Library
My library

+ Add to library

Profile

Trojan.DownLoader45.154

Added to the Dr.Web virus database: 2022-06-18

Virus description added:

Technical Information

Modifies file system
Creates the following files
  • %TEMP%\is-lkc0i.tmp\is-ehku1.tmp
  • %ProgramFiles(x86)%\viewfd\lsd\is-cmbgd.tmp
  • %ProgramFiles(x86)%\viewfd\lsd\is-ahk46.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\is-trlod.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-gfmjl.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-qqub6.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ndud4.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-s75k0.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-pdk8m.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-g613h.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-6hqba.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-dq3kq.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-94f7n.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-rnpdg.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-m55ek.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ek79i.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tpkqg.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-49m2g.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-etoan.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-mtnl1.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-s3tq5.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-rth0m.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-8h92t.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-osm78.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-1g2i6.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-7jgkl.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-bmtpr.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-2hgdu.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-9mndj.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-fljk4.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-to6u1.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-ovetr.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-2t445.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-5vo7u.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-6h0er.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-v0ng5.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-r6ha1.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-5krnh.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-r41j0.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-31pcn.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\transition\is-kiich.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-iq17p.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-t5cta.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-jhmb6.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-5qorq.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-vle79.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-7jo33.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-ttcpp.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-0vtrt.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-7j4cm.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-h0hf3.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-02pc1.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-lcak2.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-15o1u.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-ir36m.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-nsaqk.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-0n8bj.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-jqp2l.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-p7618.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-9udic.tmp
  • %ProgramFiles(x86)%\viewfd\is-dgt1b.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-ec6fv.tmp
  • %ProgramFiles(x86)%\viewfd\is-663ac.tmp
  • %ProgramFiles(x86)%\viewfd\is-porph.tmp
  • %ProgramFiles(x86)%\viewfd\is-087k1.tmp
  • %ProgramFiles(x86)%\viewfd\is-o99is.tmp
  • %ProgramFiles(x86)%\viewfd\is-bltga.tmp
  • %ProgramFiles(x86)%\viewfd\is-m4rjq.tmp
  • %ProgramFiles(x86)%\viewfd\is-8mume.tmp
  • %ProgramFiles(x86)%\viewfd\is-efkps.tmp
  • %ProgramFiles(x86)%\viewfd\is-p0cqb.tmp
  • %ProgramFiles(x86)%\viewfd\unins000.dat
  • %ProgramFiles(x86)%\viewfd\url\soft\is-ighif.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-0qoih.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-8glig.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-038ua.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-m3c2t.tmp
  • %ProgramFiles(x86)%\viewfd\programs\is-n0fga.tmp
  • %ProgramFiles(x86)%\viewfd\radio\is-drcv2.tmp
  • %ProgramFiles(x86)%\viewfd\radio\is-h3i71.tmp
  • %ProgramFiles(x86)%\viewfd\reports\is-aqe61.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-7ialb.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-d1k74.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-9ijqc.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-c08ts.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-c17cm.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-rg9md.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-l81du.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-9bdvg.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-sf7mh.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-v0pr5.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-l5m4d.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-apje0.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-o9t67.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-6ba8i.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-qj12i.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-dj6bq.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-1toot.tmp
  • %ProgramFiles(x86)%\viewfd\soft\is-gnee9.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-oc189.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\selection\is-809ks.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-kqi1s.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8op7u.tmp
  • %ProgramFiles(x86)%\viewfd\forms\is-nsv23.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-g4jnv.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-anh3i.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-erpkm.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-0couk.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-l84lh.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-nuj2d.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-rl661.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-vh589.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-t3glj.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-tc64q.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-hdhhu.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-e5e6q.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ip3ci.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9dire.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-k9415.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-tvl60.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-n0r7f.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-cait3.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-k15pb.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-476ev.tmp
  • %ProgramFiles(x86)%\viewfd\data\is-db896.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-0md2o.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-f2fcc.tmp
  • %TEMP%\is-50dci.tmp\_isetup\_regdll.tmp
  • %TEMP%\is-50dci.tmp\_isetup\_shfoldr.dll
  • %TEMP%\is-50dci.tmp\_isetup\_iscrypt.dll
  • %ProgramFiles(x86)%\viewfd\is-4l2gv.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-82moa.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-2voj6.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-hbp8r.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-r4q1d.tmp
  • %ProgramFiles(x86)%\viewfd\backup\is-36opd.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-r4ggf.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-be13n.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-hoe9q.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-ivs4f.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-kuv68.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-drq65.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-kmu9t.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-g1chv.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-p0s4h.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-u8rkl.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-b0p5g.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-bgkqu.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-ovrif.tmp
  • %TEMP%\is-50dci.tmp\_isetup\_setup64.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-cik7n.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-rmcfe.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-itm4c.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-eh848.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-c5qfq.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-h05a9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ajb3p.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-atudh.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-iqmhj.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ocd63.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-cmsdv.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\metallic\is-0e6rj.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-u190i.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9pgoh.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-nu44v.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\new\is-hvpuu.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-c3ogj.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-04dn7.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-eqghh.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-j82j9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-mdojb.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-eip7v.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-rj1kb.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-05dcd.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-6fsbr.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\saturation\is-vsupl.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-l330u.tmp
  • %ProgramFiles(x86)%\viewfd\is-ui7es.tmp
  • %ProgramFiles(x86)%\viewfd\viewfd.exe
  • %ProgramFiles(x86)%\viewfd\graphic\grids\is-g5mcm.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-iua9a.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\brightness\is-4ts5v.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-gscrf.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-86s6b.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-lrsot.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-bcb30.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-pojnm.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-n2cad.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-14i05.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-htek6.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-v4uks.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-g6c68.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-qk0uq.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-3eaee.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-bv4mt.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-do64f.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-vpboj.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-qb8eb.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-6q2hd.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-gd2g0.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-pftl8.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-qjqgk.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-nu49h.tmp
  • %TEMP%\lohkos.cab
Moves the following files
  • from %ProgramFiles(x86)%\viewfd\is-4l2gv.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
  • from %ProgramFiles(x86)%\viewfd\lsd\is-cmbgd.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
  • from %ProgramFiles(x86)%\viewfd\lsd\is-ahk46.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\is-trlod.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-gfmjl.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-qqub6.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ndud4.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-s75k0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
  • from %ProgramFiles(x86)%\viewfd\ini\is-s3tq5.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-pdk8m.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
  • from %ProgramFiles(x86)%\viewfd\ini\is-8h92t.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-rth0m.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-94f7n.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-rnpdg.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-m55ek.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ek79i.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tpkqg.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-49m2g.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-etoan.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-6hqba.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-mtnl1.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-dq3kq.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
  • from %ProgramFiles(x86)%\viewfd\ini\is-osm78.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-1g2i6.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-7jgkl.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-2hgdu.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-9mndj.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-fljk4.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-to6u1.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ovetr.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-2t445.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-5vo7u.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-v0ng5.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-7j4cm.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-g613h.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-0vtrt.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-r41j0.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-31pcn.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\transition\is-kiich.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-iq17p.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-t5cta.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\ini\is-jhmb6.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-5qorq.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-vle79.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-5krnh.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
  • from %ProgramFiles(x86)%\viewfd\ini\is-ttcpp.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-7jo33.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-bmtpr.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-6h0er.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-rg9md.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-ighif.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-0qoih.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-lcak2.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-15o1u.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-ir36m.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-nsaqk.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-0n8bj.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-jqp2l.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
  • from %ProgramFiles(x86)%\viewfd\url\search\is-ec6fv.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
  • from %ProgramFiles(x86)%\viewfd\url\search\is-8glig.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-p7618.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
  • from %ProgramFiles(x86)%\viewfd\is-663ac.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
  • from %ProgramFiles(x86)%\viewfd\is-ui7es.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
  • from %ProgramFiles(x86)%\viewfd\is-porph.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
  • from %ProgramFiles(x86)%\viewfd\is-087k1.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
  • from %ProgramFiles(x86)%\viewfd\is-o99is.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
  • from %ProgramFiles(x86)%\viewfd\is-bltga.tmp to %ProgramFiles(x86)%\viewfd\readme.html
  • from %ProgramFiles(x86)%\viewfd\is-m4rjq.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
  • from %ProgramFiles(x86)%\viewfd\is-8mume.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-9udic.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
  • from %ProgramFiles(x86)%\viewfd\is-dgt1b.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
  • from %ProgramFiles(x86)%\viewfd\url\search\is-038ua.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-qj12i.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-u190i.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-02pc1.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
  • from %ProgramFiles(x86)%\viewfd\programs\is-n0fga.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
  • from %ProgramFiles(x86)%\viewfd\radio\is-drcv2.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
  • from %ProgramFiles(x86)%\viewfd\radio\is-h3i71.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
  • from %ProgramFiles(x86)%\viewfd\reports\is-aqe61.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
  • from %ProgramFiles(x86)%\viewfd\search\is-7ialb.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-d1k74.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-9ijqc.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-c08ts.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-9bdvg.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-1toot.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
  • from %ProgramFiles(x86)%\viewfd\soft\is-gnee9.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-oc189.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-sf7mh.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-v0pr5.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
  • from %ProgramFiles(x86)%\viewfd\url\is-l5m4d.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
  • from %ProgramFiles(x86)%\viewfd\url\is-apje0.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-o9t67.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-6ba8i.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-h0hf3.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-l81du.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-c17cm.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-r6ha1.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\selection\is-809ks.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-kqi1s.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\formulas\is-0couk.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-l84lh.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-nuj2d.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-rl661.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-vh589.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-tc64q.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-hoe9q.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
  • from %ProgramFiles(x86)%\viewfd\formulas\is-g4jnv.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-hdhhu.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
  • from %ProgramFiles(x86)%\viewfd\formulas\is-erpkm.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ip3ci.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-k9415.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-tvl60.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-n0r7f.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-cait3.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-r4ggf.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-t3glj.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-itm4c.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-e5e6q.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
  • from %ProgramFiles(x86)%\viewfd\forms\is-nsv23.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9dire.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
  • from %ProgramFiles(x86)%\viewfd\data\is-db896.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-rmcfe.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-82moa.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-hbp8r.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-r4q1d.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
  • from %ProgramFiles(x86)%\viewfd\backup\is-36opd.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
  • from %ProgramFiles(x86)%\viewfd\browser\is-be13n.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
  • from %ProgramFiles(x86)%\viewfd\browser\is-ovrif.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
  • from %ProgramFiles(x86)%\viewfd\browser\is-ivs4f.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
  • from %ProgramFiles(x86)%\viewfd\browser\is-cik7n.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-kuv68.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-drq65.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-2voj6.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-kmu9t.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-p0s4h.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-u8rkl.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-b0p5g.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-bgkqu.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-f2fcc.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-0md2o.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-476ev.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-k15pb.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9pgoh.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-g1chv.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-qjqgk.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
  • from %ProgramFiles(x86)%\viewfd\formulas\is-anh3i.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
  • from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-iua9a.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-c5qfq.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ajb3p.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-atudh.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-iqmhj.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ocd63.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-cmsdv.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-0e6rj.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\new\is-hvpuu.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-6fsbr.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-vsupl.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-l330u.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-c3ogj.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-04dn7.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-eqghh.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-j82j9.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-mdojb.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-eip7v.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-rj1kb.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-05dcd.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-8op7u.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-nu44v.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-4ts5v.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-h05a9.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
  • from %ProgramFiles(x86)%\viewfd\url\search\is-dj6bq.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
  • from %ProgramFiles(x86)%\viewfd\is-efkps.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
  • from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-v4uks.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-86s6b.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-lrsot.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-bcb30.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-pojnm.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-n2cad.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-14i05.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-g6c68.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-m3c2t.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-nu49h.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-gscrf.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-qk0uq.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-bv4mt.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-do64f.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-vpboj.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-qb8eb.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-6q2hd.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-gd2g0.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-pftl8.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\grids\is-g5mcm.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-htek6.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-3eaee.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-eh848.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
  • from %ProgramFiles(x86)%\viewfd\is-p0cqb.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc
Network activity
Connects to
  • 'so###como.gq':80
TCP
HTTP GET requests
  • http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######
HTTP POST requests
  • http://so###como.gq/new/net_api
UDP
  • DNS ASK so###como.gq
Miscellaneous
Searches for the following windows
  • ClassName: '' WindowName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}'
Creates and executes the following
  • '%TEMP%\is-lkc0i.tmp\is-ehku1.tmp' /SL4 $E014E "<Full path to file>" 7073898 141312
  • '%ProgramFiles(x86)%\viewfd\viewfd.exe'
  • '%ProgramFiles(x86)%\viewfd\viewfd.exe' 80ee3d8937be413a83a7e55ff367d0c0
Executes the following
  • '%WINDIR%\syswow64\schtasks.exe' /Query
  • '%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android