マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Trojan.Zadved.1704

Added to the Dr.Web virus database: 2022-06-14

Virus description added:

Technical Information

Modifies file system
Creates the following files
  • %TEMP%\is-376a1.tmp\is-ole03.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-83ib1.tmp
  • %ProgramFiles(x86)%\viewfd\lsd\is-i0iu2.tmp
  • %ProgramFiles(x86)%\viewfd\lsd\is-ojn1e.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\is-c9p7k.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-35ggq.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-m5ai2.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-59goh.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-a0bq3.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-g5785.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-80abv.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-m8tdl.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-dv0a0.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-j162n.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-3dh9j.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-m5p44.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-43n24.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ui6mb.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-6suij.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ptek5.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-oi216.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-j9i8g.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-8o3rs.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-59tcs.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-gmp90.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-5lck2.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-8blhn.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-aei02.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-u5de1.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-6g0j3.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-a5q8j.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-or41c.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-q4bvg.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-lmf1c.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-3nf33.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-c0qsm.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-prl5g.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-btb4r.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-ch50v.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-5vk9a.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-b41d7.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\transition\is-18f3v.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-1ho60.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-jo41f.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-6900v.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-jgndo.tmp
  • %ProgramFiles(x86)%\viewfd\ini\is-nfdpu.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-4rmf3.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\textures\is-9hd6o.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-kfo61.tmp
  • %ProgramFiles(x86)%\viewfd\viewfd.exe
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-0aqpv.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-t7563.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-pnvd6.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-83kjs.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-nv15k.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-65kfg.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-1k3n6.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-pu1ct.tmp
  • %ProgramFiles(x86)%\viewfd\wallpaper\is-jel5p.tmp
  • %ProgramFiles(x86)%\viewfd\is-2gsvb.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-6jm9e.tmp
  • %ProgramFiles(x86)%\viewfd\is-hd4hf.tmp
  • %ProgramFiles(x86)%\viewfd\is-786sj.tmp
  • %ProgramFiles(x86)%\viewfd\is-n0ugd.tmp
  • %ProgramFiles(x86)%\viewfd\is-7dp1o.tmp
  • %ProgramFiles(x86)%\viewfd\is-nprvn.tmp
  • %ProgramFiles(x86)%\viewfd\is-r19pq.tmp
  • %ProgramFiles(x86)%\viewfd\is-99ihe.tmp
  • %ProgramFiles(x86)%\viewfd\is-jvohq.tmp
  • %ProgramFiles(x86)%\viewfd\is-31270.tmp
  • %ProgramFiles(x86)%\viewfd\unins000.dat
  • %ProgramFiles(x86)%\viewfd\url\soft\is-qutje.tmp
  • %ProgramFiles(x86)%\viewfd\url\soft\is-besgb.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-mbihm.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-3iisd.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-s3vu6.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-rh82r.tmp
  • %ProgramFiles(x86)%\viewfd\programs\is-mlrrb.tmp
  • %ProgramFiles(x86)%\viewfd\radio\is-80oj7.tmp
  • %ProgramFiles(x86)%\viewfd\radio\is-pvhsn.tmp
  • %ProgramFiles(x86)%\viewfd\reports\is-rt87i.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-l7n61.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-dq67k.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-buets.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-2hlkc.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-0a2pa.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-sou1r.tmp
  • %ProgramFiles(x86)%\viewfd\search\is-9m794.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-4pvq1.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-b3hob.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-4o2h4.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-jvhj8.tmp
  • %ProgramFiles(x86)%\viewfd\url\is-gnct8.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-midbe.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-qgevl.tmp
  • %ProgramFiles(x86)%\viewfd\url\help\is-ges6v.tmp
  • %ProgramFiles(x86)%\viewfd\url\search\is-kpvmq.tmp
  • %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-srqjj.tmp
  • %ProgramFiles(x86)%\viewfd\soft\is-fqg0q.tmp
  • %ProgramFiles(x86)%\viewfd\is-49l79.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\selection\is-999m7.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\saturation\is-ft45u.tmp
  • %ProgramFiles(x86)%\viewfd\forms\is-a5fbk.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-ho34k.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-t2jjo.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-kkhqn.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-04c5q.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-li86h.tmp
  • %ProgramFiles(x86)%\viewfd\formulas\is-22lod.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-r28p1.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6is0d.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-ul17p.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-5f8qe.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ds1o6.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-r10f4.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6b531.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-etrcp.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-j9est.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-vhc9n.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-92in2.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-atrs0.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-uauvv.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-geff4.tmp
  • %ProgramFiles(x86)%\viewfd\data\is-6b1cg.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-8sp5s.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-03n23.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-cpchj.tmp
  • %TEMP%\is-clssn.tmp\_isetup\_setup64.tmp
  • %TEMP%\is-clssn.tmp\_isetup\_shfoldr.dll
  • %TEMP%\is-clssn.tmp\_isetup\_iscrypt.dll
  • %ProgramFiles(x86)%\viewfd\is-68vg1.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-q6sqr.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-07947.tmp
  • %ProgramFiles(x86)%\viewfd\7-zip\is-aqeja.tmp
  • %ProgramFiles(x86)%\viewfd\backup\is-aoq00.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-6ib5m.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6n1bv.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-g9g6r.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-0921a.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-gcdro.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-7fp6o.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-235lt.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-qher1.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-dsqis.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-cfj18.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-3e9te.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-18jfj.tmp
  • %ProgramFiles(x86)%\viewfd\colourschemes\is-tsv4n.tmp
  • %TEMP%\is-clssn.tmp\_isetup\_regdll.tmp
  • %ProgramFiles(x86)%\viewfd\browser\is-op5ld.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-1gu6e.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-op7sn.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-co3e3.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-h9cu5.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-l05r1.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-g334j.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-g81ij.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-qmtft.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ef3mp.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-19fud.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\metallic\is-m1mun.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\new\is-n2j3g.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-48j1a.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-ap5bm.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-v9nvb.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-d33dl.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1sf1g.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-rkd1t.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-aeum8.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-cs8n5.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-jcs3u.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-5mbd3.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-57795.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-6ie5n.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-isht8.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-lq0kl.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-pradg.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-rm84t.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\brightness\is-sp90g.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-s9vh7.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-pim81.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-7jead.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-ipf7d.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-hs6en.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-tv02i.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\cb\is-me3i2.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-gjdso.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\anyset\is-dbga7.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-omt2o.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-sk64g.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-10gra.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-53ho9.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-3u8gc.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-vctd3.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-qfthr.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-rssjr.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour2\is-h5nh5.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-9l43t.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\grids\is-kq931.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-fcelk.tmp
  • %ProgramFiles(x86)%\viewfd\graphic\contour\is-k0ooc.tmp
  • %TEMP%\lohkos.cab
Moves the following files
  • from %ProgramFiles(x86)%\viewfd\is-68vg1.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
  • from %ProgramFiles(x86)%\viewfd\ini\is-83ib1.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
  • from %ProgramFiles(x86)%\viewfd\lsd\is-i0iu2.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
  • from %ProgramFiles(x86)%\viewfd\lsd\is-ojn1e.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\is-c9p7k.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-35ggq.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-m5ai2.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-59goh.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-a0bq3.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
  • from %ProgramFiles(x86)%\viewfd\ini\is-j9i8g.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-8o3rs.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-g5785.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-dv0a0.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-j162n.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-3dh9j.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-m5p44.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-43n24.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ui6mb.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-6suij.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ptek5.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-m8tdl.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-prl5g.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
  • from %ProgramFiles(x86)%\viewfd\ini\is-59tcs.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-gmp90.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-5lck2.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-aei02.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-u5de1.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-6g0j3.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-a5q8j.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-or41c.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-q4bvg.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-lmf1c.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-3nf33.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-btb4r.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-8blhn.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-80abv.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ch50v.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-5vk9a.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-b41d7.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\transition\is-18f3v.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-1ho60.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-jo41f.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\ini\is-6900v.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-jgndo.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
  • from %ProgramFiles(x86)%\viewfd\ini\is-nfdpu.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-9hd6o.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-oi216.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-6jm9e.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
  • from %ProgramFiles(x86)%\viewfd\is-jvohq.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-0a2pa.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-qutje.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-besgb.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
  • from %ProgramFiles(x86)%\viewfd\url\soft\is-t7563.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-pnvd6.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-83kjs.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-nv15k.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-65kfg.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-1k3n6.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
  • from %ProgramFiles(x86)%\viewfd\url\search\is-3iisd.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
  • from %ProgramFiles(x86)%\viewfd\url\search\is-mbihm.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-pu1ct.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
  • from %ProgramFiles(x86)%\viewfd\is-hd4hf.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
  • from %ProgramFiles(x86)%\viewfd\is-49l79.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
  • from %ProgramFiles(x86)%\viewfd\is-786sj.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
  • from %ProgramFiles(x86)%\viewfd\is-n0ugd.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
  • from %ProgramFiles(x86)%\viewfd\is-7dp1o.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
  • from %ProgramFiles(x86)%\viewfd\is-nprvn.tmp to %ProgramFiles(x86)%\viewfd\readme.html
  • from %ProgramFiles(x86)%\viewfd\is-r19pq.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
  • from %ProgramFiles(x86)%\viewfd\is-99ihe.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
  • from %ProgramFiles(x86)%\viewfd\wallpaper\is-jel5p.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
  • from %ProgramFiles(x86)%\viewfd\is-2gsvb.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
  • from %ProgramFiles(x86)%\viewfd\url\search\is-s3vu6.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
  • from %ProgramFiles(x86)%\viewfd\url\search\is-kpvmq.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-ges6v.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-srqjj.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-rh82r.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
  • from %ProgramFiles(x86)%\viewfd\programs\is-mlrrb.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
  • from %ProgramFiles(x86)%\viewfd\radio\is-80oj7.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
  • from %ProgramFiles(x86)%\viewfd\radio\is-pvhsn.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
  • from %ProgramFiles(x86)%\viewfd\reports\is-rt87i.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
  • from %ProgramFiles(x86)%\viewfd\search\is-l7n61.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-dq67k.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-buets.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-0aqpv.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
  • from %ProgramFiles(x86)%\viewfd\search\is-2hlkc.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
  • from %ProgramFiles(x86)%\viewfd\search\is-kfo61.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
  • from %ProgramFiles(x86)%\viewfd\soft\is-fqg0q.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-4pvq1.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-b3hob.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
  • from %ProgramFiles(x86)%\viewfd\url\is-4o2h4.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
  • from %ProgramFiles(x86)%\viewfd\url\is-jvhj8.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
  • from %ProgramFiles(x86)%\viewfd\url\is-gnct8.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-midbe.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
  • from %ProgramFiles(x86)%\viewfd\url\help\is-qgevl.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
  • from %ProgramFiles(x86)%\viewfd\search\is-9m794.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\textures\is-4rmf3.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
  • from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-c0qsm.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
  • from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-sou1r.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-fcelk.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\formulas\is-04c5q.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-li86h.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-22lod.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-r28p1.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6is0d.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-5f8qe.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-g9g6r.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-ds1o6.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
  • from %ProgramFiles(x86)%\viewfd\formulas\is-t2jjo.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
  • from %ProgramFiles(x86)%\viewfd\formulas\is-kkhqn.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-r10f4.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-j9est.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-vhc9n.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-92in2.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-atrs0.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-uauvv.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6n1bv.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-48j1a.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-dbga7.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-6b531.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-etrcp.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
  • from %ProgramFiles(x86)%\viewfd\formulas\is-ho34k.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
  • from %ProgramFiles(x86)%\viewfd\forms\is-a5fbk.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
  • from %ProgramFiles(x86)%\viewfd\data\is-6b1cg.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-07947.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-aqeja.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
  • from %ProgramFiles(x86)%\viewfd\backup\is-aoq00.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
  • from %ProgramFiles(x86)%\viewfd\browser\is-6ib5m.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
  • from %ProgramFiles(x86)%\viewfd\browser\is-0921a.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
  • from %ProgramFiles(x86)%\viewfd\browser\is-ul17p.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
  • from %ProgramFiles(x86)%\viewfd\browser\is-op5ld.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-gcdro.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-7fp6o.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
  • from %ProgramFiles(x86)%\viewfd\7-zip\is-q6sqr.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-235lt.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-dsqis.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-cfj18.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-3e9te.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-18jfj.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-tsv4n.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-cpchj.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-03n23.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-8sp5s.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-geff4.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
  • from %ProgramFiles(x86)%\viewfd\colourschemes\is-qher1.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-co3e3.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-sp90g.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-omt2o.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-s9vh7.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-g334j.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-g81ij.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-qmtft.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ef3mp.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-19fud.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-m1mun.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\new\is-n2j3g.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-ap5bm.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-h9cu5.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-l05r1.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-ft45u.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1sf1g.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-rkd1t.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-aeum8.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-cs8n5.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-jcs3u.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-5mbd3.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-57795.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-op7sn.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-v9nvb.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-d33dl.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-isht8.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-6ie5n.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-lq0kl.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-7jead.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-ipf7d.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-hs6en.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-tv02i.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-me3i2.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-gjdso.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-sk64g.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-1gu6e.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-k0ooc.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\cb\is-pim81.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-10gra.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-3u8gc.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-vctd3.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-qfthr.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-rssjr.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-h5nh5.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-9l43t.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\grids\is-kq931.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-rm84t.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-pradg.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
  • from %ProgramFiles(x86)%\viewfd\graphic\contour\is-53ho9.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
  • from %ProgramFiles(x86)%\viewfd\graphic\selection\is-999m7.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
  • from %ProgramFiles(x86)%\viewfd\is-31270.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc
Network activity
Connects to
  • 'so###como.gq':80
TCP
HTTP GET requests
  • http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######
HTTP POST requests
  • http://so###como.gq/new/net_api
UDP
  • DNS ASK so###como.gq
Miscellaneous
Searches for the following windows
  • ClassName: '' WindowName: '{611AE93F-EC60-4AD7-A3C8-3D5D0C3E02E4}'
Creates and executes the following
  • '%TEMP%\is-376a1.tmp\is-ole03.tmp' /SL4 $170164 "<Full path to file>" 6558010 141312
  • '%ProgramFiles(x86)%\viewfd\viewfd.exe'
  • '%ProgramFiles(x86)%\viewfd\viewfd.exe' 95d8f8dffbd4a7e8df0651b97ec02a16
Executes the following
  • '%WINDIR%\syswow64\schtasks.exe' /Query
  • '%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android