Trojan.DownLoader45.7054

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-q5de4.tmp\is-9tgp0.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-kge28.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-0gf4l.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-vjbuv.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-k5p9p.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-h4m42.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ipgsp.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-32k2l.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-86uj5.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-soc87.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-6a061.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-sar9r.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-40vu5.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-p7ovt.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-f67lu.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-b2g6a.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-2du3e.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-lgsdd.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-1gnod.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-d6rdp.tmp
%ProgramFiles(x86)%\viewfd\ini\is-bc9qf.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-44h5k.tmp
%ProgramFiles(x86)%\viewfd\ini\is-nrbt7.tmp
%ProgramFiles(x86)%\viewfd\ini\is-nh0h2.tmp
%ProgramFiles(x86)%\viewfd\ini\is-v3ccq.tmp
%ProgramFiles(x86)%\viewfd\ini\is-uk8sn.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-lotsl.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-9knt7.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-he807.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-0u6gj.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-s9d8n.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-2ou0i.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-q34jv.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-k9c29.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-jdsfq.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-qtpc2.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-k7m5e.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-on4db.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-i11sd.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-anp0v.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-s6fc3.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-rtk8v.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-j2ujh.tmp
%ProgramFiles(x86)%\viewfd\ini\is-hnjbi.tmp
%ProgramFiles(x86)%\viewfd\ini\is-pc8k0.tmp
%ProgramFiles(x86)%\viewfd\ini\is-9eufg.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-4j3md.tmp
%ProgramFiles(x86)%\viewfd\ini\is-rudf5.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-oi605.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-p270d.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-7aje9.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ksi6a.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-m38g5.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-l61jl.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-mdvpf.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-ik1ro.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-hnc1g.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-6361g.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-6hjhk.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-diojh.tmp
%ProgramFiles(x86)%\viewfd\is-ff1jd.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-e971h.tmp
%ProgramFiles(x86)%\viewfd\is-sb51t.tmp
%ProgramFiles(x86)%\viewfd\is-0j0rp.tmp
%ProgramFiles(x86)%\viewfd\is-eld7h.tmp
%ProgramFiles(x86)%\viewfd\is-mfatk.tmp
%ProgramFiles(x86)%\viewfd\is-jq6kb.tmp
%ProgramFiles(x86)%\viewfd\is-9etf6.tmp
%ProgramFiles(x86)%\viewfd\is-dvl3m.tmp
%ProgramFiles(x86)%\viewfd\is-lnehe.tmp
%ProgramFiles(x86)%\viewfd\is-gi5qe.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\soft\is-p6l6e.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-mkddm.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-oeg3l.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-d79mi.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-unfbi.tmp
%ProgramFiles(x86)%\viewfd\programs\is-jog31.tmp
%ProgramFiles(x86)%\viewfd\radio\is-cue8p.tmp
%ProgramFiles(x86)%\viewfd\radio\is-7tokq.tmp
%ProgramFiles(x86)%\viewfd\reports\is-mplt8.tmp
%ProgramFiles(x86)%\viewfd\search\is-2lv4k.tmp
%ProgramFiles(x86)%\viewfd\search\is-ds7rq.tmp
%ProgramFiles(x86)%\viewfd\search\is-5i0au.tmp
%ProgramFiles(x86)%\viewfd\search\is-mi2uq.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-sm6bs.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ja741.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-q9dq1.tmp
%ProgramFiles(x86)%\viewfd\search\is-531be.tmp
%ProgramFiles(x86)%\viewfd\url\is-q0u66.tmp
%ProgramFiles(x86)%\viewfd\url\is-k9r9k.tmp
%ProgramFiles(x86)%\viewfd\url\is-sdqe4.tmp
%ProgramFiles(x86)%\viewfd\url\is-hi24r.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-a1cnl.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-7ptrv.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-ju8gn.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-dbekq.tmp
%ProgramFiles(x86)%\viewfd\search\is-rrnor.tmp
%ProgramFiles(x86)%\viewfd\soft\is-51834.tmp
%ProgramFiles(x86)%\viewfd\url\is-2u2qo.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-f0lm3.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-s2qqs.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-04bum.tmp
%ProgramFiles(x86)%\viewfd\forms\is-42r2u.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-7v28a.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-r1dif.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-3ejhh.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-obsa1.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-jc6mr.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-bdri3.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-8pg2j.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-dkrub.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-62o1v.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-2kpnc.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-nbtm1.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-aqdej.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-6ekjl.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-r0q09.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-uo4vk.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-m3jti.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-fnupg.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-iiu4c.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-kdj62.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-83ue9.tmp
%ProgramFiles(x86)%\viewfd\data\is-m72j3.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-dosri.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-as0if.tmp
%TEMP%\is-98ua1.tmp\_isetup\_regdll.tmp
%TEMP%\is-98ua1.tmp\_isetup\_shfoldr.dll
%TEMP%\is-98ua1.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-srpbi.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-cvs1g.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-i7qme.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-00i3b.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-ct5p6.tmp
%ProgramFiles(x86)%\viewfd\backup\is-te9gm.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-abfn3.tmp
%ProgramFiles(x86)%\viewfd\browser\is-g0apa.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-fu2rp.tmp
%ProgramFiles(x86)%\viewfd\browser\is-sejvh.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-h285q.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-4qn66.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-i47lb.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-fkt3b.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-jnvkj.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-h9936.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-b9g5a.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-hsiea.tmp
%ProgramFiles(x86)%\viewfd\browser\is-2424q.tmp
%TEMP%\is-98ua1.tmp\_isetup\_setup64.tmp
%ProgramFiles(x86)%\viewfd\browser\is-h46bc.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-7s306.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-qqrqi.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1rnoj.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-6mlh1.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ieark.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-vf6iq.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-jiei1.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-jgh69.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-jcc4s.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ejvs1.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-heb75.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1m0oj.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-lgp0q.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-n4mnv.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-omniu.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-jjqqn.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-glnov.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-qd36h.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-q59pk.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-l6m5c.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-5bkta.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-kvr7a.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-081kg.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-6jvj2.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-vk2e1.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-mruo3.tmp
%ProgramFiles(x86)%\viewfd\is-7oeml.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\graphic\grids\is-g4snl.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-82u6j.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-5hpcm.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-oc72a.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-50g2o.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-9isa5.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-jst9h.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-ant9l.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-vmcqd.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-psfve.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-nfqc8.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-optje.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-eojeu.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-1pkd6.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-g4rui.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-k4lgp.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-od0k4.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-mloe3.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-odou7.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-gpim3.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-b6fhn.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-mckh0.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-346o7.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-24n6u.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-srpbi.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\lsd\is-kge28.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-0gf4l.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-vjbuv.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-k5p9p.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-h4m42.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ipgsp.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-32k2l.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\ini\is-bc9qf.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-86uj5.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\ini\is-nrbt7.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-44h5k.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-40vu5.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-p7ovt.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-f67lu.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-b2g6a.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-2du3e.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-lgsdd.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-1gnod.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-6a061.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-d6rdp.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-sar9r.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\ini\is-nh0h2.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-v3ccq.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-uk8sn.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-9knt7.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-he807.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-0u6gj.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-s9d8n.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-2ou0i.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-q34jv.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-k9c29.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-qtpc2.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-p270d.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-soc87.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-oi605.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-i11sd.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-anp0v.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-s6fc3.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-rtk8v.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-j2ujh.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-hnjbi.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-pc8k0.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\ini\is-9eufg.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-on4db.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\ini\is-rudf5.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-4j3md.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-lotsl.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-jdsfq.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ja741.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\url\soft\is-p6l6e.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-mkddm.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-m38g5.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-l61jl.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-mdvpf.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-ik1ro.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-hnc1g.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-6361g.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\url\search\is-e971h.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-oeg3l.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-6hjhk.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\is-sb51t.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-7oeml.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-0j0rp.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-eld7h.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-mfatk.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-jq6kb.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-9etf6.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-dvl3m.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\wallpaper\is-diojh.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-ff1jd.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\url\search\is-d79mi.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-ju8gn.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1m0oj.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ksi6a.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-jog31.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-cue8p.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-7tokq.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-mplt8.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-2lv4k.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-ds7rq.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-5i0au.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-mi2uq.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-531be.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-rrnor.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-51834.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-2u2qo.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-q0u66.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-k9r9k.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-sdqe4.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-hi24r.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-a1cnl.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\url\help\is-7ptrv.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-7aje9.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-q9dq1.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-sm6bs.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-k7m5e.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-f0lm3.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-s2qqs.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-obsa1.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-jc6mr.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-bdri3.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-8pg2j.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-dkrub.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-2kpnc.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-fu2rp.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\formulas\is-7v28a.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-nbtm1.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\formulas\is-3ejhh.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6ekjl.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-uo4vk.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-m3jti.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-fnupg.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-iiu4c.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-abfn3.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-62o1v.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-qqrqi.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-aqdej.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\forms\is-42r2u.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-r0q09.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\data\is-m72j3.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-7s306.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\is-cvs1g.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-00i3b.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-ct5p6.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-te9gm.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-g0apa.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-2424q.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-sejvh.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-h46bc.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-h285q.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-4qn66.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-i7qme.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\colourschemes\is-i47lb.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-jnvkj.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-h9936.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-b9g5a.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-hsiea.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-as0if.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-dosri.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-83ue9.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-kdj62.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-lgp0q.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-fkt3b.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-346o7.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-r1dif.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-82u6j.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-6mlh1.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-vf6iq.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-jiei1.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-jgh69.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-jcc4s.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ejvs1.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-heb75.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-omniu.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-6jvj2.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-vk2e1.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-mruo3.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-jjqqn.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-glnov.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-qd36h.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-q59pk.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-l6m5c.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-5bkta.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-kvr7a.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-081kg.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-04bum.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-n4mnv.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-5hpcm.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ieark.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-dbekq.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\is-lnehe.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-optje.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-50g2o.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-9isa5.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-jst9h.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ant9l.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-vmcqd.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-psfve.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-eojeu.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-unfbi.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-24n6u.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-oc72a.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-1pkd6.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-k4lgp.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-od0k4.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-mloe3.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-odou7.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-gpim3.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-b6fhn.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-mckh0.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-g4snl.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-nfqc8.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-g4rui.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1rnoj.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\is-gi5qe.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '' WindowName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}'

Creates and executes the following

'%TEMP%\is-q5de4.tmp\is-9tgp0.tmp' /SL4 $F0142 "<Full path to file>" 7037092 141312
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' 8f1873c4e29a3b50ec6cb595506db2c6

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней