Trojan.DownLoader45.14305

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-kjio6.tmp\is-5hb52.tmp
%ProgramFiles(x86)%\viewfd\ini\is-4mgfv.tmp
%ProgramFiles(x86)%\viewfd\ini\is-74sro.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-9a8f0.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-bof8e.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-81p5q.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-g1qg0.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-nonn8.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-bp30o.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-5d1ae.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-mgi57.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ldtu3.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-f0gup.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-duiri.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-gugqo.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-15l2v.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-n2q98.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tpbqv.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-as1eo.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-j6apt.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-8qjqu.tmp
%ProgramFiles(x86)%\viewfd\ini\is-rmhk4.tmp
%ProgramFiles(x86)%\viewfd\ini\is-bvi32.tmp
%ProgramFiles(x86)%\viewfd\ini\is-mvq0j.tmp
%ProgramFiles(x86)%\viewfd\ini\is-pa3f4.tmp
%ProgramFiles(x86)%\viewfd\ini\is-6vfhs.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-r6gi3.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-tn1er.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-d84ou.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-mo7ek.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-qonbc.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-c3rc8.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-evu6u.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-30trl.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-o3rfh.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-8lcec.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-hfegl.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-5skg3.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-4jbab.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-nucl5.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-atnpg.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-rpdmf.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-3dqbi.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-hhta6.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-cq6di.tmp
%ProgramFiles(x86)%\viewfd\ini\is-4ovho.tmp
%ProgramFiles(x86)%\viewfd\ini\is-tov6s.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-k3sq6.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-r6ha1.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-7s8mq.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-0j457.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-1ns2i.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-i9d2f.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-o08tn.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-op6k8.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-mcvc5.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-aio7t.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-lae7v.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-b44ih.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-f75ql.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-fuc3g.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-l2jgu.tmp
%ProgramFiles(x86)%\viewfd\is-ujc8o.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-4j0pe.tmp
%ProgramFiles(x86)%\viewfd\is-uu2cv.tmp
%ProgramFiles(x86)%\viewfd\is-jhhfb.tmp
%ProgramFiles(x86)%\viewfd\is-qu6te.tmp
%ProgramFiles(x86)%\viewfd\is-i0cf6.tmp
%ProgramFiles(x86)%\viewfd\is-pck03.tmp
%ProgramFiles(x86)%\viewfd\is-agsdv.tmp
%ProgramFiles(x86)%\viewfd\is-dashi.tmp
%ProgramFiles(x86)%\viewfd\is-laiqm.tmp
%ProgramFiles(x86)%\viewfd\is-vsmsk.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\search\is-kdbof.tmp
%ProgramFiles(x86)%\viewfd\search\is-qfrsm.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-sqnhn.tmp
%ProgramFiles(x86)%\viewfd\search\is-n05r2.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-r94vi.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-thg3m.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-rg8om.tmp
%ProgramFiles(x86)%\viewfd\programs\is-jrh2t.tmp
%ProgramFiles(x86)%\viewfd\radio\is-sk3s8.tmp
%ProgramFiles(x86)%\viewfd\radio\is-6unq6.tmp
%ProgramFiles(x86)%\viewfd\reports\is-s9hc2.tmp
%ProgramFiles(x86)%\viewfd\search\is-5g6in.tmp
%ProgramFiles(x86)%\viewfd\search\is-2q3m7.tmp
%ProgramFiles(x86)%\viewfd\search\is-r0siv.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\url\search\is-a3hvd.tmp
%ProgramFiles(x86)%\viewfd\search\is-mvp36.tmp
%ProgramFiles(x86)%\viewfd\soft\is-dstqr.tmp
%ProgramFiles(x86)%\viewfd\url\is-8hr5e.tmp
%ProgramFiles(x86)%\viewfd\url\is-k6hvl.tmp
%ProgramFiles(x86)%\viewfd\url\is-bo0su.tmp
%ProgramFiles(x86)%\viewfd\url\is-f33ii.tmp
%ProgramFiles(x86)%\viewfd\url\is-j8hev.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-u21ea.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-hie16.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-tn4er.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-3ugfd.tmp
%ProgramFiles(x86)%\viewfd\is-ji8qc.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-7uah5.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-vn2b4.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-44kpr.tmp
%ProgramFiles(x86)%\viewfd\data\is-pr57f.tmp
%ProgramFiles(x86)%\viewfd\forms\is-39ocq.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-pi5dp.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-37ghr.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-ki22b.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-aa324.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-t7v38.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-o46k4.tmp
%ProgramFiles(x86)%\viewfd\browser\is-ta6u8.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-66t0r.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-armjn.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-7q2dg.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-br72n.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-2bmi2.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-g14ov.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-4tnun.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-3esbo.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-37gu7.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-9aogn.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-pbtev.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-5motj.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-uf2kg.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-ieajf.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-dl30t.tmp
%TEMP%\is-n4fgt.tmp\_isetup\_setup64.tmp
%TEMP%\is-n4fgt.tmp\_isetup\_shfoldr.dll
%TEMP%\is-n4fgt.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-jiaop.tmp
%ProgramFiles(x86)%\viewfd\7-zip\lang\is-7jjpb.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-n7cqb.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-cjdml.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-ascoh.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-m5l75.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-719sg.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-008pj.tmp
%ProgramFiles(x86)%\viewfd\backup\is-of9af.tmp
%ProgramFiles(x86)%\viewfd\browser\is-dn42m.tmp
%ProgramFiles(x86)%\viewfd\browser\is-t0ff3.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-4sgsd.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-12ab8.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-ojdil.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-oipa0.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-tr5pt.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-k25hm.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-s6ihr.tmp
%TEMP%\is-n4fgt.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\viewfd\browser\is-4i0he.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-6923m.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-9na4q.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-v94so.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-nrkmn.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-l4k3b.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-q4vhj.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1v953.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-jhj3v.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-asegf.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-spfaa.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ffijp.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-m77cc.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-7sclk.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-avuqs.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-b1vru.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-0a5up.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-tfcsi.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-tm84p.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-6jje3.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1m2ts.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-tqbj0.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-nl6s0.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-tu756.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-et80d.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-s7han.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-l7fv2.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-6r07t.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-t2k46.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-5mv6r.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-9hffk.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-9a4m8.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-j0o0k.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-0bf2p.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-rnqkq.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-jmlj6.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-02a0c.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-rgsci.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-jhtsq.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-2b9e9.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-4h19i.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-8q19u.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-sdicd.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-o9lv8.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-smsao.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-5ha6f.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-3ptsb.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-3eg1s.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-n51ms.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-95ju3.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-ctopb.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-509lt.tmp
%ProgramFiles(x86)%\viewfd\graphic\grids\is-h9f8e.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-jiaop.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\ini\is-4mgfv.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-74sro.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\lsd\is-9a8f0.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-bof8e.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-81p5q.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-g1qg0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-nonn8.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-bp30o.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\ini\is-rmhk4.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-bvi32.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-5d1ae.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-f0gup.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-duiri.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-gugqo.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-15l2v.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-n2q98.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tpbqv.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-as1eo.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-j6apt.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ldtu3.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-hfegl.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\ini\is-mvq0j.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\ini\is-pa3f4.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\ini\is-6vfhs.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-tn1er.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-d84ou.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-mo7ek.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-qonbc.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-c3rc8.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-evu6u.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-30trl.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-o3rfh.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-5skg3.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-r6gi3.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-mgi57.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-4jbab.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-nucl5.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-atnpg.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-rpdmf.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-3dqbi.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-hhta6.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-cq6di.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-4ovho.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-tov6s.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-r6ha1.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-8qjqu.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-8lcec.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-7s8mq.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-0j457.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-sqnhn.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-kdbof.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-i9d2f.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-o08tn.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-op6k8.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-mcvc5.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-aio7t.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-lae7v.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-b44ih.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-f75ql.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-fuc3g.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-l2jgu.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-ji8qc.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\is-ujc8o.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-uu2cv.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-jhhfb.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-qu6te.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-i0cf6.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-pck03.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-agsdv.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-dashi.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\url\search\is-3ugfd.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-tn4er.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\url\search\is-a3hvd.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\url\help\is-hie16.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-1ns2i.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-r94vi.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-thg3m.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-rg8om.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-jrh2t.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-sk3s8.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-6unq6.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-s9hc2.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-5g6in.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-2q3m7.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-r0siv.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-n05r2.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-qfrsm.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-mvp36.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-dstqr.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-8hr5e.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-k6hvl.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-bo0su.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-f33ii.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-j8hev.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-u21ea.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\is-laiqm.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-k3sq6.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-4j0pe.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-7uah5.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-37ghr.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-ki22b.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-aa324.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-t7v38.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-o46k4.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-66t0r.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-008pj.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-armjn.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\forms\is-39ocq.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-pi5dp.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-7q2dg.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-g14ov.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-4tnun.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-3esbo.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-37gu7.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9aogn.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-719sg.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6923m.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9na4q.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-br72n.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-2bmi2.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\data\is-pr57f.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-44kpr.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-5motj.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-n7cqb.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-cjdml.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\7-zip\is-ascoh.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-m5l75.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-of9af.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-ta6u8.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-4i0he.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-dn42m.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-t0ff3.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-7jjpb.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-4sgsd.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-ojdil.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-oipa0.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-tr5pt.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-k25hm.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-s6ihr.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-dl30t.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-ieajf.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-uf2kg.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-pbtev.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-12ab8.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-v94so.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9hffk.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9a4m8.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-j0o0k.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-q4vhj.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1v953.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-jhj3v.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-asegf.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-spfaa.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ffijp.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-m77cc.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-7sclk.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-vn2b4.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-avuqs.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-0a5up.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-tfcsi.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-tm84p.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-6jje3.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1m2ts.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-tqbj0.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-nl6s0.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-tu756.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-et80d.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-s7han.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-4h19i.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-l4k3b.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-l7fv2.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-nrkmn.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-t2k46.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-0bf2p.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-rnqkq.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-jmlj6.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-02a0c.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-rgsci.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-jhtsq.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-2b9e9.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-5mv6r.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-6r07t.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-sdicd.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-o9lv8.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-smsao.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-5ha6f.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-3ptsb.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-3eg1s.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-n51ms.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-95ju3.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-ctopb.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-509lt.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-8q19u.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-h9f8e.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-b1vru.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\is-vsmsk.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}' WindowName: ''

Creates and executes the following

'%TEMP%\is-kjio6.tmp\is-5hb52.tmp' /SL4 $11022C "<Full path to file>" 7091643 52736
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' 211caf0c9c19378bc9c87f9997d1f988

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней