Trojan.DownLoader44.65013

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-h7evu.tmp\is-jokbj.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-tkl3p.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-g3vch.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-8l67i.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-6phr0.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-8b2pc.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-eii3i.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-n1bhm.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-btj0i.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-sr9fp.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tm9k6.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-6a6ts.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-etl0g.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9sh2u.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-v8hpc.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-lf2ss.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-hv4ej.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-k4g8d.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-qi7fn.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-b3gjf.tmp
%ProgramFiles(x86)%\viewfd\ini\is-7f3pp.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-jsp4j.tmp
%ProgramFiles(x86)%\viewfd\ini\is-7o802.tmp
%ProgramFiles(x86)%\viewfd\ini\is-6ud2p.tmp
%ProgramFiles(x86)%\viewfd\ini\is-u9iok.tmp
%ProgramFiles(x86)%\viewfd\ini\is-noh41.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-fmi3v.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-4n540.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-6bqdd.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-sssan.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-up34h.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-mnv9q.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-pnmph.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-ke9id.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-o0f2i.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-0921t.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-4tvai.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-3snmc.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-mlj0t.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-o9gdl.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-bkkqm.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-n79u2.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-clmq6.tmp
%ProgramFiles(x86)%\viewfd\ini\is-46fv5.tmp
%ProgramFiles(x86)%\viewfd\ini\is-c6hh5.tmp
%ProgramFiles(x86)%\viewfd\ini\is-14k9h.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-l70f7.tmp
%ProgramFiles(x86)%\viewfd\ini\is-7mgqi.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-ucjtj.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-039oq.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-cm3ra.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-0846e.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-r40r2.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-p9b0g.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-bq58v.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-rillh.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-tdgvk.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-e8ga8.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-rn6on.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-48vv8.tmp
%ProgramFiles(x86)%\viewfd\is-khin8.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-bd4sr.tmp
%ProgramFiles(x86)%\viewfd\is-1a03d.tmp
%ProgramFiles(x86)%\viewfd\is-agd9o.tmp
%ProgramFiles(x86)%\viewfd\is-fcc2m.tmp
%ProgramFiles(x86)%\viewfd\is-fjgfm.tmp
%ProgramFiles(x86)%\viewfd\is-mo31q.tmp
%ProgramFiles(x86)%\viewfd\is-qcmio.tmp
%ProgramFiles(x86)%\viewfd\is-t6hmn.tmp
%ProgramFiles(x86)%\viewfd\is-qt0mr.tmp
%ProgramFiles(x86)%\viewfd\is-lbokl.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\soft\is-kn5ne.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-ibbiq.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-1056d.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-ak71c.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-e438m.tmp
%ProgramFiles(x86)%\viewfd\programs\is-1mibt.tmp
%ProgramFiles(x86)%\viewfd\radio\is-gqaud.tmp
%ProgramFiles(x86)%\viewfd\radio\is-0m6f7.tmp
%ProgramFiles(x86)%\viewfd\reports\is-uar8g.tmp
%ProgramFiles(x86)%\viewfd\search\is-ue318.tmp
%ProgramFiles(x86)%\viewfd\search\is-och08.tmp
%ProgramFiles(x86)%\viewfd\search\is-nn2bc.tmp
%ProgramFiles(x86)%\viewfd\search\is-7vqk9.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-mg1p9.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ff1o6.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-g0dqd.tmp
%ProgramFiles(x86)%\viewfd\search\is-293n5.tmp
%ProgramFiles(x86)%\viewfd\url\is-jbof9.tmp
%ProgramFiles(x86)%\viewfd\url\is-sur4c.tmp
%ProgramFiles(x86)%\viewfd\url\is-n6fm3.tmp
%ProgramFiles(x86)%\viewfd\url\is-162nu.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-uk7fe.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-322c6.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-dq106.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-arqpb.tmp
%ProgramFiles(x86)%\viewfd\search\is-s97kl.tmp
%ProgramFiles(x86)%\viewfd\soft\is-8pjkd.tmp
%ProgramFiles(x86)%\viewfd\url\is-4ehgh.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-1h1ff.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-9bdit.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-r66g8.tmp
%ProgramFiles(x86)%\viewfd\forms\is-lmv8e.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-6psd2.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-p7iog.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-341mt.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-hng99.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-ekk8d.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-ksnk5.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-4du06.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-u8him.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-tug7d.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-a2tua.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-r3h1u.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-c336a.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-arhnh.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-ou5ls.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-s59mr.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-ps79v.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-e5igr.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-4l6nf.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-c22ni.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-a1iia.tmp
%ProgramFiles(x86)%\viewfd\data\is-g70vb.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-nnu6n.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-vrc4r.tmp
%TEMP%\is-vjc3m.tmp\_isetup\_regdll.tmp
%TEMP%\is-vjc3m.tmp\_isetup\_shfoldr.dll
%TEMP%\is-vjc3m.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-fafc2.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-cm757.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-k1bf9.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-svbup.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-qqcuj.tmp
%ProgramFiles(x86)%\viewfd\backup\is-qkior.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-ek0do.tmp
%ProgramFiles(x86)%\viewfd\browser\is-ups4b.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-88o4m.tmp
%ProgramFiles(x86)%\viewfd\browser\is-2vn34.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-b2brp.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-t8cbb.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-a973d.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-cdef1.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-4u39c.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-p33ea.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-au4d8.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-fti74.tmp
%ProgramFiles(x86)%\viewfd\browser\is-5gg73.tmp
%TEMP%\is-vjc3m.tmp\_isetup\_setup64.tmp
%ProgramFiles(x86)%\viewfd\browser\is-modmh.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-09f9v.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-rnjr0.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-dhb06.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-tevt5.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ddicd.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-03mbv.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-qvo9v.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-6ng1b.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-vgksf.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-a8s3a.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-cdj1n.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-vel1r.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-27kt6.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-um3s5.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-83c71.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8m2ot.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-459o5.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-50obn.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-lm41r.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1pjln.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8jjj9.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-e2kaa.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-iq5do.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-esi3q.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-d1vuv.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-0luv3.tmp
%ProgramFiles(x86)%\viewfd\is-i3p5d.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\graphic\grids\is-9r2r8.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-84ecb.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-srvqn.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-r5qup.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-7vu0c.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-f3uai.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-d9t8p.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-5kio1.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-tabtk.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-4qmnp.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-42a0e.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-bi93k.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-f3lht.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-lbmdp.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-j9qmr.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-8fukf.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-ik2pn.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-rtia9.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-gjdcc.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-7o034.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-5nui2.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-1a3f2.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-dsd9b.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-f4hvq.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-fafc2.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\lsd\is-tkl3p.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-g3vch.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-8l67i.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-6phr0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-8b2pc.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-eii3i.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-n1bhm.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\ini\is-7f3pp.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-btj0i.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\ini\is-7o802.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-jsp4j.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-etl0g.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9sh2u.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-v8hpc.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-lf2ss.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-hv4ej.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-k4g8d.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-qi7fn.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tm9k6.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-b3gjf.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-6a6ts.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\ini\is-6ud2p.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-u9iok.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-noh41.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-4n540.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-6bqdd.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-sssan.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-up34h.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-mnv9q.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-pnmph.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ke9id.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-0921t.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-039oq.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-sr9fp.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ucjtj.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-mlj0t.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-o9gdl.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-bkkqm.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-n79u2.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-clmq6.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-46fv5.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-c6hh5.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\ini\is-14k9h.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-3snmc.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\ini\is-7mgqi.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-l70f7.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-fmi3v.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-o0f2i.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ff1o6.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\url\soft\is-kn5ne.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-ibbiq.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-r40r2.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-p9b0g.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-bq58v.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-rillh.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-tdgvk.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-e8ga8.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\url\search\is-bd4sr.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-1056d.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-rn6on.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\is-1a03d.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-i3p5d.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-agd9o.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-fcc2m.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-fjgfm.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-mo31q.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-qcmio.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-t6hmn.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\wallpaper\is-48vv8.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-khin8.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\url\search\is-ak71c.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-dq106.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-vel1r.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-0846e.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-1mibt.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-gqaud.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-0m6f7.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-uar8g.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-ue318.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-och08.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-nn2bc.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-7vqk9.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-293n5.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-s97kl.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-8pjkd.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-4ehgh.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-jbof9.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-sur4c.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-n6fm3.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-162nu.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-uk7fe.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\url\help\is-322c6.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-cm3ra.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-g0dqd.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-mg1p9.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-4tvai.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-1h1ff.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-9bdit.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-hng99.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-ekk8d.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-ksnk5.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-4du06.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-u8him.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-a2tua.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-88o4m.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\formulas\is-6psd2.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-r3h1u.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\formulas\is-341mt.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-arhnh.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-s59mr.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ps79v.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-e5igr.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-4l6nf.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ek0do.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-tug7d.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-rnjr0.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-c336a.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\forms\is-lmv8e.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ou5ls.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\data\is-g70vb.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-09f9v.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\is-cm757.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-svbup.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-qqcuj.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-qkior.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-ups4b.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-5gg73.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-2vn34.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-modmh.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-b2brp.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-t8cbb.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-k1bf9.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\colourschemes\is-a973d.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-4u39c.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-p33ea.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-au4d8.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-fti74.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-vrc4r.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-nnu6n.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-a1iia.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-c22ni.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-27kt6.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-cdef1.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-dsd9b.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-p7iog.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-84ecb.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-tevt5.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-03mbv.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-qvo9v.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-6ng1b.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-vgksf.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-a8s3a.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-cdj1n.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-83c71.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-esi3q.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-d1vuv.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-0luv3.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8m2ot.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-459o5.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-50obn.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-lm41r.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1pjln.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8jjj9.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-e2kaa.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-iq5do.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-r66g8.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-um3s5.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-srvqn.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ddicd.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-arqpb.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\is-qt0mr.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-bi93k.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-7vu0c.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-f3uai.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-d9t8p.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-5kio1.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-tabtk.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-4qmnp.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-f3lht.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-e438m.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-f4hvq.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-r5qup.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-lbmdp.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-8fukf.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-ik2pn.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-rtia9.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-gjdcc.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-7o034.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-5nui2.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-1a3f2.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-9r2r8.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-42a0e.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-j9qmr.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-dhb06.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\is-lbokl.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '' WindowName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}'

Creates and executes the following

'%TEMP%\is-h7evu.tmp\is-jokbj.tmp' /SL4 $B0218 "<Full path to file>" 7076798 141312
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' 3bc51286bd3df207725e899701dd57aa

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней