Trojan.DownLoader44.65005

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-h9jek.tmp\is-ve08b.tmp
%ProgramFiles(x86)%\viewfd\ini\is-1jhec.tmp
%ProgramFiles(x86)%\viewfd\ini\is-mggq1.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-9n05k.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-mshlo.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-pg8ll.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-d211f.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-4qtpn.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tt459.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-iusq9.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-4h5jg.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-qssbh.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-feomq.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-5dbov.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-rrg7v.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-4o889.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-njgk3.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-k7k2f.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-s2dai.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-avrk8.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-1hrau.tmp
%ProgramFiles(x86)%\viewfd\ini\is-k7sjv.tmp
%ProgramFiles(x86)%\viewfd\ini\is-ft02g.tmp
%ProgramFiles(x86)%\viewfd\ini\is-p439g.tmp
%ProgramFiles(x86)%\viewfd\ini\is-a1jrl.tmp
%ProgramFiles(x86)%\viewfd\ini\is-uf09o.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-lsori.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-dnemh.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-i01oi.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-tu6av.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-s4vg8.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-v8gou.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-gogbk.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-mf4d9.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-odvas.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-gjqri.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ccnb1.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-t9v94.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-jlee7.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-pb0kq.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-krpl0.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-bfki4.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-rmoh1.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-737dp.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-4o18p.tmp
%ProgramFiles(x86)%\viewfd\ini\is-v3n84.tmp
%ProgramFiles(x86)%\viewfd\ini\is-igku0.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-urkd1.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-0oe7o.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-7d5b1.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-vt25l.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-4o4d0.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-1iln9.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-vvmi1.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-svun5.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-u43cv.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-gbe7a.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-v2dd8.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-pqum7.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-a57r7.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-v6rdi.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-cn27f.tmp
%ProgramFiles(x86)%\viewfd\is-71ugs.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-fqo9i.tmp
%ProgramFiles(x86)%\viewfd\is-i808o.tmp
%ProgramFiles(x86)%\viewfd\is-b3rqf.tmp
%ProgramFiles(x86)%\viewfd\is-t5bm9.tmp
%ProgramFiles(x86)%\viewfd\is-171hl.tmp
%ProgramFiles(x86)%\viewfd\is-1anbl.tmp
%ProgramFiles(x86)%\viewfd\is-aun3v.tmp
%ProgramFiles(x86)%\viewfd\is-l8rcq.tmp
%ProgramFiles(x86)%\viewfd\is-khk5a.tmp
%ProgramFiles(x86)%\viewfd\is-v08t0.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\search\is-4926c.tmp
%ProgramFiles(x86)%\viewfd\search\is-k4l4c.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-ofjme.tmp
%ProgramFiles(x86)%\viewfd\search\is-9bia4.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-93ht0.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-t4955.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-8e879.tmp
%ProgramFiles(x86)%\viewfd\programs\is-t11g4.tmp
%ProgramFiles(x86)%\viewfd\radio\is-g9tjg.tmp
%ProgramFiles(x86)%\viewfd\radio\is-nc6om.tmp
%ProgramFiles(x86)%\viewfd\reports\is-h1bnr.tmp
%ProgramFiles(x86)%\viewfd\search\is-h90dv.tmp
%ProgramFiles(x86)%\viewfd\search\is-c6qvr.tmp
%ProgramFiles(x86)%\viewfd\search\is-tt79b.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\url\search\is-tigim.tmp
%ProgramFiles(x86)%\viewfd\search\is-7n5mo.tmp
%ProgramFiles(x86)%\viewfd\soft\is-3kcus.tmp
%ProgramFiles(x86)%\viewfd\url\is-ltv4s.tmp
%ProgramFiles(x86)%\viewfd\url\is-i87l0.tmp
%ProgramFiles(x86)%\viewfd\url\is-7pu0v.tmp
%ProgramFiles(x86)%\viewfd\url\is-mdh52.tmp
%ProgramFiles(x86)%\viewfd\url\is-t792p.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-9g25l.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-dqer9.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-gm2bl.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-cpv03.tmp
%ProgramFiles(x86)%\viewfd\is-cn50b.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-6kgo4.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-qkl26.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-jrm6u.tmp
%ProgramFiles(x86)%\viewfd\data\is-5e2g6.tmp
%ProgramFiles(x86)%\viewfd\forms\is-vm1sl.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-j0gi5.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-10qhv.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-2qnm8.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-r3960.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-uj7o0.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-18c24.tmp
%ProgramFiles(x86)%\viewfd\browser\is-1l4va.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-45361.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-jedgd.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-q78v5.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-7lk69.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-nsts1.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-hpe44.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-e36kr.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-lcdhm.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-45lg6.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-pi0fu.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-ju0m1.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-ar0a5.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-fci12.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-1qpta.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-iedv7.tmp
%TEMP%\is-hfcmq.tmp\_isetup\_setup64.tmp
%TEMP%\is-hfcmq.tmp\_isetup\_shfoldr.dll
%TEMP%\is-hfcmq.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-ln4lh.tmp
%ProgramFiles(x86)%\viewfd\7-zip\lang\is-5q559.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-vkr3a.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-6bi5o.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-t7sf4.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-2gaga.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-s5fiu.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-5d6ft.tmp
%ProgramFiles(x86)%\viewfd\backup\is-bqthe.tmp
%ProgramFiles(x86)%\viewfd\browser\is-ada5b.tmp
%ProgramFiles(x86)%\viewfd\browser\is-klk1k.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-3iej8.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-9f90m.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-es1e4.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-jt94k.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-k5rlb.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-94sa5.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-ddrof.tmp
%TEMP%\is-hfcmq.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\viewfd\browser\is-72rdu.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-vvrn3.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-eu3m4.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-ubc4j.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-cnec2.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-mugj9.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-nu2rk.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-hl9qg.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-f5ev4.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-3ks9i.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-9m8tu.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-kb256.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-n1afm.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-s6f3d.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-p659c.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-rsku3.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-57qfh.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-cd0pi.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-2am42.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-shlho.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-0j2kc.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-boroq.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-peo3a.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1l6t2.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-nvuo0.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-mc31t.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-irlif.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-1q9b0.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-00j3d.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-bfcg0.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-an1d5.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-k8ap6.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-iqsri.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-3if6q.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-plar8.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-k8sen.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-uq1i9.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-274fc.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-5g9p0.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-44u2f.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-s423n.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-93b8p.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-a1965.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-liuj5.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-b20eg.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-m13qe.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-sav6e.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-7s4ji.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-vambg.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-qd8if.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-rib1j.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-pp4ad.tmp
%ProgramFiles(x86)%\viewfd\graphic\grids\is-dq0rr.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-ln4lh.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\ini\is-1jhec.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-mggq1.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\lsd\is-9n05k.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-mshlo.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-pg8ll.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-d211f.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-4qtpn.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tt459.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\ini\is-k7sjv.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-ft02g.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-iusq9.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-feomq.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-5dbov.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-rrg7v.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-4o889.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-njgk3.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-k7k2f.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-s2dai.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-avrk8.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-qssbh.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ccnb1.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\ini\is-p439g.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\ini\is-a1jrl.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\ini\is-uf09o.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-dnemh.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-i01oi.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-tu6av.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-s4vg8.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-v8gou.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-gogbk.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-mf4d9.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-odvas.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-t9v94.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-lsori.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-4h5jg.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-jlee7.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-pb0kq.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-krpl0.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-bfki4.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-rmoh1.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-737dp.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-4o18p.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-v3n84.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-igku0.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-0oe7o.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-1hrau.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-gjqri.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-7d5b1.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-vt25l.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-ofjme.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-4926c.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-1iln9.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-vvmi1.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-svun5.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-u43cv.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-gbe7a.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-v2dd8.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-pqum7.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-a57r7.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-v6rdi.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-cn27f.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-cn50b.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\is-71ugs.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-i808o.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-b3rqf.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-t5bm9.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-171hl.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-1anbl.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-aun3v.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-l8rcq.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\url\search\is-cpv03.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-gm2bl.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\url\search\is-tigim.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\url\help\is-dqer9.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-4o4d0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-93ht0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-t4955.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-8e879.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-t11g4.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-g9tjg.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-nc6om.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-h1bnr.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-h90dv.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-c6qvr.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-tt79b.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-9bia4.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-k4l4c.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-7n5mo.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-3kcus.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-ltv4s.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-i87l0.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-7pu0v.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-mdh52.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-t792p.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-9g25l.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\is-khk5a.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-urkd1.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-fqo9i.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-6kgo4.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-10qhv.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-2qnm8.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-r3960.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-uj7o0.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-18c24.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-45361.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-5d6ft.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-jedgd.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\forms\is-vm1sl.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-j0gi5.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-q78v5.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-hpe44.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-e36kr.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-lcdhm.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-45lg6.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-pi0fu.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-s5fiu.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-vvrn3.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-eu3m4.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-7lk69.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-nsts1.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\data\is-5e2g6.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-jrm6u.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-ar0a5.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-vkr3a.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-6bi5o.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\7-zip\is-t7sf4.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-2gaga.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-bqthe.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-1l4va.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-72rdu.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-ada5b.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-klk1k.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-5q559.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-3iej8.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-es1e4.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-jt94k.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-k5rlb.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-94sa5.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-ddrof.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-iedv7.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-1qpta.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-fci12.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-ju0m1.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-9f90m.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ubc4j.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-an1d5.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-k8ap6.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-iqsri.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-nu2rk.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-hl9qg.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-f5ev4.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-3ks9i.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-9m8tu.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-kb256.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-n1afm.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-s6f3d.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-qkl26.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-p659c.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-57qfh.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-cd0pi.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-2am42.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-shlho.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-0j2kc.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-boroq.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-peo3a.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1l6t2.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-nvuo0.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-mc31t.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-s423n.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-mugj9.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-irlif.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-cnec2.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-00j3d.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-3if6q.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-plar8.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-k8sen.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-uq1i9.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-274fc.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-5g9p0.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-44u2f.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-bfcg0.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-1q9b0.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-a1965.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-liuj5.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-b20eg.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-m13qe.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-sav6e.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-7s4ji.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-vambg.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-qd8if.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-rib1j.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-pp4ad.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-93b8p.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-dq0rr.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-rsku3.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\is-v08t0.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '{1E61A93F-EC60-4AD7-A3C8-3DDC3E02E405}' WindowName: ''

Creates and executes the following

'%TEMP%\is-h9jek.tmp\is-ve08b.tmp' /SL4 $100106 "<Full path to file>" 6877479 52736
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' 1ae1fc66e2760ad7c23ab46e0ebfc46e

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней