BackDoor.IRC.Bot.4906

Technical Information

To ensure autorun and distribution:

Modifies the following registry keys:

[<HKLM>\SOFTWARE\Microsoft\Internet Explorer\Extensions\{8DAE90AD-4583-4977-9DD4-4360F7A45C74}] 'Exec' = '%ProgramFiles%\Download Master\dmaster.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Download Master' = '%ProgramFiles%\Download Master\dmaster.exe -autorun'
[<HKLM>\SOFTWARE\Classes\DMFile\shell\open\command] '' = '%ProgramFiles%\Download Master\dmaster.exe "%L"'
[<HKLM>\SOFTWARE\Classes\DMUrlsFile\shell\open\command] '' = '%ProgramFiles%\Download Master\dmaster.exe "%L"'

Modifies file system:

Creates the following files:

%ProgramFiles%\Download Master\is-21RPL.tmp
%ProgramFiles%\Download Master\Plugins\is-SOS5H.tmp
%ProgramFiles%\Download Master\is-TJONU.tmp
%ProgramFiles%\Download Master\is-J2PUG.tmp
%ProgramFiles%\Download Master\Plugins\is-UV0R5.tmp
%ProgramFiles%\Download Master\Plugins\is-K2JN8.tmp
%ProgramFiles%\Download Master\Plugins\is-G3IUV.tmp
%ProgramFiles%\Download Master\Plugins\is-LRVIT.tmp
%ALLUSERSPROFILE%\Start Menu\Programs\Download Master\Download Master.lnk
%ProgramFiles%\Download Master\is-6JRGE.tmp
%ALLUSERSPROFILE%\Start Menu\Programs\Download Master\License.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\Download Master\Help.lnk
%ProgramFiles%\Download Master\is-E6ENO.tmp
%ProgramFiles%\Download Master\is-QF2TC.tmp
%ProgramFiles%\Download Master\is-84F6B.tmp
%ProgramFiles%\Download Master\is-ECENV.tmp
%ProgramFiles%\Download Master\Skins\is-J754N.tmp
%ProgramFiles%\Download Master\temp\is-H3UFU.tmp
%ProgramFiles%\Download Master\temp\is-MH4ML.tmp
%ProgramFiles%\Download Master\temp\is-VGL9V.tmp
%ProgramFiles%\Download Master\temp\is-AHNHI.tmp
%ProgramFiles%\Download Master\temp\is-JBC66.tmp
%ProgramFiles%\Download Master\temp\is-CN63M.tmp
%ProgramFiles%\Download Master\temp\is-AHOGE.tmp
%ProgramFiles%\Download Master\temp\is-1PT9R.tmp
%ProgramFiles%\Download Master\Sounds\is-M1I4N.tmp
%ProgramFiles%\Download Master\Sounds\is-BKS6D.tmp
%ProgramFiles%\Download Master\Skins\is-GI5TF.tmp
%ProgramFiles%\Download Master\Sounds\is-G2GNF.tmp
%ProgramFiles%\Download Master\temp\is-OBE46.tmp
%ProgramFiles%\Download Master\temp\is-A5KLA.tmp
%ProgramFiles%\Download Master\Sounds\is-IIKAD.tmp
%ProgramFiles%\Download Master\temp\is-IN4TR.tmp
%ALLUSERSPROFILE%\Start Menu\Programs\Download Master\Uninstall.lnk
%APPDATA%\Download Master\temp\skin.dll
%APPDATA%\Download Master\temp\RESUME.BMP
%APPDATA%\Download Master\temp\SPD_IND.BMP
%APPDATA%\Download Master\temp\skin_dll.cfg
%APPDATA%\Download Master\temp\MENUD.BMP
%APPDATA%\Download Master\temp\MENU.BMP
%APPDATA%\Download Master\temp\MESSAGES.BMP
%APPDATA%\Download Master\temp\MENUH.BMP
%APPDATA%\Download Master\temp\TB_BTN.BMP
%APPDATA%\Download Master\temp\TB_BGRN.BMP
%APPDATA%\Download Master\temp\TB_BTNH.BMP
%APPDATA%\Download Master\temp\TB_BTND.BMP
%APPDATA%\Download Master\temp\Standard.cfg
%APPDATA%\Download Master\temp\SPD_INDL.BMP
%APPDATA%\Download Master\temp\TB_BBGRN.BMP
%APPDATA%\Download Master\temp\STATES.BMP
%APPDATA%\Download Master\temp\FOLDER.BMP
%HOMEPATH%\Desktop\Поиграй!.lnk
%TEMP%\7F4987FB1A6E43d69E3E94B29EB75926\seed.txt
%HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\info[1].rss
%TEMP%\7F4987FB1A6E43d69E3E94B29EB75926\downloader.log
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\Download Master.lnk
%HOMEPATH%\Desktop\Download Master.lnk
%ProgramFiles%\Download Master\unins000.dat
%ProgramFiles%\Download Master\unins000.msg
%APPDATA%\Download Master\temp\CART_IND.BMP
%APPDATA%\Download Master\temp\BUTT_PR.BMP
%APPDATA%\Download Master\temp\CATEGORY.BMP
%APPDATA%\Download Master\temp\CATCH.BMP
%TEMP%\7F4987FB1A6E43d69E3E94B29EB75926\YandexPackSetup.exe
%HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\YandexPackSetup[1].exe
%APPDATA%\Download Master\temp\BUTTONS.BMP
%APPDATA%\Download Master\temp\ABOUT.BMP
%ProgramFiles%\Download Master\temp\is-F2KM2.tmp
%ProgramFiles%\Download Master\is-KV75F.tmp
%ProgramFiles%\Download Master\is-4NSSG.tmp
%ProgramFiles%\Download Master\is-ROQ16.tmp
%ProgramFiles%\Download Master\is-PPPMI.tmp
%ProgramFiles%\Download Master\is-4BE91.tmp
%ProgramFiles%\Download Master\is-DK4O7.tmp
%ProgramFiles%\Download Master\is-KF0S5.tmp
%ProgramFiles%\Download Master\is-UAS5B.tmp
%ProgramFiles%\Download Master\is-NEKFJ.tmp
%ProgramFiles%\Download Master\is-HVLI4.tmp
%ProgramFiles%\Download Master\is-M87Q2.tmp
%ProgramFiles%\Download Master\is-NFLV4.tmp
%ProgramFiles%\Download Master\is-9BDGO.tmp
%ProgramFiles%\Download Master\is-3JM0I.tmp
%ProgramFiles%\Download Master\is-R2COS.tmp
%ProgramFiles%\Download Master\is-HK51S.tmp
%ProgramFiles%\Download Master\is-EOO73.tmp
%TEMP%\is-AVC5R.tmp\yandex-browser.bmp
%TEMP%\is-AVC5R.tmp\yandex_str_yb.txt
%TEMP%\is-AVC5R.tmp\yandex-logo.bmp
%TEMP%\is-AVC5R.tmp\yandex_str.txt
%ALLUSERSPROFILE%\Application Data\Setup.exe
%TEMP%\aut1.tmp
%TEMP%\is-AVC5R.tmp\_isetup\_shfoldr.dll
%TEMP%\is-LK3PB.tmp\Setup.tmp
%ProgramFiles%\Download Master\is-P1M9U.tmp
%ProgramFiles%\Download Master\is-796J8.tmp
%ProgramFiles%\Download Master\is-2DLQH.tmp
%ProgramFiles%\Download Master\is-0CMAL.tmp
%ProgramFiles%\Download Master\is-18QBU.tmp
%TEMP%\is-AVC5R.tmp\other_str.txt
%ProgramFiles%\Download Master\is-57J6C.tmp
%ProgramFiles%\Download Master\is-JEJDK.tmp
%ProgramFiles%\Download Master\is-KOT2V.tmp
%ProgramFiles%\Download Master\temp\is-UFSPI.tmp
%ProgramFiles%\Download Master\temp\is-MLNG7.tmp
%ProgramFiles%\Download Master\temp\is-PG22M.tmp
%ProgramFiles%\Download Master\temp\is-IO8II.tmp
%ProgramFiles%\Download Master\temp\is-2UC1U.tmp
%ProgramFiles%\Download Master\temp\is-8EFKT.tmp
%ProgramFiles%\Download Master\temp\is-D065Q.tmp
%ProgramFiles%\Download Master\temp\is-QF5HC.tmp
%ProgramFiles%\Download Master\temp\is-N609N.tmp
%ProgramFiles%\Download Master\temp\is-F59N2.tmp
%ProgramFiles%\Download Master\temp\is-S7VHV.tmp
%ProgramFiles%\Download Master\temp\is-RU497.tmp
%ProgramFiles%\Download Master\temp\is-ODI9T.tmp
%ProgramFiles%\Download Master\temp\is-882JM.tmp
%ProgramFiles%\Download Master\temp\is-B7M96.tmp
%ProgramFiles%\Download Master\temp\is-BL9V8.tmp
%ProgramFiles%\Download Master\temp\is-5H2DO.tmp
%ProgramFiles%\Download Master\is-NA128.tmp
%ProgramFiles%\Download Master\is-48LV0.tmp
%ProgramFiles%\Download Master\is-5BATE.tmp
%ProgramFiles%\Download Master\is-DQHNO.tmp
%ProgramFiles%\Download Master\is-N43A0.tmp
%ProgramFiles%\Download Master\is-73RQO.tmp
%ProgramFiles%\Download Master\is-RLO8Q.tmp
%ProgramFiles%\Download Master\is-MKLFE.tmp
%ProgramFiles%\Download Master\temp\is-7Q3DV.tmp
%ProgramFiles%\Download Master\temp\is-6CD9O.tmp
%ProgramFiles%\Download Master\temp\is-16IDV.tmp
%ProgramFiles%\Download Master\temp\is-1K208.tmp
%ProgramFiles%\Download Master\temp\is-E2UBL.tmp
%ProgramFiles%\Download Master\is-1ODT3.tmp
%ProgramFiles%\Download Master\temp\is-5JUUI.tmp
%ProgramFiles%\Download Master\temp\is-OT05P.tmp

Sets the 'hidden' attribute to the following files:

%ALLUSERSPROFILE%\Application Data\Setup.exe

Deletes the following files:

%TEMP%\is-AVC5R.tmp\yandex_str_yb.txt
%TEMP%\is-AVC5R.tmp\yandex_str.txt
%TEMP%\is-LK3PB.tmp\Setup.tmp
%TEMP%\is-AVC5R.tmp\_isetup\_shfoldr.dll
%TEMP%\is-AVC5R.tmp\other_str.txt
%TEMP%\aut1.tmp
%TEMP%\is-AVC5R.tmp\yandex-logo.bmp
%TEMP%\is-AVC5R.tmp\yandex-browser.bmp

Moves the following files:

from %ProgramFiles%\Download Master\temp\is-CN63M.tmp to %ProgramFiles%\Download Master\temp\dban_b201.jpg
from %ProgramFiles%\Download Master\temp\is-JBC66.tmp to %ProgramFiles%\Download Master\temp\dban_dm1.gif
from %ProgramFiles%\Download Master\temp\is-F2KM2.tmp to %ProgramFiles%\Download Master\temp\dban_b200.jpg
from %ProgramFiles%\Download Master\temp\is-RU497.tmp to %ProgramFiles%\Download Master\temp\dban_b194.jpg
from %ProgramFiles%\Download Master\temp\is-S7VHV.tmp to %ProgramFiles%\Download Master\temp\dban_b199.jpg
from %ProgramFiles%\Download Master\temp\is-1PT9R.tmp to %ProgramFiles%\Download Master\temp\dban_dm2.gif
from %ProgramFiles%\Download Master\temp\is-AHNHI.tmp to %ProgramFiles%\Download Master\temp\dban_dm6.gif
from %ProgramFiles%\Download Master\temp\is-VGL9V.tmp to %ProgramFiles%\Download Master\temp\dban_dt1.gif
from %ProgramFiles%\Download Master\temp\is-H3UFU.tmp to %ProgramFiles%\Download Master\temp\dban_dm5.gif
from %ProgramFiles%\Download Master\temp\is-AHOGE.tmp to %ProgramFiles%\Download Master\temp\dban_dm3.gif
from %ProgramFiles%\Download Master\temp\is-MH4ML.tmp to %ProgramFiles%\Download Master\temp\dban_dm4.gif
from %ProgramFiles%\Download Master\temp\is-IO8II.tmp to %ProgramFiles%\Download Master\temp\dban_b164.jpg
from %ProgramFiles%\Download Master\temp\is-PG22M.tmp to %ProgramFiles%\Download Master\temp\dban_b165.gif
from %ProgramFiles%\Download Master\temp\is-UFSPI.tmp to %ProgramFiles%\Download Master\temp\dban_b163.jpg
from %ProgramFiles%\Download Master\temp\is-D065Q.tmp to %ProgramFiles%\Download Master\temp\dban_b161.jpg
from %ProgramFiles%\Download Master\temp\is-MLNG7.tmp to %ProgramFiles%\Download Master\temp\dban_b162.jpg
from %ProgramFiles%\Download Master\temp\is-882JM.tmp to %ProgramFiles%\Download Master\temp\dban_b166.jpg
from %ProgramFiles%\Download Master\temp\is-F59N2.tmp to %ProgramFiles%\Download Master\temp\dban_b186.jpg
from %ProgramFiles%\Download Master\temp\is-N609N.tmp to %ProgramFiles%\Download Master\temp\dban_b187.jpg
from %ProgramFiles%\Download Master\temp\is-B7M96.tmp to %ProgramFiles%\Download Master\temp\dban_b183.jpg
from %ProgramFiles%\Download Master\temp\is-ODI9T.tmp to %ProgramFiles%\Download Master\temp\dban_b167.jpg
from %ProgramFiles%\Download Master\temp\is-BL9V8.tmp to %ProgramFiles%\Download Master\temp\dban_b176.jpg
from %ProgramFiles%\Download Master\is-21RPL.tmp to %ProgramFiles%\Download Master\dmaster.dat
from %ProgramFiles%\Download Master\is-J2PUG.tmp to %ProgramFiles%\Download Master\dmaster1.dat
from %ProgramFiles%\Download Master\Plugins\is-SOS5H.tmp to %ProgramFiles%\Download Master\Plugins\videoserv.dll
from %ProgramFiles%\Download Master\Plugins\is-LRVIT.tmp to %ProgramFiles%\Download Master\Plugins\remotedownload.chm
from %ProgramFiles%\Download Master\Plugins\is-G3IUV.tmp to %ProgramFiles%\Download Master\Plugins\remotedownload.dll
from %ProgramFiles%\Download Master\is-TJONU.tmp to %ProgramFiles%\Download Master\dmaster2.dat
from %ProgramFiles%\Download Master\is-84F6B.tmp to %ProgramFiles%\Download Master\infoziplicense.txt
from %ProgramFiles%\Download Master\is-6JRGE.tmp to %ProgramFiles%\Download Master\referers.txt
from %ProgramFiles%\Download Master\is-ECENV.tmp to %ProgramFiles%\Download Master\license.txt
from %ProgramFiles%\Download Master\is-QF2TC.tmp to %ProgramFiles%\Download Master\dmaster3.dat
from %ProgramFiles%\Download Master\is-E6ENO.tmp to %ProgramFiles%\Download Master\dmaster4.dat
from %ProgramFiles%\Download Master\Sounds\is-IIKAD.tmp to %ProgramFiles%\Download Master\Sounds\add.wav
from %ProgramFiles%\Download Master\Sounds\is-BKS6D.tmp to %ProgramFiles%\Download Master\Sounds\alldone.wav
from %ProgramFiles%\Download Master\temp\is-IN4TR.tmp to %ProgramFiles%\Download Master\temp\Thumbs.db
from %ProgramFiles%\Download Master\temp\is-A5KLA.tmp to %ProgramFiles%\Download Master\temp\dban_du1.gif
from %ProgramFiles%\Download Master\temp\is-OBE46.tmp to %ProgramFiles%\Download Master\temp\dban_ie8.jpg
from %ProgramFiles%\Download Master\Sounds\is-M1I4N.tmp to %ProgramFiles%\Download Master\Sounds\done.wav
from %ProgramFiles%\Download Master\Plugins\is-K2JN8.tmp to %ProgramFiles%\Download Master\Plugins\advscheduler.chm
from %ProgramFiles%\Download Master\Plugins\is-UV0R5.tmp to %ProgramFiles%\Download Master\Plugins\advscheduler.dll
from %ProgramFiles%\Download Master\Skins\is-J754N.tmp to %ProgramFiles%\Download Master\Skins\Standard2.skn
from %ProgramFiles%\Download Master\Sounds\is-G2GNF.tmp to %ProgramFiles%\Download Master\Sounds\error.wav
from %ProgramFiles%\Download Master\Skins\is-GI5TF.tmp to %ProgramFiles%\Download Master\Skins\Standard.skn
from %ProgramFiles%\Download Master\temp\is-QF5HC.tmp to %ProgramFiles%\Download Master\temp\dban_b153.gif
from %ProgramFiles%\Download Master\is-PPPMI.tmp to %ProgramFiles%\Download Master\goback.htm
from %ProgramFiles%\Download Master\is-ROQ16.tmp to %ProgramFiles%\Download Master\dmiehlp.dll
from %ProgramFiles%\Download Master\is-KV75F.tmp to %ProgramFiles%\Download Master\dmieall.htm
from %ProgramFiles%\Download Master\is-KF0S5.tmp to %ProgramFiles%\Download Master\dmie.dll
from %ProgramFiles%\Download Master\is-4NSSG.tmp to %ProgramFiles%\Download Master\dmie.htm
from %ProgramFiles%\Download Master\is-3JM0I.tmp to %ProgramFiles%\Download Master\dmbar.dll
from %ProgramFiles%\Download Master\is-HVLI4.tmp to %ProgramFiles%\Download Master\com.westbyte.downloadmaster.json
from %ProgramFiles%\Download Master\is-NEKFJ.tmp to %ProgramFiles%\Download Master\com.westbyte.downloadmaster.exe
from %ProgramFiles%\Download Master\is-R2COS.tmp to %ProgramFiles%\Download Master\npdm.dll
from %ProgramFiles%\Download Master\is-9BDGO.tmp to %ProgramFiles%\Download Master\dmbar.xpi
from %ProgramFiles%\Download Master\is-HK51S.tmp to %ProgramFiles%\Download Master\dmmm.xpi
from %ProgramFiles%\Download Master\is-796J8.tmp to %ProgramFiles%\Download Master\dmaster.exe
from %ProgramFiles%\Download Master\is-P1M9U.tmp to %ProgramFiles%\Download Master\dm_rus.chm
from %ProgramFiles%\Download Master\is-57J6C.tmp to %ProgramFiles%\Download Master\other_str.txt
from %ProgramFiles%\Download Master\is-18QBU.tmp to %ProgramFiles%\Download Master\unins000.exe
from %ProgramFiles%\Download Master\is-JEJDK.tmp to %ProgramFiles%\Download Master\downloader.exe
from %ProgramFiles%\Download Master\is-0CMAL.tmp to %ProgramFiles%\Download Master\nodelist.xml
from %ProgramFiles%\Download Master\is-4BE91.tmp to %ProgramFiles%\Download Master\bugtype_e.cfg
from %ProgramFiles%\Download Master\is-UAS5B.tmp to %ProgramFiles%\Download Master\typeconn.cfg
from %ProgramFiles%\Download Master\is-DK4O7.tmp to %ProgramFiles%\Download Master\bugtype.cfg
from %ProgramFiles%\Download Master\is-2DLQH.tmp to %ProgramFiles%\Download Master\lvcolors.cfg
from %ProgramFiles%\Download Master\is-EOO73.tmp to %ProgramFiles%\Download Master\hintf.bmp
from %ProgramFiles%\Download Master\temp\is-5JUUI.tmp to %ProgramFiles%\Download Master\temp\dban_b120.jpg
from %ProgramFiles%\Download Master\temp\is-6CD9O.tmp to %ProgramFiles%\Download Master\temp\dban_b120_2.jpg
from %ProgramFiles%\Download Master\temp\is-OT05P.tmp to %ProgramFiles%\Download Master\temp\dban_b103.jpg
from %ProgramFiles%\Download Master\is-1ODT3.tmp to %ProgramFiles%\Download Master\games.ico
from %ProgramFiles%\Download Master\temp\is-E2UBL.tmp to %ProgramFiles%\Download Master\temp\dbans.lnk
from %ProgramFiles%\Download Master\temp\is-7Q3DV.tmp to %ProgramFiles%\Download Master\temp\dban_b120_3.jpg
from %ProgramFiles%\Download Master\temp\is-8EFKT.tmp to %ProgramFiles%\Download Master\temp\dban_b152.gif
from %ProgramFiles%\Download Master\temp\is-2UC1U.tmp to %ProgramFiles%\Download Master\temp\dban_b152.jpg
from %ProgramFiles%\Download Master\temp\is-5H2DO.tmp to %ProgramFiles%\Download Master\temp\dban_b133.gif
from %ProgramFiles%\Download Master\temp\is-1K208.tmp to %ProgramFiles%\Download Master\temp\dban_b131.gif
from %ProgramFiles%\Download Master\temp\is-16IDV.tmp to %ProgramFiles%\Download Master\temp\dban_b132.gif
from %ProgramFiles%\Download Master\is-73RQO.tmp to %ProgramFiles%\Download Master\unzip32.dll
from %ProgramFiles%\Download Master\is-N43A0.tmp to %ProgramFiles%\Download Master\html.htm
from %ProgramFiles%\Download Master\is-KOT2V.tmp to %ProgramFiles%\Download Master\unrar.dll
from %ProgramFiles%\Download Master\is-NFLV4.tmp to %ProgramFiles%\Download Master\dmaster-FF.xpi
from %ProgramFiles%\Download Master\is-M87Q2.tmp to %ProgramFiles%\Download Master\dmremote.xpi
from %ProgramFiles%\Download Master\is-MKLFE.tmp to %ProgramFiles%\Download Master\remdown.htm
from %ProgramFiles%\Download Master\is-DQHNO.tmp to %ProgramFiles%\Download Master\playflvimg.jpg
from %ProgramFiles%\Download Master\is-5BATE.tmp to %ProgramFiles%\Download Master\games.url
from %ProgramFiles%\Download Master\is-NA128.tmp to %ProgramFiles%\Download Master\swfobject.js
from %ProgramFiles%\Download Master\is-RLO8Q.tmp to %ProgramFiles%\Download Master\flvplayer.swf
from %ProgramFiles%\Download Master\is-48LV0.tmp to %ProgramFiles%\Download Master\playflv.html

Network activity:

Connects to:

'localhost':1039
'we###yte.com':80
'localhost':1036
'do#####der.yandex.net':80

TCP:

HTTP GET requests:

http://www.we###yte.com/dm/start/ via we###yte.com
http://do#####der.yandex.net/yandex-pack/westbyte-elements/YandexPackSetup.exe
http://do#####der.yandex.net/yandex-pack/downloader/info.rss

UDP:

DNS ASK www.we###yte.com
DNS ASK do#####der.yandex.net

Miscellaneous:

Searches for the following windows:

ClassName: 'MS_AutodialMonitor' WindowName: ''
ClassName: 'MS_WebcheckMonitor' WindowName: ''
ClassName: '' WindowName: ''
ClassName: 'ReBarWindow32' WindowName: ''

Creates and executes the following:

'%ProgramFiles%\Download Master\downloader.exe' --partner westbyte-elements --distr /passive /msicl "YAHOMEPAGE=y YAQSEARCH=y YABROWSER=y YBNODEFAULT=y YBSENDSTAT=y"
'%ProgramFiles%\Download Master\dmaster.exe'
'%ALLUSERSPROFILE%\Application Data\Setup.exe' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'%TEMP%\is-LK3PB.tmp\Setup.tmp' /SL5="$400E0,5584859,119296,%ALLUSERSPROFILE%\Application Data\Setup.exe" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-

Executes the following:

'<SYSTEM32>\regsvr32.exe' /s dmbar.dll
'%ProgramFiles%\Internet Explorer\IEXPLORE.EXE' -Embedding
'<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles%\Download Master\dmie.dll"
'<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles%\Download Master\dmiehlp.dll"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней