Mi biblioteca
Mi biblioteca

+ Añadir a la biblioteca

Soporte
Soporte 24 horas | Normas de contactar

Sus solicitudes

Perfil

Trojan.DownLoader45.11962

Added to the Dr.Web virus database: 2022-08-20

Virus description added:

Technical Information

Modifies file system
Creates the following files
  • %TEMP%\is-nibb5.tmp\is-0jlo7.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-58b4i.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-amn4o.tmp
  • %ProgramFiles(x86)%\viewfd\lsd\is-m0l5s.tmp
  • %ProgramFiles(x86)%\viewfd\lsd\is-54tcs.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\is-908m4.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-1lk3j.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-u6k34.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-puue2.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-hue6v.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-n7nfu.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-e3heo.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-5ki3e.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-n97cq.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-1e1j0.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-8or68.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-38kbo.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-75o1e.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-s0fh3.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-6v6fl.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-1e8pp.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-bsrqi.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-sc4l6.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-3rqpf.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-29k0g.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-285g5.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-945k6.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-4a0bd.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-qib1n.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-su1si.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-8m2qu.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-e1pc5.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-svb0e.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-f8ft6.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-90g13.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-cua2i.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-3mfe0.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-17upr.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-lkbac.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-lcv78.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-c8hdu.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-vitul.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\transition\is-q0ruh.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-esmr3.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-0rts7.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-1mbt1.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-2lg9b.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-efcv0.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-2d51k.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-q44to.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-m4phv.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-3dgk8.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-2sddv.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-n4d9a.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-5p986.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-l0chr.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-pkqed.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-p3qqd.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-c0b8n.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-r0ebf.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-orq1f.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-kr9on.tmp
  • %ProgramFiles(x86)%\viewfd\is-tukf5.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\selection\is-thcq0.tmp
  • %ProgramFiles(x86)%\viewfd\is-oe1mt.tmp
  • %ProgramFiles(x86)%\viewfd\is-31tiv.tmp
  • %ProgramFiles(x86)%\viewfd\is-q4h9h.tmp
  • %ProgramFiles(x86)%\viewfd\is-e05dl.tmp
  • %ProgramFiles(x86)%\viewfd\is-cea2g.tmp
  • %ProgramFiles(x86)%\viewfd\is-gh9bu.tmp
  • %ProgramFiles(x86)%\viewfd\is-tmm1c.tmp
  • %ProgramFiles(x86)%\viewfd\is-lgebo.tmp
  • %ProgramFiles(x86)%\viewfd\is-6icrv.tmp
  • %ProgramFiles(x86)%\viewfd\unins000.dat
  • %ProgramFiles(x86)%\viewfd\url\search\is-a395i.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-1titt.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-gprju.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-m42nm.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-cprhv.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-clg1o.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-dojot.tmp
  • %ProgramFiles(x86)%\viewfd\programs\is-5l0lu.tmp
  • %ProgramFiles(x86)%\viewfd\radio\is-gkclc.tmp
  • %ProgramFiles(x86)%\viewfd\radio\is-6u9pq.tmp
  • %ProgramFiles(x86)%\viewfd\reports\is-g09k7.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-j8ndi.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-98dmi.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-j4rmm.tmp
  • %ProgramFiles(x86)%\viewfd\viewfd.exe
  • %ProgramFiles(x86)%\viewfd\url\search\is-k82ke.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-fpd38.tmp
  • %ProgramFiles(x86)%\viewfd\soft\is-705t6.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-tjnr2.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-hi6tn.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-qf5d7.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-q155v.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-tkgq2.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-lkinm.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-0iba6.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-70otr.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-l4nal.tmp
  • %ProgramFiles(x86)%\viewfd\is-krar8.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-desos.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\metallic\is-bjbkj.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-be4ct.tmp
  • %ProgramFiles(x86)%\viewfd\data\is-pjugm.tmp
  • %ProgramFiles(x86)%\viewfd\forms\is-vufcr.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-87j7t.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-uhrmf.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-v3o3g.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-h28pv.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-2hhkj.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-k1gcr.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-ssk3t.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-7uf6f.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-jqukp.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-mqekr.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-7johb.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-v1jd4.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-g8gq8.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ftv74.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-oqnvr.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-72fkj.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-01oqn.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-ojjtl.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-pup10.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-mouq8.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-4jkvd.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-a3mm3.tmp
  • %TEMP%\is-5u8et.tmp\_isetup\_setup64.tmp
  • %TEMP%\is-5u8et.tmp\_isetup\_shfoldr.dll
  • %TEMP%\is-5u8et.tmp\_isetup\_iscrypt.dll
  • %ProgramFiles(x86)%\viewfd\is-s5gol.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\lang\is-up0ap.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-8fkbl.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-oovf8.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-381td.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-vpchf.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-avdgg.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-2pa7q.tmp
  • %ProgramFiles(x86)%\viewfd\backup\is-n31o0.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-3d6kb.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-02b1b.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-e14pl.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-s407h.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-uqmi5.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-03g1f.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-h68h8.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-ch8ge.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-cibtm.tmp
  • %TEMP%\is-5u8et.tmp\_isetup\_regdll.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-nu1np.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-pouhn.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ufbt2.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-cuffv.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-mvshs.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-e6q53.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-3ansb.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-7454t.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-dsaku.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-evtve.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-79tn6.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-kuvu2.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-lg4hn.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-463ab.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\new\is-oa5k3.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-rv5d3.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-un1ev.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\saturation\is-c2m7f.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-hflta.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-0hjip.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-rgc7c.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-i54sk.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-29re4.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-40s9s.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ptp9p.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-bsdji.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-jqf0s.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-1139p.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-n5afb.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-0p8rk.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-77dhn.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-7i8ao.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-incp7.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\brightness\is-tl3nn.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-es1vg.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-ohqim.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-si4fq.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-iq8jo.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-lu22k.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-ss1l8.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-debnp.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-v10lo.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-aavnq.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-kpf26.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-tv9bc.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-bcp3i.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-6kdfq.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-kand9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-sj51r.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-a2tet.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-0s4fd.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-jlge8.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\grids\is-gevtf.tmp
  • %TEMP%\lohkos.cab
Moves the following files
  • from %ProgramFiles(x86)%\viewfd\is-s5gol.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
  • from %ProgramFiles(x86)%\viewfd\ini\is-58b4i.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-amn4o.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
  • from %ProgramFiles(x86)%\viewfd\lsd\is-m0l5s.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
  • from %ProgramFiles(x86)%\viewfd\lsd\is-54tcs.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\is-908m4.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-1lk3j.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-u6k34.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-puue2.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
  • from %ProgramFiles(x86)%\viewfd\ini\is-bsrqi.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-sc4l6.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-hue6v.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-5ki3e.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-n97cq.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-1e1j0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-8or68.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-38kbo.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-75o1e.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-s0fh3.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-6v6fl.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-e3heo.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-3mfe0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
  • from %ProgramFiles(x86)%\viewfd\ini\is-3rqpf.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-29k0g.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-285g5.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-4a0bd.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-qib1n.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-su1si.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-8m2qu.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-e1pc5.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-svb0e.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-f8ft6.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-90g13.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-17upr.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-945k6.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-n7nfu.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-lkbac.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-lcv78.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-c8hdu.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-vitul.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\transition\is-q0ruh.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-esmr3.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-0rts7.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\ini\is-1mbt1.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-2lg9b.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-2d51k.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-1e8pp.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-cua2i.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-q44to.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-m4phv.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
  • from %ProgramFiles(x86)%\viewfd\url\search\is-gprju.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
  • from %ProgramFiles(x86)%\viewfd\url\search\is-a395i.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-2sddv.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-n4d9a.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-5p986.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-l0chr.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-pkqed.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-p3qqd.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-c0b8n.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-r0ebf.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-orq1f.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-kr9on.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
  • from %ProgramFiles(x86)%\viewfd\is-krar8.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
  • from %ProgramFiles(x86)%\viewfd\is-tukf5.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
  • from %ProgramFiles(x86)%\viewfd\is-oe1mt.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
  • from %ProgramFiles(x86)%\viewfd\is-31tiv.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
  • from %ProgramFiles(x86)%\viewfd\is-q4h9h.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
  • from %ProgramFiles(x86)%\viewfd\is-e05dl.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
  • from %ProgramFiles(x86)%\viewfd\is-cea2g.tmp to %ProgramFiles(x86)%\viewfd\readme.html
  • from %ProgramFiles(x86)%\viewfd\is-gh9bu.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
  • from %ProgramFiles(x86)%\viewfd\is-tmm1c.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
  • from %ProgramFiles(x86)%\viewfd\url\search\is-l4nal.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-70otr.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
  • from %ProgramFiles(x86)%\viewfd\url\search\is-k82ke.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-0iba6.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-3dgk8.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-cprhv.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-clg1o.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-dojot.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
  • from %ProgramFiles(x86)%\viewfd\programs\is-5l0lu.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
  • from %ProgramFiles(x86)%\viewfd\radio\is-gkclc.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
  • from %ProgramFiles(x86)%\viewfd\radio\is-6u9pq.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
  • from %ProgramFiles(x86)%\viewfd\reports\is-g09k7.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
  • from %ProgramFiles(x86)%\viewfd\search\is-j8ndi.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-98dmi.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-j4rmm.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-m42nm.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-1titt.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-fpd38.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
  • from %ProgramFiles(x86)%\viewfd\soft\is-705t6.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-tjnr2.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-hi6tn.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-qf5d7.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
  • from %ProgramFiles(x86)%\viewfd\url\is-q155v.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
  • from %ProgramFiles(x86)%\viewfd\url\is-tkgq2.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-lkinm.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
  • from %ProgramFiles(x86)%\viewfd\is-lgebo.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
  • from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-efcv0.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\selection\is-thcq0.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-desos.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\formulas\is-uhrmf.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-v3o3g.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-h28pv.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-2hhkj.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-k1gcr.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-7uf6f.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-2pa7q.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-jqukp.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
  • from %ProgramFiles(x86)%\viewfd\forms\is-vufcr.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
  • from %ProgramFiles(x86)%\viewfd\formulas\is-87j7t.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-mqekr.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-g8gq8.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ftv74.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-oqnvr.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-72fkj.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-01oqn.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-avdgg.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-pouhn.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ufbt2.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-7johb.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-v1jd4.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
  • from %ProgramFiles(x86)%\viewfd\data\is-pjugm.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-be4ct.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-pup10.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-8fkbl.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-oovf8.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-381td.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-vpchf.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
  • from %ProgramFiles(x86)%\viewfd\backup\is-n31o0.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
  • from %ProgramFiles(x86)%\viewfd\browser\is-ssk3t.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
  • from %ProgramFiles(x86)%\viewfd\browser\is-nu1np.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
  • from %ProgramFiles(x86)%\viewfd\browser\is-3d6kb.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
  • from %ProgramFiles(x86)%\viewfd\browser\is-02b1b.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
  • from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-up0ap.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-e14pl.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-uqmi5.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-03g1f.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-h68h8.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-ch8ge.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-cibtm.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-a3mm3.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-4jkvd.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-mouq8.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-ojjtl.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-s407h.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-cuffv.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-77dhn.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-7i8ao.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-incp7.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-3ansb.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-7454t.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-dsaku.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-evtve.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-79tn6.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-kuvu2.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-lg4hn.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-463ab.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-bjbkj.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\new\is-oa5k3.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-un1ev.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-c2m7f.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-hflta.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-0hjip.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-rgc7c.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-i54sk.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-29re4.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-40s9s.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ptp9p.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-bsdji.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-debnp.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-e6q53.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-jqf0s.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-mvshs.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-n5afb.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-tl3nn.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-es1vg.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ohqim.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-si4fq.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-iq8jo.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-lu22k.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ss1l8.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-0p8rk.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-1139p.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-aavnq.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-kpf26.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-tv9bc.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-bcp3i.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-6kdfq.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-kand9.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-sj51r.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-a2tet.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-0s4fd.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-jlge8.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-v10lo.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\grids\is-gevtf.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-rv5d3.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
  • from %ProgramFiles(x86)%\viewfd\is-6icrv.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc
Network activity
Connects to
  • 'so###como.gq':80
TCP
HTTP GET requests
  • http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######
HTTP POST requests
  • http://so###como.gq/new/net_api
UDP
  • DNS ASK so###como.gq
Miscellaneous
Searches for the following windows
  • ClassName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}' WindowName: ''
Creates and executes the following
  • '%TEMP%\is-nibb5.tmp\is-0jlo7.tmp' /SL4 $14001A "<Full path to file>" 7001032 52736
  • '%ProgramFiles(x86)%\viewfd\viewfd.exe'
  • '%ProgramFiles(x86)%\viewfd\viewfd.exe' 6779eae87cc8d491aca744906c23e753
Executes the following
  • '%WINDIR%\syswow64\schtasks.exe' /Query
  • '%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android