Trojan.DownLoader45.18635

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-femm1.tmp\is-v4eva.tmp
%ProgramFiles(x86)%\viewfd\ini\is-6p3t5.tmp
%ProgramFiles(x86)%\viewfd\ini\is-6585u.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-1ssb6.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-ir33l.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-b0ml5.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-i4p0v.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ltg18.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ds2t0.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-t68b0.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-e874e.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tqf14.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-37gmt.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9p0jd.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-fv8e5.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ishh9.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-8agj1.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tkbn4.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9sqjr.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-3bhcm.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-os8n6.tmp
%ProgramFiles(x86)%\viewfd\ini\is-sm5c2.tmp
%ProgramFiles(x86)%\viewfd\ini\is-4p1d1.tmp
%ProgramFiles(x86)%\viewfd\ini\is-upnca.tmp
%ProgramFiles(x86)%\viewfd\ini\is-s7727.tmp
%ProgramFiles(x86)%\viewfd\ini\is-p4jvf.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-amahc.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-1vilh.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-i4fdh.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-opblq.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-87vgh.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-89bc9.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-97q6a.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-8ddko.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-205q4.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ba0iu.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-4ui11.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-ukp7a.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-1db8u.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-8spcb.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-ja04k.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-rrb28.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-uanbm.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-0g954.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-qpfnk.tmp
%ProgramFiles(x86)%\viewfd\ini\is-05skb.tmp
%ProgramFiles(x86)%\viewfd\ini\is-l4155.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-icalp.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-qakua.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-80g1u.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-qlu23.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-hnfd4.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-hvddf.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-b55j2.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-ta4m9.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-ur7ak.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-nm05g.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-ujum4.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-7kasi.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-f6hsu.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-7rf06.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-geamm.tmp
%ProgramFiles(x86)%\viewfd\is-tvqh6.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-uanha.tmp
%ProgramFiles(x86)%\viewfd\is-ed0kc.tmp
%ProgramFiles(x86)%\viewfd\is-5l36h.tmp
%ProgramFiles(x86)%\viewfd\is-u6cci.tmp
%ProgramFiles(x86)%\viewfd\is-9sg32.tmp
%ProgramFiles(x86)%\viewfd\is-b9nco.tmp
%ProgramFiles(x86)%\viewfd\is-n6brc.tmp
%ProgramFiles(x86)%\viewfd\is-t09rq.tmp
%ProgramFiles(x86)%\viewfd\is-gmuia.tmp
%ProgramFiles(x86)%\viewfd\is-rd782.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\search\is-ueb2d.tmp
%ProgramFiles(x86)%\viewfd\search\is-mjhn0.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-siier.tmp
%ProgramFiles(x86)%\viewfd\search\is-r0btf.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-v16nj.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-bn6c5.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-d83k6.tmp
%ProgramFiles(x86)%\viewfd\programs\is-jkp2i.tmp
%ProgramFiles(x86)%\viewfd\radio\is-qqs9q.tmp
%ProgramFiles(x86)%\viewfd\radio\is-e2ca8.tmp
%ProgramFiles(x86)%\viewfd\reports\is-qp3pn.tmp
%ProgramFiles(x86)%\viewfd\search\is-1m699.tmp
%ProgramFiles(x86)%\viewfd\search\is-sas2c.tmp
%ProgramFiles(x86)%\viewfd\search\is-2lvo0.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\url\search\is-0ulld.tmp
%ProgramFiles(x86)%\viewfd\search\is-lm3e0.tmp
%ProgramFiles(x86)%\viewfd\soft\is-qfbl5.tmp
%ProgramFiles(x86)%\viewfd\url\is-98au5.tmp
%ProgramFiles(x86)%\viewfd\url\is-knu5g.tmp
%ProgramFiles(x86)%\viewfd\url\is-b5ode.tmp
%ProgramFiles(x86)%\viewfd\url\is-tl65e.tmp
%ProgramFiles(x86)%\viewfd\url\is-4e7ei.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-s04ig.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-evflf.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-sgegj.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-pa1vp.tmp
%ProgramFiles(x86)%\viewfd\is-ieg6d.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-4v419.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-v8sbi.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-s5i2u.tmp
%ProgramFiles(x86)%\viewfd\data\is-efn63.tmp
%ProgramFiles(x86)%\viewfd\forms\is-tpns3.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-ue79f.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-57o8h.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-tb8h4.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-15aua.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-3skbh.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-scu5p.tmp
%ProgramFiles(x86)%\viewfd\browser\is-nv09t.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-49t2c.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-8ni8l.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-dmaqe.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-29foi.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-nl39h.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-3cj1j.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-80ga7.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-jkj6f.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-a4sa1.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-tfnb4.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-0rkj5.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-md1lo.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-r6fmg.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-v0hp7.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-dksnj.tmp
%TEMP%\is-kqhnn.tmp\_isetup\_setup64.tmp
%TEMP%\is-kqhnn.tmp\_isetup\_shfoldr.dll
%TEMP%\is-kqhnn.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-32543.tmp
%ProgramFiles(x86)%\viewfd\7-zip\lang\is-8rc06.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-6vk3q.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-kj1a8.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-872fl.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-gnc51.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-ss9ss.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-9l4fh.tmp
%ProgramFiles(x86)%\viewfd\backup\is-t7nj5.tmp
%ProgramFiles(x86)%\viewfd\browser\is-baqie.tmp
%ProgramFiles(x86)%\viewfd\browser\is-g62t2.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-mf8ue.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-8lt2m.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-8nna2.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-duea9.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-3ncjk.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-ip4bj.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-6c4hn.tmp
%TEMP%\is-kqhnn.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\viewfd\browser\is-e71cu.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-ev7iq.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-578iq.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-28ke0.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-0joil.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-sige7.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-5s24a.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-if6fv.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-54vsi.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-uqomn.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-lmu1o.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-e0f25.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ogrif.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-bsnb9.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-v6029.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-qislt.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-dmfu5.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-clpsl.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-pdolh.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-3mrj4.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-a3vdb.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8i4fl.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-tuvnd.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-t1pbe.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-fhohq.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-4lnsu.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-1q3t0.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-sa8i2.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-hl03g.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-o8vc7.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-egpu6.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-9ggoc.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-tij9j.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-64q6u.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-rm7tt.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-g9c5t.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-ci7o5.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-oup6n.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-0pufn.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-bo6u3.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-c1dct.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-42hf1.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-dr9bf.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-b9jnp.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-34fni.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-vlc1n.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-ohjcr.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-u60tl.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-uhoft.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-beq2f.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-qb4jj.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-7ceef.tmp
%ProgramFiles(x86)%\viewfd\graphic\grids\is-d11l2.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-32543.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\ini\is-6p3t5.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-6585u.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\lsd\is-1ssb6.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-ir33l.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-b0ml5.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-i4p0v.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ltg18.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ds2t0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\ini\is-sm5c2.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-4p1d1.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-t68b0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-37gmt.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9p0jd.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-fv8e5.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ishh9.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-8agj1.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tkbn4.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9sqjr.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-3bhcm.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tqf14.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-4ui11.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\ini\is-upnca.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\ini\is-s7727.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\ini\is-p4jvf.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-1vilh.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-i4fdh.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-opblq.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-87vgh.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-89bc9.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-97q6a.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-8ddko.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-205q4.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ukp7a.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-amahc.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-e874e.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-1db8u.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-8spcb.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ja04k.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-rrb28.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-uanbm.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-0g954.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-qpfnk.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-05skb.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-l4155.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-qakua.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-os8n6.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ba0iu.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-80g1u.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-qlu23.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-siier.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-ueb2d.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-hvddf.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-b55j2.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-ta4m9.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-ur7ak.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-nm05g.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-ujum4.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-7kasi.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-f6hsu.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-7rf06.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-geamm.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-ieg6d.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\is-tvqh6.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-ed0kc.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-5l36h.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-u6cci.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-9sg32.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-b9nco.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-n6brc.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-t09rq.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\url\search\is-pa1vp.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-sgegj.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\url\search\is-0ulld.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\url\help\is-evflf.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-hnfd4.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-v16nj.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-bn6c5.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-d83k6.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-jkp2i.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-qqs9q.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-e2ca8.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-qp3pn.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-1m699.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-sas2c.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-2lvo0.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-r0btf.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-mjhn0.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-lm3e0.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-qfbl5.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-98au5.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-knu5g.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-b5ode.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-tl65e.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-4e7ei.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-s04ig.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\is-gmuia.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-icalp.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-uanha.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-4v419.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-57o8h.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-tb8h4.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-15aua.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-3skbh.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-scu5p.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-49t2c.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9l4fh.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-8ni8l.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\forms\is-tpns3.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-ue79f.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-dmaqe.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-3cj1j.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-80ga7.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-jkj6f.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-a4sa1.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-tfnb4.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ss9ss.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ev7iq.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-578iq.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-29foi.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-nl39h.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\data\is-efn63.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-s5i2u.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-md1lo.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-6vk3q.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-kj1a8.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\7-zip\is-872fl.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-gnc51.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-t7nj5.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-nv09t.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-e71cu.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-baqie.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-g62t2.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-8rc06.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-mf8ue.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-8nna2.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-duea9.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-3ncjk.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-ip4bj.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-6c4hn.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-dksnj.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-v0hp7.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-r6fmg.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-0rkj5.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-8lt2m.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-28ke0.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-egpu6.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9ggoc.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-tij9j.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-5s24a.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-if6fv.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-54vsi.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-uqomn.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-lmu1o.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-e0f25.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ogrif.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-bsnb9.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-v8sbi.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-v6029.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-dmfu5.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-clpsl.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-pdolh.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-3mrj4.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-a3vdb.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8i4fl.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-tuvnd.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-t1pbe.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-fhohq.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-4lnsu.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-c1dct.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-sige7.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-1q3t0.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-0joil.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-hl03g.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-64q6u.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-rm7tt.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-g9c5t.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ci7o5.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-oup6n.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-0pufn.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-bo6u3.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-o8vc7.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-sa8i2.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-dr9bf.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-b9jnp.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-34fni.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-vlc1n.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-ohjcr.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-u60tl.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-uhoft.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-beq2f.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-qb4jj.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-7ceef.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-42hf1.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-d11l2.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-qislt.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\is-rd782.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '{1E61A93F-EC60-4AD7-A3C8-3DDC3E02E405}' WindowName: ''

Creates and executes the following

'%TEMP%\is-femm1.tmp\is-v4eva.tmp' /SL4 $B0238 "<Full path to file>" 6835722 52736
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' 0b2af6a1b06effbea6c8ce7cf57c6326

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement

Free trial