Trojan.DownLoader45.7538

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-csrco.tmp\is-hgbuv.tmp
%ProgramFiles(x86)%\viewfd\ini\is-70ceh.tmp
%ProgramFiles(x86)%\viewfd\ini\is-b5bpq.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-k5avg.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-9tqu5.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-stn2m.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-6b9hm.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-bmals.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7ig90.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-qujvu.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-8ss5j.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-mml6u.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ihuik.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-vkm71.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ko5tb.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-eeru7.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-cjnoo.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-vbfcm.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ombsl.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-o629m.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-io1t5.tmp
%ProgramFiles(x86)%\viewfd\ini\is-eu9da.tmp
%ProgramFiles(x86)%\viewfd\ini\is-ddioa.tmp
%ProgramFiles(x86)%\viewfd\ini\is-b8vvi.tmp
%ProgramFiles(x86)%\viewfd\ini\is-hepmm.tmp
%ProgramFiles(x86)%\viewfd\ini\is-b641o.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-jkjmj.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-4lskk.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-uje24.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-7q4pp.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-jmsl9.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-3rqp4.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-10rfi.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-i2pg2.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-igs3m.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-etlpm.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ekcf6.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-u6fs4.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-v6m8h.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-m98vd.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-e29cv.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-cv1p1.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-htiuj.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-jh58m.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-mfn2d.tmp
%ProgramFiles(x86)%\viewfd\ini\is-t7778.tmp
%ProgramFiles(x86)%\viewfd\ini\is-m2jkk.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-533mk.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-snh17.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-lnegj.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-qsscc.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-k055i.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-71unr.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-a2crt.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-p3sbd.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-sau15.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-4sjn5.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-keaje.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-mrp83.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-1mnjj.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-f012d.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-vogmn.tmp
%ProgramFiles(x86)%\viewfd\is-r1nc6.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-nbf8g.tmp
%ProgramFiles(x86)%\viewfd\is-bi1sc.tmp
%ProgramFiles(x86)%\viewfd\is-kouji.tmp
%ProgramFiles(x86)%\viewfd\is-6jv6m.tmp
%ProgramFiles(x86)%\viewfd\is-msv2l.tmp
%ProgramFiles(x86)%\viewfd\is-onmrp.tmp
%ProgramFiles(x86)%\viewfd\is-dnfrk.tmp
%ProgramFiles(x86)%\viewfd\is-q2v64.tmp
%ProgramFiles(x86)%\viewfd\is-qefip.tmp
%ProgramFiles(x86)%\viewfd\is-92sbd.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\search\is-jca13.tmp
%ProgramFiles(x86)%\viewfd\search\is-08tcd.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-7k38p.tmp
%ProgramFiles(x86)%\viewfd\search\is-62ln5.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-3faao.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-v4a8t.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-v7gl0.tmp
%ProgramFiles(x86)%\viewfd\programs\is-snpro.tmp
%ProgramFiles(x86)%\viewfd\radio\is-osugk.tmp
%ProgramFiles(x86)%\viewfd\radio\is-ekepc.tmp
%ProgramFiles(x86)%\viewfd\reports\is-5756b.tmp
%ProgramFiles(x86)%\viewfd\search\is-1vmde.tmp
%ProgramFiles(x86)%\viewfd\search\is-ofqg4.tmp
%ProgramFiles(x86)%\viewfd\search\is-bispo.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\url\search\is-08mlo.tmp
%ProgramFiles(x86)%\viewfd\search\is-1731t.tmp
%ProgramFiles(x86)%\viewfd\soft\is-qc45o.tmp
%ProgramFiles(x86)%\viewfd\url\is-vc9i4.tmp
%ProgramFiles(x86)%\viewfd\url\is-9hbec.tmp
%ProgramFiles(x86)%\viewfd\url\is-r5vip.tmp
%ProgramFiles(x86)%\viewfd\url\is-3l1t4.tmp
%ProgramFiles(x86)%\viewfd\url\is-l49m3.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-5h5d4.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-7n03g.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-aqu3l.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-g966c.tmp
%ProgramFiles(x86)%\viewfd\is-9n8fj.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-iacgt.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-n0rqf.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-p33o6.tmp
%ProgramFiles(x86)%\viewfd\data\is-u9p1d.tmp
%ProgramFiles(x86)%\viewfd\forms\is-jcgpp.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-vji6p.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-sgm85.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-dc3g8.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-hfauv.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-4gi7p.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-hj8g1.tmp
%ProgramFiles(x86)%\viewfd\browser\is-jj587.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-ajp6i.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-tes32.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-k96bh.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-5cdf1.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-mrrut.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-7c35e.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-1b8qd.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-29l8g.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-brc95.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-an3fl.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-nkeo3.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-q8b7d.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-m6i39.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-lvk8c.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-hv94r.tmp
%TEMP%\is-9j4k3.tmp\_isetup\_setup64.tmp
%TEMP%\is-9j4k3.tmp\_isetup\_shfoldr.dll
%TEMP%\is-9j4k3.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-3tg2t.tmp
%ProgramFiles(x86)%\viewfd\7-zip\lang\is-nn1f6.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-9tonr.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-glmrf.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-it66p.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-6imth.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-bsk0e.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-0arpe.tmp
%ProgramFiles(x86)%\viewfd\backup\is-pl66j.tmp
%ProgramFiles(x86)%\viewfd\browser\is-819il.tmp
%ProgramFiles(x86)%\viewfd\browser\is-mie76.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-222u4.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-ra624.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-pd7c9.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-qveeb.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-u0s4u.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-frsj3.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-3bic6.tmp
%TEMP%\is-9j4k3.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\viewfd\browser\is-4t5lj.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-4mt5l.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-rd3lt.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-4o7me.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-jeu0k.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-hs3t4.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ktsro.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-aub65.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-hfigh.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-6etjh.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ugtep.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-r9ekd.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-4i62l.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-9ub58.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-mqbdq.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-6takr.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-7besq.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-pfjf2.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-vsiei.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-b2u17.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-krj8o.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-85e1n.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-cqeup.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-nv2ha.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-n8nk6.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-n491u.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-v5e8c.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-49fho.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-l4klj.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-k0bgo.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-hjl5c.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-i3vd8.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-dut6u.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-oef2i.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-lc0ku.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-kupq2.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-s961v.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-ghjgo.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-fhfus.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-ca3qq.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-2dg2s.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-9dkh9.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-bjvmv.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-u14i9.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-87913.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-oa4ab.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-ikdku.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-8o8n6.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-1im4l.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-t4vj9.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-9qmki.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-raoka.tmp
%ProgramFiles(x86)%\viewfd\graphic\grids\is-kv1p9.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-3tg2t.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\ini\is-70ceh.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-b5bpq.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\lsd\is-k5avg.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-9tqu5.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-stn2m.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-6b9hm.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-bmals.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7ig90.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\ini\is-eu9da.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-ddioa.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-qujvu.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ihuik.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-vkm71.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ko5tb.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-eeru7.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-cjnoo.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-vbfcm.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ombsl.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-o629m.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-mml6u.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ekcf6.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\ini\is-b8vvi.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\ini\is-hepmm.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\ini\is-b641o.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-4lskk.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-uje24.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-7q4pp.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-jmsl9.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-3rqp4.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-10rfi.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-i2pg2.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-igs3m.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-u6fs4.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-jkjmj.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-8ss5j.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-v6m8h.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-m98vd.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-e29cv.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-cv1p1.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-htiuj.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-jh58m.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-mfn2d.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-t7778.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-m2jkk.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-snh17.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-io1t5.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-etlpm.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-lnegj.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-qsscc.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-7k38p.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-jca13.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-71unr.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-a2crt.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-p3sbd.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-sau15.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-4sjn5.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-keaje.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-mrp83.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-1mnjj.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-f012d.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-vogmn.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-9n8fj.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\is-r1nc6.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-bi1sc.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-kouji.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-6jv6m.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-msv2l.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-onmrp.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-dnfrk.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-q2v64.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\url\search\is-g966c.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-aqu3l.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\url\search\is-08mlo.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\url\help\is-7n03g.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-k055i.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-3faao.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-v4a8t.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-v7gl0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-snpro.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-osugk.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-ekepc.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-5756b.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-1vmde.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-ofqg4.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-bispo.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-62ln5.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-08tcd.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-1731t.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-qc45o.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-vc9i4.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-9hbec.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-r5vip.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-3l1t4.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-l49m3.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-5h5d4.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\is-qefip.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-533mk.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-nbf8g.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-iacgt.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-sgm85.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-dc3g8.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-hfauv.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-4gi7p.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-hj8g1.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-ajp6i.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-0arpe.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-tes32.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\forms\is-jcgpp.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-vji6p.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-k96bh.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-7c35e.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-1b8qd.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-29l8g.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-brc95.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-an3fl.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-bsk0e.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-4mt5l.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-rd3lt.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-5cdf1.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-mrrut.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\data\is-u9p1d.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-p33o6.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-q8b7d.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-9tonr.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-glmrf.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\7-zip\is-it66p.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-6imth.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-pl66j.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-jj587.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-4t5lj.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-819il.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-mie76.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-nn1f6.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-222u4.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-pd7c9.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-qveeb.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-u0s4u.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-frsj3.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-3bic6.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-hv94r.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-lvk8c.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-m6i39.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-nkeo3.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-ra624.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-4o7me.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-hjl5c.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-i3vd8.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-dut6u.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ktsro.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-aub65.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-hfigh.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-6etjh.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ugtep.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-r9ekd.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-4i62l.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-9ub58.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-n0rqf.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-mqbdq.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-7besq.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-pfjf2.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-vsiei.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-b2u17.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-krj8o.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-85e1n.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-cqeup.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-nv2ha.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-n8nk6.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-n491u.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-2dg2s.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-hs3t4.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-v5e8c.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-jeu0k.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-l4klj.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-oef2i.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-lc0ku.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-kupq2.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-s961v.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ghjgo.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-fhfus.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ca3qq.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-k0bgo.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-49fho.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-bjvmv.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-u14i9.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-87913.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-oa4ab.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-ikdku.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-8o8n6.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-1im4l.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-t4vj9.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-9qmki.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-raoka.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-9dkh9.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-kv1p9.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-6takr.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\is-92sbd.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '{1E61A93F-EC60-4AD7-A3C8-3DDC3E02E405}' WindowName: ''

Creates and executes the following

'%TEMP%\is-csrco.tmp\is-hgbuv.tmp' /SL4 $110016 "<Full path to file>" 6831678 52736
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' cc344cead5f9952d1e517c6dbacfab87

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней