Trojan.DownLoader45.9647

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-a51cc.tmp\is-jf214.tmp
%ProgramFiles(x86)%\viewfd\ini\is-8cnvd.tmp
%ProgramFiles(x86)%\viewfd\ini\is-lf3ke.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-1013q.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-qscg2.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-8o59g.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-cd8lv.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-uv6mh.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-gd64k.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-nbq38.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-n174c.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-s0nln.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-71pc8.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9g1cd.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-lavid.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-u1dao.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-22c7m.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-26h8m.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tg6uq.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-d2a3o.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-f3jbn.tmp
%ProgramFiles(x86)%\viewfd\ini\is-st92c.tmp
%ProgramFiles(x86)%\viewfd\ini\is-prf1r.tmp
%ProgramFiles(x86)%\viewfd\ini\is-27r6b.tmp
%ProgramFiles(x86)%\viewfd\ini\is-sqk96.tmp
%ProgramFiles(x86)%\viewfd\ini\is-1nj16.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-pkmq9.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-5omvd.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-qdfh6.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-dp93e.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-n9ast.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-m95jd.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-rlbo7.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-3fllg.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-fj728.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-r38vr.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-3lkg8.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-37558.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-r0r85.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-ggt9l.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-8kvtd.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-90eth.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-4ibg9.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-n0q9c.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-dlbf3.tmp
%ProgramFiles(x86)%\viewfd\ini\is-m9dku.tmp
%ProgramFiles(x86)%\viewfd\ini\is-01u0e.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-2qr8a.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-ibih9.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-nk21l.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-797t1.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-pjo13.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-0k3gc.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-0ou2q.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-6jpb9.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-3rpiq.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-vhqap.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-f03tq.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-abp57.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-bb5jg.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-8in96.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-q3oss.tmp
%ProgramFiles(x86)%\viewfd\is-k44q4.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-hcdbi.tmp
%ProgramFiles(x86)%\viewfd\is-gg2lc.tmp
%ProgramFiles(x86)%\viewfd\is-o3ugo.tmp
%ProgramFiles(x86)%\viewfd\is-criq0.tmp
%ProgramFiles(x86)%\viewfd\is-avd9f.tmp
%ProgramFiles(x86)%\viewfd\is-s02t2.tmp
%ProgramFiles(x86)%\viewfd\is-glcu8.tmp
%ProgramFiles(x86)%\viewfd\is-70t0c.tmp
%ProgramFiles(x86)%\viewfd\is-03ao9.tmp
%ProgramFiles(x86)%\viewfd\is-ahai1.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\search\is-mia9b.tmp
%ProgramFiles(x86)%\viewfd\search\is-7e7cl.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-b6b5v.tmp
%ProgramFiles(x86)%\viewfd\search\is-9cdnu.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-beetl.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-638ln.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-n8lsa.tmp
%ProgramFiles(x86)%\viewfd\programs\is-7cu4h.tmp
%ProgramFiles(x86)%\viewfd\radio\is-svehs.tmp
%ProgramFiles(x86)%\viewfd\radio\is-gqc9o.tmp
%ProgramFiles(x86)%\viewfd\reports\is-gm3bc.tmp
%ProgramFiles(x86)%\viewfd\search\is-fsa6q.tmp
%ProgramFiles(x86)%\viewfd\search\is-60mg6.tmp
%ProgramFiles(x86)%\viewfd\search\is-5pe0e.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\url\search\is-fiqk8.tmp
%ProgramFiles(x86)%\viewfd\search\is-8cmge.tmp
%ProgramFiles(x86)%\viewfd\soft\is-hkkgk.tmp
%ProgramFiles(x86)%\viewfd\url\is-9vejp.tmp
%ProgramFiles(x86)%\viewfd\url\is-0fdeq.tmp
%ProgramFiles(x86)%\viewfd\url\is-sjtea.tmp
%ProgramFiles(x86)%\viewfd\url\is-li250.tmp
%ProgramFiles(x86)%\viewfd\url\is-hg9kk.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-bj6q2.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-orn9i.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-84asa.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-8emf5.tmp
%ProgramFiles(x86)%\viewfd\is-j0n3h.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-2eg8f.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-5mk6c.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-1kg0k.tmp
%ProgramFiles(x86)%\viewfd\data\is-1mnir.tmp
%ProgramFiles(x86)%\viewfd\forms\is-sanl6.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-qa355.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-vrsa5.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-ir0dd.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-q7sgv.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-opn2v.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-3i9ub.tmp
%ProgramFiles(x86)%\viewfd\browser\is-9icqk.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-mjmdf.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-73pan.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-crbk1.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-31f4q.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-vrh3v.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-4qko3.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-s6flt.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-vka95.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-fsr0n.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-jnhar.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-neu08.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-oahpe.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-k12g2.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-o6nv2.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-1ioc4.tmp
%TEMP%\is-h2r6b.tmp\_isetup\_setup64.tmp
%TEMP%\is-h2r6b.tmp\_isetup\_shfoldr.dll
%TEMP%\is-h2r6b.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-j1jtb.tmp
%ProgramFiles(x86)%\viewfd\7-zip\lang\is-purfn.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-d957p.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-5phdc.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-kgvbi.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-qc2dp.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-u9m2n.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-093oa.tmp
%ProgramFiles(x86)%\viewfd\backup\is-14ch1.tmp
%ProgramFiles(x86)%\viewfd\browser\is-cec6t.tmp
%ProgramFiles(x86)%\viewfd\browser\is-sekhm.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-128cq.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-2d6ep.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-liarr.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-ovfdf.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-uqmmn.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-prlr9.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-aqv1c.tmp
%TEMP%\is-h2r6b.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\viewfd\browser\is-fvr8p.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-mgvk9.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-gmgfa.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-h2i6o.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ajvfi.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-q0qd1.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-bs15k.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-mobqp.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-cdl7p.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-09gp2.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-a410p.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-7dqth.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-pnfsi.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-aq240.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-fp94i.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-jh10n.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-53umm.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-qfipi.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-f98h6.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-nojlj.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-l6bis.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-2vc9g.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ue5fu.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ndnqc.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-5a11s.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-kar7j.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-ldgqh.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-4aqiq.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-lfae5.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-8brph.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-896d8.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-nnd3t.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-9tv4f.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-hjjji.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-1s5s7.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-1q4pq.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-49p8v.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-7s8t0.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-2udad.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-bmqrn.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-vo25d.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-nmjv6.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-huv6h.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-ivjjd.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-k0k6t.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-6m48p.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-ortjc.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-q5hej.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-036lt.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-02iml.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-dr07m.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-ak2v2.tmp
%ProgramFiles(x86)%\viewfd\graphic\grids\is-dg1o5.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-j1jtb.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\ini\is-8cnvd.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-lf3ke.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\lsd\is-1013q.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-qscg2.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-8o59g.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-cd8lv.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-uv6mh.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-gd64k.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\ini\is-st92c.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-prf1r.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-nbq38.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-71pc8.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9g1cd.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-lavid.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-u1dao.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-22c7m.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-26h8m.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tg6uq.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-d2a3o.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-s0nln.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-3lkg8.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\ini\is-27r6b.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\ini\is-sqk96.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\ini\is-1nj16.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-5omvd.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-qdfh6.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-dp93e.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-n9ast.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-m95jd.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-rlbo7.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-3fllg.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-fj728.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-37558.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-pkmq9.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-n174c.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-r0r85.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ggt9l.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-8kvtd.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-90eth.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-4ibg9.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-n0q9c.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-dlbf3.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-m9dku.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-01u0e.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ibih9.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-f3jbn.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-r38vr.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-nk21l.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-797t1.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-b6b5v.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-mia9b.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-0k3gc.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-0ou2q.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-6jpb9.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-3rpiq.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-vhqap.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-f03tq.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-abp57.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-bb5jg.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-8in96.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-q3oss.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-j0n3h.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\is-k44q4.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-gg2lc.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-o3ugo.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-criq0.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-avd9f.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-s02t2.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-glcu8.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-70t0c.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\url\search\is-8emf5.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-84asa.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\url\search\is-fiqk8.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\url\help\is-orn9i.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-pjo13.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-beetl.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-638ln.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-n8lsa.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-7cu4h.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-svehs.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-gqc9o.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-gm3bc.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-fsa6q.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-60mg6.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-5pe0e.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-9cdnu.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-7e7cl.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-8cmge.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-hkkgk.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-9vejp.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-0fdeq.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-sjtea.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-li250.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-hg9kk.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-bj6q2.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\is-03ao9.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-2qr8a.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-hcdbi.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-2eg8f.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-vrsa5.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-ir0dd.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-q7sgv.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-opn2v.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-3i9ub.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-mjmdf.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-093oa.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-73pan.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\forms\is-sanl6.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-qa355.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-crbk1.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-4qko3.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-s6flt.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-vka95.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-fsr0n.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-jnhar.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-u9m2n.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-mgvk9.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-gmgfa.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-31f4q.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-vrh3v.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\data\is-1mnir.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-1kg0k.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-oahpe.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-d957p.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-5phdc.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\7-zip\is-kgvbi.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-qc2dp.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-14ch1.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-9icqk.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-fvr8p.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-cec6t.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-sekhm.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-purfn.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-128cq.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-liarr.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-ovfdf.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-uqmmn.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-prlr9.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-aqv1c.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-1ioc4.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-o6nv2.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-k12g2.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-neu08.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-2d6ep.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-h2i6o.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-896d8.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-nnd3t.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-9tv4f.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-bs15k.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-mobqp.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-cdl7p.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-09gp2.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-a410p.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-7dqth.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-pnfsi.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-aq240.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-5mk6c.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-fp94i.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-53umm.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-qfipi.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-f98h6.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-nojlj.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-l6bis.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-2vc9g.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ue5fu.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ndnqc.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-5a11s.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-kar7j.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-vo25d.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-q0qd1.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-ldgqh.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ajvfi.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-lfae5.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-hjjji.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-1s5s7.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-1q4pq.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-49p8v.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-7s8t0.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-2udad.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-bmqrn.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-8brph.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-4aqiq.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-huv6h.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-ivjjd.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-k0k6t.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-6m48p.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-ortjc.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-q5hej.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-036lt.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-02iml.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-dr07m.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-ak2v2.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-nmjv6.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-dg1o5.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-jh10n.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\is-ahai1.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '{1E61A93F-EC60-4AD7-A3C8-3DDC3E02E405}' WindowName: ''

Creates and executes the following

'%TEMP%\is-a51cc.tmp\is-jf214.tmp' /SL4 $B0238 "<Full path to file>" 6860825 52736
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' cfba8cb415c0693f48f99b6cb597dc6d

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней