Trojan.DownLoader44.64775

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-f12o9.tmp\is-nblci.tmp
%ProgramFiles(x86)%\viewfd\ini\is-rfl93.tmp
%ProgramFiles(x86)%\viewfd\ini\is-m5ocm.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-gpc3t.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-t2bi6.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-pk0sq.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-jfc27.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-0veei.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-hdn2e.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-r8pl3.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-cjsl2.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ta3ul.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-p78uv.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-l1aqn.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-qngdn.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-4q1lv.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-dqadg.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-gjqad.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ar6v5.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-gjvs7.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-tg4np.tmp
%ProgramFiles(x86)%\viewfd\ini\is-4154u.tmp
%ProgramFiles(x86)%\viewfd\ini\is-s6fce.tmp
%ProgramFiles(x86)%\viewfd\ini\is-n2vma.tmp
%ProgramFiles(x86)%\viewfd\ini\is-s9057.tmp
%ProgramFiles(x86)%\viewfd\ini\is-t7fjf.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-huuv1.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-ev0sq.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-p9v10.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-3d427.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-4fd5g.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-jsi87.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-119h0.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-gar55.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-a4dj6.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-4gekt.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-96ibl.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-56l7k.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-u4umq.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-46q4q.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-oj1tu.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-iq9ru.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-0ouj5.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-uvfdg.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-3gpge.tmp
%ProgramFiles(x86)%\viewfd\ini\is-721ra.tmp
%ProgramFiles(x86)%\viewfd\ini\is-f20uv.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-29m3t.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-effsf.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-1f06o.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-o1016.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-32fbk.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-ji0ek.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-5hcbp.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-86cgs.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-d3cai.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-v0ec7.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-fnfqn.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-olj2j.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-v9n65.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-m6n58.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-26o2u.tmp
%ProgramFiles(x86)%\viewfd\is-06epd.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-e948b.tmp
%ProgramFiles(x86)%\viewfd\is-lh44g.tmp
%ProgramFiles(x86)%\viewfd\is-avbq5.tmp
%ProgramFiles(x86)%\viewfd\is-b9atp.tmp
%ProgramFiles(x86)%\viewfd\is-q8a42.tmp
%ProgramFiles(x86)%\viewfd\is-4108m.tmp
%ProgramFiles(x86)%\viewfd\is-2upq5.tmp
%ProgramFiles(x86)%\viewfd\is-d1nkn.tmp
%ProgramFiles(x86)%\viewfd\is-21b9r.tmp
%ProgramFiles(x86)%\viewfd\is-ace4j.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\search\is-484ar.tmp
%ProgramFiles(x86)%\viewfd\search\is-4rl5l.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-b2vkn.tmp
%ProgramFiles(x86)%\viewfd\search\is-573fp.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ntkv0.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-0fls7.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-i0qrj.tmp
%ProgramFiles(x86)%\viewfd\programs\is-cutqm.tmp
%ProgramFiles(x86)%\viewfd\radio\is-k971e.tmp
%ProgramFiles(x86)%\viewfd\radio\is-lj0rb.tmp
%ProgramFiles(x86)%\viewfd\reports\is-jk4m7.tmp
%ProgramFiles(x86)%\viewfd\search\is-fbdqq.tmp
%ProgramFiles(x86)%\viewfd\search\is-duh8u.tmp
%ProgramFiles(x86)%\viewfd\search\is-bmn3s.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\url\search\is-fhfln.tmp
%ProgramFiles(x86)%\viewfd\search\is-lhom9.tmp
%ProgramFiles(x86)%\viewfd\soft\is-7o9ph.tmp
%ProgramFiles(x86)%\viewfd\url\is-g94r2.tmp
%ProgramFiles(x86)%\viewfd\url\is-97fp2.tmp
%ProgramFiles(x86)%\viewfd\url\is-bg0u6.tmp
%ProgramFiles(x86)%\viewfd\url\is-g6342.tmp
%ProgramFiles(x86)%\viewfd\url\is-31juq.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-1idmm.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-n4i9d.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-6p4f8.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-dk14b.tmp
%ProgramFiles(x86)%\viewfd\is-4sa2l.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-8j0vm.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-4gda4.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-seteg.tmp
%ProgramFiles(x86)%\viewfd\data\is-s89n0.tmp
%ProgramFiles(x86)%\viewfd\forms\is-0sl3n.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-8nsej.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-gugt4.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-aodv4.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-3mp7b.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-k4r7j.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-tptt5.tmp
%ProgramFiles(x86)%\viewfd\browser\is-3b82u.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-k9ee6.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-pucee.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-c4hia.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-j84mv.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-ibc4j.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-pfvnr.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-94i4b.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-jj807.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-08utn.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-pd9ci.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-5fqp5.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-lev2l.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-h9fn3.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-4phhh.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-ukan2.tmp
%TEMP%\is-kuo9v.tmp\_isetup\_setup64.tmp
%TEMP%\is-kuo9v.tmp\_isetup\_shfoldr.dll
%TEMP%\is-kuo9v.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-sckma.tmp
%ProgramFiles(x86)%\viewfd\7-zip\lang\is-oi3e7.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-nfp8v.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-frav0.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-n11uf.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-1ilhv.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-ussv1.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-02otm.tmp
%ProgramFiles(x86)%\viewfd\backup\is-ii32o.tmp
%ProgramFiles(x86)%\viewfd\browser\is-q8aa0.tmp
%ProgramFiles(x86)%\viewfd\browser\is-n2ihs.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-m9s1g.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-aikos.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-f56s1.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-appj2.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-06oae.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-chvkk.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-7rghq.tmp
%TEMP%\is-kuo9v.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\viewfd\browser\is-k9g12.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-ct34k.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-h9ves.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-es89c.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-4udif.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-012c9.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-k28lj.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1s7dd.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-jj5io.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-25qkn.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ii32q.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-h6gue.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-mtgiq.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-qmqc0.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-dvu24.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8he50.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-v4k0c.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-9tkmr.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-f9v3c.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-untfa.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-u4hd7.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-og9e0.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-2tfa8.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1rpgm.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-d2kf2.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1nau8.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-1hocb.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-73mrq.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-h07ep.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-ra77v.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-v04i4.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-laaj1.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-3cc1q.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-jkbv1.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-mcehb.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-2tie4.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-7o148.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-42qi8.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-a0hke.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-p04cl.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-iqhug.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-9ph86.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-3pjn6.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-6nlpd.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-m212m.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-9068e.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-va7pb.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-4otj3.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-ktpe6.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-r1mos.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-dqbuk.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-77acg.tmp
%ProgramFiles(x86)%\viewfd\graphic\grids\is-ha51t.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-sckma.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\ini\is-rfl93.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-m5ocm.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\lsd\is-gpc3t.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-t2bi6.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-pk0sq.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-jfc27.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-0veei.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-hdn2e.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\ini\is-4154u.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-s6fce.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-r8pl3.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-p78uv.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-l1aqn.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-qngdn.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-4q1lv.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-dqadg.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-gjqad.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ar6v5.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-gjvs7.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ta3ul.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-96ibl.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\ini\is-n2vma.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\ini\is-s9057.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\ini\is-t7fjf.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ev0sq.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-p9v10.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-3d427.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-4fd5g.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-jsi87.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-119h0.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-gar55.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-a4dj6.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-56l7k.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-huuv1.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-cjsl2.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-u4umq.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-46q4q.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-oj1tu.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-iq9ru.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-0ouj5.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-uvfdg.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-3gpge.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-721ra.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-f20uv.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-effsf.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-tg4np.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-4gekt.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-1f06o.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-o1016.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-b2vkn.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-484ar.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-ji0ek.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-5hcbp.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-86cgs.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-d3cai.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-v0ec7.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-fnfqn.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-olj2j.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-v9n65.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-m6n58.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-26o2u.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-4sa2l.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\is-06epd.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-lh44g.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-avbq5.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-b9atp.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-q8a42.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-4108m.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-2upq5.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-d1nkn.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\url\search\is-dk14b.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-6p4f8.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\url\search\is-fhfln.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\url\help\is-n4i9d.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-32fbk.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ntkv0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-0fls7.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-i0qrj.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-cutqm.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-k971e.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-lj0rb.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-jk4m7.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-fbdqq.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-duh8u.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-bmn3s.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-573fp.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-4rl5l.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-lhom9.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-7o9ph.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-g94r2.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-97fp2.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-bg0u6.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-g6342.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-31juq.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-1idmm.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\is-21b9r.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-29m3t.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-e948b.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-8j0vm.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-gugt4.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-aodv4.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-3mp7b.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-k4r7j.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-tptt5.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-k9ee6.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-02otm.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-pucee.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\forms\is-0sl3n.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-8nsej.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-c4hia.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-pfvnr.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-94i4b.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-jj807.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-08utn.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-pd9ci.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ussv1.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ct34k.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-h9ves.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-j84mv.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ibc4j.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\data\is-s89n0.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-seteg.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-lev2l.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-nfp8v.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-frav0.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\7-zip\is-n11uf.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-1ilhv.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-ii32o.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-3b82u.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-k9g12.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-q8aa0.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-n2ihs.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-oi3e7.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-m9s1g.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-f56s1.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-appj2.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-06oae.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-chvkk.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-7rghq.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-ukan2.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-4phhh.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-h9fn3.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-5fqp5.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-aikos.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-es89c.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-v04i4.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-laaj1.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-3cc1q.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-k28lj.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1s7dd.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-jj5io.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-25qkn.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ii32q.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-h6gue.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-mtgiq.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-qmqc0.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-4gda4.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-dvu24.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-v4k0c.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-9tkmr.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-f9v3c.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-untfa.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-u4hd7.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-og9e0.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-2tfa8.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1rpgm.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-d2kf2.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1nau8.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-iqhug.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-012c9.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-1hocb.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-4udif.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-h07ep.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-jkbv1.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-mcehb.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-2tie4.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-7o148.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-42qi8.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-a0hke.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-p04cl.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ra77v.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-73mrq.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-3pjn6.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-6nlpd.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-m212m.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-9068e.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-va7pb.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-4otj3.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-ktpe6.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-r1mos.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-dqbuk.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-77acg.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-9ph86.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-ha51t.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8he50.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\is-ace4j.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '{1E61A93F-EC60-4AD7-A3C8-3DDC3E02E405}' WindowName: ''

Creates and executes the following

'%TEMP%\is-f12o9.tmp\is-nblci.tmp' /SL4 $A0214 "<Full path to file>" 6851817 52736
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' f84ff9cd99f689c2b53660a90b909d62

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней