Trojan.DownLoader45.20096

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-96f58.tmp\is-62v65.tmp
%ProgramFiles(x86)%\viewfd\ini\is-at5ko.tmp
%ProgramFiles(x86)%\viewfd\ini\is-ek845.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-itobh.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-2u4jl.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-9vhcd.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-3s6pe.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-hh5gu.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-0k9li.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-fuqou.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-k3n81.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-se676.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-4aiqp.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-gkj64.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-kdl83.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-3v907.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-sj303.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-0g13n.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-4ecb0.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-87jpl.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-8vdm8.tmp
%ProgramFiles(x86)%\viewfd\ini\is-djdem.tmp
%ProgramFiles(x86)%\viewfd\ini\is-mmbca.tmp
%ProgramFiles(x86)%\viewfd\ini\is-14f0j.tmp
%ProgramFiles(x86)%\viewfd\ini\is-00ta7.tmp
%ProgramFiles(x86)%\viewfd\ini\is-91aaq.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-87saa.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-offsf.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-2uv3h.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-jfm41.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-ep7or.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-nh0s3.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-kjakj.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-l80ob.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-7ehpc.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-dhu5e.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-15l0i.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-20r5p.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-8ljll.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-75la9.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-0qdhk.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-r0uni.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-d4krg.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-tkcec.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-psn93.tmp
%ProgramFiles(x86)%\viewfd\ini\is-datrv.tmp
%ProgramFiles(x86)%\viewfd\ini\is-utosi.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-v5psu.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-63d8j.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-s03ij.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-285qj.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-94t1v.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-kncul.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-lf377.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-1s0i7.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-tl1aj.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-0ljan.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-0nsai.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-o7s5v.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-kj1s9.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-c86e2.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-2edi7.tmp
%ProgramFiles(x86)%\viewfd\is-nt6q5.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-2af53.tmp
%ProgramFiles(x86)%\viewfd\is-9i5ud.tmp
%ProgramFiles(x86)%\viewfd\is-6fdav.tmp
%ProgramFiles(x86)%\viewfd\is-56ku3.tmp
%ProgramFiles(x86)%\viewfd\is-0gg2v.tmp
%ProgramFiles(x86)%\viewfd\is-vr9lh.tmp
%ProgramFiles(x86)%\viewfd\is-ujali.tmp
%ProgramFiles(x86)%\viewfd\is-r0t60.tmp
%ProgramFiles(x86)%\viewfd\is-o859g.tmp
%ProgramFiles(x86)%\viewfd\is-6mfh5.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\search\is-msmqd.tmp
%ProgramFiles(x86)%\viewfd\search\is-usu23.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-bed8d.tmp
%ProgramFiles(x86)%\viewfd\search\is-t0lg1.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-h1l31.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-nn8lk.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-hlrkq.tmp
%ProgramFiles(x86)%\viewfd\programs\is-5lns1.tmp
%ProgramFiles(x86)%\viewfd\radio\is-1avo9.tmp
%ProgramFiles(x86)%\viewfd\radio\is-p2kus.tmp
%ProgramFiles(x86)%\viewfd\reports\is-dtbu1.tmp
%ProgramFiles(x86)%\viewfd\search\is-rv7h5.tmp
%ProgramFiles(x86)%\viewfd\search\is-jl54u.tmp
%ProgramFiles(x86)%\viewfd\search\is-cu3d2.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\url\search\is-29to3.tmp
%ProgramFiles(x86)%\viewfd\search\is-52ncn.tmp
%ProgramFiles(x86)%\viewfd\soft\is-mi6iv.tmp
%ProgramFiles(x86)%\viewfd\url\is-0ld8h.tmp
%ProgramFiles(x86)%\viewfd\url\is-5gs3k.tmp
%ProgramFiles(x86)%\viewfd\url\is-aahnc.tmp
%ProgramFiles(x86)%\viewfd\url\is-sguna.tmp
%ProgramFiles(x86)%\viewfd\url\is-ckc9a.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-9gmug.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-dpmgm.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-svfks.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-unufe.tmp
%ProgramFiles(x86)%\viewfd\is-0favb.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-57ia6.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-ov6ph.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-qqrt1.tmp
%ProgramFiles(x86)%\viewfd\data\is-ic8pr.tmp
%ProgramFiles(x86)%\viewfd\forms\is-brql6.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-enim2.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-98cjp.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-prv6i.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-s1orq.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-qhgq7.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-4q6nf.tmp
%ProgramFiles(x86)%\viewfd\browser\is-hm08j.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-8kj42.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-u761g.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-468qs.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-delg2.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-dnm99.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-dn9jl.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-65v4n.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-17rcb.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-j63dl.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-c8psf.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-fjqhk.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-p0tha.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-02l44.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-j2dkg.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-b2ec7.tmp
%TEMP%\is-tip2i.tmp\_isetup\_setup64.tmp
%TEMP%\is-tip2i.tmp\_isetup\_shfoldr.dll
%TEMP%\is-tip2i.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-jhq3i.tmp
%ProgramFiles(x86)%\viewfd\7-zip\lang\is-0bebq.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-1f756.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-kcclb.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-4avsf.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-t1uf7.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-0vpfp.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-b5j68.tmp
%ProgramFiles(x86)%\viewfd\backup\is-71np7.tmp
%ProgramFiles(x86)%\viewfd\browser\is-ntvtu.tmp
%ProgramFiles(x86)%\viewfd\browser\is-ldplt.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-v4en0.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-gd5ao.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-a41ko.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-1ufb0.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-lmsfd.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-pjhfm.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-k234d.tmp
%TEMP%\is-tip2i.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\viewfd\browser\is-tb47j.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-9jbuk.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-0emg3.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-n5qbm.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-tgl2c.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-hl0s1.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ra65i.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-c1s3g.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-fjr0e.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-t6jlb.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-iddj6.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-qpgim.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-bqe3a.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-qgimq.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-ch4dc.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-62m82.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-q4ufq.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-ii6o6.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-oblfb.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-mk25b.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-tlouj.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-687l6.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-4m8va.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-3mega.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1vcsf.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-njqdi.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-0b8i3.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-a82p4.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-vr2ds.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-n7nnc.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-me1aq.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-jregm.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-56c1c.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-lvhl0.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-2ifog.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-k3og8.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-55767.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-fb7g8.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-273fm.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-rsrf3.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8si89.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-692oc.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-mrmr2.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-3oj2u.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-3l01k.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-au7fc.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-lglpc.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-bfj5i.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-ipr5n.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-36kmp.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-lujtd.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-s7lkm.tmp
%ProgramFiles(x86)%\viewfd\graphic\grids\is-lc2n3.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-jhq3i.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\ini\is-at5ko.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-ek845.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\lsd\is-itobh.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-2u4jl.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-9vhcd.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-3s6pe.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-hh5gu.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-0k9li.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\ini\is-djdem.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-mmbca.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-fuqou.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-4aiqp.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-gkj64.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-kdl83.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-3v907.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-sj303.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-0g13n.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-4ecb0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-87jpl.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-se676.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-15l0i.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\ini\is-14f0j.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\ini\is-00ta7.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\ini\is-91aaq.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-offsf.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-2uv3h.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-jfm41.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ep7or.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-nh0s3.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-kjakj.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-l80ob.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-7ehpc.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-20r5p.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-87saa.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-k3n81.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-8ljll.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-75la9.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-0qdhk.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-r0uni.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-d4krg.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-tkcec.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-psn93.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-datrv.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-utosi.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-63d8j.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-8vdm8.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-dhu5e.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-s03ij.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-285qj.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-bed8d.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-msmqd.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-kncul.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-lf377.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-1s0i7.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-tl1aj.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-0ljan.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-0nsai.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-o7s5v.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-kj1s9.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-c86e2.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-2edi7.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-0favb.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\is-nt6q5.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-9i5ud.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-6fdav.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-56ku3.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-0gg2v.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-vr9lh.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-ujali.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-r0t60.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\url\search\is-unufe.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-svfks.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\url\search\is-29to3.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\url\help\is-dpmgm.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-94t1v.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-h1l31.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-nn8lk.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-hlrkq.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-5lns1.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-1avo9.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-p2kus.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-dtbu1.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-rv7h5.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-jl54u.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-cu3d2.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-t0lg1.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-usu23.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-52ncn.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-mi6iv.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-0ld8h.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-5gs3k.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-aahnc.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-sguna.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-ckc9a.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-9gmug.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\is-o859g.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-v5psu.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-2af53.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-57ia6.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-98cjp.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-prv6i.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-s1orq.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-qhgq7.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-4q6nf.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-8kj42.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-b5j68.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-u761g.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\forms\is-brql6.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-enim2.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-468qs.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-dn9jl.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-65v4n.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-17rcb.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-j63dl.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-c8psf.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-0vpfp.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9jbuk.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-0emg3.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-delg2.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-dnm99.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\data\is-ic8pr.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-qqrt1.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-p0tha.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-1f756.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-kcclb.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\7-zip\is-4avsf.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-t1uf7.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-71np7.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-hm08j.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-tb47j.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-ntvtu.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-ldplt.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-0bebq.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-v4en0.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-a41ko.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-1ufb0.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-lmsfd.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-pjhfm.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-k234d.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-b2ec7.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-j2dkg.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-02l44.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-fjqhk.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-gd5ao.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-n5qbm.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-me1aq.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-jregm.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-56c1c.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ra65i.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-c1s3g.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-fjr0e.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-t6jlb.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-iddj6.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-qpgim.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-bqe3a.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-qgimq.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-ov6ph.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-ch4dc.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-q4ufq.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-ii6o6.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-oblfb.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-mk25b.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-tlouj.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-687l6.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-4m8va.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-3mega.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1vcsf.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-njqdi.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8si89.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-hl0s1.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-0b8i3.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-tgl2c.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-vr2ds.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-lvhl0.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-2ifog.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-k3og8.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-55767.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-fb7g8.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-273fm.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-rsrf3.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-n7nnc.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-a82p4.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-mrmr2.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-3oj2u.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-3l01k.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-au7fc.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-lglpc.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-bfj5i.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-ipr5n.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-36kmp.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-lujtd.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-s7lkm.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-692oc.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-lc2n3.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-62m82.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\is-6mfh5.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '' WindowName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}'

Creates and executes the following

'%TEMP%\is-96f58.tmp\is-62v65.tmp' /SL4 $11022C "<Full path to file>" 7181427 141312
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' 092735953c9c551aea6ebb2b4705480f

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней