Trojan.DownLoader45.9805

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-jgo4l.tmp\is-flr0v.tmp
%ProgramFiles(x86)%\viewfd\ini\is-k57i1.tmp
%ProgramFiles(x86)%\viewfd\ini\is-didtq.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-ohag2.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-irgvf.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-npfhn.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-ej77a.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-k9vmg.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-clcio.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-o6hh4.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-9d658.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ke8va.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7m0gt.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-g4pmv.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-3s87j.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-sfblt.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-f7b5n.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-u9nu1.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-crc5s.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-c5vkb.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-36g0u.tmp
%ProgramFiles(x86)%\viewfd\ini\is-4rjde.tmp
%ProgramFiles(x86)%\viewfd\ini\is-0mmfa.tmp
%ProgramFiles(x86)%\viewfd\ini\is-t8c53.tmp
%ProgramFiles(x86)%\viewfd\ini\is-f4qv9.tmp
%ProgramFiles(x86)%\viewfd\ini\is-pbeui.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-bers2.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-qoime.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-3kebj.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-chgbn.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-pporf.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-1d3mf.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-ik3qr.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-rru2r.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-pl966.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-hell2.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7cvlh.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-jifv5.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-jsrp0.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-l6q08.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-9tppl.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-a8c2u.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-95g4l.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-5rndf.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-na2qo.tmp
%ProgramFiles(x86)%\viewfd\ini\is-kn73c.tmp
%ProgramFiles(x86)%\viewfd\ini\is-s1sds.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-n9r6q.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-df2i0.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-tgs3u.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-aco1k.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-07lm8.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-7dj4m.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-kjkaj.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-hbote.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-f3h5u.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-p7p3i.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-crho2.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-8v9vp.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-9vsck.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-oluc2.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-bbe5e.tmp
%ProgramFiles(x86)%\viewfd\is-0vbgj.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-eaasq.tmp
%ProgramFiles(x86)%\viewfd\is-q1fmr.tmp
%ProgramFiles(x86)%\viewfd\is-731ee.tmp
%ProgramFiles(x86)%\viewfd\is-fthti.tmp
%ProgramFiles(x86)%\viewfd\is-7137i.tmp
%ProgramFiles(x86)%\viewfd\is-ijsgn.tmp
%ProgramFiles(x86)%\viewfd\is-imgiq.tmp
%ProgramFiles(x86)%\viewfd\is-vn92h.tmp
%ProgramFiles(x86)%\viewfd\is-dagba.tmp
%ProgramFiles(x86)%\viewfd\is-qpsqe.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\search\is-h3vao.tmp
%ProgramFiles(x86)%\viewfd\search\is-faikk.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-apbjq.tmp
%ProgramFiles(x86)%\viewfd\search\is-p50ls.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-f4buo.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-pbdfg.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-7io2f.tmp
%ProgramFiles(x86)%\viewfd\programs\is-cj3tg.tmp
%ProgramFiles(x86)%\viewfd\radio\is-i3phu.tmp
%ProgramFiles(x86)%\viewfd\radio\is-7mhqb.tmp
%ProgramFiles(x86)%\viewfd\reports\is-7rffk.tmp
%ProgramFiles(x86)%\viewfd\search\is-hb1ic.tmp
%ProgramFiles(x86)%\viewfd\search\is-6bopa.tmp
%ProgramFiles(x86)%\viewfd\search\is-lf4q6.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\url\search\is-afsak.tmp
%ProgramFiles(x86)%\viewfd\search\is-frljk.tmp
%ProgramFiles(x86)%\viewfd\soft\is-d8q8q.tmp
%ProgramFiles(x86)%\viewfd\url\is-q36lv.tmp
%ProgramFiles(x86)%\viewfd\url\is-7dm81.tmp
%ProgramFiles(x86)%\viewfd\url\is-hr3jl.tmp
%ProgramFiles(x86)%\viewfd\url\is-hkc3u.tmp
%ProgramFiles(x86)%\viewfd\url\is-avr4k.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-li4kb.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-juk04.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-cn8db.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-61d59.tmp
%ProgramFiles(x86)%\viewfd\is-sv2hj.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-7efj9.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-ri52u.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-89f51.tmp
%ProgramFiles(x86)%\viewfd\data\is-1vhe4.tmp
%ProgramFiles(x86)%\viewfd\forms\is-g3nnp.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-ma5lb.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-2mrbc.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-pv04p.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-46ps5.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-39ba7.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-o0uen.tmp
%ProgramFiles(x86)%\viewfd\browser\is-8gdmr.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-sjhsh.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-irlq1.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-9c88r.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-l5dm4.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-odu8q.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-s64ni.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-8senf.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-dsp69.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-u9fsk.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-nkl9h.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-u6n91.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-5rcsl.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-kcnbp.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-nd25v.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-qkqlf.tmp
%TEMP%\is-pedmb.tmp\_isetup\_setup64.tmp
%TEMP%\is-pedmb.tmp\_isetup\_shfoldr.dll
%TEMP%\is-pedmb.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-kmqan.tmp
%ProgramFiles(x86)%\viewfd\7-zip\lang\is-kml4o.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-uvdc4.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-h89bb.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-88bal.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-imbnh.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-0brsc.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-2utlt.tmp
%ProgramFiles(x86)%\viewfd\backup\is-6p691.tmp
%ProgramFiles(x86)%\viewfd\browser\is-u10t6.tmp
%ProgramFiles(x86)%\viewfd\browser\is-h14kc.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-74bqk.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-jrul2.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-8qf1g.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-qe48u.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-v96sd.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-22m50.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-2blk7.tmp
%TEMP%\is-pedmb.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\viewfd\browser\is-0g8b6.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-vmulp.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-g4tt2.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-2boan.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-28i52.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-t26bm.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-h2dv4.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ju8rg.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-0hvhk.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-jfa9g.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-bp6f5.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ukrim.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-v1m8i.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-4qpb8.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-oqlcm.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-rjdv7.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-22qtl.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-r82jn.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-gpd89.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1hve9.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-utj8k.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-qfqpk.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-lougr.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-pmfg7.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-kd458.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-pdi7o.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-asqmc.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-12d10.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-qs693.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-v2krn.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-p3rt9.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-70j1b.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-pk8ps.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-2n89r.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-86b3v.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-f4rpn.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-lo46r.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-35v9m.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-ao3u5.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-e1l3n.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-3t2if.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-cacj4.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-5sctk.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-hgno0.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-o5ek7.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-kocqf.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-5h6o3.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-7lv3c.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-roig3.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-0nrku.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-tsq7b.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-k2f6j.tmp
%ProgramFiles(x86)%\viewfd\graphic\grids\is-t4e33.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-kmqan.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\ini\is-k57i1.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-didtq.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\lsd\is-ohag2.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-irgvf.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-npfhn.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-ej77a.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-k9vmg.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-clcio.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\ini\is-4rjde.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-0mmfa.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-o6hh4.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7m0gt.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-g4pmv.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-3s87j.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-sfblt.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-f7b5n.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-u9nu1.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-crc5s.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-c5vkb.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ke8va.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7cvlh.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\ini\is-t8c53.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\ini\is-f4qv9.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\ini\is-pbeui.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-qoime.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-3kebj.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-chgbn.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-pporf.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-1d3mf.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ik3qr.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-rru2r.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-pl966.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-jifv5.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-bers2.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-9d658.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-jsrp0.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-l6q08.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-9tppl.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-a8c2u.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-95g4l.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-5rndf.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-na2qo.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-kn73c.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-s1sds.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-df2i0.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-36g0u.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-hell2.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-tgs3u.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-aco1k.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-apbjq.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-h3vao.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-7dj4m.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-kjkaj.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-hbote.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-f3h5u.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-p7p3i.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-crho2.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-8v9vp.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-9vsck.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-oluc2.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-bbe5e.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-sv2hj.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\is-0vbgj.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-q1fmr.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-731ee.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-fthti.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-7137i.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-ijsgn.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-imgiq.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-vn92h.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\url\search\is-61d59.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-cn8db.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\url\search\is-afsak.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\url\help\is-juk04.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-07lm8.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-f4buo.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-pbdfg.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-7io2f.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-cj3tg.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-i3phu.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-7mhqb.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-7rffk.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-hb1ic.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-6bopa.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-lf4q6.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-p50ls.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-faikk.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-frljk.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-d8q8q.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-q36lv.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-7dm81.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-hr3jl.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-hkc3u.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-avr4k.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-li4kb.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\is-dagba.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-n9r6q.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-eaasq.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-7efj9.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-2mrbc.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-pv04p.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-46ps5.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-39ba7.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-o0uen.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-sjhsh.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-2utlt.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-irlq1.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\forms\is-g3nnp.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-ma5lb.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9c88r.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-s64ni.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-8senf.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-dsp69.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-u9fsk.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-nkl9h.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-0brsc.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-vmulp.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-g4tt2.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-l5dm4.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-odu8q.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\data\is-1vhe4.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-89f51.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-5rcsl.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-uvdc4.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-h89bb.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\7-zip\is-88bal.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-imbnh.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-6p691.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-8gdmr.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-0g8b6.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-u10t6.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-h14kc.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-kml4o.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-74bqk.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-8qf1g.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-qe48u.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-v96sd.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-22m50.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-2blk7.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-qkqlf.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-nd25v.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-kcnbp.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-u6n91.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-jrul2.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-2boan.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-p3rt9.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-70j1b.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-pk8ps.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-h2dv4.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ju8rg.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-0hvhk.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-jfa9g.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-bp6f5.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ukrim.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-v1m8i.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-4qpb8.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-ri52u.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-oqlcm.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-22qtl.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-r82jn.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-gpd89.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1hve9.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-utj8k.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-qfqpk.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-lougr.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-pmfg7.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-kd458.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-pdi7o.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-3t2if.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-t26bm.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-asqmc.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-28i52.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-qs693.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-2n89r.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-86b3v.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-f4rpn.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-lo46r.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-35v9m.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ao3u5.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-e1l3n.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-v2krn.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-12d10.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-5sctk.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-hgno0.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-o5ek7.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-kocqf.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-5h6o3.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-7lv3c.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-roig3.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-0nrku.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-tsq7b.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-k2f6j.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-cacj4.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-t4e33.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-rjdv7.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\is-qpsqe.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}' WindowName: ''

Creates and executes the following

'%TEMP%\is-jgo4l.tmp\is-flr0v.tmp' /SL4 $11022C "<Full path to file>" 6963835 52736
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' a302400cf742ec2d6f70aeb025081ecf

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней