Mi biblioteca
Mi biblioteca

+ Añadir a la biblioteca

Soporte
Soporte 24 horas | Normas de contactar

Sus solicitudes

Perfil

Trojan.DownLoader44.65137

Added to the Dr.Web virus database: 2022-06-16

Virus description added:

Technical Information

Modifies file system
Creates the following files
  • %TEMP%\is-i8geg.tmp\is-n7jdo.tmp
  • %ProgramFiles(x86)%\viewfd\lsd\is-tfhte.tmp
  • %ProgramFiles(x86)%\viewfd\lsd\is-1dgt3.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\is-fcdbl.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-ecb5p.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-s0lui.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-dc09o.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-to2dv.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-e9t08.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-ufl16.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-rjpdv.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-2oukt.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-lin1u.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-2kshc.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-csp5q.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-94mg7.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-pqnpi.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-mefii.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-iv52m.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ajhjm.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-5b8v0.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-gj5do.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-6rcno.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-fn028.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-n9f8q.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-pv0fe.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-s7kqh.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-eqj73.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-8tbo7.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-jph91.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-ehb5b.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-kfbs5.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-fpjsg.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-37q5f.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-j6t9t.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-k4omi.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-m4hj8.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-c5t0i.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-drk1s.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-n7nos.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\transition\is-9qci4.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-5k7fj.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-hbkv4.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-mk2q2.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-hk42v.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-ubuqo.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-ead9u.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-ecia0.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-r6ggo.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-1o9al.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-sk0v8.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ftb97.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-bi8ug.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-713nu.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-khptc.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-7k1no.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-0gdnv.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-1oa6b.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-1n2ge.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-ifme6.tmp
  • %ProgramFiles(x86)%\viewfd\is-ko5r3.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-geuit.tmp
  • %ProgramFiles(x86)%\viewfd\is-g5lkv.tmp
  • %ProgramFiles(x86)%\viewfd\is-4o99m.tmp
  • %ProgramFiles(x86)%\viewfd\is-2g77k.tmp
  • %ProgramFiles(x86)%\viewfd\is-72c2h.tmp
  • %ProgramFiles(x86)%\viewfd\is-leo3d.tmp
  • %ProgramFiles(x86)%\viewfd\is-56vb1.tmp
  • %ProgramFiles(x86)%\viewfd\is-tf319.tmp
  • %ProgramFiles(x86)%\viewfd\is-pqr1q.tmp
  • %ProgramFiles(x86)%\viewfd\is-1umqq.tmp
  • %ProgramFiles(x86)%\viewfd\unins000.dat
  • %ProgramFiles(x86)%\viewfd\url\soft\is-bj35h.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-j4upl.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-k2duv.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-0fjr5.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-rtats.tmp
  • %ProgramFiles(x86)%\viewfd\programs\is-742hv.tmp
  • %ProgramFiles(x86)%\viewfd\radio\is-8f3m2.tmp
  • %ProgramFiles(x86)%\viewfd\radio\is-qlh3m.tmp
  • %ProgramFiles(x86)%\viewfd\reports\is-43366.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-cgg9r.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-j2nge.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-05vml.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-sc5fu.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-n1996.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-s5r9n.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-t58n2.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-9qqhi.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-fantr.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-kkjad.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-kun6d.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-vip4n.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-6ojnf.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-50ktf.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-8fg4n.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-9can8.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-uu49v.tmp
  • %ProgramFiles(x86)%\viewfd\soft\is-m8vla.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-vs546.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\selection\is-od26c.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-3fmdk.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-m91bu.tmp
  • %ProgramFiles(x86)%\viewfd\forms\is-dmsj4.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-n3arr.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-d9e0j.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-9ggmn.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-e54sg.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-d1jdn.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-fmk92.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-nepbv.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-1kutn.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-uhv3q.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-91v6o.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-vlvjn.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-gsdbg.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-pvjem.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-oj0rq.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-7amfo.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6c7ek.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-0esh8.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9jf7k.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-9j9db.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-qhi0r.tmp
  • %ProgramFiles(x86)%\viewfd\data\is-2kmm8.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-4jigp.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-r8kjq.tmp
  • %TEMP%\is-db9tf.tmp\_isetup\_regdll.tmp
  • %TEMP%\is-db9tf.tmp\_isetup\_shfoldr.dll
  • %TEMP%\is-db9tf.tmp\_isetup\_iscrypt.dll
  • %ProgramFiles(x86)%\viewfd\is-999t8.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-icfce.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-cme9m.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-p42i3.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-nhgbd.tmp
  • %ProgramFiles(x86)%\viewfd\backup\is-sq7m8.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-vg35p.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-rm09l.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-d1v57.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-c1pot.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-t25or.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-s633t.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-e6b2f.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-8m4vg.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-9q95v.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-aljgj.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-qhpor.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-tru2f.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-1mmt0.tmp
  • %TEMP%\is-db9tf.tmp\_isetup\_setup64.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-u29cm.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-lr7p4.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-58bu6.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-h8uep.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-p4kok.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-h3aq4.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-9c95s.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-tiplp.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ahffi.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-4jl3p.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-55k93.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\metallic\is-6b74s.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-7ob9a.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-95pnc.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-m12jc.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\new\is-gb0m0.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-2fgtn.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-6bv8i.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-17lmu.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-nlno5.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-nf2se.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-7j796.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-624t3.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-3c75r.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-sbgb0.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\saturation\is-tsmg6.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-p0knd.tmp
  • %ProgramFiles(x86)%\viewfd\is-ppqki.tmp
  • %ProgramFiles(x86)%\viewfd\viewfd.exe
  • %ProgramFiles(x86)%\viewfd\graphic\grids\is-34eg3.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-qf6rq.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\brightness\is-ssm99.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-28vdr.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-cs1at.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-elnrd.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-o1ha8.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-hp51o.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-ujlpf.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-fonrb.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-pmdqv.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-bbk3f.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-87hss.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-62v8b.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-89a0t.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-ki30u.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-konre.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-q1v36.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-036q2.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-g16tn.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-n7f6b.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-im70j.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-vpavi.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-16213.tmp
  • %TEMP%\lohkos.cab
Moves the following files
  • from %ProgramFiles(x86)%\viewfd\is-999t8.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
  • from %ProgramFiles(x86)%\viewfd\lsd\is-tfhte.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
  • from %ProgramFiles(x86)%\viewfd\lsd\is-1dgt3.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\is-fcdbl.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-ecb5p.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-s0lui.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-dc09o.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-to2dv.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
  • from %ProgramFiles(x86)%\viewfd\ini\is-5b8v0.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-e9t08.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
  • from %ProgramFiles(x86)%\viewfd\ini\is-6rcno.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-gj5do.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-lin1u.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-2kshc.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-csp5q.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-94mg7.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-pqnpi.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-mefii.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-iv52m.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-rjpdv.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ajhjm.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-2oukt.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
  • from %ProgramFiles(x86)%\viewfd\ini\is-fn028.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-n9f8q.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-pv0fe.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-eqj73.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-8tbo7.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-jph91.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ehb5b.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-kfbs5.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-fpjsg.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-37q5f.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-k4omi.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-1o9al.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ufl16.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-r6ggo.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-drk1s.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-n7nos.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\transition\is-9qci4.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-5k7fj.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-hbkv4.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\ini\is-mk2q2.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-hk42v.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-ubuqo.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-c5t0i.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
  • from %ProgramFiles(x86)%\viewfd\ini\is-ecia0.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ead9u.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-s7kqh.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-j6t9t.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-s5r9n.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-bj35h.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-j4upl.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-bi8ug.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-713nu.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-khptc.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-7k1no.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-0gdnv.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-1oa6b.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
  • from %ProgramFiles(x86)%\viewfd\url\search\is-geuit.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
  • from %ProgramFiles(x86)%\viewfd\url\search\is-k2duv.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-1n2ge.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
  • from %ProgramFiles(x86)%\viewfd\is-g5lkv.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
  • from %ProgramFiles(x86)%\viewfd\is-ppqki.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
  • from %ProgramFiles(x86)%\viewfd\is-4o99m.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
  • from %ProgramFiles(x86)%\viewfd\is-2g77k.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
  • from %ProgramFiles(x86)%\viewfd\is-72c2h.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
  • from %ProgramFiles(x86)%\viewfd\is-leo3d.tmp to %ProgramFiles(x86)%\viewfd\readme.html
  • from %ProgramFiles(x86)%\viewfd\is-56vb1.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
  • from %ProgramFiles(x86)%\viewfd\is-tf319.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-ifme6.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
  • from %ProgramFiles(x86)%\viewfd\is-ko5r3.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
  • from %ProgramFiles(x86)%\viewfd\url\search\is-0fjr5.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-8fg4n.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-7ob9a.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ftb97.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
  • from %ProgramFiles(x86)%\viewfd\programs\is-742hv.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
  • from %ProgramFiles(x86)%\viewfd\radio\is-8f3m2.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
  • from %ProgramFiles(x86)%\viewfd\radio\is-qlh3m.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
  • from %ProgramFiles(x86)%\viewfd\reports\is-43366.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
  • from %ProgramFiles(x86)%\viewfd\search\is-cgg9r.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-j2nge.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-05vml.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-sc5fu.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-9qqhi.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-uu49v.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
  • from %ProgramFiles(x86)%\viewfd\soft\is-m8vla.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-vs546.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-fantr.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-kkjad.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
  • from %ProgramFiles(x86)%\viewfd\url\is-kun6d.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
  • from %ProgramFiles(x86)%\viewfd\url\is-vip4n.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-6ojnf.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-50ktf.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-sk0v8.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-t58n2.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-n1996.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-m4hj8.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\selection\is-od26c.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-3fmdk.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\formulas\is-e54sg.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-d1jdn.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-fmk92.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-nepbv.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-1kutn.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-91v6o.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-d1v57.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
  • from %ProgramFiles(x86)%\viewfd\formulas\is-n3arr.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-vlvjn.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
  • from %ProgramFiles(x86)%\viewfd\formulas\is-9ggmn.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-pvjem.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-7amfo.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6c7ek.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-0esh8.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9jf7k.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-vg35p.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-uhv3q.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-58bu6.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-gsdbg.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
  • from %ProgramFiles(x86)%\viewfd\forms\is-dmsj4.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-oj0rq.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
  • from %ProgramFiles(x86)%\viewfd\data\is-2kmm8.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-lr7p4.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-icfce.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-p42i3.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-nhgbd.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
  • from %ProgramFiles(x86)%\viewfd\backup\is-sq7m8.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
  • from %ProgramFiles(x86)%\viewfd\browser\is-rm09l.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
  • from %ProgramFiles(x86)%\viewfd\browser\is-1mmt0.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
  • from %ProgramFiles(x86)%\viewfd\browser\is-c1pot.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
  • from %ProgramFiles(x86)%\viewfd\browser\is-u29cm.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-t25or.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-s633t.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-cme9m.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-e6b2f.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-9q95v.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-aljgj.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-qhpor.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-tru2f.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-r8kjq.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-4jigp.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-qhi0r.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-9j9db.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-95pnc.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-8m4vg.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-vpavi.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
  • from %ProgramFiles(x86)%\viewfd\formulas\is-d9e0j.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
  • from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-qf6rq.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-p4kok.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-9c95s.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-tiplp.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ahffi.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-4jl3p.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-55k93.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-6b74s.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\new\is-gb0m0.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-sbgb0.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-tsmg6.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-p0knd.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-2fgtn.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-6bv8i.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-17lmu.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-nlno5.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-nf2se.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-7j796.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-624t3.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-3c75r.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-m91bu.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-m12jc.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-ssm99.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-h3aq4.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
  • from %ProgramFiles(x86)%\viewfd\url\search\is-9can8.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
  • from %ProgramFiles(x86)%\viewfd\is-pqr1q.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
  • from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-bbk3f.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-cs1at.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-elnrd.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-o1ha8.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-hp51o.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ujlpf.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-fonrb.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-87hss.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-rtats.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-16213.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-28vdr.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-62v8b.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-ki30u.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-konre.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-q1v36.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-036q2.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-g16tn.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-n7f6b.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-im70j.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\grids\is-34eg3.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-pmdqv.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-89a0t.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-h8uep.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
  • from %ProgramFiles(x86)%\viewfd\is-1umqq.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc
Network activity
Connects to
  • 'so###como.gq':80
TCP
HTTP GET requests
  • http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######
HTTP POST requests
  • http://so###como.gq/new/net_api
UDP
  • DNS ASK so###como.gq
Miscellaneous
Searches for the following windows
  • ClassName: '' WindowName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}'
Creates and executes the following
  • '%TEMP%\is-i8geg.tmp\is-n7jdo.tmp' /SL4 $B021A "<Full path to file>" 7056521 141312
  • '%ProgramFiles(x86)%\viewfd\viewfd.exe'
  • '%ProgramFiles(x86)%\viewfd\viewfd.exe' 31dc7e61a8e3a665fd8f18ef9669adc9
Executes the following
  • '%WINDIR%\syswow64\schtasks.exe' /Query
  • '%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android