マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Trojan.MulDrop8.26872

Added to the Dr.Web virus database: 2018-06-19

Virus description added:

Technical Information

To ensure autorun and distribution:
Creates the following services:
  • [<HKLM>\SYSTEM\ControlSet001\Services\Service KMSELDI] 'Start' = '00000002'
  • [<HKLM>\SYSTEM\ControlSet001\Services\Service KMSELDI] 'ImagePath' = '%ProgramFiles%\KMSpico\Service_KMS.exe'
Malicious functions:
To bypass firewall, removes or modifies the following registry keys:
  • [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%ProgramFiles%\KMSpico\KMSELDI.exe' = '%ProgramFiles%\KMSpico\KMSELDI....
  • [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%ProgramFiles%\KMSpico\AutoPico.exe' = '%ProgramFiles%\KMSpico\AutoPic...
Modifies file system:
Creates the following files:
  • %TEMP%\aut1.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-A52B1.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-JRPVP.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-NUTLI.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\is-B8NFC.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW10\Professional\is-A701P.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW10\Professional\is-N7K1N.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW10\EnterpriseS\is-7QV7B.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW10\EnterpriseS\is-UKA8B.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW10\EnterpriseS\is-E27G6.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-6FPSK.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW10\EnterpriseS\is-RUNI0.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW10\Enterprise\is-92OSO.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW10\Education\is-QTUQF.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW10\Education\is-I5TNR.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW10\Core\is-PA34V.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW10\Core\is-3ELLR.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW10\is-8LR8S.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Word\is-AESEH.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Word\is-F4OHA.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Word\is-N78GU.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW10\Enterprise\is-PNAID.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-FKSIP.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-M1IOT.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-50LBM.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-SVH0B.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-N3USV.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-LVU2V.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-9H0ND.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-3VSC5.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-6IFV5.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-K8Q76.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-L14SR.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-MFP2K.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-3NJJE.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-I7HI8.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-LACQ2.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-U1Q12.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-2IV64.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-3AJJC.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-HMD59.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-K61ON.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-V9B7F.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-UTGDR.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-4JQOP.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-6MCEQ.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\VisioStd\is-7S37M.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Word\is-C93Q4.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\VisioStd\is-4V05A.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\VisioPro\is-07OV6.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Outlook\is-SUPFR.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\OneNote\is-2DE9J.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\OneNote\is-KCVDP.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\OneNote\is-9T2I9.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Mondo\is-J75C7.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Mondo\is-H2272.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Mondo\is-5532M.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Excel\is-PPOVR.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Excel\is-HT2LU.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Outlook\is-O3TNB.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Excel\is-RQ1GQ.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Access\is-QB0KA.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Access\is-VTM47.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\is-BD552.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\is-MSRT2.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\is-I107U.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\is-6EP2B.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\is-K7A63.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\is-K5I93.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\is-LP7MU.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Access\is-FF9A1.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Outlook\is-8LO63.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\PowerPoint\is-9OUU4.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\PowerPoint\is-BHKTH.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\VisioPro\is-84G75.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\VisioPro\is-QB5VD.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Standard\is-BD0K9.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Standard\is-ABO5T.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Standard\is-N8GRG.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\SkypeforBusiness\is-SOLK2.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\SkypeforBusiness\is-14H3E.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\SkypeforBusiness\is-DGAUB.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Publisher\is-PKASV.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Publisher\is-NIREI.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\Publisher\is-4LTTA.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\ProPlus\is-IIJLN.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\ProPlus\is-4CT7R.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\ProPlus\is-S62E4.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectStd\is-OK188.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectStd\is-JQSDA.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectStd\is-9V1SC.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectPro\is-IFE61.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectPro\is-B7DED.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectPro\is-J50QB.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\PowerPoint\is-H7FUP.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2016\VisioStd\is-J8ODM.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Word\is-H1JFI.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-UNPNF.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\is-IUBU9.tmp
  • %ProgramFiles%\KMSpico\scripts\is-VLK5D.tmp
  • %ProgramFiles%\KMSpico\scripts\is-RMK6T.tmp
  • %ProgramFiles%\KMSpico\scripts\is-A1U5E.tmp
  • %ProgramFiles%\KMSpico\scripts\is-EGDB6.tmp
  • %ProgramFiles%\KMSpico\logs\is-M99AA.tmp
  • %ProgramFiles%\KMSpico\icons\is-FGG5I.tmp
  • %ProgramFiles%\KMSpico\icons\is-4OGQF.tmp
  • %ProgramFiles%\KMSpico\icons\is-1AKAN.tmp
  • %ProgramFiles%\KMSpico\icons\is-3SP7D.tmp
  • %ProgramFiles%\KMSpico\scripts\is-JR1NG.tmp
  • %ProgramFiles%\KMSpico\scripts\is-B5KI7.tmp
  • %ProgramFiles%\KMSpico\driver\is-CH84C.tmp
  • %ProgramFiles%\KMSpico\driver\is-V1LHU.tmp
  • %ProgramFiles%\KMSpico\driver\is-UH93G.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\ServerStandard\is-CVU4S.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\ServerStandard\is-E8GVJ.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\ServerDatacenter\is-EC1J6.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\ServerDatacenter\is-NU4JI.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\ProfessionalWMC\is-JG28M.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\ProfessionalWMC\is-503EI.tmp
  • %ProgramFiles%\KMSpico\driver\is-B6J1J.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-6G5HM.tmp
  • %ProgramFiles%\KMSpico\scripts\is-FE3C8.tmp
  • %ProgramFiles%\KMSpico\unins000.dat
  • %ALLUSERSPROFILE%\Start Menu\Programs\KMSpico\Uninstall KMSpico.lnk
  • %ALLUSERSPROFILE%\Start Menu\Programs\KMSpico\AutoPico.lnk
  • %ALLUSERSPROFILE%\Start Menu\Programs\KMSpico\Log KMSpico.lnk
  • %ALLUSERSPROFILE%\Start Menu\Programs\KMSpico\KMSpico.lnk
  • %ProgramFiles%\KMSpico\sounds\is-78OJR.tmp
  • %ProgramFiles%\KMSpico\sounds\is-8NHCC.tmp
  • %ProgramFiles%\KMSpico\sounds\is-2J38B.tmp
  • %ProgramFiles%\KMSpico\sounds\is-JH936.tmp
  • %ProgramFiles%\KMSpico\sounds\is-6UTJ6.tmp
  • %ProgramFiles%\KMSpico\sounds\is-7KJAE.tmp
  • %ProgramFiles%\KMSpico\sounds\is-JVUMU.tmp
  • %ProgramFiles%\KMSpico\sounds\is-VKL93.tmp
  • %ProgramFiles%\KMSpico\sounds\is-4MLRC.tmp
  • %ProgramFiles%\KMSpico\sounds\is-R7TQ9.tmp
  • %ProgramFiles%\KMSpico\sounds\is-UAOVH.tmp
  • %ProgramFiles%\KMSpico\sounds\is-UBEND.tmp
  • %ProgramFiles%\KMSpico\scripts\is-BHPRL.tmp
  • %ProgramFiles%\KMSpico\scripts\is-BBQI5.tmp
  • %ProgramFiles%\KMSpico\scripts\is-NQ5J9.tmp
  • %ProgramFiles%\KMSpico\scripts\is-I5AUC.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\Professional\is-VH68C.tmp
  • %ProgramFiles%\KMSpico\driver\is-95IJS.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-NEC4N.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-M7KAA.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\Enterprise\is-FU27H.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\is-L3E1A.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-CC4QV.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-QI73Q.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-16VU7.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-CGIDI.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-FJBMF.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-DCSDT.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-I09F8.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-ML60O.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\Core\is-RNMBH.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-KDECD.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\is-6405N.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\is-6UA4R.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\is-GDPIN.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\is-BS3J5.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-T7KNT.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-9S2I3.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-Q50LV.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-RE5EQ.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-BA9M1.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\is-H5I4N.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\Core\is-HNVCQ.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\EmbeddedIndustry\is-P6S2P.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\Enterprise\is-LIKEI.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-DQ2N0.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\EmbeddedIndustry\is-24SJ2.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\CoreConnectedSingleLanguage\is-4SAPP.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\CoreConnectedSingleLanguage\is-ICG4P.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\Core\is-CVL7K.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\Core\is-4SB71.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\is-B2M1I.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\ProfessionalWMC\is-3824H.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\ProfessionalWMC\is-BK7G5.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\ProfessionalN\is-BI7I5.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\ProfessionalN\is-BPRH6.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\Professional\is-SVH92.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\Professional\is-69M9M.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\EnterpriseN\is-GPTGL.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\EnterpriseN\is-NNF7T.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\Enterprise\is-AKCOJ.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\Enterprise\is-F4SLC.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\CoreSingleLanguage\is-IP42P.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\CoreSingleLanguage\is-7ADOT.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\CoreN\is-MCBTD.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW8\CoreN\is-JQN8H.tmp
  • %ProgramFiles%\KMSpico\cert\kmscertW81\Professional\is-CJOU0.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Word\is-AQRF9.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\VisioStd\is-PLI1I.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\VisioStd\is-5ALV2.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-H18P6.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-CUSGB.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-UTGL7.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-E6V9F.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-8VFHB.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-D5JRC.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-A3BKR.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-4EGQP.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-27277.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-PAPA7.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-6ON19.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-UNTHS.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-M2C11.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-NV4E4.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-9GD9P.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-R794V.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-M8D72.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-E99IA.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-CRPHK.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-F97MI.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-CH6D7.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-VCKOG.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-KN3J4.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-SN666.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-7A5CL.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-6SD90.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-PP3B4.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-30J70.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-F1PKK.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-E6V36.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-DM0MI.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-020PS.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-MNAMJ.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-OMOIJ.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-A2HSK.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-3BD23.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-P73CR.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-7RJSE.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-9LQHJ.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-B1GMS.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-340LJ.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-RVEPV.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-4O5DN.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-VRP3G.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-EP7EB.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-BGRA2.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-96C1H.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-LRHG1.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-N3COH.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-5CT11.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-M4565.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-3FUGR.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-O91JK.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-A8968.tmp
  • %ProgramFiles%\KMSpico\is-DJ7U7.tmp
  • %ProgramFiles%\KMSpico\is-C4JJR.tmp
  • %ProgramFiles%\KMSpico\is-6EVME.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-82U4B.tmp
  • <SYSTEM32>\is-75CMJ.tmp
  • %ProgramFiles%\KMSpico\is-V0GFK.tmp
  • %ProgramFiles%\KMSpico\is-SGSE6.tmp
  • %ProgramFiles%\KMSpico\is-G8TEB.tmp
  • %TEMP%\is-4SHH1.tmp\_isetup\_shfoldr.dll
  • %TEMP%\Setup Log 2018-06-19 #001.txt
  • %TEMP%\is-UNSFD.tmp\setup.tmp
  • %WINDIR%\Panther\Temp_1\restfiles\setup.exe
  • %TEMP%\aut2.tmp
  • %WINDIR%\Panther\Temp_1\restfiles\DenSpike.gif
  • %ProgramFiles%\KMSpico\is-4VQ23.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-KAAEM.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-UMREM.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-OFPBS.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-8PEC7.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-1UB9N.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-12MLL.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-F5FG9.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-RA80S.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-3PBCR.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-C6F99.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-9FCHK.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-4D4IH.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-22KC5.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-3SLIH.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-NEQ79.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-SSCBF.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-DVVSV.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-TN6LN.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-3TSOG.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-P5HPT.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-KN38E.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-QJUR0.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-8L50I.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-GL3G4.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-CABND.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-1O2IO.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-103BL.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-KS38E.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Outlook\is-9F79E.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\InfoPath\is-3P92E.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Outlook\is-2L3F0.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\OneNote\is-C8R5V.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\OneNote\is-6GAT0.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\OneNote\is-0BRE8.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Lync\is-8GRVO.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Lync\is-IP2T4.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Lync\is-LLE9E.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\InfoPath\is-6U2SI.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\PowerPoint\is-PI6BS.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Outlook\is-PN6FR.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\PowerPoint\is-446R4.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Excel\is-9QUTH.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Excel\is-2S2V7.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Access\is-SQQ1D.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Access\is-1A7T3.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Access\is-PVMEF.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\is-0R32D.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\is-4T9P1.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\is-7I1CQ.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Excel\is-50V3C.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\PowerPoint\is-5P0OQ.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\VisioStd\is-IPDBE.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\is-U100K.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\is-S01I0.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\VisioPro\is-8O84U.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\VisioPro\is-GC7C3.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\VisioPro\is-GUJO6.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\VisioPro\is-LNS88.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Standard\is-I0KJA.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Standard\is-Q0UUP.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Standard\is-K3SM4.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Publisher\is-A0I2R.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Publisher\is-3OINK.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\Publisher\is-AN15R.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\ProPlus\is-N9N84.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\ProPlus\is-IGEHE.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\ProPlus\is-0DK35.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\ProPlus\is-PC9HH.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectStd\is-2JQHF.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectStd\is-QR1EA.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectStd\is-VQJR4.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectPro\is-FD8M4.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectPro\is-LB89C.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectPro\is-I0SNM.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\InfoPath\is-DFE7R.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\is-8F5S8.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2013\is-U04CQ.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-J1S86.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-T26FV.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-Q8GUV.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-8KUP7.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-OEQR3.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-55HVU.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-02BNI.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-B9ECA.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-PV54A.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-ALHKP.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-IQHIN.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-OUM78.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-I7UIB.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-DEKUO.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-6U2RN.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-LIV6B.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-LD4H4.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-6FUQ4.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-44UHP.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-7TMLP.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-2FE37.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-VID75.tmp
  • %ProgramFiles%\KMSpico\TokensBackup\Keys.txt
  • %ProgramFiles%\KMSpico\scripts\is-8NIN8.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-46JOB.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-P0B4O.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-NAC7V.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-RNBP7.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-S4D0V.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-DC03I.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-H1RRA.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-RODHH.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-2V18Q.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-MNOOU.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-8PMQJ.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-ID6MP.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-3PKG2.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-EQDHC.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-JFQGS.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-VLGA8.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-UC3MV.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-BJ905.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-9JK8E.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-18515.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-RBP1O.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-6MOCG.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-NUBFG.tmp
  • %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-JKDOL.tmp
  • %ProgramFiles%\KMSpico\logs\KMSELDI.log
Deletes the following files:
  • %TEMP%\aut1.tmp
  • %TEMP%\aut2.tmp
  • %ProgramFiles%\KMSpico\logs\AutoPico.log
Moves the following files:
  • from %ProgramFiles%\KMSpico\is-G8TEB.tmp to %ProgramFiles%\KMSpico\unins000.exe
  • from %ProgramFiles%\KMSpico\cert\kmscertW10\Professional\is-A701P.tmp to %ProgramFiles%\KMSpico\cert\kmscertW10\Professional\Professional-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW10\Professional\is-N7K1N.tmp to %ProgramFiles%\KMSpico\cert\kmscertW10\Professional\Professional-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW10\EnterpriseS\is-7QV7B.tmp to %ProgramFiles%\KMSpico\cert\kmscertW10\EnterpriseS\EnterpriseS-Volume-GVLK-2-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW10\EnterpriseS\is-UKA8B.tmp to %ProgramFiles%\KMSpico\cert\kmscertW10\EnterpriseS\EnterpriseS-Volume-GVLK-2-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW10\EnterpriseS\is-E27G6.tmp to %ProgramFiles%\KMSpico\cert\kmscertW10\EnterpriseS\EnterpriseS-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW10\EnterpriseS\is-RUNI0.tmp to %ProgramFiles%\KMSpico\cert\kmscertW10\EnterpriseS\EnterpriseS-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW10\Enterprise\is-PNAID.tmp to %ProgramFiles%\KMSpico\cert\kmscertW10\Enterprise\Enterprise-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW10\Enterprise\is-92OSO.tmp to %ProgramFiles%\KMSpico\cert\kmscertW10\Enterprise\Enterprise-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW10\Education\is-QTUQF.tmp to %ProgramFiles%\KMSpico\cert\kmscertW10\Education\Education-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW10\Core\is-PA34V.tmp to %ProgramFiles%\KMSpico\cert\kmscertW10\Core\Core-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-NUTLI.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW10\Core\is-3ELLR.tmp to %ProgramFiles%\KMSpico\cert\kmscertW10\Core\Core-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW10\is-8LR8S.tmp to %ProgramFiles%\KMSpico\cert\kmscertW10\pkeyconfig.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Word\is-AESEH.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Word\WordVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Word\is-F4OHA.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Word\WordVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Word\is-N78GU.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Word\WordVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\VisioStd\is-7S37M.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\VisioStd\VisioStdVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\VisioStd\is-4V05A.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\VisioStd\VisioStdVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\VisioStd\is-J8ODM.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\VisioStd\VisioStdVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW10\Education\is-I5TNR.tmp to %ProgramFiles%\KMSpico\cert\kmscertW10\Education\Education-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-9H0ND.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-JRPVP.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-ul-phn.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-6IFV5.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS1-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-K8Q76.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS1-pl.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-L14SR.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS-ul-phn.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-MFP2K.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-3NJJE.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS-pl.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-I7HI8.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-BYPASS-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-LACQ2.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-BYPASS-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-U1Q12.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-BYPASS-RAC-public.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-2IV64.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-BYPASS-RAC-private.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\VisioPro\is-07OV6.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\VisioPro\VisioProVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\is-B8NFC.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\pkeyconfig.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-K61ON.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-KMS1-ul-phn.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-V9B7F.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-KMS1-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-UTGDR.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-KMS1-pl.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-4JQOP.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-KMS-ul-phn.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-6MCEQ.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-KMS-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-50LBM.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-KMS-pl.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-M1IOT.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-BYPASS-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-FKSIP.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-BYPASS-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-6FPSK.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-BYPASS-RAC-public.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-HMD59.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Business\is-A52B1.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Business\Security-Licensing-SLC-Component-SKU-Business-VL-BYPASS-RAC-private.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-3AJJC.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-ul-phn.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\is-3VSC5.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\BusinessN\Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS1-ul-phn.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Standard\is-BD0K9.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Standard\StandardVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Outlook\is-SUPFR.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Outlook\OutlookVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\OneNote\is-9T2I9.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\OneNote\OneNoteVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Mondo\is-J75C7.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Mondo\MondoVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Mondo\is-H2272.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Mondo\MondoVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Mondo\is-5532M.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Mondo\MondoVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Excel\is-PPOVR.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Excel\ExcelVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Excel\is-HT2LU.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Excel\ExcelVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Excel\is-RQ1GQ.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Excel\ExcelVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Access\is-FF9A1.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Access\AccessVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Access\is-QB0KA.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Access\AccessVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Access\is-VTM47.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Access\AccessVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\is-BD552.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\pkeyconfig-office.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\is-MSRT2.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\client-issuance-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\is-I107U.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\client-issuance-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\is-6EP2B.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\client-issuance-stil.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\is-K7A63.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\client-issuance-root.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\is-K5I93.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\client-issuance-root-bridge-test.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\is-LP7MU.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\client-issuance-bridge-office.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Word\is-H1JFI.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Word\LicenseSetData._D9F5B1C6_5386_495A_88F9_9AD6B41AC9B3.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Outlook\is-O3TNB.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Outlook\OutlookVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Outlook\is-8LO63.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Outlook\OutlookVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Standard\is-ABO5T.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Standard\StandardVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\ProPlus\is-S62E4.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\ProPlus\ProPlusVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\ProPlus\is-4CT7R.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\ProPlus\ProPlusVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Standard\is-N8GRG.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Standard\StandardVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\SkypeforBusiness\is-SOLK2.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\SkypeforBusiness\SkypeforBusinessVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\SkypeforBusiness\is-14H3E.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\SkypeforBusiness\SkypeforBusinessVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\SkypeforBusiness\is-DGAUB.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\SkypeforBusiness\SkypeforBusinessVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Publisher\is-PKASV.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Publisher\PublisherVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Publisher\is-NIREI.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Publisher\PublisherVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\Publisher\is-4LTTA.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\Publisher\PublisherVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\ProPlus\is-IIJLN.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\ProPlus\ProPlusVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\VisioPro\is-84G75.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\VisioPro\VisioProVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\VisioPro\is-QB5VD.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\VisioPro\VisioProVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\OneNote\is-KCVDP.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\OneNote\OneNoteVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectStd\is-JQSDA.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectStd\ProjectStdVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectStd\is-9V1SC.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectStd\ProjectStdVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectPro\is-IFE61.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectPro\ProjectProVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectPro\is-B7DED.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectPro\ProjectProVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectPro\is-J50QB.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectPro\ProjectProVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\PowerPoint\is-H7FUP.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\PowerPoint\PowerPointVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\PowerPoint\is-BHKTH.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\PowerPoint\PowerPointVL_KMS_Client-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\PowerPoint\is-9OUU4.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\PowerPoint\PowerPointVL_KMS_Client-ppd.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectStd\is-OK188.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\ProjectStd\ProjectStdVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-ID6MP.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-LVU2V.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-ul-phn.xrm-ms
  • from %ProgramFiles%\KMSpico\icons\is-4OGQF.tmp to %ProgramFiles%\KMSpico\icons\Question.png
  • from %ProgramFiles%\KMSpico\icons\is-1AKAN.tmp to %ProgramFiles%\KMSpico\icons\Information.png
  • from %ProgramFiles%\KMSpico\icons\is-3SP7D.tmp to %ProgramFiles%\KMSpico\icons\Error.png
  • from %ProgramFiles%\KMSpico\driver\is-B6J1J.tmp to %ProgramFiles%\KMSpico\driver\UnInstallDriver.cmd
  • from %ProgramFiles%\KMSpico\driver\is-95IJS.tmp to %ProgramFiles%\KMSpico\driver\tap-windows-9.21.0.exe
  • from %ProgramFiles%\KMSpico\driver\is-CH84C.tmp to %ProgramFiles%\KMSpico\driver\OpenVPN.cer
  • from %ProgramFiles%\KMSpico\driver\is-V1LHU.tmp to %ProgramFiles%\KMSpico\driver\certELDI.pfx
  • from %ProgramFiles%\KMSpico\driver\is-UH93G.tmp to %ProgramFiles%\KMSpico\driver\Cert.cmd
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\ServerStandard\is-CVU4S.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\ServerStandard\ServerStandard-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\ServerStandard\is-E8GVJ.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\ServerStandard\ServerStandard-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\ServerDatacenter\is-NU4JI.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\ServerDatacenter\ServerDatacenter-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\scripts\is-EGDB6.tmp to %ProgramFiles%\KMSpico\scripts\AddExceptionsWD.reg
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\ProfessionalWMC\is-JG28M.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\ProfessionalWMC\ProfessionalWMC-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\ProfessionalWMC\is-503EI.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\ProfessionalWMC\ProfessionalWMC-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\Professional\is-VH68C.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\Professional\Professional-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\Professional\is-CJOU0.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\Professional\Professional-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\Enterprise\is-LIKEI.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\Enterprise\Enterprise-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\Enterprise\is-FU27H.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\Enterprise\Enterprise-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\EmbeddedIndustry\is-P6S2P.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\EmbeddedIndustry\EmbeddedIndustry-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\icons\is-FGG5I.tmp to %ProgramFiles%\KMSpico\icons\Warning.png
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\ServerDatacenter\is-EC1J6.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\ServerDatacenter\ServerDatacenter-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-N3USV.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-BYPASS-RAC-private.xrm-ms
  • from %ProgramFiles%\KMSpico\scripts\is-A1U5E.tmp to %ProgramFiles%\KMSpico\scripts\AddExceptions_Defender.cmd
  • from %ProgramFiles%\KMSpico\sounds\is-JH936.tmp to %ProgramFiles%\KMSpico\sounds\processing.mp3
  • from %ProgramFiles%\KMSpico\sounds\is-6UTJ6.tmp to %ProgramFiles%\KMSpico\sounds\inputok.mp3
  • from %ProgramFiles%\KMSpico\sounds\is-7KJAE.tmp to %ProgramFiles%\KMSpico\sounds\inputfailed.mp3
  • from %ProgramFiles%\KMSpico\sounds\is-JVUMU.tmp to %ProgramFiles%\KMSpico\sounds\incomingtransmission.mp3
  • from %ProgramFiles%\KMSpico\sounds\is-VKL93.tmp to %ProgramFiles%\KMSpico\sounds\enterauthorizationcode.mp3
  • from %ProgramFiles%\KMSpico\sounds\is-4MLRC.tmp to %ProgramFiles%\KMSpico\sounds\diagnostic.mp3
  • from %ProgramFiles%\KMSpico\sounds\is-R7TQ9.tmp to %ProgramFiles%\KMSpico\sounds\complete.mp3
  • from %ProgramFiles%\KMSpico\sounds\is-UAOVH.tmp to %ProgramFiles%\KMSpico\sounds\begin.mp3
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\EmbeddedIndustry\is-24SJ2.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\EmbeddedIndustry\EmbeddedIndustry-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\sounds\is-UBEND.tmp to %ProgramFiles%\KMSpico\sounds\affirmative.mp3
  • from %ProgramFiles%\KMSpico\logs\is-M99AA.tmp to %ProgramFiles%\KMSpico\logs\AutoPico.log
  • from %ProgramFiles%\KMSpico\scripts\is-NQ5J9.tmp to %ProgramFiles%\KMSpico\scripts\Restore_Watermark.cmd
  • from %ProgramFiles%\KMSpico\scripts\is-I5AUC.tmp to %ProgramFiles%\KMSpico\scripts\RemoveExceptionsWD.reg
  • from %ProgramFiles%\KMSpico\scripts\is-8NIN8.tmp to %ProgramFiles%\KMSpico\scripts\Log.cmd
  • from %ProgramFiles%\KMSpico\scripts\is-FE3C8.tmp to %ProgramFiles%\KMSpico\scripts\Install_Task.cmd
  • from %ProgramFiles%\KMSpico\scripts\is-JR1NG.tmp to %ProgramFiles%\KMSpico\scripts\Install_Service.cmd
  • from %ProgramFiles%\KMSpico\scripts\is-B5KI7.tmp to %ProgramFiles%\KMSpico\scripts\EnableSmartScreen.reg
  • from %ProgramFiles%\KMSpico\scripts\is-VLK5D.tmp to %ProgramFiles%\KMSpico\scripts\EnableSmartScreen.cmd
  • from %ProgramFiles%\KMSpico\scripts\is-RMK6T.tmp to %ProgramFiles%\KMSpico\scripts\DisableSmartScreen.reg
  • from %ProgramFiles%\KMSpico\scripts\is-BHPRL.tmp to %ProgramFiles%\KMSpico\scripts\UnInstall_Service.cmd
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\CoreConnectedSingleLanguage\is-4SAPP.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\CoreConnectedSingleLanguage\CoreConnectedSingleLanguage-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\sounds\is-2J38B.tmp to %ProgramFiles%\KMSpico\sounds\transfer.mp3
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\CoreConnectedSingleLanguage\is-ICG4P.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\CoreConnectedSingleLanguage\CoreConnectedSingleLanguage-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\Core\is-CVL7K.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\Core\Core-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-CGIDI.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\Security-SPP-Component-SKU-Professional-VL-BYPASS-RAC-public.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Word\is-C93Q4.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Word\LicenseSetData._D9F5B1C6_5386_495A_88F9_9AD6B41AC9B3.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-DCSDT.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\Security-SPP-Component-SKU-Professional-ul-phn.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-I09F8.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\Security-SPP-Component-SKU-Professional-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-ML60O.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\pkeyconfig.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\is-L3E1A.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\Security-SPP-Component-SKU-Embedded-VLBA-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\is-IUBU9.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\Security-SPP-Component-SKU-Embedded-VLBA-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\is-H5I4N.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\Security-SPP-Component-SKU-Embedded-ul-phn.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\is-6UA4R.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\Security-SPP-Component-SKU-Embedded-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-16VU7.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\Security-SPP-Component-SKU-Professional-VL-BYPASS-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-QI73Q.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\Security-SPP-Component-SKU-Professional-VL-BYPASS-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\is-GDPIN.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\Security-SPP-Component-SKU-Embedded-pl.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-9S2I3.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS1-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-Q50LV.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS1-pl.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-RE5EQ.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS-ul-phn.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-BA9M1.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-NEC4N.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS-pl.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-M7KAA.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-BYPASS-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-UNPNF.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-BYPASS-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-SVH0B.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-BYPASS-RAC-public.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\is-BS3J5.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Embedded\pkeyconfig-embedded.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\is-T7KNT.tmp to %ProgramFiles%\KMSpico\cert\kmscertW6\Enterprise\Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS1-ul-phn.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2016\OneNote\is-2DE9J.tmp to %ProgramFiles%\KMSpico\cert\kmscert2016\OneNote\OneNoteVL_KMS_Client-ul.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-DQ2N0.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\Security-SPP-Component-SKU-Professional-VLKMS1-ul-oob.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\Enterprise\is-AKCOJ.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\Enterprise\Enterprise-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\EnterpriseN\is-NNF7T.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\EnterpriseN\EnterpriseN-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\is-B2M1I.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\pkeyconfig.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\ProfessionalWMC\is-3824H.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\ProfessionalWMC\ProfessionalWMC-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\ProfessionalWMC\is-BK7G5.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\ProfessionalWMC\ProfessionalWMC-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\ProfessionalN\is-BI7I5.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\ProfessionalN\ProfessionalN-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\ProfessionalN\is-BPRH6.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\ProfessionalN\ProfessionalN-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\Professional\is-SVH92.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\Professional\Professional-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\Professional\is-69M9M.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\Professional\Professional-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\EnterpriseN\is-GPTGL.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\EnterpriseN\EnterpriseN-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW81\Core\is-4SB71.tmp to %ProgramFiles%\KMSpico\cert\kmscertW81\Core\Core-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-CC4QV.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\Security-SPP-Component-SKU-Professional-VLKMS1-pl.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-FJBMF.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\Security-SPP-Component-SKU-Professional-VL-BYPASS-RAC-private.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\CoreSingleLanguage\is-IP42P.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\CoreSingleLanguage\CoreSingleLanguage-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\CoreSingleLanguage\is-7ADOT.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\CoreSingleLanguage\CoreSingleLanguage-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\CoreN\is-MCBTD.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\CoreN\CoreN-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\CoreN\is-JQN8H.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\CoreN\CoreN-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\Core\is-HNVCQ.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\Core\Core-Volume-GVLK-1-ul-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\Core\is-RNMBH.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\Core\Core-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\is-6405N.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\pkeyconfig.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\is-KDECD.tmp to %ProgramFiles%\KMSpico\cert\kmscertW7\Professional\Security-SPP-Component-SKU-Professional-VLKMS1-ul-phn.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscertW8\Enterprise\is-F4SLC.tmp to %ProgramFiles%\KMSpico\cert\kmscertW8\Enterprise\Enterprise-Volume-GVLK-1-ul-oob-rtm.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Word\is-AQRF9.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Word\LicenseSetData._D9F5B1C6_5386_495A_88F9_9AD6B41AC9B3.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\VisioStd\is-PLI1I.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\VisioStd\LicenseSetData._AC4EFAF0_F81F_4F61_BDF7_EA32B02AB117.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\VisioStd\is-5ALV2.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\VisioStd\LicenseSetData._AC4EFAF0_F81F_4F61_BDF7_EA32B02AB117.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-RVEPV.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\ProjectPro_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-KN3J4.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\ProjectProVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-VCKOG.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\ProjectProVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-CH6D7.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\ProjectProVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-27277.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\PowerPoint_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-103BL.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\PowerPoint_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-H18P6.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\PowerPoint_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-CUSGB.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\PowerPoint_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-UTGL7.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\PowerPoint_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-E6V9F.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\PowerPointVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-8VFHB.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\PowerPointVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\is-D5JRC.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\PowerPoint\PowerPointVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-A3BKR.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\Outlook_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-4EGQP.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\Outlook_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-PAPA7.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\Outlook_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-F97MI.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\Outlook_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-6ON19.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\Outlook_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-UNTHS.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\OutlookVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-M2C11.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\OutlookVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-340LJ.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\ProjectPro_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-B1GMS.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\ProjectPro_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-J1S86.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\Publisher_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-E6V36.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\ProPlusVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-F1PKK.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\ProPlusVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-KS38E.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\PublisherVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-1O2IO.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\PublisherVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-BGRA2.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\PublisherVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-SN666.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\ProPlus_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-7A5CL.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\ProPlus_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-6SD90.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\ProPlus_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-PP3B4.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\ProPlus_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-30J70.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\ProPlus_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-4O5DN.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\ProjectPro_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\is-NV4E4.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Outlook\OutlookVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-R794V.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\OneNote_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-020PS.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-MNAMJ.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-OMOIJ.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-A2HSK.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-3BD23.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-P73CR.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\ProjectStdVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-7RJSE.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\ProjectStdVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\is-9LQHJ.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectStd\ProjectStdVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\is-DM0MI.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProPlus\ProPlusVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-9GD9P.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\OneNote_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-M8D72.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\OneNote_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-RA80S.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\InfoPathVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-3FUGR.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Access\AccessVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-8L50I.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\Excel_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-GL3G4.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\ExcelVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-OFPBS.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\ExcelVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-UMREM.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\ExcelVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-KAAEM.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Access\Access_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-82U4B.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Access\Access_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-N3COH.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Access\Access_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-5CT11.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Access\Access_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-VID75.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\Publisher_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-KN38E.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\Excel_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-O91JK.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Access\AccessVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-A8968.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Access\AccessVLReg32.reg
  • from %ProgramFiles%\KMSpico\is-DJ7U7.tmp to %ProgramFiles%\KMSpico\UninsHs.exe
  • from %ProgramFiles%\KMSpico\is-C4JJR.tmp to %ProgramFiles%\KMSpico\Service_KMS.exe
  • from %ProgramFiles%\KMSpico\is-6EVME.tmp to %ProgramFiles%\KMSpico\KMSELDI.exe
  • from <SYSTEM32>\is-75CMJ.tmp to <SYSTEM32>\Vestris.ResourceLib.dll
  • from %ProgramFiles%\KMSpico\is-4VQ23.tmp to %ProgramFiles%\KMSpico\Vestris.ResourceLib.dll
  • from %ProgramFiles%\KMSpico\is-V0GFK.tmp to %ProgramFiles%\KMSpico\DevComponents.DotNetBar2.dll
  • from %ProgramFiles%\KMSpico\is-SGSE6.tmp to %ProgramFiles%\KMSpico\AutoPico.exe
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Access\is-M4565.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Access\Access_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\sounds\is-8NHCC.tmp to %ProgramFiles%\KMSpico\sounds\verified.mp3
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-P5HPT.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\Excel_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-DVVSV.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\GrooveVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-3TSOG.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\Excel_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-E99IA.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\OneNote_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-CRPHK.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\OneNote_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-EP7EB.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\OneNoteVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-96C1H.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\OneNoteVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\is-CABND.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\OneNote\OneNoteVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-LRHG1.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\InfoPath_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-8PEC7.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\InfoPath_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-1UB9N.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\InfoPath_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-TN6LN.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\GrooveVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-12MLL.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\InfoPath_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\is-QJUR0.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Excel\Excel_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-3PBCR.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\InfoPathVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-C6F99.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\InfoPathVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-9FCHK.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\Groove_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-4D4IH.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\Groove_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-22KC5.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\Groove_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-3SLIH.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\Groove_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-NEQ79.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\Groove_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\is-SSCBF.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Groove\GrooveVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\is-F5FG9.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\InfoPath\InfoPath_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\scripts\is-BBQI5.tmp to %ProgramFiles%\KMSpico\scripts\Silent.cmd
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-2FE37.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\Publisher_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-6FUQ4.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasicsVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\InfoPath\is-6U2SI.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\InfoPath\LicenseSetData._A30B8040_D68A_423F_B0B5_9CE292EA5A8F.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Outlook\is-PN6FR.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Outlook\LicenseSetData._771C3AFA_50C5_443F_B151_FF2546D863A0.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Outlook\is-9F79E.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Outlook\LicenseSetData._771C3AFA_50C5_443F_B151_FF2546D863A0.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Outlook\is-2L3F0.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Outlook\LicenseSetData._771C3AFA_50C5_443F_B151_FF2546D863A0.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\OneNote\is-C8R5V.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\OneNote\LicenseSetData._EFE1F3E6_AEA2_4144_A208_32AA872B6545.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\OneNote\is-6GAT0.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\OneNote\LicenseSetData._EFE1F3E6_AEA2_4144_A208_32AA872B6545.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\OneNote\is-0BRE8.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\OneNote\LicenseSetData._EFE1F3E6_AEA2_4144_A208_32AA872B6545.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Lync\is-8GRVO.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Lync\LicenseSetData._1B9F11E3_C85C_4E1B_BB29_879AD2C909E3.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Lync\is-IP2T4.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Lync\LicenseSetData._1B9F11E3_C85C_4E1B_BB29_879AD2C909E3.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Lync\is-LLE9E.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Lync\LicenseSetData._1B9F11E3_C85C_4E1B_BB29_879AD2C909E3.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\InfoPath\is-3P92E.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\InfoPath\LicenseSetData._A30B8040_D68A_423F_B0B5_9CE292EA5A8F.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\PowerPoint\is-PI6BS.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\PowerPoint\LicenseSetData._8C762649_97D1_4953_AD27_B7E2C25B972E.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\InfoPath\is-DFE7R.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\InfoPath\LicenseSetData._A30B8040_D68A_423F_B0B5_9CE292EA5A8F.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Excel\is-50V3C.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Excel\LicenseSetData._F7461D52_7C2B_43B2_8744_EA958E0BD09A.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Excel\is-9QUTH.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Excel\LicenseSetData._F7461D52_7C2B_43B2_8744_EA958E0BD09A.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Excel\is-2S2V7.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Excel\LicenseSetData._F7461D52_7C2B_43B2_8744_EA958E0BD09A.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Access\is-SQQ1D.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Access\AccessVL_KMS_Client_PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Access\is-1A7T3.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Access\AccessVL_KMS_Client_PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Access\is-PVMEF.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Access\AccessVL_KMS_Client_OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\is-VRP3G.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\ProjectPro\ProjectPro_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\PowerPoint\is-5P0OQ.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\PowerPoint\LicenseSetData._8C762649_97D1_4953_AD27_B7E2C25B972E.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\VisioStd\is-IPDBE.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\VisioStd\LicenseSetData._AC4EFAF0_F81F_4F61_BDF7_EA32B02AB117.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Publisher\is-AN15R.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Publisher\LicenseSetData._00C79FF1_6850_443D_BF61_71CDE0DE305F.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Publisher\is-3OINK.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Publisher\LicenseSetData._00C79FF1_6850_443D_BF61_71CDE0DE305F.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\VisioPro\is-8O84U.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\VisioPro\visio.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\VisioPro\is-GC7C3.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\VisioPro\LicenseSetData._E13AC10E_75D0_4AFF_A0CD_764982CF541C.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\VisioPro\is-GUJO6.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\VisioPro\LicenseSetData._E13AC10E_75D0_4AFF_A0CD_764982CF541C.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\VisioPro\is-LNS88.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\VisioPro\LicenseSetData._E13AC10E_75D0_4AFF_A0CD_764982CF541C.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Standard\is-I0KJA.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Standard\LicenseSetData._B13AFB38_CD79_4AE5_9F7F_EED058D750CA.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Standard\is-Q0UUP.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Standard\LicenseSetData._B13AFB38_CD79_4AE5_9F7F_EED058D750CA.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Standard\is-K3SM4.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Standard\LicenseSetData._B13AFB38_CD79_4AE5_9F7F_EED058D750CA.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\Publisher\is-A0I2R.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Publisher\LicenseSetData._00C79FF1_6850_443D_BF61_71CDE0DE305F.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\is-0R32D.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\pkeyconfig-office.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\is-4T9P1.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Licenses.sl.ISSUANCE.CLIENT_UL_OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectPro\is-I0SNM.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectPro\LicenseSetData._4A5D124A_E620_44BA_B6FF_658961B33B9A.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\ProPlus\is-IGEHE.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\ProPlus\LicenseSetData._B322DA9C_A2E2_4058_9E4E_F59A6970BD69.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\ProPlus\is-0DK35.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\ProPlus\LicenseSetData._B322DA9C_A2E2_4058_9E4E_F59A6970BD69.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\ProPlus\is-PC9HH.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\ProPlus\LicenseSetData._B322DA9C_A2E2_4058_9E4E_F59A6970BD69.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectStd\is-2JQHF.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectStd\LicenseSetData._427A28D1_D17C_4ABF_B717_32C780BA6F07.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectStd\is-QR1EA.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectStd\LicenseSetData._427A28D1_D17C_4ABF_B717_32C780BA6F07.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectStd\is-VQJR4.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectStd\LicenseSetData._427A28D1_D17C_4ABF_B717_32C780BA6F07.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectPro\is-FD8M4.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectPro\LicenseSetData._4A5D124A_E620_44BA_B6FF_658961B33B9A.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectPro\is-LB89C.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\ProjectPro\LicenseSetData._4A5D124A_E620_44BA_B6FF_658961B33B9A.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\ProPlus\is-N9N84.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\ProPlus\proplus.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\PowerPoint\is-446R4.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\PowerPoint\LicenseSetData._8C762649_97D1_4953_AD27_B7E2C25B972E.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\is-7I1CQ.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Licenses.sl.ISSUANCE.CLIENT_UL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\is-U100K.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Licenses.sl.ISSUANCE.CLIENT_STIL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-7TMLP.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\Publisher_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-PV54A.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\StandardVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-46JOB.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioPrem_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-I7UIB.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioPrem_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-NAC7V.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioPrem_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-Q8GUV.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\Standard_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-8KUP7.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\Standard_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-OEQR3.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\Standard_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-55HVU.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\Standard_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-P0B4O.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioPro_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-02BNI.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\Standard_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-B9ECA.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\StandardVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\is-ALHKP.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Standard\StandardVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-IQHIN.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasics_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-T26FV.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasics_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-OUM78.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasics_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-DEKUO.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasics_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-6U2RN.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasics_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-LIV6B.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasicsVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\is-LD4H4.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasicsVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-JKDOL.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioPrem_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\is-44UHP.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Publisher\Publisher_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-6MOCG.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioPro_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-18515.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioPro_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\is-8F5S8.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Licenses.sl.ISSUANCE.CLIENT_ROOT_BRIDGE_TEST.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-NUBFG.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioPro_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\is-S01I0.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Licenses.sl.ISSUANCE.CLIENT_ROOT.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2013\is-U04CQ.tmp to %ProgramFiles%\KMSpico\cert\kmscert2013\Licenses.sl.ISSUANCE.CLIENT_BRIDGE_OFFICE.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-RNBP7.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Word\Word_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-S4D0V.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Word\Word_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-DC03I.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Word\Word_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-H1RRA.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Word\Word_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-RODHH.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Word\Word_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-RBP1O.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioPro_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-2V18Q.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Word\WordVLRegWOW.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-8PMQJ.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Word\WordVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-6G5HM.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioPrem_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-3PKG2.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioVLReg64.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-EQDHC.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioVLReg32.reg
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-JFQGS.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioStd_KMS_Client.RAC_Pub.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-VLGA8.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioStd_KMS_Client.RAC_Priv.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-UC3MV.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioStd_KMS_Client.PPDLIC.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-BJ905.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioStd_KMS_Client.PL.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\is-9JK8E.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Visio\VisioStd_KMS_Client.OOB.xrm-ms
  • from %ProgramFiles%\KMSpico\cert\kmscert2010\Word\is-MNOOU.tmp to %ProgramFiles%\KMSpico\cert\kmscert2010\Word\WordVLReg64.reg
  • from %ProgramFiles%\KMSpico\sounds\is-78OJR.tmp to %ProgramFiles%\KMSpico\sounds\warning.mp3
Substitutes the following files:
  • %ProgramFiles%\KMSpico\logs\AutoPico.log
Network activity:
Connects to:
  • '3.###l.ntp.org':123
UDP:
  • DNS ASK 3.###l.ntp.org
Miscellaneous:
Searches for the following windows:
  • ClassName: 'BUTTON' WindowName: ''
Creates and executes the following:
  • '%WINDIR%\Panther\Temp_1\restfiles\setup.exe' /silent /norestart /l=Default
  • '%TEMP%\is-UNSFD.tmp\setup.tmp' /SL5="$100E6,2952592,69120,%WINDIR%\Panther\Temp_1\restfiles\setup.exe" /silent /norestart /l=Default
  • '%ProgramFiles%\KMSpico\UninsHs.exe' /r0=KMSpico,default,%WINDIR%\Panther\Temp_1\restfiles\setup.exe
  • '%ProgramFiles%\KMSpico\KMSELDI.exe' /silent /backup
  • '%ProgramFiles%\KMSpico\AutoPico.exe' /silent
Executes the following:
  • '<SYSTEM32>\cmd.exe' /C ""%ProgramFiles%\KMSpico\scripts\Install_Service.cmd""
  • '<SYSTEM32>\cmd.exe' /C ""%ProgramFiles%\KMSpico\scripts\Install_Task.cmd""
  • '<SYSTEM32>\sc.exe' create "Service KMSELDI" binPath= "%ProgramFiles%\KMSpico\Service_KMS.exe" type= own error= normal start= auto DisplayName= "Service KMSELDI"
  • '<SYSTEM32>\schtasks.exe' /Create /TN "AutoPico Daily Restart" /TR "'%ProgramFiles%\KMSpico\AutoPico.exe' /silent" /SC DAILY /ST 23:59:59 /RU "NT AUTHORITY\SYSTEM" /RL Highest /F

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android