La mia libreria
La mia libreria

+ Aggiungi alla libreria

Supporto
Supporto 24/7 | Regole per contattare

Richieste

Profile

Trojan.DownLoader45.21153

Aggiunto al database dei virus Dr.Web: 2022-09-30

La descrizione è stata aggiunta:

Technical Information

Modifies file system
Creates the following files
  • %TEMP%\is-tr28c.tmp\is-rm4fb.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-s81hr.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-ir3ed.tmp
  • %ProgramFiles(x86)%\viewfd\lsd\is-037qd.tmp
  • %ProgramFiles(x86)%\viewfd\lsd\is-rtc8n.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\is-bhjbf.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-ghj1f.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-486on.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-urrr8.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-119f5.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-lhqt6.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-sramt.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-2gi9h.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-osadl.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7r32g.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ih6bu.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-4m71c.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9e3bo.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-v6lrv.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-7biqb.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-qbdke.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-gua9a.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-3qq86.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-fr6dv.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-59e5i.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-97sju.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-cltlu.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-gotlc.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-okupq.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-thik7.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-vv4di.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-loemi.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-il0mm.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-okrnm.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-7hftt.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-spe26.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-24aiv.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-8su38.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-fbjtn.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-se6d7.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-4sa5v.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-os9q2.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\transition\is-mrfnm.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-3ksa6.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-7ddtr.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-b7bke.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-h14al.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-gicot.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-rc0r2.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-jsrv3.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-6148v.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-9n3oi.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-7uk40.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-2l0sm.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-5le3d.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-ksqt5.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-8son8.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-v4ant.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-8ntih.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-0tvbq.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-ud2fe.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-rpsrt.tmp
  • %ProgramFiles(x86)%\viewfd\is-f87lj.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\selection\is-5ql1o.tmp
  • %ProgramFiles(x86)%\viewfd\is-gijvb.tmp
  • %ProgramFiles(x86)%\viewfd\is-2fs6d.tmp
  • %ProgramFiles(x86)%\viewfd\is-pf2p0.tmp
  • %ProgramFiles(x86)%\viewfd\is-02v28.tmp
  • %ProgramFiles(x86)%\viewfd\is-fhtdm.tmp
  • %ProgramFiles(x86)%\viewfd\is-6rhp6.tmp
  • %ProgramFiles(x86)%\viewfd\is-00eds.tmp
  • %ProgramFiles(x86)%\viewfd\is-r3nti.tmp
  • %ProgramFiles(x86)%\viewfd\is-rqil8.tmp
  • %ProgramFiles(x86)%\viewfd\unins000.dat
  • %ProgramFiles(x86)%\viewfd\url\search\is-g9o5t.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-isa0e.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-o1efb.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-8ledi.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-1emtm.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-jkbbk.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-4r0mh.tmp
  • %ProgramFiles(x86)%\viewfd\programs\is-itv7d.tmp
  • %ProgramFiles(x86)%\viewfd\radio\is-3n2v1.tmp
  • %ProgramFiles(x86)%\viewfd\radio\is-djl59.tmp
  • %ProgramFiles(x86)%\viewfd\reports\is-0lllq.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-ioruq.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-94lqu.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-223jq.tmp
  • %ProgramFiles(x86)%\viewfd\viewfd.exe
  • %ProgramFiles(x86)%\viewfd\url\search\is-qk9mv.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-fnnq5.tmp
  • %ProgramFiles(x86)%\viewfd\soft\is-41o30.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-589of.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-30ri3.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-q8rpf.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-t292j.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-84g5c.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-usith.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-r859k.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-9t06a.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-btggf.tmp
  • %ProgramFiles(x86)%\viewfd\is-a2utf.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-4qshv.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\metallic\is-i28e0.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-1fe4t.tmp
  • %ProgramFiles(x86)%\viewfd\data\is-qknku.tmp
  • %ProgramFiles(x86)%\viewfd\forms\is-rpuve.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-8c2n6.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-v9ou2.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-261hn.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-0jkab.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-an0kj.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-8sek3.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-tmo26.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-qieev.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-bsqta.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9jcip.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-1p97c.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ehlsk.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-18ge4.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-jq59s.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-hs69p.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-gkeji.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-66gnp.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-rlb53.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-njcsb.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-72phs.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-oe80s.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-3sffb.tmp
  • %TEMP%\is-683im.tmp\_isetup\_setup64.tmp
  • %TEMP%\is-683im.tmp\_isetup\_shfoldr.dll
  • %TEMP%\is-683im.tmp\_isetup\_iscrypt.dll
  • %ProgramFiles(x86)%\viewfd\is-a1hfq.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\lang\is-379jo.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-8v72k.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-11ql8.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-em5rk.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-3hk9p.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-snud3.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-4bn7f.tmp
  • %ProgramFiles(x86)%\viewfd\backup\is-7tknq.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-48q3i.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-40ifq.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-c7gd9.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-d321r.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-pieet.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-v9pfd.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-0ppe8.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-9mdlo.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-iq0tf.tmp
  • %TEMP%\is-683im.tmp\_isetup\_regdll.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-jhmbc.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-aapos.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-astq0.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-291v0.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-5sc4i.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-eqs4o.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-fle5s.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ucqcs.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-47pm4.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-qr93j.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-h2t34.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1cbe2.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-41f6v.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-9imeo.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\new\is-6ff3e.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-c0tk8.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-ofocq.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\saturation\is-oemj0.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-gs468.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-kp1bo.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-bnp1e.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-jqkh3.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-31vfl.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-6s5pp.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-53r2i.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-3vpto.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-6mhl6.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-6ra1k.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-ii4qi.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-ntofu.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-14ek6.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-5bdbd.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-cpc1n.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\brightness\is-p16si.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-q5rqu.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-ugmc5.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-c9s0e.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-ct4t6.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-i7p13.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-ocbpr.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-sf2hv.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-8i50g.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-gr4ac.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-mes78.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-ei2du.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-s2iul.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-tf4uh.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-943r3.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-h0us7.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-jfgt1.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-0j99b.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-gt2g5.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\grids\is-k6fpf.tmp
  • %TEMP%\lohkos.cab
Moves the following files
  • from %ProgramFiles(x86)%\viewfd\is-a1hfq.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
  • from %ProgramFiles(x86)%\viewfd\ini\is-s81hr.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-ir3ed.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
  • from %ProgramFiles(x86)%\viewfd\lsd\is-037qd.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
  • from %ProgramFiles(x86)%\viewfd\lsd\is-rtc8n.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\is-bhjbf.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-ghj1f.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-486on.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-urrr8.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
  • from %ProgramFiles(x86)%\viewfd\ini\is-gua9a.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-3qq86.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-119f5.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-2gi9h.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-osadl.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7r32g.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ih6bu.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-4m71c.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-9e3bo.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-v6lrv.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-7biqb.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-sramt.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-24aiv.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
  • from %ProgramFiles(x86)%\viewfd\ini\is-fr6dv.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-59e5i.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-97sju.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-gotlc.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-okupq.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-thik7.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-vv4di.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-loemi.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-il0mm.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-okrnm.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-7hftt.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-8su38.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-cltlu.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-lhqt6.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-fbjtn.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-se6d7.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-4sa5v.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-os9q2.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\transition\is-mrfnm.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-3ksa6.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-7ddtr.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\ini\is-b7bke.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-h14al.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-rc0r2.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-qbdke.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-spe26.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-jsrv3.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-6148v.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
  • from %ProgramFiles(x86)%\viewfd\url\search\is-o1efb.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
  • from %ProgramFiles(x86)%\viewfd\url\search\is-g9o5t.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-7uk40.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-2l0sm.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-5le3d.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-ksqt5.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-8son8.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-v4ant.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-8ntih.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-0tvbq.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-ud2fe.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-rpsrt.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
  • from %ProgramFiles(x86)%\viewfd\is-a2utf.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
  • from %ProgramFiles(x86)%\viewfd\is-f87lj.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
  • from %ProgramFiles(x86)%\viewfd\is-gijvb.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
  • from %ProgramFiles(x86)%\viewfd\is-2fs6d.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
  • from %ProgramFiles(x86)%\viewfd\is-pf2p0.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
  • from %ProgramFiles(x86)%\viewfd\is-02v28.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
  • from %ProgramFiles(x86)%\viewfd\is-fhtdm.tmp to %ProgramFiles(x86)%\viewfd\readme.html
  • from %ProgramFiles(x86)%\viewfd\is-6rhp6.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
  • from %ProgramFiles(x86)%\viewfd\is-00eds.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
  • from %ProgramFiles(x86)%\viewfd\url\search\is-btggf.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-9t06a.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
  • from %ProgramFiles(x86)%\viewfd\url\search\is-qk9mv.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-r859k.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-9n3oi.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-1emtm.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-jkbbk.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-4r0mh.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
  • from %ProgramFiles(x86)%\viewfd\programs\is-itv7d.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
  • from %ProgramFiles(x86)%\viewfd\radio\is-3n2v1.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
  • from %ProgramFiles(x86)%\viewfd\radio\is-djl59.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
  • from %ProgramFiles(x86)%\viewfd\reports\is-0lllq.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
  • from %ProgramFiles(x86)%\viewfd\search\is-ioruq.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-94lqu.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-223jq.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-8ledi.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-isa0e.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-fnnq5.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
  • from %ProgramFiles(x86)%\viewfd\soft\is-41o30.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-589of.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-30ri3.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-q8rpf.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
  • from %ProgramFiles(x86)%\viewfd\url\is-t292j.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
  • from %ProgramFiles(x86)%\viewfd\url\is-84g5c.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-usith.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
  • from %ProgramFiles(x86)%\viewfd\is-r3nti.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
  • from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-gicot.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\selection\is-5ql1o.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-4qshv.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\formulas\is-v9ou2.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-261hn.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-0jkab.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-an0kj.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-8sek3.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-qieev.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-4bn7f.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-bsqta.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
  • from %ProgramFiles(x86)%\viewfd\forms\is-rpuve.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
  • from %ProgramFiles(x86)%\viewfd\formulas\is-8c2n6.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9jcip.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-18ge4.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-jq59s.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-hs69p.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-gkeji.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-66gnp.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-snud3.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-aapos.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-astq0.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-1p97c.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ehlsk.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
  • from %ProgramFiles(x86)%\viewfd\data\is-qknku.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-1fe4t.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-njcsb.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-8v72k.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-11ql8.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-em5rk.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-3hk9p.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
  • from %ProgramFiles(x86)%\viewfd\backup\is-7tknq.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
  • from %ProgramFiles(x86)%\viewfd\browser\is-tmo26.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
  • from %ProgramFiles(x86)%\viewfd\browser\is-jhmbc.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
  • from %ProgramFiles(x86)%\viewfd\browser\is-48q3i.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
  • from %ProgramFiles(x86)%\viewfd\browser\is-40ifq.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
  • from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-379jo.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-c7gd9.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-pieet.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-v9pfd.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-0ppe8.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-9mdlo.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-iq0tf.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-3sffb.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-oe80s.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-72phs.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-rlb53.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-d321r.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-291v0.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-14ek6.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-5bdbd.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-cpc1n.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-fle5s.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ucqcs.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-47pm4.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-qr93j.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-h2t34.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1cbe2.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-41f6v.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-9imeo.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-i28e0.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\new\is-6ff3e.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-ofocq.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-oemj0.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-gs468.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-kp1bo.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-bnp1e.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-jqkh3.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-31vfl.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-6s5pp.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-53r2i.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-3vpto.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-sf2hv.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-eqs4o.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-6mhl6.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-5sc4i.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-ii4qi.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-p16si.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-q5rqu.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ugmc5.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-c9s0e.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ct4t6.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-i7p13.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ocbpr.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ntofu.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-6ra1k.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-gr4ac.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-mes78.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-ei2du.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-s2iul.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-tf4uh.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-943r3.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-h0us7.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-jfgt1.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-0j99b.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-gt2g5.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-8i50g.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\grids\is-k6fpf.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-c0tk8.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
  • from %ProgramFiles(x86)%\viewfd\is-rqil8.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc
Network activity
Connects to
  • 'so###como.gq':80
TCP
HTTP GET requests
  • http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######
HTTP POST requests
  • http://so###como.gq/new/net_api
UDP
  • DNS ASK so###como.gq
Miscellaneous
Searches for the following windows
  • ClassName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}' WindowName: ''
Creates and executes the following
  • '%TEMP%\is-tr28c.tmp\is-rm4fb.tmp' /SL4 $F013A "<Full path to file>" 6978070 52736
  • '%ProgramFiles(x86)%\viewfd\viewfd.exe'
  • '%ProgramFiles(x86)%\viewfd\viewfd.exe' 48e94985f56932dd03120a99f63e262e
Executes the following
  • '%WINDIR%\syswow64\schtasks.exe' /Query
  • '%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android