Library
My library

+ Add to library

Profile

Trojan.DownLoader45.6396

Added to the Dr.Web virus database: 2022-07-23

Virus description added:

Technical Information

Modifies file system
Creates the following files
  • %TEMP%\is-8avgt.tmp\is-0fgag.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-ddieb.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-a0ins.tmp
  • %ProgramFiles(x86)%\viewfd\lsd\is-0aqgp.tmp
  • %ProgramFiles(x86)%\viewfd\lsd\is-o78rj.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\is-iptot.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-fsgfm.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-cg8mt.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-nif59.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-mcq09.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-b2l1b.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7od7l.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-bb9if.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-fvr99.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-dh5nh.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-j0rc2.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-a1mku.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-scici.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-6n5r1.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-8hqsh.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-pkf2d.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-0h9oj.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-1c47m.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-5d8ce.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-84qfr.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-bqcvp.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-n6nah.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-8tjf9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-rinqb.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-q5bhr.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-rnc8n.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-23e1b.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-37lrm.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-1bvrj.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-lh88d.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-3qimu.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-k26do.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-5faam.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-9m9k9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-1do11.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-sfro3.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-0q0vn.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\transition\is-i70b3.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-inuu5.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-4v90m.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-mbotk.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-ea3vk.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-kgsi1.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-k7kav.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-8l6ht.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-k2pu0.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-mujkl.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-hkg1q.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-lrpkp.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-jpbap.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-29kd3.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-g5sts.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-4mnc4.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-4uimk.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-kjmr8.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-qqt3l.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-8bs41.tmp
  • %ProgramFiles(x86)%\viewfd\is-tndm9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\selection\is-n074i.tmp
  • %ProgramFiles(x86)%\viewfd\is-71fpt.tmp
  • %ProgramFiles(x86)%\viewfd\is-tvru5.tmp
  • %ProgramFiles(x86)%\viewfd\is-ie8eo.tmp
  • %ProgramFiles(x86)%\viewfd\is-09u9v.tmp
  • %ProgramFiles(x86)%\viewfd\is-f77ra.tmp
  • %ProgramFiles(x86)%\viewfd\is-39d0a.tmp
  • %ProgramFiles(x86)%\viewfd\is-uoq0i.tmp
  • %ProgramFiles(x86)%\viewfd\is-ac362.tmp
  • %ProgramFiles(x86)%\viewfd\is-vo1mn.tmp
  • %ProgramFiles(x86)%\viewfd\unins000.dat
  • %ProgramFiles(x86)%\viewfd\url\search\is-iso42.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-1li5f.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-ejfsp.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-arc7i.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-d2o95.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-u0bvu.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ep535.tmp
  • %ProgramFiles(x86)%\viewfd\programs\is-b5r9d.tmp
  • %ProgramFiles(x86)%\viewfd\radio\is-mndnu.tmp
  • %ProgramFiles(x86)%\viewfd\radio\is-b13cs.tmp
  • %ProgramFiles(x86)%\viewfd\reports\is-uumio.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-2q12e.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-o1ic2.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-o514e.tmp
  • %ProgramFiles(x86)%\viewfd\viewfd.exe
  • %ProgramFiles(x86)%\viewfd\url\search\is-qmksm.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-j3028.tmp
  • %ProgramFiles(x86)%\viewfd\soft\is-i9umc.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-obtga.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-ners8.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-9dhb8.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-ohomf.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-f5hfp.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-0apkj.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-cv7br.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-mfcse.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-50305.tmp
  • %ProgramFiles(x86)%\viewfd\is-dvtl1.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-4ol2n.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\metallic\is-md7mi.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-jlmcn.tmp
  • %ProgramFiles(x86)%\viewfd\data\is-upi32.tmp
  • %ProgramFiles(x86)%\viewfd\forms\is-6kp8u.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-m2klj.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-6rr15.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-qhlo5.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-7r9tf.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-5jvj7.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-2t887.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-th96e.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-818qf.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-llcqt.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-f3jhl.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-d0eon.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-uqv69.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-s52td.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-selh8.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6pqlm.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-434i4.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-0nevg.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-4u30m.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-et65a.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-9fk0d.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-v39v6.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-e28pj.tmp
  • %TEMP%\is-2hsvl.tmp\_isetup\_setup64.tmp
  • %TEMP%\is-2hsvl.tmp\_isetup\_shfoldr.dll
  • %TEMP%\is-2hsvl.tmp\_isetup\_iscrypt.dll
  • %ProgramFiles(x86)%\viewfd\is-9i6nm.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\lang\is-802u4.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-6ph5i.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-uc6ev.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-umvja.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-cdeja.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-f17un.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-hiu40.tmp
  • %ProgramFiles(x86)%\viewfd\backup\is-cio6e.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-d6uk0.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-8clgu.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-3tttq.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-5vtbf.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-0pdhv.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-ih5tn.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-ckcgq.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-v2l9e.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-02g2u.tmp
  • %TEMP%\is-2hsvl.tmp\_isetup\_regdll.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-86b7l.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-nb583.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6f1p6.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-u8apu.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-6pb17.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-llb33.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-gov8l.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-05fho.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-0t21e.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-eqbr5.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-k57jt.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-klg90.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-v9ogl.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-s3qe9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\new\is-8s456.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-o16n0.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-3it8l.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\saturation\is-a4ot7.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-591kb.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-3ddp3.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-g7l75.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-3unso.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-9d0l0.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-uetbe.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-b29du.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-deslk.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-fcn0n.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-mbpum.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-tjnl2.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-6rnvi.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-bn3lr.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-7j2qn.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-tqkha.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\brightness\is-rh2pe.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-pjumc.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-crpc9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-5fik5.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-cjrup.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-era41.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-6imfi.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-gbn4a.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-n8cq9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-81g6i.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-ht5ba.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-hokl6.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-li51t.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-i5i9o.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-oq4q7.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-tjqqr.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-j8g57.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-m46tb.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-a0tb4.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\grids\is-nnupc.tmp
  • %TEMP%\lohkos.cab
Moves the following files
  • from %ProgramFiles(x86)%\viewfd\is-9i6nm.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
  • from %ProgramFiles(x86)%\viewfd\ini\is-ddieb.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-a0ins.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
  • from %ProgramFiles(x86)%\viewfd\lsd\is-0aqgp.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
  • from %ProgramFiles(x86)%\viewfd\lsd\is-o78rj.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\is-iptot.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-fsgfm.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-cg8mt.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-nif59.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
  • from %ProgramFiles(x86)%\viewfd\ini\is-0h9oj.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-1c47m.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-mcq09.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-bb9if.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-fvr99.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-dh5nh.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-j0rc2.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-a1mku.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-scici.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-6n5r1.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-8hqsh.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7od7l.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-k26do.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
  • from %ProgramFiles(x86)%\viewfd\ini\is-5d8ce.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-84qfr.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-bqcvp.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-8tjf9.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-rinqb.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-q5bhr.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-rnc8n.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-23e1b.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-37lrm.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-1bvrj.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-lh88d.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-5faam.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-n6nah.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-b2l1b.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-9m9k9.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-1do11.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-sfro3.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-0q0vn.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\transition\is-i70b3.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-inuu5.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-4v90m.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\ini\is-mbotk.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-ea3vk.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-k7kav.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-pkf2d.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-3qimu.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-8l6ht.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-k2pu0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
  • from %ProgramFiles(x86)%\viewfd\url\search\is-ejfsp.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
  • from %ProgramFiles(x86)%\viewfd\url\search\is-iso42.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-hkg1q.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-lrpkp.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-jpbap.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-29kd3.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-g5sts.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-4mnc4.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-4uimk.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-kjmr8.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-qqt3l.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-8bs41.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
  • from %ProgramFiles(x86)%\viewfd\is-dvtl1.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
  • from %ProgramFiles(x86)%\viewfd\is-tndm9.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
  • from %ProgramFiles(x86)%\viewfd\is-71fpt.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
  • from %ProgramFiles(x86)%\viewfd\is-tvru5.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
  • from %ProgramFiles(x86)%\viewfd\is-ie8eo.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
  • from %ProgramFiles(x86)%\viewfd\is-09u9v.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
  • from %ProgramFiles(x86)%\viewfd\is-f77ra.tmp to %ProgramFiles(x86)%\viewfd\readme.html
  • from %ProgramFiles(x86)%\viewfd\is-39d0a.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
  • from %ProgramFiles(x86)%\viewfd\is-uoq0i.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
  • from %ProgramFiles(x86)%\viewfd\url\search\is-50305.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-mfcse.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
  • from %ProgramFiles(x86)%\viewfd\url\search\is-qmksm.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-cv7br.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-mujkl.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-d2o95.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-u0bvu.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ep535.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
  • from %ProgramFiles(x86)%\viewfd\programs\is-b5r9d.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
  • from %ProgramFiles(x86)%\viewfd\radio\is-mndnu.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
  • from %ProgramFiles(x86)%\viewfd\radio\is-b13cs.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
  • from %ProgramFiles(x86)%\viewfd\reports\is-uumio.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
  • from %ProgramFiles(x86)%\viewfd\search\is-2q12e.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-o1ic2.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-o514e.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-arc7i.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-1li5f.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-j3028.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
  • from %ProgramFiles(x86)%\viewfd\soft\is-i9umc.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-obtga.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-ners8.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-9dhb8.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
  • from %ProgramFiles(x86)%\viewfd\url\is-ohomf.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
  • from %ProgramFiles(x86)%\viewfd\url\is-f5hfp.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-0apkj.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
  • from %ProgramFiles(x86)%\viewfd\is-ac362.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
  • from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-kgsi1.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\selection\is-n074i.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-4ol2n.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\formulas\is-6rr15.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-qhlo5.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-7r9tf.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-5jvj7.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-2t887.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-818qf.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-hiu40.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-llcqt.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
  • from %ProgramFiles(x86)%\viewfd\forms\is-6kp8u.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
  • from %ProgramFiles(x86)%\viewfd\formulas\is-m2klj.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-f3jhl.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-s52td.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-selh8.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6pqlm.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-434i4.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-0nevg.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-f17un.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-nb583.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6f1p6.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-d0eon.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-uqv69.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
  • from %ProgramFiles(x86)%\viewfd\data\is-upi32.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-jlmcn.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-et65a.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-6ph5i.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-uc6ev.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-umvja.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-cdeja.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
  • from %ProgramFiles(x86)%\viewfd\backup\is-cio6e.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
  • from %ProgramFiles(x86)%\viewfd\browser\is-th96e.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
  • from %ProgramFiles(x86)%\viewfd\browser\is-86b7l.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
  • from %ProgramFiles(x86)%\viewfd\browser\is-d6uk0.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
  • from %ProgramFiles(x86)%\viewfd\browser\is-8clgu.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
  • from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-802u4.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-3tttq.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-0pdhv.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-ih5tn.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-ckcgq.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-v2l9e.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-02g2u.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-e28pj.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-v39v6.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-9fk0d.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-4u30m.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-5vtbf.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-u8apu.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-bn3lr.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-7j2qn.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-tqkha.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-gov8l.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-05fho.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-0t21e.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-eqbr5.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-k57jt.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-klg90.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-v9ogl.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-s3qe9.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-md7mi.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\new\is-8s456.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-3it8l.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-a4ot7.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-591kb.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-3ddp3.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-g7l75.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-3unso.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-9d0l0.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-uetbe.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-b29du.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-deslk.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-gbn4a.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-llb33.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-fcn0n.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-6pb17.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-tjnl2.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-rh2pe.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-pjumc.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-crpc9.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-5fik5.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-cjrup.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-era41.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-6imfi.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-6rnvi.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-mbpum.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-81g6i.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-ht5ba.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-hokl6.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-li51t.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-i5i9o.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-oq4q7.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-tjqqr.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-j8g57.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-m46tb.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-a0tb4.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-n8cq9.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\grids\is-nnupc.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-o16n0.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
  • from %ProgramFiles(x86)%\viewfd\is-vo1mn.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc
Network activity
Connects to
  • 'so###como.gq':80
TCP
HTTP GET requests
  • http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######
HTTP POST requests
  • http://so###como.gq/new/net_api
UDP
  • DNS ASK so###como.gq
Miscellaneous
Searches for the following windows
  • ClassName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}' WindowName: ''
Creates and executes the following
  • '%TEMP%\is-8avgt.tmp\is-0fgag.tmp' /SL4 $B0236 "<Full path to file>" 6932830 52736
  • '%ProgramFiles(x86)%\viewfd\viewfd.exe'
  • '%ProgramFiles(x86)%\viewfd\viewfd.exe' 820d541e5ef270f97601941a669871df
Executes the following
  • '%WINDIR%\syswow64\schtasks.exe' /Query
  • '%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android