Trojan.DownLoader45.18618

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-m96tq.tmp\is-1n416.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-deojh.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-vkpfj.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-pcrs3.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-mf5rv.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-8lm1j.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-gb5su.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-86o1r.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-q597l.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-32use.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-gqn6u.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-rf6d7.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-66bvh.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-hhbp9.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-t26hb.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-rmutv.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-otu2b.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-t9rid.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-el05u.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-n5kns.tmp
%ProgramFiles(x86)%\viewfd\ini\is-i64dq.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-gvtej.tmp
%ProgramFiles(x86)%\viewfd\ini\is-g73hp.tmp
%ProgramFiles(x86)%\viewfd\ini\is-mvn09.tmp
%ProgramFiles(x86)%\viewfd\ini\is-d9pav.tmp
%ProgramFiles(x86)%\viewfd\ini\is-o3vi8.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-2pget.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-lmdh0.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-tovtm.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-ta98d.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-ra2m5.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-pnvk8.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-79d8t.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-l2a7h.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-cdn2s.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-g6ukq.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-ajtjv.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-ckast.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-a76ej.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-v6dsb.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-iftnd.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-c0ae0.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-9e5b8.tmp
%ProgramFiles(x86)%\viewfd\ini\is-tisqm.tmp
%ProgramFiles(x86)%\viewfd\ini\is-9deq6.tmp
%ProgramFiles(x86)%\viewfd\ini\is-qqvis.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-sok1f.tmp
%ProgramFiles(x86)%\viewfd\ini\is-7ddmi.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-t852f.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-gq04b.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-cnkg1.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-38oju.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-fpuq6.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-orb6d.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-qs1pl.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-vum96.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-6um34.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-ngs20.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-6c4em.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-tgb9a.tmp
%ProgramFiles(x86)%\viewfd\is-tk5mm.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-rpbg5.tmp
%ProgramFiles(x86)%\viewfd\is-11b2q.tmp
%ProgramFiles(x86)%\viewfd\is-iojbg.tmp
%ProgramFiles(x86)%\viewfd\is-1774k.tmp
%ProgramFiles(x86)%\viewfd\is-tkfni.tmp
%ProgramFiles(x86)%\viewfd\is-v8v0g.tmp
%ProgramFiles(x86)%\viewfd\is-rs90g.tmp
%ProgramFiles(x86)%\viewfd\is-lon0n.tmp
%ProgramFiles(x86)%\viewfd\is-dqh31.tmp
%ProgramFiles(x86)%\viewfd\is-0evkr.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\soft\is-54v8t.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-nuqed.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-qtql8.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-gkog6.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-8grln.tmp
%ProgramFiles(x86)%\viewfd\programs\is-rh0bj.tmp
%ProgramFiles(x86)%\viewfd\radio\is-fn0a4.tmp
%ProgramFiles(x86)%\viewfd\radio\is-0l6c1.tmp
%ProgramFiles(x86)%\viewfd\reports\is-kuc3r.tmp
%ProgramFiles(x86)%\viewfd\search\is-htm25.tmp
%ProgramFiles(x86)%\viewfd\search\is-10htu.tmp
%ProgramFiles(x86)%\viewfd\search\is-lqnu5.tmp
%ProgramFiles(x86)%\viewfd\search\is-gm39h.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-8f813.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-cic7r.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-pqk2m.tmp
%ProgramFiles(x86)%\viewfd\search\is-gb6lh.tmp
%ProgramFiles(x86)%\viewfd\url\is-7m6ah.tmp
%ProgramFiles(x86)%\viewfd\url\is-4a4tp.tmp
%ProgramFiles(x86)%\viewfd\url\is-ebvba.tmp
%ProgramFiles(x86)%\viewfd\url\is-a0ih6.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-ob5pq.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-75et9.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-q3g7p.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-601ql.tmp
%ProgramFiles(x86)%\viewfd\search\is-vdkht.tmp
%ProgramFiles(x86)%\viewfd\soft\is-vuj10.tmp
%ProgramFiles(x86)%\viewfd\url\is-qkgin.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-1hgva.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-ohlek.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-hb2uh.tmp
%ProgramFiles(x86)%\viewfd\forms\is-iv26o.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-kdeht.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-am6iu.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-sna6c.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-1tteq.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-fjbt7.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-ch2qi.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-fv6ni.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-unorm.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-5l2ir.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-27kgm.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-ac9k8.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-9fki6.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-tm142.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-k6lan.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-j2de7.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-e2dav.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-uvpj2.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-e5ukm.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-lhkqv.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-78tio.tmp
%ProgramFiles(x86)%\viewfd\data\is-8l5iv.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-m28ji.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-g2rmp.tmp
%TEMP%\is-kn85i.tmp\_isetup\_regdll.tmp
%TEMP%\is-kn85i.tmp\_isetup\_shfoldr.dll
%TEMP%\is-kn85i.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-6289o.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-4vaus.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-ena9s.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-ip974.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-k3moj.tmp
%ProgramFiles(x86)%\viewfd\backup\is-221c4.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-k66r6.tmp
%ProgramFiles(x86)%\viewfd\browser\is-jh0r2.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-p8bqt.tmp
%ProgramFiles(x86)%\viewfd\browser\is-79djo.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-6pi0e.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-9v6tq.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-vcv80.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-18ff8.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-avpoo.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-g6j2e.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-l5mm3.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-0ua8l.tmp
%ProgramFiles(x86)%\viewfd\browser\is-h5q7v.tmp
%TEMP%\is-kn85i.tmp\_isetup\_setup64.tmp
%ProgramFiles(x86)%\viewfd\browser\is-ios70.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-kmp18.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-s2ite.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-rt7o3.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1qa9i.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1fnim.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-peekk.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-u6h3h.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-v4h8d.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-3ot41.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-t1nu9.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-pl3iq.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-3ut76.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-5i8nl.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-2rv5v.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-aj1fq.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-qmb1e.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8qsv5.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-rmhs0.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-u9alf.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-e3033.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-n4ief.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-91qbj.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-eb6ic.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-6ohfu.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-mqdsq.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-jo1qi.tmp
%ProgramFiles(x86)%\viewfd\is-umkdn.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\graphic\grids\is-nbi4v.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-knsai.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-08d6v.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-ipc6a.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-rv3p6.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-veh6r.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-nghnd.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-unf7d.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-pfh9n.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-ldcgf.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-ld07b.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-avgle.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-g1gqf.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-urk45.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-1jvvt.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-88kvv.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-8j6ah.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-saeil.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-i6nrg.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-44e8u.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-hjeic.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-ih90o.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-haiku.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-m44c8.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-6289o.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\lsd\is-deojh.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-vkpfj.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-pcrs3.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-mf5rv.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-8lm1j.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-gb5su.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-86o1r.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\ini\is-i64dq.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-q597l.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\ini\is-g73hp.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-gvtej.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-66bvh.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-hhbp9.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-t26hb.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-rmutv.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-otu2b.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-t9rid.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-el05u.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-gqn6u.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-n5kns.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-rf6d7.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\ini\is-mvn09.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-d9pav.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-o3vi8.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-lmdh0.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-tovtm.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ta98d.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ra2m5.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-pnvk8.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-79d8t.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-l2a7h.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-g6ukq.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-gq04b.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-32use.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-t852f.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-a76ej.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-v6dsb.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-iftnd.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-c0ae0.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-9e5b8.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-tisqm.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-9deq6.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\ini\is-qqvis.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ckast.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\ini\is-7ddmi.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-sok1f.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-2pget.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-cdn2s.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-cic7r.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\url\soft\is-54v8t.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-nuqed.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-fpuq6.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-orb6d.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-qs1pl.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-vum96.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-6um34.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-ngs20.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\url\search\is-rpbg5.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-qtql8.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-6c4em.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\is-11b2q.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-umkdn.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-iojbg.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-1774k.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-tkfni.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-v8v0g.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-rs90g.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-lon0n.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\wallpaper\is-tgb9a.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-tk5mm.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\url\search\is-gkog6.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-q3g7p.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-3ut76.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-38oju.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-rh0bj.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-fn0a4.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-0l6c1.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-kuc3r.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-htm25.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-10htu.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-lqnu5.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-gm39h.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-gb6lh.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-vdkht.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-vuj10.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-qkgin.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-7m6ah.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-4a4tp.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-ebvba.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-a0ih6.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-ob5pq.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\url\help\is-75et9.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-cnkg1.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-pqk2m.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-8f813.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-ajtjv.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-1hgva.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-ohlek.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-1tteq.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-fjbt7.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-ch2qi.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-fv6ni.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-unorm.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-27kgm.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-p8bqt.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\formulas\is-kdeht.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ac9k8.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\formulas\is-sna6c.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-tm142.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-j2de7.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-e2dav.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-uvpj2.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-e5ukm.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-k66r6.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-5l2ir.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-s2ite.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9fki6.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\forms\is-iv26o.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-k6lan.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\data\is-8l5iv.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-kmp18.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\is-4vaus.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-ip974.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-k3moj.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-221c4.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-jh0r2.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-h5q7v.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-79djo.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-ios70.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-6pi0e.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-9v6tq.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-ena9s.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\colourschemes\is-vcv80.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-avpoo.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-g6j2e.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-l5mm3.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-0ua8l.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-g2rmp.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-m28ji.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-78tio.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-lhkqv.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-5i8nl.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-18ff8.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-haiku.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-am6iu.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-knsai.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1qa9i.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-peekk.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-u6h3h.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-v4h8d.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-3ot41.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-t1nu9.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-pl3iq.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-aj1fq.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-6ohfu.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-mqdsq.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-jo1qi.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-qmb1e.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8qsv5.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-rmhs0.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-u9alf.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-e3033.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-n4ief.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-91qbj.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-eb6ic.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-hb2uh.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-2rv5v.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-08d6v.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1fnim.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-601ql.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\is-dqh31.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-avgle.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-rv3p6.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-veh6r.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-nghnd.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-unf7d.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-pfh9n.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ldcgf.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-g1gqf.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-8grln.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-m44c8.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ipc6a.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-urk45.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-88kvv.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-8j6ah.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-saeil.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-i6nrg.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-44e8u.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-hjeic.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-ih90o.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-nbi4v.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-ld07b.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-1jvvt.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-rt7o3.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\is-0evkr.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '' WindowName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}'

Creates and executes the following

'%TEMP%\is-m96tq.tmp\is-1n416.tmp' /SL4 $11021E "<Full path to file>" 7071844 141312
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' 188e77ba75dc7b6bcf17133f69b6ee9a

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement

Free trial