Trojan.DownLoader45.9809

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-5dgmk.tmp\is-uvndo.tmp
%ProgramFiles(x86)%\viewfd\ini\is-i55lg.tmp
%ProgramFiles(x86)%\viewfd\ini\is-nsem0.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-elpak.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-n7ad3.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-u0j1m.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-bn6ht.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-giph9.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-e7nld.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-nmie9.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-pub9l.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tbkvq.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-qf9ui.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ejlf0.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-r4a2d.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-h709l.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-eg3d9.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ieurj.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-a4bge.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-oc3qs.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-md2qb.tmp
%ProgramFiles(x86)%\viewfd\ini\is-b6e40.tmp
%ProgramFiles(x86)%\viewfd\ini\is-djmks.tmp
%ProgramFiles(x86)%\viewfd\ini\is-u0st8.tmp
%ProgramFiles(x86)%\viewfd\ini\is-ldbpv.tmp
%ProgramFiles(x86)%\viewfd\ini\is-v61fv.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-nbeie.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-ocd33.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-84qqj.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-9dh5d.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-6v15n.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-t6qqj.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-9qj36.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-o5cfc.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-1cjii.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-380fr.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-f8p1n.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-9l81m.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-q01ak.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-7smh4.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-hq49p.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-pk3ud.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-npg3o.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-ibqlk.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-2rs3a.tmp
%ProgramFiles(x86)%\viewfd\ini\is-keacv.tmp
%ProgramFiles(x86)%\viewfd\ini\is-82tnj.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-251a5.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-b5jup.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-jtakm.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-siib3.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-9o9if.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-njec4.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-26n8h.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-495et.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-dvt7v.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-p7g3f.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-l1249.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-h26sl.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-larrp.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-phuhj.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-h2l1s.tmp
%ProgramFiles(x86)%\viewfd\is-56cta.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-080o5.tmp
%ProgramFiles(x86)%\viewfd\is-vrfk7.tmp
%ProgramFiles(x86)%\viewfd\is-aclm1.tmp
%ProgramFiles(x86)%\viewfd\is-l0mbc.tmp
%ProgramFiles(x86)%\viewfd\is-afdj9.tmp
%ProgramFiles(x86)%\viewfd\is-sjdd4.tmp
%ProgramFiles(x86)%\viewfd\is-r5e9h.tmp
%ProgramFiles(x86)%\viewfd\is-op3vq.tmp
%ProgramFiles(x86)%\viewfd\is-2beof.tmp
%ProgramFiles(x86)%\viewfd\is-p8421.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\search\is-6vhf3.tmp
%ProgramFiles(x86)%\viewfd\search\is-fbt8q.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-t9rmh.tmp
%ProgramFiles(x86)%\viewfd\search\is-2p0bc.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-gtpbg.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-31qds.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ge2k3.tmp
%ProgramFiles(x86)%\viewfd\programs\is-i61md.tmp
%ProgramFiles(x86)%\viewfd\radio\is-2eji9.tmp
%ProgramFiles(x86)%\viewfd\radio\is-455ep.tmp
%ProgramFiles(x86)%\viewfd\reports\is-sa1jj.tmp
%ProgramFiles(x86)%\viewfd\search\is-053qu.tmp
%ProgramFiles(x86)%\viewfd\search\is-3h2bu.tmp
%ProgramFiles(x86)%\viewfd\search\is-8o3u4.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\url\search\is-7s9hp.tmp
%ProgramFiles(x86)%\viewfd\search\is-0m048.tmp
%ProgramFiles(x86)%\viewfd\soft\is-hihmm.tmp
%ProgramFiles(x86)%\viewfd\url\is-a5215.tmp
%ProgramFiles(x86)%\viewfd\url\is-4also.tmp
%ProgramFiles(x86)%\viewfd\url\is-13cav.tmp
%ProgramFiles(x86)%\viewfd\url\is-dq477.tmp
%ProgramFiles(x86)%\viewfd\url\is-eh9un.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-kim7h.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-lo9jp.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-4m0id.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-j2dds.tmp
%ProgramFiles(x86)%\viewfd\is-j3r3i.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-uk9md.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-7nt54.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-o5ao9.tmp
%ProgramFiles(x86)%\viewfd\data\is-r7184.tmp
%ProgramFiles(x86)%\viewfd\forms\is-r7rqi.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-ggr72.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-je4mm.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-ebqr4.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-jmj0j.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-kj387.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-vnhbh.tmp
%ProgramFiles(x86)%\viewfd\browser\is-ili47.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-70ged.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-fpsg1.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-1qohj.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-bm17m.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-q72td.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-6n2e8.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-nornk.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-eocgo.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-ap41m.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-f7jmi.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-1aft4.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-28e0p.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-9qmjk.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-o4v9j.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-2rcdk.tmp
%TEMP%\is-82lnd.tmp\_isetup\_setup64.tmp
%TEMP%\is-82lnd.tmp\_isetup\_shfoldr.dll
%TEMP%\is-82lnd.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-uj9hl.tmp
%ProgramFiles(x86)%\viewfd\7-zip\lang\is-eisg8.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-qiihf.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-69t0q.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-9c6rq.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-aiba2.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-tec0a.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-85env.tmp
%ProgramFiles(x86)%\viewfd\backup\is-o59li.tmp
%ProgramFiles(x86)%\viewfd\browser\is-cl4cn.tmp
%ProgramFiles(x86)%\viewfd\browser\is-kjulp.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-llh4a.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-tc0j6.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-djlsu.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-alg9s.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-7cbnr.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-8ohvt.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-c1ajg.tmp
%TEMP%\is-82lnd.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\viewfd\browser\is-1rnno.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-rgvna.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-9gd9h.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-3gg0q.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-chsrk.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-a86gc.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-e0rpb.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-7j7ce.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-kgfb4.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-nh50o.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-10uq5.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-33ard.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-rq6ct.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-tmkso.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-9uddc.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-elsat.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-e69dp.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-nhj44.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-0pvp3.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-90js4.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-6j8eg.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8j7ql.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-5p78o.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-vep5c.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-lf23p.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-2e483.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-uc6ao.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-l3bkb.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-shco0.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-9eai1.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-9402g.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-qq4d5.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-pq6dm.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-14m8m.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-5ca8s.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-aje80.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-n29qu.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-442du.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-luei6.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-c791k.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-3i1qr.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-nba5o.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-stoh7.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-kh6no.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-4tq7m.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-ad23l.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-tuhcm.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-hldc5.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-jvf4m.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-3bd7j.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-4nlvc.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-1p54i.tmp
%ProgramFiles(x86)%\viewfd\graphic\grids\is-db9ft.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-uj9hl.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\ini\is-i55lg.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-nsem0.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\lsd\is-elpak.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-n7ad3.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-u0j1m.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-bn6ht.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-giph9.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-e7nld.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\ini\is-b6e40.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-djmks.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-nmie9.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-qf9ui.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ejlf0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-r4a2d.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-h709l.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-eg3d9.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ieurj.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-a4bge.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-oc3qs.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tbkvq.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-f8p1n.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\ini\is-u0st8.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\ini\is-ldbpv.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\ini\is-v61fv.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ocd33.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-84qqj.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-9dh5d.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-6v15n.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-t6qqj.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-9qj36.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-o5cfc.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-1cjii.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-9l81m.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-nbeie.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-pub9l.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-q01ak.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-7smh4.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-hq49p.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-pk3ud.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-npg3o.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-ibqlk.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-2rs3a.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-keacv.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-82tnj.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-b5jup.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-md2qb.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-380fr.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-jtakm.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-siib3.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-t9rmh.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-6vhf3.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-njec4.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-26n8h.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-495et.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-dvt7v.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-p7g3f.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-l1249.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-h26sl.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-larrp.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-phuhj.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-h2l1s.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-j3r3i.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\is-56cta.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-vrfk7.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-aclm1.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-l0mbc.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-afdj9.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-sjdd4.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-r5e9h.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-op3vq.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\url\search\is-j2dds.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-4m0id.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\url\search\is-7s9hp.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\url\help\is-lo9jp.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-9o9if.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-gtpbg.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-31qds.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ge2k3.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-i61md.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-2eji9.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-455ep.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-sa1jj.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-053qu.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-3h2bu.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-8o3u4.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-2p0bc.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-fbt8q.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-0m048.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-hihmm.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-a5215.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-4also.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-13cav.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-dq477.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-eh9un.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-kim7h.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\is-2beof.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-251a5.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-080o5.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-uk9md.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-je4mm.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-ebqr4.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-jmj0j.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-kj387.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-vnhbh.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-70ged.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-85env.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-fpsg1.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\forms\is-r7rqi.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-ggr72.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-1qohj.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6n2e8.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-nornk.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-eocgo.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ap41m.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-f7jmi.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-tec0a.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-rgvna.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9gd9h.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-bm17m.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-q72td.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\data\is-r7184.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-o5ao9.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-28e0p.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-qiihf.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-69t0q.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\7-zip\is-9c6rq.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-aiba2.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-o59li.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-ili47.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-1rnno.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-cl4cn.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-kjulp.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-eisg8.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-llh4a.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-djlsu.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-alg9s.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-7cbnr.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-8ohvt.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-c1ajg.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-2rcdk.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-o4v9j.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-9qmjk.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-1aft4.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-tc0j6.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-3gg0q.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9402g.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-qq4d5.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-pq6dm.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-e0rpb.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-7j7ce.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-kgfb4.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-nh50o.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-10uq5.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-33ard.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-rq6ct.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-tmkso.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-7nt54.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-9uddc.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-e69dp.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-nhj44.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-0pvp3.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-90js4.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-6j8eg.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8j7ql.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-5p78o.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-vep5c.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-lf23p.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-2e483.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-3i1qr.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-a86gc.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-uc6ao.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-chsrk.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-shco0.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-14m8m.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-5ca8s.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-aje80.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-n29qu.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-442du.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-luei6.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-c791k.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-9eai1.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-l3bkb.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-stoh7.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-kh6no.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-4tq7m.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-ad23l.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-tuhcm.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-hldc5.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-jvf4m.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-3bd7j.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-4nlvc.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-1p54i.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-nba5o.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-db9ft.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-elsat.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\is-p8421.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '' WindowName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}'

Creates and executes the following

'%TEMP%\is-5dgmk.tmp\is-uvndo.tmp' /SL4 $11022C "<Full path to file>" 7172643 141312
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' 195a964d81ef30974a82a6f71316fef4

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней