Trojan.DownLoader44.65044

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-njrhi.tmp\is-h5ct2.tmp
%ProgramFiles(x86)%\viewfd\ini\is-j2r2c.tmp
%ProgramFiles(x86)%\viewfd\ini\is-8p4lb.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-qdu2f.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-86kbb.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-b4vrv.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-kne48.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-8m4nt.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ueadg.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-0rlpm.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-34tmf.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-cd1nr.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-lcv57.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7l7j9.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-fhd6s.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ihqb2.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-2vpb9.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-okf4h.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-d69s4.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-oksg9.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-of2cd.tmp
%ProgramFiles(x86)%\viewfd\ini\is-pl06q.tmp
%ProgramFiles(x86)%\viewfd\ini\is-k5iq1.tmp
%ProgramFiles(x86)%\viewfd\ini\is-8fd8e.tmp
%ProgramFiles(x86)%\viewfd\ini\is-0tdp6.tmp
%ProgramFiles(x86)%\viewfd\ini\is-qei8q.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-actjt.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-s0f1h.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-dvm5s.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-tnhsq.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-72slo.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-5drhk.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-77apb.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-no7d7.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-1pgiq.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-c7jd6.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-bm4kr.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-9a8q2.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-a270u.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-kqj7i.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-olkt0.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-eusdd.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-645pp.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-2kfqt.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-euhgl.tmp
%ProgramFiles(x86)%\viewfd\ini\is-53fem.tmp
%ProgramFiles(x86)%\viewfd\ini\is-9ior6.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-lkk1r.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-1cotr.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-2aima.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-kg9u9.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-r1c9b.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-3mdgl.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-6ur67.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-4n26b.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-niqc7.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-qo53p.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-iprsq.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-cgra8.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-m43uo.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-3vgrd.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-qe1pv.tmp
%ProgramFiles(x86)%\viewfd\is-g58ln.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-o0n09.tmp
%ProgramFiles(x86)%\viewfd\is-th2pa.tmp
%ProgramFiles(x86)%\viewfd\is-4bv6f.tmp
%ProgramFiles(x86)%\viewfd\is-3kmgg.tmp
%ProgramFiles(x86)%\viewfd\is-6s1bt.tmp
%ProgramFiles(x86)%\viewfd\is-csf37.tmp
%ProgramFiles(x86)%\viewfd\is-1vgv1.tmp
%ProgramFiles(x86)%\viewfd\is-n2kea.tmp
%ProgramFiles(x86)%\viewfd\is-t1gg1.tmp
%ProgramFiles(x86)%\viewfd\is-t5q2t.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\search\is-6g6nd.tmp
%ProgramFiles(x86)%\viewfd\search\is-lh2qm.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-q29bj.tmp
%ProgramFiles(x86)%\viewfd\search\is-9j9qb.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-r86gv.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-spq87.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-sonip.tmp
%ProgramFiles(x86)%\viewfd\programs\is-ajnms.tmp
%ProgramFiles(x86)%\viewfd\radio\is-6k3nk.tmp
%ProgramFiles(x86)%\viewfd\radio\is-090oi.tmp
%ProgramFiles(x86)%\viewfd\reports\is-mlufi.tmp
%ProgramFiles(x86)%\viewfd\search\is-o6pto.tmp
%ProgramFiles(x86)%\viewfd\search\is-dfdcu.tmp
%ProgramFiles(x86)%\viewfd\search\is-iga24.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\url\search\is-e8c4a.tmp
%ProgramFiles(x86)%\viewfd\search\is-0vb0l.tmp
%ProgramFiles(x86)%\viewfd\soft\is-shjjl.tmp
%ProgramFiles(x86)%\viewfd\url\is-r14st.tmp
%ProgramFiles(x86)%\viewfd\url\is-f62uf.tmp
%ProgramFiles(x86)%\viewfd\url\is-de76f.tmp
%ProgramFiles(x86)%\viewfd\url\is-mcafr.tmp
%ProgramFiles(x86)%\viewfd\url\is-un94v.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-b2hdq.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-o8dm7.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-qe1dh.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-cdi1f.tmp
%ProgramFiles(x86)%\viewfd\is-k9gv2.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-g2ph1.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-gpbhh.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-64gg4.tmp
%ProgramFiles(x86)%\viewfd\data\is-833qa.tmp
%ProgramFiles(x86)%\viewfd\forms\is-fg5sh.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-dcvjt.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-uql5v.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-7ohij.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-k7qct.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-rokon.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-9j7t1.tmp
%ProgramFiles(x86)%\viewfd\browser\is-cdvpo.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-49s0s.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-pus3u.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-2bi42.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-dgaeu.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-3kvok.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-d7s98.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-pocto.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-ueiag.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-gtg9f.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-aft0g.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-r9ldg.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-cap5o.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-9nbia.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-hna0n.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-gk32f.tmp
%TEMP%\is-12i48.tmp\_isetup\_setup64.tmp
%TEMP%\is-12i48.tmp\_isetup\_shfoldr.dll
%TEMP%\is-12i48.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-uoud0.tmp
%ProgramFiles(x86)%\viewfd\7-zip\lang\is-h9700.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-abi38.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-uoi8l.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-9t6du.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-sojrl.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-jmn0u.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-s9erb.tmp
%ProgramFiles(x86)%\viewfd\backup\is-iia0f.tmp
%ProgramFiles(x86)%\viewfd\browser\is-3pgks.tmp
%ProgramFiles(x86)%\viewfd\browser\is-b8k1i.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-0pke9.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-dvbg3.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-ipg4e.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-a362a.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-lmlh1.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-i8joq.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-0r7n2.tmp
%TEMP%\is-12i48.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\viewfd\browser\is-a9nuc.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-c455b.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-cag6k.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-fd55c.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-73qj2.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-6nr8e.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-6040j.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ejirj.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-0hkdr.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-jap1e.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-7n7si.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-30h2i.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-nc1nn.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-6malq.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-43sma.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-m6frk.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-k3qhe.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-g709b.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-u0ni6.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-9boki.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8l5fn.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-gmj3p.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ge259.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-0qbv3.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-04trb.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-fu3gr.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-c3l7k.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-o0nnb.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-ojeup.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-ue5bk.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-39aoa.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-71ul6.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-lu1ss.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-neonk.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-hjk2k.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-jfijq.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-cg0cv.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-44mr1.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-516il.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-3hquu.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-n255j.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-jl4qi.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-6ajf4.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-725ob.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-6hf1k.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-c0ao9.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-96viq.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-c735o.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-to6bm.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-efkdj.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-5qpce.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-ktjgu.tmp
%ProgramFiles(x86)%\viewfd\graphic\grids\is-3lcb2.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-uoud0.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\ini\is-j2r2c.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-8p4lb.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\lsd\is-qdu2f.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-86kbb.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-b4vrv.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-kne48.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-8m4nt.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ueadg.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\ini\is-pl06q.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-k5iq1.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-0rlpm.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-lcv57.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7l7j9.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-fhd6s.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ihqb2.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-2vpb9.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-okf4h.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-d69s4.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-oksg9.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-cd1nr.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-bm4kr.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\ini\is-8fd8e.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\ini\is-0tdp6.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\ini\is-qei8q.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-s0f1h.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-dvm5s.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-tnhsq.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-72slo.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-5drhk.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-77apb.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-no7d7.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-1pgiq.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-9a8q2.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-actjt.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-34tmf.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-a270u.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-kqj7i.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-olkt0.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-eusdd.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-645pp.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-2kfqt.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-euhgl.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-53fem.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-9ior6.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-1cotr.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-of2cd.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-c7jd6.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-2aima.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-kg9u9.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-q29bj.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-6g6nd.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-3mdgl.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-6ur67.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-4n26b.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-niqc7.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-qo53p.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-iprsq.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-cgra8.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-m43uo.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-3vgrd.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-qe1pv.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-k9gv2.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\is-g58ln.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-th2pa.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-4bv6f.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-3kmgg.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-6s1bt.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-csf37.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-1vgv1.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-n2kea.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\url\search\is-cdi1f.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-qe1dh.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\url\search\is-e8c4a.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\url\help\is-o8dm7.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-r1c9b.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-r86gv.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-spq87.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-sonip.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-ajnms.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-6k3nk.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-090oi.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-mlufi.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-o6pto.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-dfdcu.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-iga24.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-9j9qb.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-lh2qm.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-0vb0l.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-shjjl.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-r14st.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-f62uf.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-de76f.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-mcafr.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-un94v.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-b2hdq.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\is-t1gg1.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-lkk1r.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-o0n09.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-g2ph1.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-uql5v.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-7ohij.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-k7qct.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-rokon.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-9j7t1.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-49s0s.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-s9erb.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-pus3u.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\forms\is-fg5sh.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-dcvjt.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-2bi42.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-d7s98.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-pocto.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ueiag.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-gtg9f.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-aft0g.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-jmn0u.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-c455b.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-cag6k.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-dgaeu.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-3kvok.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\data\is-833qa.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-64gg4.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-cap5o.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-abi38.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-uoi8l.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\7-zip\is-9t6du.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-sojrl.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-iia0f.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-cdvpo.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-a9nuc.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-3pgks.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-b8k1i.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-h9700.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-0pke9.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-ipg4e.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-a362a.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-lmlh1.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-i8joq.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-0r7n2.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-gk32f.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-hna0n.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-9nbia.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-r9ldg.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-dvbg3.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-fd55c.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-39aoa.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-71ul6.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-lu1ss.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-6040j.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ejirj.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-0hkdr.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-jap1e.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-7n7si.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-30h2i.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-nc1nn.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-6malq.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-gpbhh.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-43sma.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-k3qhe.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-g709b.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-u0ni6.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-9boki.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8l5fn.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-gmj3p.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ge259.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-0qbv3.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-04trb.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-fu3gr.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-n255j.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-6nr8e.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-c3l7k.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-73qj2.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-ojeup.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-neonk.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-hjk2k.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-jfijq.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-cg0cv.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-44mr1.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-516il.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-3hquu.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ue5bk.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-o0nnb.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-6ajf4.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-725ob.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-6hf1k.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-c0ao9.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-96viq.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-c735o.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-to6bm.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-efkdj.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-5qpce.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-ktjgu.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-jl4qi.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-3lcb2.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-m6frk.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\is-t5q2t.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '{1E61A93F-EC60-4AD7-A3C8-3DDC3E02E405}' WindowName: ''

Creates and executes the following

'%TEMP%\is-njrhi.tmp\is-h5ct2.tmp' /SL4 $B0218 "<Full path to file>" 6871146 52736
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' 5b6833fffeb11dc1334e3a0a5d7048b2

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней