Meine Bibliothek
Meine Bibliothek

+ Zur Bibliothek hinzufügen

Support

Ihre Anfragen

Rufen Sie uns an

+7 (495) 789-45-86

Profil

Trojan.DownLoader44.65014

Added to the Dr.Web virus database: 2022-06-15

Virus description added:

Technical Information

Modifies file system
Creates the following files
  • %TEMP%\is-of8c7.tmp\is-00bgf.tmp
  • %ProgramFiles(x86)%\viewfd\lsd\is-gberf.tmp
  • %ProgramFiles(x86)%\viewfd\lsd\is-394l8.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\is-f8veg.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-o1i5u.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tsnpa.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7c3hg.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-etkuo.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-s9568.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-k9f5j.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-nis5u.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-nke05.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-kouc9.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tm5v2.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-e80c8.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-cmiqf.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tuuuo.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ibj6f.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-sim88.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-i12pd.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-6cci3.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-umk7j.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-l91oi.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-4mubk.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-4rtik.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-pmnvc.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-a6bpj.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-3dpkb.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-vfdke.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-e83o4.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-e1kqs.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-hfupo.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-ipvae.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-imjd5.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ifroe.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-5hn71.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-kh3el.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-6m7gn.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-1k19r.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-mhail.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\transition\is-n9td0.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-appnv.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-k16j2.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-gaafm.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-h9o92.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-0i8r8.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-hudcu.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-jgtmc.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-4uc3h.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-f0brm.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-md41s.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-qj8r2.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-2m71v.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-rfqr7.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-hkg7o.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-7ovdl.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-r08fd.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-n5fdf.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-j0qe1.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-02345.tmp
  • %ProgramFiles(x86)%\viewfd\is-2uej0.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-vfhmt.tmp
  • %ProgramFiles(x86)%\viewfd\is-u2fue.tmp
  • %ProgramFiles(x86)%\viewfd\is-2niq8.tmp
  • %ProgramFiles(x86)%\viewfd\is-3kj4f.tmp
  • %ProgramFiles(x86)%\viewfd\is-b9l4r.tmp
  • %ProgramFiles(x86)%\viewfd\is-2s98u.tmp
  • %ProgramFiles(x86)%\viewfd\is-vi88m.tmp
  • %ProgramFiles(x86)%\viewfd\is-afevj.tmp
  • %ProgramFiles(x86)%\viewfd\is-iejbf.tmp
  • %ProgramFiles(x86)%\viewfd\is-1cv52.tmp
  • %ProgramFiles(x86)%\viewfd\unins000.dat
  • %ProgramFiles(x86)%\viewfd\url\soft\is-rhgt7.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-aqqhv.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-u1v4t.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-hce0b.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-t5jkb.tmp
  • %ProgramFiles(x86)%\viewfd\programs\is-hfjd6.tmp
  • %ProgramFiles(x86)%\viewfd\radio\is-40986.tmp
  • %ProgramFiles(x86)%\viewfd\radio\is-6b3gd.tmp
  • %ProgramFiles(x86)%\viewfd\reports\is-gvfvo.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-kb4bm.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-l903i.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-0l087.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-hnk1n.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-fmeoa.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-glj82.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-77icn.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-pfucf.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-2d0sb.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-bjqcu.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-27u55.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-rkdoe.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-usjs2.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-k1iuf.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-auorq.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-evj4m.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-2kuqi.tmp
  • %ProgramFiles(x86)%\viewfd\soft\is-578q6.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-f29mm.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\selection\is-b2kre.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-b2f32.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-qbtm7.tmp
  • %ProgramFiles(x86)%\viewfd\forms\is-jvg3b.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-5qtmv.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-v82qa.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-l79h9.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-d4l3b.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-k58pr.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-uhknk.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-1j7eo.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-po0dk.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-lnbe0.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-pje0b.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-kfv77.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-c2tf0.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-loua7.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-anqni.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-rj9kf.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-n4087.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-87lr8.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-s30bn.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-3f8s0.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-rh8kv.tmp
  • %ProgramFiles(x86)%\viewfd\data\is-c6kp3.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-geikd.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-i2ifb.tmp
  • %TEMP%\is-oiacg.tmp\_isetup\_regdll.tmp
  • %TEMP%\is-oiacg.tmp\_isetup\_shfoldr.dll
  • %TEMP%\is-oiacg.tmp\_isetup\_iscrypt.dll
  • %ProgramFiles(x86)%\viewfd\is-9dfad.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-08po9.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-djemr.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-5k3dr.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-mmeo5.tmp
  • %ProgramFiles(x86)%\viewfd\backup\is-nt201.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-qhlk7.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-c0fcl.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9edn3.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-rvl7o.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-qe9g6.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-7hqij.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-06odt.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-qn02o.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-u2a85.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-u2olg.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-s6ijd.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-a4lh6.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-tas5v.tmp
  • %TEMP%\is-oiacg.tmp\_isetup\_setup64.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-dmo0u.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-o4ckf.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-qopr6.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-tcbei.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ep36r.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-4ur33.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-t22sj.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-473pf.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-sdhrv.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-rag3q.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-qe6j9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\metallic\is-ofr9s.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-nhmdm.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ndgqa.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-3je47.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\new\is-sl094.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ksco2.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-62ne9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1bftj.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-bd1bc.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-iajmg.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1pvdg.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-inhsm.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-h3dlt.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-6lkck.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\saturation\is-pa92c.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-hl949.tmp
  • %ProgramFiles(x86)%\viewfd\is-2f6ts.tmp
  • %ProgramFiles(x86)%\viewfd\viewfd.exe
  • %ProgramFiles(x86)%\viewfd\graphic\grids\is-fj2td.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-pjm94.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\brightness\is-humlo.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-7n1u4.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-78gm9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-bcima.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-jftqm.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-6o35s.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-jja82.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-d9j6a.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-mfffe.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-1a63u.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-pr3tp.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-q2gtt.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-kjumo.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-2ho08.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-bt4hv.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-1ghlr.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-t931c.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-2pgkc.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-7pehj.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-c4dqr.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ntm88.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-m1mbd.tmp
  • %TEMP%\lohkos.cab
Moves the following files
  • from %ProgramFiles(x86)%\viewfd\is-9dfad.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
  • from %ProgramFiles(x86)%\viewfd\lsd\is-gberf.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
  • from %ProgramFiles(x86)%\viewfd\lsd\is-394l8.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\is-f8veg.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-o1i5u.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tsnpa.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-7c3hg.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-etkuo.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
  • from %ProgramFiles(x86)%\viewfd\ini\is-6cci3.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-s9568.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
  • from %ProgramFiles(x86)%\viewfd\ini\is-l91oi.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-umk7j.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-kouc9.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tm5v2.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-e80c8.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-cmiqf.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-tuuuo.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ibj6f.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-sim88.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-nis5u.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-i12pd.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-nke05.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
  • from %ProgramFiles(x86)%\viewfd\ini\is-4mubk.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-4rtik.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-pmnvc.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-3dpkb.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-vfdke.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-e83o4.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-e1kqs.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-hfupo.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ipvae.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-imjd5.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-5hn71.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-f0brm.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-k9f5j.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-4uc3h.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-1k19r.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-mhail.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\transition\is-n9td0.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-appnv.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-k16j2.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\ini\is-gaafm.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-h9o92.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-0i8r8.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-6m7gn.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
  • from %ProgramFiles(x86)%\viewfd\ini\is-jgtmc.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-hudcu.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-a6bpj.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ifroe.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-glj82.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-rhgt7.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-aqqhv.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-2m71v.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-rfqr7.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-hkg7o.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-7ovdl.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-r08fd.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-n5fdf.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
  • from %ProgramFiles(x86)%\viewfd\url\search\is-vfhmt.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
  • from %ProgramFiles(x86)%\viewfd\url\search\is-u1v4t.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-j0qe1.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
  • from %ProgramFiles(x86)%\viewfd\is-u2fue.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
  • from %ProgramFiles(x86)%\viewfd\is-2f6ts.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
  • from %ProgramFiles(x86)%\viewfd\is-2niq8.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
  • from %ProgramFiles(x86)%\viewfd\is-3kj4f.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
  • from %ProgramFiles(x86)%\viewfd\is-b9l4r.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
  • from %ProgramFiles(x86)%\viewfd\is-2s98u.tmp to %ProgramFiles(x86)%\viewfd\readme.html
  • from %ProgramFiles(x86)%\viewfd\is-vi88m.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
  • from %ProgramFiles(x86)%\viewfd\is-afevj.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-02345.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
  • from %ProgramFiles(x86)%\viewfd\is-2uej0.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
  • from %ProgramFiles(x86)%\viewfd\url\search\is-hce0b.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-auorq.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-nhmdm.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-qj8r2.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
  • from %ProgramFiles(x86)%\viewfd\programs\is-hfjd6.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
  • from %ProgramFiles(x86)%\viewfd\radio\is-40986.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
  • from %ProgramFiles(x86)%\viewfd\radio\is-6b3gd.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
  • from %ProgramFiles(x86)%\viewfd\reports\is-gvfvo.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
  • from %ProgramFiles(x86)%\viewfd\search\is-kb4bm.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-l903i.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-0l087.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-hnk1n.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-pfucf.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-2kuqi.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
  • from %ProgramFiles(x86)%\viewfd\soft\is-578q6.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-f29mm.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-2d0sb.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-bjqcu.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
  • from %ProgramFiles(x86)%\viewfd\url\is-27u55.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
  • from %ProgramFiles(x86)%\viewfd\url\is-rkdoe.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-usjs2.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-k1iuf.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-md41s.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-77icn.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-fmeoa.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-kh3el.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\selection\is-b2kre.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-b2f32.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\formulas\is-d4l3b.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-k58pr.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-uhknk.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-1j7eo.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-po0dk.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-pje0b.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-9edn3.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
  • from %ProgramFiles(x86)%\viewfd\formulas\is-5qtmv.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-kfv77.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
  • from %ProgramFiles(x86)%\viewfd\formulas\is-l79h9.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-loua7.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-rj9kf.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-n4087.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-87lr8.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-s30bn.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-qhlk7.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-lnbe0.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-qopr6.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-c2tf0.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
  • from %ProgramFiles(x86)%\viewfd\forms\is-jvg3b.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-anqni.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
  • from %ProgramFiles(x86)%\viewfd\data\is-c6kp3.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-o4ckf.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-08po9.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-5k3dr.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-mmeo5.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
  • from %ProgramFiles(x86)%\viewfd\backup\is-nt201.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
  • from %ProgramFiles(x86)%\viewfd\browser\is-c0fcl.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
  • from %ProgramFiles(x86)%\viewfd\browser\is-tas5v.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
  • from %ProgramFiles(x86)%\viewfd\browser\is-rvl7o.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
  • from %ProgramFiles(x86)%\viewfd\browser\is-dmo0u.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-qe9g6.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-7hqij.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-djemr.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-06odt.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-u2a85.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-u2olg.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-s6ijd.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-a4lh6.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-i2ifb.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-geikd.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-rh8kv.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-3f8s0.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ndgqa.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-qn02o.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ntm88.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
  • from %ProgramFiles(x86)%\viewfd\formulas\is-v82qa.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
  • from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-pjm94.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ep36r.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-t22sj.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-473pf.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-sdhrv.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-rag3q.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-qe6j9.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-ofr9s.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\new\is-sl094.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-6lkck.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-pa92c.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-hl949.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-ksco2.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-62ne9.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1bftj.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-bd1bc.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-iajmg.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1pvdg.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-inhsm.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-h3dlt.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-qbtm7.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-3je47.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-humlo.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-4ur33.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
  • from %ProgramFiles(x86)%\viewfd\url\search\is-evj4m.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
  • from %ProgramFiles(x86)%\viewfd\is-iejbf.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
  • from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-1a63u.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-78gm9.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-bcima.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-jftqm.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-6o35s.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-jja82.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-d9j6a.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-pr3tp.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-t5jkb.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-m1mbd.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-7n1u4.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-q2gtt.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-2ho08.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-bt4hv.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-1ghlr.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-t931c.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-2pgkc.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-7pehj.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-c4dqr.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\grids\is-fj2td.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-mfffe.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-kjumo.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-tcbei.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
  • from %ProgramFiles(x86)%\viewfd\is-1cv52.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc
Network activity
Connects to
  • 'so###como.gq':80
TCP
HTTP GET requests
  • http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######
HTTP POST requests
  • http://so###como.gq/new/net_api
UDP
  • DNS ASK so###como.gq
Miscellaneous
Searches for the following windows
  • ClassName: '' WindowName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}'
Creates and executes the following
  • '%TEMP%\is-of8c7.tmp\is-00bgf.tmp' /SL4 $B0236 "<Full path to file>" 7066499 141312
  • '%ProgramFiles(x86)%\viewfd\viewfd.exe'
  • '%ProgramFiles(x86)%\viewfd\viewfd.exe' d97f27d3ce7d9a3e164159e1924faccd
Executes the following
  • '%WINDIR%\syswow64\schtasks.exe' /Query
  • '%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android