Library
My library

+ Add to library

Profile

Trojan.DownLoader45.9438

Added to the Dr.Web virus database: 2022-08-07

Virus description added:

Technical Information

Modifies file system
Creates the following files
  • %TEMP%\is-1gan6.tmp\is-4bldu.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-stli0.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-035k0.tmp
  • %ProgramFiles(x86)%\viewfd\lsd\is-2k1e4.tmp
  • %ProgramFiles(x86)%\viewfd\lsd\is-cbe21.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\is-l8srt.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-54tcd.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ujob5.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-p0129.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ncu81.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-uf5q4.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-rlg04.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-n1sdm.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ncvs6.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-g2kbu.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-skiuu.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-hncj3.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-kfo24.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-qfi0j.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-p7up5.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-68tl6.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-0mltv.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-8k0i8.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-nose5.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-ai48l.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-719c6.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-s5hho.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-llpb4.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-lhqsa.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-7efde.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-piuba.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-43q9u.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-me4hb.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-n5ntk.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-fv1v8.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-rpr7i.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tbg0r.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-6q9sm.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-ts91b.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-j0v65.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-tma4f.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-u4lr7.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\transition\is-0619a.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-qgmt2.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-cep21.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-9qq65.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-4mniu.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-4qqva.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-i8v0k.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-qp72q.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-1j278.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-v9han.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-j1m9u.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-sg516.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-umorm.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-stmvd.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-24se6.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-i3a5c.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-2lirh.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-3tqli.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-dqng2.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-3dsdo.tmp
  • %ProgramFiles(x86)%\viewfd\is-ki7kq.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\selection\is-fvbh9.tmp
  • %ProgramFiles(x86)%\viewfd\is-d9jfa.tmp
  • %ProgramFiles(x86)%\viewfd\is-c7fp2.tmp
  • %ProgramFiles(x86)%\viewfd\is-hnb40.tmp
  • %ProgramFiles(x86)%\viewfd\is-fd0tt.tmp
  • %ProgramFiles(x86)%\viewfd\is-j4nfn.tmp
  • %ProgramFiles(x86)%\viewfd\is-gbvq3.tmp
  • %ProgramFiles(x86)%\viewfd\is-jt744.tmp
  • %ProgramFiles(x86)%\viewfd\is-ki85i.tmp
  • %ProgramFiles(x86)%\viewfd\is-2d3p1.tmp
  • %ProgramFiles(x86)%\viewfd\unins000.dat
  • %ProgramFiles(x86)%\viewfd\url\search\is-rhi5i.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-f6vfi.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-gljb4.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-dh4ie.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-6p9u9.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ufebc.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-olr50.tmp
  • %ProgramFiles(x86)%\viewfd\programs\is-1ckuf.tmp
  • %ProgramFiles(x86)%\viewfd\radio\is-ghus0.tmp
  • %ProgramFiles(x86)%\viewfd\radio\is-pj570.tmp
  • %ProgramFiles(x86)%\viewfd\reports\is-opki5.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-monf5.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-5qsqg.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-49hme.tmp
  • %ProgramFiles(x86)%\viewfd\viewfd.exe
  • %ProgramFiles(x86)%\viewfd\url\search\is-2fm7k.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-qssng.tmp
  • %ProgramFiles(x86)%\viewfd\soft\is-mk8ef.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-4hadj.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-i016d.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-r1rkp.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-3uinr.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-sjcfd.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-75kef.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-d58o2.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-vfkf9.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-5pamg.tmp
  • %ProgramFiles(x86)%\viewfd\is-5s50c.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-covhh.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\metallic\is-oun8l.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-4lmkh.tmp
  • %ProgramFiles(x86)%\viewfd\data\is-rj9ip.tmp
  • %ProgramFiles(x86)%\viewfd\forms\is-8mm3c.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-9m1kh.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-r141l.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-3v3ne.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-nic9i.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-vihuh.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-uksaj.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-jk2j9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-iiun7.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-4k4f1.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-v1044.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-mblps.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-7933q.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-r9i7q.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-v94n0.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-8sbb6.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-rn7pc.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-0l6ej.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-q4624.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-fiuja.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-76u5h.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-h922f.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-6ha13.tmp
  • %TEMP%\is-k94s5.tmp\_isetup\_setup64.tmp
  • %TEMP%\is-k94s5.tmp\_isetup\_shfoldr.dll
  • %TEMP%\is-k94s5.tmp\_isetup\_iscrypt.dll
  • %ProgramFiles(x86)%\viewfd\is-hf2mt.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\lang\is-d4ddu.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-2umne.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-nefm2.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-gi8re.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-o1sjm.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-tmpvu.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-jtr7f.tmp
  • %ProgramFiles(x86)%\viewfd\backup\is-m4kv2.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-5fvcj.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-fvbmn.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-pq0gj.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-8j4m7.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-b0e7g.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-fed85.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-svsuo.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-hcqfu.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-u1173.tmp
  • %TEMP%\is-k94s5.tmp\_isetup\_regdll.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-dci0k.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-q96qt.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-l56mt.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-0ecd5.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-g7235.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-7iqnf.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-bbj49.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1c78i.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1jmj9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-hc0j5.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-kmd5l.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-dpp2h.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-6vtk4.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-di9ib.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\new\is-bmtkd.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-p0i2q.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-cmese.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\saturation\is-ka46q.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-d4i5u.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-9kgpt.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-evdmt.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-cup69.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ge1aa.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-vlrip.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-b2v2c.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-pfpah.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-n8reo.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-9a1kt.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-nm4vn.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-ialul.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-60gfn.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ibisn.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-ktcv3.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\brightness\is-t3th7.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-7lvb2.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-6er8f.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-58d8p.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-vffci.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-i1aan.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-bmapr.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-jagmh.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-c6u0v.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-vd7rf.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-ks9gj.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-tv6vf.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-ehc41.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-106u2.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-jpqgg.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-3v7u0.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-0ecnl.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-4sl77.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-t7q1a.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\grids\is-uclhi.tmp
  • %TEMP%\lohkos.cab
Moves the following files
  • from %ProgramFiles(x86)%\viewfd\is-hf2mt.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
  • from %ProgramFiles(x86)%\viewfd\ini\is-stli0.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-035k0.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
  • from %ProgramFiles(x86)%\viewfd\lsd\is-2k1e4.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
  • from %ProgramFiles(x86)%\viewfd\lsd\is-cbe21.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\is-l8srt.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-54tcd.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ujob5.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-p0129.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
  • from %ProgramFiles(x86)%\viewfd\ini\is-0mltv.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-8k0i8.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ncu81.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-n1sdm.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ncvs6.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-g2kbu.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-skiuu.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-hncj3.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-kfo24.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-qfi0j.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-p7up5.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-rlg04.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tbg0r.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
  • from %ProgramFiles(x86)%\viewfd\ini\is-nose5.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-ai48l.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-719c6.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-llpb4.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-lhqsa.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-7efde.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-piuba.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-43q9u.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-me4hb.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-n5ntk.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-fv1v8.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-6q9sm.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-s5hho.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-uf5q4.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ts91b.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-j0v65.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-tma4f.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-u4lr7.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\transition\is-0619a.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-qgmt2.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-cep21.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\ini\is-9qq65.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-4mniu.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-i8v0k.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-68tl6.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-rpr7i.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-qp72q.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-1j278.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
  • from %ProgramFiles(x86)%\viewfd\url\search\is-gljb4.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
  • from %ProgramFiles(x86)%\viewfd\url\search\is-rhi5i.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-j1m9u.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-sg516.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-umorm.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-stmvd.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-24se6.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-i3a5c.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-2lirh.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-3tqli.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-dqng2.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-3dsdo.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
  • from %ProgramFiles(x86)%\viewfd\is-5s50c.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
  • from %ProgramFiles(x86)%\viewfd\is-ki7kq.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
  • from %ProgramFiles(x86)%\viewfd\is-d9jfa.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
  • from %ProgramFiles(x86)%\viewfd\is-c7fp2.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
  • from %ProgramFiles(x86)%\viewfd\is-hnb40.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
  • from %ProgramFiles(x86)%\viewfd\is-fd0tt.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
  • from %ProgramFiles(x86)%\viewfd\is-j4nfn.tmp to %ProgramFiles(x86)%\viewfd\readme.html
  • from %ProgramFiles(x86)%\viewfd\is-gbvq3.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
  • from %ProgramFiles(x86)%\viewfd\is-jt744.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
  • from %ProgramFiles(x86)%\viewfd\url\search\is-5pamg.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-vfkf9.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
  • from %ProgramFiles(x86)%\viewfd\url\search\is-2fm7k.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-d58o2.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-v9han.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-6p9u9.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ufebc.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-olr50.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
  • from %ProgramFiles(x86)%\viewfd\programs\is-1ckuf.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
  • from %ProgramFiles(x86)%\viewfd\radio\is-ghus0.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
  • from %ProgramFiles(x86)%\viewfd\radio\is-pj570.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
  • from %ProgramFiles(x86)%\viewfd\reports\is-opki5.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
  • from %ProgramFiles(x86)%\viewfd\search\is-monf5.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-5qsqg.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-49hme.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-dh4ie.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-f6vfi.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-qssng.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
  • from %ProgramFiles(x86)%\viewfd\soft\is-mk8ef.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-4hadj.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-i016d.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-r1rkp.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
  • from %ProgramFiles(x86)%\viewfd\url\is-3uinr.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
  • from %ProgramFiles(x86)%\viewfd\url\is-sjcfd.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-75kef.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
  • from %ProgramFiles(x86)%\viewfd\is-ki85i.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
  • from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-4qqva.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\selection\is-fvbh9.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-covhh.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\formulas\is-r141l.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-3v3ne.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-nic9i.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-vihuh.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-uksaj.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-iiun7.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-jtr7f.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-4k4f1.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
  • from %ProgramFiles(x86)%\viewfd\forms\is-8mm3c.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
  • from %ProgramFiles(x86)%\viewfd\formulas\is-9m1kh.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-v1044.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-r9i7q.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-v94n0.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-8sbb6.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-rn7pc.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-0l6ej.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-tmpvu.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-q96qt.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-l56mt.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-mblps.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-7933q.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
  • from %ProgramFiles(x86)%\viewfd\data\is-rj9ip.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-4lmkh.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-fiuja.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-2umne.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-nefm2.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-gi8re.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-o1sjm.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
  • from %ProgramFiles(x86)%\viewfd\backup\is-m4kv2.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
  • from %ProgramFiles(x86)%\viewfd\browser\is-jk2j9.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
  • from %ProgramFiles(x86)%\viewfd\browser\is-dci0k.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
  • from %ProgramFiles(x86)%\viewfd\browser\is-5fvcj.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
  • from %ProgramFiles(x86)%\viewfd\browser\is-fvbmn.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
  • from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-d4ddu.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-pq0gj.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-b0e7g.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-fed85.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-svsuo.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-hcqfu.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-u1173.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-6ha13.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-h922f.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-76u5h.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-q4624.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-8j4m7.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-0ecd5.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-60gfn.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ibisn.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-ktcv3.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-bbj49.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1c78i.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1jmj9.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-hc0j5.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-kmd5l.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-dpp2h.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-6vtk4.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-di9ib.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-oun8l.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\new\is-bmtkd.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-cmese.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-ka46q.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-d4i5u.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-9kgpt.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-evdmt.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-cup69.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ge1aa.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-vlrip.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-b2v2c.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-pfpah.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-jagmh.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-7iqnf.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-n8reo.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-g7235.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-nm4vn.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-t3th7.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-7lvb2.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-6er8f.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-58d8p.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-vffci.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-i1aan.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-bmapr.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ialul.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-9a1kt.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-vd7rf.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-ks9gj.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-tv6vf.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-ehc41.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-106u2.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-jpqgg.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-3v7u0.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-0ecnl.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-4sl77.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-t7q1a.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-c6u0v.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\grids\is-uclhi.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-p0i2q.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
  • from %ProgramFiles(x86)%\viewfd\is-2d3p1.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc
Network activity
Connects to
  • 'so###como.gq':80
TCP
HTTP GET requests
  • http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######
HTTP POST requests
  • http://so###como.gq/new/net_api
UDP
  • DNS ASK so###como.gq
Miscellaneous
Searches for the following windows
  • ClassName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}' WindowName: ''
Creates and executes the following
  • '%TEMP%\is-1gan6.tmp\is-4bldu.tmp' /SL4 $110224 "<Full path to file>" 6993319 52736
  • '%ProgramFiles(x86)%\viewfd\viewfd.exe'
  • '%ProgramFiles(x86)%\viewfd\viewfd.exe' 5b7906d07bd0e05882bdf2defd7b5d25
Executes the following
  • '%WINDIR%\syswow64\schtasks.exe' /Query
  • '%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android