Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Service KMSELDI] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%PROGRAM_FILES%\KMSpico\KMSServer.exe' = '%PROGRAM_FILES%\KMSpico\KMSServer.exe:*:Enabled:KMS Emulator'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%PROGRAM_FILES%\KMSpico\KMSELDI.exe' = '%PROGRAM_FILES%\KMSpico\KMSELDI.exe:*:Enabled:KMS Emulator'
- '%TEMP%\is-CSPMR.tmp\KMSpico_setup.tmp' /SL5="$40134,537388,66048,%TEMP%\KMSpico\KMSpico_setup.exe" /verysilent
- '%PROGRAM_FILES%\KMSpico\KMSELDI.exe' /backup /silent
- '%TEMP%\KMSPICO.EXE'
- '%TEMP%\KMSpico\KMSpico_setup.exe' /verysilent
- '<SYSTEM32>\schtasks.exe' /Create /TN "AutoPico Daily Restart" /TR "%PROGRAM_FILES%\KMSpico\AutoPico.exe /silent" /SC DAILY /ST 11:59:59 /RU SYSTEM /RL Highest /F
- '<SYSTEM32>\sc.exe' delete "KMSServerService"
- '<SYSTEM32>\sc.exe' create "KMSServerService" DisplayName= "KMS Server Service" binPath= "%PROGRAM_FILES%\KMSpico\KMSServer.exe" obj= "NT AUTHORITY\NetworkService"
- '<SYSTEM32>\sc.exe' create "Service KMSELDI" binPath= "%PROGRAM_FILES%\KMSpico\Service_KMS.exe" type= own error= normal start= auto DisplayName= "Service KMSELDI"
- '<SYSTEM32>\attrib.exe' "<Полный путь к вирусу>" +s +h
- '<SYSTEM32>\attrib.exe' "<Текущая директория>" +s +h
- '<SYSTEM32>\notepad.exe'
- <SYSTEM32>\notepad.exe
- %PROGRAM_FILES%\KMSpico\sounds\is-IHC55.tmp
- %PROGRAM_FILES%\KMSpico\sounds\is-N32ND.tmp
- %PROGRAM_FILES%\KMSpico\sounds\is-NDH2O.tmp
- %PROGRAM_FILES%\KMSpico\sounds\is-1LTBF.tmp
- %PROGRAM_FILES%\KMSpico\sounds\is-0INFA.tmp
- %PROGRAM_FILES%\KMSpico\is-BIICK.tmp
- %PROGRAM_FILES%\KMSpico\is-IN3J3.tmp
- %PROGRAM_FILES%\KMSpico\is-29376.tmp
- %PROGRAM_FILES%\KMSpico\sounds\is-O27I1.tmp
- %PROGRAM_FILES%\KMSpico\sounds\is-N6BJB.tmp
- %PROGRAM_FILES%\KMSpico\cert\office2010vl\is-KPNEI.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-D3BCC.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-V4SLR.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-VIJSO.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-K049K.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-0G1T8.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-EGKI5.tmp
- %PROGRAM_FILES%\KMSpico\cert\office2010vl\is-UNQU1.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-5RDN1.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-CL6DE.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-G1VCL.tmp
- %PROGRAM_FILES%\KMSpico\is-MASBJ.tmp
- %ALLUSERSPROFILE%\Start Menu\Programs\KMSpico\Uninstall KMSpico.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\KMSpico\AutoPico.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\KMSpico\Check KMSpico.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\KMSpico\KMSpico.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\KMSpico\Log KMSpico.lnk
- %PROGRAM_FILES%\KMSpico\KMSServer.exe
- %PROGRAM_FILES%\KMSpico\KMSELDI.log
- %PROGRAM_FILES%\KMSpico\KMSWrapper.dll
- %PROGRAM_FILES%\KMSpico\unins000.dat
- %PROGRAM_FILES%\KMSpico\dumm
- %PROGRAM_FILES%\KMSpico\is-VFUFM.tmp
- %PROGRAM_FILES%\KMSpico\is-CJ2B8.tmp
- %PROGRAM_FILES%\KMSpico\is-I3VCK.tmp
- %PROGRAM_FILES%\KMSpico\is-38CV7.tmp
- %PROGRAM_FILES%\KMSpico\is-6VDVE.tmp
- %PROGRAM_FILES%\KMSpico\is-LVR0R.tmp
- %PROGRAM_FILES%\KMSpico\is-CN21H.tmp
- %PROGRAM_FILES%\KMSpico\is-2E8HB.tmp
- %PROGRAM_FILES%\KMSpico\is-067M1.tmp
- %PROGRAM_FILES%\KMSpico\is-BFJDR.tmp
- %PROGRAM_FILES%\KMSpico\is-VVDN5.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-KHC1O.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-KS21J.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-O6LCL.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-ISVFR.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-ISE34.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-592OH.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-IFPO6.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-CVSVR.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-V254T.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-51UV5.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-AD33T.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-VPPRG.tmp
- %TEMP%\KMSpico\KMSpico_setup.exe
- %TEMP%\is-CSPMR.tmp\KMSpico_setup.tmp
- %TEMP%\KMSPICO.EXE
- %TEMP%\aut1.tmp
- %TEMP%\m675744.rcf
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-U6QF8.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-TDPUD.tmp
- %PROGRAM_FILES%\KMSpico\is-SQILS.tmp
- %TEMP%\is-GDQNR.tmp\_isetup\_RegDLL.tmp
- %TEMP%\is-GDQNR.tmp\_isetup\_shfoldr.dll
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-7R2AB.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-F0H2C.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-18432.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-JKFPG.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-JFF5H.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-4II95.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-1OETN.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-UK4G0.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-LMGGN.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-G3ABN.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-T2LHB.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-6GQ9S.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-G5TMU.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-I9PI4.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-27BBB.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-R4EK5.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-NOCFF.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-986LH.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-5RMSC.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-CRN1D.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-VTD0A.tmp
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-5EV6E.tmp
- %PROGRAM_FILES%\KMSpico\Service_KMS.exe
- <Полный путь к вирусу>
- %TEMP%\is-GDQNR.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-GDQNR.tmp\_isetup\_RegDLL.tmp
- %TEMP%\KMSpico\KMSpico_setup.exe
- %TEMP%\is-CSPMR.tmp\KMSpico_setup.tmp
- %PROGRAM_FILES%\KMSpico\KMSWrapper.dll
- %TEMP%\aut1.tmp
- %PROGRAM_FILES%\KMSpico\KMSServer.exe
- %PROGRAM_FILES%\KMSpico\dumm
- %PROGRAM_FILES%\KMSpico\cert\office2010vl\is-UNQU1.tmp в %PROGRAM_FILES%\KMSpico\cert\office2010vl\Office14RegInfo.reg
- %PROGRAM_FILES%\KMSpico\cert\office2010vl\is-KPNEI.tmp в %PROGRAM_FILES%\KMSpico\cert\office2010vl\tokens.dat
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-5RDN1.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\LicenseSetData._E13AC10E_75D0_4AFF_A0CD_764982CF541C.PPDLIC.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-EGKI5.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\visio.reg
- %PROGRAM_FILES%\KMSpico\sounds\is-NDH2O.tmp в %PROGRAM_FILES%\KMSpico\sounds\complete.mp3
- %PROGRAM_FILES%\KMSpico\sounds\is-IHC55.tmp в %PROGRAM_FILES%\KMSpico\sounds\diagnostic.mp3
- %PROGRAM_FILES%\KMSpico\sounds\is-1LTBF.tmp в %PROGRAM_FILES%\KMSpico\sounds\affirmative.mp3
- %PROGRAM_FILES%\KMSpico\sounds\is-0INFA.tmp в %PROGRAM_FILES%\KMSpico\sounds\begin.mp3
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-G1VCL.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\LicenseSetData._E13AC10E_75D0_4AFF_A0CD_764982CF541C.PL.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-K049K.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\Licenses.sl.PKEYCONFIG.SIGNED.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-0G1T8.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\LicenseSetData._3E4294DD_A765_49BC_8DBD_CF8B62A4BD3D.OOB.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-UK4G0.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\Licenses.sl.ISSUANCE.CLIENT_UL.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-KHC1O.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\Licenses.sl.ISSUANCE.CLIENT_UL_OOB.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-V4SLR.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\LicenseSetData._3E4294DD_A765_49BC_8DBD_CF8B62A4BD3D.PPDLIC.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-CL6DE.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\LicenseSetData._E13AC10E_75D0_4AFF_A0CD_764982CF541C.OOB.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-VIJSO.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\LicenseSetData._3E4294DD_A765_49BC_8DBD_CF8B62A4BD3D.PHN.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-D3BCC.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\LicenseSetData._3E4294DD_A765_49BC_8DBD_CF8B62A4BD3D.PL.xrm-ms
- %PROGRAM_FILES%\KMSpico\sounds\is-N32ND.tmp в %PROGRAM_FILES%\KMSpico\sounds\transfer.mp3
- %PROGRAM_FILES%\KMSpico\is-BFJDR.tmp в %PROGRAM_FILES%\KMSpico\Log.cmd
- %PROGRAM_FILES%\KMSpico\is-VVDN5.tmp в %PROGRAM_FILES%\KMSpico\Service_KMS.exe
- %PROGRAM_FILES%\KMSpico\is-CJ2B8.tmp в %PROGRAM_FILES%\KMSpico\KMSServer.exe
- %PROGRAM_FILES%\KMSpico\is-I3VCK.tmp в %PROGRAM_FILES%\KMSpico\KMSWrapper.dll
- %PROGRAM_FILES%\KMSpico\is-2E8HB.tmp в %PROGRAM_FILES%\KMSpico\TriggerKMS.exe
- %PROGRAM_FILES%\KMSpico\is-VFUFM.tmp в %PROGRAM_FILES%\KMSpico\UnInstall_Service.cmd
- %PROGRAM_FILES%\KMSpico\is-067M1.tmp в %PROGRAM_FILES%\KMSpico\Service_KMS.log
- %PROGRAM_FILES%\KMSpico\is-CN21H.tmp в %PROGRAM_FILES%\KMSpico\Silent.cmd
- %PROGRAM_FILES%\KMSpico\is-38CV7.tmp в %PROGRAM_FILES%\KMSpico\KMSELDI.log
- %PROGRAM_FILES%\KMSpico\is-29376.tmp в %PROGRAM_FILES%\KMSpico\AutoPico.exe
- %PROGRAM_FILES%\KMSpico\is-BIICK.tmp в %PROGRAM_FILES%\KMSpico\AutoPico.log
- %PROGRAM_FILES%\KMSpico\sounds\is-O27I1.tmp в %PROGRAM_FILES%\KMSpico\sounds\verified.mp3
- %PROGRAM_FILES%\KMSpico\sounds\is-N6BJB.tmp в %PROGRAM_FILES%\KMSpico\sounds\warning.mp3
- %PROGRAM_FILES%\KMSpico\is-6VDVE.tmp в %PROGRAM_FILES%\KMSpico\Install_Task.cmd
- %PROGRAM_FILES%\KMSpico\is-LVR0R.tmp в %PROGRAM_FILES%\KMSpico\KMSELDI.exe
- %PROGRAM_FILES%\KMSpico\is-IN3J3.tmp в %PROGRAM_FILES%\KMSpico\Check_Activation_All.cmd
- %PROGRAM_FILES%\KMSpico\is-MASBJ.tmp в %PROGRAM_FILES%\KMSpico\Install_Service.cmd
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-V254T.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\LicenseSetData._ED34DC89_1C27_4ECD_8B2F_63D0F4CEDC32.OOB.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-IFPO6.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\LicenseSetData._ED34DC89_1C27_4ECD_8B2F_63D0F4CEDC32.PHN.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-51UV5.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\LicenseSetData._4A5D124A_E620_44BA_B6FF_658961B33B9A.PL.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-AD33T.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\LicenseSetData._4A5D124A_E620_44BA_B6FF_658961B33B9A.PPDLIC.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-R4EK5.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\project.reg
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-NOCFF.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\Licenses.sl.ISSUANCE.CLIENT_BRIDGE_OFFICE.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-CVSVR.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\LicenseSetData._ED34DC89_1C27_4ECD_8B2F_63D0F4CEDC32.PL.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-7R2AB.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\LicenseSetData._ED34DC89_1C27_4ECD_8B2F_63D0F4CEDC32.PPDLIC.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-O6LCL.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\LicenseSetData._4A5D124A_E620_44BA_B6FF_658961B33B9A.OOB.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-TDPUD.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\Licenses.sl.ISSUANCE.CLIENT_ROOT.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-VPPRG.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\Licenses.sl.ISSUANCE.CLIENT_ROOT_BRIDGE_TEST.xrm-ms
- %PROGRAM_FILES%\KMSpico\is-SQILS.tmp в %PROGRAM_FILES%\KMSpico\unins000.exe
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-U6QF8.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\Licenses.sl.ISSUANCE.CLIENT_BRIDGE_OFFICE.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-ISVFR.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\Licenses.sl.ISSUANCE.CLIENT_UL_OOB.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-KS21J.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\Licenses.sl.PKEYCONFIG.SIGNED.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-ISE34.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\Licenses.sl.ISSUANCE.CLIENT_STIL.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\is-592OH.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\project\Licenses.sl.ISSUANCE.CLIENT_UL.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-27BBB.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\Licenses.sl.ISSUANCE.CLIENT_ROOT.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-F0H2C.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\LicenseSetData._B322DA9C_A2E2_4058_9E4E_F59A6970BD69.PPDLIC.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-18432.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\proplus.reg
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-4II95.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\LicenseSetData._B322DA9C_A2E2_4058_9E4E_F59A6970BD69.OOB.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-JKFPG.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\LicenseSetData._B322DA9C_A2E2_4058_9E4E_F59A6970BD69.PL.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-LMGGN.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\Licenses.sl.ISSUANCE.CLIENT_ROOT_BRIDGE_TEST.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-1OETN.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\Licenses.sl.ISSUANCE.CLIENT_STIL.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-G3ABN.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\Licenses.sl.ISSUANCE.CLIENT_BRIDGE_OFFICE.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\is-T2LHB.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\visio\Licenses.sl.ISSUANCE.CLIENT_ROOT.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-JFF5H.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\LicenseSetData._2B88C4F2_EA8F_43CD_805E_4D41346E18A7.PPDLIC.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-VTD0A.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\Licenses.sl.ISSUANCE.CLIENT_UL.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-5EV6E.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\Licenses.sl.ISSUANCE.CLIENT_UL_OOB.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-G5TMU.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\Licenses.sl.ISSUANCE.CLIENT_ROOT_BRIDGE_TEST.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-I9PI4.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\Licenses.sl.ISSUANCE.CLIENT_STIL.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-5RMSC.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\LicenseSetData._2B88C4F2_EA8F_43CD_805E_4D41346E18A7.PHN.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-6GQ9S.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\LicenseSetData._2B88C4F2_EA8F_43CD_805E_4D41346E18A7.PL.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-CRN1D.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\Licenses.sl.PKEYCONFIG.SIGNED.xrm-ms
- %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\is-986LH.tmp в %PROGRAM_FILES%\KMSpico\cert\kmscert2013\proplus\LicenseSetData._2B88C4F2_EA8F_43CD_805E_4D41346E18A7.OOB.xrm-ms
- 'ea#####er90.no-ip.biz':1604
- 'so#####oxy.bounceme.net':1604
- DNS ASK ea#####er90.no-ip.biz
- DNS ASK so#####oxy.bounceme.net
- ClassName: '#32770' WindowName: '0% Extracting'
- ClassName: '#32770' WindowName: ''
- ClassName: '#32770' WindowName: 'KMS GUI ELDI'
- ClassName: '#32770' WindowName: 'Setup'
- ClassName: '#32770' WindowName: 'AutoIt Error'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'SysListView32' WindowName: '(null)'
- ClassName: '#32770' WindowName: '(null)'