Trojan.DownLoader45.4656

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-vtpvm.tmp\is-28b9u.tmp
%ProgramFiles(x86)%\viewfd\ini\is-ttfl2.tmp
%ProgramFiles(x86)%\viewfd\ini\is-cpnpm.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-n0qr2.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-hnll8.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-g5toc.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-b1o9c.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-5sv4k.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-v3kc3.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-255dk.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-u4orj.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-hi52i.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-bgnf8.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-58tgg.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-638fu.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-4f7ba.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9qhbg.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-2vq0o.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7lug8.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-jsqnu.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-sqd1j.tmp
%ProgramFiles(x86)%\viewfd\ini\is-gbgv0.tmp
%ProgramFiles(x86)%\viewfd\ini\is-djrhv.tmp
%ProgramFiles(x86)%\viewfd\ini\is-nfksl.tmp
%ProgramFiles(x86)%\viewfd\ini\is-103br.tmp
%ProgramFiles(x86)%\viewfd\ini\is-nrith.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-opt8g.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-tof7g.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-8a0um.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-e1ovt.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-0dm87.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-jt9t2.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-c2qte.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-1k1ol.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-rn4uu.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-11a25.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-b2vdf.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-9e1lm.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-8rk6e.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-ln4i4.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-e6oss.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-obj3o.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-je4se.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-ddf75.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-0u291.tmp
%ProgramFiles(x86)%\viewfd\ini\is-a96fj.tmp
%ProgramFiles(x86)%\viewfd\ini\is-lus2n.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-919lc.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-m7qub.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-1ram9.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-lc3h2.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-k7k68.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-js4ae.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-0l4m2.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-7m70f.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-37t5q.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-mn8mm.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-vkpqb.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-cjcot.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-sn6et.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-65lf7.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-mhhbv.tmp
%ProgramFiles(x86)%\viewfd\is-8bl57.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-58nvj.tmp
%ProgramFiles(x86)%\viewfd\is-m9jpo.tmp
%ProgramFiles(x86)%\viewfd\is-kkh7l.tmp
%ProgramFiles(x86)%\viewfd\is-741hd.tmp
%ProgramFiles(x86)%\viewfd\is-eqcnf.tmp
%ProgramFiles(x86)%\viewfd\is-gjd01.tmp
%ProgramFiles(x86)%\viewfd\is-ogvu5.tmp
%ProgramFiles(x86)%\viewfd\is-k2ul0.tmp
%ProgramFiles(x86)%\viewfd\is-5r08e.tmp
%ProgramFiles(x86)%\viewfd\is-3jofs.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\search\is-r7ff5.tmp
%ProgramFiles(x86)%\viewfd\search\is-fpo76.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-gpneu.tmp
%ProgramFiles(x86)%\viewfd\search\is-no3d2.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-oelsf.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-tpe8o.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-apvof.tmp
%ProgramFiles(x86)%\viewfd\programs\is-lcl28.tmp
%ProgramFiles(x86)%\viewfd\radio\is-6ssrd.tmp
%ProgramFiles(x86)%\viewfd\radio\is-msu2e.tmp
%ProgramFiles(x86)%\viewfd\reports\is-oofjs.tmp
%ProgramFiles(x86)%\viewfd\search\is-p18ia.tmp
%ProgramFiles(x86)%\viewfd\search\is-9njen.tmp
%ProgramFiles(x86)%\viewfd\search\is-07oi2.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\url\search\is-beh8m.tmp
%ProgramFiles(x86)%\viewfd\search\is-qd1a6.tmp
%ProgramFiles(x86)%\viewfd\soft\is-gcrqd.tmp
%ProgramFiles(x86)%\viewfd\url\is-5i9ho.tmp
%ProgramFiles(x86)%\viewfd\url\is-6r45m.tmp
%ProgramFiles(x86)%\viewfd\url\is-biv5i.tmp
%ProgramFiles(x86)%\viewfd\url\is-h8ri7.tmp
%ProgramFiles(x86)%\viewfd\url\is-a4sjn.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-e496f.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-ekksi.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-p7n46.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-9s6mb.tmp
%ProgramFiles(x86)%\viewfd\is-e1p3v.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-n3c89.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-98ae7.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-khpi5.tmp
%ProgramFiles(x86)%\viewfd\data\is-7q57g.tmp
%ProgramFiles(x86)%\viewfd\forms\is-bdhdd.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-f1fj6.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-6kkpb.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-3iu6d.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-op2ev.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-9g9u0.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-pbhuf.tmp
%ProgramFiles(x86)%\viewfd\browser\is-ter5v.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-1kfb3.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-r8lov.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-4er4a.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-hj339.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-6hktb.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-d07rr.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-rqg1k.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-p9g0o.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-apb7k.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-jk42b.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-73c7t.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-b034o.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-p0o4j.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-cllq6.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-o4k2u.tmp
%TEMP%\is-706q3.tmp\_isetup\_setup64.tmp
%TEMP%\is-706q3.tmp\_isetup\_shfoldr.dll
%TEMP%\is-706q3.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-fuit3.tmp
%ProgramFiles(x86)%\viewfd\7-zip\lang\is-8vevd.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-ac1b5.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-gs379.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-abiq5.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-n37no.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-3js13.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-bmktb.tmp
%ProgramFiles(x86)%\viewfd\backup\is-jjr7t.tmp
%ProgramFiles(x86)%\viewfd\browser\is-2224d.tmp
%ProgramFiles(x86)%\viewfd\browser\is-89nq9.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-lq50r.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-evivr.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-71si5.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-hg721.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-j28ml.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-3tqnv.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-dge1o.tmp
%TEMP%\is-706q3.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\viewfd\browser\is-miqug.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-fl6p7.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-df390.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-sfrc7.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-nukfr.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-a9h3c.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-jtmuc.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-doe3j.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-rhbkr.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-kdnvd.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-5mope.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-0oklu.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-lbv7m.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-l9ngi.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-hbgor.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-c5na2.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-hcut3.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-p2luj.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-5c33f.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-bgedv.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-lautq.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-5agl9.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-qvdjs.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-5crr4.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-vuu6k.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-riq4c.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-6953v.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-9b8no.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-l5ba8.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-7nd34.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-bcc1i.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-q406f.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-o9h27.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-ot9t8.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-5h4ln.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-o2b67.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-gsn80.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-8dkt6.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-ono4a.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-fqqq8.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-g1ue9.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-m88nt.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-gns84.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-omk89.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-o54ga.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-v4msm.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-s20fs.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-5esq2.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-b5g0a.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-60jvp.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-c33ub.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-qv7td.tmp
%ProgramFiles(x86)%\viewfd\graphic\grids\is-jaloo.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-fuit3.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\ini\is-ttfl2.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-cpnpm.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\lsd\is-n0qr2.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-hnll8.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-g5toc.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-b1o9c.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-5sv4k.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-v3kc3.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\ini\is-gbgv0.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-djrhv.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-255dk.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-bgnf8.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-58tgg.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-638fu.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-4f7ba.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9qhbg.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-2vq0o.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7lug8.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-jsqnu.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-hi52i.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-b2vdf.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\ini\is-nfksl.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\ini\is-103br.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\ini\is-nrith.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-tof7g.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-8a0um.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-e1ovt.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-0dm87.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-jt9t2.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-c2qte.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-1k1ol.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-rn4uu.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-9e1lm.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-opt8g.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-u4orj.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-8rk6e.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ln4i4.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-e6oss.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-obj3o.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-je4se.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-ddf75.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-0u291.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-a96fj.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-lus2n.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-m7qub.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-sqd1j.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-11a25.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-1ram9.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-lc3h2.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-gpneu.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-r7ff5.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-js4ae.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-0l4m2.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-7m70f.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-37t5q.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-mn8mm.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-vkpqb.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-cjcot.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-sn6et.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-65lf7.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-mhhbv.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-e1p3v.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\is-8bl57.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-m9jpo.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-kkh7l.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-741hd.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-eqcnf.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-gjd01.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-ogvu5.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-k2ul0.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\url\search\is-9s6mb.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-p7n46.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\url\search\is-beh8m.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\url\help\is-ekksi.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-k7k68.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-oelsf.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-tpe8o.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-apvof.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-lcl28.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-6ssrd.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-msu2e.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-oofjs.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-p18ia.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-9njen.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-07oi2.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-no3d2.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-fpo76.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-qd1a6.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-gcrqd.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-5i9ho.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-6r45m.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-biv5i.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-h8ri7.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-a4sjn.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-e496f.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\is-5r08e.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-919lc.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-58nvj.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-n3c89.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-6kkpb.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-3iu6d.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-op2ev.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-9g9u0.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-pbhuf.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-1kfb3.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-bmktb.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-r8lov.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\forms\is-bdhdd.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-f1fj6.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-4er4a.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-d07rr.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-rqg1k.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-p9g0o.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-apb7k.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-jk42b.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-3js13.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-fl6p7.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-df390.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-hj339.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6hktb.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\data\is-7q57g.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-khpi5.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-b034o.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-ac1b5.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-gs379.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\7-zip\is-abiq5.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-n37no.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-jjr7t.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-ter5v.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-miqug.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-2224d.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-89nq9.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-8vevd.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-lq50r.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-71si5.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-hg721.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-j28ml.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-3tqnv.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-dge1o.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-o4k2u.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-cllq6.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-p0o4j.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-73c7t.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-evivr.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-sfrc7.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-bcc1i.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-q406f.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-o9h27.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-jtmuc.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-doe3j.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-rhbkr.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-kdnvd.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-5mope.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-0oklu.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-lbv7m.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-l9ngi.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-98ae7.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-hbgor.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-hcut3.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-p2luj.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-5c33f.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-bgedv.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-lautq.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-5agl9.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-qvdjs.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-5crr4.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-vuu6k.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-riq4c.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-g1ue9.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-a9h3c.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-6953v.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-nukfr.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-l5ba8.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-ot9t8.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-5h4ln.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-o2b67.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-gsn80.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-8dkt6.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ono4a.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-fqqq8.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-7nd34.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-9b8no.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-gns84.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-omk89.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-o54ga.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-v4msm.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-s20fs.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-5esq2.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-b5g0a.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-60jvp.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-c33ub.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-qv7td.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-m88nt.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-jaloo.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-c5na2.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\is-3jofs.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '{1E61A93F-EC60-4AD7-A3C8-3DDC3E02E405}' WindowName: ''

Creates and executes the following

'%TEMP%\is-vtpvm.tmp\is-28b9u.tmp' /SL4 $B0236 "<Full path to file>" 6890044 52736
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' 0312028dd5a4bc4eb7d0e6bf7b6ae82c

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней