Trojan.DownLoader44.64750

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-5uu1k.tmp\is-194ai.tmp
%ProgramFiles(x86)%\viewfd\ini\is-945nq.tmp
%ProgramFiles(x86)%\viewfd\ini\is-qo6jm.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-queqd.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-nbj48.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-m2oun.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-gjfhb.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-5d7ln.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-0scfr.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-vs97k.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-3uukj.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-kto8p.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-6qlvi.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-e9ul7.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-5g17n.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-jta3j.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-fhab5.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-fhmu8.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9mmvu.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-m94jl.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-injed.tmp
%ProgramFiles(x86)%\viewfd\ini\is-qtpv6.tmp
%ProgramFiles(x86)%\viewfd\ini\is-7c092.tmp
%ProgramFiles(x86)%\viewfd\ini\is-tqr62.tmp
%ProgramFiles(x86)%\viewfd\ini\is-lb742.tmp
%ProgramFiles(x86)%\viewfd\ini\is-3qteh.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-di6bd.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-ok345.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-6lcl7.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-1g4kp.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-5de5t.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-6gtro.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-jvka6.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-s4kok.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-nlg00.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-rrrdg.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-e181s.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-b7t17.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-kk5ie.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-mqpgb.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-nfvv7.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-mvm7q.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-pgr9u.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-0j98s.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-kqu8p.tmp
%ProgramFiles(x86)%\viewfd\ini\is-mnr2l.tmp
%ProgramFiles(x86)%\viewfd\ini\is-1rm79.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-jncqg.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-jegnm.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-qu075.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-cfgup.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-n8892.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-vsbpr.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-jgm5f.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-ae2op.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-ap5nh.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-nfg8j.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-koni7.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-7317j.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-0gjcl.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-kov96.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-c4o84.tmp
%ProgramFiles(x86)%\viewfd\is-ejs69.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-b4euv.tmp
%ProgramFiles(x86)%\viewfd\is-jqmgb.tmp
%ProgramFiles(x86)%\viewfd\is-4b4eu.tmp
%ProgramFiles(x86)%\viewfd\is-1p653.tmp
%ProgramFiles(x86)%\viewfd\is-og266.tmp
%ProgramFiles(x86)%\viewfd\is-5fo6r.tmp
%ProgramFiles(x86)%\viewfd\is-8jvic.tmp
%ProgramFiles(x86)%\viewfd\is-8mal9.tmp
%ProgramFiles(x86)%\viewfd\is-ul9i3.tmp
%ProgramFiles(x86)%\viewfd\is-i6h9d.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\search\is-9b596.tmp
%ProgramFiles(x86)%\viewfd\search\is-jkduq.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-dttkt.tmp
%ProgramFiles(x86)%\viewfd\search\is-624e4.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-85n1m.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-nfbn5.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ihh5n.tmp
%ProgramFiles(x86)%\viewfd\programs\is-o1aur.tmp
%ProgramFiles(x86)%\viewfd\radio\is-t1cdj.tmp
%ProgramFiles(x86)%\viewfd\radio\is-bfudl.tmp
%ProgramFiles(x86)%\viewfd\reports\is-3ult8.tmp
%ProgramFiles(x86)%\viewfd\search\is-ft6ng.tmp
%ProgramFiles(x86)%\viewfd\search\is-fibnu.tmp
%ProgramFiles(x86)%\viewfd\search\is-3g1ce.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\url\search\is-91is6.tmp
%ProgramFiles(x86)%\viewfd\search\is-1n8rg.tmp
%ProgramFiles(x86)%\viewfd\soft\is-3rfp7.tmp
%ProgramFiles(x86)%\viewfd\url\is-bksl2.tmp
%ProgramFiles(x86)%\viewfd\url\is-9oo4h.tmp
%ProgramFiles(x86)%\viewfd\url\is-ngh71.tmp
%ProgramFiles(x86)%\viewfd\url\is-8r4tp.tmp
%ProgramFiles(x86)%\viewfd\url\is-34v2r.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-novsb.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-mk1t7.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-qna7r.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-3u0u3.tmp
%ProgramFiles(x86)%\viewfd\is-d1gk4.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-78j2n.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-20bpe.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-lsrb6.tmp
%ProgramFiles(x86)%\viewfd\data\is-eq09s.tmp
%ProgramFiles(x86)%\viewfd\forms\is-r4rjk.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-ugolg.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-5hol6.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-0ga2t.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-j00jp.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-plm5b.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-4b2ff.tmp
%ProgramFiles(x86)%\viewfd\browser\is-s77uq.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-utat9.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-58smd.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-irfvo.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-5seln.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-a477q.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-065ne.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-vkofq.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-r81t0.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-fniv4.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-goqb4.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-aslub.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-1q4c3.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-mms9e.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-bn5fm.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-u6t2d.tmp
%TEMP%\is-9d7qn.tmp\_isetup\_setup64.tmp
%TEMP%\is-9d7qn.tmp\_isetup\_shfoldr.dll
%TEMP%\is-9d7qn.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-svlti.tmp
%ProgramFiles(x86)%\viewfd\7-zip\lang\is-u9rk1.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-disdk.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-6vtrs.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-mn0ac.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-f6sn4.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-2a1dc.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-o0jaj.tmp
%ProgramFiles(x86)%\viewfd\backup\is-jh3c1.tmp
%ProgramFiles(x86)%\viewfd\browser\is-se86b.tmp
%ProgramFiles(x86)%\viewfd\browser\is-vrin4.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-hn2h8.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-kb1j8.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-jakpe.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-vnk5l.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-lom4v.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-791cq.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-g58c6.tmp
%TEMP%\is-9d7qn.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\viewfd\browser\is-onng1.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-45nnr.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-6je8c.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-nc98a.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-tmrgu.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-dsms5.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-hr8qg.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-o8ohe.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-uqt0a.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-m38nv.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-h6mgf.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-k22m7.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-hhcba.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-pu4du.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-hu3a3.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-41bbn.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-5euhm.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-ocast.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-aq5f6.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-582dq.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-g4jn7.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-sukni.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-simfe.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-femm3.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-g8l3l.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-e484l.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-d25eu.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-9b981.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-rae1q.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-q1hot.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-e3ca7.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-g7fv0.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-12fv8.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-u9spm.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-ni4s2.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-3hsv8.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-v0c3g.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-kjgu0.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-gmesm.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-hn9pb.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-gklrv.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-ft01f.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-75k9q.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-2o020.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-4k977.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-4o6ug.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-o1j57.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-3ne20.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-3ahq5.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-4nus6.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-khbkk.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-cmcm2.tmp
%ProgramFiles(x86)%\viewfd\graphic\grids\is-adffq.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-svlti.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\ini\is-945nq.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-qo6jm.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\lsd\is-queqd.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-nbj48.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-m2oun.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-gjfhb.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-5d7ln.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-0scfr.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\ini\is-qtpv6.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-7c092.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-vs97k.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-6qlvi.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-e9ul7.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-5g17n.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-jta3j.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-fhab5.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-fhmu8.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9mmvu.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-m94jl.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-kto8p.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-e181s.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\ini\is-tqr62.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\ini\is-lb742.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\ini\is-3qteh.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ok345.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-6lcl7.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-1g4kp.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-5de5t.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-6gtro.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-jvka6.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-s4kok.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-nlg00.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-b7t17.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-di6bd.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-3uukj.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-kk5ie.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-mqpgb.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-nfvv7.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-mvm7q.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-pgr9u.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-0j98s.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-kqu8p.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-mnr2l.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-1rm79.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-jegnm.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-injed.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-rrrdg.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-qu075.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-cfgup.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-dttkt.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-9b596.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-vsbpr.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-jgm5f.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-ae2op.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-ap5nh.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-nfg8j.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-koni7.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-7317j.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-0gjcl.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-kov96.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-c4o84.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-d1gk4.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\is-ejs69.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-jqmgb.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-4b4eu.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-1p653.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-og266.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-5fo6r.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-8jvic.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-8mal9.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\url\search\is-3u0u3.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-qna7r.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\url\search\is-91is6.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\url\help\is-mk1t7.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-n8892.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-85n1m.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-nfbn5.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ihh5n.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-o1aur.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-t1cdj.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-bfudl.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-3ult8.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-ft6ng.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-fibnu.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-3g1ce.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-624e4.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-jkduq.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-1n8rg.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-3rfp7.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-bksl2.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-9oo4h.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-ngh71.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-8r4tp.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-34v2r.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-novsb.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\is-ul9i3.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-jncqg.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-b4euv.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-78j2n.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-5hol6.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-0ga2t.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-j00jp.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-plm5b.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-4b2ff.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-utat9.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-o0jaj.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-58smd.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\forms\is-r4rjk.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-ugolg.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-irfvo.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-065ne.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-vkofq.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-r81t0.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-fniv4.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-goqb4.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-2a1dc.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-45nnr.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6je8c.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-5seln.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-a477q.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\data\is-eq09s.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-lsrb6.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-1q4c3.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-disdk.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-6vtrs.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\7-zip\is-mn0ac.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-f6sn4.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-jh3c1.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-s77uq.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-onng1.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-se86b.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-vrin4.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-u9rk1.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-hn2h8.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-jakpe.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-vnk5l.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-lom4v.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-791cq.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-g58c6.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-u6t2d.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-bn5fm.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-mms9e.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-aslub.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-kb1j8.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-nc98a.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-e3ca7.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-g7fv0.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-12fv8.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-hr8qg.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-o8ohe.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-uqt0a.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-m38nv.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-h6mgf.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-k22m7.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-hhcba.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-pu4du.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-20bpe.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-hu3a3.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-5euhm.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-ocast.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-aq5f6.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-582dq.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-g4jn7.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-sukni.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-simfe.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-femm3.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-g8l3l.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-e484l.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-gklrv.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-dsms5.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-d25eu.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-tmrgu.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-rae1q.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-u9spm.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ni4s2.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-3hsv8.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-v0c3g.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-kjgu0.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-gmesm.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-hn9pb.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-q1hot.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-9b981.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-75k9q.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-2o020.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-4k977.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-4o6ug.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-o1j57.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-3ne20.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-3ahq5.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-4nus6.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-khbkk.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-cmcm2.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-ft01f.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-adffq.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-41bbn.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\is-i6h9d.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '' WindowName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}'

Creates and executes the following

'%TEMP%\is-5uu1k.tmp\is-194ai.tmp' /SL4 $B0236 "<Full path to file>" 7112248 62976
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' 3e77d887f8b6b9d8130d55c029623934

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней