Trojan.DownLoader45.17022

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-nj8dd.tmp\is-s9thh.tmp
%ProgramFiles(x86)%\viewfd\ini\is-puugd.tmp
%ProgramFiles(x86)%\viewfd\ini\is-h7c0h.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-e2hjc.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-h9vss.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-i0b4h.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-85u45.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-sgb0g.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-dip5c.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-l6ci2.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-tn4ur.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-r9kmn.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-32j3n.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-a7rsn.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-505b0.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-08g8o.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9qpck.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-lobc8.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ib37o.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-l8o3c.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-rms8r.tmp
%ProgramFiles(x86)%\viewfd\ini\is-34v7a.tmp
%ProgramFiles(x86)%\viewfd\ini\is-urq9e.tmp
%ProgramFiles(x86)%\viewfd\ini\is-ovgd4.tmp
%ProgramFiles(x86)%\viewfd\ini\is-in8lu.tmp
%ProgramFiles(x86)%\viewfd\ini\is-q0jub.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-inra4.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-gq6th.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-dsuis.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-mph2r.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-e02cs.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-ap928.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-dt2td.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-a56mg.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-ugea4.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-u24ce.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-qd98b.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-mk3rh.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-jau3l.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-seai5.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-dtt2t.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-pl6vt.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-4a2v6.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-6ab2r.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-7i8pb.tmp
%ProgramFiles(x86)%\viewfd\ini\is-v7ev5.tmp
%ProgramFiles(x86)%\viewfd\ini\is-7ie6f.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-oteas.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-fdtcj.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-k1l7l.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-qkqu1.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-qmml5.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-vls44.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-0d04i.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-gf6f0.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-tj9ce.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-fmgdt.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-76lsg.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-b749n.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-33k0v.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-uigvf.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-ohhb9.tmp
%ProgramFiles(x86)%\viewfd\is-cemg5.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-s76ng.tmp
%ProgramFiles(x86)%\viewfd\is-udf6h.tmp
%ProgramFiles(x86)%\viewfd\is-a51lk.tmp
%ProgramFiles(x86)%\viewfd\is-8mot9.tmp
%ProgramFiles(x86)%\viewfd\is-furgr.tmp
%ProgramFiles(x86)%\viewfd\is-c9oks.tmp
%ProgramFiles(x86)%\viewfd\is-8n2k9.tmp
%ProgramFiles(x86)%\viewfd\is-num9l.tmp
%ProgramFiles(x86)%\viewfd\is-7u9dn.tmp
%ProgramFiles(x86)%\viewfd\is-8t507.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\search\is-2lhfs.tmp
%ProgramFiles(x86)%\viewfd\search\is-7dt63.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-iqd2m.tmp
%ProgramFiles(x86)%\viewfd\search\is-eih3k.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-gp5d1.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ofbpi.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-3d32f.tmp
%ProgramFiles(x86)%\viewfd\programs\is-ltk2a.tmp
%ProgramFiles(x86)%\viewfd\radio\is-1n01o.tmp
%ProgramFiles(x86)%\viewfd\radio\is-3vn05.tmp
%ProgramFiles(x86)%\viewfd\reports\is-45oud.tmp
%ProgramFiles(x86)%\viewfd\search\is-6mml1.tmp
%ProgramFiles(x86)%\viewfd\search\is-2fn2b.tmp
%ProgramFiles(x86)%\viewfd\search\is-56si6.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\url\search\is-hogob.tmp
%ProgramFiles(x86)%\viewfd\search\is-qfsaj.tmp
%ProgramFiles(x86)%\viewfd\soft\is-andqe.tmp
%ProgramFiles(x86)%\viewfd\url\is-jiq7r.tmp
%ProgramFiles(x86)%\viewfd\url\is-de927.tmp
%ProgramFiles(x86)%\viewfd\url\is-ejeq8.tmp
%ProgramFiles(x86)%\viewfd\url\is-7ktnk.tmp
%ProgramFiles(x86)%\viewfd\url\is-gfb4r.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-nl4a5.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-g5ol1.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-sjmsh.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-ba7im.tmp
%ProgramFiles(x86)%\viewfd\is-4e96h.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-rfuol.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-e9il4.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-lq4tv.tmp
%ProgramFiles(x86)%\viewfd\data\is-q4dog.tmp
%ProgramFiles(x86)%\viewfd\forms\is-8pagf.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-74l8h.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-7jq22.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-pp57u.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-1254m.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-utkgk.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-3jopj.tmp
%ProgramFiles(x86)%\viewfd\browser\is-isel4.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-0nb8l.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-u4k8c.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-f5ufb.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-ttagc.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-2cbcs.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-epffh.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-j1a21.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-6klos.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-5kqea.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-itc9q.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-c569q.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-mr8ka.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-l8k8i.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-sj7mi.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-1dfs7.tmp
%TEMP%\is-gu9ru.tmp\_isetup\_setup64.tmp
%TEMP%\is-gu9ru.tmp\_isetup\_shfoldr.dll
%TEMP%\is-gu9ru.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-sdjsd.tmp
%ProgramFiles(x86)%\viewfd\7-zip\lang\is-krca1.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-fpe6a.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-ue6d2.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-bfhd1.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-jsa41.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-v7i4e.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-hs0v8.tmp
%ProgramFiles(x86)%\viewfd\backup\is-epmbb.tmp
%ProgramFiles(x86)%\viewfd\browser\is-iatrs.tmp
%ProgramFiles(x86)%\viewfd\browser\is-rumlg.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-tk46t.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-kl7k9.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-b6v69.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-mjtch.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-de695.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-nmkad.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-rkac0.tmp
%TEMP%\is-gu9ru.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\viewfd\browser\is-f6o0c.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-0glvs.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-qbiob.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-9bpuv.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-vpq5p.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-48hn3.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-tieuv.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-nuesg.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-esqve.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-gntqd.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-s3jue.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ooi4t.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-0vv0e.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-c1kib.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-00cha.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1du45.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-ek75g.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-qfiel.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-hthho.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-3qmbg.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-4j4vc.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-aa734.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-dlmn3.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-qh616.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ij0is.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-2tj7g.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-k7qic.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-nqv9a.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-nu6ru.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-7tr5e.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-11qt9.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-4to75.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-a8djn.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-gseqp.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-gac7b.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-phrke.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-imut5.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-ou6d0.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-1j7hc.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-1dvhg.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-qttrt.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-0v6am.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-iptu2.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-i0hc2.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-cath9.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-5kp7i.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-fo648.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-voqlt.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-tkdpe.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-3bj3e.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-k1iek.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-trf4o.tmp
%ProgramFiles(x86)%\viewfd\graphic\grids\is-ts8sm.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-sdjsd.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\ini\is-puugd.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-h7c0h.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\lsd\is-e2hjc.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-h9vss.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-i0b4h.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-85u45.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-sgb0g.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-dip5c.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\ini\is-34v7a.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-urq9e.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-l6ci2.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-32j3n.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-a7rsn.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-505b0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-08g8o.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9qpck.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-lobc8.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ib37o.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-l8o3c.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-r9kmn.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-qd98b.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\ini\is-ovgd4.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\ini\is-in8lu.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\ini\is-q0jub.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-gq6th.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-dsuis.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-mph2r.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-e02cs.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ap928.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-dt2td.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-a56mg.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ugea4.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-mk3rh.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-inra4.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-tn4ur.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-jau3l.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-seai5.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-dtt2t.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-pl6vt.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-4a2v6.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-6ab2r.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-7i8pb.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-v7ev5.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-7ie6f.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-fdtcj.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-rms8r.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-u24ce.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-k1l7l.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-qkqu1.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-iqd2m.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-2lhfs.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-vls44.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-0d04i.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-gf6f0.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-tj9ce.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-fmgdt.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-76lsg.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-b749n.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-33k0v.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-uigvf.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-ohhb9.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-4e96h.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\is-cemg5.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-udf6h.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-a51lk.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-8mot9.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-furgr.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-c9oks.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-8n2k9.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-num9l.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\url\search\is-ba7im.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-sjmsh.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\url\search\is-hogob.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\url\help\is-g5ol1.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-qmml5.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-gp5d1.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ofbpi.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-3d32f.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-ltk2a.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-1n01o.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-3vn05.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-45oud.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-6mml1.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-2fn2b.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-56si6.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-eih3k.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-7dt63.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-qfsaj.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-andqe.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-jiq7r.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-de927.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-ejeq8.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-7ktnk.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-gfb4r.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-nl4a5.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\is-7u9dn.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-oteas.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-s76ng.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-rfuol.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-7jq22.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-pp57u.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-1254m.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-utkgk.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-3jopj.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-0nb8l.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-hs0v8.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-u4k8c.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\forms\is-8pagf.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-74l8h.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-f5ufb.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-epffh.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-j1a21.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6klos.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-5kqea.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-itc9q.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-v7i4e.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-0glvs.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-qbiob.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ttagc.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-2cbcs.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\data\is-q4dog.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-lq4tv.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-mr8ka.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-fpe6a.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-ue6d2.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\7-zip\is-bfhd1.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-jsa41.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-epmbb.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-isel4.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-f6o0c.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-iatrs.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-rumlg.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-krca1.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-tk46t.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-b6v69.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-mjtch.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-de695.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-nmkad.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-rkac0.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-1dfs7.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-sj7mi.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-l8k8i.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-c569q.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-kl7k9.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9bpuv.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-11qt9.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-4to75.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-a8djn.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-tieuv.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-nuesg.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-esqve.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-gntqd.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-s3jue.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ooi4t.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-0vv0e.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-c1kib.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-e9il4.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-00cha.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-ek75g.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-qfiel.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-hthho.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-3qmbg.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-4j4vc.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-aa734.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-dlmn3.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-qh616.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ij0is.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-2tj7g.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-qttrt.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-48hn3.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-k7qic.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-vpq5p.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-nu6ru.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-gseqp.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-gac7b.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-phrke.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-imut5.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ou6d0.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-1j7hc.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-1dvhg.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-7tr5e.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-nqv9a.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-iptu2.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-i0hc2.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-cath9.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-5kp7i.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-fo648.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-voqlt.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-tkdpe.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-3bj3e.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-k1iek.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-trf4o.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-0v6am.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-ts8sm.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1du45.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\is-8t507.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '{1E61A93F-EC60-4AD7-A3C8-3DDC3E02E405}' WindowName: ''

Creates and executes the following

'%TEMP%\is-nj8dd.tmp\is-s9thh.tmp' /SL4 $120224 "<Full path to file>" 6860663 52736
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' 91d6e9a9c99533ed7faccc8dd87bacc1

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней