Trojan.DownLoader45.11945

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-n0ilv.tmp\is-l72sb.tmp
%ProgramFiles(x86)%\viewfd\ini\is-6knq8.tmp
%ProgramFiles(x86)%\viewfd\ini\is-s6c4f.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-v2i4r.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-2oq8u.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-g0t8m.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-honvj.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-vt0bf.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-hl052.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-q0ks6.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-7jj0b.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ish44.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-evfbt.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-cj3lh.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-p68lp.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-6j78a.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-sf3ra.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-60d9e.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-0b8sa.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-lroo2.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-hmdku.tmp
%ProgramFiles(x86)%\viewfd\ini\is-vdsue.tmp
%ProgramFiles(x86)%\viewfd\ini\is-m87ts.tmp
%ProgramFiles(x86)%\viewfd\ini\is-r0nj0.tmp
%ProgramFiles(x86)%\viewfd\ini\is-0lo45.tmp
%ProgramFiles(x86)%\viewfd\ini\is-2ube1.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-g9lq6.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-jeamm.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-p95sb.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-30jcu.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-g7r55.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-ujuoe.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-uq8s2.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-8lruf.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-r45rq.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-9uq0l.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7cdh1.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-cqk4m.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-rks4t.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-cg1t7.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-gjfhv.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-khg1v.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-to7r7.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-9uh7o.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-2b4dl.tmp
%ProgramFiles(x86)%\viewfd\ini\is-4r1fd.tmp
%ProgramFiles(x86)%\viewfd\ini\is-1bcdf.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-327qi.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-jjamt.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-nrj3g.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-bq0qv.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-5buuj.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-3kto6.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-u53dm.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-2kmkc.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-uvgu2.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-glvno.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-5pa6f.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-gv8na.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-mmsfp.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-rqev9.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-od1n1.tmp
%ProgramFiles(x86)%\viewfd\is-94vjj.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-8ijcf.tmp
%ProgramFiles(x86)%\viewfd\is-of8hf.tmp
%ProgramFiles(x86)%\viewfd\is-2rjd3.tmp
%ProgramFiles(x86)%\viewfd\is-k48me.tmp
%ProgramFiles(x86)%\viewfd\is-fdm1b.tmp
%ProgramFiles(x86)%\viewfd\is-jnf55.tmp
%ProgramFiles(x86)%\viewfd\is-c34qe.tmp
%ProgramFiles(x86)%\viewfd\is-idhg3.tmp
%ProgramFiles(x86)%\viewfd\is-g4qkn.tmp
%ProgramFiles(x86)%\viewfd\is-1a151.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\search\is-052ao.tmp
%ProgramFiles(x86)%\viewfd\search\is-idrh6.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-f307g.tmp
%ProgramFiles(x86)%\viewfd\search\is-fu9eg.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-tssnv.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-mktr3.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ta7vs.tmp
%ProgramFiles(x86)%\viewfd\programs\is-33q21.tmp
%ProgramFiles(x86)%\viewfd\radio\is-40p04.tmp
%ProgramFiles(x86)%\viewfd\radio\is-7uimq.tmp
%ProgramFiles(x86)%\viewfd\reports\is-rsm9f.tmp
%ProgramFiles(x86)%\viewfd\search\is-p9vcv.tmp
%ProgramFiles(x86)%\viewfd\search\is-ec8tr.tmp
%ProgramFiles(x86)%\viewfd\search\is-guced.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\url\search\is-rfrhr.tmp
%ProgramFiles(x86)%\viewfd\search\is-bm39t.tmp
%ProgramFiles(x86)%\viewfd\soft\is-mmktl.tmp
%ProgramFiles(x86)%\viewfd\url\is-keapo.tmp
%ProgramFiles(x86)%\viewfd\url\is-lel4d.tmp
%ProgramFiles(x86)%\viewfd\url\is-n81h1.tmp
%ProgramFiles(x86)%\viewfd\url\is-jt34a.tmp
%ProgramFiles(x86)%\viewfd\url\is-1h59u.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-gor0d.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-ti5jv.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-lqp63.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-r4i2t.tmp
%ProgramFiles(x86)%\viewfd\is-qvn13.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-no51n.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-50bpd.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-gh22c.tmp
%ProgramFiles(x86)%\viewfd\data\is-un649.tmp
%ProgramFiles(x86)%\viewfd\forms\is-j5to2.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-eice9.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-0potj.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-hkebc.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-ufkmg.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-vj4dg.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-clasm.tmp
%ProgramFiles(x86)%\viewfd\browser\is-cbrtd.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-boalt.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-7d432.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-dntre.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-argel.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-eiecu.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-v4grm.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-vr4pj.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-8lmkb.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-mmuke.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-jdoo4.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-pb194.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-n3pck.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-rk89s.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-vlfj9.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-4v53q.tmp
%TEMP%\is-plnmo.tmp\_isetup\_setup64.tmp
%TEMP%\is-plnmo.tmp\_isetup\_shfoldr.dll
%TEMP%\is-plnmo.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-kql08.tmp
%ProgramFiles(x86)%\viewfd\7-zip\lang\is-49lhv.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-cf6lr.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-92c1c.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-6ntkc.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-8hfhj.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-sttqs.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-skem7.tmp
%ProgramFiles(x86)%\viewfd\backup\is-gsiqr.tmp
%ProgramFiles(x86)%\viewfd\browser\is-aln3u.tmp
%ProgramFiles(x86)%\viewfd\browser\is-nbbdm.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-hckei.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-gkr47.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-t046r.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-d2033.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-ahrsj.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-0m0pf.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-7o2rv.tmp
%TEMP%\is-plnmo.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\viewfd\browser\is-vbcfe.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-4tbpo.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-0t0ae.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-q5od5.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-cmd5u.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-p897j.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-hcn05.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-uibc9.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-rl6v2.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-535c8.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-3ubqf.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-b5ruo.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-he46f.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-8vb88.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-qc8oe.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-s1t87.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-ar51s.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-msjoa.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-g6bcn.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-mfg82.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-kkpr2.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-4n8d6.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-p6i86.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-paggd.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ssgvo.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-gs9bm.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-dt268.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-mdtr8.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-deduo.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-5f992.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-ftg71.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-14c5j.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-3sogn.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-7v13h.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-5na9r.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-k1nil.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-nrud0.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-ejunv.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-c3vj2.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-1o7fm.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8up3i.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-6copa.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-lr6mc.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-ea4vc.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-osuik.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-bhhi3.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-3gnbk.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-89uoi.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-cfvrf.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-0vpl8.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-oq8eg.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-gnv5u.tmp
%ProgramFiles(x86)%\viewfd\graphic\grids\is-is8hg.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-kql08.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\ini\is-6knq8.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-s6c4f.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\lsd\is-v2i4r.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-2oq8u.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-g0t8m.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-honvj.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-vt0bf.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-hl052.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\ini\is-vdsue.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-m87ts.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-q0ks6.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-evfbt.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-cj3lh.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-p68lp.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-6j78a.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-sf3ra.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-60d9e.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-0b8sa.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-lroo2.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ish44.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7cdh1.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\ini\is-r0nj0.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\ini\is-0lo45.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\ini\is-2ube1.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-jeamm.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-p95sb.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-30jcu.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-g7r55.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ujuoe.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-uq8s2.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-8lruf.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-r45rq.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-cqk4m.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-g9lq6.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-7jj0b.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-rks4t.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-cg1t7.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-gjfhv.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-khg1v.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-to7r7.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-9uh7o.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-2b4dl.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-4r1fd.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-1bcdf.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-jjamt.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-hmdku.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-9uq0l.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-nrj3g.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-bq0qv.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-f307g.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-052ao.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-3kto6.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-u53dm.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-2kmkc.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-uvgu2.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-glvno.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-5pa6f.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-gv8na.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-mmsfp.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-rqev9.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-od1n1.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-qvn13.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\is-94vjj.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-of8hf.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-2rjd3.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-k48me.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-fdm1b.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-jnf55.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-c34qe.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-idhg3.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\url\search\is-r4i2t.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-lqp63.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\url\search\is-rfrhr.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\url\help\is-ti5jv.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-5buuj.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-tssnv.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-mktr3.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ta7vs.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-33q21.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-40p04.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-7uimq.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-rsm9f.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-p9vcv.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-ec8tr.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-guced.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-fu9eg.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-idrh6.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-bm39t.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-mmktl.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-keapo.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-lel4d.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-n81h1.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-jt34a.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-1h59u.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-gor0d.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\is-g4qkn.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-327qi.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-8ijcf.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-no51n.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-0potj.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-hkebc.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-ufkmg.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-vj4dg.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-clasm.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-boalt.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-skem7.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-7d432.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\forms\is-j5to2.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-eice9.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-dntre.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-v4grm.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-vr4pj.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-8lmkb.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-mmuke.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-jdoo4.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-sttqs.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-4tbpo.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-0t0ae.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-argel.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-eiecu.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\data\is-un649.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-gh22c.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-n3pck.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-cf6lr.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-92c1c.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\7-zip\is-6ntkc.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-8hfhj.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-gsiqr.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-cbrtd.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-vbcfe.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-aln3u.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-nbbdm.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-49lhv.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-hckei.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-t046r.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-d2033.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-ahrsj.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-0m0pf.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-7o2rv.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-4v53q.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-vlfj9.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-rk89s.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-pb194.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-gkr47.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-q5od5.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ftg71.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-14c5j.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-3sogn.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-hcn05.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-uibc9.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-rl6v2.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-535c8.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-3ubqf.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-b5ruo.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-he46f.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-8vb88.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-50bpd.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-qc8oe.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-ar51s.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-msjoa.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-g6bcn.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-mfg82.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-kkpr2.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-4n8d6.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-p6i86.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-paggd.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ssgvo.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-gs9bm.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8up3i.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-p897j.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-dt268.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-cmd5u.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-deduo.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-7v13h.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-5na9r.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-k1nil.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-nrud0.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ejunv.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-c3vj2.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-1o7fm.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-5f992.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-mdtr8.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-lr6mc.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-ea4vc.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-osuik.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-bhhi3.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-3gnbk.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-89uoi.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-cfvrf.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-0vpl8.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-oq8eg.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-gnv5u.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-6copa.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-is8hg.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-s1t87.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\is-1a151.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '{1E61A93F-EC60-4AD7-A3C8-3DDC3E02E405}' WindowName: ''

Creates and executes the following

'%TEMP%\is-n0ilv.tmp\is-l72sb.tmp' /SL4 $11022C "<Full path to file>" 6863072 52736
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' c147f5b700c69e7a6ce4890d7528ebd6

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней