Advertisement
jacktremaine

el del combofix

Jun 4th, 2019
259
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 14.96 KB | None | 0 0
  1. ComboFix 18-08-08.01 - daw 04/06/2019 16:57:24.2.2 - x64
  2. Microsoft Windows 7 Home Premium 6.1.7601.1.1252.34.3082.18.3767.1510 [GMT 2:00]
  3. Running from: c:\users\daw\Desktop\ComboFix.exe
  4. SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  5. .
  6. .
  7. ((((((((((((((((((((((((( Files Created from 2019-05-04 to 2019-06-04 )))))))))))))))))))))))))))))))
  8. .
  9. .
  10. 2019-06-04 15:03 . 2019-06-04 15:03 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\temp
  11. 2019-06-04 15:03 . 2019-06-04 15:03 -------- d-----w- c:\users\Docente\AppData\Local\temp
  12. 2019-06-04 15:03 . 2019-06-04 15:03 -------- d-----w- c:\users\Default\AppData\Local\temp
  13. 2019-06-04 15:03 . 2019-06-04 15:03 -------- d-----w- c:\users\Carmen\AppData\Local\temp
  14. 2019-05-22 19:44 . 2019-05-22 19:44 -------- d-----w- c:\users\daw\aTubeCatcher
  15. 2019-05-17 14:02 . 2008-08-18 16:18 77824 ----a-w- c:\windows\SysWow64\fmcodec.DLL
  16. 2019-05-17 14:02 . 2017-11-09 10:58 440320 ----a-w- c:\windows\SysWow64\DartSock.dll
  17. 2019-05-17 14:02 . 2017-11-09 10:58 401408 ----a-w- c:\windows\SysWow64\DartSecure2.dll
  18. 2019-05-17 14:02 . 2017-11-09 10:58 249856 ----a-w- c:\windows\SysWow64\DartCertificate.dll
  19. 2019-05-17 12:34 . 2017-02-10 11:22 3747512 ----a-w- c:\program files (x86)\Mozilla Firefox\updated\d3dcompiler_47.dll
  20. .
  21. .
  22. .
  23. (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
  24. .
  25. 2019-03-27 15:48 . 2019-03-27 15:48 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{87BBEBE9-8BA1-4220-9EC0-5C084A7A826F}\offreg.4116.dll
  26. 2019-03-26 20:34 . 2019-03-26 20:34 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{87BBEBE9-8BA1-4220-9EC0-5C084A7A826F}\offreg.2436.dll
  27. 2019-03-14 12:41 . 2018-11-16 21:19 127411920 -c--a-w- c:\windows\system32\MRT.exe
  28. 2015-09-25 08:24 151552 --sha-w- c:\windows\kmsem\KMService.exe
  29. 2015-09-25 08:24 8192 --sha-w- c:\windows\SysWOW64\srvany.exe
  30. .
  31. .
  32. ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
  33. .
  34. .
  35. *Note* empty entries & legit default entries are not shown
  36. REGEDIT4
  37. .
  38. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
  39. "BackupManagerTray"="c:\program files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" [2011-04-24 297280]
  40. "LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2011-07-01 1103440]
  41. "SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2011-09-20 341360]
  42. "ArcadeMovieService"="c:\program files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe" [2011-08-26 177448]
  43. "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2015-09-24 40336]
  44. "GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
  45. "SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
  46. "AdobeCS6ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" [2012-03-09 1073312]
  47. .
  48. c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
  49. Actualizar notificador.lnk - c:\program files\WinZip\WZUpdateNotifier.exe [2015-10-23 1143008]
  50. FAH.lnk - c:\program files\WinZip\FAHConsole.exe [2015-10-23 435424]
  51. WinZip Preloader.lnk - c:\program files\WinZip\WzPreloader.exe [2015-10-23 124128]
  52. .
  53. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
  54. "ConsentPromptBehaviorAdmin"= 0 (0x0)
  55. "ConsentPromptBehaviorUser"= 3 (0x3)
  56. "EnableLUA"= 0 (0x0)
  57. "EnableUIADesktopToggle"= 0 (0x0)
  58. "PromptOnSecureDesktop"= 0 (0x0)
  59. .
  60. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
  61. "aux"=wdmaud.drv
  62. .
  63. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
  64. @=""
  65. .
  66. R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
  67. R2 KMSEmulator;KMS-host Service;c:\programdata\KMSAuto\bin\KMSSS.exe;c:\programdata\KMSAuto\bin\KMSSS.exe [x]
  68. R2 Sentinel64;Sentinel64;c:\windows\System32\Drivers\Sentinel64.sys;c:\windows\SYSNATIVE\Drivers\Sentinel64.sys [x]
  69. R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
  70. R3 EgisTec Ticket Service;EgisTec Ticket Service;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [x]
  71. R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]
  72. R3 GoogleChromeElevationService;Google Chrome Elevation Service;c:\program files (x86)\Google\Chrome\Application\74.0.3729.169\elevation_service.exe;c:\program files (x86)\Google\Chrome\Application\74.0.3729.169\elevation_service.exe [x]
  73. R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
  74. R3 ptun0901;TAP Adapter V9 for Private Tunnel;c:\windows\system32\DRIVERS\ptun0901.sys;c:\windows\SYSNATIVE\DRIVERS\ptun0901.sys [x]
  75. R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
  76. R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
  77. R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
  78. R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
  79. R3 WatAdminSvc;Servicio de tecnologías de activación de Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
  80. R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
  81. S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x]
  82. S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x]
  83. S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x]
  84. S2 aksdf;aksdf;c:\windows\system32\drivers\aksdf.sys;c:\windows\SYSNATIVE\drivers\aksdf.sys [x]
  85. S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
  86. S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe;c:\program files (x86)\Launch Manager\dsiwmis.exe [x]
  87. S2 ePowerSvc;ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [x]
  88. S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe;c:\program files (x86)\Acer\Registration\GREGsvc.exe [x]
  89. S2 hasplms;Sentinel HASP License Manager;c:\windows\system32\hasplms.exe -run;c:\windows\SYSNATIVE\hasplms.exe -run [x]
  90. S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
  91. S2 KMService;KMService;c:\windows\system32\srvany.exe;c:\windows\SYSNATIVE\srvany.exe [x]
  92. S2 Live Updater Service;Live Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x]
  93. S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [x]
  94. S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
  95. S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]
  96. S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\drivers\HECIx64.sys;c:\windows\SYSNATIVE\drivers\HECIx64.sys [x]
  97. S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x]
  98. S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys;c:\windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x]
  99. .
  100. .
  101. --- Other Services/Drivers In Memory ---
  102. .
  103. *NewlyCreated* - PWDIIFOW
  104. *Deregistered* - pwdiifow
  105. .
  106. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
  107. LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr QWAVE wcncsvc
  108. .
  109. Contents of the 'Scheduled Tasks' folder
  110. .
  111. 2017-03-22 c:\windows\Tasks\AutoKMS.job
  112. - c:\windows\AutoKMS\AutoKMS.exe [2015-10-28 08:33]
  113. .
  114. 2016-08-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
  115. - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-06-19 10:21]
  116. .
  117. 2016-08-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
  118. - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-06-19 10:21]
  119. .
  120. .
  121. --------- X64 Entries -----------
  122. .
  123. .
  124. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  125. "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-02-18 11779176]
  126. "IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-07-23 161304]
  127. "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-07-23 386584]
  128. "Persistence"="c:\windows\system32\igfxpers.exe" [2010-07-23 415256]
  129. "ETDCtrl"="c:\program files (x86)\Elantech\ETDCtrl.exe" [BU]
  130. "Power Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2011-08-02 1831016]
  131. "AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-04-04 446392]
  132. .
  133. ------- Supplementary Scan -------
  134. .
  135. uLocal Page = c:\windows\system32\blank.htm
  136. mLocal Page = c:\windows\SysWOW64\blank.htm
  137. IE: &Enviar a OneNote - c:\progra~2\MICROS~4\Office14\ONBttnIE.dll/105
  138. IE: E&xportar a Microsoft Excel - c:\progra~2\MICROS~4\Office14\EXCEL.EXE/3000
  139. TCP: DhcpNameServer = 212.231.6.7 8.8.8.8 192.168.1.1
  140. FF - ProfilePath - c:\users\daw\AppData\Roaming\Mozilla\Firefox\Profiles\3fxts8kv.default-1486034880091\
  141. .
  142. - - - - ORPHANS REMOVED - - - -
  143. .
  144. Toolbar-Locked - (no file)
  145. .
  146. .
  147. .
  148. --------------------- LOCKED REGISTRY KEYS ---------------------
  149. .
  150. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
  151. @Denied: (A 2) (Everyone)
  152. @="FlashBroker"
  153. "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10x_ActiveX.exe,-101"
  154. .
  155. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
  156. "Enabled"=dword:00000001
  157. .
  158. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
  159. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10x_ActiveX.exe"
  160. .
  161. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
  162. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  163. .
  164. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
  165. @Denied: (A 2) (Everyone)
  166. @="Shockwave Flash Object"
  167. .
  168. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
  169. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10x.ocx"
  170. "ThreadingModel"="Apartment"
  171. .
  172. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
  173. @="0"
  174. .
  175. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
  176. @="ShockwaveFlash.ShockwaveFlash.10"
  177. .
  178. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  179. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10x.ocx, 1"
  180. .
  181. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
  182. @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
  183. .
  184. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
  185. @="1.0"
  186. .
  187. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  188. @="ShockwaveFlash.ShockwaveFlash"
  189. .
  190. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
  191. @Denied: (A 2) (Everyone)
  192. @="Macromedia Flash Factory Object"
  193. .
  194. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
  195. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10x.ocx"
  196. "ThreadingModel"="Apartment"
  197. .
  198. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
  199. @="FlashFactory.FlashFactory.1"
  200. .
  201. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  202. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10x.ocx, 1"
  203. .
  204. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
  205. @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
  206. .
  207. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
  208. @="1.0"
  209. .
  210. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  211. @="FlashFactory.FlashFactory"
  212. .
  213. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
  214. @Denied: (A 2) (Everyone)
  215. @="IFlashBroker4"
  216. .
  217. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
  218. @="{00020424-0000-0000-C000-000000000046}"
  219. .
  220. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
  221. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  222. "Version"="1.0"
  223. .
  224. [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
  225. "SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
  226. 00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
  227. .
  228. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
  229. @Denied: (A) (Everyone)
  230. "Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
  231. .
  232. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
  233. @Denied: (A) (Everyone)
  234. .
  235. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
  236. "Key"="ActionsPane3"
  237. "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
  238. .
  239. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
  240. @Denied: (Full) (Everyone)
  241. .
  242. Completion time: 2019-06-04 17:06:41
  243. ComboFix-quarantined-files.txt 2019-06-04 15:06
  244. ComboFix2.txt 2019-06-04 14:50
  245. .
  246. Pre-Run: 536.667.234.304 bytes libres
  247. Post-Run: 537.210.654.720 bytes libres
  248. .
  249. - - End Of File - - FA578A0C9798EFE2CAD74018B7E74BD4
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement