La mia libreria
La mia libreria

+ Aggiungi alla libreria

Supporto
Supporto 24/7 | Regole per contattare

Richieste

Profile

Trojan.DownLoader45.7538

Aggiunto al database dei virus Dr.Web: 2022-07-29

La descrizione è stata aggiunta:

Technical Information

Modifies file system
Creates the following files
  • %TEMP%\is-csrco.tmp\is-hgbuv.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-70ceh.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-b5bpq.tmp
  • %ProgramFiles(x86)%\viewfd\lsd\is-k5avg.tmp
  • %ProgramFiles(x86)%\viewfd\lsd\is-9tqu5.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\is-stn2m.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-6b9hm.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-bmals.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7ig90.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-qujvu.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-8ss5j.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-mml6u.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ihuik.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-vkm71.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ko5tb.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-eeru7.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-cjnoo.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-vbfcm.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ombsl.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-o629m.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-io1t5.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-eu9da.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-ddioa.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-b8vvi.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-hepmm.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-b641o.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-jkjmj.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-4lskk.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-uje24.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-7q4pp.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-jmsl9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-3rqp4.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-10rfi.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-i2pg2.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-igs3m.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-etlpm.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ekcf6.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-u6fs4.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-v6m8h.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-m98vd.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-e29cv.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-cv1p1.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\transition\is-htiuj.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-jh58m.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-mfn2d.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-t7778.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-m2jkk.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-533mk.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-snh17.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-lnegj.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-qsscc.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-k055i.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-71unr.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-a2crt.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-p3sbd.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-sau15.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-4sjn5.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-keaje.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-mrp83.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-1mnjj.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-f012d.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-vogmn.tmp
  • %ProgramFiles(x86)%\viewfd\is-r1nc6.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\selection\is-nbf8g.tmp
  • %ProgramFiles(x86)%\viewfd\is-bi1sc.tmp
  • %ProgramFiles(x86)%\viewfd\is-kouji.tmp
  • %ProgramFiles(x86)%\viewfd\is-6jv6m.tmp
  • %ProgramFiles(x86)%\viewfd\is-msv2l.tmp
  • %ProgramFiles(x86)%\viewfd\is-onmrp.tmp
  • %ProgramFiles(x86)%\viewfd\is-dnfrk.tmp
  • %ProgramFiles(x86)%\viewfd\is-q2v64.tmp
  • %ProgramFiles(x86)%\viewfd\is-qefip.tmp
  • %ProgramFiles(x86)%\viewfd\is-92sbd.tmp
  • %ProgramFiles(x86)%\viewfd\unins000.dat
  • %ProgramFiles(x86)%\viewfd\url\search\is-jca13.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-08tcd.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-7k38p.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-62ln5.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-3faao.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-v4a8t.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-v7gl0.tmp
  • %ProgramFiles(x86)%\viewfd\programs\is-snpro.tmp
  • %ProgramFiles(x86)%\viewfd\radio\is-osugk.tmp
  • %ProgramFiles(x86)%\viewfd\radio\is-ekepc.tmp
  • %ProgramFiles(x86)%\viewfd\reports\is-5756b.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-1vmde.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-ofqg4.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-bispo.tmp
  • %ProgramFiles(x86)%\viewfd\viewfd.exe
  • %ProgramFiles(x86)%\viewfd\url\search\is-08mlo.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-1731t.tmp
  • %ProgramFiles(x86)%\viewfd\soft\is-qc45o.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-vc9i4.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-9hbec.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-r5vip.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-3l1t4.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-l49m3.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-5h5d4.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-7n03g.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-aqu3l.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-g966c.tmp
  • %ProgramFiles(x86)%\viewfd\is-9n8fj.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-iacgt.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\metallic\is-n0rqf.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-p33o6.tmp
  • %ProgramFiles(x86)%\viewfd\data\is-u9p1d.tmp
  • %ProgramFiles(x86)%\viewfd\forms\is-jcgpp.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-vji6p.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-sgm85.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-dc3g8.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-hfauv.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-4gi7p.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-hj8g1.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-jj587.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-ajp6i.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-tes32.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-k96bh.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-5cdf1.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-mrrut.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-7c35e.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-1b8qd.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-29l8g.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-brc95.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-an3fl.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-nkeo3.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-q8b7d.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-m6i39.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-lvk8c.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-hv94r.tmp
  • %TEMP%\is-9j4k3.tmp\_isetup\_setup64.tmp
  • %TEMP%\is-9j4k3.tmp\_isetup\_shfoldr.dll
  • %TEMP%\is-9j4k3.tmp\_isetup\_iscrypt.dll
  • %ProgramFiles(x86)%\viewfd\is-3tg2t.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\lang\is-nn1f6.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-9tonr.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-glmrf.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-it66p.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-6imth.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-bsk0e.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-0arpe.tmp
  • %ProgramFiles(x86)%\viewfd\backup\is-pl66j.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-819il.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-mie76.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-222u4.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-ra624.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-pd7c9.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-qveeb.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-u0s4u.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-frsj3.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-3bic6.tmp
  • %TEMP%\is-9j4k3.tmp\_isetup\_regdll.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-4t5lj.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-4mt5l.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-rd3lt.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-4o7me.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-jeu0k.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-hs3t4.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ktsro.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-aub65.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-hfigh.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-6etjh.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ugtep.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-r9ekd.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-4i62l.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-9ub58.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\new\is-mqbdq.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-6takr.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-7besq.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\saturation\is-pfjf2.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-vsiei.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-b2u17.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-krj8o.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-85e1n.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-cqeup.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-nv2ha.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-n8nk6.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-n491u.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-v5e8c.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-49fho.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-l4klj.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-k0bgo.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-hjl5c.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-i3vd8.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-dut6u.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\brightness\is-oef2i.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-lc0ku.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-kupq2.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-s961v.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-ghjgo.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-fhfus.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-ca3qq.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-2dg2s.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-9dkh9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-bjvmv.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-u14i9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-87913.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-oa4ab.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-ikdku.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-8o8n6.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-1im4l.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-t4vj9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-9qmki.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-raoka.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\grids\is-kv1p9.tmp
  • %TEMP%\lohkos.cab
Moves the following files
  • from %ProgramFiles(x86)%\viewfd\is-3tg2t.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
  • from %ProgramFiles(x86)%\viewfd\ini\is-70ceh.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-b5bpq.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
  • from %ProgramFiles(x86)%\viewfd\lsd\is-k5avg.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
  • from %ProgramFiles(x86)%\viewfd\lsd\is-9tqu5.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\is-stn2m.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-6b9hm.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-bmals.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7ig90.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
  • from %ProgramFiles(x86)%\viewfd\ini\is-eu9da.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-ddioa.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-qujvu.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ihuik.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-vkm71.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ko5tb.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-eeru7.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-cjnoo.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-vbfcm.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ombsl.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-o629m.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-mml6u.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ekcf6.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
  • from %ProgramFiles(x86)%\viewfd\ini\is-b8vvi.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-hepmm.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-b641o.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-4lskk.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-uje24.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-7q4pp.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-jmsl9.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-3rqp4.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-10rfi.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-i2pg2.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-igs3m.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-u6fs4.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-jkjmj.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-8ss5j.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-v6m8h.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-m98vd.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-e29cv.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-cv1p1.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\transition\is-htiuj.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-jh58m.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-mfn2d.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\ini\is-t7778.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-m2jkk.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-snh17.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-io1t5.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-etlpm.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-lnegj.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-qsscc.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
  • from %ProgramFiles(x86)%\viewfd\url\search\is-7k38p.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
  • from %ProgramFiles(x86)%\viewfd\url\search\is-jca13.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-71unr.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-a2crt.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-p3sbd.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-sau15.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-4sjn5.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-keaje.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-mrp83.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-1mnjj.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-f012d.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-vogmn.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
  • from %ProgramFiles(x86)%\viewfd\is-9n8fj.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
  • from %ProgramFiles(x86)%\viewfd\is-r1nc6.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
  • from %ProgramFiles(x86)%\viewfd\is-bi1sc.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
  • from %ProgramFiles(x86)%\viewfd\is-kouji.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
  • from %ProgramFiles(x86)%\viewfd\is-6jv6m.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
  • from %ProgramFiles(x86)%\viewfd\is-msv2l.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
  • from %ProgramFiles(x86)%\viewfd\is-onmrp.tmp to %ProgramFiles(x86)%\viewfd\readme.html
  • from %ProgramFiles(x86)%\viewfd\is-dnfrk.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
  • from %ProgramFiles(x86)%\viewfd\is-q2v64.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
  • from %ProgramFiles(x86)%\viewfd\url\search\is-g966c.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-aqu3l.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
  • from %ProgramFiles(x86)%\viewfd\url\search\is-08mlo.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-7n03g.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-k055i.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-3faao.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-v4a8t.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-v7gl0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
  • from %ProgramFiles(x86)%\viewfd\programs\is-snpro.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
  • from %ProgramFiles(x86)%\viewfd\radio\is-osugk.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
  • from %ProgramFiles(x86)%\viewfd\radio\is-ekepc.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
  • from %ProgramFiles(x86)%\viewfd\reports\is-5756b.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
  • from %ProgramFiles(x86)%\viewfd\search\is-1vmde.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-ofqg4.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-bispo.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-62ln5.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-08tcd.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-1731t.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
  • from %ProgramFiles(x86)%\viewfd\soft\is-qc45o.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-vc9i4.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-9hbec.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-r5vip.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
  • from %ProgramFiles(x86)%\viewfd\url\is-3l1t4.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
  • from %ProgramFiles(x86)%\viewfd\url\is-l49m3.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-5h5d4.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
  • from %ProgramFiles(x86)%\viewfd\is-qefip.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
  • from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-533mk.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\selection\is-nbf8g.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-iacgt.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\formulas\is-sgm85.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-dc3g8.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-hfauv.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-4gi7p.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-hj8g1.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-ajp6i.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-0arpe.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-tes32.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
  • from %ProgramFiles(x86)%\viewfd\forms\is-jcgpp.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
  • from %ProgramFiles(x86)%\viewfd\formulas\is-vji6p.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-k96bh.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-7c35e.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-1b8qd.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-29l8g.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-brc95.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-an3fl.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-bsk0e.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-4mt5l.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-rd3lt.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-5cdf1.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-mrrut.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
  • from %ProgramFiles(x86)%\viewfd\data\is-u9p1d.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-p33o6.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-q8b7d.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-9tonr.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-glmrf.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-it66p.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-6imth.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
  • from %ProgramFiles(x86)%\viewfd\backup\is-pl66j.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
  • from %ProgramFiles(x86)%\viewfd\browser\is-jj587.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
  • from %ProgramFiles(x86)%\viewfd\browser\is-4t5lj.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
  • from %ProgramFiles(x86)%\viewfd\browser\is-819il.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
  • from %ProgramFiles(x86)%\viewfd\browser\is-mie76.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
  • from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-nn1f6.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-222u4.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-pd7c9.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-qveeb.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-u0s4u.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-frsj3.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-3bic6.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-hv94r.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-lvk8c.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-m6i39.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-nkeo3.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-ra624.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-4o7me.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-hjl5c.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-i3vd8.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-dut6u.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ktsro.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-aub65.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-hfigh.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-6etjh.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ugtep.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-r9ekd.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-4i62l.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-9ub58.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-n0rqf.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\new\is-mqbdq.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-7besq.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-pfjf2.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-vsiei.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-b2u17.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-krj8o.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-85e1n.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-cqeup.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-nv2ha.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-n8nk6.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-n491u.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-2dg2s.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-hs3t4.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-v5e8c.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-jeu0k.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-l4klj.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-oef2i.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-lc0ku.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-kupq2.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-s961v.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ghjgo.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-fhfus.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ca3qq.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-k0bgo.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-49fho.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-bjvmv.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-u14i9.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-87913.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-oa4ab.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-ikdku.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-8o8n6.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-1im4l.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-t4vj9.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-9qmki.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-raoka.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-9dkh9.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\grids\is-kv1p9.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-6takr.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
  • from %ProgramFiles(x86)%\viewfd\is-92sbd.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc
Network activity
Connects to
  • 'so###como.gq':80
TCP
HTTP GET requests
  • http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######
HTTP POST requests
  • http://so###como.gq/new/net_api
UDP
  • DNS ASK so###como.gq
Miscellaneous
Searches for the following windows
  • ClassName: '{1E61A93F-EC60-4AD7-A3C8-3DDC3E02E405}' WindowName: ''
Creates and executes the following
  • '%TEMP%\is-csrco.tmp\is-hgbuv.tmp' /SL4 $110016 "<Full path to file>" 6831678 52736
  • '%ProgramFiles(x86)%\viewfd\viewfd.exe'
  • '%ProgramFiles(x86)%\viewfd\viewfd.exe' cc344cead5f9952d1e517c6dbacfab87
Executes the following
  • '%WINDIR%\syswow64\schtasks.exe' /Query
  • '%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android