HackTool.Win32.AutoKMS.GA

プログラムは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

侵入方法

プログラムは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

インストール

プログラムは、以下のプロセスを追加します。

• %System%\cmd.exe /C %Program Files%\KMSpico\scripts\Install_Service.cmd
• %System%\cmd.exe /C %Program Files%\KMSpico\scripts\Install_Task.cmd
• %program files%\kmspico\uninshs.exe /r0=kmspico,default,{malware path and file name}
• sc create Service KMSELDI binPath= %Program Files%\KMSpico\Service_KMS.exe type= own error= normal start= auto DisplayName= Service KMSELDI
• %System%\schtasks.exe SCHTASKS /Create /TN AutoPico Daily Restart /TR '%Program Files%\KMSpico\AutoPico.exe' /silent /SC DAILY /ST 23:59:59 /RU NT AUTHORITY\SYSTEM /RL Highest /F

(註：%Program Files%フォルダは、デフォルトのプログラムファイルフォルダです。Windows 2000、Server 2003、XP（32-bit）,Vista（32-bit）、7（32-bit）、8（32-bit）の場合、通常 "C:\Program Files"です。また、Windows XP（64-bit）、Vista（64-bit）、7（64-bit）、8（64-bit）の場合、通常 "C:\Program Files（x86）" です。)

プログラムは、以下のフォルダを作成します。

• %Program Files%\KMSpico\cert\kmscert2013\ProjectPro
• %Program Files%\KMSpico\cert\kmscertW10\Core
• %Program Files%\KMSpico\cert\kmscert2013\ProPlus
• %Program Files%\KMSpico\cert\kmscertW81\Enterprise
• %Program Files%\KMSpico\cert\kmscertW7\Enterprise
• %Program Files%\KMSpico\cert\kmscert2016\Outlook
• %Program Files%\KMSpico\cert\kmscert2013\InfoPath
• %Program Files%\KMSpico\cert\kmscertW81
• %Program Files%\KMSpico\cert\kmscertW81\EmbeddedIndustry
• %Program Files%\KMSpico\cert\kmscert2013\Excel
• %Program Files%\KMSpico\cert\kmscertW6\Enterprise
• %Program Files%\KMSpico\cert\kmscert2010\ProjectPro
• %Program Files%\KMSpico\icons
• %Program Files%\KMSpico\cert\kmscert2013\VisioStd
• %Program Files%\KMSpico\cert\kmscertW10
• %Program Files%\KMSpico\cert\kmscert2010\Groove
• %Program Files%\KMSpico\cert\kmscert2010\Access
• %Program Files%\KMSpico\cert\kmscert2016\ProjectStd
• %Program Files%\KMSpico\cert\kmscert2010\ProPlus
• %Program Files%\KMSpico\cert\kmscert2010\ProjectStd
• %Program Files%\KMSpico\cert\kmscertW10\Professional
• %Program Files%\KMSpico\cert\kmscert2010\Standard
• %Program Files%\KMSpico\cert\kmscert2013\ProjectStd
• %Program Files%\KMSpico\cert\kmscert2010
• %Program Files%\KMSpico\cert\kmscertW8\Enterprise
• %Program Files%\KMSpico\cert\kmscert2013\Word
• %Program Files%\KMSpico\cert\kmscertW7
• %Program Files%\KMSpico\cert\kmscert2016\SkypeforBusiness
• %Program Files%\KMSpico\cert
• %Program Files%\KMSpico\cert\kmscertW81\Core
• %Program Files%\KMSpico\cert\kmscert2010\Publisher
• %Program Files%\KMSpico\cert\kmscert2016\Publisher
• %Program Files%\KMSpico
• %Program Files%\KMSpico\sounds
• %Program Files%\KMSpico\cert\kmscertW8
• %Program Files%\KMSpico\cert\kmscertW8\Core
• %Program Files%\KMSpico\driver
• %Program Files%\KMSpico\cert\kmscertW6\BusinessN
• %Program Files%\KMSpico\cert\kmscert2010\PowerPoint
• %Program Files%\KMSpico\cert\kmscert2016\Word
• %Program Files%\KMSpico\cert\kmscert2016\VisioStd
• %Program Files%\KMSpico\cert\kmscertW7\Embedded
• %Program Files%\KMSpico\cert\kmscert2016\PowerPoint
• %Program Files%\KMSpico\cert\kmscert2013\OneNote
• %Program Files%\KMSpico\cert\kmscertW8\CoreSingleLanguage
• %Program Files%\KMSpico\cert\kmscert2013\Outlook
• %Program Files%\KMSpico\cert\kmscert2010\InfoPath
• %Program Files%\KMSpico\cert\kmscert2016
• %Program Files%\KMSpico\cert\kmscertW81\ProfessionalWMC
• %Program Files%\KMSpico\logs
• %Program Files%\KMSpico\cert\kmscert2016\Standard
• %Program Files%\KMSpico\cert\kmscertW10\EnterpriseS
• %Program Files%\KMSpico\cert\kmscert2016\Access
• %Program Files%\KMSpico\cert\kmscertW81\CoreConnectedSingleLanguage
• %Program Files%\KMSpico\cert\kmscert2013\Standard
• %Program Files%\KMSpico\TokensBackup
• %Program Files%\KMSpico\cert\kmscert2013\VisioPro
• %Program Files%\KMSpico\cert\kmscert2010\Word
• %Program Files%\KMSpico\cert\kmscertW10\Enterprise
• %Program Files%\KMSpico\cert\kmscert2013
• %Program Files%\KMSpico\cert\kmscertW81\Professional
• %Program Files%\KMSpico\scripts
• %Program Files%\KMSpico\cert\kmscert2010\SmallBusBasics
• %Program Files%\KMSpico\cert\kmscertW6\Business
• %Program Files%\KMSpico\cert\kmscertW8\ProfessionalN
• %Program Files%\KMSpico\cert\kmscert2010\Visio
• %All Users Profile%\Microsoft\Windows\Start Menu\Programs\KMSpico
• %Program Files%\KMSpico\cert\kmscertW81\ServerDatacenter
• %User Temp%\is-CRIQ0.tmp\_isetup
• %Program Files%\KMSpico\cert\kmscert2016\VisioPro
• %Program Files%\KMSpico\cert\kmscert2013\Publisher
• %Program Files%\KMSpico\cert\kmscertW7\Professional
• %Program Files%\KMSpico\cert\kmscert2013\Access
• %Program Files%\KMSpico\cert\kmscertW81\ServerStandard
• %Program Files%\KMSpico\cert\kmscertW10\Education
• %Program Files%\KMSpico\cert\kmscert2016\Excel
• %Program Files%\KMSpico\cert\kmscert2013\Lync
• %Program Files%\KMSpico\cert\kmscert2010\Excel
• %Program Files%\KMSpico\cert\kmscert2016\OneNote
• %Program Files%\KMSpico\cert\kmscert2016\Mondo
• %Program Files%\KMSpico\cert\kmscertW6
• %Program Files%\KMSpico\cert\kmscert2010\OneNote
• %Program Files%\KMSpico\cert\kmscert2016\ProPlus
• %Program Files%\KMSpico\cert\kmscertW8\CoreN
• %Program Files%\KMSpico\cert\kmscertW8\Professional
• %Program Files%\KMSpico\cert\kmscert2013\PowerPoint
• %Program Files%\KMSpico\cert\kmscert2016\ProjectPro
• %Program Files%\KMSpico\cert\kmscertW8\EnterpriseN
• %Program Files%\KMSpico\cert\kmscert2010\Outlook
• %Program Files%\KMSpico\cert\kmscertW8\ProfessionalWMC

(註：%Program Files%フォルダは、デフォルトのプログラムファイルフォルダです。Windows 2000、Server 2003、XP（32-bit）,Vista（32-bit）、7（32-bit）、8（32-bit）の場合、通常 "C:\Program Files"です。また、Windows XP（64-bit）、Vista（64-bit）、7（64-bit）、8（64-bit）の場合、通常 "C:\Program Files（x86）" です。. %All Users Profile%フォルダは、ユーザの共通プロファイルフォルダです。Windows 2000、XP、Server 2003の場合、通常 "C:\Documents and Settings\All Users” です。また、Windows Vista、7、8の場合、通常 "C:\ProgramData” です。. %User Temp%フォルダは、現在ログオンしているユーザの一時フォルダです。Windows 2000、XP、Server 2003の場合、通常 "C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"です。また、Windows Vista、7、8の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。)

自動実行方法

プログラムは、自身をシステムサービスとして登録し、Windows起動時に自動実行されるよう以下のレジストリ値を追加します。

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\osppsvc
Start = "2"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\Service KMSELDI
DisplayName = "Service KMSELDI"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\Service KMSELDI
ImagePath = "%Program Files%\KMSpico\Service_KMS.exe"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\Service KMSELDI
Start = "SERVICE_AUTO_START"

他のシステム変更

プログラムは、以下のファイルを削除します。

• %All Users Profile%\Microsoft\Windows\Start Menu\Programs\KMSpico\Uninstall KMSpico.url
• %All Users Profile%\Microsoft\Windows\Start Menu\Programs\KMSpico\KMSpico.pif
• %All Users Profile%\Microsoft\Windows\Start Menu\Programs\KMSpico\Log KMSpico.pif
• %All Users Profile%\Microsoft\Windows\Start Menu\Programs\KMSpico\KMSpico.url
• %All Users Profile%\Microsoft\Windows\Start Menu\Programs\KMSpico\AutoPico.pif
• %All Users Profile%\Microsoft\Windows\Start Menu\Programs\KMSpico\Uninstall KMSpico.pif
• %All Users Profile%\Microsoft\Windows\Start Menu\Programs\KMSpico\Log KMSpico.url
• %All Users Profile%\Microsoft\Windows\Start Menu\Programs\KMSpico\AutoPico.url
• %Windows%\Tasks\AutoPico Daily Restart.job

(註：%All Users Profile%フォルダは、ユーザの共通プロファイルフォルダです。Windows 2000、XP、Server 2003の場合、通常 "C:\Documents and Settings\All Users” です。また、Windows Vista、7、8の場合、通常 "C:\ProgramData” です。. %Windows%フォルダは、Windowsが利用するフォルダで、いずれのオペレーティングシステム(OS)でも通常、"C:\Windows" です。.)

プログラムは、以下のレジストリキーを追加します。

HKEY_CURRENT_USER\Software\Microsoft\
RestartManager\Session0000

HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Uninstall\
{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1

プログラムは、以下のレジストリ値を追加します。

HKEY_CURRENT_USER\Software\Microsoft\
RestartManager\Session0000
Owner = "L\x0e\x00\x00\x9a,\x16_\x85\xf9\xd4\x01"

HKEY_CURRENT_USER\Software\Microsoft\
RestartManager\Session0000
SessionHash = "{random characters}"

HKEY_CURRENT_USER\Software\Microsoft\
RestartManager\Session0000
Sequence = "1"

HKEY_CURRENT_USER\Software\Microsoft\
RestartManager\Session0000
RegFiles0000 = "\x00\x00\x00\x00\x00s\xe2\xa1\x9f"

HKEY_CURRENT_USER\Software\Microsoft\
RestartManager\Session0000
RegFilesHash = "\xe9\x92\xeaqa&V0D\xcf0\x13\xf4\xb2\x8erD7\xdd\x9b6\xe6l\xac\x96q\x80'"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\System
EnableSmartScreen = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer
SmartScreenEnabled = "Off"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\PhishingFilter
EnabledV9 = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1
Inno Setup: Setup Version = "5.5.5 (a)"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1
Inno Setup: App Path = "%Program Files%\KMSpico"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1
InstallLocation = "%Program Files%\KMSpico"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1
Inno Setup: Icon Group = "KMSpico"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1
Inno Setup: User = "PEWPEWPEW"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1
Inno Setup: Language = "default"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1
DisplayName = "KMSpico"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1
DisplayIcon = "%Program Files%\KMSpico\KMSELDI.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1
UninstallString = "%Program Files%\KMSpico\unins000.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1
QuietUninstallString = "%Program Files%\KMSpico\unins000.exe /SILENT"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1
ModifyPath = "%Program Files%\KMSpico\UninsHs.exe /m0=AppId"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1
NoRepair = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1
InstallDate = "20190423"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1
EstimatedSize = "16017"

プログラムは、以下のレジストリキーを削除します。

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\System\
EnableSmartScreen

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
SmartScreenEnabled

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\PhishingFilter\EnabledV9

作成活動

プログラムは、以下のファイルを作成します。

• %Program Files%\KMSpico\cert\kmscert2010\Excel\is-5HF83.tmp
• %Program Files%\KMSpico\cert\kmscert2016\pkeyconfig-office.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\Mondo\MondoVL_KMS_Client-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\VisioStd\is-ENM41.tmp
• %Program Files%\KMSpico\cert\kmscertW7\Professional\Security-SPP-Component-SKU-Professional-VLKMS1-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\OneNote\is-0LQPH.tmp
• %Program Files%\KMSpico\cert\kmscertW10\Core\is-C322R.tmp
• %Program Files%\KMSpico\cert\kmscert2013\Publisher\is-JS46L.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Access\is-02R92.tmp
• %Program Files%\KMSpico\cert\kmscert2016\Word\is-U65AK.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-BYPASS-RAC-public.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Excel\ExcelVLReg32.reg
• %Program Files%\KMSpico\cert\kmscert2010\Outlook\is-QSS3P.tmp
• %Program Files%\KMSpico\cert\kmscertW81\ServerDatacenter\is-O6N2J.tmp
• %Program Files%\KMSpico\driver\is-3A1AN.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Outlook\OutlookVLReg64.reg
• %Program Files%\KMSpico\cert\kmscert2010\ProPlus\ProPlusVLRegWOW.reg
• %Program Files%\KMSpico\cert\kmscert2016\OneNote\is-RKJTN.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Visio\is-QF97S.tmp
• %Program Files%\KMSpico\cert\kmscertW6\BusinessN\is-QS7N3.tmp
• %Program Files%\KMSpico\cert\kmscert2016\Access\is-EIQF9.tmp
• %Program Files%\KMSpico\is-QVH91.tmp
• %Program Files%\KMSpico\cert\kmscert2010\ProPlus\is-CN0HM.tmp
• %Program Files%\KMSpico\is-42COP.tmp
• %Program Files%\KMSpico\cert\kmscertW7\Professional\Security-SPP-Component-SKU-Professional-VLKMS1-pl.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Standard\is-38TTL.tmp
• %Program Files%\KMSpico\cert\kmscert2013\VisioPro\is-6POK7.tmp
• %Program Files%\KMSpico\cert\kmscertW81\Professional\is-65P9P.tmp
• %Program Files%\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_KMS_Client.RAC_Pub.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Word\Word_KMS_Client.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\Word\is-Q95AQ.tmp
• %Program Files%\KMSpico\cert\kmscert2013\Excel\LicenseSetData._F7461D52_7C2B_43B2_8744_EA958E0BD09A.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\VisioPro\is-PUQKU.tmp
• %Program Files%\KMSpico\cert\kmscertW7\Professional\Security-SPP-Component-SKU-Professional-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW10\Professional\is-BK1LJ.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Word\is-LDN8O.tmp
• %Program Files%\KMSpico\cert\kmscert2016\ProjectStd\is-HAJUU.tmp
• %Program Files%\KMSpico\cert\kmscert2016\Standard\is-Q6CCM.tmp
• %Program Files%\KMSpico\scripts\is-1OJSR.tmp
• %Program Files%\KMSpico\driver\is-4V8KQ.tmp
• %Program Files%\KMSpico\cert\kmscert2010\OneNote\is-IN0DQ.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Outlook\OutlookVLReg32.reg
• %Program Files%\KMSpico\cert\kmscertW10\EnterpriseS\EnterpriseS-Volume-GVLK-1-ul-oob-rtm.xrm-ms
• %Program Files%\KMSpico\is-1K74P.tmp
• %Windows%\Microsoft.Net\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll.config
• %Program Files%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-BYPASS-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS-ul-phn.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW10\Enterprise\Enterprise-Volume-GVLK-1-ul-oob-rtm.xrm-ms
• %Program Files%\KMSpico\scripts\Log.cmd
• %Program Files%\KMSpico\sounds\processing.mp3
• %Program Files%\KMSpico\cert\kmscert2013\Lync\is-PGF4N.tmp
• %Program Files%\KMSpico\cert\kmscertW6\is-HPGTN.tmp
• %Program Files%\KMSpico\sounds\is-L7B5F.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\ProjectPro\ProjectPro_KMS_Client.RAC_Pub.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_KMS_Client.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Visio\VisioPro_KMS_Client.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\ProjectStd\ProjectStdVL_KMS_Client-ul.xrm-ms
• %Windows%\Microsoft.Net\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll.config
• %Program Files%\KMSpico\cert\kmscertW81\ServerStandard\ServerStandard-Volume-GVLK-1-ul-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Visio\VisioStd_KMS_Client.RAC_Priv.xrm-ms
• %Program Files%\KMSpico\scripts\is-H2EIK.tmp
• %Program Files%\KMSpico\cert\kmscert2013\PowerPoint\LicenseSetData._8C762649_97D1_4953_AD27_B7E2C25B972E.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW8\EnterpriseN\EnterpriseN-Volume-GVLK-1-ul-oob-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\VisioStd\is-OC16M.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Outlook\is-6QJKI.tmp
• %Program Files%\KMSpico\cert\kmscertW81\ServerStandard\ServerStandard-Volume-GVLK-1-ul-oob-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\is-5LUML.tmp
• %Program Files%\KMSpico\cert\kmscertW10\Education\Education-Volume-GVLK-1-ul-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\ProjectStd\ProjectStdVLReg32.reg
• %System%\Vestris.ResourceLib.dll
• %Program Files%\KMSpico\cert\kmscert2010\SmallBusBasics\is-NTMND.tmp
• %Program Files%\KMSpico\cert\kmscert2016\ProPlus\ProPlusVL_KMS_Client-ppd.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Publisher\PublisherVLReg32.reg
• %Program Files%\KMSpico\cert\kmscertW81\Enterprise\Enterprise-Volume-GVLK-1-ul-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Excel\Excel_KMS_Client.RAC_Pub.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\PowerPoint\is-U89RJ.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Word\is-16PUH.tmp
• %Program Files%\KMSpico\cert\kmscert2010\ProjectPro\ProjectProVLReg64.reg
• %Program Files%\KMSpico\cert\kmscert2010\InfoPath\InfoPath_KMS_Client.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Visio\is-5D4RU.tmp
• %Program Files%\KMSpico\cert\kmscert2016\client-issuance-root.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW10\EnterpriseS\EnterpriseS-Volume-GVLK-2-ul.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\OneNote\is-4E4VU.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Word\is-FFQJB.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-BYPASS-RAC-public.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\Word\LicenseSetData._D9F5B1C6_5386_495A_88F9_9AD6B41AC9B3.PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\Publisher\is-FN3N1.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Visio\VisioVLReg64.reg
• %Program Files%\KMSpico\cert\kmscert2010\PowerPoint\PowerPoint_KMS_Client.RAC_Priv.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\Lync\LicenseSetData._1B9F11E3_C85C_4E1B_BB29_879AD2C909E3.PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\Mondo\is-BT78R.tmp
• %Program Files%\KMSpico\cert\kmscertW7\Embedded\pkeyconfig-embedded.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\ProjectStd\ProjectStdVLReg64.reg
• %Program Files%\KMSpico\cert\kmscert2010\InfoPath\InfoPath_KMS_Client.RAC_Pub.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW8\Core\Core-Volume-GVLK-1-ul-oob-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\Publisher\LicenseSetData._00C79FF1_6850_443D_BF61_71CDE0DE305F.OOB.xrm-ms
• %Program Files%\KMSpico\sounds\is-UVOPQ.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Groove\Groove_KMS_Client.RAC_Priv.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\Outlook\OutlookVL_KMS_Client-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Standard\is-1ON6D.tmp
• %Program Files%\KMSpico\cert\kmscertW10\Education\is-G3FHO.tmp
• %Program Files%\KMSpico\cert\kmscertW81\Professional\Professional-Volume-GVLK-1-ul-oob-rtm.xrm-ms
• %Program Files%\KMSpico\scripts\Install_Service.cmd
• %Program Files%\KMSpico\cert\kmscert2010\Excel\ExcelVLReg64.reg
• %Program Files%\KMSpico\cert\kmscert2013\Licenses.sl.ISSUANCE.CLIENT_STIL.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\PowerPoint\PowerPointVLRegWOW.reg
• %Program Files%\KMSpico\cert\kmscert2010\Publisher\Publisher_KMS_Client.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\PowerPoint\is-BL2UC.tmp
• %Program Files%\KMSpico\cert\kmscert2010\ProjectPro\is-05AD0.tmp
• %Program Files%\KMSpico\cert\kmscert2016\PowerPoint\is-7BI4F.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Standard\Standard_KMS_Client.PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_KMS_Client.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\ProjectPro\ProjectProVL_KMS_Client-ul.xrm-ms
• %Program Files%\KMSpico\is-BMVGN.tmp
• %Program Files%\KMSpico\cert\kmscert2010\ProjectPro\ProjectProVLReg32.reg
• %Program Files%\KMSpico\unins000.dat
• %Program Files%\KMSpico\cert\kmscert2016\Publisher\PublisherVL_KMS_Client-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\Outlook\is-D0FB0.tmp
• %System%\Tasks\AutoPico Daily Restart
• %Program Files%\KMSpico\cert\kmscert2010\Excel\is-C7FD4.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Publisher\is-QKT1B.tmp
• %Program Files%\KMSpico\cert\kmscertW8\Enterprise\Enterprise-Volume-GVLK-1-ul-oob-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW8\ProfessionalN\ProfessionalN-Volume-GVLK-1-ul-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW6\Business\is-RPH40.tmp
• %Program Files%\KMSpico\cert\kmscert2013\Lync\is-RGT6O.tmp
• %Program Files%\KMSpico\cert\kmscert2013\Access\AccessVL_KMS_Client_PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\SkypeforBusiness\is-P4SJK.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Word\WordVLReg64.reg
• %Program Files%\KMSpico\cert\kmscert2010\Visio\VisioPro_KMS_Client.PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\ProPlus\LicenseSetData._B322DA9C_A2E2_4058_9E4E_F59A6970BD69.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\Word\WordVL_KMS_Client-ul.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\SkypeforBusiness\SkypeforBusinessVL_KMS_Client-ppd.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\InfoPath\is-N5RRF.tmp
• %Program Files%\KMSpico\cert\kmscert2013\InfoPath\LicenseSetData._A30B8040_D68A_423F_B0B5_9CE292EA5A8F.PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS1-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Publisher\is-2TBHC.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Word\is-HPC0U.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Groove\Groove_KMS_Client.PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\ProPlus\ProPlus_KMS_Client.RAC_Pub.xrm-ms
• %Program Files%\KMSpico\sounds\incomingtransmission.mp3
• %Program Files%\KMSpico\cert\kmscert2010\InfoPath\is-6VJGC.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Groove\Groove_KMS_Client.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\ProjectStd\LicenseSetData._427A28D1_D17C_4ABF_B717_32C780BA6F07.PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\Excel\is-2TBRB.tmp
• %Program Files%\KMSpico\cert\kmscert2010\ProjectStd\is-I24PS.tmp
• %Program Files%\KMSpico\cert\kmscertW81\Core\is-VI4TQ.tmp
• %Program Files%\KMSpico\cert\kmscert2010\ProjectPro\is-UHVDD.tmp
• %Program Files%\KMSpico\cert\kmscert2013\OneNote\is-FFR4L.tmp
• %Program Files%\KMSpico\cert\kmscertW81\CoreConnectedSingleLanguage\is-FTBUM.tmp
• %Program Files%\KMSpico\cert\kmscertW6\BusinessN\is-90D99.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-KMS1-pl.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\is-MJBEC.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Business\is-9E706.tmp
• %Program Files%\KMSpico\cert\kmscert2016\VisioPro\is-JJAAI.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Access\is-PF8D1.tmp
• %Program Files%\KMSpico\cert\kmscertW7\Professional\Security-SPP-Component-SKU-Professional-VLKMS1-ul-phn.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW6\BusinessN\is-KEB7S.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Groove\is-5VGGS.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Access\Access_KMS_Client.RAC_Pub.xrm-ms
• %Program Files%\KMSpico\logs\is-UUUBI.tmp
• %Program Files%\KMSpico\cert\kmscertW7\Embedded\Security-SPP-Component-SKU-Embedded-VLBA-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\ProjectPro\is-M95IU.tmp
• %Program Files%\KMSpico\cert\kmscert2013\Standard\LicenseSetData._B13AFB38_CD79_4AE5_9F7F_EED058D750CA.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\VisioPro\LicenseSetData._E13AC10E_75D0_4AFF_A0CD_764982CF541C.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\VisioPro\VisioProVL_KMS_Client-ul.xrm-ms
• %Program Files%\KMSpico\UninsHs.exe
• %Program Files%\KMSpico\cert\kmscert2016\ProjectPro\is-HP3TC.tmp
• %Program Files%\KMSpico\cert\kmscert2013\Access\is-V3N7H.tmp
• %Program Files%\KMSpico\cert\kmscert2013\Publisher\is-DLO84.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Business\is-10628.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Visio\is-G7CUI.tmp
• %Program Files%\KMSpico\cert\kmscertW6\BusinessN\is-7OAFF.tmp
• %Program Files%\KMSpico\cert\kmscert2016\client-issuance-stil.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\Excel\ExcelVL_KMS_Client-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW7\Embedded\is-L3INS.tmp
• %Program Files%\KMSpico\cert\kmscertW7\Professional\is-QE3RU.tmp
• %Program Files%\KMSpico\scripts\is-6S2KS.tmp
• %Program Files%\KMSpico\cert\kmscert2013\Excel\is-0O6GJ.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-BYPASS-RAC-private.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\client-issuance-bridge-office.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Word\Word_KMS_Client.RAC_Priv.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\Excel\ExcelVL_KMS_Client-ul.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\InfoPath\InfoPathVLReg64.reg
• %Program Files%\KMSpico\cert\kmscertW7\Embedded\Security-SPP-Component-SKU-Embedded-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW7\Embedded\Security-SPP-Component-SKU-Embedded-VLBA-ul.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\ProjectPro\LicenseSetData._4A5D124A_E620_44BA_B6FF_658961B33B9A.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\VisioPro\is-0T10N.tmp
• %Program Files%\KMSpico\cert\kmscert2013\ProPlus\proplus.reg
• %Program Files%\KMSpico\cert\kmscert2013\Licenses.sl.ISSUANCE.CLIENT_ROOT_BRIDGE_TEST.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW81\is-RVI79.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Groove\is-PL5S1.tmp
• %Program Files%\KMSpico\cert\kmscert2013\InfoPath\is-KTQV3.tmp
• %Program Files%\KMSpico\cert\kmscert2016\Standard\is-DFRJG.tmp
• %Program Files%\KMSpico\cert\kmscert2010\SmallBusBasics\is-PT9C5.tmp
• %User Temp%\Setup Log 2019-04-23 #001.txt
• %Program Files%\KMSpico\cert\kmscert2013\Licenses.sl.ISSUANCE.CLIENT_UL_OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\Access\is-NJ9UR.tmp
• %Program Files%\KMSpico\cert\kmscert2016\ProPlus\ProPlusVL_KMS_Client-ul.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\OneNote\OneNote_KMS_Client.PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Visio\is-V3J0R.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Standard\is-5M9OR.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-ul-phn.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Access\is-HOPCA.tmp
• %Program Files%\KMSpico\scripts\Restore_Watermark.cmd
• %Program Files%\KMSpico\sounds\is-AKNNU.tmp
• %Program Files%\KMSpico\driver\Cert.cmd
• %System%\LogFiles\Scm\e731d54b-98b5-4b64-a28b-a1d8584f5505
• %Program Files%\KMSpico\cert\kmscert2010\ProjectStd\is-ACTR5.tmp
• %Program Files%\KMSpico\cert\kmscertW6\BusinessN\is-S3P0I.tmp
• %Program Files%\KMSpico\cert\kmscert2010\InfoPath\InfoPathVLReg32.reg
• %Program Files%\KMSpico\scripts\RemoveExceptionsWD.reg
• %Program Files%\KMSpico\cert\kmscertW7\Professional\pkeyconfig.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW10\Enterprise\is-RRAP7.tmp
• %Program Files%\KMSpico\sounds\affirmative.mp3
• %Program Files%\KMSpico\cert\kmscert2013\VisioStd\is-THUMH.tmp
• %Program Files%\KMSpico\cert\kmscert2010\ProPlus\is-92QCL.tmp
• %All Users Profile%\Microsoft\Windows\Start Menu\Programs\KMSpico\Uninstall KMSpico.lnk
• %Program Files%\KMSpico\sounds\is-8FI4K.tmp
• %Program Files%\KMSpico\cert\kmscertW8\EnterpriseN\EnterpriseN-Volume-GVLK-1-ul-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\Excel\LicenseSetData._F7461D52_7C2B_43B2_8744_EA958E0BD09A.PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\Word\LicenseSetData._D9F5B1C6_5386_495A_88F9_9AD6B41AC9B3.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\PowerPoint\is-KU6V6.tmp
• %Program Files%\KMSpico\cert\kmscertW10\Professional\is-NB9OE.tmp
• %Program Files%\KMSpico\cert\kmscert2013\is-3NB68.tmp
• %Program Files%\KMSpico\cert\kmscertW10\Core\Core-Volume-GVLK-1-ul-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Excel\Excel_KMS_Client.RAC_Priv.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\SmallBusBasics\is-3MJE1.tmp
• %Program Files%\KMSpico\cert\kmscert2010\ProjectStd\is-86FHQ.tmp
• %Program Files%\KMSpico\cert\kmscertW7\Embedded\is-791FT.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Word\Word_KMS_Client.PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW6\Business\is-IUM3L.tmp
• %Program Files%\KMSpico\cert\kmscertW7\Professional\is-JR5VG.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Publisher\Publisher_KMS_Client.PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Excel\is-9GDN6.tmp
• %Program Files%\KMSpico\cert\kmscertW81\ServerStandard\is-JF2GE.tmp
• %Program Files%\KMSpico\cert\kmscertW8\CoreSingleLanguage\CoreSingleLanguage-Volume-GVLK-1-ul-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasics_KMS_Client.RAC_Priv.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\Standard\LicenseSetData._B13AFB38_CD79_4AE5_9F7F_EED058D750CA.PPDLIC.xrm-ms
• %Program Files%\KMSpico\is-IAGMG.tmp
• %Program Files%\KMSpico\cert\kmscert2016\OneNote\OneNoteVL_KMS_Client-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\Outlook\LicenseSetData._771C3AFA_50C5_443F_B151_FF2546D863A0.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_KMS_Client.PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\Word\is-BIHQ9.tmp
• %Program Files%\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasics_KMS_Client.RAC_Pub.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\SkypeforBusiness\SkypeforBusinessVL_KMS_Client-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Standard\Standard_KMS_Client.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Access\is-GFO0Q.tmp
• %Program Files%\KMSpico\cert\kmscertW8\Enterprise\is-V6EFV.tmp
• %Program Files%\KMSpico\unins000.exe
• %Program Files%\KMSpico\cert\kmscert2013\ProjectPro\LicenseSetData._4A5D124A_E620_44BA_B6FF_658961B33B9A.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\ProPlus\is-5LIDJ.tmp
• %Program Files%\KMSpico\sounds\inputfailed.mp3
• %Program Files%\KMSpico\cert\kmscert2010\Access\is-S75T2.tmp
• %Program Files%\KMSpico\cert\kmscert2010\ProjectStd\is-33680.tmp
• %Program Files%\KMSpico\cert\kmscertW8\CoreSingleLanguage\is-NRIMK.tmp
• %Program Files%\KMSpico\icons\Warning.png
• %Program Files%\KMSpico\cert\kmscert2013\Lync\LicenseSetData._1B9F11E3_C85C_4E1B_BB29_879AD2C909E3.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\ProjectStd\LicenseSetData._427A28D1_D17C_4ABF_B717_32C780BA6F07.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\ProPlus\LicenseSetData._B322DA9C_A2E2_4058_9E4E_F59A6970BD69.PPDLIC.xrm-ms
• %Program Files%\KMSpico\sounds\is-FE6QI.tmp
• %Program Files%\KMSpico\cert\kmscert2013\VisioStd\is-EGTNT.tmp
• %Program Files%\KMSpico\cert\kmscert2010\OneNote\is-DLUA0.tmp
• %Program Files%\KMSpico\cert\kmscert2010\ProPlus\ProPlus_KMS_Client.PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW6\Enterprise\is-RTVA2.tmp
• %Program Files%\KMSpico\cert\kmscert2013\OneNote\LicenseSetData._EFE1F3E6_AEA2_4144_A208_32AA872B6545.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\OneNote\LicenseSetData._EFE1F3E6_AEA2_4144_A208_32AA872B6545.PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Standard\StandardVLReg64.reg
• %Program Files%\KMSpico\cert\kmscertW7\Professional\Security-SPP-Component-SKU-Professional-VL-BYPASS-RAC-private.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\ProjectStd\is-FVM7K.tmp
• %Program Files%\KMSpico\cert\kmscertW7\Professional\is-5K5CB.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Outlook\is-3V7NU.tmp
• %Program Files%\KMSpico\cert\kmscertW7\Professional\is-9FJRK.tmp
• %User Temp%\is-CRIQ0.tmp\_isetup\_shfoldr.dll
• %Program Files%\KMSpico\cert\kmscert2013\ProjectPro\is-0IKF2.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Groove\is-V7MEA.tmp
• %Program Files%\KMSpico\cert\kmscert2016\ProjectPro\is-D2AI3.tmp
• %Program Files%\KMSpico\icons\is-9LSKE.tmp
• %Program Files%\KMSpico\cert\kmscert2013\Word\LicenseSetData._D9F5B1C6_5386_495A_88F9_9AD6B41AC9B3.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\OneNote\OneNoteVLReg32.reg
• %Program Files%\KMSpico\cert\kmscertW7\Embedded\Security-SPP-Component-SKU-Embedded-ul-phn.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW6\Enterprise\is-IKP1F.tmp
• %Program Files%\KMSpico\cert\kmscertW7\Embedded\Security-SPP-Component-SKU-Embedded-pl.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Visio\is-NHKF1.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Groove\Groove_KMS_Client.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW6\Enterprise\is-CKFGG.tmp
• %Program Files%\KMSpico\cert\kmscertW81\EmbeddedIndustry\EmbeddedIndustry-Volume-GVLK-1-ul-oob-rtm.xrm-ms
• %Program Files%\KMSpico\scripts\AddExceptions_Defender.cmd
• %Program Files%\KMSpico\cert\kmscert2010\Access\is-1IUAV.tmp
• %Program Files%\KMSpico\cert\kmscert2013\InfoPath\LicenseSetData._A30B8040_D68A_423F_B0B5_9CE292EA5A8F.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW6\BusinessN\is-MM3LC.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS1-ul-phn.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\PowerPoint\PowerPoint_KMS_Client.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Access\AccessVLReg32.reg
• %Program Files%\KMSpico\cert\kmscert2016\Word\WordVL_KMS_Client-ppd.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasics_KMS_Client.PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\PowerPoint\PowerPointVLReg64.reg
• %Program Files%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS1-pl.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Visio\is-21Q1G.tmp
• %Program Files%\KMSpico\cert\kmscert2013\is-FVCPH.tmp
• %Program Files%\KMSpico\cert\kmscertW7\Professional\Security-SPP-Component-SKU-Professional-ul-phn.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Outlook\is-5CL3U.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Word\is-12EM8.tmp
• %Program Files%\KMSpico\scripts\is-S5J41.tmp
• %Program Files%\KMSpico\cert\kmscert2013\is-D1VSQ.tmp
• %Program Files%\KMSpico\cert\kmscertW10\Enterprise\is-SKL4F.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Publisher\Publisher_KMS_Client.RAC_Priv.xrm-ms
• %Program Files%\KMSpico\Service_KMS.exe
• %Program Files%\KMSpico\cert\kmscert2010\Groove\is-KKP8Q.tmp
• %Program Files%\KMSpico\cert\kmscertW81\ProfessionalWMC\is-O387E.tmp
• %Program Files%\KMSpico\cert\kmscertW8\CoreN\CoreN-Volume-GVLK-1-ul-oob-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW7\Professional\is-IG38O.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Enterprise\is-QGSR4.tmp
• %Program Files%\KMSpico\cert\kmscert2016\is-HOV9F.tmp
• %Program Files%\KMSpico\cert\kmscert2016\Excel\is-NU4RS.tmp
• %Program Files%\KMSpico\cert\kmscert2016\Mondo\MondoVL_KMS_Client-ul.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\ProjectStd\is-9RF0J.tmp
• %Program Files%\KMSpico\cert\kmscert2010\InfoPath\is-E67FL.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Publisher\PublisherVLRegWOW.reg
• %Program Files%\KMSpico\cert\kmscertW8\ProfessionalN\is-RE2MB.tmp
• %Program Files%\KMSpico\cert\kmscert2016\Outlook\OutlookVL_KMS_Client-ppd.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\Standard\StandardVL_KMS_Client-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW7\Professional\Security-SPP-Component-SKU-Professional-VL-BYPASS-ul.xrm-ms
• %System%\is-RKPNL.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Outlook\OutlookVLRegWOW.reg
• %Program Files%\KMSpico\scripts\DisableSmartScreen.reg
• %Program Files%\KMSpico\scripts\EnableSmartScreen.reg
• %Program Files%\KMSpico\cert\kmscert2010\Word\is-QQBE5.tmp
• %Program Files%\KMSpico\icons\is-C2BT6.tmp
• %Program Files%\KMSpico\cert\kmscert2013\ProPlus\LicenseSetData._B322DA9C_A2E2_4058_9E4E_F59A6970BD69.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW81\EmbeddedIndustry\is-1Q57E.tmp
• %Program Files%\KMSpico\cert\kmscert2010\ProPlus\is-NKA40.tmp
• %Program Files%\KMSpico\cert\kmscert2013\OneNote\is-0CITB.tmp
• %Program Files%\KMSpico\cert\kmscert2013\InfoPath\is-A1N0U.tmp
• %Program Files%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS1-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW10\Professional\Professional-Volume-GVLK-1-ul-oob-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\Outlook\OutlookVL_KMS_Client-ul.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\PowerPoint\LicenseSetData._8C762649_97D1_4953_AD27_B7E2C25B972E.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS-pl.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-BYPASS-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW81\ServerDatacenter\ServerDatacenter-Volume-GVLK-1-ul-rtm.xrm-ms
• %Program Files%\KMSpico\icons\Question.png
• %Program Files%\KMSpico\cert\kmscert2010\SmallBusBasics\is-962RB.tmp
• %Program Files%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-BYPASS-RAC-public.xrm-ms
• %Program Files%\KMSpico\logs\Service_KMS.log
• %Program Files%\KMSpico\cert\kmscert2010\Outlook\is-7H242.tmp
• %Program Files%\KMSpico\KMSELDI.exe.config
• %Program Files%\KMSpico\sounds\diagnostic.mp3
• %Program Files%\KMSpico\cert\kmscertW6\BusinessN\is-6GT7E.tmp
• %Program Files%\KMSpico\cert\kmscertW8\Professional\is-9JDUK.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Publisher\is-JMJSO.tmp
• %Program Files%\KMSpico\cert\kmscert2016\Access\AccessVL_KMS_Client-ppd.xrm-ms
• %Program Files%\KMSpico\sounds\begin.mp3
• %Program Files%\KMSpico\cert\kmscert2013\ProjectStd\LicenseSetData._427A28D1_D17C_4ABF_B717_32C780BA6F07.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\Publisher\LicenseSetData._00C79FF1_6850_443D_BF61_71CDE0DE305F.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Visio\is-06I3K.tmp
• %Program Files%\KMSpico\cert\kmscert2013\pkeyconfig-office.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Outlook\is-4OOUD.tmp
• %Program Files%\KMSpico\scripts\Silent.cmd
• %Program Files%\KMSpico\cert\kmscert2010\OneNote\is-KRGDR.tmp
• %Program Files%\KMSpico\cert\kmscert2016\ProPlus\is-VP9D3.tmp
• %Program Files%\KMSpico\cert\kmscertW6\pkeyconfig.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW8\ProfessionalN\is-HCAA4.tmp
• %Program Files%\KMSpico\cert\kmscert2016\Word\WordVL_KMS_Client-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\client-issuance-root-bridge-test.xrm-ms
• %Program Files%\KMSpico\sounds\complete.mp3
• %Program Files%\KMSpico\cert\kmscert2016\OneNote\is-7BGG5.tmp
• %Program Files%\KMSpico\cert\kmscertW7\Professional\Security-SPP-Component-SKU-Professional-VL-BYPASS-RAC-public.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Excel\ExcelVLRegWOW.reg
• %Program Files%\KMSpico\cert\kmscertW81\ProfessionalWMC\ProfessionalWMC-Volume-GVLK-1-ul-oob-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Visio\is-NB6L7.tmp
• %Program Files%\KMSpico\cert\kmscertW8\ProfessionalWMC\ProfessionalWMC-Volume-GVLK-1-ul-oob-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\Outlook\is-K4356.tmp
• %Program Files%\KMSpico\cert\kmscert2013\Licenses.sl.ISSUANCE.CLIENT_UL.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW10\Professional\Professional-Volume-GVLK-1-ul-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW10\EnterpriseS\is-VFVL9.tmp
• %Program Files%\KMSpico\cert\kmscert2013\is-311NL.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Business\is-Q9515.tmp
• %Program Files%\KMSpico\cert\kmscert2016\Publisher\PublisherVL_KMS_Client-ul.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\SmallBusBasics\is-P2ISL.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Business\is-J4A4R.tmp
• %Program Files%\KMSpico\cert\kmscertW7\Professional\is-V11LU.tmp
• %Program Files%\KMSpico\scripts\EnableSmartScreen.cmd
• %Program Files%\KMSpico\cert\kmscert2010\Visio\VisioPrem_KMS_Client.RAC_Priv.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\ProjectStd\is-BDPM7.tmp
• %Program Files%\KMSpico\cert\kmscertW81\ServerStandard\is-BO9GR.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Business\is-S34J0.tmp
• %Program Files%\KMSpico\cert\kmscertW81\ServerDatacenter\ServerDatacenter-Volume-GVLK-1-ul-oob-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\PowerPoint\is-IRCQE.tmp
• %Program Files%\KMSpico\cert\kmscert2010\InfoPath\is-JFKQU.tmp
• %Program Files%\KMSpico\cert\kmscert2013\Standard\LicenseSetData._B13AFB38_CD79_4AE5_9F7F_EED058D750CA.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\is-EG81I.tmp
• %Program Files%\KMSpico\cert\kmscert2016\ProjectStd\is-J4JPB.tmp
• %Program Files%\KMSpico\cert\kmscertW10\EnterpriseS\is-53COQ.tmp
• %Program Files%\KMSpico\driver\OpenVPN.cer
• %Program Files%\KMSpico\cert\kmscert2016\ProPlus\ProPlusVL_KMS_Client-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Excel\is-GF3OE.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Outlook\Outlook_KMS_Client.PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\ProPlus\ProPlus_KMS_Client.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\ProjectStd\is-BAMV0.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Visio\VisioPrem_KMS_Client.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW6\Enterprise\is-SJO0V.tmp
• %Program Files%\KMSpico\cert\kmscertW7\Professional\Security-SPP-Component-SKU-Professional-VL-BYPASS-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS-pl.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\OneNote\OneNote_KMS_Client.RAC_Pub.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\VisioStd\is-9U9TN.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-KMS-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW81\ProfessionalWMC\is-FRT62.tmp
• %Program Files%\KMSpico\cert\kmscert2016\OneNote\OneNoteVL_KMS_Client-ppd.xrm-ms
• %Program Files%\KMSpico\scripts\is-JP263.tmp
• %Program Files%\KMSpico\DevComponents.DotNetBar2.dll
• %Program Files%\KMSpico\cert\kmscert2010\Word\Word_KMS_Client.RAC_Pub.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Publisher\Publisher_KMS_Client.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\VisioStd\LicenseSetData._AC4EFAF0_F81F_4F61_BDF7_EA32B02AB117.PPDLIC.xrm-ms
• %Program Files%\KMSpico\is-QP0TD.tmp
• %Program Files%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\Word\is-U1M89.tmp
• %Program Files%\KMSpico\cert\kmscertW81\pkeyconfig.xrm-ms
• %Program Files%\KMSpico\sounds\enterauthorizationcode.mp3
• %Program Files%\KMSpico\cert\kmscert2010\Outlook\Outlook_KMS_Client.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\InfoPath\InfoPath_KMS_Client.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Visio\VisioStd_KMS_Client.PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\ProjectPro\is-45NLF.tmp
• %Program Files%\KMSpico\cert\kmscert2016\Standard\is-95T15.tmp
• %Program Files%\KMSpico\cert\kmscertW8\CoreN\is-227C6.tmp
• %Program Files%\KMSpico\cert\kmscertW8\Core\Core-Volume-GVLK-1-ul-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Standard\is-C025R.tmp
• %Program Files%\KMSpico\cert\kmscert2016\OneNote\is-N1EJM.tmp
• %Program Files%\KMSpico\sounds\inputok.mp3
• %Program Files%\KMSpico\cert\kmscert2016\is-M6DUK.tmp
• %Program Files%\KMSpico\icons\Error.png
• %Program Files%\KMSpico\cert\kmscert2013\Standard\is-LDETC.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Access\is-I1EH0.tmp
• %Program Files%\KMSpico\cert\kmscert2010\PowerPoint\PowerPoint_KMS_Client.RAC_Pub.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\ProjectPro\ProjectPro_KMS_Client.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\Outlook\LicenseSetData._771C3AFA_50C5_443F_B151_FF2546D863A0.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\OneNote\OneNoteVL_KMS_Client-ul.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW8\pkeyconfig.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW8\Core\is-4763A.tmp
• %Program Files%\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasics_KMS_Client.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\VisioStd\LicenseSetData._AC4EFAF0_F81F_4F61_BDF7_EA32B02AB117.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasicsVLRegWOW.reg
• %Program Files%\KMSpico\cert\kmscert2010\Outlook\Outlook_KMS_Client.RAC_Pub.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\Licenses.sl.ISSUANCE.CLIENT_BRIDGE_OFFICE.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-KMS1-ul-phn.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\PowerPoint\LicenseSetData._8C762649_97D1_4953_AD27_B7E2C25B972E.PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\Publisher\is-MJKLM.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Visio\VisioVLReg32.reg
• %Program Files%\KMSpico\cert\kmscert2010\Visio\VisioVLRegWOW.reg
• %Program Files%\KMSpico\scripts\Install_Task.cmd
• %Program Files%\KMSpico\cert\kmscertW10\Enterprise\Enterprise-Volume-GVLK-1-ul-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Visio\VisioPro_KMS_Client.RAC_Priv.xrm-ms
• %Program Files%\KMSpico\sounds\is-7UKCO.tmp
• %Program Files%\KMSpico\cert\kmscertW8\ProfessionalN\ProfessionalN-Volume-GVLK-1-ul-oob-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW10\EnterpriseS\EnterpriseS-Volume-GVLK-2-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\PowerPoint\is-NSD96.tmp
• %Program Files%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-ul-phn.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW7\Professional\is-BG21G.tmp
• %Program Files%\KMSpico\cert\kmscert2010\ProjectPro\ProjectPro_KMS_Client.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW8\CoreN\CoreN-Volume-GVLK-1-ul-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Groove\is-GRFLR.tmp
• %Program Files%\KMSpico\sounds\verified.mp3
• %Program Files%\KMSpico\cert\kmscert2013\Outlook\is-TOHJ1.tmp
• %Program Files%\KMSpico\cert\kmscert2013\Word\is-L5LG4.tmp
• %Program Files%\KMSpico\cert\kmscertW81\Enterprise\Enterprise-Volume-GVLK-1-ul-oob-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\ProjectPro\ProjectProVL_KMS_Client-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\InfoPath\is-7SO8B.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Excel\Excel_KMS_Client.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW8\CoreN\is-CMDFS.tmp
• %Program Files%\KMSpico\cert\kmscert2013\Lync\LicenseSetData._1B9F11E3_C85C_4E1B_BB29_879AD2C909E3.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\PowerPoint\PowerPointVL_KMS_Client-ppd.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Visio\VisioStd_KMS_Client.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Visio\is-7ENNQ.tmp
• %Program Files%\KMSpico\cert\kmscertW10\Core\is-UR1A7.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Standard\StandardVLReg32.reg
• %Program Files%\KMSpico\cert\kmscert2013\Outlook\LicenseSetData._771C3AFA_50C5_443F_B151_FF2546D863A0.PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW81\Professional\is-LA8UK.tmp
• %Program Files%\KMSpico\cert\kmscert2016\VisioStd\VisioStdVL_KMS_Client-ppd.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-BYPASS-RAC-private.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Standard\Standard_KMS_Client.RAC_Priv.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Visio\VisioStd_KMS_Client.RAC_Pub.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\OneNote\is-2U0KU.tmp
• %Program Files%\KMSpico\cert\kmscert2013\Standard\is-BCPPP.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Business\is-U9HOF.tmp
• %Program Files%\KMSpico\cert\kmscert2016\client-issuance-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Excel\Excel_KMS_Client.PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\ProPlus\is-E1EVF.tmp
• %Program Files%\KMSpico\cert\kmscert2013\Standard\is-2PFVB.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Standard\is-K305B.tmp
• %Program Files%\KMSpico\is-8M5IT.tmp
• %Program Files%\KMSpico\cert\kmscert2016\PowerPoint\is-82FM7.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Publisher\is-JNE5C.tmp
• %Program Files%\KMSpico\cert\kmscert2016\VisioStd\is-5JLVL.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-KMS1-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW8\ProfessionalWMC\ProfessionalWMC-Volume-GVLK-1-ul-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\Outlook\is-DSOFK.tmp
• %Program Files%\KMSpico\cert\kmscert2016\Excel\ExcelVL_KMS_Client-ppd.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW81\ProfessionalWMC\ProfessionalWMC-Volume-GVLK-1-ul-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\Excel\LicenseSetData._F7461D52_7C2B_43B2_8744_EA958E0BD09A.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Groove\GrooveVLReg32.reg
• %Program Files%\KMSpico\cert\kmscert2010\Publisher\PublisherVLReg64.reg
• %Program Files%\KMSpico\cert\kmscert2010\InfoPath\is-65CF9.tmp
• %Program Files%\KMSpico\cert\kmscert2016\VisioStd\VisioStdVL_KMS_Client-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\SkypeforBusiness\is-93LH4.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-BYPASS-ul.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\OneNote\is-ROAFS.tmp
• %Program Files%\KMSpico\cert\kmscert2016\ProjectStd\ProjectStdVL_KMS_Client-ppd.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\Excel\is-OAKJR.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Outlook\is-6I2IO.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Visio\is-9IRP1.tmp
• %Program Files%\KMSpico\driver\is-L51CH.tmp
• %Program Files%\KMSpico\cert\kmscert2016\Mondo\MondoVL_KMS_Client-ppd.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\Access\is-IPHKN.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Outlook\Outlook_KMS_Client.RAC_Priv.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\PowerPoint\is-D4F09.tmp
• %Program Files%\KMSpico\cert\kmscert2016\SkypeforBusiness\is-5MELG.tmp
• %Program Files%\KMSpico\cert\kmscertW10\EnterpriseS\is-OJR6Q.tmp
• %Program Files%\KMSpico\scripts\is-E3EVR.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Word\WordVLReg32.reg
• %Program Files%\KMSpico\cert\kmscert2016\Publisher\is-S5872.tmp
• %Program Files%\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasicsVLReg32.reg
• %Program Files%\KMSpico\cert\kmscert2010\OneNote\is-QJ3PG.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Publisher\is-7Q91T.tmp
• %Program Files%\KMSpico\cert\kmscertW7\Professional\is-8RUSF.tmp
• %Program Files%\KMSpico\scripts\is-NIB4H.tmp
• %Program Files%\KMSpico\cert\kmscert2010\ProjectStd\is-1CQG8.tmp
• %Program Files%\KMSpico\cert\kmscert2016\client-issuance-ul.xrm-ms
• %Program Files%\KMSpico\driver\is-GRN7I.tmp
• %Program Files%\KMSpico\cert\kmscert2010\ProjectPro\is-M8DMT.tmp
• %Program Files%\KMSpico\cert\kmscert2013\Outlook\is-GN68R.tmp
• %Program Files%\KMSpico\cert\kmscertW8\EnterpriseN\is-3G6TL.tmp
• %Program Files%\KMSpico\cert\kmscert2013\ProjectStd\is-LQDED.tmp
• %Program Files%\KMSpico\cert\kmscert2013\Word\is-V29QR.tmp
• %Program Files%\KMSpico\sounds\warning.mp3
• %Program Files%\KMSpico\cert\kmscert2016\Standard\StandardVL_KMS_Client-ppd.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\ProjectPro\ProjectProVLRegWOW.reg
• %Program Files%\KMSpico\cert\kmscert2010\Groove\GrooveVLReg64.reg
• %Program Files%\KMSpico\cert\kmscert2013\VisioPro\LicenseSetData._E13AC10E_75D0_4AFF_A0CD_764982CF541C.PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\VisioPro\VisioProVL_KMS_Client-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Access\Access_KMS_Client.PL.xrm-ms
• %Program Files%\KMSpico\icons\Information.png
• %Program Files%\KMSpico\cert\kmscert2010\SmallBusBasics\is-B52R3.tmp
• %Program Files%\KMSpico\cert\kmscert2013\VisioPro\is-FG2U5.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Visio\is-4QJU7.tmp
• %Program Files%\KMSpico\cert\kmscertW7\Embedded\is-L1O7N.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Enterprise\is-DUGPA.tmp
• %Program Files%\KMSpico\cert\kmscert2013\Lync\is-B4LM4.tmp
• %Program Files%\KMSpico\cert\kmscertW6\BusinessN\is-CR7HA.tmp
• %Program Files%\KMSpico\cert\kmscertW81\CoreConnectedSingleLanguage\CoreConnectedSingleLanguage-Volume-GVLK-1-ul-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW7\Embedded\is-AFP81.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Visio\is-KRJ7C.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW10\Education\Education-Volume-GVLK-1-ul-oob-rtm.xrm-ms
• %Program Files%\KMSpico\Vestris.ResourceLib.dll
• %Program Files%\KMSpico\cert\kmscert2010\InfoPath\InfoPath_KMS_Client.PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Visio\is-VO3CT.tmp
• %Program Files%\KMSpico\driver\is-R1TPI.tmp
• %Program Files%\KMSpico\cert\kmscertW8\CoreSingleLanguage\CoreSingleLanguage-Volume-GVLK-1-ul-oob-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW8\Professional\Professional-Volume-GVLK-1-ul-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Standard\is-5E5QE.tmp
• %Program Files%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS1-ul-phn.xrm-ms
• %Program Files%\KMSpico\sounds\transfer.mp3
• %Program Files%\KMSpico\cert\kmscert2010\PowerPoint\PowerPoint_KMS_Client.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW7\Embedded\is-77K2U.tmp
• %Program Files%\KMSpico\cert\kmscert2010\InfoPath\is-GMMAR.tmp
• %Program Files%\KMSpico\cert\kmscert2016\VisioPro\VisioProVL_KMS_Client-ppd.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Standard\is-H88UV.tmp
• %Program Files%\KMSpico\cert\kmscertW81\Core\is-S9TSO.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Enterprise\is-8I6IT.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Publisher\Publisher_KMS_Client.RAC_Pub.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Standard\StandardVLRegWOW.reg
• %Program Files%\KMSpico\cert\kmscertW8\ProfessionalWMC\is-DAA4K.tmp
• %Program Files%\KMSpico\cert\kmscert2013\ProPlus\is-MM7NV.tmp
• %Program Files%\KMSpico\cert\kmscert2016\PowerPoint\PowerPointVL_KMS_Client-ul-oob.xrm-ms
• %All Users Profile%\Microsoft\Windows\Start Menu\Programs\KMSpico\Log KMSpico.lnk
• %Program Files%\KMSpico\cert\kmscert2010\ProPlus\ProPlusVLReg32.reg
• %Program Files%\KMSpico\sounds\is-QGHT2.tmp
• %Program Files%\KMSpico\cert\kmscert2013\VisioPro\visio.reg
• %Program Files%\KMSpico\cert\kmscert2016\ProPlus\is-DEER3.tmp
• %Program Files%\KMSpico\cert\kmscertW7\Embedded\is-E10EB.tmp
• %Program Files%\KMSpico\cert\kmscert2013\InfoPath\LicenseSetData._A30B8040_D68A_423F_B0B5_9CE292EA5A8F.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Access\Access_KMS_Client.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-ul-phn.xrm-ms
• %Program Files%\KMSpico\AutoPico.exe
• %Program Files%\KMSpico\scripts\is-M8D09.tmp
• %Program Files%\KMSpico\cert\kmscertW6\BusinessN\is-3TSS1.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\Access\AccessVL_KMS_Client_OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW81\Enterprise\is-UFKQ2.tmp
• %Program Files%\KMSpico\cert\kmscert2010\ProjectStd\ProjectStdVLRegWOW.reg
• %Program Files%\KMSpico\cert\kmscert2010\Groove\Groove_KMS_Client.RAC_Pub.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\ProPlus\ProPlusVLReg64.reg
• %Program Files%\KMSpico\cert\kmscert2016\is-GECFP.tmp
• %Program Files%\KMSpico\cert\kmscert2010\OneNote\OneNote_KMS_Client.RAC_Priv.xrm-ms
• %Program Files%\KMSpico\scripts\is-H1MV9.tmp
• %Program Files%\KMSpico\cert\kmscert2010\ProPlus\is-B69C0.tmp
• %Program Files%\KMSpico\logs\AutoPico.log
• %Program Files%\KMSpico\cert\kmscert2016\Publisher\is-2A5GC.tmp
• %Program Files%\KMSpico\cert\kmscertW8\ProfessionalWMC\is-05NVB.tmp
• %Program Files%\KMSpico\sounds\is-G2ROB.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS-ul-phn.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Standard\Standard_KMS_Client.RAC_Pub.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\ProPlus\is-O02B1.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Groove\GrooveVLRegWOW.reg
• %Program Files%\KMSpico\cert\kmscert2013\OneNote\LicenseSetData._EFE1F3E6_AEA2_4144_A208_32AA872B6545.OOB.xrm-ms
• %Program Files%\KMSpico\KMSELDI.exe
• %Program Files%\KMSpico\cert\kmscertW6\BusinessN\is-LR24O.tmp
• %Program Files%\KMSpico\cert\kmscert2013\ProjectPro\is-O5S3G.tmp
• %Program Files%\KMSpico\cert\kmscert2013\VisioPro\is-T21UP.tmp
• %Program Files%\KMSpico\cert\kmscertW8\Enterprise\Enterprise-Volume-GVLK-1-ul-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\Excel\is-65B0M.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Excel\is-AKQSS.tmp
• %Program Files%\KMSpico\cert\kmscertW8\Enterprise\is-N5RQQ.tmp
• %Program Files%\KMSpico\cert\kmscert2016\Standard\StandardVL_KMS_Client-ul.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Excel\Excel_KMS_Client.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW6\Enterprise\is-LC1HA.tmp
• %Program Files%\KMSpico\cert\kmscert2016\Access\AccessVL_KMS_Client-ul.xrm-ms
• %Program Files%\KMSpico\driver\certELDI.pfx
• %Program Files%\KMSpico\cert\kmscertW10\Core\Core-Volume-GVLK-1-ul-oob-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\Access\is-IRFET.tmp
• %Program Files%\KMSpico\cert\kmscert2016\is-F7BJH.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Business\is-TMPKU.tmp
• %Program Files%\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasicsVLReg64.reg
• %Program Files%\KMSpico\cert\kmscert2013\is-M5RQV.tmp
• %Program Files%\KMSpico\icons\is-H4AOB.tmp
• %Program Files%\KMSpico\scripts\UnInstall_Service.cmd
• %Program Files%\KMSpico\cert\kmscert2010\InfoPath\InfoPath_KMS_Client.RAC_Priv.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-BYPASS-RAC-private.xrm-ms
• %Program Files%\KMSpico\logs\is-1C22N.tmp
• %Program Files%\KMSpico\cert\kmscert2010\ProjectPro\is-C2JCU.tmp
• %Program Files%\KMSpico\cert\kmscertW10\is-ASL3K.tmp
• %Program Files%\KMSpico\cert\kmscert2016\Mondo\is-AH8LV.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Groove\is-K8A0H.tmp
• %Program Files%\KMSpico\cert\kmscert2010\SmallBusBasics\is-UBLD0.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Business\is-EMTKR.tmp
• %All Users Profile%\Microsoft\Windows\Start Menu\Programs\KMSpico\KMSpico.lnk
• %Program Files%\KMSpico\cert\kmscert2013\Access\AccessVL_KMS_Client_PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\PowerPoint\PowerPointVL_KMS_Client-ul.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW6\BusinessN\is-RNOFQ.tmp
• %Program Files%\KMSpico\cert\kmscert2010\ProPlus\ProPlus_KMS_Client.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\ProjectPro\ProjectPro_KMS_Client.RAC_Priv.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\ProjectStd\is-0LJ40.tmp
• %Program Files%\KMSpico\cert\kmscert2016\Mondo\is-ADFJN.tmp
• %Program Files%\KMSpico\cert\kmscertW8\CoreSingleLanguage\is-SILTK.tmp
• %Program Files%\KMSpico\cert\kmscertW10\EnterpriseS\EnterpriseS-Volume-GVLK-1-ul-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Outlook\Outlook_KMS_Client.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Word\is-0S1BS.tmp
• %Program Files%\KMSpico\cert\kmscertW81\Professional\Professional-Volume-GVLK-1-ul-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\SkypeforBusiness\SkypeforBusinessVL_KMS_Client-ul.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-BYPASS-ul.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Excel\is-JJI9O.tmp
• %Program Files%\KMSpico\cert\kmscert2010\ProPlus\ProPlus_KMS_Client.RAC_Priv.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Excel\is-NABH5.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Publisher\is-FP101.tmp
• %Program Files%\KMSpico\driver\UnInstallDriver.cmd
• %Program Files%\KMSpico\cert\kmscert2010\Visio\is-MAG17.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Visio\VisioStd_KMS_Client.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW6\Business\is-6JRLF.tmp
• %Program Files%\KMSpico\cert\kmscert2016\ProjectPro\ProjectProVL_KMS_Client-ppd.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\Access\is-BK2V2.tmp
• %Program Files%\KMSpico\cert\kmscert2010\ProjectStd\is-AVSRK.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Visio\VisioPrem_KMS_Client.PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW81\Enterprise\is-JJCTI.tmp
• %Program Files%\KMSpico\cert\kmscertW10\pkeyconfig.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Visio\is-4N7P8.tmp
• %Program Files%\KMSpico\cert\kmscert2016\Publisher\PublisherVL_KMS_Client-ppd.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Visio\VisioPrem_KMS_Client.RAC_Pub.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\is-GB0O2.tmp
• %Program Files%\KMSpico\cert\kmscert2010\ProPlus\is-EGS35.tmp
• %Program Files%\KMSpico\cert\kmscert2013\ProPlus\is-8CJ5P.tmp
• %Program Files%\KMSpico\cert\kmscert2010\OneNote\is-F47VL.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Word\Word_KMS_Client.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Visio\VisioPro_KMS_Client.RAC_Pub.xrm-ms
• %Program Files%\KMSpico\scripts\is-OBUGJ.tmp
• %Program Files%\KMSpico\cert\kmscert2016\ProjectPro\is-HR1A3.tmp
• %Program Files%\KMSpico\cert\kmscertW10\Education\is-PTT78.tmp
• %Program Files%\KMSpico\cert\kmscert2010\OneNote\OneNoteVLRegWOW.reg
• %Program Files%\KMSpico\cert\kmscertW6\Enterprise\is-AGVPJ.tmp
• %Program Files%\KMSpico\cert\kmscertW81\CoreConnectedSingleLanguage\is-HSGCJ.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Groove\is-P7PFC.tmp
• %Program Files%\KMSpico\cert\kmscert2010\OneNote\OneNote_KMS_Client.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\InfoPath\InfoPathVLRegWOW.reg
• %Program Files%\KMSpico\cert\kmscert2010\Word\WordVLRegWOW.reg
• %Program Files%\KMSpico\cert\kmscertW7\Professional\is-HG0O8.tmp
• %Program Files%\KMSpico\cert\kmscert2016\VisioStd\VisioStdVL_KMS_Client-ul.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW6\Enterprise\is-G3RKO.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS1-pl.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\SmallBusBasics\is-GN7QK.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Enterprise\is-MJQFH.tmp
• %Program Files%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-BYPASS-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Publisher\is-GDTAK.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Business\is-20FF8.tmp
• %Program Files%\KMSpico\cert\kmscert2016\Access\AccessVL_KMS_Client-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW6\BusinessN\is-9VJUL.tmp
• %Program Files%\KMSpico\cert\kmscert2013\Licenses.sl.ISSUANCE.CLIENT_ROOT.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-KMS-pl.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\InfoPath\is-CGKBP.tmp
• %Program Files%\KMSpico\cert\kmscert2016\VisioPro\is-1KTL8.tmp
• %Program Files%\KMSpico\logs\KMSELDI.log
• %Program Files%\KMSpico\scripts\AddExceptionsWD.reg
• %Program Files%\KMSpico\cert\kmscert2010\Word\is-G4UV4.tmp
• %Program Files%\KMSpico\cert\kmscert2016\is-STC09.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Visio\VisioPrem_KMS_Client.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Publisher\is-D9GVC.tmp
• %Program Files%\KMSpico\cert\kmscertW7\Professional\is-BM9V2.tmp
• %Program Files%\KMSpico\cert\kmscert2013\Publisher\LicenseSetData._00C79FF1_6850_443D_BF61_71CDE0DE305F.PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2016\Outlook\is-RRETN.tmp
• %Program Files%\KMSpico\cert\kmscert2013\VisioStd\LicenseSetData._AC4EFAF0_F81F_4F61_BDF7_EA32B02AB117.OOB.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Outlook\is-AADSI.tmp
• %Program Files%\KMSpico\driver\tap-windows-9.21.0.exe
• %Program Files%\KMSpico\cert\kmscert2013\ProjectPro\LicenseSetData._4A5D124A_E620_44BA_B6FF_658961B33B9A.PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW81\Core\Core-Volume-GVLK-1-ul-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\PowerPoint\is-889L4.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Excel\is-2T9OI.tmp
• %Program Files%\KMSpico\cert\kmscert2010\ProPlus\is-0GL5C.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Standard\is-BI3VM.tmp
• %Program Files%\KMSpico\logs\is-BS22P.tmp
• %Program Files%\KMSpico\cert\kmscertW81\CoreConnectedSingleLanguage\CoreConnectedSingleLanguage-Volume-GVLK-1-ul-oob-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\PowerPoint\is-38AD6.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Access\AccessVLReg64.reg
• %Program Files%\KMSpico\cert\kmscertW8\Professional\Professional-Volume-GVLK-1-ul-oob-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Standard\Standard_KMS_Client.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasics_KMS_Client.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\ProjectPro\ProjectPro_KMS_Client.PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\PowerPoint\PowerPointVLReg32.reg
• %Program Files%\KMSpico\cert\kmscertW8\is-31H9K.tmp
• %Program Files%\KMSpico\scripts\is-C5CUB.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Access\Access_KMS_Client.RAC_Priv.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\PowerPoint\PowerPoint_KMS_Client.PPDLIC.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Visio\is-B71AL.tmp
• %Program Files%\KMSpico\cert\kmscert2010\ProPlus\is-TS0AD.tmp
• %Program Files%\KMSpico\cert\kmscert2016\ProPlus\is-J1BL4.tmp
• %Program Files%\KMSpico\scripts\is-HRSQT.tmp
• %Program Files%\KMSpico\cert\kmscertW10\EnterpriseS\is-K0JM2.tmp
• %Program Files%\KMSpico\sounds\is-87S8R.tmp
• %Program Files%\KMSpico\cert\kmscert2010\OneNote\OneNote_KMS_Client.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW81\EmbeddedIndustry\is-NLENU.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Visio\is-TCB10.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Enterprise\is-0PNRN.tmp
• %Program Files%\KMSpico\cert\kmscertW8\Professional\is-N7SLU.tmp
• %Program Files%\KMSpico\cert\kmscertW8\Core\is-L3AKC.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Groove\is-J65HC.tmp
• %Program Files%\KMSpico\sounds\is-5KG7Q.tmp
• %Program Files%\KMSpico\cert\kmscert2010\Access\AccessVLRegWOW.reg
• %Program Files%\KMSpico\cert\kmscert2010\OneNote\OneNoteVLReg64.reg
• %Program Files%\KMSpico\cert\kmscert2010\Visio\is-CKBRS.tmp
• %Program Files%\KMSpico\cert\kmscert2010\PowerPoint\is-788AS.tmp
• %Program Files%\KMSpico\cert\kmscert2010\InfoPath\is-OB9U7.tmp
• %Program Files%\KMSpico\sounds\is-KAMS0.tmp
• %Program Files%\KMSpico\cert\kmscert2016\ProjectStd\ProjectStdVL_KMS_Client-ul-oob.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Access\is-PT1SF.tmp
• %Program Files%\KMSpico\cert\kmscert2010\ProjectPro\is-MI06R.tmp
• %Program Files%\KMSpico\cert\kmscert2016\PowerPoint\is-N4HI0.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-KMS-ul-phn.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2013\PowerPoint\is-KI3CK.tmp
• %Program Files%\KMSpico\cert\kmscertW81\EmbeddedIndustry\EmbeddedIndustry-Volume-GVLK-1-ul-rtm.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Access\Access_KMS_Client.PPDLIC.xrm-ms
• %All Users Profile%\Microsoft\Windows\Start Menu\Programs\KMSpico\AutoPico.lnk
• %Program Files%\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_KMS_Client.RAC_Priv.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\Visio\VisioPro_KMS_Client.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\PowerPoint\is-8JJ58.tmp
• %Program Files%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-BYPASS-ul.xrm-ms
• %Program Files%\KMSpico\cert\kmscert2010\ProjectPro\is-RNHAU.tmp
• %Program Files%\KMSpico\cert\kmscert2010\ProjectPro\is-BVKHU.tmp
• %Program Files%\KMSpico\cert\kmscert2013\Excel\is-O99C4.tmp
• %Program Files%\KMSpico\cert\kmscert2013\VisioPro\LicenseSetData._E13AC10E_75D0_4AFF_A0CD_764982CF541C.PL.xrm-ms
• %Program Files%\KMSpico\cert\kmscertW8\EnterpriseN\is-2NTA1.tmp
• %Program Files%\KMSpico\cert\kmscertW81\ServerDatacenter\is-OO4RJ.tmp
• %Program Files%\KMSpico\sounds\is-40S87.tmp
• %Program Files%\KMSpico\icons\is-QP9TA.tmp
• %Program Files%\KMSpico\cert\kmscertW81\Core\Core-Volume-GVLK-1-ul-oob-rtm.xrm-ms

(註：%Program Files%フォルダは、デフォルトのプログラムファイルフォルダです。Windows 2000、Server 2003、XP（32-bit）,Vista（32-bit）、7（32-bit）、8（32-bit）の場合、通常 "C:\Program Files"です。また、Windows XP（64-bit）、Vista（64-bit）、7（64-bit）、8（64-bit）の場合、通常 "C:\Program Files（x86）" です。. %Windows%フォルダは、Windowsが利用するフォルダで、いずれのオペレーティングシステム(OS)でも通常、"C:\Windows" です。.. %System%フォルダは、システムフォルダで、いずれのオペレーティングシステム(OS)でも通常、"C:\Windows\System32" です。.. %User Temp%フォルダは、現在ログオンしているユーザの一時フォルダです。Windows 2000、XP、Server 2003の場合、通常 "C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"です。また、Windows Vista、7、8の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。. %All Users Profile%フォルダは、ユーザの共通プロファイルフォルダです。Windows 2000、XP、Server 2003の場合、通常 "C:\Documents and Settings\All Users” です。また、Windows Vista、7、8の場合、通常 "C:\ProgramData” です。)

その他

プログラムは、以下の不正なWebサイトにアクセスします。

• http://ctldl.{BLOCKED}supdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?88c33a6c1de55865
• http://ctldl.{BLOCKED}supdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?083167ae07765153
• http://1.{BLOCKED}l.ntp.org

このウイルス情報は、自動解析システムにより作成されました。