SystemLook 30.07.11 by jpshortstuff Log created at 17:32 on 09/05/2019 by Dimitry Administrator - Elevation successful ========== regfind ========== Searching for "KMSpico" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\471406b9_0] @="{2}.\\?\hdaudio#func_01&ven_10ec&dev_0233&subsys_104316dd&rev_1000#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\singlelineouttopo/00010001|\Device\HarddiskVolume4\Program Files\KMSpico\AutoPico.exe%b{00000000-0000-0000-0000-000000000000}" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\88c740fc_0] @="{2}.\\?\hdaudio#func_01&ven_10ec&dev_0233&subsys_104316dd&rev_1000#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\singlelineouttopo/00010001|\Device\HarddiskVolume7\Office 2013\KMSpico Portable\AutoPico.exe%b{00000000-0000-0000-0000-000000000000}" [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\UFH\SHC] "22"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico\AutoPico.lnk C:\Program Files\KMSpico\AutoPico.exe" [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\UFH\SHC] "23"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico\KMSpico.lnk C:\Program Files\KMSpico\KMSELDI.exe" [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\UFH\SHC] "24"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico\Uninstall KMSpico.lnk C:\Program Files\KMSpico\UninsHs.exe /u0=KMSpico" [HKEY_USERS\S-1-5-21-919706677-2626140902-522991668-1001\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\471406b9_0] @="{2}.\\?\hdaudio#func_01&ven_10ec&dev_0233&subsys_104316dd&rev_1000#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\singlelineouttopo/00010001|\Device\HarddiskVolume4\Program Files\KMSpico\AutoPico.exe%b{00000000-0000-0000-0000-000000000000}" [HKEY_USERS\S-1-5-21-919706677-2626140902-522991668-1001\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\88c740fc_0] @="{2}.\\?\hdaudio#func_01&ven_10ec&dev_0233&subsys_104316dd&rev_1000#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\singlelineouttopo/00010001|\Device\HarddiskVolume7\Office 2013\KMSpico Portable\AutoPico.exe%b{00000000-0000-0000-0000-000000000000}" [HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\UFH\SHC] "22"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico\AutoPico.lnk C:\Program Files\KMSpico\AutoPico.exe" [HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\UFH\SHC] "23"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico\KMSpico.lnk C:\Program Files\KMSpico\KMSELDI.exe" [HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\UFH\SHC] "24"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico\Uninstall KMSpico.lnk C:\Program Files\KMSpico\UninsHs.exe /u0=KMSpico" ========== filefind ========== Searching for "KMSpico"