Trojan.DownLoader45.9804

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-47jl6.tmp\is-olhjr.tmp
%ProgramFiles(x86)%\viewfd\ini\is-4u4tb.tmp
%ProgramFiles(x86)%\viewfd\ini\is-k2rrk.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-ajvva.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-itjeu.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-2mnfc.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-9s0co.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-avt7s.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-vj6oo.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-83srd.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-utb2d.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-iujfu.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-42v6g.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-cuab6.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-17nlu.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-blebt.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-grbqv.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-193ch.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-icm3h.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-j0cis.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-6g1cs.tmp
%ProgramFiles(x86)%\viewfd\ini\is-cpshc.tmp
%ProgramFiles(x86)%\viewfd\ini\is-ho5qb.tmp
%ProgramFiles(x86)%\viewfd\ini\is-0i3vr.tmp
%ProgramFiles(x86)%\viewfd\ini\is-spfvj.tmp
%ProgramFiles(x86)%\viewfd\ini\is-7po06.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-gekja.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-kqhpv.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-i539h.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-rqvuj.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-vthc4.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-0vr53.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-1khc7.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-0s32v.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-itgl3.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-vl7h3.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-dnlqq.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-jn5gu.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-ovn5v.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-j60k8.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-r9mts.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-arhp8.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-64oqf.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-f37pn.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-nelkb.tmp
%ProgramFiles(x86)%\viewfd\ini\is-gdhgk.tmp
%ProgramFiles(x86)%\viewfd\ini\is-r3mib.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-ijr71.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-280ov.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-oc4hf.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-o2lbg.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-77g70.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-knv8q.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-mlkih.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-3nk5b.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-hg3em.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-56eli.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-d28h9.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-uaqq2.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-pfita.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-1831n.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-o2hsv.tmp
%ProgramFiles(x86)%\viewfd\is-jdafo.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-nj6ck.tmp
%ProgramFiles(x86)%\viewfd\is-07ah0.tmp
%ProgramFiles(x86)%\viewfd\is-q6f8c.tmp
%ProgramFiles(x86)%\viewfd\is-7d5ji.tmp
%ProgramFiles(x86)%\viewfd\is-r3mqp.tmp
%ProgramFiles(x86)%\viewfd\is-qksb5.tmp
%ProgramFiles(x86)%\viewfd\is-91cq7.tmp
%ProgramFiles(x86)%\viewfd\is-amfnr.tmp
%ProgramFiles(x86)%\viewfd\is-qap75.tmp
%ProgramFiles(x86)%\viewfd\is-n9mrv.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\search\is-c4u34.tmp
%ProgramFiles(x86)%\viewfd\search\is-d63u3.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-rlc7k.tmp
%ProgramFiles(x86)%\viewfd\search\is-cg8gn.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-q60en.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-94bcf.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-9oalh.tmp
%ProgramFiles(x86)%\viewfd\programs\is-r5q82.tmp
%ProgramFiles(x86)%\viewfd\radio\is-66fv2.tmp
%ProgramFiles(x86)%\viewfd\radio\is-6ubla.tmp
%ProgramFiles(x86)%\viewfd\reports\is-179km.tmp
%ProgramFiles(x86)%\viewfd\search\is-t492r.tmp
%ProgramFiles(x86)%\viewfd\search\is-hvtvv.tmp
%ProgramFiles(x86)%\viewfd\search\is-qu50n.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\url\search\is-avhrn.tmp
%ProgramFiles(x86)%\viewfd\search\is-o16j3.tmp
%ProgramFiles(x86)%\viewfd\soft\is-37rne.tmp
%ProgramFiles(x86)%\viewfd\url\is-r8kld.tmp
%ProgramFiles(x86)%\viewfd\url\is-eq5kg.tmp
%ProgramFiles(x86)%\viewfd\url\is-b77u8.tmp
%ProgramFiles(x86)%\viewfd\url\is-u9um8.tmp
%ProgramFiles(x86)%\viewfd\url\is-tdgig.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-vpikt.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-vmgb6.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-4sddt.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-tjf20.tmp
%ProgramFiles(x86)%\viewfd\is-hjqvi.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-idfcp.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-6iv61.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-mttr4.tmp
%ProgramFiles(x86)%\viewfd\data\is-qbruq.tmp
%ProgramFiles(x86)%\viewfd\forms\is-t9pmf.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-55q73.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-kjvtf.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-4gjtf.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-d4leo.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-oqorg.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-c0sac.tmp
%ProgramFiles(x86)%\viewfd\browser\is-78r8j.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-tci10.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-m1ea4.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-8h3aj.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-2uvl6.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-siljd.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-ddkop.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-p5fqt.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-40r9p.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-nah9a.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-esmh7.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-khlvt.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-9uqb8.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-45nt9.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-ssaek.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-29la4.tmp
%TEMP%\is-jgtp9.tmp\_isetup\_setup64.tmp
%TEMP%\is-jgtp9.tmp\_isetup\_shfoldr.dll
%TEMP%\is-jgtp9.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-1sujj.tmp
%ProgramFiles(x86)%\viewfd\7-zip\lang\is-unlkb.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-rrfad.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-avojt.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-2erbl.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-jambl.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-tidc2.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-vssfg.tmp
%ProgramFiles(x86)%\viewfd\backup\is-rp7pu.tmp
%ProgramFiles(x86)%\viewfd\browser\is-2bjet.tmp
%ProgramFiles(x86)%\viewfd\browser\is-7esl7.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-2lk83.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-4226m.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-5u80s.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-bada2.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-4hon6.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-uiel5.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-95ko9.tmp
%TEMP%\is-jgtp9.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\viewfd\browser\is-u8hm3.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-70mig.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-hovjt.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-1fs15.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-thqgn.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-l19e7.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-s23l1.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-e2sn9.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-cug3t.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-a8799.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-c5i3c.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-cv321.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-0568j.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-rp6bk.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-njt2d.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-p16ms.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-hp39f.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-bmuav.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-v5p9p.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ofao5.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-hnv59.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ccv13.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-n97fc.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-a2772.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-vhpeq.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-plubn.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-1c76f.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-sh13j.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-u1o28.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-3a3nc.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-b3u2p.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-9nk73.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-nb69u.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-6npqc.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-bn0nr.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-1763b.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-qsmm6.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-50uij.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-vnmnv.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-9gb70.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-9ofbh.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-2rqo6.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-kka3t.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-sjdlp.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-sgo09.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-i5eb3.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-9ljge.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-g90ne.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-abbnk.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-42nas.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-4c06a.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-23uno.tmp
%ProgramFiles(x86)%\viewfd\graphic\grids\is-34v8l.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-1sujj.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\ini\is-4u4tb.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-k2rrk.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\lsd\is-ajvva.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-itjeu.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-2mnfc.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-9s0co.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-avt7s.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-vj6oo.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\ini\is-cpshc.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-ho5qb.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-83srd.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-42v6g.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-cuab6.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-17nlu.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-blebt.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-grbqv.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-193ch.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-icm3h.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-j0cis.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-iujfu.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-dnlqq.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\ini\is-0i3vr.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\ini\is-spfvj.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\ini\is-7po06.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-kqhpv.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-i539h.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-rqvuj.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-vthc4.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-0vr53.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-1khc7.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-0s32v.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-itgl3.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-jn5gu.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-gekja.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-utb2d.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ovn5v.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-j60k8.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-r9mts.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-arhp8.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-64oqf.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-f37pn.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-nelkb.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-gdhgk.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-r3mib.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-280ov.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-6g1cs.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-vl7h3.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-oc4hf.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-o2lbg.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-rlc7k.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-c4u34.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-knv8q.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-mlkih.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-3nk5b.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-hg3em.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-56eli.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-d28h9.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-uaqq2.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-pfita.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-1831n.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-o2hsv.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-hjqvi.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\is-jdafo.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-07ah0.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-q6f8c.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-7d5ji.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-r3mqp.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-qksb5.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-91cq7.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-amfnr.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\url\search\is-tjf20.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-4sddt.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\url\search\is-avhrn.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\url\help\is-vmgb6.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-77g70.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-q60en.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-94bcf.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-9oalh.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-r5q82.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-66fv2.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-6ubla.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-179km.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-t492r.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-hvtvv.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-qu50n.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-cg8gn.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-d63u3.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-o16j3.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-37rne.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-r8kld.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-eq5kg.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-b77u8.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-u9um8.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-tdgig.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-vpikt.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\is-qap75.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-ijr71.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-nj6ck.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-idfcp.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-kjvtf.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-4gjtf.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-d4leo.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-oqorg.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-c0sac.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-tci10.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-vssfg.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-m1ea4.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\forms\is-t9pmf.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-55q73.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-8h3aj.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ddkop.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-p5fqt.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-40r9p.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-nah9a.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-esmh7.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-tidc2.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-70mig.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-hovjt.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-2uvl6.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-siljd.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\data\is-qbruq.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-mttr4.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-9uqb8.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-rrfad.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-avojt.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\7-zip\is-2erbl.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-jambl.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-rp7pu.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-78r8j.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-u8hm3.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-2bjet.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-7esl7.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-unlkb.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-2lk83.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-5u80s.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-bada2.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-4hon6.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-uiel5.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-95ko9.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-29la4.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-ssaek.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-45nt9.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-khlvt.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-4226m.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-1fs15.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-b3u2p.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9nk73.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-nb69u.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-s23l1.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-e2sn9.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-cug3t.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-a8799.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-c5i3c.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-cv321.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-0568j.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-rp6bk.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-6iv61.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-njt2d.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-hp39f.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-bmuav.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-v5p9p.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ofao5.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-hnv59.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ccv13.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-n97fc.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-a2772.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-vhpeq.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-plubn.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-9ofbh.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-l19e7.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-1c76f.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-thqgn.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-u1o28.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-6npqc.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-bn0nr.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-1763b.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-qsmm6.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-50uij.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-vnmnv.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-9gb70.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-3a3nc.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-sh13j.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-kka3t.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-sjdlp.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-sgo09.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-i5eb3.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-9ljge.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-g90ne.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-abbnk.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-42nas.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-4c06a.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-23uno.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-2rqo6.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-34v8l.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-p16ms.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\is-n9mrv.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}' WindowName: ''

Creates and executes the following

'%TEMP%\is-47jl6.tmp\is-olhjr.tmp' /SL4 $B0218 "<Full path to file>" 7043232 52736
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' d902dd323ae1c17176bcd16230a9713e

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней