%user_profile%\appdata\local\temp\bad4021e-8b96-4726-a482-7caebf5bc001\clisecurert.dll
%win_dir%\kmsem\kmservice.exe
%user_profile%\appdata\locallow\yandex\toolbar\packages\{8eb93596-60fe-4970-be7c-093f74cabd4b}\msc.dll
%win_dir%\kmsem\shadow.kms
%user_profile%\appdata\locallow\yandex\toolbar\packages\{123d7601-aca1-47e1-9c8a-b1fef1570a85}\srs.dll
%win_dir%\system32\srvany.exe
%user_profile%\appdata\locallow\yandex\toolbar\packages\{654c3913-269e-411d-bfa3-a9e28c213d47}\translatebtn.dll