Trojan.DownLoader45.248

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-n9r1s.tmp\is-mbor4.tmp
%ProgramFiles(x86)%\viewfd\ini\is-efbf2.tmp
%ProgramFiles(x86)%\viewfd\ini\is-lprjp.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-3r9ll.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-4lai5.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-fgs11.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-p1sck.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-74jcr.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-54od5.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-m9jat.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-33qn3.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-lqbcu.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-jar2e.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-m0d8d.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-vpbvd.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-fp0gp.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-obluq.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-oeip9.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-cl32s.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-dqtd1.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-7kl31.tmp
%ProgramFiles(x86)%\viewfd\ini\is-knn1v.tmp
%ProgramFiles(x86)%\viewfd\ini\is-rugop.tmp
%ProgramFiles(x86)%\viewfd\ini\is-p9hbl.tmp
%ProgramFiles(x86)%\viewfd\ini\is-s9kt8.tmp
%ProgramFiles(x86)%\viewfd\ini\is-tq6s7.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-qvhbn.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-jaifi.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-0aauv.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-kobp9.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-3vnv2.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-bl577.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-b618b.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-snm75.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-e3ivd.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-nfo1a.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-mu2pa.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-r7efv.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-veq6h.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-e5tai.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-0iqf0.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-aanmg.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-ggbi5.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-mgvbn.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-c1snq.tmp
%ProgramFiles(x86)%\viewfd\ini\is-nfrhf.tmp
%ProgramFiles(x86)%\viewfd\ini\is-cpp42.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-qkdnj.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-4rcvv.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-hjda1.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-mc0bp.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-s4j3q.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-5ufkg.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-hpo0g.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-21dck.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-rspqh.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-f87md.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-kc3gt.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-tc71l.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-00qip.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-chdqh.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-fedsk.tmp
%ProgramFiles(x86)%\viewfd\is-de7m6.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-60fr7.tmp
%ProgramFiles(x86)%\viewfd\is-3386m.tmp
%ProgramFiles(x86)%\viewfd\is-5ce0e.tmp
%ProgramFiles(x86)%\viewfd\is-ta35e.tmp
%ProgramFiles(x86)%\viewfd\is-jpdjj.tmp
%ProgramFiles(x86)%\viewfd\is-8ad4k.tmp
%ProgramFiles(x86)%\viewfd\is-t7bd3.tmp
%ProgramFiles(x86)%\viewfd\is-krdnl.tmp
%ProgramFiles(x86)%\viewfd\is-5oodm.tmp
%ProgramFiles(x86)%\viewfd\is-khh22.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\search\is-l42io.tmp
%ProgramFiles(x86)%\viewfd\search\is-8gad4.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-78j4f.tmp
%ProgramFiles(x86)%\viewfd\search\is-104sk.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-laq88.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-qmkrk.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-2mkeq.tmp
%ProgramFiles(x86)%\viewfd\programs\is-t8v9u.tmp
%ProgramFiles(x86)%\viewfd\radio\is-r3tpq.tmp
%ProgramFiles(x86)%\viewfd\radio\is-1n7ie.tmp
%ProgramFiles(x86)%\viewfd\reports\is-87mrr.tmp
%ProgramFiles(x86)%\viewfd\search\is-l03i4.tmp
%ProgramFiles(x86)%\viewfd\search\is-d7c5o.tmp
%ProgramFiles(x86)%\viewfd\search\is-hqct6.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\url\search\is-gl1j5.tmp
%ProgramFiles(x86)%\viewfd\search\is-cthvr.tmp
%ProgramFiles(x86)%\viewfd\soft\is-dlrul.tmp
%ProgramFiles(x86)%\viewfd\url\is-079uv.tmp
%ProgramFiles(x86)%\viewfd\url\is-d44vn.tmp
%ProgramFiles(x86)%\viewfd\url\is-6nsvq.tmp
%ProgramFiles(x86)%\viewfd\url\is-lghdi.tmp
%ProgramFiles(x86)%\viewfd\url\is-6edkh.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-qrh2l.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-l6q1e.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-ig5km.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-61v2l.tmp
%ProgramFiles(x86)%\viewfd\is-2klfb.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-luvs7.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-82cvv.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-5o211.tmp
%ProgramFiles(x86)%\viewfd\data\is-3039r.tmp
%ProgramFiles(x86)%\viewfd\forms\is-p4ah3.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-b8qtj.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-fsi5b.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-r28qc.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-c4eap.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-eqn11.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-kfc5j.tmp
%ProgramFiles(x86)%\viewfd\browser\is-53rcb.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-see6l.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-2h4qk.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-jrj4i.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-qmqsg.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-ogajc.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-jde23.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-cnfov.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-qpidi.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-et9vq.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-21rj7.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-avo1f.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-sl7sh.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-6u4ba.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-3189u.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-s7oe3.tmp
%TEMP%\is-fp0g6.tmp\_isetup\_setup64.tmp
%TEMP%\is-fp0g6.tmp\_isetup\_shfoldr.dll
%TEMP%\is-fp0g6.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-dgf3m.tmp
%ProgramFiles(x86)%\viewfd\7-zip\lang\is-8u6oa.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-9odvq.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-pff6h.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-kfeec.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-stgkq.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-2i6dj.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-5ipv9.tmp
%ProgramFiles(x86)%\viewfd\backup\is-7i1h6.tmp
%ProgramFiles(x86)%\viewfd\browser\is-pkcjj.tmp
%ProgramFiles(x86)%\viewfd\browser\is-am9u6.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-m5kca.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-3g7ha.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-b1a1f.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-n2c6i.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-0ub59.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-48ip2.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-pm0v6.tmp
%TEMP%\is-fp0g6.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\viewfd\browser\is-99vmb.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-952fm.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-6fkha.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-o0jdo.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-fv3h1.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-5eq19.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-0uobs.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-lmsv1.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-4vsm5.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-atetu.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-k0ka2.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-uaa11.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-qu4n3.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-stoln.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-rjd9h.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-43vfl.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-t7s8k.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-m2igc.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-122ka.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-k6vqa.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-3uojg.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-okupm.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-kgp1s.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-udcp3.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ba9ke.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-af51d.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-f7h5q.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-f4vf4.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-886ik.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-538fp.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-6ud15.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-udgsh.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-ltv8l.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-8jmld.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-ra16e.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-u39hu.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-kftqi.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-sdvhu.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-8iu46.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-2qchi.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ipdnd.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-uk76v.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-i8il3.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-jis17.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-em253.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-f3ssn.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-ian80.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-5iaal.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-j5ub8.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-m7hee.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-jl3vj.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-lu7rj.tmp
%ProgramFiles(x86)%\viewfd\graphic\grids\is-rj7s1.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-dgf3m.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\ini\is-efbf2.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-lprjp.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\lsd\is-3r9ll.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-4lai5.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-fgs11.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-p1sck.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-74jcr.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-54od5.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\ini\is-knn1v.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-rugop.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-m9jat.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-jar2e.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-m0d8d.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-vpbvd.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-fp0gp.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-obluq.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-oeip9.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-cl32s.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-dqtd1.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-lqbcu.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-mu2pa.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\ini\is-p9hbl.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\ini\is-s9kt8.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\ini\is-tq6s7.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-jaifi.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-0aauv.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-kobp9.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-3vnv2.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-bl577.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-b618b.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-snm75.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-e3ivd.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-r7efv.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-qvhbn.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-33qn3.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-veq6h.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-e5tai.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-0iqf0.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-aanmg.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-ggbi5.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-mgvbn.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-c1snq.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-nfrhf.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-cpp42.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-4rcvv.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-7kl31.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-nfo1a.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-hjda1.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-mc0bp.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-78j4f.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-l42io.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-5ufkg.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-hpo0g.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-21dck.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-rspqh.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-f87md.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-kc3gt.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-tc71l.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-00qip.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-chdqh.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-fedsk.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-2klfb.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\is-de7m6.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-3386m.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-5ce0e.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-ta35e.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-jpdjj.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-8ad4k.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-t7bd3.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-krdnl.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\url\search\is-61v2l.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-ig5km.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\url\search\is-gl1j5.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\url\help\is-l6q1e.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-s4j3q.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-laq88.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-qmkrk.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-2mkeq.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-t8v9u.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-r3tpq.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-1n7ie.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-87mrr.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-l03i4.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-d7c5o.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-hqct6.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-104sk.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-8gad4.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-cthvr.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-dlrul.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-079uv.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-d44vn.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-6nsvq.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-lghdi.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-6edkh.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-qrh2l.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\is-5oodm.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-qkdnj.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-60fr7.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-luvs7.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-fsi5b.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-r28qc.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-c4eap.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-eqn11.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-kfc5j.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-see6l.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-5ipv9.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-2h4qk.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\forms\is-p4ah3.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-b8qtj.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-jrj4i.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-jde23.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-cnfov.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-qpidi.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-et9vq.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-21rj7.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-2i6dj.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-952fm.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6fkha.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-qmqsg.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ogajc.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\data\is-3039r.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-5o211.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-sl7sh.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-9odvq.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-pff6h.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\7-zip\is-kfeec.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-stgkq.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-7i1h6.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-53rcb.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-99vmb.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-pkcjj.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-am9u6.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-8u6oa.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-m5kca.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-b1a1f.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-n2c6i.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-0ub59.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-48ip2.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-pm0v6.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-s7oe3.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-3189u.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-6u4ba.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-avo1f.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-3g7ha.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-o0jdo.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6ud15.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-udgsh.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-ltv8l.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-0uobs.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-lmsv1.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-4vsm5.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-atetu.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-k0ka2.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-uaa11.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-qu4n3.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-stoln.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-82cvv.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-rjd9h.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-t7s8k.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-m2igc.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-122ka.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-k6vqa.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-3uojg.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-okupm.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-kgp1s.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-udcp3.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ba9ke.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-af51d.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ipdnd.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-5eq19.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-f7h5q.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-fv3h1.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-886ik.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-8jmld.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ra16e.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-u39hu.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-kftqi.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-sdvhu.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-8iu46.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-2qchi.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-538fp.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-f4vf4.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-i8il3.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-jis17.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-em253.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-f3ssn.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-ian80.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-5iaal.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-j5ub8.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-m7hee.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-jl3vj.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-lu7rj.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-uk76v.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-rj7s1.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-43vfl.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\is-khh22.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '' WindowName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}'

Creates and executes the following

'%TEMP%\is-n9r1s.tmp\is-mbor4.tmp' /SL4 $B0232 "<Full path to file>" 7168136 141312
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' 57d1b0859fe7ed8c68ddb7cba79883aa

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней