I was able to have DDS run and create a log, but GMER crashes mid scan and then shortly after my computer memory dumps and reboots, here is the DDS log and attachment
.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Goofy at 19:57:09.39 on Mon 03/21/2011
Internet Explorer: 9.0.8080.16413 BrowserJavaVersion: 1.6.0_23
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3326.2110 [GMT -4:00]
.
AV: Norton Security Suite *Enabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
AV: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton Security Suite *Enabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
FW: Norton Security Suite *Enabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
C:\Program Files\Norton Security Suite\Engine\4.3.0.5\ccSvcHst.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\DllHost.exe
C:\Program Files\Norton Security Suite\Engine\4.3.0.5\ccSvcHst.exe
C:\Windows\system32\Dwm.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\wermgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Users\Goofy\Downloads\dds.scr
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://google.com/
BHO: Octh Class: {000123b4-9b42-4900-b3f7-f4b073efc214} - c:\program files\orbitdownloader\orbitcth.dll
BHO: BitComet Helper: {39f7e362-828a-4b5a-bcaf-5b79bfdfea60} - c:\program files\bitcomet\tools\BitCometBHO_1.4.12.6.dll
BHO: Symantec NCO BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - c:\program files\norton security suite\engine\4.3.0.5\coIEPlg.dll
BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\program files\norton security suite\engine\4.3.0.5\IPSBHO.DLL
BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - c:\program files\norton security suite\engine\4.3.0.5\coIEPlg.dll
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [ATICustomerCare] "c:\program files\ati\aticustomercare\ATICustomerCare.exe"
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [nmctxth] "c:\program files\common files\pure networks shared\platform\nmctxth.exe"
mRun: [Linksys Wireless Manager] "c:\program files\linksys\linksys wireless manager\LinksysWirelessManager.exe" /cm /min /lcid 1033
mRun: [PWRISOVM.EXE] c:\program files\poweriso\PWRISOVM.EXE
mRunOnce: [AvgUninstallURL] cmd.exe /c start
http://www.avg.com/ww.special-uninstallation-feedback-appf?lic=NFVZOVgtTlNWVkwtTzRCWlEtUUlNQ0wtUVREQ0gtNElKTUg"&"inst=NzctNTY2NzMyMzQwLVhPMTArMTI"&"prod=90"&"ver=10.0.1204
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\orbit.lnk - c:\program files\orbitdownloader\orbitdm.exe
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: &D&ownload &with BitComet - c:\program files\bitcomet\BitComet.exe/AddLink.htm
IE: &D&ownload all with BitComet - c:\program files\bitcomet\BitComet.exe/AddAllLink.htm
IE: &Download by Orbit - c:\program files\orbitdownloader\orbitmxt.dll/201
IE: &Grab video by Orbit - c:\program files\orbitdownloader\orbitmxt.dll/204
IE: Do&wnload selected by Orbit - c:\program files\orbitdownloader\orbitmxt.dll/203
IE: Down&load all by Orbit - c:\program files\orbitdownloader\orbitmxt.dll/202
IE: {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://c:\program files\bitcomet\tools\BitCometBHO_1.4.12.6.dll/206
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} -
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} - hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.4.21.0.cab
TCP: {EB0640A3-7F11-45C0-95D2-19B0F61B828A} = 68.87.68.166,68.87.74.166
Handler: pure-go - {4746C79A-2042-4332-8650-48966E44ABA8} - c:\program files\common files\pure networks shared\platform\puresp4.dll
Hosts: 127.0.0.1 www.spywareinfo.com
.
============= SERVICES / DRIVERS ===============
.
R0 SymDS;Symantec Data Store;c:\windows\system32\drivers\n360\0403000.005\symds.sys [2010-11-8 328752]
R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\n360\0403000.005\symefa.sys [2010-11-8 173104]
R1 BHDrvx86;BHDrvx86;c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_4.0.0.127\definitions\bashdefs\20110225.002\BHDrvx86.sys [2011-2-25 800376]
R1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\n360\0403000.005\cchpx86.sys [2010-11-8 501888]
R1 IDSVix86;IDSVix86;c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_4.0.0.127\definitions\ipsdefs\20110314.004\IDSvix86.sys [2011-3-16 353912]
R1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\n360\0403000.005\ironx86.sys [2010-11-8 116784]
R1 SYMTDIv;Symantec Vista Network Dispatch Driver;c:\windows\system32\drivers\n360\0403000.005\symtdiv.sys [2010-11-8 339504]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-9-28 176128]
R2 AMD FUEL Service;AMD FUEL Service;c:\program files\ati technologies\ati.ace\fuel\Fuel.Service.exe [2011-1-26 284672]
R2 AMD Reservation Manager;AMD Reservation Manager;c:\program files\ati technologies\ati.ace\reservation manager\AMD Reservation Manager.exe [2010-6-17 140224]
R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-20 21504]
R2 N360;Norton Security Suite;c:\program files\norton security suite\engine\4.3.0.5\ccsvchst.exe [2010-11-8 126392]
R2 SBSDWSCService;SBSD Security Center Service;c:\program files\spybot - search & destroy\SDWinSec.exe [2009-8-9 1153368]
R3 amdiox86;AMD IO Driver;c:\windows\system32\drivers\amdiox86.sys [2011-3-13 37944]
R3 amdkmdag;amdkmdag;c:\windows\system32\drivers\atikmdag.sys [2011-1-27 7566848]
R3 amdkmdap;amdkmdap;c:\windows\system32\drivers\atikmpag.sys [2011-1-26 238592]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdLH3.sys [2010-11-17 97296]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2010-11-8 102448]
R3 netr28u;Linksys USB Wireless LAN Card Driver for Vista;c:\windows\system32\drivers\netr28u.sys [2011-1-22 735232]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S3 PAC207;Basic Webcam;c:\windows\system32\drivers\PFC027.SYS [2008-2-13 618112]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
S4 atashost;WebEx Service Host for Support Center;c:\windows\system32\atashost.exe [2011-1-22 20376]
.
=============== Created Last 30 ================
.
2011-03-16 03:32:17 -------- d-----w- c:\users\goofy\appdata\roaming\AVG10
2011-03-16 03:31:05 -------- d--h--w- c:\progra~2\Common Files
2011-03-16 03:30:27 -------- d-----w- c:\progra~2\AVG10
2011-03-16 03:30:05 -------- d-----w- c:\program files\AVG
2011-03-16 03:25:24 -------- d-----w- c:\progra~2\MFAData
2011-03-15 22:32:22 -------- d-----w- c:\program files\FLV to MP4 Converter
2011-03-13 15:40:12 -------- d-----w- c:\users\goofy\appdata\local\AMD
2011-03-13 15:40:02 -------- d-----w- c:\program files\ATI Stream
2011-03-13 15:39:52 -------- d-----w- c:\progra~2\AMD
2011-03-13 15:39:37 37944 ----a-w- c:\windows\system32\drivers\amdiox86.sys
2011-03-10 00:32:28 -------- d-sh--w- c:\windows\system32\%APPDATA%
2011-03-10 00:23:11 -------- d-----w- c:\program files\Feedback Tool
2011-03-10 00:09:29 -------- d-----w- c:\users\goofy\appdata\roaming\ProgSense
2011-03-05 20:56:52 -------- d-----w- c:\users\goofy\appdata\roaming\4Media
2011-03-03 19:00:22 758784 ----a-w- c:\windows\system32\cohelper.dll
2011-03-03 19:00:22 11164 ----a-w- c:\windows\system32\drivers\nvphy.bin
2011-03-03 19:00:21 -------- d-----w- c:\program files\NVIDIA Corporation
2011-03-03 00:21:42 31744 ----a-w- c:\windows\system32\WnASPI32.dll
2011-03-03 00:19:05 -------- d-----w- c:\program files\common files\cdrdao
2011-03-01 04:34:03 3719384 ----a-w- c:\program files\mozilla firefox\RJParser.exe
2011-02-24 20:52:05 -------- d-----w- c:\program files\RIFT Game
2011-02-24 08:01:12 2048 ----a-w- c:\windows\system32\winrsmgr.dll
2011-02-24 08:01:04 40448 ----a-w- c:\windows\system32\winrs.exe
2011-02-24 08:01:04 20480 ----a-w- c:\windows\system32\winrshost.exe
2011-02-24 08:01:04 12800 ----a-w- c:\windows\system32\wsmprovhost.exe
2011-02-24 08:01:03 10240 ----a-w- c:\windows\system32\wsmplpxy.dll
2011-02-24 08:01:03 10240 ----a-w- c:\windows\system32\winrssrv.dll
2011-02-24 08:01:02 81408 ----a-w- c:\windows\system32\wevtfwd.dll
2011-02-24 08:01:02 79872 ----a-w- c:\windows\system32\wecutil.exe
2011-02-24 08:01:02 56320 ----a-w- c:\windows\system32\wecapi.dll
2011-02-24 08:01:02 54272 ----a-w- c:\windows\system32\WsmRes.dll
2011-02-24 08:01:02 41472 ----a-w- c:\windows\system32\pwrshplugin.dll
2011-02-24 08:01:02 146944 ----a-w- c:\windows\system32\wecsvc.dll
2011-02-24 08:00:59 201184 ----a-w- c:\windows\system32\winrm.vbs
2011-02-24 08:00:57 252416 ----a-w- c:\windows\system32\WSManMigrationPlugin.dll
2011-02-24 08:00:57 246272 ----a-w- c:\windows\system32\WSManHTTPConfig.exe
2011-02-24 08:00:57 241152 ----a-w- c:\windows\system32\winrscmd.dll
2011-02-24 08:00:57 214016 ----a-w- c:\windows\system32\WsmWmiPl.dll
2011-02-24 08:00:57 145408 ----a-w- c:\windows\system32\WsmAuto.dll
2011-02-24 08:00:56 1181696 ----a-w- c:\windows\system32\WsmSvc.dll
.
==================== Find3M ====================
.
2011-02-04 03:48:19 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-01-27 04:00:46 143360 ----a-w- c:\windows\system32\atiapfxx.exe
2011-01-27 04:00:32 596480 ----a-w- c:\windows\system32\aticfx32.dll
2011-01-27 03:59:48 17204736 ----a-w- c:\windows\system32\atioglxx.dll
2011-01-27 03:56:30 462848 ----a-w- c:\windows\system32\ATIDEMGX.dll
2011-01-27 03:55:56 393216 ----a-w- c:\windows\system32\atieclxx.exe
2011-01-27 03:55:26 176128 ----a-w- c:\windows\system32\atiesrxx.exe
2011-01-27 03:54:12 159744 ----a-w- c:\windows\system32\atitmmxx.dll
2011-01-27 03:53:56 356352 ----a-w- c:\windows\system32\atipdlxx.dll
2011-01-27 03:53:44 278528 ----a-w- c:\windows\system32\Oemdspif.dll
2011-01-27 03:53:36 15872 ----a-w- c:\windows\system32\atimuixx.dll
2011-01-27 03:53:28 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2011-01-27 03:49:46 4105728 ----a-w- c:\windows\system32\atidxx32.dll
2011-01-27 03:32:14 1912832 ----a-w- c:\windows\system32\atiumdmv.dll
2011-01-27 03:28:54 4170752 ----a-w- c:\windows\system32\atiumdag.dll
2011-01-27 03:27:52 46080 ----a-w- c:\windows\system32\aticalrt.dll
2011-01-27 03:27:42 44032 ----a-w- c:\windows\system32\aticalcl.dll
2011-01-27 03:25:52 5580800 ----a-w- c:\windows\system32\aticaldd.dll
2011-01-27 03:24:20 3463680 ----a-w- c:\windows\system32\atiumdva.dll
2011-01-27 03:20:46 52736 ----a-w- c:\windows\system32\coinst.dll
2011-01-27 03:14:08 249856 ----a-w- c:\windows\system32\atiadlxx.dll
2011-01-27 03:13:54 12800 ----a-w- c:\windows\system32\atiglpxx.dll
2011-01-27 03:13:44 32768 ----a-w- c:\windows\system32\atigktxx.dll
2011-01-27 03:12:42 30720 ----a-w- c:\windows\system32\atiuxpag.dll
2011-01-27 03:12:26 28672 ----a-w- c:\windows\system32\atiu9pag.dll
2011-01-27 03:12:00 23040 ----a-w- c:\windows\system32\atitmpxx.dll
2011-01-27 03:08:42 52736 ----a-w- c:\windows\system32\atimpc32.dll
2011-01-27 03:08:42 52736 ----a-w- c:\windows\system32\amdpcom32.dll
2011-01-23 03:50:11 8892928 ----a-w- c:\progra~2\atscie.msi
2011-01-20 16:08:16 478720 ----a-w- c:\windows\system32\dxgi.dll
2011-01-20 16:08:06 219648 ----a-w- c:\windows\system32\d3d10_1core.dll
2011-01-20 16:08:06 189952 ----a-w- c:\windows\system32\d3d10core.dll
2011-01-20 16:08:06 160768 ----a-w- c:\windows\system32\d3d10_1.dll
2011-01-20 16:08:06 1029120 ----a-w- c:\windows\system32\d3d10.dll
2011-01-20 16:07:58 37376 ----a-w- c:\windows\system32\cdd.dll
2011-01-20 16:07:42 258048 ----a-w- c:\windows\system32\winspool.drv
2011-01-20 16:07:16 586240 ----a-w- c:\windows\system32\stobject.dll
2011-01-20 16:06:38 2873344 ----a-w- c:\windows\system32\mf.dll
2011-01-20 16:06:35 26112 ----a-w- c:\windows\system32\printfilterpipelineprxy.dll
2011-01-20 16:04:54 98816 ----a-w- c:\windows\system32\mfps.dll
2011-01-20 16:04:54 209920 ----a-w- c:\windows\system32\mfplat.dll
2011-01-20 14:28:38 1554432 ----a-w- c:\windows\system32\xpsservices.dll
2011-01-20 14:27:50 876032 ----a-w- c:\windows\system32\XpsPrint.dll
2011-01-20 14:26:30 667648 ----a-w- c:\windows\system32\printfilterpipelinesvc.exe
2011-01-20 14:25:25 847360 ----a-w- c:\windows\system32\OpcServices.dll
2011-01-20 14:24:32 288768 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-01-20 14:24:26 135680 ----a-w- c:\windows\system32\XpsRasterService.dll
2011-01-20 14:15:10 979456 ----a-w- c:\windows\system32\MFH264Dec.dll
2011-01-20 14:14:39 357376 ----a-w- c:\windows\system32\MFHEAACdec.dll
2011-01-20 14:14:03 302592 ----a-w- c:\windows\system32\mfmp4src.dll
2011-01-20 14:14:03 261632 ----a-w- c:\windows\system32\mfreadwrite.dll
2011-01-20 14:12:46 1172480 ----a-w- c:\windows\system32\d3d10warp.dll
2011-01-20 14:11:34 486400 ----a-w- c:\windows\system32\d3d10level9.dll
2011-01-20 13:47:51 683008 ----a-w- c:\windows\system32\d2d1.dll
2011-01-20 13:44:05 1068544 ----a-w- c:\windows\system32\DWrite.dll
2011-01-20 13:44:03 797184 ----a-w- c:\windows\system32\FntCache.dll
2011-01-08 08:47:50 34304 ----a-w- c:\windows\system32\atmlib.dll
2011-01-08 06:28:49 292352 ----a-w- c:\windows\system32\atmfd.dll
2010-12-31 13:57:01 2039808 ----a-w- c:\windows\system32\win32k.sys
2010-12-28 15:55:03 413696 ----a-w- c:\windows\system32\odbc32.dll
2008-05-03 04:02:45 237568 ----a-w- c:\program files\Uninstall Morpheus Toolbar.dll
.
=================== ROOTKIT ====================
.
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer,
http://www.gmer.net
Windows 6.0.6002 Disk: WDC_WD50 rev.12.0 -> Harddisk0\DR0 ->
.
device: opened successfully
user: MBR read successfully
.
Disk trace:
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll >>UNKNOWN [0x86FA5439]<<
_asm { PUSH EBP; MOV EBP, ESP; PUSH ECX; MOV EAX, [EBP+0x8]; CMP EAX, [0x86fab7b8]; MOV EAX, [0x86fab834]; PUSH EBX; PUSH ESI; MOV ESI, [EBP+0xc]; MOV EBX, [ESI+0x60]; PUSH EDI; JNZ 0x20; MOV [EBP+0x8], EAX; }
1 ntkrnlpa!IofCallDriver[0x81E84912] -> \Device\Harddisk0\DR0[0x86905AC8]
3 CLASSPNP[0x8AFAC8B3] -> ntkrnlpa!IofCallDriver[0x81E84912] -> [0x857A3100]
5 acpi[0x824126BC] -> ntkrnlpa!IofCallDriver[0x81E84912] -> [0x857A3B38]
\Driver\nvstor32[0x86C0EE90] -> IRP_MJ_CREATE -> 0x86FA5439
kernel: MBR read successfully
_asm { XOR AX, AX; MOV SS, AX; MOV SP, 0x7c00; MOV ES, AX; MOV DS, AX; MOV SI, 0x7c00; MOV DI, 0x600; MOV CX, 0x200; CLD ; REP MOVSB ; PUSH AX; PUSH 0x61c; RETF ; STI ; MOV CX, 0x4; MOV BP, 0x7be; CMP BYTE [BP+0x0], 0x0; }
detected disk devices:
\Device\00000066 -> \??\SCSI#Disk&Ven_WDC_WD50&Prod_00AAKS-00YGA#4&2a8602f4&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b} device not found
detected hooks:
user & kernel MBR OK
Warning: possible TDL3 rootkit infection !
.
============= FINISH: 19:58:00.63 ===============
Attach.txt 3.29KB
0 downloads