Mi biblioteca
Mi biblioteca

+ Añadir a la biblioteca

Soporte
Soporte 24 horas | Normas de contactar

Sus solicitudes

Perfil

Trojan.DownLoader45.15870

Added to the Dr.Web virus database: 2022-09-09

Virus description added:

Technical Information

Modifies file system
Creates the following files
  • %TEMP%\is-jbl6c.tmp\is-n6ut3.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-g3p7j.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-ccomb.tmp
  • %ProgramFiles(x86)%\viewfd\lsd\is-t1kab.tmp
  • %ProgramFiles(x86)%\viewfd\lsd\is-d3u1l.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\is-kckmd.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-libvh.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-6r6jd.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-6iim0.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-e6pv5.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-fmvg4.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ccsq7.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-2bqul.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-0srth.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-c51h3.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-fe9h3.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-54l8d.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-qsah9.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-8m22t.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-pl1l7.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-i9ok0.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-5lmmp.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-i7h8s.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-ob87q.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-h5jqs.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-lrd6u.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-pejr9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-mrp5d.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-c5fk7.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-u1jbi.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-gtf2g.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-tvf0f.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-te1ef.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-0e3dq.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-v3i8n.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-gtgu6.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-r5b3o.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-dut6j.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-lq47n.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-s9toh.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-l83st.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-73b3t.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\transition\is-nq1t7.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-dipb2.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-e9hsi.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-8n5h8.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-9bcb0.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-9opvh.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-hod50.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-kle2e.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-5fpdr.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-3vqm5.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-k2i3n.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-t7ikf.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-9dpog.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-n6rtv.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-jv7ff.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-lucm8.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-9c84e.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-c008i.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-0gbfg.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-l08dc.tmp
  • %ProgramFiles(x86)%\viewfd\is-4bn8c.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\selection\is-tsr1k.tmp
  • %ProgramFiles(x86)%\viewfd\is-q239h.tmp
  • %ProgramFiles(x86)%\viewfd\is-37nmi.tmp
  • %ProgramFiles(x86)%\viewfd\is-jvuru.tmp
  • %ProgramFiles(x86)%\viewfd\is-vhgc4.tmp
  • %ProgramFiles(x86)%\viewfd\is-70k7a.tmp
  • %ProgramFiles(x86)%\viewfd\is-bjd2i.tmp
  • %ProgramFiles(x86)%\viewfd\is-bgdb1.tmp
  • %ProgramFiles(x86)%\viewfd\is-05amj.tmp
  • %ProgramFiles(x86)%\viewfd\is-2ahml.tmp
  • %ProgramFiles(x86)%\viewfd\unins000.dat
  • %ProgramFiles(x86)%\viewfd\url\search\is-i1kdq.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-1dqvj.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-291rf.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-9krob.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-s4jc0.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-lnimd.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-f3aso.tmp
  • %ProgramFiles(x86)%\viewfd\programs\is-uolnl.tmp
  • %ProgramFiles(x86)%\viewfd\radio\is-2bd6e.tmp
  • %ProgramFiles(x86)%\viewfd\radio\is-c1gpj.tmp
  • %ProgramFiles(x86)%\viewfd\reports\is-uri7l.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-adel7.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-o4et8.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-qniqn.tmp
  • %ProgramFiles(x86)%\viewfd\viewfd.exe
  • %ProgramFiles(x86)%\viewfd\url\search\is-3soaf.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-k6s47.tmp
  • %ProgramFiles(x86)%\viewfd\soft\is-6p2si.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-16hsh.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-gk6rj.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-jj9j3.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-9p0ls.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-7ub60.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-8er1s.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-m1r5j.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-u3nhb.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-9e2v8.tmp
  • %ProgramFiles(x86)%\viewfd\is-l9pb0.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-1ea8m.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\metallic\is-r072c.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-te8fq.tmp
  • %ProgramFiles(x86)%\viewfd\data\is-rb4rp.tmp
  • %ProgramFiles(x86)%\viewfd\forms\is-5foiq.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-kf0e7.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-u4a0g.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-7tda6.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-tq71s.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-8ltsh.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-g76n4.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-1stdk.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-bsc6c.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-2p130.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-vrkmf.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-8q7u2.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6p638.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-3oqpc.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-mjvl9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-t1j31.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-7d3j1.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-svarc.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-6717q.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-pv949.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-mgahc.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-1lbmb.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-eobev.tmp
  • %TEMP%\is-k926o.tmp\_isetup\_setup64.tmp
  • %TEMP%\is-k926o.tmp\_isetup\_shfoldr.dll
  • %TEMP%\is-k926o.tmp\_isetup\_iscrypt.dll
  • %ProgramFiles(x86)%\viewfd\is-4sgsc.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\lang\is-3ddrq.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-gb8p6.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-4n9de.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-semou.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-0qkhl.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-2luu8.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-bie5o.tmp
  • %ProgramFiles(x86)%\viewfd\backup\is-9fo9e.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-i0c3q.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-ntmna.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-gc0i0.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-iv1lk.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-rtuv2.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-nmg2i.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-436pa.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-4a658.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-skg45.tmp
  • %TEMP%\is-k926o.tmp\_isetup\_regdll.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-h5r4p.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-thqb0.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-kou1t.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-36u8o.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-5ub78.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ksfod.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-d2h7h.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1emhc.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-gnepo.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ku4nu.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-m29k3.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-8htr7.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-v8m23.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ugmkj.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\new\is-tc4tk.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-gv1tb.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-itsl0.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\saturation\is-ks7m4.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-i4cp4.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-54jq8.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-bl2r7.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-cnh8a.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-44hj1.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8qkmt.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-28jhh.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-lr1qt.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-nar28.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-cg9ep.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-n4o9t.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-k2akh.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ktbg7.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-2cifo.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-hmlgk.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\brightness\is-had59.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-bblts.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-h46f0.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-unojt.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-pdoon.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-5ksdv.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-or5ah.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-q2luu.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-eue9q.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-8p0r9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-r4g82.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-sj9f7.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-7ncn7.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-vqukh.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-5l8hb.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-3ljkn.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-v2j5q.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-f40sg.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-7mtk6.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\grids\is-4oei9.tmp
  • %TEMP%\lohkos.cab
Moves the following files
  • from %ProgramFiles(x86)%\viewfd\is-4sgsc.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
  • from %ProgramFiles(x86)%\viewfd\ini\is-g3p7j.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-ccomb.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
  • from %ProgramFiles(x86)%\viewfd\lsd\is-t1kab.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
  • from %ProgramFiles(x86)%\viewfd\lsd\is-d3u1l.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\is-kckmd.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-libvh.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-6r6jd.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-6iim0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
  • from %ProgramFiles(x86)%\viewfd\ini\is-5lmmp.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-i7h8s.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-e6pv5.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-2bqul.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-0srth.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-c51h3.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-fe9h3.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-54l8d.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-qsah9.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-8m22t.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-pl1l7.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ccsq7.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-r5b3o.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
  • from %ProgramFiles(x86)%\viewfd\ini\is-ob87q.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-h5jqs.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-lrd6u.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-mrp5d.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-c5fk7.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-u1jbi.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-gtf2g.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-tvf0f.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-te1ef.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-0e3dq.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-v3i8n.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-dut6j.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-pejr9.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-fmvg4.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-lq47n.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-s9toh.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-l83st.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-73b3t.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\transition\is-nq1t7.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-dipb2.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-e9hsi.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\ini\is-8n5h8.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-9bcb0.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-hod50.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-i9ok0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-gtgu6.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-kle2e.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-5fpdr.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
  • from %ProgramFiles(x86)%\viewfd\url\search\is-291rf.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
  • from %ProgramFiles(x86)%\viewfd\url\search\is-i1kdq.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-k2i3n.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-t7ikf.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-9dpog.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-n6rtv.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-jv7ff.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-lucm8.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-9c84e.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-c008i.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-0gbfg.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-l08dc.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
  • from %ProgramFiles(x86)%\viewfd\is-l9pb0.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
  • from %ProgramFiles(x86)%\viewfd\is-4bn8c.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
  • from %ProgramFiles(x86)%\viewfd\is-q239h.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
  • from %ProgramFiles(x86)%\viewfd\is-37nmi.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
  • from %ProgramFiles(x86)%\viewfd\is-jvuru.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
  • from %ProgramFiles(x86)%\viewfd\is-vhgc4.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
  • from %ProgramFiles(x86)%\viewfd\is-70k7a.tmp to %ProgramFiles(x86)%\viewfd\readme.html
  • from %ProgramFiles(x86)%\viewfd\is-bjd2i.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
  • from %ProgramFiles(x86)%\viewfd\is-bgdb1.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
  • from %ProgramFiles(x86)%\viewfd\url\search\is-9e2v8.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-u3nhb.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
  • from %ProgramFiles(x86)%\viewfd\url\search\is-3soaf.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-m1r5j.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-3vqm5.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-s4jc0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-lnimd.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-f3aso.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
  • from %ProgramFiles(x86)%\viewfd\programs\is-uolnl.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
  • from %ProgramFiles(x86)%\viewfd\radio\is-2bd6e.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
  • from %ProgramFiles(x86)%\viewfd\radio\is-c1gpj.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
  • from %ProgramFiles(x86)%\viewfd\reports\is-uri7l.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
  • from %ProgramFiles(x86)%\viewfd\search\is-adel7.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-o4et8.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-qniqn.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-9krob.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-1dqvj.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-k6s47.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
  • from %ProgramFiles(x86)%\viewfd\soft\is-6p2si.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-16hsh.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-gk6rj.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-jj9j3.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
  • from %ProgramFiles(x86)%\viewfd\url\is-9p0ls.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
  • from %ProgramFiles(x86)%\viewfd\url\is-7ub60.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-8er1s.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
  • from %ProgramFiles(x86)%\viewfd\is-05amj.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
  • from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-9opvh.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\selection\is-tsr1k.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-1ea8m.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\formulas\is-u4a0g.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-7tda6.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-tq71s.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-8ltsh.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-g76n4.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-bsc6c.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-bie5o.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-2p130.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
  • from %ProgramFiles(x86)%\viewfd\forms\is-5foiq.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
  • from %ProgramFiles(x86)%\viewfd\formulas\is-kf0e7.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-vrkmf.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-3oqpc.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-mjvl9.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-t1j31.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-7d3j1.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-svarc.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-2luu8.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-thqb0.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-kou1t.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-8q7u2.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6p638.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
  • from %ProgramFiles(x86)%\viewfd\data\is-rb4rp.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-te8fq.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-pv949.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-gb8p6.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-4n9de.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-semou.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-0qkhl.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
  • from %ProgramFiles(x86)%\viewfd\backup\is-9fo9e.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
  • from %ProgramFiles(x86)%\viewfd\browser\is-1stdk.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
  • from %ProgramFiles(x86)%\viewfd\browser\is-h5r4p.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
  • from %ProgramFiles(x86)%\viewfd\browser\is-i0c3q.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
  • from %ProgramFiles(x86)%\viewfd\browser\is-ntmna.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
  • from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-3ddrq.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-gc0i0.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-rtuv2.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-nmg2i.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-436pa.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-4a658.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-skg45.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-eobev.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-1lbmb.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-mgahc.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-6717q.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-iv1lk.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-36u8o.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ktbg7.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-2cifo.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-hmlgk.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-d2h7h.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1emhc.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-gnepo.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ku4nu.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-m29k3.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-8htr7.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-v8m23.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ugmkj.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-r072c.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\new\is-tc4tk.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-itsl0.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-ks7m4.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-i4cp4.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-54jq8.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-bl2r7.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-cnh8a.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-44hj1.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8qkmt.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-28jhh.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-lr1qt.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-q2luu.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ksfod.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-nar28.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-5ub78.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-n4o9t.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-had59.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-bblts.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-h46f0.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-unojt.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-pdoon.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-5ksdv.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-or5ah.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-k2akh.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-cg9ep.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-8p0r9.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-r4g82.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-sj9f7.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-7ncn7.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-vqukh.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-5l8hb.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-3ljkn.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-v2j5q.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-f40sg.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-7mtk6.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-eue9q.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\grids\is-4oei9.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-gv1tb.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
  • from %ProgramFiles(x86)%\viewfd\is-2ahml.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc
Network activity
Connects to
  • 'so###como.gq':80
TCP
HTTP GET requests
  • http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######
HTTP POST requests
  • http://so###como.gq/new/net_api
UDP
  • DNS ASK so###como.gq
Miscellaneous
Searches for the following windows
  • ClassName: '' WindowName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}'
Creates and executes the following
  • '%TEMP%\is-jbl6c.tmp\is-n6ut3.tmp' /SL4 $F013E "<Full path to file>" 7153210 141312
  • '%ProgramFiles(x86)%\viewfd\viewfd.exe'
  • '%ProgramFiles(x86)%\viewfd\viewfd.exe' 156a12ee35979a83caaa5b9396589833
Executes the following
  • '%WINDIR%\syswow64\schtasks.exe' /Query
  • '%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android