Malware Chinese Characters

Bluesbreaker · Feb 2, 2016

Hi guys, been a couple years since I posted here but I'm back! Hope you've all been good...I will be posting posting files tomorrow but for some reason was not able to get roguekiller to work. It just sat there initializing. Not sure if it's due to the malware. The other stuff did run and as you will see. Thanks for your assistance.

Kestrel13! · Feb 3, 2016

Try running RogueKiller in safe mode and see how you get on.

Bluesbreaker · Feb 3, 2016

Hi Kestrel- thanks. when you say run it in safe mode, is that Windows? I'm running this Windows 8 crap. Or do you mean the program. And how do I do it?

In any event, I've uploaded the files I was able to generate after following the Read Me First section

Kestrel13! · Feb 3, 2016

To access safe mode: http://www.howtogeek.com/107511/how-to-boot-into-safe-mode-on-windows-8-the-easy-way/

Kestrel13! · Feb 3, 2016

I would also like to have you run these please...

Please download Junkware Removal Tool to your desktop.

Shut down your protection software now to avoid potential conflicts.

Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.

The tool will open and start scanning your system.

Please be patient as this can take a while to complete depending on your system's specifications.

On completion, a log (JRT.txt) is saved to your desktop and will automatically open.

Attach JRT.txt to your next message.

Please download the latest version of Farbar Recovery Scan Tool and save it to your desktop.

Note: Make sure you download the correct version for your PC. Only the correct version will work.

Double-click to run it. When the tool opens click Yes to disclaimer.

Press Scan button.

It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your next reply.

The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

Bluesbreaker · Feb 3, 2016

Ok Kestrel, I was able to run roguekiller in safe mode and have the output which I will upload this evening. I will try and run the other two programs concurrently and upload all three outputs at once.

Talk to you in a bit. and thanks...

Kestrel13! · Feb 3, 2016

You're welcome. I have to pop out soon, but I shouldn't be long in coming home again.

Bluesbreaker · Feb 3, 2016

ok and here they all be. Note the Farbar generated the two files, and so there are 4 attachments....thanks again Kestrel13!

Kestrel13! · Feb 4, 2016

Hi there

Before we continue I would like for you to use MSConfig to put this machine back into normal start up mode, if you haven't done so already.

Fix items using RogueKiller.

Double-click RogueKiller.exe to run. (Vista/7/8 right-click and select Run as Administrator)
When it opens, press the Scan button
Now click the Registry tab and locate these detections:

[PUP] (X64) HKEY_LOCAL_MACHINE\Software\Partner -> Found

[PUP] (X86) HKEY_LOCAL_MACHINE\Software\Tencent -> Found

[PUP] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\.QMDeskTopGCIcon | (default) : {B7667919-3765-4815-A66D-98A09BE662D6} (C:\Program Files (x86)\Tencent\QQPCMgr\11.2.17058.221\QMGCShellExt64.dll) -> Found

[PUP] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7C260B4B-F7A0-40B5-B403-BEFCDC6A4C3B} (C:\Program Files (x86)\Tencent\QQPCMgr\11.2.17058.221\TSWebMon64.dat) -> Found

[PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{15DEE173-1BE9-4424-81E0-58A87076E9B1} -> Found

[PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{50F4150A-48B2-417A-BE4C-C83F580FB904} -> Found

[Suspicious.Path] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | setup : C:\Users\lil-nicky\AppData\Local\Temp\setup.exe /start [-][x] -> Found

[PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | QQPCTray : "C:\Program Files (x86)\Tencent\QQPCMgr\11.2.17058.221\QQPCTray.exe" /regrun [7][x] -> Found

[PUP] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\QMUdisk (\??\C:\Program Files (x86)\Tencent\QQPCMgr\11.2.17058.221\QMUdisk64.sys) -> Found

[PUP] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\QQPCRTP ("C:\Program Files (x86)\Tencent\QQPCMgr\11.2.17058.221\QQPCRTP.exe" -r) -> Found

[PUP] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\QQSysMonX64 (\??\C:\Program Files (x86)\Tencent\QQPCMgr\11.2.17058.221\QQSysMonX64.sys) -> Found

[PUP] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\softaal (\??\C:\Program Files (x86)\Tencent\QQPCMgr\11.2.17058.221\softaal64.sys) -> Found

[PUP] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TAOAccelerator (\??\C:\WINDOWS\system32\Drivers\TAOAccelerator64.sys) -> Found

[PUP] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TAOKernelDriver (\??\C:\WINDOWS\system32\Drivers\TAOKernelEx64.sys) -> Found

[PUP] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TFsFlt (system32\Drivers\TFsFltX64.sys) -> Found

[PUP] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TS888x64 (\??\C:\Program Files (x86)\Tencent\QQPCMgr\11.2.17058.221\TS888x64.sys) -> Found

[PUP] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TSDefenseBt (\??\C:\Program Files (x86)\Tencent\QQPCMgr\11.2.17058.221\TSDefenseBT64.sys) -> Found

[PUP] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TSKSP -> Found

[PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\QMUdisk (\??\C:\Program Files (x86)\Tencent\QQPCMgr\11.2.17058.221\QMUdisk64.sys) -> Found

[PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\QQPCRTP ("C:\Program Files (x86)\Tencent\QQPCMgr\11.2.17058.221\QQPCRTP.exe" -r) -> Found

[PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\QQSysMonX64 (\??\C:\Program Files (x86)\Tencent\QQPCMgr\11.2.17058.221\QQSysMonX64.sys) -> Found

[PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\softaal (\??\C:\Program Files (x86)\Tencent\QQPCMgr\11.2.17058.221\softaal64.sys) -> Found

[PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\TAOAccelerator (\??\C:\WINDOWS\system32\Drivers\TAOAccelerator64.sys) -> Found

[PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\TAOKernelDriver (\??\C:\WINDOWS\system32\Drivers\TAOKernelEx64.sys) -> Found

[PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\TFsFlt (system32\Drivers\TFsFltX64.sys) -> Found

[PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\TS888x64 (\??\C:\Program Files (x86)\Tencent\QQPCMgr\11.2.17058.221\TS888x64.sys) -> Found

[PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\TSDefenseBt (\??\C:\Program Files (x86)\Tencent\QQPCMgr\11.2.17058.221\TSDefenseBT64.sys) -> Found

[PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\TSKSP -> Found

[PUM.HomePage] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | Start Page : http://www.hao123.com/?tn=92719201_hao_pg -> Found

[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-1277821213-748431931-1829802651-1000\Software\Microsoft\Internet Explorer\Main | Start Page : http://www.hao123.com/?tn=92719201_hao_pg -> Found

[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-1277821213-748431931-1829802651-1000\Software\Microsoft\Internet Explorer\Main | Start Page : http://www.hao123.com/?tn=92719201_hao_pg -> Found

Place a checkmark next to each of these items, leave the others unchecked.
Now press the Delete button.

...and the same for these entries on the FILES tab please...

[PUP][Folder] C:\Program Files (x86)\135E38C0-1454212261-11E0-9063-F46D04471F05 -> Found

[PUP][Folder] C:\Program Files (x86)\SimpleSpeedy -> Found

[PUP][Folder] C:\Program Files (x86)\Tencent -> Found

...and same for these on the Antirootkit tab...

[IAT:Inl(Hook.IEAT)] (firefox.exe) kernel32!ExitProcess : C:\ProgramData\Tencent\TSVulFw\TSVulFW.DAT @ 0x705081c1 (jmp 0xfba40cd1)

[IAT:Inl(Hook.IEAT)] (firefox.exe @ KERNELBASE.dll) ntdll!TpReleaseIoCompletion : C:\Program Files (x86)\Tencent\QQPCMgr\11.2.17058.221\TSWebMon.dat @ 0x6df1e675 (jmp 0xf6ad1eb5)

[IAT:Inl(Hook.IEAT)] (firefox.exe @ advapi32.dll) kernel32!CreateThreadpoolIo : C:\Program Files (x86)\Tencent\QQPCMgr\11.2.17058.221\TSWebMon.dat @ 0x6df1eca0 (jmp 0xf943e210)

[IAT:Inl(Hook.IEAT)] (firefox.exe @ wsock32.dll) ws2_32!WSARecv : C:\Program Files (x86)\Tencent\QQPCMgr\11.2.17058.221\TSWebMon.dat @ 0x6df1e97d (jmp 0xf7bf12bd)

[IAT:Inl(Hook.IEAT)] (firefox.exe @ xul.dll) shell32!ShellExecuteExW : C:\Program Files (x86)\Tencent\QQPCMgr\11.2.17058.221\TSWebMon.dat @ 0x6df45f6e (jmp 0xf90ec38e)

[IAT:Inl(Hook.IEAT)] (firefox.exe @ dnsapi.dll) ws2_32!WSASocketW : C:\Program Files (x86)\Tencent\QQPCMgr\11.2.17058.221\TSWebMon.dat @ 0x6df1e601 (jmp 0xf7bf4d61)

When it is finished, there will be a log on your desktop called: RKreport[2].txt
Attach RKreport[2].txt to your next message. (How to attach)
Reboot the machine.

NOTE: This script was written specifically for this user for use on this particular computer. Running this on another machine may cause damage to your operating system.
Download Fixlist.txt

Save fixlist.txt on your Desktop. Make sure you save it as a txt file.

You should now have both fixlist.txt and FRST64.exe on your Desktop.

Now I want you to disconnect your PC connection to the internet by unplugging the cable ( if it is wireless then temporarily shutdown the wireless network ).

Run FRST64.exe by right clicking on it and selecting Run As Adminstrator

Click the Fix button just once and wait.

Your computer should reboot after the fix runs.

Reconnect your internet connection after reboot so you can come back here to continue.

The tool will make a log on the Desktop (Fixlog.txt) please attach this new log to your next reply (attach or paste)

Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Win7, don't double click, use right click and select Run As Administrator).

Then attach the below logs:

Fixlog.txt

C:\MGlogs.zip

Please attach the above two log first before you continue with the below.
Also at this point, I want to double check the status of things by having you run another scan with FRST like in my last message and attach the new FRST.txt and Addition.txt logs.

Also re run Hitman Pro and upload fresh log.
Same for RogueKiller.

Bluesbreaker · Feb 4, 2016

Hi Kestrel - thank you. I'll do this and hopefully have the logs uploaded tonight/tomorrow am. Just by way of interest, are you aware of the virus/viruses that I have so grandiosely infested my computer with?

Kestrel13! · Feb 4, 2016

Not virus, just junk.

Bluesbreaker · Feb 4, 2016

so just junk like malware junk?

also, Roguekiller, in normal mode, is doing that long time initialization thing. Should I run it in safe again?

Kestrel13! · Feb 4, 2016

Yes, run it in safe mode if necessary

Bluesbreaker · Feb 4, 2016

OK. Tried to reboot and I get to login screen. Login and get an error message about cannot reply windows script host. And blank screen. I can ctrl alt delete to task manager but nothing else. There is a cursor...and I can hear the drive sometimes thinking.

Kestrel13! · Feb 4, 2016

Can you give me the exact word for word error message that you recieve please?

Bluesbreaker · Feb 4, 2016

Hi I will get it over probably tomorrow morning. Is that OK? And Am I pooched??

Kestrel13! · Feb 4, 2016

I'm not sure until I know the exact error message. Just to reassure you, nothing I removed in the last fix was legit - it was all junk.

Bluesbreaker · Feb 5, 2016

Good morning. Error message says Windows Script Host. Can not find script file c:\windows\run.vbs

M also still in safe mode fyi.

Kestrel13! · Feb 5, 2016

Hi there. I've just woken up...give me a few.

Bluesbreaker · Feb 5, 2016

Kestrel13! said: ↑

Hi there. I've just woken up...give me a few.
Click to expand...

Take your time my son

Kestrel13! · Feb 5, 2016

Bluesbreaker said: ↑

Take your time my son
Click to expand...

More like a daughter. I would like to explain that I did indeed kill that file: C:\Windows\run.vbs
It struck me as odd, and I elected to remove it.

Did you already run my fix with FRST in post #9? (I'm assuming so)

Kestrel13! · Feb 5, 2016

Please try running this:

Now run Repair_Windows.exe http://majorgeeks.com/Tweaking.com_-_Windows_Repair_Portable_d7222.html by double clicking on it ( if you are running Vista or Win 7, use right click and select Run As Administrator)
Now select the + Repairs tab.
Then click the + Open Repairs button down on the bottom right.
This will automatically begin a registry backup, so wait for it to complete and when it finishes, you will see a list of many possible different repairs and they are all selected by default. At the bottom of this form there is a not so obvious Unselect All Repairs check box which is to the right of a check box with a green check mark in it. Please click the Unselect All Repairs box. The green check mark box is to Select All Repairs. The ony way you see what these boxes are is when your mouse hovers over them.
Now select the following repair options ( the numbers at the begin are the current repair numbers but this is subject to change.)

01 - Reset Registry Permissions
02 - Reset File Permissions
03 - Reset Service Permissions
04 - Register System Files
05 - Repair WMI
06 - Repair Windows Firewall
10 - Remove Policies Set By Infections
13 - Repair Network
14 - Repair Proxy Settings
15 - Repair Windows Updates
21 - Repair MSI (Windows Installer)
23 - Repair File Associations (12 )
26 - Restore Important Windows Services
27 - Set Windows Services To Default Startup

Now on the right side under the When Repairs Complete title, check the box for Restart/Shutdown System and then make sure the Restart System radio button is enabled not the Shutdown System button.
Shutdown any other programs that you are running now before continuing.
Now click the Start Repairs button at the lower right.
Be patient while the tool repairs the selected items.
It should reboot automatically when finished. If it does not then reboot it yourself.

Are you now able to log into Windows in normal mode?

Bluesbreaker · Feb 5, 2016

The plot thickens!
so here's my problem. when I power up, the login screen comes up and when I put in my password, I get that script error. Then nothing. black screen, no desktop, nothing. I have no internet access b/c I"m in safe mode. All I can do is do that CtrlAltDel and get the task manager so Id on't know how I can download this file or even access any of the files I previously downloaded. I'm kind of in a limbo....

Kestrel13! · Feb 5, 2016

How are you communicating with me now Bluesbreaker?
And let me know whether you followed my FRST fix from post #9

Bluesbreaker · Feb 5, 2016

I'm at work on a work computer. Plus I have my blackberry and I log into the forum from there...

Kestrel13! · Feb 5, 2016

And did you definately follow my post #9 fix with FRST?

Kestrel13! · Feb 5, 2016

You need to use another computer to transfer windows repair onto your own PC and run it in safe mode please.

Bluesbreaker · Feb 5, 2016

Sorry Kestrel, yes, I got to the point where I saved the Fix File and ran the fix. So I ran Roguekiller in Safe, removed the relevant files (some had already appeared to be removed) that you identified, then ran FRST with the FIX file. Then, when I went to reboot, I ended up here.

As it pertains to Windows Repair, the steps would be: 1) I save the file onto a flash drive and 2) plug it into my computer, then 3) reboot my computer and do what? Remember, I don't know how to access any files, only the Task Manager bar and the power offs, etc. Is there some key sequence I need to do in order to access and run files? I have no desktop files and don't know how to access any drives.....

Kestrel13! · Feb 5, 2016

But safe mode works, does it not?

Bluesbreaker · Feb 5, 2016

no. I dont get to see the desktop. This is what happens. You power up and log in with password. It does the little spinning stars or whatever, then up pops the script error message. Once you X or OK out of that box, you end up with a black screen with no desktop icons. you have a cursor, but no icons. you can ctrl -alt-del into the task manager and get the usual options. but I don't see how to run any application?

Kestrel13! · Feb 5, 2016

So now safe mode and normal mode do not let you in? (Just to clarify)

Bluesbreaker · Feb 5, 2016

Correct. when you say not let me in, you mean no desktop icons? the only reason I was running safe mode was because Roguekiller wouldn't run otherwise. so I ended up staying in safe mode after the FIX file was run, because I haven't been able to do anything else (black screen, cursor, no icons, etc). that's why I'm wondering is there some key code that helps me bypass this

Kestrel13! · Feb 5, 2016

Hang in there I am having a think, and consulting with colleagues.

Kestrel13! · Feb 5, 2016

Try using the automatic repair option: http://www.howtogeek.com/131916/how...artup-options-to-fix-your-windows-8-computer/

Ways to access it: http://www.howtogeek.com/126016/three-ways-to-access-the-windows-8-boot-options-menu/

Links say Win 8 but applies to Win 10 too.

Bluesbreaker · Feb 5, 2016

ok I'm heading home soon and will give this a shot. thanks Kestrel.

Kestrel13! · Feb 5, 2016

You are most welcome.

Bluesbreaker · Feb 5, 2016

Please. Call me blues. So to confirm what am I doin is trying to access the flash drive drive I stored the repair program on and running I from there?

Kestrel13! · Feb 5, 2016

Hi Blues,

You need to focus on my post #34 now, no software or flashdrive needed for this. The automatic repair is built into Windows.

Bluesbreaker · Feb 5, 2016

So if I can get intosystem restore a doing automatic repairor restore point?

Kestrel13! · Feb 5, 2016

1 press shift + restart
2 click the troubleshoot button
3 click the advanced options
4 click automatic repair
5 follow the steps

This is to try and repair Windows, nothing to do with restore points.

Bluesbreaker · Feb 5, 2016

So it says startup repair couldn't repair and to try advanced options. It did create a log file.

Bluesbreaker · Feb 5, 2016

Now I havent done anything but I went to system restore and have 2 options. JRT prejunkware removal on Feb3 or Checkpoint by Hitman Pro I Feb 2.

Kestrel13! · Feb 6, 2016

Hold off on the System Restore, Blues, I have one last thing to try. I am seeking assistance. Hang in there.

Kestrel13! · Feb 6, 2016

Press Ctrl + Shift + Esc to bring up the Task Manager (you said you could do this) then click on File -> New Task (Run...) and run explorer.exe.

This should bring up your desktop.

Copy the bold text below to notepad. Save it as fixME.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\Windows\\system32\\userinit.exe,"
Click to expand...

Make sure that you tell me if you receive a success message about adding the above
to the registry. If you do not get a success message, it definitely did not work.

How are things running?

Bluesbreaker · Feb 6, 2016

Hi Kestrel I'm going in to try now...

Kestrel13! · Feb 6, 2016

Hey Blues, best of luck

Bluesbreaker · Feb 6, 2016

BTW I get the little box that says create new task with the Open:. In that box is msconfig . Is that where I type explorer.exe?. Browsing did not find the file explorer.exe btw.

Bluesbreaker · Feb 6, 2016

OK. I am on the desktop. Can I use msconfig to go into normal mode and get the Internet going to copy your text otherwise I'm typing it in. Or just stay in safe and type. Is the text from Regedit onwards or [hkey... onwards. Thanks Kestrel

Bluesbreaker · Feb 6, 2016

Kestrel that's typed in. I typed Regedit, hit enter, then type the rest in one line.

Kestrel13! · Feb 6, 2016

You don't need to access regedit or type anything in, Blues. Follow my instructions carefully. You just have to copy and paste it into notepad which I can see you have done... now save it as explained in the instructions I gave you. Nothing to do with msconfig either.

Progress is being made, credit to http://forums.majorgeeks.com/index.php?members/_nullptr.262716/ thanks for your guidance with this!!

Malware Chinese Characters

Bluesbreaker Corporal

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Bluesbreaker Corporal

Attached Files:

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Bluesbreaker Corporal

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Bluesbreaker Corporal

Attached Files:

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Attached Files:

Bluesbreaker Corporal

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Bluesbreaker Corporal

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Bluesbreaker Corporal

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Bluesbreaker Corporal

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Bluesbreaker Corporal

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Bluesbreaker Corporal

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Bluesbreaker Corporal

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Bluesbreaker Corporal

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Bluesbreaker Corporal

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Bluesbreaker Corporal

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Bluesbreaker Corporal

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Bluesbreaker Corporal

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Bluesbreaker Corporal

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Bluesbreaker Corporal

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Bluesbreaker Corporal

Bluesbreaker Corporal

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Bluesbreaker Corporal

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Bluesbreaker Corporal

Bluesbreaker Corporal

Bluesbreaker Corporal

Attached Files:

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Useful Searches