Trojan.DownLoader45.8765

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-cotvj.tmp\is-vjmg4.tmp
%ProgramFiles(x86)%\viewfd\ini\is-4dpth.tmp
%ProgramFiles(x86)%\viewfd\ini\is-5mpri.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-biupv.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-nrpr8.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-v5kfu.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-r12uk.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-vd1c9.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-h2g5s.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-kbjg4.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-psjmh.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-30amg.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-uedp7.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9itbq.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9q980.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-6r2h4.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-1euc1.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-kn4kp.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-t2jbp.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-trhn4.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-5mp90.tmp
%ProgramFiles(x86)%\viewfd\ini\is-4b0c1.tmp
%ProgramFiles(x86)%\viewfd\ini\is-c8kmi.tmp
%ProgramFiles(x86)%\viewfd\ini\is-c0dsi.tmp
%ProgramFiles(x86)%\viewfd\ini\is-rtrf4.tmp
%ProgramFiles(x86)%\viewfd\ini\is-ssa93.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-2rrqk.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-g96lg.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-g3v64.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-fkdci.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-9mucu.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-8tdg6.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-4836m.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-tvamd.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-23v16.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-tom0o.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-h77mo.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-nhn4c.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-8ocj2.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-i55so.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-nvkbc.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-pekbq.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-pej2a.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-bjdo2.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-ri0v0.tmp
%ProgramFiles(x86)%\viewfd\ini\is-1de4t.tmp
%ProgramFiles(x86)%\viewfd\ini\is-hdpin.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-idf69.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-3rusi.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-390el.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-6s28g.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-6unev.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-rm7k5.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-un0i9.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-vnr74.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-uiu6g.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-2c9nm.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-q0qir.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-o1akv.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-f7e2r.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-j36ob.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-hofl4.tmp
%ProgramFiles(x86)%\viewfd\is-d839o.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-afe32.tmp
%ProgramFiles(x86)%\viewfd\is-vs0ts.tmp
%ProgramFiles(x86)%\viewfd\is-632vs.tmp
%ProgramFiles(x86)%\viewfd\is-hsqs0.tmp
%ProgramFiles(x86)%\viewfd\is-g7u3v.tmp
%ProgramFiles(x86)%\viewfd\is-jmhk2.tmp
%ProgramFiles(x86)%\viewfd\is-f3bdp.tmp
%ProgramFiles(x86)%\viewfd\is-07dsl.tmp
%ProgramFiles(x86)%\viewfd\is-i69e9.tmp
%ProgramFiles(x86)%\viewfd\is-447al.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\search\is-3po00.tmp
%ProgramFiles(x86)%\viewfd\search\is-ge5m1.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-ur5k0.tmp
%ProgramFiles(x86)%\viewfd\search\is-sjoqh.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ja69g.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-fsghc.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-g0c91.tmp
%ProgramFiles(x86)%\viewfd\programs\is-3l9gk.tmp
%ProgramFiles(x86)%\viewfd\radio\is-sv0co.tmp
%ProgramFiles(x86)%\viewfd\radio\is-dji8l.tmp
%ProgramFiles(x86)%\viewfd\reports\is-u5h0f.tmp
%ProgramFiles(x86)%\viewfd\search\is-pbdkn.tmp
%ProgramFiles(x86)%\viewfd\search\is-vajc9.tmp
%ProgramFiles(x86)%\viewfd\search\is-098t9.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\url\search\is-m4na1.tmp
%ProgramFiles(x86)%\viewfd\search\is-d10dq.tmp
%ProgramFiles(x86)%\viewfd\soft\is-7vibv.tmp
%ProgramFiles(x86)%\viewfd\url\is-i9h6v.tmp
%ProgramFiles(x86)%\viewfd\url\is-4td39.tmp
%ProgramFiles(x86)%\viewfd\url\is-888r3.tmp
%ProgramFiles(x86)%\viewfd\url\is-mmd5f.tmp
%ProgramFiles(x86)%\viewfd\url\is-kfapi.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-1fev8.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-0as1u.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-i7uei.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-ahs0l.tmp
%ProgramFiles(x86)%\viewfd\is-mg7rc.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-bnrtf.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-dedu0.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-athth.tmp
%ProgramFiles(x86)%\viewfd\data\is-76o5q.tmp
%ProgramFiles(x86)%\viewfd\forms\is-cqu0h.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-do3s9.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-d1kma.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-5ui4o.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-a5sa4.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-e19na.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-rmpke.tmp
%ProgramFiles(x86)%\viewfd\browser\is-jjscl.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-03hea.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-mb1sb.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-f1akk.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-0vvi8.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-shtrm.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-e49l4.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-fdi7k.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-pq94b.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-hpvl5.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-n2cff.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-jah1c.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-3kj5h.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-cpv5p.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-4n21a.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-quch9.tmp
%TEMP%\is-8jb6n.tmp\_isetup\_setup64.tmp
%TEMP%\is-8jb6n.tmp\_isetup\_shfoldr.dll
%TEMP%\is-8jb6n.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-91qho.tmp
%ProgramFiles(x86)%\viewfd\7-zip\lang\is-r6ti5.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-p142f.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-6u1r9.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-0vgri.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-c76i9.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-qc1i7.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-appou.tmp
%ProgramFiles(x86)%\viewfd\backup\is-5cge5.tmp
%ProgramFiles(x86)%\viewfd\browser\is-a6q34.tmp
%ProgramFiles(x86)%\viewfd\browser\is-p3ntb.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-s0uvl.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-9p47d.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-ckfre.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-3v91q.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-b9acu.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-fj9st.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-osb5t.tmp
%TEMP%\is-8jb6n.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\viewfd\browser\is-ek55h.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-01rsa.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-ners2.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-h4ht1.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-84246.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-8ghii.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-blmpq.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-cogq8.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-8nq9n.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-dvmp9.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-qaeic.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-r3s80.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1lqdf.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-meq70.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-bp055.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-137id.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-48he5.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-i8ulg.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-faqte.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-4uile.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-5d5ui.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-fat2g.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-o5a5f.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ktj0j.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-fgc5d.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8iifp.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-hpis5.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-rk96t.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-9b97j.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-jngh1.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-52md5.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-054lu.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-gcar6.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-pobjl.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-63155.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-k0dgv.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-3nmh8.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-9f3d0.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-nlar0.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-klrh4.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-9d4ur.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-i34i3.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-c8r3d.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-6ucu5.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-q8819.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-jl131.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-mou74.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-a3n3r.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-gtvsm.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-r8h76.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-fnb2u.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-oj4hu.tmp
%ProgramFiles(x86)%\viewfd\graphic\grids\is-t9ft4.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-91qho.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\ini\is-4dpth.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-5mpri.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\lsd\is-biupv.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-nrpr8.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-v5kfu.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-r12uk.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-vd1c9.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-h2g5s.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\ini\is-4b0c1.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-c8kmi.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-kbjg4.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-uedp7.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9itbq.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9q980.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-6r2h4.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-1euc1.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-kn4kp.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-t2jbp.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-trhn4.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-30amg.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-h77mo.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\ini\is-c0dsi.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\ini\is-rtrf4.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\ini\is-ssa93.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-g96lg.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-g3v64.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-fkdci.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-9mucu.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-8tdg6.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-4836m.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-tvamd.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-23v16.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-nhn4c.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-2rrqk.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-psjmh.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-8ocj2.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-i55so.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-nvkbc.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-pekbq.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-pej2a.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-bjdo2.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-ri0v0.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-1de4t.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-hdpin.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-3rusi.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-5mp90.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-tom0o.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-390el.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-6s28g.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-ur5k0.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-3po00.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-rm7k5.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-un0i9.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-vnr74.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-uiu6g.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-2c9nm.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-q0qir.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-o1akv.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-f7e2r.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-j36ob.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-hofl4.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-mg7rc.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\is-d839o.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-vs0ts.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-632vs.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-hsqs0.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-g7u3v.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-jmhk2.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-f3bdp.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-07dsl.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\url\search\is-ahs0l.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-i7uei.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\url\search\is-m4na1.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\url\help\is-0as1u.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-6unev.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ja69g.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-fsghc.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-g0c91.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-3l9gk.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-sv0co.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-dji8l.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-u5h0f.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-pbdkn.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-vajc9.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-098t9.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-sjoqh.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-ge5m1.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-d10dq.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-7vibv.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-i9h6v.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-4td39.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-888r3.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-mmd5f.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-kfapi.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-1fev8.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\is-i69e9.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-idf69.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-afe32.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-bnrtf.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-d1kma.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-5ui4o.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-a5sa4.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-e19na.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-rmpke.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-03hea.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-appou.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-mb1sb.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\forms\is-cqu0h.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-do3s9.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-f1akk.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-e49l4.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-fdi7k.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-pq94b.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-hpvl5.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-n2cff.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-qc1i7.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-01rsa.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ners2.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-0vvi8.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-shtrm.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\data\is-76o5q.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-athth.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-3kj5h.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-p142f.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-6u1r9.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\7-zip\is-0vgri.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-c76i9.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-5cge5.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-jjscl.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-ek55h.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-a6q34.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-p3ntb.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-r6ti5.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-s0uvl.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-ckfre.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-3v91q.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-b9acu.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-fj9st.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-osb5t.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-quch9.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-4n21a.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-cpv5p.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-jah1c.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-9p47d.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-h4ht1.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-52md5.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-054lu.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-gcar6.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-blmpq.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-cogq8.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-8nq9n.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-dvmp9.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-qaeic.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-r3s80.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1lqdf.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-meq70.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-dedu0.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-bp055.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-48he5.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-i8ulg.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-faqte.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-4uile.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-5d5ui.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-fat2g.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-o5a5f.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ktj0j.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-fgc5d.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8iifp.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-9d4ur.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-8ghii.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-hpis5.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-84246.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-9b97j.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-pobjl.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-63155.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-k0dgv.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-3nmh8.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-9f3d0.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-nlar0.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-klrh4.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-jngh1.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-rk96t.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-c8r3d.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-6ucu5.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-q8819.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-jl131.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-mou74.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-a3n3r.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-gtvsm.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-r8h76.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-fnb2u.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-oj4hu.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-i34i3.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-t9ft4.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-137id.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\is-447al.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}' WindowName: ''

Creates and executes the following

'%TEMP%\is-cotvj.tmp\is-vjmg4.tmp' /SL4 $140108 "<Full path to file>" 7023347 52736
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' 8e3a6ff2f09c3cc9c0376e763ec86139

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней