Trojan.DownLoader45.33826

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-vfg75.tmp\is-8otk5.tmp
%ProgramFiles(x86)%\viewfd\ini\is-bcrcm.tmp
%ProgramFiles(x86)%\viewfd\ini\is-8u9ul.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-hl2to.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-fhojd.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-np92t.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-q2o0m.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-jtp6t.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-oons5.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-m0klm.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-07hul.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-84u1k.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-4pb96.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ustdq.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-37gd6.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-68gja.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-mr007.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-hgt80.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9d8j4.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-uh702.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-bh3b0.tmp
%ProgramFiles(x86)%\viewfd\ini\is-01mo9.tmp
%ProgramFiles(x86)%\viewfd\ini\is-2nid5.tmp
%ProgramFiles(x86)%\viewfd\ini\is-aa6jp.tmp
%ProgramFiles(x86)%\viewfd\ini\is-480ua.tmp
%ProgramFiles(x86)%\viewfd\ini\is-cnebm.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-m273c.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-lekih.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-ukodj.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-dim16.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-np60b.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-lj9ee.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-ag4g3.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-b750k.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-dcdsh.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-fvel0.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-bujqg.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-kj1mb.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-feh6l.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-qhhk1.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-2eua1.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-e4qod.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-u921g.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-9pbl7.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-p0tn1.tmp
%ProgramFiles(x86)%\viewfd\ini\is-6s9s9.tmp
%ProgramFiles(x86)%\viewfd\ini\is-6l83q.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-v57uc.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-8udce.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-sd377.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-9mu3h.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-1dgnb.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-90c6f.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-hs230.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-6a04v.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-cshf1.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-f1n2i.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-4f6ae.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-22qh6.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-dtff4.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-g1fi3.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-m4d35.tmp
%ProgramFiles(x86)%\viewfd\is-gk1us.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-tk0qe.tmp
%ProgramFiles(x86)%\viewfd\is-npivr.tmp
%ProgramFiles(x86)%\viewfd\is-m012s.tmp
%ProgramFiles(x86)%\viewfd\is-bsc9c.tmp
%ProgramFiles(x86)%\viewfd\is-3m3u1.tmp
%ProgramFiles(x86)%\viewfd\is-6f0ah.tmp
%ProgramFiles(x86)%\viewfd\is-ehl3c.tmp
%ProgramFiles(x86)%\viewfd\is-v072q.tmp
%ProgramFiles(x86)%\viewfd\is-qqrga.tmp
%ProgramFiles(x86)%\viewfd\is-4he4u.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\search\is-5sq2q.tmp
%ProgramFiles(x86)%\viewfd\search\is-431as.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-9306a.tmp
%ProgramFiles(x86)%\viewfd\search\is-et6tk.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-o7ipj.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-3uu16.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-012ke.tmp
%ProgramFiles(x86)%\viewfd\programs\is-13vmt.tmp
%ProgramFiles(x86)%\viewfd\radio\is-qlneh.tmp
%ProgramFiles(x86)%\viewfd\radio\is-4hlsq.tmp
%ProgramFiles(x86)%\viewfd\reports\is-cdsti.tmp
%ProgramFiles(x86)%\viewfd\search\is-0ehvh.tmp
%ProgramFiles(x86)%\viewfd\search\is-npt0h.tmp
%ProgramFiles(x86)%\viewfd\search\is-pq4pr.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\url\search\is-6rt72.tmp
%ProgramFiles(x86)%\viewfd\search\is-misgc.tmp
%ProgramFiles(x86)%\viewfd\soft\is-cavs0.tmp
%ProgramFiles(x86)%\viewfd\url\is-7827d.tmp
%ProgramFiles(x86)%\viewfd\url\is-b9dmp.tmp
%ProgramFiles(x86)%\viewfd\url\is-cudip.tmp
%ProgramFiles(x86)%\viewfd\url\is-25lb1.tmp
%ProgramFiles(x86)%\viewfd\url\is-5le1l.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-p3b4t.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-rucgg.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-hkain.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-mkfr2.tmp
%ProgramFiles(x86)%\viewfd\is-17q3o.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-rtust.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-3es2j.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-a753f.tmp
%ProgramFiles(x86)%\viewfd\data\is-d5evr.tmp
%ProgramFiles(x86)%\viewfd\forms\is-h2afu.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-unebm.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-vcdej.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-oebmf.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-imos2.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-v0gf6.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-aer34.tmp
%ProgramFiles(x86)%\viewfd\browser\is-ue1lt.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-m6vc1.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-vp1oh.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-a6v4p.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-h5nja.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-smlia.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-vt5se.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-te3ra.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-h8vj2.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-cjfru.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-9n53l.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-ir7ks.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-samd8.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-b939e.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-cmc20.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-5vs75.tmp
%TEMP%\is-i6pbu.tmp\_isetup\_setup64.tmp
%TEMP%\is-i6pbu.tmp\_isetup\_shfoldr.dll
%TEMP%\is-i6pbu.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-h5p05.tmp
%ProgramFiles(x86)%\viewfd\7-zip\lang\is-c4jve.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-ekiv2.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-ksedf.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-9k26q.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-cl1rm.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-koaig.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-lv8it.tmp
%ProgramFiles(x86)%\viewfd\backup\is-renjb.tmp
%ProgramFiles(x86)%\viewfd\browser\is-n2047.tmp
%ProgramFiles(x86)%\viewfd\browser\is-qk6kv.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-go3gv.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-t8967.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-3pnuo.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-ha60l.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-k99ed.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-5hk8f.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-aoil1.tmp
%TEMP%\is-i6pbu.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\viewfd\browser\is-npevt.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-iom5v.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-og9lj.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-f9iav.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ct9km.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-9klnc.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-k2cd2.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-kj92o.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-tmotf.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-u9iaa.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-5tcep.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-6puq9.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-a5gu1.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-q1343.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-nfmsf.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-6g8ar.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-78r43.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-otf9e.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-gun0b.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-bbk05.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-i2t1e.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-vjaj3.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-u4o3n.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-3okg1.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-6d6bp.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-qfrdr.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-bqoj6.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-gs8ct.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-v019o.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-aqfo6.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-679q3.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-653qs.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-m5591.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-5eh34.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-q6b5q.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-eigkf.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-c233v.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-mrrgr.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-gv9dd.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-s1q9g.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-87ncf.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-n97pt.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-8oecl.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-76a4o.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-dhhrd.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-jdh41.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-jbh3a.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-rob4u.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-4no7d.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-ljnmv.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-j5jl3.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-7kvsr.tmp
%ProgramFiles(x86)%\viewfd\graphic\grids\is-ohcqg.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-h5p05.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\ini\is-bcrcm.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-8u9ul.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\lsd\is-hl2to.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-fhojd.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-np92t.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-q2o0m.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-jtp6t.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-oons5.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\ini\is-01mo9.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-2nid5.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-m0klm.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-4pb96.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ustdq.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-37gd6.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-68gja.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-mr007.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-hgt80.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9d8j4.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-uh702.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-84u1k.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-bujqg.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\ini\is-aa6jp.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\ini\is-480ua.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\ini\is-cnebm.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-lekih.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ukodj.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-dim16.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-np60b.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-lj9ee.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ag4g3.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-b750k.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-dcdsh.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-kj1mb.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-m273c.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-07hul.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-feh6l.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-qhhk1.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-2eua1.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-e4qod.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-u921g.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-9pbl7.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-p0tn1.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-6s9s9.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-6l83q.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-8udce.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-bh3b0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-fvel0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-sd377.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-9mu3h.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-9306a.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-5sq2q.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-90c6f.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-hs230.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-6a04v.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-cshf1.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-f1n2i.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-4f6ae.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-22qh6.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-dtff4.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-g1fi3.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-m4d35.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-17q3o.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\is-gk1us.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-npivr.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-m012s.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-bsc9c.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-3m3u1.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-6f0ah.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-ehl3c.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-v072q.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\url\search\is-mkfr2.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-hkain.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\url\search\is-6rt72.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\url\help\is-rucgg.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-1dgnb.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-o7ipj.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-3uu16.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-012ke.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-13vmt.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-qlneh.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-4hlsq.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-cdsti.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-0ehvh.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-npt0h.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-pq4pr.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-et6tk.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-431as.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-misgc.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-cavs0.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-7827d.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-b9dmp.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-cudip.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-25lb1.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-5le1l.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-p3b4t.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\is-qqrga.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-v57uc.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-tk0qe.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-rtust.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-vcdej.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-oebmf.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-imos2.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-v0gf6.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-aer34.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-m6vc1.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-lv8it.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-vp1oh.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\forms\is-h2afu.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-unebm.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-a6v4p.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-vt5se.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-te3ra.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-h8vj2.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-cjfru.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9n53l.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-koaig.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-iom5v.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-og9lj.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-h5nja.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-smlia.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\data\is-d5evr.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-a753f.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-samd8.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-ekiv2.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-ksedf.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\7-zip\is-9k26q.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-cl1rm.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-renjb.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-ue1lt.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-npevt.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-n2047.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-qk6kv.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-c4jve.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-go3gv.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-3pnuo.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-ha60l.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-k99ed.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-5hk8f.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-aoil1.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-5vs75.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-cmc20.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-b939e.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-ir7ks.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-t8967.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-f9iav.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-679q3.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-653qs.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-m5591.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-k2cd2.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-kj92o.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-tmotf.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-u9iaa.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-5tcep.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-6puq9.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-a5gu1.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-q1343.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-3es2j.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-nfmsf.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-78r43.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-otf9e.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-gun0b.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-bbk05.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-i2t1e.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-vjaj3.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-u4o3n.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-3okg1.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-6d6bp.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-qfrdr.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-87ncf.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-9klnc.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-bqoj6.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ct9km.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-v019o.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-5eh34.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-q6b5q.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-eigkf.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-c233v.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-mrrgr.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-gv9dd.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-s1q9g.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-aqfo6.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-gs8ct.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-8oecl.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-76a4o.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-dhhrd.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-jdh41.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-jbh3a.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-rob4u.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-4no7d.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-ljnmv.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-j5jl3.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-7kvsr.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-n97pt.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-ohcqg.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-6g8ar.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\is-4he4u.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '{1E61A93F-EC60-4AD7-A3C8-3DDC3E02E405}' WindowName: ''

Creates and executes the following

'%TEMP%\is-vfg75.tmp\is-8otk5.tmp' /SL4 $C013A "<Full path to file>" 6897650 52736
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' 2512fc2b4f6e7cd6ebd48229d0d1690b

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней