Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Met Police Virus infection and subsequent file loss.


  • This topic is locked This topic is locked
8 replies to this topic

#1 darkbluejj

darkbluejj

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:05:35 AM

Posted 28 April 2013 - 02:47 PM

I am afraid i have come to you for help rather late in the process. I was infected withe the Met Police Virus, accusing me of infringing copyright.

 

I tried booting in safe mode, which failed.

 

I managed to boot into my Guest User, and then using administrator privileges create another user with administrator privileges.

 

In this second user I then ran Norton Power Eraser.

 

This has removed the virus, and i have subsequently scanned my computer using Norton and "apparently" have a clean bill of health. 

 

However, I have lost all my files that were in the My Documents folder, as well as much of My pictures. I cannot find any evidence of encrypted files. Have they actually been deleted? I was under the impression that they couldn't be?

 

If you want any logs, then please let me know.

 

Regards,

 

James



BC AdBot (Login to Remove)

 


#2 darkbluejj

darkbluejj
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:05:35 AM

Posted 28 April 2013 - 02:48 PM

Sorry forgot to state, I am running Windows 7 Starter on HP Mini 210.



#3 darkbluejj

darkbluejj
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:05:35 AM

Posted 28 April 2013 - 03:03 PM

DDS (Ver_2012-11-20.01) - NTFS_x86 
Internet Explorer: 9.0.8112.16470  BrowserJavaVersion: 10.9.2
Run by James at 20:58:36 on 2013-04-28
Microsoft Windows 7 Starter   6.1.7601.1.1252.1.1033.18.2036.488 [GMT 1:00]
.
AV: Norton Internet Security *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton Internet Security *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\conhost.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Norton Internet Security\Engine\20.3.1.22\ccSvcHst.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Norton Internet Security\Engine\20.3.1.22\ccSvcHst.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Windows\system32\wuauclt.exe
C:\Users\James\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\James\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\James\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\James\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\James\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\James\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\James\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Windows\system32\SearchIndexer.exe
C:\Users\James\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\James\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\James\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\svchost.exe -k WindowsMobile
C:\Windows\System32\svchost.exe -k WerSvcGroup
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.co.uk/
uWinlogon: Shell = explorer.exe,c:\users\james\appdata\roaming\skype.dat
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - <orphaned>
BHO: Norton Identity Protection: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - c:\program files\norton internet security\engine\20.3.1.22\CoIEPlg.dll
BHO: Norton Vulnerability Protection: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - c:\program files\norton internet security\engine\20.3.1.22\ips\IPSBHO.dll
BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: Windows Live Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
TB: Norton Toolbar: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\program files\norton internet security\engine\20.3.1.22\CoIEPlg.dll
mRun: [QlbCtrl.exe] c:\program files\hewlett-packard\hp quick launch buttons\QlbCtrl.exe /Start
mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: E&xport to Microsoft Excel - c:\progra~1\mif5ba~1\office12\EXCEL.EXE/3000
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office12\ONBttnIE.dll
IE: {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\windows\windowsmobile\INetRepl.dll
IE: {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\windows\windowsmobile\INetRepl.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} - hxxp://212.142.228.68/activex/AMC.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: NameServer = 192.168.102.1
TCP: Interfaces\{16712C5B-E170-45BA-AD6B-0CA685B03A7E} : DHCPNameServer = 192.168.102.1
TCP: Interfaces\{16712C5B-E170-45BA-AD6B-0CA685B03A7E}\05C65737E6564775962756C6563737 : DHCPNameServer = 192.168.1.254
TCP: Interfaces\{16712C5B-E170-45BA-AD6B-0CA685B03A7E}\244584572633D264348363 : DHCPNameServer = 192.168.1.254
TCP: Interfaces\{16712C5B-E170-45BA-AD6B-0CA685B03A7E}\E4544574541425D223E243D274 : DHCPNameServer = 192.168.0.1
TCP: Interfaces\{DCDA26C1-2305-4D9D-BCFC-CF65356C7ED1} : DHCPNameServer = 192.168.42.129
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
Notify: igfxcui - igfxdev.dll
SSODL: WebCheck - <orphaned>
SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
.
============= SERVICES / DRIVERS ===============
.
R0 SMR322;Symantec SMR Utility Service 3.2.2;c:\windows\system32\drivers\SMR322.SYS [2013-4-28 98392]
R0 SymDS;Symantec Data Store;c:\windows\system32\drivers\nis\1403010.016\SymDS.sys [2013-4-27 367704]
R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\nis\1403010.016\SymEFA.sys [2013-4-27 934488]
R1 BHDrvx86;BHDrvx86;c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_20.3.1.22\definitions\bashdefs\20130412.001\BHDrvx86.sys [2013-4-13 1000024]
R1 ccSet_NIS;Norton Internet Security Settings Manager;c:\windows\system32\drivers\nis\1403010.016\ccSetx86.sys [2013-4-27 134304]
R1 DVMIO;DVMIO;c:\splash.sys\config\dvmio.sys [2009-9-30 17624]
R1 IDSVix86;IDSVix86;c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_20.3.1.22\definitions\ipsdefs\20130426.001\IDSvix86.sys [2013-4-26 386720]
R1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\nis\1403010.016\Ironx86.sys [2013-4-27 175264]
R1 SymNetS;Symantec Network Security WFP Driver;c:\windows\system32\drivers\nis\1403010.016\symnets.sys [2013-4-27 338592]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2013-4-27 106656]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 HTCAND32;HTC Device Driver;c:\windows\system32\drivers\ANDROIDUSB.sys [2009-10-26 25088]
S3 netw5v32;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\drivers\netw5v32.sys [2009-6-10 4231168]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\drivers\RtsUStor.sys [2010-2-24 174592]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt86win7.sys [2010-2-24 204288]
S3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\drivers\VSTAZL3.SYS [2009-7-13 207360]
S3 SrvHsfV92;SrvHsfV92;c:\windows\system32\drivers\VSTDPV3.SYS [2009-7-13 980992]
S3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\drivers\VSTCNXT3.SYS [2009-7-13 661504]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2011-9-8 52224]
S3 WSDScan;WSD Scan Support via UMB;c:\windows\system32\drivers\WSDScan.sys [2009-7-14 20480]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\drivers\yk62x86.sys [2009-7-13 311296]
.
=============== Created Last 30 ================
.
2013-04-28 18:33:39 98392 ----a-w- c:\windows\system32\drivers\SMR322.SYS
2013-04-28 18:33:39 20 ----a-w- c:\windows\system32\drivers\SMR322.dat
2013-04-27 11:52:30 142496 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS
2013-04-27 11:52:30 -------- d-----w- c:\program files\Symantec
2013-04-27 11:52:30 -------- d-----w- c:\program files\common files\Symantec Shared
2013-04-27 11:52:09 934488 ----a-r- c:\windows\system32\drivers\nis\1403010.016\SymEFA.sys
2013-04-27 11:52:09 602712 ----a-r- c:\windows\system32\drivers\nis\1403010.016\srtsp.sys
2013-04-27 11:52:09 367704 ----a-r- c:\windows\system32\drivers\nis\1403010.016\SymDS.sys
2013-04-27 11:52:09 338592 ----a-r- c:\windows\system32\drivers\nis\1403010.016\symnets.sys
2013-04-27 11:52:09 32344 ----a-r- c:\windows\system32\drivers\nis\1403010.016\srtspx.sys
2013-04-27 11:52:09 21400 ----a-r- c:\windows\system32\drivers\nis\1403010.016\SymELAM.sys
2013-04-27 11:52:09 175264 ----a-r- c:\windows\system32\drivers\nis\1403010.016\Ironx86.sys
2013-04-27 11:52:09 134304 ----a-r- c:\windows\system32\drivers\nis\1403010.016\ccSetx86.sys
2013-04-27 11:51:48 14818 ----a-r- c:\windows\system32\drivers\nis\1403010.016\SymVTcer.dat
2013-04-27 11:51:47 -------- d-----w- c:\windows\system32\drivers\nis\1403010.016
2013-04-27 11:51:47 -------- d-----w- c:\windows\system32\drivers\NIS
2013-04-27 11:51:43 -------- d-----w- c:\program files\Norton Internet Security
2013-04-27 11:51:30 -------- d-----w- c:\program files\NortonInstaller
2013-04-14 16:13:41 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin7.dll
2013-04-14 16:13:41 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin6.dll
2013-04-14 16:13:41 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin5.dll
2013-04-14 16:13:41 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin4.dll
2013-04-14 16:13:41 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin3.dll
2013-04-14 16:13:41 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin2.dll
2013-04-14 16:13:41 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin.dll
2013-04-09 20:41:41 26840 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2013-04-09 20:40:07 -------- d-----w- c:\program files\iPod
2013-04-09 20:39:55 -------- d-----w- c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1
2013-04-09 20:39:55 -------- d-----w- c:\program files\iTunes
2013-04-09 20:34:17 -------- d-----w- c:\program files\Bonjour
2013-04-06 15:06:56 768000 ----a-w- c:\program files\common files\microsoft shared\vgx\VGX.dll
2013-04-06 14:43:29 169984 ----a-w- c:\windows\system32\winsrv.dll
2013-04-06 14:43:20 187752 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2013-04-06 14:43:20 1293672 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-04-06 14:43:15 3967848 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-04-06 14:43:14 3913064 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-04-06 14:43:10 2347008 ----a-w- c:\windows\system32\win32k.sys
.
==================== Find3M  ====================
.
2013-04-02 10:33:22 237088 ------w- c:\windows\system32\MpSigStub.exe
2013-03-11 16:57:06 691568 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-03-11 16:57:05 71024 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-02-02 03:38:35 1800704 ----a-w- c:\windows\system32\jscript9.dll
2013-02-02 03:30:32 1427968 ----a-w- c:\windows\system32\inetcpl.cpl
2013-02-02 03:30:21 1129472 ----a-w- c:\windows\system32\wininet.dll
2013-02-02 03:26:47 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2013-02-02 03:26:21 420864 ----a-w- c:\windows\system32\vbscript.dll
2013-02-02 03:23:28 2382848 ----a-w- c:\windows\system32\mshtml.tlb
.
=================== ROOTKIT  ====================
.
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 6.1.7601 Disk: Hitachi_ rev.PC2O -> Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0 
.
device: opened successfully
user: MBR read successfully
.
Disk trace:
called modules: >>UNKNOWN [0x81E15000]<< >>UNKNOWN [0x88A29000]<< >>UNKNOWN [0x89786000]<< >>UNKNOWN [0x88884000]<< >>UNKNOWN [0x82227000]<< >>UNKNOWN [0x88C1A000]<< >>UNKNOWN [0x950F0000]<< >>UNKNOWN [0x89605000]<< >>UNKNOWN [0x93417000]<< 
_asm { DEC EBP; POP EDX; NOP ; ADD [EBX], AL; ADD [EAX], AL; ADD [EAX+EAX], AL; ADD [EAX], AL;  }
1 ntkrnlpa!IofCallDriver[0x81E4BBAA] -> \Device\Harddisk0\DR0[0x85DF7030]
\Driver\Disk[0x85DCA428] -> IRP_MJ_CREATE -> 0x88A2D39F
3 [0x88A2D59E] -> ntkrnlpa!IofCallDriver[0x81E4BBAA] -> [0x8538E388]
\Driver\ACPI[0x846416A8] -> IRP_MJ_CREATE -> 0x8888D4CC
5 [0x8888D3D4] -> ntkrnlpa!IofCallDriver[0x81E4BBAA] -> \Device\Ide\IAAStorageDevice-0[0x853A7028]
\Driver\iaStor[0x8537E030] -> IRP_MJ_CREATE -> 0x88C5E92E
kernel: MBR read successfully
_asm { XOR AX, AX; MOV SS, AX; MOV SP, 0x7c00; STI ; MOV ES, AX; MOV DS, AX; MOV SI, SP; MOV DI, 0x600; MOV CX, 0x200; CLD ; REP MOVSB ; JMP FAR 0x0:0x660;  }
user & kernel MBR OK 
copy of MBR has been found in sector 2 !
Warning: possible TDL3 rootkit infection !
.
============= FINISH: 21:01:32.20 ===============


#4 m0le

m0le

    Can U Dig It?


  • Malware Response Team
  • 34,527 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:04:35 AM

Posted 02 May 2013 - 07:46 PM

Hi,

Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.

  • Please subscribe to this topic, if you haven't already. Click the Watch This Topic button at the top on the right.

  • Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.

  • Please reply to this post so I know you are there.

The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then I will close the topic.

Once I receive a reply then I will return with your first instructions.

Thanks :thumbup2:


Posted Image
m0le is a proud member of UNITE

#5 darkbluejj

darkbluejj
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:05:35 AM

Posted 03 May 2013 - 12:46 PM

OK, many thanks for having a look.

 

Please send me your first instructions!



#6 m0le

m0le

    Can U Dig It?


  • Malware Response Team
  • 34,527 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:04:35 AM

Posted 03 May 2013 - 07:40 PM

It all comes down to this

 

However, I have lost all my files that were in the My Documents folder, as well as much of My pictures. I cannot find any evidence of encrypted files. Have they actually been deleted? I was under the impression that they couldn't be?

 
The only chance is that you have an early variant.

Try Emsisoft's decrypter tool. Download, unzip and run the program
 
I tried this here and it failed. The final few posts show the unfortunate ending to that thread


Posted Image
m0le is a proud member of UNITE

#7 darkbluejj

darkbluejj
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:05:35 AM

Posted 04 May 2013 - 01:47 PM

Unfortunately i got the dreaded ... new variant. Is this game over?



#8 m0le

m0le

    Can U Dig It?


  • Malware Response Team
  • 34,527 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:04:35 AM

Posted 04 May 2013 - 07:37 PM

Unfortunately, yes.

However, to cheer yourself up (a little bit) click the link here  :)


Posted Image
m0le is a proud member of UNITE

#9 m0le

m0le

    Can U Dig It?


  • Malware Response Team
  • 34,527 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:04:35 AM

Posted 12 May 2013 - 08:02 PM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.
Posted Image
m0le is a proud member of UNITE




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users