Meine Bibliothek
Meine Bibliothek

+ Zur Bibliothek hinzufügen

Support

Ihre Anfragen

Rufen Sie uns an

+7 (495) 789-45-86

Profil

Trojan.MulDrop8.35065

Added to the Dr.Web virus database: 2018-08-16

Virus description added:

Technical Information

To ensure autorun and distribution:
Creates the following services:
  • [<HKLM>\SYSTEM\ControlSet001\Services\Service KMSELDI] 'Start' = '00000002'
  • [<HKLM>\SYSTEM\ControlSet001\Services\Service KMSELDI] 'ImagePath' = '%ProgramFiles%\KMSpico\Service_KMS.exe'
Malicious functions:
To bypass firewall, removes or modifies the following registry keys:
  • [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%ProgramFiles%\KMSpico\KMSELDI.exe' = '%ProgramFiles%\KMSpico\KMSELDI....
  • [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%ProgramFiles%\KMSpico\AutoPico.exe' = '%ProgramFiles%\KMSpico\AutoPic...
Modifies file system:
Creates the following files:
  • %TEMP%\aut1.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-A9D2J.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-SK25P.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-FELKF.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\is-3UTH8.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW10\Professional\is-CLUA8.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW10\Professional\is-12H6A.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW10\EnterpriseS\is-Q22KC.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW10\EnterpriseS\is-I0788.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW10\EnterpriseS\is-4OJJF.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-068HR.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW10\EnterpriseS\is-5NITI.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW10\Enterprise\is-N44I2.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW10\Education\is-M4HGE.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW10\Education\is-FM08O.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW10\Core\is-R65AS.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW10\Core\is-SGQTU.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW10\is-CRAND.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Word\is-HP1P5.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Word\is-D74TU.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Word\is-MSGF5.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW10\Enterprise\is-BNS2E.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-TOIQE.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-32IIM.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-2HNE5.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-M196I.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-MEMEA.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-OGMHA.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-EP17V.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-8G2KO.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-7GKC5.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-DQ1FT.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-3SNK9.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-3CIR1.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-OBJI1.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-5G1PL.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-MUNP8.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-GVISK.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-30TQ4.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-9T4JS.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-J1SB3.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-GG6GP.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-U3V2P.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-MBANQ.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-E1N22.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-4PM2P.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\VisioStd\is-SQI2L.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Word\is-LOGG1.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\VisioStd\is-AGPK0.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\VisioPro\is-HM5SU.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Outlook\is-KKOLK.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\OneNote\is-1E9RK.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\OneNote\is-FHP6M.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\OneNote\is-75LC5.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Mondo\is-0BO13.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Mondo\is-C1OTN.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Mondo\is-EG6U3.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Excel\is-NHDF1.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Excel\is-7IKA9.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Outlook\is-M5KDP.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Excel\is-NK38V.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Access\is-4KEOM.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Access\is-7QLUD.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\is-QKLPJ.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\is-T871M.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\is-TDHFB.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\is-FRCUN.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\is-8POFR.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\is-NLK0B.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\is-R85T9.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Access\is-PAB7B.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Outlook\is-HAVLR.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\PowerPoint\is-UI2AE.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\PowerPoint\is-M7BEJ.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\VisioPro\is-DACGD.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\VisioPro\is-4BDIH.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Standard\is-EFSP1.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Standard\is-T3GII.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Standard\is-4T32U.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\SkypeforBusiness\is-2RH22.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\SkypeforBusiness\is-UA3LH.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\SkypeforBusiness\is-D3KF9.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Publisher\is-IFL0F.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Publisher\is-FBF3O.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Publisher\is-3125L.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\ProPlus\is-06U69.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\ProPlus\is-NR9J9.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\ProPlus\is-VDKCT.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectStd\is-KSCDM.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectStd\is-CBSUT.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectStd\is-2829J.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectPro\is-NPP6P.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectPro\is-HN5LS.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectPro\is-OGSKB.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\PowerPoint\is-5GCLM.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\VisioStd\is-756FT.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Word\is-FAR0H.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-JSF42.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\is-A2E44.tmp
  • %ProgramFiles%\KMSpico\scripts\is-P4LIL.tmp
  • %ProgramFiles%\KMSpico\scripts\is-2EVV8.tmp
  • %ProgramFiles%\KMSpico\scripts\is-KN4NK.tmp
  • %ProgramFiles%\KMSpico\scripts\is-BN8EU.tmp
  • %ProgramFiles%\KMSpico\logs\is-K8IG4.tmp
  • %ProgramFiles%\KMSpico\icons\is-UHQL8.tmp
  • %ProgramFiles%\KMSpico\icons\is-HDK0G.tmp
  • %ProgramFiles%\KMSpico\icons\is-MAQUD.tmp
  • %ProgramFiles%\KMSpico\icons\is-PF428.tmp
  • %ProgramFiles%\KMSpico\scripts\is-FBVHD.tmp
  • %ProgramFiles%\KMSpico\scripts\is-IUCLT.tmp
  • %ProgramFiles%\KMSpico\driver\is-4G7U3.tmp
  • %ProgramFiles%\KMSpico\driver\is-4FH96.tmp
  • %ProgramFiles%\KMSpico\driver\is-9G46L.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\ServerStandard\is-DRP56.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\ServerStandard\is-DSQ25.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\ServerDatacenter\is-HR8K6.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\ServerDatacenter\is-0JCQ8.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\ProfessionalWMC\is-H7MHN.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\ProfessionalWMC\is-KDKQR.tmp
  • %ProgramFiles%\KMSpico\driver\is-AJ0N2.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-H4EP2.tmp
  • %ProgramFiles%\KMSpico\scripts\is-542J8.tmp
  • %ProgramFiles%\KMSpico\unins000.dat
  • %ALLUSERSPROFILE%\Start Menu\Programs\KMSpico\Uninstall KMSpico.lnk
  • %ALLUSERSPROFILE%\Start Menu\Programs\KMSpico\AutoPico.lnk
  • %ALLUSERSPROFILE%\Start Menu\Programs\KMSpico\Log KMSpico.lnk
  • %ALLUSERSPROFILE%\Start Menu\Programs\KMSpico\KMSpico.lnk
  • %ProgramFiles%\KMSpico\sounds\is-3RKQL.tmp
  • %ProgramFiles%\KMSpico\sounds\is-0O1EL.tmp
  • %ProgramFiles%\KMSpico\sounds\is-5PPQT.tmp
  • %ProgramFiles%\KMSpico\sounds\is-PR95D.tmp
  • %ProgramFiles%\KMSpico\sounds\is-AU7JB.tmp
  • %ProgramFiles%\KMSpico\sounds\is-SK26J.tmp
  • %ProgramFiles%\KMSpico\sounds\is-AGUG9.tmp
  • %ProgramFiles%\KMSpico\sounds\is-RUL7S.tmp
  • %ProgramFiles%\KMSpico\sounds\is-TP398.tmp
  • %ProgramFiles%\KMSpico\sounds\is-7EN15.tmp
  • %ProgramFiles%\KMSpico\sounds\is-U4L30.tmp
  • %ProgramFiles%\KMSpico\sounds\is-TBJ6K.tmp
  • %ProgramFiles%\KMSpico\scripts\is-9TM1J.tmp
  • %ProgramFiles%\KMSpico\scripts\is-AC7IK.tmp
  • %ProgramFiles%\KMSpico\scripts\is-GSAA9.tmp
  • %ProgramFiles%\KMSpico\scripts\is-DF3VS.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\Professional\is-3S96H.tmp
  • %ProgramFiles%\KMSpico\driver\is-3MBFS.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-UG028.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-P7TCN.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\Enterprise\is-52GSE.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\is-SENQ3.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-KA4N6.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-JHUDI.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-IQCF2.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-UOKIK.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-MN50P.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-8IMF9.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-73KPK.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-GC164.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\Core\is-4DR41.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-ENJD3.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\is-GKL6N.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\is-KE7QD.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\is-H26GB.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\is-EMV8C.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-I1F9E.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-B4LLM.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-STI4Q.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-SNES9.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-MKU17.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\is-UO7O0.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\Core\is-8OH8T.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\EmbeddedIndustry\is-C5SNE.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\Enterprise\is-VL6QM.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-R8ATK.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\EmbeddedIndustry\is-30EQG.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\CoreConnectedSingleLanguage\is-K20PC.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\CoreConnectedSingleLanguage\is-2QTV6.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\Core\is-RQHI6.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\Core\is-HUG7L.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\is-RSOR0.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\ProfessionalWMC\is-RC4VA.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\ProfessionalWMC\is-8MKM1.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\ProfessionalN\is-3RAPQ.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\ProfessionalN\is-40B0Q.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\Professional\is-M09T2.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\Professional\is-UGBM6.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\EnterpriseN\is-2HAR8.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\EnterpriseN\is-3C504.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\Enterprise\is-LEDSO.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\Enterprise\is-PSEPT.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\CoreSingleLanguage\is-I06Q6.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\CoreSingleLanguage\is-69G23.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\CoreN\is-CRH6H.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\CoreN\is-K82SF.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\Professional\is-5HIC4.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Word\is-U6UAI.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\VisioStd\is-CN6GN.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\VisioStd\is-N2TD0.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-5H8B7.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-6AUN8.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-B597T.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-ARVE3.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-TSTAP.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-FB2UV.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-E3PER.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-OQ4F9.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-F57GU.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-3U18D.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-EQUN0.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-NCJ74.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-KV87C.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-77JAM.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-40P5J.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-LUT9R.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-230UU.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-HO376.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-K0CJT.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-MM6SM.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-TPHFA.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-2FEQG.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-MA3IK.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-M3480.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-J0V2N.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-P317G.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-234HA.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-3799H.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-1CRCD.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-HMRMR.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-JJ8S6.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-RGVNG.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-K75F0.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-25BKO.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-7E4JI.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-AF6B6.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-SVL2O.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-9K7CG.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-HCDPN.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-7LPHQ.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-SVR3S.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-6N3TB.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-FS0KS.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-DOTCK.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-UCRFM.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-DHLKN.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-PHEQA.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-9GAF5.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-14FU3.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-IVDBR.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-PUEPK.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-OAQLK.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-BNED3.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-A3LG7.tmp
  • %ProgramFiles%\KMSpico\is-5IPPG.tmp
  • %ProgramFiles%\KMSpico\is-30TF0.tmp
  • %ProgramFiles%\KMSpico\is-6E295.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-HULDL.tmp
  • <SYSTEM32>\is-68BDL.tmp
  • %ProgramFiles%\KMSpico\is-S1BQ1.tmp
  • %ProgramFiles%\KMSpico\is-9SJ5I.tmp
  • %ProgramFiles%\KMSpico\is-1QLEA.tmp
  • %TEMP%\is-THA74.tmp\_isetup\_shfoldr.dll
  • %TEMP%\Setup Log 2018-08-16 #001.txt
  • %TEMP%\is-NCL5G.tmp\setup.tmp
  • %WINDIR%\Migration\WTR\installfiles\install\setup.exe
  • %TEMP%\aut2.tmp
  • %WINDIR%\Migration\WTR\installfiles\install\A3.gif
  • %ProgramFiles%\KMSpico\is-G931J.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-91K0M.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-7U4Q6.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-HJNSU.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-C0FKU.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-PB3OO.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-JBVOO.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-VLROK.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-0P6PR.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-1GQDH.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-KLUUA.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-05B5H.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-HBR2K.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-4GFVS.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-AGAJC.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-LFEV4.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-8BLNH.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-S6UB2.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-1L6A7.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-SBJ2N.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-9CH4R.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-I6LUB.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-38JP3.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-6F31F.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-4DQQQ.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-UDLKF.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-P7AFG.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-FHNJA.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-GNFTL.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Outlook\is-93IVC.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\InfoPath\is-CGD36.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Outlook\is-2KN89.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\OneNote\is-2BP14.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\OneNote\is-IJIRB.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\OneNote\is-R3VB7.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Lync\is-QG48R.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Lync\is-AEJG7.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Lync\is-F3L7O.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\InfoPath\is-1MV7T.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\PowerPoint\is-D96F7.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Outlook\is-EJSJ2.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\PowerPoint\is-7BFMN.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Excel\is-VBF4M.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Excel\is-7IFDI.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Access\is-KIR5I.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Access\is-ULB21.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Access\is-1NS4P.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\is-C0P25.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\is-RE129.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\is-RB6KC.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Excel\is-G5Q4I.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\PowerPoint\is-VIK93.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\VisioStd\is-R622A.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\is-EQTVE.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\is-AKTGN.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\VisioPro\is-7IURK.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\VisioPro\is-709RU.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\VisioPro\is-K3N1E.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\VisioPro\is-AHIJ0.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Standard\is-3HL2O.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Standard\is-Q8KL5.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Standard\is-O2QF3.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Publisher\is-R7AIB.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Publisher\is-OG137.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Publisher\is-DIBML.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\ProPlus\is-9NJR6.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\ProPlus\is-DCNKI.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\ProPlus\is-58TK9.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\ProPlus\is-ER5UL.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectStd\is-VKIV0.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectStd\is-25EHT.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectStd\is-DIQ15.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectPro\is-BBUFE.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectPro\is-FTL7O.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectPro\is-HHD6L.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\InfoPath\is-2GN1A.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\is-TPPVA.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\is-JB2JR.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-1C5DM.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-GLRRQ.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-0OJMD.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-AI9T6.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-UGRVJ.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-7FDGU.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-577VE.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-SS3EQ.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-RB43N.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-MRPVV.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-1LJ1F.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-B3EMU.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-DPUBA.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-F2A20.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-8QJTL.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-08U4E.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-HFSCE.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-UT91A.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-8FB9A.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-EB2CV.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-8UGBI.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-JNSC4.tmp
  • %ProgramFiles%\KMSpico\TokensBackup\Keys.txt
  • %ProgramFiles%\KMSpico\scripts\is-P1HLK.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-CBFAN.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-RF1RJ.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-F11EM.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-GHGVU.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-37M76.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-VI2U3.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-M9DSN.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-DHG5G.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-COO04.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-DJBBM.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-UQIF8.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-5PF3D.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-A91K9.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-0I2EN.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-5QNFL.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-H5K0T.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-QCVI0.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-N8FGF.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-0V367.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-6PHP7.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-8CQBF.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-13VE5.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-KVSV5.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-L18MU.tmp
  • %ProgramFiles%\KMSpico\logs\KMSELDI.log
Deletes the following files:
  • %TEMP%\aut1.tmp
  • %TEMP%\aut2.tmp
  • %ProgramFiles%\KMSpico\logs\AutoPico.log
Moves the following files:
  • from %ProgramFiles%\KMSpico\is-1QLEA.tmp to %ProgramFiles%\KMSpico\unins000.exe
  • from %ProgramFiles%\KMSpico\cert\kmscertW10\Professional\is-CLUA8.tmp to %ProgramFiles%\KMSpico\cert\kmscertW10\Professional\Professional-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW10\Professional\is-12H6A.tmp to %ProgramFiles%\KMSpico\cert\kmscertW10\Professional\Professional-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW10\EnterpriseS\is-Q22KC.tmp to %ProgramFiles%\KMSpico\cert\kmscertW10\EnterpriseS\EnterpriseS-Volume-GVLK-2-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW10\EnterpriseS\is-I0788.tmp to %ProgramFiles%\KMSpico\cert\kmscertW10\EnterpriseS\EnterpriseS-Volume-GVLK-2-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW10\EnterpriseS\is-4OJJF.tmp to %ProgramFiles%\KMSpico\cert\kmscertW10\EnterpriseS\EnterpriseS-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW10\EnterpriseS\is-5NITI.tmp to %ProgramFiles%\KMSpico\cert\kmscertW10\EnterpriseS\EnterpriseS-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW10\Enterprise\is-BNS2E.tmp to %ProgramFiles%\KMSpico\cert\kmscertW10\Enterprise\Enterprise-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW10\Enterprise\is-N44I2.tmp to %ProgramFiles%\KMSpico\cert\kmscertW10\Enterprise\Enterprise-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW10\Education\is-M4HGE.tmp to %ProgramFiles%\KMSpico\cert\kmscertW10\Education\Education-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW10\Core\is-R65AS.tmp to %ProgramFiles%\KMSpico\cert\kmscertW10\Core\Core-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-FELKF.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW10\Core\is-SGQTU.tmp to %ProgramFiles%\KMSpico\cert\kmscertW10\Core\Core-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW10\is-CRAND.tmp to %ProgramFiles%\KMSpico\cert\kmscertW10\pkeyconfig.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Word\is-HP1P5.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Word\WordVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Word\is-D74TU.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Word\WordVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Word\is-MSGF5.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Word\WordVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\VisioStd\is-SQI2L.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\VisioStd\VisioStdVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\VisioStd\is-AGPK0.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\VisioStd\VisioStdVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\VisioStd\is-756FT.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\VisioStd\VisioStdVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW10\Education\is-FM08O.tmp to %ProgramFiles%\KMSpico\cert\kmscertW10\Education\Education-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-EP17V.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-SK25P.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-ul-phn.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-7GKC5.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS1-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-DQ1FT.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS1-pl.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-3SNK9.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS-ul-phn.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-3CIR1.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-OBJI1.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS-pl.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-5G1PL.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-BYPASS-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-MUNP8.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-BYPASS-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-GVISK.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-BYPASS-RAC-public.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-30TQ4.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-BYPASS-RAC-private.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\VisioPro\is-HM5SU.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\VisioPro\VisioProVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\is-3UTH8.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\pkeyconfig.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-GG6GP.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-KMS1-ul-phn.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-U3V2P.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-KMS1-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-MBANQ.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-KMS1-pl.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-E1N22.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-KMS-ul-phn.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-4PM2P.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-KMS-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-2HNE5.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-KMS-pl.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-32IIM.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-BYPASS-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-TOIQE.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-BYPASS-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-068HR.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-BYPASS-RAC-public.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-J1SB3.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-A9D2J.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-BYPASS-RAC-private.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-9T4JS.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-ul-phn.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-8G2KO.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS1-ul-phn.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Standard\is-EFSP1.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Standard\StandardVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Outlook\is-KKOLK.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Outlook\OutlookVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\OneNote\is-75LC5.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\OneNote\OneNoteVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Mondo\is-0BO13.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Mondo\MondoVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Mondo\is-C1OTN.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Mondo\MondoVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Mondo\is-EG6U3.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Mondo\MondoVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Excel\is-NHDF1.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Excel\ExcelVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Excel\is-7IKA9.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Excel\ExcelVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Excel\is-NK38V.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Excel\ExcelVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Access\is-PAB7B.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Access\AccessVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Access\is-4KEOM.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Access\AccessVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Access\is-7QLUD.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Access\AccessVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\is-QKLPJ.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\pkeyconfig-office.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\is-T871M.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\client-issuance-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\is-TDHFB.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\client-issuance-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\is-FRCUN.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\client-issuance-stil.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\is-8POFR.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\client-issuance-root.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\is-NLK0B.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\client-issuance-root-bridge-test.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\is-R85T9.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\client-issuance-bridge-office.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Word\is-FAR0H.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Word\LicenseSetData._D9F5B1C6_5386_495A_88F9_9AD6B41AC9B3.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Outlook\is-M5KDP.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Outlook\OutlookVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Outlook\is-HAVLR.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Outlook\OutlookVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Standard\is-T3GII.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Standard\StandardVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\ProPlus\is-VDKCT.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\ProPlus\ProPlusVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\ProPlus\is-NR9J9.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\ProPlus\ProPlusVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Standard\is-4T32U.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Standard\StandardVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\SkypeforBusiness\is-2RH22.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\SkypeforBusiness\SkypeforBusinessVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\SkypeforBusiness\is-UA3LH.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\SkypeforBusiness\SkypeforBusinessVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\SkypeforBusiness\is-D3KF9.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\SkypeforBusiness\SkypeforBusinessVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Publisher\is-IFL0F.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Publisher\PublisherVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Publisher\is-FBF3O.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Publisher\PublisherVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Publisher\is-3125L.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Publisher\PublisherVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\ProPlus\is-06U69.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\ProPlus\ProPlusVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\VisioPro\is-DACGD.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\VisioPro\VisioProVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\VisioPro\is-4BDIH.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\VisioPro\VisioProVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\OneNote\is-FHP6M.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\OneNote\OneNoteVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectStd\is-CBSUT.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectStd\ProjectStdVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectStd\is-2829J.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectStd\ProjectStdVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectPro\is-NPP6P.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectPro\ProjectProVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectPro\is-HN5LS.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectPro\ProjectProVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectPro\is-OGSKB.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectPro\ProjectProVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\PowerPoint\is-5GCLM.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\PowerPoint\PowerPointVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\PowerPoint\is-M7BEJ.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\PowerPoint\PowerPointVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\PowerPoint\is-UI2AE.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\PowerPoint\PowerPointVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectStd\is-KSCDM.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectStd\ProjectStdVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-5PF3D.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-OGMHA.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-ul-phn.xrm-ms
  • from %ProgramFiles%\KMSpico\icons\is-HDK0G.tmp to %ProgramFiles%\KMSpico\icons\Question.png
  • from %ProgramFiles%\KMSpico\icons\is-MAQUD.tmp to %ProgramFiles%\KMSpico\icons\Information.png
  • from %ProgramFiles%\KMSpico\icons\is-PF428.tmp to %ProgramFiles%\KMSpico\icons\Error.png
  • from %ProgramFiles%\KMSpico\driver\is-AJ0N2.tmp to %ProgramFiles%\KMSpico\driver\UnInstallDriver.cmd
  • from %ProgramFiles%\KMSpico\driver\is-3MBFS.tmp to %ProgramFiles%\KMSpico\driver\tap-windows-9.21.0.exe
  • from %ProgramFiles%\KMSpico\driver\is-4G7U3.tmp to %ProgramFiles%\KMSpico\driver\OpenVPN.cer
  • from %ProgramFiles%\KMSpico\driver\is-4FH96.tmp to %ProgramFiles%\KMSpico\driver\certELDI.pfx
  • from %ProgramFiles%\KMSpico\driver\is-9G46L.tmp to %ProgramFiles%\KMSpico\driver\Cert.cmd
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\ServerStandard\is-DRP56.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\ServerStandard\ServerStandard-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\ServerStandard\is-DSQ25.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\ServerStandard\ServerStandard-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\ServerDatacenter\is-0JCQ8.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\ServerDatacenter\ServerDatacenter-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\scripts\is-BN8EU.tmp to %ProgramFiles%\KMSpico\scripts\AddExceptionsWD.reg
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\ProfessionalWMC\is-H7MHN.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\ProfessionalWMC\ProfessionalWMC-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\ProfessionalWMC\is-KDKQR.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\ProfessionalWMC\ProfessionalWMC-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\Professional\is-3S96H.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\Professional\Professional-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\Professional\is-5HIC4.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\Professional\Professional-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\Enterprise\is-VL6QM.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\Enterprise\Enterprise-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\Enterprise\is-52GSE.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\Enterprise\Enterprise-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\EmbeddedIndustry\is-C5SNE.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\EmbeddedIndustry\EmbeddedIndustry-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\icons\is-UHQL8.tmp to %ProgramFiles%\KMSpico\icons\Warning.png
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\ServerDatacenter\is-HR8K6.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\ServerDatacenter\ServerDatacenter-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-MEMEA.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-BYPASS-RAC-private.xrm-ms
  • from %ProgramFiles%\KMSpico\scripts\is-KN4NK.tmp to %ProgramFiles%\KMSpico\scripts\AddExceptions_Defender.cmd
  • from %ProgramFiles%\KMSpico\sounds\is-PR95D.tmp to %ProgramFiles%\KMSpico\sounds\processing.mp3
  • from %ProgramFiles%\KMSpico\sounds\is-AU7JB.tmp to %ProgramFiles%\KMSpico\sounds\inputok.mp3
  • from %ProgramFiles%\KMSpico\sounds\is-SK26J.tmp to %ProgramFiles%\KMSpico\sounds\inputfailed.mp3
  • from %ProgramFiles%\KMSpico\sounds\is-AGUG9.tmp to %ProgramFiles%\KMSpico\sounds\incomingtransmission.mp3
  • from %ProgramFiles%\KMSpico\sounds\is-RUL7S.tmp to %ProgramFiles%\KMSpico\sounds\enterauthorizationcode.mp3
  • from %ProgramFiles%\KMSpico\sounds\is-TP398.tmp to %ProgramFiles%\KMSpico\sounds\diagnostic.mp3
  • from %ProgramFiles%\KMSpico\sounds\is-7EN15.tmp to %ProgramFiles%\KMSpico\sounds\complete.mp3
  • from %ProgramFiles%\KMSpico\sounds\is-U4L30.tmp to %ProgramFiles%\KMSpico\sounds\begin.mp3
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\EmbeddedIndustry\is-30EQG.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\EmbeddedIndustry\EmbeddedIndustry-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\sounds\is-TBJ6K.tmp to %ProgramFiles%\KMSpico\sounds\affirmative.mp3
  • from %ProgramFiles%\KMSpico\logs\is-K8IG4.tmp to %ProgramFiles%\KMSpico\logs\AutoPico.log
  • from %ProgramFiles%\KMSpico\scripts\is-GSAA9.tmp to %ProgramFiles%\KMSpico\scripts\Restore_Watermark.cmd
  • from %ProgramFiles%\KMSpico\scripts\is-DF3VS.tmp to %ProgramFiles%\KMSpico\scripts\RemoveExceptionsWD.reg
  • from %ProgramFiles%\KMSpico\scripts\is-P1HLK.tmp to %ProgramFiles%\KMSpico\scripts\Log.cmd
  • from %ProgramFiles%\KMSpico\scripts\is-542J8.tmp to %ProgramFiles%\KMSpico\scripts\Install_Task.cmd
  • from %ProgramFiles%\KMSpico\scripts\is-FBVHD.tmp to %ProgramFiles%\KMSpico\scripts\Install_Service.cmd
  • from %ProgramFiles%\KMSpico\scripts\is-IUCLT.tmp to %ProgramFiles%\KMSpico\scripts\EnableSmartScreen.reg
  • from %ProgramFiles%\KMSpico\scripts\is-P4LIL.tmp to %ProgramFiles%\KMSpico\scripts\EnableSmartScreen.cmd
  • from %ProgramFiles%\KMSpico\scripts\is-2EVV8.tmp to %ProgramFiles%\KMSpico\scripts\DisableSmartScreen.reg
  • from %ProgramFiles%\KMSpico\scripts\is-9TM1J.tmp to %ProgramFiles%\KMSpico\scripts\UnInstall_Service.cmd
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\CoreConnectedSingleLanguage\is-K20PC.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\CoreConnectedSingleLanguage\CoreConnectedSingleLanguage-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\sounds\is-5PPQT.tmp to %ProgramFiles%\KMSpico\sounds\transfer.mp3
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\CoreConnectedSingleLanguage\is-2QTV6.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\CoreConnectedSingleLanguage\CoreConnectedSingleLanguage-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\Core\is-RQHI6.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\Core\Core-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-UOKIK.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\Security-SPP-Component-SKU-Professional-VL-BYPASS-RAC-public.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Word\is-LOGG1.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Word\LicenseSetData._D9F5B1C6_5386_495A_88F9_9AD6B41AC9B3.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-8IMF9.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\Security-SPP-Component-SKU-Professional-ul-phn.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-73KPK.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\Security-SPP-Component-SKU-Professional-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-GC164.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\pkeyconfig.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\is-SENQ3.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\Security-SPP-Component-SKU-Embedded-VLBA-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\is-A2E44.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\Security-SPP-Component-SKU-Embedded-VLBA-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\is-UO7O0.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\Security-SPP-Component-SKU-Embedded-ul-phn.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\is-KE7QD.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\Security-SPP-Component-SKU-Embedded-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-IQCF2.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\Security-SPP-Component-SKU-Professional-VL-BYPASS-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-JHUDI.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\Security-SPP-Component-SKU-Professional-VL-BYPASS-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\is-H26GB.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\Security-SPP-Component-SKU-Embedded-pl.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-B4LLM.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS1-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-STI4Q.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS1-pl.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-SNES9.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS-ul-phn.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-MKU17.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-UG028.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS-pl.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-P7TCN.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-BYPASS-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-JSF42.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-BYPASS-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-M196I.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-BYPASS-RAC-public.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\is-EMV8C.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\pkeyconfig-embedded.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-I1F9E.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS1-ul-phn.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\OneNote\is-1E9RK.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\OneNote\OneNoteVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-R8ATK.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\Security-SPP-Component-SKU-Professional-VLKMS1-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\Enterprise\is-LEDSO.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\Enterprise\Enterprise-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\EnterpriseN\is-3C504.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\EnterpriseN\EnterpriseN-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\is-RSOR0.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\pkeyconfig.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\ProfessionalWMC\is-RC4VA.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\ProfessionalWMC\ProfessionalWMC-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\ProfessionalWMC\is-8MKM1.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\ProfessionalWMC\ProfessionalWMC-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\ProfessionalN\is-3RAPQ.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\ProfessionalN\ProfessionalN-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\ProfessionalN\is-40B0Q.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\ProfessionalN\ProfessionalN-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\Professional\is-M09T2.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\Professional\Professional-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\Professional\is-UGBM6.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\Professional\Professional-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\EnterpriseN\is-2HAR8.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\EnterpriseN\EnterpriseN-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\Core\is-HUG7L.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\Core\Core-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-KA4N6.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\Security-SPP-Component-SKU-Professional-VLKMS1-pl.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-MN50P.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\Security-SPP-Component-SKU-Professional-VL-BYPASS-RAC-private.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\CoreSingleLanguage\is-I06Q6.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\CoreSingleLanguage\CoreSingleLanguage-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\CoreSingleLanguage\is-69G23.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\CoreSingleLanguage\CoreSingleLanguage-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\CoreN\is-CRH6H.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\CoreN\CoreN-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\CoreN\is-K82SF.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\CoreN\CoreN-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\Core\is-8OH8T.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\Core\Core-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\Core\is-4DR41.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\Core\Core-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\is-GKL6N.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\pkeyconfig.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-ENJD3.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\Security-SPP-Component-SKU-Professional-VLKMS1-ul-phn.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\Enterprise\is-PSEPT.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\Enterprise\Enterprise-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Word\is-U6UAI.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Word\LicenseSetData._D9F5B1C6_5386_495A_88F9_9AD6B41AC9B3.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\VisioStd\is-CN6GN.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\VisioStd\LicenseSetData._AC4EFAF0_F81F_4F61_BDF7_EA32B02AB117.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\VisioStd\is-N2TD0.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\VisioStd\LicenseSetData._AC4EFAF0_F81F_4F61_BDF7_EA32B02AB117.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-6N3TB.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\ProjectPro_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-MA3IK.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\ProjectProVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-2FEQG.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\ProjectProVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-TPHFA.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\ProjectProVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-F57GU.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\PowerPoint_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-FHNJA.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\PowerPoint_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-5H8B7.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\PowerPoint_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-6AUN8.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\PowerPoint_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-B597T.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\PowerPoint_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-ARVE3.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\PowerPointVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-TSTAP.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\PowerPointVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-FB2UV.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\PowerPointVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-E3PER.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\Outlook_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-OQ4F9.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\Outlook_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-3U18D.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\Outlook_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-MM6SM.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\Outlook_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-EQUN0.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\Outlook_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-NCJ74.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\OutlookVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-KV87C.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\OutlookVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-SVR3S.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\ProjectPro_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-7LPHQ.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\ProjectPro_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-1C5DM.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\Publisher_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-HMRMR.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\ProPlusVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-1CRCD.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\ProPlusVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-GNFTL.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\PublisherVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-P7AFG.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\PublisherVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-DHLKN.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\PublisherVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-M3480.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\ProPlus_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-J0V2N.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\ProPlus_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-P317G.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\ProPlus_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-234HA.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\ProPlus_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-3799H.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\ProPlus_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-FS0KS.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\ProjectPro_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-77JAM.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\OutlookVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-LUT9R.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\OneNote_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-RGVNG.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-K75F0.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-25BKO.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-7E4JI.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-AF6B6.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-SVL2O.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\ProjectStdVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-9K7CG.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\ProjectStdVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-HCDPN.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\ProjectStdVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-JJ8S6.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\ProPlusVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-40P5J.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\OneNote_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-230UU.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\OneNote_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-0P6PR.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\InfoPathVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-OAQLK.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Access\AccessVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-6F31F.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\Excel_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-4DQQQ.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\ExcelVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-HJNSU.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\ExcelVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-7U4Q6.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\ExcelVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-91K0M.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Access\Access_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-HULDL.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Access\Access_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-14FU3.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Access\Access_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-IVDBR.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Access\Access_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-JNSC4.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\Publisher_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-I6LUB.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\Excel_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-BNED3.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Access\AccessVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-A3LG7.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Access\AccessVLReg32.reg
  • from %ProgramFiles%\KMSpico\is-5IPPG.tmp to %ProgramFiles%\KMSpico\UninsHs.exe
  • from %ProgramFiles%\KMSpico\is-30TF0.tmp to %ProgramFiles%\KMSpico\Service_KMS.exe
  • from %ProgramFiles%\KMSpico\is-6E295.tmp to %ProgramFiles%\KMSpico\KMSELDI.exe
  • from <SYSTEM32>\is-68BDL.tmp to <SYSTEM32>\Vestris.ResourceLib.dll
  • from %ProgramFiles%\KMSpico\is-G931J.tmp to %ProgramFiles%\KMSpico\Vestris.ResourceLib.dll
  • from %ProgramFiles%\KMSpico\is-S1BQ1.tmp to %ProgramFiles%\KMSpico\DevComponents.DotNetBar2.dll
  • from %ProgramFiles%\KMSpico\is-9SJ5I.tmp to %ProgramFiles%\KMSpico\AutoPico.exe
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-PUEPK.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Access\Access_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\sounds\is-0O1EL.tmp to %ProgramFiles%\KMSpico\sounds\verified.mp3
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-9CH4R.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\Excel_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-S6UB2.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\GrooveVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-SBJ2N.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\Excel_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-HO376.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\OneNote_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-K0CJT.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\OneNote_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-UCRFM.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\OneNoteVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-PHEQA.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\OneNoteVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-UDLKF.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\OneNoteVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-9GAF5.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\InfoPath_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-C0FKU.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\InfoPath_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-PB3OO.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\InfoPath_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-1L6A7.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\GrooveVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-JBVOO.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\InfoPath_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-38JP3.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\Excel_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-1GQDH.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\InfoPathVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-KLUUA.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\InfoPathVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-05B5H.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\Groove_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-HBR2K.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\Groove_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-4GFVS.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\Groove_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-AGAJC.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\Groove_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-LFEV4.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\Groove_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-8BLNH.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\GrooveVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-VLROK.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\InfoPath_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\scripts\is-AC7IK.tmp to %ProgramFiles%\KMSpico\scripts\Silent.cmd
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-8UGBI.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\Publisher_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-UT91A.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasicsVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\InfoPath\is-1MV7T.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\InfoPath\LicenseSetData._A30B8040_D68A_423F_B0B5_9CE292EA5A8F.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Outlook\is-EJSJ2.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Outlook\LicenseSetData._771C3AFA_50C5_443F_B151_FF2546D863A0.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Outlook\is-93IVC.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Outlook\LicenseSetData._771C3AFA_50C5_443F_B151_FF2546D863A0.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Outlook\is-2KN89.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Outlook\LicenseSetData._771C3AFA_50C5_443F_B151_FF2546D863A0.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\OneNote\is-2BP14.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\OneNote\LicenseSetData._EFE1F3E6_AEA2_4144_A208_32AA872B6545.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\OneNote\is-IJIRB.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\OneNote\LicenseSetData._EFE1F3E6_AEA2_4144_A208_32AA872B6545.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\OneNote\is-R3VB7.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\OneNote\LicenseSetData._EFE1F3E6_AEA2_4144_A208_32AA872B6545.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Lync\is-QG48R.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Lync\LicenseSetData._1B9F11E3_C85C_4E1B_BB29_879AD2C909E3.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Lync\is-AEJG7.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Lync\LicenseSetData._1B9F11E3_C85C_4E1B_BB29_879AD2C909E3.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Lync\is-F3L7O.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Lync\LicenseSetData._1B9F11E3_C85C_4E1B_BB29_879AD2C909E3.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\InfoPath\is-CGD36.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\InfoPath\LicenseSetData._A30B8040_D68A_423F_B0B5_9CE292EA5A8F.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\PowerPoint\is-D96F7.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\PowerPoint\LicenseSetData._8C762649_97D1_4953_AD27_B7E2C25B972E.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\InfoPath\is-2GN1A.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\InfoPath\LicenseSetData._A30B8040_D68A_423F_B0B5_9CE292EA5A8F.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Excel\is-G5Q4I.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Excel\LicenseSetData._F7461D52_7C2B_43B2_8744_EA958E0BD09A.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Excel\is-VBF4M.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Excel\LicenseSetData._F7461D52_7C2B_43B2_8744_EA958E0BD09A.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Excel\is-7IFDI.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Excel\LicenseSetData._F7461D52_7C2B_43B2_8744_EA958E0BD09A.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Access\is-KIR5I.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Access\AccessVL_KMS_Client_PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Access\is-ULB21.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Access\AccessVL_KMS_Client_PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Access\is-1NS4P.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Access\AccessVL_KMS_Client_OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-DOTCK.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\ProjectPro_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\PowerPoint\is-VIK93.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\PowerPoint\LicenseSetData._8C762649_97D1_4953_AD27_B7E2C25B972E.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\VisioStd\is-R622A.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\VisioStd\LicenseSetData._AC4EFAF0_F81F_4F61_BDF7_EA32B02AB117.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Publisher\is-DIBML.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Publisher\LicenseSetData._00C79FF1_6850_443D_BF61_71CDE0DE305F.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Publisher\is-OG137.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Publisher\LicenseSetData._00C79FF1_6850_443D_BF61_71CDE0DE305F.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\VisioPro\is-7IURK.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\VisioPro\visio.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\VisioPro\is-709RU.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\VisioPro\LicenseSetData._E13AC10E_75D0_4AFF_A0CD_764982CF541C.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\VisioPro\is-K3N1E.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\VisioPro\LicenseSetData._E13AC10E_75D0_4AFF_A0CD_764982CF541C.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\VisioPro\is-AHIJ0.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\VisioPro\LicenseSetData._E13AC10E_75D0_4AFF_A0CD_764982CF541C.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Standard\is-3HL2O.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Standard\LicenseSetData._B13AFB38_CD79_4AE5_9F7F_EED058D750CA.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Standard\is-Q8KL5.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Standard\LicenseSetData._B13AFB38_CD79_4AE5_9F7F_EED058D750CA.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Standard\is-O2QF3.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Standard\LicenseSetData._B13AFB38_CD79_4AE5_9F7F_EED058D750CA.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Publisher\is-R7AIB.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Publisher\LicenseSetData._00C79FF1_6850_443D_BF61_71CDE0DE305F.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\is-C0P25.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\pkeyconfig-office.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\is-RE129.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Licenses.sl.ISSUANCE.CLIENT_UL_OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectPro\is-HHD6L.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectPro\LicenseSetData._4A5D124A_E620_44BA_B6FF_658961B33B9A.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\ProPlus\is-DCNKI.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\ProPlus\LicenseSetData._B322DA9C_A2E2_4058_9E4E_F59A6970BD69.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\ProPlus\is-58TK9.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\ProPlus\LicenseSetData._B322DA9C_A2E2_4058_9E4E_F59A6970BD69.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\ProPlus\is-ER5UL.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\ProPlus\LicenseSetData._B322DA9C_A2E2_4058_9E4E_F59A6970BD69.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectStd\is-VKIV0.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectStd\LicenseSetData._427A28D1_D17C_4ABF_B717_32C780BA6F07.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectStd\is-25EHT.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectStd\LicenseSetData._427A28D1_D17C_4ABF_B717_32C780BA6F07.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectStd\is-DIQ15.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectStd\LicenseSetData._427A28D1_D17C_4ABF_B717_32C780BA6F07.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectPro\is-BBUFE.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectPro\LicenseSetData._4A5D124A_E620_44BA_B6FF_658961B33B9A.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectPro\is-FTL7O.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectPro\LicenseSetData._4A5D124A_E620_44BA_B6FF_658961B33B9A.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\ProPlus\is-9NJR6.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\ProPlus\proplus.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\PowerPoint\is-7BFMN.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\PowerPoint\LicenseSetData._8C762649_97D1_4953_AD27_B7E2C25B972E.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\is-RB6KC.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Licenses.sl.ISSUANCE.CLIENT_UL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\is-EQTVE.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Licenses.sl.ISSUANCE.CLIENT_STIL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-EB2CV.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\Publisher_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-RB43N.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\StandardVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-CBFAN.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioPrem_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-DPUBA.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioPrem_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-F11EM.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioPrem_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-0OJMD.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\Standard_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-AI9T6.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\Standard_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-UGRVJ.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\Standard_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-7FDGU.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\Standard_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-RF1RJ.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioPro_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-577VE.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\Standard_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-SS3EQ.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\StandardVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-MRPVV.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\StandardVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-1LJ1F.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasics_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-GLRRQ.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasics_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-B3EMU.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasics_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-F2A20.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasics_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-8QJTL.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasics_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-08U4E.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasicsVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-HFSCE.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasicsVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-L18MU.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioPrem_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-8FB9A.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\Publisher_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-13VE5.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioPro_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-6PHP7.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioPro_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\is-TPPVA.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Licenses.sl.ISSUANCE.CLIENT_ROOT_BRIDGE_TEST.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-KVSV5.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioPro_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\is-AKTGN.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Licenses.sl.ISSUANCE.CLIENT_ROOT.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\is-JB2JR.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Licenses.sl.ISSUANCE.CLIENT_BRIDGE_OFFICE.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-GHGVU.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Word\Word_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-37M76.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Word\Word_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-VI2U3.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Word\Word_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-M9DSN.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Word\Word_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-DHG5G.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Word\Word_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-8CQBF.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioPro_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-COO04.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Word\WordVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-UQIF8.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Word\WordVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-H4EP2.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioPrem_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-A91K9.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-0I2EN.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-5QNFL.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioStd_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-H5K0T.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioStd_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-QCVI0.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioStd_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-N8FGF.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioStd_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-0V367.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioStd_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-DJBBM.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Word\WordVLReg64.reg
  • from %ProgramFiles%\KMSpico\sounds\is-3RKQL.tmp to %ProgramFiles%\KMSpico\sounds\warning.mp3
Substitutes the following files:
  • %ProgramFiles%\KMSpico\logs\AutoPico.log
Network activity:
Connects to:
  • '1.###l.ntp.org':123
UDP:
  • DNS ASK 1.###l.ntp.org
Miscellaneous:
Searches for the following windows:
  • ClassName: 'BUTTON' WindowName: ''
Creates and executes the following:
  • '%WINDIR%\Migration\WTR\installfiles\install\setup.exe' /silent /norestart /I=default
  • '%TEMP%\is-NCL5G.tmp\setup.tmp' /SL5=\"$100E6,2952592,69120,C:\\Windows\\Migration\\WTR\\installfiles\\install\\setup.exe\" /silent /norestart /I=default
  • '%ProgramFiles%\KMSpico\UninsHs.exe' Files\\KMSpico\\UninsHs.exe\" /r0=KMSpico,default,C:\\Windows\\Migration\\WTR\\installfiles\\install\\setup.exe
  • '%ProgramFiles%\KMSpico\KMSELDI.exe' Files\\KMSpico\\KMSELDI.exe\" /silent /backup
  • '%ProgramFiles%\KMSpico\AutoPico.exe' Files\\KMSpico\\AutoPico.exe\" /silent
Executes the following:
  • '<SYSTEM32>\cmd.exe' /C \"\"C:\\Program Files\\KMSpico\\scripts\\Install_Service.cmd\"\"
  • '<SYSTEM32>\cmd.exe' /C \"\"C:\\Program Files\\KMSpico\\scripts\\Install_Task.cmd\"\"
  • '<SYSTEM32>\sc.exe' create \"Service KMSELDI\" binPath= \"C:\\Program Files\\KMSpico\\Service_KMS.exe\" type= own error= normal start= auto DisplayName= \"Service KMSELDI\"
  • '<SYSTEM32>\schtasks.exe' /Create /TN \"AutoPico Daily Restart\" /TR \"\'C:\\Program Files\\KMSpico\\AutoPico.exe\' /silent\" /SC DAILY /ST 23:59:59 /RU \"NT AUTHORITY\\SYSTEM\" /RL Highest /F

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android