Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Not exactly sure what to do


  • This topic is locked This topic is locked
21 replies to this topic

#1 viper583

viper583

  • Members
  • 44 posts
  • OFFLINE
  •  
  • Local time:02:00 AM

Posted 31 October 2011 - 11:01 PM

Hello everyone,
I appreciate the help. Here goes my problem.

About a week ago my browser (firefox) started diverting my google link clicks to random sites which had nothing to do with my search results.
I always ran Security Essentials and Malwarebytes with no indication of any virus.

So today I tried running MSE in safe mode and it would not allow me to turn on the Real Time Protection (only in normal boot), but still allowed for scans...which came up clean.
MalwareBytes did not report anything either.

I then downloaded AVG and ran it in safe mode. It had picked up 8 files and most of them said Trojan.

I cleaned the files and rebooted in safe mode again to rescan entire comp....came out clean.

I rebooted the computer in normal mode and find that I still have this problem!...
now MSE, Malwarebytes, and AVG say my computer is clean in both modes and yet it is not.

I then stumbled on this site and found a guide telling me to download TDSSkiller....I renamed it and ran in both normal and safe...clean again

Now I have no idea what to do

Please help

Window 7 64 bit.

BC AdBot (Login to Remove)

 


#2 TheShooter93

TheShooter93

    Cody


  • Malware Response Team
  • 4,792 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Orlando, Florida
  • Local time:03:00 AM

Posted 01 November 2011 - 11:05 AM

Hi viper583, :busy:

I know it looks like a lot, but it's really just a lot of text asking for only 4 scans.

Once you've done these and posted the results in your next post, let me know how the computer is running.

Note: You may have to perform some or all of the following in Safe Mode With Networking, depending on if you have internet access while in the normal Windows environment.

============================================================================

============================================================================

Download Security Check by screen317 from here or here.
  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.

============================================================================

============================================================================

Please download and scan with SUPERAntiSpyware Free
  • Double-click SUPERAntiSypware.exe and use the default settings for installation.
  • An icon will be created on your desktop. Double-click that icon to launch the program.
  • If it will not start, go to Start > All Prgrams > SUPERAntiSpyware and click on Alternate Start.
  • If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download them from here. Double-click on the hyperlink for Download Installer and save SASDEFINITIONS.EXE to your desktop. Then double-click on SASDEFINITIONS.EXE to install the definitions.)
  • In the Main Menu, click the Preferences... button.
  • Click the "General and Startup" tab, and under Start-up Options, make sure "Start SUPERAntiSpyware when Windows starts" box is unchecked.
  • Click the "Scanning Control" tab, and under Scanner Options, make sure the following are checked (leave all others unchecked):
    • Close browsers before scanning.
    • Scan for tracking cookies.
    • Terminate memory threats before quarantining.
  • Click the "Close" button to leave the control center screen and exit the program.
  • Do not run a scan just yet.
Reboot your computer in "Safe Mode" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".

Scan with SUPERAntiSpyware as follows:
  • Launch the program and back on the main screen, under "Scan for Harmful Software" click Scan your computer.
  • On the left, make sure you check C:\Fixed Drive.
  • On the right, under "Complete Scan", choose Perform Complete Scan and click "Next".
  • After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
  • Make sure everything has a checkmark next to it and click "Next".
  • A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
  • If asked if you want to reboot, click "Yes" and reboot normally.
  • To retrieve the removal information after reboot, launch SUPERAntispyware again.
    • Click Preferences, then click the Statistics/Logs tab.
    • Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
    • If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
    • Please copy and paste the Scan Log results in your next reply.
  • Click Close to exit the program.
If you have a problem downloading, installing or getting SAS to run, try downloading and using the SUPERAntiSpyware Portable Scanner instead. Save the randomly named file (i.e. SAS_1710895.COM) to a usb drive or CD and transfer to the infected computer. Then double-click on it to launch and scan. The file is randomly named to help keep malware from blocking the scanner.

============================================================================

============================================================================

Please download Malwarebytes Anti-Malware and save it to your desktop.
  • Important!! When you save the mbam-setup file, rename it to something random (such as 123abc.exe) before beginning the download.
Malwarebytes may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.

  • Make sure you are connected to the Internet and double-click on the renamed file to install the application.
    For instructions with screenshots, please refer to this Guide.
  • When the installation begins, follow the prompts and do not make any changes to default settings.
  • Malwarebytes will automatically start and you will be asked to update the program before performing a scan.
  • If an update is found, the program will automatically update itself. Press the OK button and continue.
  • If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.
  • Under the Scanner tab, make sure the "Perform Quick Scan" option is selected.
  • Click on the Scan button.
  • When finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box, then click the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked and then click Remove Selected.
  • When removal is completed, a log report will open in Notepad.
  • The log is automatically saved and can be viewed by clicking the Logs tab.
  • Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows the database version and your operating system.
  • Exit Malwarebytes when done.
Note: If Malwarebytes encounters a file that is difficult to remove, you will be asked to reboot your computer so it can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally will prevent Malwarebytes from removing all the malware.

============================================================================

============================================================================

Please download GMER from one of the following locations and save it to your desktop:
  • Main Mirror
    This version will download a randomly named file (Recommended)
  • Zipped Mirror
    This version will download a zip file you will need to extract first. If you use this mirror, please extract the zip file to your desktop.
  • Disconnect from the Internet and close all running programs.
  • Temporarily disable any real-time active protection so your security programs will not conflict with gmer's driver.
  • Double-click on the randomly named GMER file (i.e. n7gmo46c.exe) and allow the gmer.sys driver to load if asked.
  • Note: If you downloaded the zipped version, extract the file to its own folder such as C:\gmer and then double-click on gmer.exe.

    Posted Image
  • GMER will open to the Rootkit/Malware tab and perform an automatic quick scan when first run. (do not use the computer while the scan is in progress)
  • If you receive a WARNING!!! about rootkit activity and are asked to fully scan your system...click NO.
  • Now click the Scan button. If you see a rootkit warning window, click OK.
  • When the scan is finished, click the Save... button to save the scan results to your Desktop. Save the file as gmer.log.
  • Click the Copy button and paste the results into your next reply.
  • Exit GMER and be sure to re-enable your anti-virus, Firewall and any other security programs you had disabled.
-- If you encounter any problems, try running GMER in safe mode.
-- If GMER crashes or keeps resulting in a BSODs, uncheck Devices on the right side before scanning
.

============================================================================

============================================================================

Remember, after posting the results of these scans, let me know how the computer is running.

============================================================================

============================================================================

Also, you don't want to have two antivirus suites installed and running simultaneously.

Uninstall either Microsoft Security Essentials or AVG.

Edited by TheShooter93, 01 November 2011 - 11:05 AM.

CCNA R&SCCNA Security | Network+  |  B.S. - Information Technology | Cyber Security Engineer

If I am helping you and have not replied within 48 hours, please send me a private message.

 

 


#3 viper583

viper583
  • Topic Starter

  • Members
  • 44 posts
  • OFFLINE
  •  
  • Local time:02:00 AM

Posted 01 November 2011 - 03:38 PM

Thanks for the help Shooter.

This is what was posted from Checkup.

Results of screen317's Security Check version 0.99.24
Windows 7 x64 (UAC is disabled!)
Internet Explorer 9
``````````````````````````````
Antivirus/Firewall Check:

Windows Security Center service is not running! This report may not be accurate!
Windows Firewall Disabled!
WMI entry may not exist for antivirus; attempting automatic update.
```````````````````````````````
Anti-malware/Other Utilities Check:

Malwarebytes' Anti-Malware
Java™ 6 Update 14
Out of date Java installed!
Adobe Flash Player 11.0.1.152
Mozilla Firefox (x86 en-US..)
````````````````````````````````
Process Check:
objlist.exe by Laurent

Windows Defender MSMpEng.exe
Malwarebytes' Anti-Malware mbamservice.exe
Malwarebytes' Anti-Malware mbamgui.exe
AVG avgwdsvc.exe
AVG avgtray.exe
Microsoft Security Essentials msseces.exe
Microsoft Security Client Antimalware MsMpEng.exe
Microsoft Security Client Antimalware NisSrv.exe
``````````End of Log````````````

#4 TheShooter93

TheShooter93

    Cody


  • Malware Response Team
  • 4,792 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Orlando, Florida
  • Local time:03:00 AM

Posted 01 November 2011 - 03:39 PM

And the other logs?

CCNA R&SCCNA Security | Network+  |  B.S. - Information Technology | Cyber Security Engineer

If I am helping you and have not replied within 48 hours, please send me a private message.

 

 


#5 viper583

viper583
  • Topic Starter

  • Members
  • 44 posts
  • OFFLINE
  •  
  • Local time:02:00 AM

Posted 02 November 2011 - 09:04 AM

Hey Shooter, I an sorry for the delay but yesterday my computer was in a scan. It detected something and then everything went downhill.

A message came up saying my hard drive was corrupt and then made all my files hidden .
It wont even let me access my wireless connection....

My computer seems useless now and I cant figure out how to get my internet access back.... Im on my phone at moment

#6 TheShooter93

TheShooter93

    Cody


  • Malware Response Team
  • 4,792 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Orlando, Florida
  • Local time:03:00 AM

Posted 02 November 2011 - 09:43 AM

It's just another effect of the malware.

I'm directing you to the team of Malware Removal Experts here on this site.

Try connecting the infected PC to the internet via Ethernet cable instead of wireless to see if you get an internet connection. Either that, or try to connect in Safe Mode With Networking.

====================================================================

With the information you have provided I believe you will need help from the malware removal team. I would like you to start a new thread HERE and include a link to this thread.

Please make sure that you read the information about getting started before you start your thread.

It would be helpful if you post a note here once you have completed the steps in the guide and have started your topic in malware removal. Good luck and be patient.

CCNA R&SCCNA Security | Network+  |  B.S. - Information Technology | Cyber Security Engineer

If I am helping you and have not replied within 48 hours, please send me a private message.

 

 


#7 viper583

viper583
  • Topic Starter

  • Members
  • 44 posts
  • OFFLINE
  •  
  • Local time:02:00 AM

Posted 02 November 2011 - 03:10 PM

Hello all,
I posted in the help section and was advised to come here.

My computer got infected and gave me errors saying my drive was corrupt.
Almost instantly all my files went hidden. I lost connection to internet and cant even find "network and connections"..... I have tried numerous anti virus programs and none of them can find anything...including tdsskiller...

I am now forced to use my phone as I have no idea on how to get the network back..

I have tried everything I could find from google and other people's experience..

No luck

I have no cd, save point, or another computer to scan this..
Im just about to the point where I will set this thing on fire.

Anyone know what I can do?

Edited by Orange Blossom, 03 November 2011 - 12:24 AM.
Merged topics. ~ OB


#8 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,848 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:03:00 AM

Posted 03 November 2011 - 12:29 AM

Hello,

I have merged your new topic to your previous one because it contained no indication that you followed the instructions previously provided. So, to restate in a different way:

Please follow the instructions in ==>This Guide<== starting at Step 6. Try Safe Mode if you cannot get into Normal Mode. If you cannot complete a step, skip it and continue.

Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include a description of your computer issues, what you have done to resolve them, and a link to this topic.

If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.

If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.

Orange Blossom :cherry:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#9 viper583

viper583
  • Topic Starter

  • Members
  • 44 posts
  • OFFLINE
  •  
  • Local time:02:00 AM

Posted 03 November 2011 - 09:29 AM

I am still unable to get this computer networked.

Virus wont let me turn on firewall, access "network and connections".

If you can help me find out now the virus is blocking me from accessing internet, I will continur with the posted directions

#10 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,848 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:03:00 AM

Posted 03 November 2011 - 09:34 AM

Do you have access to a public computer?

Orange Blossom :cherry:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#11 viper583

viper583
  • Topic Starter

  • Members
  • 44 posts
  • OFFLINE
  •  
  • Local time:02:00 AM

Posted 03 November 2011 - 01:46 PM

I would have to contact a family member.... But yes.

So where do I begin?

#12 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,912 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:03:00 AM

Posted 03 November 2011 - 09:10 PM

If you cannot use the Internet,you will need access to another computer that has a connection.
From there save mbam-setup.exe to a flash,usb,jump drive or CD. Now transfer it to the infected machine, then install and run the program.
If you cannot transfer to or install on the infected machine, try running the setup (installation) file directly from the flash drive or CD by double-clicking on mbam-setup.exe so it will install on the hard drive.
***
Manually Downloading Updates:
Manually download them from HERE and just double-click on mbam-rules.exe to install. Alternatively, you can update through MBAM's interface from a clean computer, copy the definitions (rules.ref) located in C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware from that system to a usb stick or CD and then copy it to the infected machine..

Note: Mbam-rules.exe is not updated daily. Another way to get the most current database definitions if you're having problems updating through the program's interface or have already manually downloaded the latest definitions (mbam-rules.exe) shown on this page, is to do the following: Install MBAM on a clean computer, launch the program and update through MBAM's interface. Copy the definitions (rules.ref) to a USB stick or CD and transfer that file to the infected machine. Copy rules.ref to the location indicated for your operating system. If you cannot see the folder, then you may have to Reconfigure Windows to show it.
  • XP: C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware
  • Vista: C:\Documents and Settings\Users\All Users\Malwarebytes\Malwarebytes' Anti-Malware

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#13 viper583

viper583
  • Topic Starter

  • Members
  • 44 posts
  • OFFLINE
  •  
  • Local time:02:00 AM

Posted 13 November 2011 - 01:15 PM

Hey guys... I finally got everything back the way it was. I will start form the top

Security Check

Results of screen317's Security Check version 0.99.26
Windows 7 x64 (UAC is disabled!)
Internet Explorer 9
``````````````````````````````
Antivirus/Firewall Check:

WMI entry may not exist for antivirus; attempting automatic update.
```````````````````````````````
Anti-malware/Other Utilities Check:

Malwarebytes' Anti-Malware
Java™ 6 Update 14
Out of date Java installed!
Adobe Flash Player 11.0.1.152
Mozilla Firefox (7.0.1) Firefox Out of Date!
````````````````````````````````
Process Check:
objlist.exe by Laurent

Windows Defender MSMpEng.exe
Malwarebytes' Anti-Malware mbamservice.exe
Malwarebytes' Anti-Malware mbamgui.exe
Microsoft Security Essentials msseces.exe
Microsoft Security Client Antimalware MsMpEng.exe
``````````End of Log````````````

#14 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,912 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:03:00 AM

Posted 13 November 2011 - 01:26 PM

OK< so lets do a last scan and update your Java to 7

Important Note: Your version of Java is out of date. Older versions have vulnerabilities that malicious sites can use to exploit and infect your system.Please follow these steps to remove older version Java components and update:
  • Download the latest version of Java Runtime Environment (JRE) Version 7 and save it to your desktop.
  • Look for "Java Platform, Standard Edition".
  • Click the "Download JRE" button to the right.
  • Read the License Agreement, and then check the box that says: "Accept License Agreement".
  • From the list, select your OS and Platform (32-bit or 64-bit).
  • If a download for an Offline Installation is available, it is recommended to choose that and save the file to your desktop.
  • Close any programs you may have running - especially your web browser.
Go to Posted Image > Control Panel, double-click on Add/Remove Programs or Programs and Features in Vista/Windows 7 and remove all older versions of Java.
  • Check (highlight) any item with Java Runtime Environment (JRE or J2SE) in the name.
  • Click the Remove or Change/Remove button and follow the onscreen instructions for the Java uninstaller.
  • Repeat as many times as necessary to remove each Java versions.
  • Reboot your computer once all Java components are removed.
  • Then from your desktop double-click on jre-7u1-windows-i586-s.exe (or jre-7u1-windows-x64.exe for 64-bit) to install the newest version.
  • If using Windows 7 or Vista and the installer refuses to launch due to insufficient user permissions, then Run As Administrator.
  • When the Java Setup - Welcome window opens, click the Install > button.
  • If offered to install a Toolbar, just uncheck the box before continuing unless you want it.
  • The McAfee Security Scan Plus tool is installed by default unless you uncheck the McAfee installation box when updating Java.
Note: The Java Quick Starter (JQS.exe) adds a service to improve the initial startup time of Java applets and applications but it's not necessary.
To disable the JQS service if you don't want to use it:
  • Go to Start > Control Panel > Java > Advanced > Miscellaneous and uncheck the box for Java Quick Starter.
  • Click Ok and reboot your computer.



I'd like us to scan your machine with ESET OnlineScan
  • Hold down Control and click on the following link to open ESET OnlineScan in a new window.
    ESET OnlineScan
  • Click the Posted Image button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on Posted Image to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the Posted Image icon on your desktop.
  • Check Posted Image
  • Click the Posted Image button.
  • Accept any security warnings from your browser.
  • Under scan settings, check Posted Image and check Remove found threats
  • Click Advanced settings and select the following:
    • Scan potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, push Posted Image
  • Push Posted Image, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Push the Posted Image button.
  • Push Posted Image


NOTE: In some instances if no malware is found there will be no log produced.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#15 viper583

viper583
  • Topic Starter

  • Members
  • 44 posts
  • OFFLINE
  •  
  • Local time:02:00 AM

Posted 13 November 2011 - 02:44 PM

Hello Boopme.... I ran a combofix scan before all this and once it brought up a log file I just rebooted.
I know there were items in the quarantine...but I am unsure on how to delete them.


That was where I was before posting my last post, but my computer keeps telling me there are windows updates and I am very nervous that it is the trojan trying to install itself again..So I keep bypassing the windows updates.
I also notice that when I check my "netstat -a" ....there are 5 suspicious IP's listening .


As per your instructions... I downloaded new Java
I also performed a Super anti Spyware scan BEFORE the Java install

here is log:
SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 11/13/2011 at 02:00 PM

Application Version : 5.0.1136

Core Rules Database Version : 7937
Trace Rules Database Version: 5749

Scan type : Complete Scan
Total Scan Time : 00:34:50

Operating System Information
Windows 7 Ultimate 64-bit, Service Pack 1 (Build 6.01.7601)
UAC Off - Administrator

Memory items scanned : 335
Memory threats detected : 0
Registry items scanned : 70160
Registry threats detected : 0
File items scanned : 124634
File threats detected : 9

Adware.Tracking Cookie
.atdmt.com [ C:\USERS\RYU583\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GCUV4XMN.DEFAULT\COOKIES.SQLITE ]
.c.atdmt.com [ C:\USERS\RYU583\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GCUV4XMN.DEFAULT\COOKIES.SQLITE ]
.c.atdmt.com [ C:\USERS\RYU583\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GCUV4XMN.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\USERS\RYU583\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GCUV4XMN.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\RYU583\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GCUV4XMN.DEFAULT\COOKIES.SQLITE ]
track.prd1.netshelter.net [ C:\USERS\RYU583\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GCUV4XMN.DEFAULT\COOKIES.SQLITE ]
.questionmarket.com [ C:\USERS\RYU583\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GCUV4XMN.DEFAULT\COOKIES.SQLITE ]
.questionmarket.com [ C:\USERS\RYU583\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GCUV4XMN.DEFAULT\COOKIES.SQLITE ]
.kontera.com [ C:\USERS\RYU583\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GCUV4XMN.DEFAULT\COOKIES.SQLITE ]




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users