bn.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-uosqf.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-p52cf.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-pkjfn.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-tgre8.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\url\search\is-da64n.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-vi5s6.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\url\search\is-7cnm2.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\url\help\is-rp6m8.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-c4oio.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-epd4e.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-a5p03.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-m8lql.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-o8lgp.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-ip9li.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-pu2so.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-25fcv.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-0btr8.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-1otkv.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-ajqgo.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-cv83t.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-h16cu.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-m898c.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-2kooq.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-ofkf7.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-jgdki.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-nlspi.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-tb75m.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-jis2m.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-9ihkt.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\is-st7e5.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-602d4.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-e5pfk.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-6i9uc.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-pt2ud.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-u74l8.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-elh4l.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-sfb40.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-t3urt.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-bg2rm.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-om53r.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-0kvqt.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\forms\is-488km.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-48693.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-87qlf.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-l0gnj.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-2fbrr.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-aiohf.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-k9ouq.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-1487p.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-5rujr.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-hq8cb.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ct2k4.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-tgiug.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-etf0v.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\data\is-c07re.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-ij208.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-eol4f.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-ueha1.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-fuu94.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\7-zip\is-m128r.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-88dsj.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-7q69j.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-85vtt.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-tr63l.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-ngb1p.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-lr9ul.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-e65i2.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-k6be8.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-qtnof.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-0vpr0.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-pfcit.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-uas2p.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-ooabb.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-lgtkb.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-et1ol.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-ceh2h.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-caap5.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-79tod.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-rost8.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-8irm4.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-fi6ar.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-22nbj.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-31oed.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1gk98.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-j3jso.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-v300f.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-jcaub.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-0chbs.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-j588s.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-doko3.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-umsrb.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-3vtvt.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-226ru.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-74b2e.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-02v66.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-hb792.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-5o98n.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-15qtb.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-n51jj.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-n1jf3.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-h76lv.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-4qgaf.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-q9oca.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-gpr1t.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-ddko9.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-icnor.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-oocuq.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-lpvdn.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-1befg.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-pk3cn.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-di442.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-7j8iv.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-oib0n.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-qnrlo.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-0udg7.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-cf7an.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-vhjug.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-cskdm.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-735mq.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-vmemo.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-fe0hk.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-pqq08.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-4u2ik.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-mg3sp.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-p92mq.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-hett6.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-75jic.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-qjc6i.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-e2vtp.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\is-l60ht.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}' WindowName: ''

Creates and executes the following

'%TEMP%\is-22e30.tmp\is-r8q2v.tmp' /SL4 $160160 "<Full path to file>" 6985202 52736
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' b209b23aedef42e207ca381a7ac083fe

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней