Trojan.DownLoader45.15105

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-6sp0a.tmp\is-8egbf.tmp
%ProgramFiles(x86)%\viewfd\ini\is-7l40s.tmp
%ProgramFiles(x86)%\viewfd\ini\is-3r671.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-8qlp4.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-5p2jq.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-du5qf.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-42d1v.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-mrd6r.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-oj1rd.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-8ikfg.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-47bi1.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9kim6.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-kgnql.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-pdpao.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tstpd.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-f4cq1.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-fjrha.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-1fvau.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-rjt5d.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-augcv.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-chf33.tmp
%ProgramFiles(x86)%\viewfd\ini\is-p7q0v.tmp
%ProgramFiles(x86)%\viewfd\ini\is-lkg83.tmp
%ProgramFiles(x86)%\viewfd\ini\is-63hjj.tmp
%ProgramFiles(x86)%\viewfd\ini\is-8ehbv.tmp
%ProgramFiles(x86)%\viewfd\ini\is-rjg0g.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-29038.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-7klhf.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-un15r.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-105du.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-7al1m.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-72esj.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-eaisf.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-d9sq2.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-5u456.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-fu92r.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-bsn2t.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-moth4.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-juieh.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-loiip.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-cbopa.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-bqrga.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-fg3ie.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-v2o9a.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-ru5p2.tmp
%ProgramFiles(x86)%\viewfd\ini\is-e3epu.tmp
%ProgramFiles(x86)%\viewfd\ini\is-e4vpl.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-0r9is.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-e75gt.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ftlnt.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-vligg.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-uatno.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-v41ge.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-tbbcc.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-ueo9c.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-mjagh.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-oa63j.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-hjqf6.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-ucs6b.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-iroce.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-9of63.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-86qek.tmp
%ProgramFiles(x86)%\viewfd\is-bmpkb.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-n1gfe.tmp
%ProgramFiles(x86)%\viewfd\is-9o9kl.tmp
%ProgramFiles(x86)%\viewfd\is-683qe.tmp
%ProgramFiles(x86)%\viewfd\is-6d1cl.tmp
%ProgramFiles(x86)%\viewfd\is-3g2i1.tmp
%ProgramFiles(x86)%\viewfd\is-u5j01.tmp
%ProgramFiles(x86)%\viewfd\is-3c26d.tmp
%ProgramFiles(x86)%\viewfd\is-tr77g.tmp
%ProgramFiles(x86)%\viewfd\is-iq5j7.tmp
%ProgramFiles(x86)%\viewfd\is-u2vd1.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\search\is-0ebqt.tmp
%ProgramFiles(x86)%\viewfd\search\is-8brgj.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-6v4gr.tmp
%ProgramFiles(x86)%\viewfd\search\is-k2fq3.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-iv6p6.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-4pgim.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-5vodc.tmp
%ProgramFiles(x86)%\viewfd\programs\is-qfpr2.tmp
%ProgramFiles(x86)%\viewfd\radio\is-g4c8o.tmp
%ProgramFiles(x86)%\viewfd\radio\is-gi8rf.tmp
%ProgramFiles(x86)%\viewfd\reports\is-ah20a.tmp
%ProgramFiles(x86)%\viewfd\search\is-8oqsp.tmp
%ProgramFiles(x86)%\viewfd\search\is-hh709.tmp
%ProgramFiles(x86)%\viewfd\search\is-dvps1.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\url\search\is-5vv3r.tmp
%ProgramFiles(x86)%\viewfd\search\is-tek2f.tmp
%ProgramFiles(x86)%\viewfd\soft\is-89d23.tmp
%ProgramFiles(x86)%\viewfd\url\is-du8ve.tmp
%ProgramFiles(x86)%\viewfd\url\is-9oneb.tmp
%ProgramFiles(x86)%\viewfd\url\is-lrm65.tmp
%ProgramFiles(x86)%\viewfd\url\is-ep7ve.tmp
%ProgramFiles(x86)%\viewfd\url\is-o1193.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-4v9hn.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-5bbm1.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-bgq9p.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-re9qf.tmp
%ProgramFiles(x86)%\viewfd\is-1op2h.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-lurg0.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-h8vpm.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-gjlln.tmp
%ProgramFiles(x86)%\viewfd\data\is-pmish.tmp
%ProgramFiles(x86)%\viewfd\forms\is-p636r.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-r8k3l.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-pfd20.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-aa80v.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-ose02.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-cvfgm.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-mkhe2.tmp
%ProgramFiles(x86)%\viewfd\browser\is-utlr7.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-9d6k8.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-qi0gc.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-il87k.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-r01r3.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-q28ok.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-7elpi.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-g8j0f.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-rvpe8.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-8j7bg.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-bhpmu.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-n9rk1.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-ef56j.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-9cqm5.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-v0jve.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-hk9ao.tmp
%TEMP%\is-pfpt2.tmp\_isetup\_setup64.tmp
%TEMP%\is-pfpt2.tmp\_isetup\_shfoldr.dll
%TEMP%\is-pfpt2.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-v8p79.tmp
%ProgramFiles(x86)%\viewfd\7-zip\lang\is-a2oqj.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-cudsc.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-7iibg.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-fmomg.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-agg9m.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-7utea.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-6gijc.tmp
%ProgramFiles(x86)%\viewfd\backup\is-3d5mt.tmp
%ProgramFiles(x86)%\viewfd\browser\is-0ggoe.tmp
%ProgramFiles(x86)%\viewfd\browser\is-8jevl.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-2r71u.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-25c4m.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-38d6j.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-v50lb.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-24gpe.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-jmjh4.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-233ns.tmp
%TEMP%\is-pfpt2.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\viewfd\browser\is-f07s2.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-4bvqg.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-l62bo.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-60878.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ubini.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-glcb6.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-cprbm.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-dnp5b.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-lijpu.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-aet65.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ko8te.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ckrl2.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-9jprf.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-amrcq.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-egd9b.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-tmot5.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-9ce3t.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-8vd5t.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-h5n27.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-i4pav.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-f10uv.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-02sc7.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-b4nso.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-jv5ml.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-n87sd.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-0qcef.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-jff5f.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-at19e.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-fg46n.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-4ngmd.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-s7bau.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-q200j.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-l68t5.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-gf4t9.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-fm6k2.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-dt3l8.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-7937f.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-g8gvo.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-gsdbf.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-4bp18.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-habj1.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-emmgi.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-mvvms.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-j9p1a.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-sh5pn.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-bik92.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-j5e02.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-6fd66.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-foa56.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-f081d.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-1q6ko.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-45lkm.tmp
%ProgramFiles(x86)%\viewfd\graphic\grids\is-j6g97.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-v8p79.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\ini\is-7l40s.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-3r671.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\lsd\is-8qlp4.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-5p2jq.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-du5qf.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-42d1v.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-mrd6r.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-oj1rd.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\ini\is-p7q0v.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-lkg83.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-8ikfg.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-kgnql.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-pdpao.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tstpd.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-f4cq1.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-fjrha.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-1fvau.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-rjt5d.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-augcv.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9kim6.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-bsn2t.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\ini\is-63hjj.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\ini\is-8ehbv.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\ini\is-rjg0g.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-7klhf.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-un15r.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-105du.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-7al1m.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-72esj.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-eaisf.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-d9sq2.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-5u456.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-moth4.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-29038.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-47bi1.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-juieh.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-loiip.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-cbopa.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-bqrga.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-fg3ie.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-v2o9a.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-ru5p2.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-e3epu.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-e4vpl.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-e75gt.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-chf33.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-fu92r.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ftlnt.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-vligg.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-6v4gr.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-0ebqt.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-v41ge.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-tbbcc.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-ueo9c.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-mjagh.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-oa63j.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-hjqf6.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-ucs6b.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-iroce.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-9of63.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-86qek.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-1op2h.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\is-bmpkb.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-9o9kl.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-683qe.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-6d1cl.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-3g2i1.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-u5j01.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-3c26d.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-tr77g.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\url\search\is-re9qf.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-bgq9p.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\url\search\is-5vv3r.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\url\help\is-5bbm1.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-uatno.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-iv6p6.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-4pgim.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-5vodc.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-qfpr2.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-g4c8o.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-gi8rf.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-ah20a.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-8oqsp.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-hh709.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-dvps1.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-k2fq3.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-8brgj.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-tek2f.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-89d23.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-du8ve.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-9oneb.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-lrm65.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-ep7ve.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-o1193.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-4v9hn.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\is-iq5j7.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-0r9is.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-n1gfe.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-lurg0.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-pfd20.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-aa80v.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-ose02.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-cvfgm.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-mkhe2.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-9d6k8.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6gijc.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-qi0gc.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\forms\is-p636r.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-r8k3l.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-il87k.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-7elpi.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-g8j0f.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-rvpe8.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-8j7bg.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-bhpmu.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-7utea.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-4bvqg.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-l62bo.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-r01r3.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-q28ok.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\data\is-pmish.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-gjlln.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-ef56j.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-cudsc.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-7iibg.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\7-zip\is-fmomg.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-agg9m.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-3d5mt.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-utlr7.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-f07s2.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-0ggoe.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-8jevl.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-a2oqj.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-2r71u.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-38d6j.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-v50lb.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-24gpe.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-jmjh4.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-233ns.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-hk9ao.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-v0jve.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-9cqm5.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-n9rk1.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-25c4m.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-60878.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-s7bau.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-q200j.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-l68t5.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-cprbm.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-dnp5b.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-lijpu.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-aet65.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ko8te.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ckrl2.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-9jprf.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-amrcq.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-h8vpm.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-egd9b.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-9ce3t.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-8vd5t.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-h5n27.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-i4pav.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-f10uv.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-02sc7.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-b4nso.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-jv5ml.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-n87sd.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-0qcef.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-habj1.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-glcb6.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-jff5f.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ubini.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-fg46n.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-gf4t9.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-fm6k2.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-dt3l8.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-7937f.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-g8gvo.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-gsdbf.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-4bp18.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-4ngmd.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-at19e.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-mvvms.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-j9p1a.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-sh5pn.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-bik92.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-j5e02.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-6fd66.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-foa56.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-f081d.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-1q6ko.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-45lkm.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-emmgi.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-j6g97.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-tmot5.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\is-u2vd1.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}' WindowName: ''

Creates and executes the following

'%TEMP%\is-6sp0a.tmp\is-8egbf.tmp' /SL4 $120226 "<Full path to file>" 7024914 52736
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' 0758b5d8583f9c30da3c12ada93b7a49

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней