La mia libreria
La mia libreria

+ Aggiungi alla libreria

Supporto
Supporto 24/7 | Regole per contattare

Richieste

Profile

Trojan.DownLoader45.7373

Aggiunto al database dei virus Dr.Web: 2022-07-29

La descrizione è stata aggiunta:

Technical Information

Modifies file system
Creates the following files
  • %TEMP%\is-rnnva.tmp\is-qo2dg.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-2f90v.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-3nrca.tmp
  • %ProgramFiles(x86)%\viewfd\lsd\is-m84b9.tmp
  • %ProgramFiles(x86)%\viewfd\lsd\is-72r5b.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\is-tu73r.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-noc9k.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-96t8o.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-fkdfk.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-m3fab.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-qhnau.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-38k93.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-761h0.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-3aik7.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-cq09i.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tg5ef.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-meba7.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-htd58.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-dpktn.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-pkse7.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-i1dg0.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-rb4j3.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-9fv5b.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-s1m6f.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-jph60.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-mcgmv.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-d586g.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-864cd.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-h6329.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-lft8r.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-dkc7r.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-1hqq5.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-s7ua1.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-80sul.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-8uvvv.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-cd456.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-e5017.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-ju89o.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-5o9cj.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-012ft.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-5sico.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-i85q5.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\transition\is-gi2fg.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-sd3ld.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-u7ar6.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-lpt1b.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-vl7ed.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-dtndv.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-3v626.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-3t4ca.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-rto28.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-9dvb4.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-rp20r.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-uol53.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-q556j.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-20fbf.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-eublv.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-boh5q.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-fmbt9.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-i2lrs.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-95534.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-40cek.tmp
  • %ProgramFiles(x86)%\viewfd\is-jm2m9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\selection\is-leqft.tmp
  • %ProgramFiles(x86)%\viewfd\is-aici2.tmp
  • %ProgramFiles(x86)%\viewfd\is-camg9.tmp
  • %ProgramFiles(x86)%\viewfd\is-1lb7j.tmp
  • %ProgramFiles(x86)%\viewfd\is-i89tc.tmp
  • %ProgramFiles(x86)%\viewfd\is-f4ugg.tmp
  • %ProgramFiles(x86)%\viewfd\is-mnlfg.tmp
  • %ProgramFiles(x86)%\viewfd\is-je06m.tmp
  • %ProgramFiles(x86)%\viewfd\is-ctl7t.tmp
  • %ProgramFiles(x86)%\viewfd\is-v13g7.tmp
  • %ProgramFiles(x86)%\viewfd\unins000.dat
  • %ProgramFiles(x86)%\viewfd\url\search\is-6fqm7.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-h0evt.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-osqoi.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-uf95d.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-c43vo.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-1s4g4.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ujtg9.tmp
  • %ProgramFiles(x86)%\viewfd\programs\is-6vioa.tmp
  • %ProgramFiles(x86)%\viewfd\radio\is-vgu4m.tmp
  • %ProgramFiles(x86)%\viewfd\radio\is-d74ns.tmp
  • %ProgramFiles(x86)%\viewfd\reports\is-7gi22.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-ilq8a.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-tq77p.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-ub46b.tmp
  • %ProgramFiles(x86)%\viewfd\viewfd.exe
  • %ProgramFiles(x86)%\viewfd\url\search\is-mfptu.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-7bl0o.tmp
  • %ProgramFiles(x86)%\viewfd\soft\is-0i7i8.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-3hibv.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-vgmnr.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-qbsbc.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-nhf6c.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-037bj.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-of9sr.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-bbf7d.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-njd1e.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-f7pfm.tmp
  • %ProgramFiles(x86)%\viewfd\is-621cc.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-1ddvo.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\metallic\is-3n7l0.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-uha31.tmp
  • %ProgramFiles(x86)%\viewfd\data\is-ktmeq.tmp
  • %ProgramFiles(x86)%\viewfd\forms\is-mg0gv.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-u0nvv.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-faf09.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-b6ic3.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-fusqf.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-7ep2i.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-7lmc8.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-fqnm0.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-3n12u.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6ul31.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-5cgtl.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6te50.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-lm2l0.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-4ost5.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-qdav9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-hkf84.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-t32bg.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-k1ugm.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-miti9.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-5p03h.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-kltt9.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-b7shn.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-9j0pf.tmp
  • %TEMP%\is-mm967.tmp\_isetup\_setup64.tmp
  • %TEMP%\is-mm967.tmp\_isetup\_shfoldr.dll
  • %TEMP%\is-mm967.tmp\_isetup\_iscrypt.dll
  • %ProgramFiles(x86)%\viewfd\is-r76cq.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\lang\is-s0md0.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-404a4.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-u1791.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-pfh5p.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-2di0p.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-g62fr.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-p5nji.tmp
  • %ProgramFiles(x86)%\viewfd\backup\is-s7b04.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-idojl.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-vor1g.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-57jbv.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-jjhqg.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-tsa6c.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-kkci1.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-k2atk.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-dd7do.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-nrldl.tmp
  • %TEMP%\is-mm967.tmp\_isetup\_regdll.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-bpe1o.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-roi5v.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-acjnr.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-5i31b.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-9t9ob.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-lom8s.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-bhn0o.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ocdif.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-984e9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ect9l.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-n023l.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-q1crv.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ee84q.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-n4jta.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\new\is-i7eto.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-45k25.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-3ii4m.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\saturation\is-kf4fk.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-q7jfi.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-u36th.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-f9qak.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-88ugb.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-v7b23.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-la853.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-11p7d.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-kvkj5.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-4jfvf.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-6sa3l.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-hqu5i.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-9a3j9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-3bt24.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ouasc.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-dfieo.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\brightness\is-56cms.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-lftss.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-6q1d0.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-0auov.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-9qkt2.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-q0rqp.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-47vtl.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-163f9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-1afe7.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-c9nam.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-l60o3.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-s3see.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-n6duc.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-3tgf9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-udsa1.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-iurf5.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-0mj4v.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-4vsva.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-d0n58.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\grids\is-oarj7.tmp
  • %TEMP%\lohkos.cab
Moves the following files
  • from %ProgramFiles(x86)%\viewfd\is-r76cq.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
  • from %ProgramFiles(x86)%\viewfd\ini\is-2f90v.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-3nrca.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
  • from %ProgramFiles(x86)%\viewfd\lsd\is-m84b9.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
  • from %ProgramFiles(x86)%\viewfd\lsd\is-72r5b.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\is-tu73r.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-noc9k.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-96t8o.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-fkdfk.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
  • from %ProgramFiles(x86)%\viewfd\ini\is-rb4j3.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-9fv5b.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-m3fab.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-761h0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-3aik7.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-cq09i.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tg5ef.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-meba7.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-htd58.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-dpktn.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-pkse7.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-38k93.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-e5017.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
  • from %ProgramFiles(x86)%\viewfd\ini\is-s1m6f.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-jph60.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-mcgmv.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-864cd.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-h6329.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-lft8r.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-dkc7r.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-1hqq5.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-s7ua1.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-80sul.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-8uvvv.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ju89o.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-d586g.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-qhnau.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-5o9cj.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-012ft.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-5sico.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-i85q5.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\transition\is-gi2fg.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-sd3ld.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-u7ar6.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\ini\is-lpt1b.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-vl7ed.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-3v626.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-i1dg0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-cd456.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-3t4ca.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-rto28.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
  • from %ProgramFiles(x86)%\viewfd\url\search\is-osqoi.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
  • from %ProgramFiles(x86)%\viewfd\url\search\is-6fqm7.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-rp20r.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-uol53.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-q556j.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-20fbf.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-eublv.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-boh5q.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-fmbt9.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-i2lrs.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-95534.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-40cek.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
  • from %ProgramFiles(x86)%\viewfd\is-621cc.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
  • from %ProgramFiles(x86)%\viewfd\is-jm2m9.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
  • from %ProgramFiles(x86)%\viewfd\is-aici2.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
  • from %ProgramFiles(x86)%\viewfd\is-camg9.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
  • from %ProgramFiles(x86)%\viewfd\is-1lb7j.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
  • from %ProgramFiles(x86)%\viewfd\is-i89tc.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
  • from %ProgramFiles(x86)%\viewfd\is-f4ugg.tmp to %ProgramFiles(x86)%\viewfd\readme.html
  • from %ProgramFiles(x86)%\viewfd\is-mnlfg.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
  • from %ProgramFiles(x86)%\viewfd\is-je06m.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
  • from %ProgramFiles(x86)%\viewfd\url\search\is-f7pfm.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-njd1e.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
  • from %ProgramFiles(x86)%\viewfd\url\search\is-mfptu.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-bbf7d.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-9dvb4.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-c43vo.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-1s4g4.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ujtg9.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
  • from %ProgramFiles(x86)%\viewfd\programs\is-6vioa.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
  • from %ProgramFiles(x86)%\viewfd\radio\is-vgu4m.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
  • from %ProgramFiles(x86)%\viewfd\radio\is-d74ns.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
  • from %ProgramFiles(x86)%\viewfd\reports\is-7gi22.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
  • from %ProgramFiles(x86)%\viewfd\search\is-ilq8a.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-tq77p.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-ub46b.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-uf95d.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-h0evt.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-7bl0o.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
  • from %ProgramFiles(x86)%\viewfd\soft\is-0i7i8.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-3hibv.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-vgmnr.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-qbsbc.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
  • from %ProgramFiles(x86)%\viewfd\url\is-nhf6c.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
  • from %ProgramFiles(x86)%\viewfd\url\is-037bj.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-of9sr.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
  • from %ProgramFiles(x86)%\viewfd\is-ctl7t.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
  • from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-dtndv.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\selection\is-leqft.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-1ddvo.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\formulas\is-faf09.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-b6ic3.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-fusqf.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-7ep2i.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-7lmc8.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-3n12u.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-p5nji.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6ul31.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
  • from %ProgramFiles(x86)%\viewfd\forms\is-mg0gv.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
  • from %ProgramFiles(x86)%\viewfd\formulas\is-u0nvv.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-5cgtl.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-4ost5.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-qdav9.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-hkf84.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-t32bg.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-k1ugm.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-g62fr.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-roi5v.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-acjnr.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6te50.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-lm2l0.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
  • from %ProgramFiles(x86)%\viewfd\data\is-ktmeq.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-uha31.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-5p03h.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-404a4.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-u1791.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-pfh5p.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-2di0p.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
  • from %ProgramFiles(x86)%\viewfd\backup\is-s7b04.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
  • from %ProgramFiles(x86)%\viewfd\browser\is-fqnm0.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
  • from %ProgramFiles(x86)%\viewfd\browser\is-bpe1o.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
  • from %ProgramFiles(x86)%\viewfd\browser\is-idojl.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
  • from %ProgramFiles(x86)%\viewfd\browser\is-vor1g.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
  • from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-s0md0.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-57jbv.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-tsa6c.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-kkci1.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-k2atk.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-dd7do.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-nrldl.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-9j0pf.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-b7shn.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-kltt9.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-miti9.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-jjhqg.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-5i31b.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-3bt24.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ouasc.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-dfieo.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-bhn0o.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ocdif.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-984e9.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ect9l.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-n023l.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-q1crv.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ee84q.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-n4jta.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-3n7l0.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\new\is-i7eto.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-3ii4m.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-kf4fk.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-q7jfi.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-u36th.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-f9qak.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-88ugb.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-v7b23.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-la853.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-11p7d.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-kvkj5.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-163f9.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-lom8s.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-4jfvf.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-9t9ob.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-hqu5i.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-56cms.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-lftss.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-6q1d0.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-0auov.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-9qkt2.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-q0rqp.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-47vtl.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-9a3j9.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-6sa3l.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-c9nam.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-l60o3.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-s3see.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-n6duc.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-3tgf9.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-udsa1.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-iurf5.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-0mj4v.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-4vsva.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-d0n58.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-1afe7.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\grids\is-oarj7.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-45k25.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
  • from %ProgramFiles(x86)%\viewfd\is-v13g7.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc
Network activity
Connects to
  • 'so###como.gq':80
TCP
HTTP GET requests
  • http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######
HTTP POST requests
  • http://so###como.gq/new/net_api
UDP
  • DNS ASK so###como.gq
Miscellaneous
Searches for the following windows
  • ClassName: '{1E61A93F-EC60-4AD7-A3C8-3DDC3E02E405}' WindowName: ''
Creates and executes the following
  • '%TEMP%\is-rnnva.tmp\is-qo2dg.tmp' /SL4 $D0022 "<Full path to file>" 6852318 52736
  • '%ProgramFiles(x86)%\viewfd\viewfd.exe'
  • '%ProgramFiles(x86)%\viewfd\viewfd.exe' dd3a9314eb1ddf2568700d9836410b42
Executes the following
  • '%WINDIR%\syswow64\schtasks.exe' /Query
  • '%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android