Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Support
Windows Malware Removal Help & Support
Trying to remove 'Dept of Justice' Trojan!
Message
<blockquote data-quote="Carsus" data-source="post: 139163" data-attributes="member: 13612"><p>File created by FRST:</p><p>Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-10-2013</p><p>Ran by SYSTEM on REATOGO on 11-10-2013 10:17:15</p><p>Running from D:\</p><p>Microsoft Windows XP (X86) OS Language: English(US)</p><p>Internet Explorer Version 8</p><p>Boot Mode: Recovery</p><p></p><p>The current controlset is ControlSet001</p><p><strong>ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.</strong></p><p></p><p>==================== Registry (Whitelisted) ==================</p><p></p><p>HKLM\...\Run: [RTHDCPL] - C:\Windows\RTHDCPL.EXE [16858624 2007-11-30] (Realtek Semiconductor Corp.)</p><p>HKLM\...\Run: [Alcmtr] - C:\Windows\ALCMTR.EXE [69632 2005-05-03] (Realtek Semiconductor Corp.)</p><p>HKLM\...\Run: [UpdateLBPShortCut] - C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2008-02-21] (CyberLink Corp.)</p><p>HKLM\...\Run: [CLMLServer] - C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [104936 2008-07-18] (CyberLink)</p><p>HKLM\...\Run: [UpdateP2GoShortCut] - C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [210216 2008-09-24] (CyberLink Corp.)</p><p>HKLM\...\Run: [UpdatePPShortCut] - C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [210216 2008-06-13] (CyberLink Corp.)</p><p>HKLM\...\Run: [UpdatePSTShortCut] - C:\Program Files\CyberLink\Blu-ray Disc Suite\MUITransfer\MUIStartMenu.exe [210216 2008-10-20] (CyberLink Corp.)</p><p>HKLM\...\Run: [nwiz] - C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [1657376 2009-08-06] ()</p><p>HKLM\...\Run: [NvMediaCenter] - RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit</p><p>HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup</p><p>HKLM\...\Run: [Nikon Transfer Monitor] - C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe [479232 2009-05-29] (Nikon Corporation)</p><p>HKLM\...\Run: [Kernel and Hardware Abstraction Layer] - C:\Windows\KHALMNPR.EXE [55824 2009-06-17] (Logitech, Inc.)</p><p>HKLM\...\Run: [BDRegion] - C:\Program Files\Cyberlink\Shared Files\brs.exe [75048 2009-09-04] (cyberlink)</p><p>HKLM\...\Run: [RemoteControl] - C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [87336 2009-04-16] (Cyberlink Corp.)</p><p>HKLM\...\Run: [LanguageShortcut] - C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [62760 2009-04-16] ()</p><p>HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)</p><p>HKLM\...\Run: [SwitchBoard] - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)</p><p>HKLM\...\Run: [AdobeCS5ServiceManager] - C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [402432 2010-07-22] (Adobe Systems Incorporated)</p><p>HKLM\...\Run: [AppleSyncNotifier] - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-11-02] (Apple Inc.)</p><p>HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)</p><p>HKLM\...\Run: [UserFaultCheck] - %systemroot%\system32\dumprep 0 -u</p><p>HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)</p><p>HKLM\...\Run: [Nikon Message Center 2] - C:\Program Files\Nikon\Nikon Message Center 2\NkMC2.exe [571392 2011-10-30] (Nikon Corporation)</p><p>HKLM\...\Run: [mcui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [1278064 2013-03-13] (McAfee, Inc.)</p><p>HKLM\...\Run: [LWS] - C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.)</p><p>HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\qttask.exe [421888 2013-05-01] (Apple Inc.)</p><p>HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)</p><p>HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)</p><p>HKLM\...\Run: [WindowsInfo] - "C:\Documents and Settings\B. J. Buchanan\Templates\WindowsInfo.exe"</p><p>HKLM\...\Run: [KernelFaultCheck] - %systemroot%\system32\dumprep 0 -k</p><p>Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)</p><p>HKU\B. J. Buchanan\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [ 2008-07-30] (Hewlett-Packard Company)</p><p>HKU\B. J. Buchanan\...\Run: [NortonUpdateAgent] - C:\Documents and Settings\All Users\Application Data\Norton\NUA.exe [ 2011-04-05] (Symantec Corporation)</p><p>HKU\B. J. Buchanan\...\Run: [AdobeBridge] - [x]</p><p>Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Logitech SetPoint.lnk</p><p>ShortcutTarget: Logitech SetPoint.lnk -> C:\Program Files\Logitech\SetPoint\SetPoint.exe (Logitech, Inc.)</p><p>Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Logo Calibration Loader.lnk</p><p>ShortcutTarget: Logo Calibration Loader.lnk -> C:\Program Files\GretagMacbeth\i1\Eye-One Match 3\CalibrationLoader\CalibrationLoader.exe (LOGO Kommunikations- und Drucktechnik GmbH & Co. KG)</p><p>Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microtek Scanner Finder.lnk</p><p>ShortcutTarget: Microtek Scanner Finder.lnk -> C:\Program Files\Microtek\ScanWizard 5\ScannerFinder.exe ()</p><p>Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ProfileReminder.lnk</p><p>ShortcutTarget: ProfileReminder.lnk -> C:\Program Files\GretagMacbeth\i1\Eye-One Match 3\ProfileReminder.exe (LOGO Kommunikations- und Drucktechnik GmbH & Co. KG)</p><p>Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Windows Search.lnk</p><p>ShortcutTarget: Windows Search.lnk -> C:\Program Files\Windows Desktop Search\WindowsSearch.exe (Microsoft Corporation)</p><p>SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\WINDOWS\system32\CbFsMntNtf3.dll (EldoS Corporation)</p><p></p><p>========================== Services (Whitelisted) =================</p><p></p><p>S2 CCALib8; C:\Program Files\Canon\CAL\CALMAIN.exe [96370 2007-01-31] (Canon Inc.)</p><p>S2 mcmscsvc; C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe [167784 2012-08-31] (McAfee, Inc.)</p><p>S2 McNaiAnn; C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe [167784 2012-08-31] (McAfee, Inc.)</p><p>S2 McNASvc; C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe [167784 2012-08-31] (McAfee, Inc.)</p><p>S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [279048 2012-11-16] (McAfee, Inc.)</p><p>S2 McProxy; C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe [167784 2012-08-31] (McAfee, Inc.)</p><p>S2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [203840 2013-02-19] (McAfee, Inc.)</p><p>S2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [169320 2013-02-19] (McAfee, Inc.)</p><p>S2 mfevtp; C:\WINDOWS\system32\mfevtps.exe [172416 2013-02-19] (McAfee, Inc.)</p><p>S3 OKI OPHC DCS Loader; C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\OPHCLDCS.EXE [24576 2005-05-10] (Oki Data Corporation)</p><p>S2 JavaQuickStarterService; "C:\Program Files\Java\jre7\bin\jqs.exe" -service -config "C:\Program Files\Java\jre7\lib\deploy\jqs\jqs.conf"</p><p></p><p>==================== Drivers (Whitelisted) ====================</p><p></p><p>S1 cbfs3; C:\WINDOWS\system32\drivers\cbfs3.sys [296592 2011-11-04] (EldoS Corporation)</p><p>S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [60920 2013-02-19] (McAfee, Inc.)</p><p>S0 CLBStor; C:\Windows\System32\Drivers\CLBStor.sys [10368 2008-10-20] (Cyberlink Co.,Ltd.)</p><p>S2 CLBUDFR; C:\Windows\System32\Drivers\CLBUDFR.sys [154368 2008-10-20] (CyberLink Corporation.)</p><p>S3 eyeonedp; C:\Windows\System32\DRIVERS\eyeonedp.sys [44344 2003-11-27] ()</p><p>S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [133416 2013-02-19] (McAfee, Inc.)</p><p>S3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [235264 2013-02-19] (McAfee, Inc.)</p><p>S3 mfebopk; C:\Windows\System32\drivers\mfebopk.sys [65928 2013-02-19] (McAfee, Inc.)</p><p>S3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [363080 2013-02-19] (McAfee, Inc.)</p><p>S0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [565888 2013-02-19] (McAfee, Inc.)</p><p>S3 mfendisk; C:\Windows\System32\DRIVERS\mfendisk.sys [84904 2013-02-19] (McAfee, Inc.)</p><p>S3 mfendiskmp; C:\Windows\System32\DRIVERS\mfendisk.sys [84904 2013-02-19] (McAfee, Inc.)</p><p>S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [92632 2013-02-19] (McAfee, Inc.)</p><p>S1 mfetdi2k; C:\Windows\System32\drivers\mfetdi2k.sys [91640 2013-02-19] (McAfee, Inc.)</p><p>S3 NdisIP; C:\Windows\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)</p><p>S2 PDIHWCTL; C:\WINDOWS\system32\drivers\pdihwctl.sys [14416 2006-05-11] (Portrait Displays, Inc.)</p><p>S3 yukonwxp; C:\Windows\System32\DRIVERS\yk51x86.sys [285824 2007-11-29] (Marvell)</p><p>S2 {95808DC4-FA4A-4C74-92FE-5B863F82066B}; C:\Program Files\CyberLink\PowerDVD\000.fcl [87536 2009-09-04] (CyberLink Corp.)</p><p>S2 ASPI32; No ImagePath</p><p>S4 IntelIde; No ImagePath</p><p>S1 WS2IFSL; </p><p></p><p>==================== NetSvcs (Whitelisted) ===================</p><p></p><p></p><p>==================== One Month Created Files and Folders ========</p><p></p><p>2013-10-11 10:17 - 2013-10-11 10:17 - 00000000 ____D C:\FRST</p><p>2013-10-09 14:32 - 2013-10-09 14:32 - 00090112 _____ C:\Windows\Minidump\Mini100913-03.dmp</p><p>2013-10-09 09:51 - 2013-10-09 09:51 - 00090112 _____ C:\Windows\Minidump\Mini100913-02.dmp</p><p>2013-10-09 09:48 - 2013-10-09 09:47 - 00090112 _____ C:\Windows\Minidump\Mini100913-01.dmp</p><p>2013-10-09 09:47 - 2013-10-09 14:32 - 00000000 ____D C:\Windows\Minidump</p><p>2013-10-09 05:43 - 2013-10-09 05:43 - 00000294 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Odessa_Mermaid Tamara I am cheerful person and I had no day in my l....url</p><p>2013-10-09 02:59 - 2013-10-09 02:59 - 00000000 __SHD C:\found.000</p><p>2013-10-08 22:06 - 2013-10-11 05:04 - 00000000 ____D C:\Kaspersky Rescue Disk 10.0</p><p>2013-10-08 08:31 - 2013-10-08 08:31 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Yulia, age 25, Nikolayev - Jump4love.url</p><p>2013-10-08 08:31 - 2013-10-08 08:31 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Natalia, age 30, Nikolaev - Jump4love.url</p><p>2013-10-07 14:57 - 2013-10-07 14:57 - 00000234 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Sexy milfs, horny moms, hot housewives, mature pussy closeups, milf sex, sexy mom porn @ 40 Something Magazine free gallery (2).url</p><p>2013-10-07 14:57 - 2013-10-07 14:57 - 00000204 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Arkida karups private collection, karup teens, kpc, amateurs @ KarupsPCx Arkida.url</p><p>2013-10-07 14:56 - 2013-10-07 14:56 - 00000276 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Cornelia » Mature Housewives » mature women, sexy milfs, housewives from All Over 30 » Gallery Index.url</p><p>2013-10-07 14:56 - 2013-10-07 14:56 - 00000228 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Chrissy - » Amateurs » karups hometown amateurs, karupsha, real amateur teens Gallery Index.url</p><p>2013-10-07 14:56 - 2013-10-07 14:56 - 00000218 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Lori » Amateurs » karups hometown amateurs, karupsha, real amateur teens Gallery Index.url</p><p>2013-10-07 14:56 - 2013-10-07 14:56 - 00000202 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Nessa-bj- karups private collection, karup teens, kpc, amateurs @ KarupsPCx Nessa-bj- (2).url</p><p>2013-10-07 14:55 - 2013-10-07 14:55 - 00000592 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Brooke » Amateurs » karups hometown amateurs, karupsha, real amateur teens Gallery Index (2).url</p><p>2013-10-07 14:55 - 2013-10-07 14:55 - 00000216 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Ivy » Amateurs » karups hometown amateurs, karupsha, real amateur teens Gallery Index.url</p><p>2013-10-07 14:08 - 2013-10-07 14:08 - 00000306 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Miss_Universe Anna I am romantic and kind person. I like sweets ....url</p><p>2013-10-07 14:08 - 2013-10-07 14:08 - 00000306 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Laila_Arafel Aliona From the first sight at me you will realize t....url</p><p>2013-10-06 10:25 - 2013-10-06 10:25 - 00000277 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Olga, age 35, Kiev - Jump4love.url</p><p>2013-10-06 10:24 - 2013-10-06 10:24 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Svetlana, age 38, Odessa - Jump4love.url</p><p>2013-10-06 10:24 - 2013-10-06 10:24 - 00000277 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Ludmila, age 27, Nikolaev - Jump4love.url</p><p>2013-10-05 12:48 - 2013-10-05 12:48 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Irina, age 28, Nikolaev - Jump4love.url</p><p>2013-10-05 12:48 - 2013-10-05 12:48 - 00000277 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Vicktoriya, age 24, Nikolaev - Jump4love.url</p><p>2013-10-05 12:48 - 2013-10-05 12:48 - 00000277 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Valeria, age 27, Nikolaev - Jump4love (2).url</p><p>2013-10-05 12:47 - 2013-10-05 12:47 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Yana , age 20, Smila - Jump4love.url</p><p>2013-10-05 12:47 - 2013-10-05 12:47 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Elena, age 26, Kharkov - Jump4love.url</p><p>2013-10-05 12:45 - 2013-10-05 12:45 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Tonya, age 20, Nikolaev - Jump4love.url</p><p>2013-10-05 12:45 - 2013-10-05 12:45 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Irina, age 34, Nikolaev - Jump4love.url</p><p>2013-10-05 12:45 - 2013-10-05 12:45 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Aliona, age 22, Nikolayev - Jump4love.url</p><p>2013-10-02 06:36 - 2013-10-02 06:36 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Julia, age 21, Kyiv - Jump4love.url</p><p>2013-10-01 15:58 - 2013-10-01 15:58 - 00000847 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Hard teen dick stretches a lovely mature pussy in a wild #####ing session. ##### Moms Around..url</p><p>2013-10-01 15:58 - 2013-10-01 15:58 - 00000487 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Sex-starved mature wife lets her lover come out and give her good pounding. Boys Love Matures..url</p><p>2013-10-01 15:58 - 2013-10-01 15:58 - 00000483 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Sassy big titted mature dildo drilling hairy hole. Older Woman Sex..url</p><p>2013-09-29 21:42 - 2013-09-29 21:42 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Juliya, age 21, Sumy - Jump4love.url</p><p>2013-09-29 21:41 - 2013-09-29 21:41 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Yulia, age 21, Kharkov - Jump4love.url</p><p>2013-09-29 21:41 - 2013-09-29 21:41 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Victoria, age 25, Kharkov - Jump4love.url</p><p>2013-09-29 21:41 - 2013-09-29 21:41 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Maria, age 20, Nikolaev - Jump4love.url</p><p>2013-09-29 21:41 - 2013-09-29 21:41 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Svetlana, age 22, Kyiv - Jump4love.url</p><p>2013-09-29 21:41 - 2013-09-29 21:41 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anastasiya, age 19, Varvarovka - Jump4love.url</p><p>2013-09-29 21:40 - 2013-09-29 21:40 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Yana, age 19, Nikolaev - Jump4love.url</p><p>2013-09-29 21:40 - 2013-09-29 21:40 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Ekaterina, age 18, Nikopol - Jump4love.url</p><p>2013-09-29 21:40 - 2013-09-29 21:40 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Diana, age 20, Zaporozhye - Jump4love.url</p><p>2013-09-29 21:40 - 2013-09-29 21:40 - 00000277 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Marina, age 21, Nikolaev - Jump4love.url</p><p>2013-09-29 21:39 - 2013-09-29 21:39 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Victoria, age 22, Nikopol - Jump4love.url</p><p>2013-09-27 13:39 - 2013-09-27 13:39 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Oksana, age 23, Nikolaev - Jump4love.url</p><p>2013-09-27 13:39 - 2013-09-27 13:39 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anna, age 24, Kharkov - Jump4love (2).url</p><p>2013-09-24 17:02 - 2013-09-24 17:02 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Irina, age 21, Kremenchug - Jump4love.url</p><p>2013-09-24 17:01 - 2013-09-24 17:01 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Ekaterina, age 26, Dnepropetrovsk - Jump4love.url</p><p>2013-09-24 17:01 - 2013-09-24 17:01 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anastasia, age 23, Kherson - Jump4love.url</p><p>2013-09-24 17:00 - 2013-09-24 17:00 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Natalia, age 25, Odessa - Jump4love.url</p><p>2013-09-24 16:32 - 2013-09-24 16:32 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Victoria, age 19, Nikolaev - Jump4love.url</p><p>2013-09-24 16:32 - 2013-09-24 16:32 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Julia, age 20, Nikolaev - Jump4love.url</p><p>2013-09-24 06:03 - 2013-09-24 06:03 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Olga, age 22, Voznesensk - Jump4love.url</p><p>2013-09-23 10:13 - 2013-09-23 10:13 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Elena, age 24, Kiev - Jump4love.url</p><p>2013-09-23 10:13 - 2013-09-23 10:13 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Elena , age 20, Kherson - Jump4love.url</p><p>2013-09-22 09:40 - 2013-09-22 09:40 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Tatiana, age 21, Yalta,Gurzuf - Jump4love.url</p><p>2013-09-22 09:40 - 2013-09-22 09:40 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anna, age 21, Kherson - Jump4love.url</p><p>2013-09-22 09:40 - 2013-09-22 09:40 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anastasia, age 20, Slavyansk - Jump4love.url</p><p>2013-09-22 09:40 - 2013-09-22 09:40 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Elena, age 31, Nikolaev - Jump4love.url</p><p>2013-09-22 09:39 - 2013-09-22 09:39 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Valeria, age 20, Odessa - Jump4love.url</p><p>2013-09-21 09:12 - 2013-09-21 09:12 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Tatyana, age 25, Simferopol - Jump4love.url</p><p>2013-09-21 09:11 - 2013-09-21 09:11 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anna, age 25, Poltava - Jump4love.url</p><p>2013-09-21 09:11 - 2013-09-21 09:11 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anastasia, age 19, Nikopol - Jump4love.url</p><p>2013-09-21 09:11 - 2013-09-21 09:11 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Alena, age 19, Nikolaev - Jump4love.url</p><p>2013-09-21 09:10 - 2013-09-21 09:10 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Julia, age 18, Nikolaev - Jump4love.url</p><p>2013-09-21 09:10 - 2013-09-21 09:10 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Ekaterina, age 21, Cherkassy - Jump4love.url</p><p>2013-09-21 09:10 - 2013-09-21 09:10 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Oksana, age 33, Kherson - Jump4love.url</p><p>2013-09-21 09:10 - 2013-09-21 09:10 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Evgenia, age 27, Mariupol - Jump4love.url</p><p>2013-09-21 09:09 - 2013-09-21 09:09 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Victoria, age 25, Nikolaev - Jump4love.url</p><p>2013-09-21 09:09 - 2013-09-21 09:09 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Karina, age 21, Poltava - Jump4love.url</p><p>2013-09-21 09:09 - 2013-09-21 09:09 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anna, age 24, Hmelnitskiy - Jump4love.url</p><p>2013-09-21 09:09 - 2013-09-21 09:09 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Natalya, age 26, Nikolaev - Jump4love.url</p><p>2013-09-21 09:09 - 2013-09-21 09:09 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Elena, age 26, Nikolaev - Jump4love.url</p><p>2013-09-21 09:08 - 2013-09-21 09:08 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Margarita, age 20, Kharkov - Jump4love.url</p><p>2013-09-21 09:08 - 2013-09-21 09:08 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Julia, age 26, Kremenchug - Jump4love.url</p><p>2013-09-21 09:07 - 2013-09-21 09:07 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Irina, age 27, Nikolaev - Jump4love.url</p><p>2013-09-21 09:07 - 2013-09-21 09:07 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Inna, age 24, Nikolaev - Jump4love.url</p><p>2013-09-21 09:07 - 2013-09-21 09:07 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Daria, age 19, Nikolaev - Jump4love.url</p><p>2013-09-21 09:07 - 2013-09-21 09:07 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Bozjena, age 22, Odessa - Jump4love.url</p><p>2013-09-21 09:07 - 2013-09-21 09:07 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Alina, age 21, Kherson - Jump4love.url</p><p>2013-09-21 09:00 - 2013-09-21 09:00 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Karina, age 20, Nikolaev - Jump4love.url</p><p>2013-09-21 09:00 - 2013-09-21 09:00 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Valeria, age 27, Nikolaev - Jump4love.url</p><p>2013-09-21 08:59 - 2013-09-21 08:59 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Olga, age 23, Poltava - Jump4love.url</p><p>2013-09-21 08:59 - 2013-09-21 08:59 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Olga , age 28, Nikolaev - Jump4love.url</p><p>2013-09-21 08:59 - 2013-09-21 08:59 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anna, age 24, Kharkov - Jump4love.url</p><p>2013-09-21 08:59 - 2013-09-21 08:59 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Julia, age 21, Poltava - Jump4love.url</p><p></p><p>==================== One Month Modified Files and Folders =======</p><p></p><p>2013-10-11 10:17 - 2013-10-11 10:17 - 00000000 ____D C:\FRST</p><p>2013-10-11 05:04 - 2013-10-08 22:06 - 00000000 ____D C:\Kaspersky Rescue Disk 10.0</p><p>2013-10-09 14:34 - 2010-01-01 16:15 - 01040182 _____ C:\Windows\setupapi.log</p><p>2013-10-09 14:33 - 2010-01-01 16:19 - 00000159 _____ C:\Windows\wiadebug.log</p><p>2013-10-09 14:33 - 2008-04-14 08:00 - 00000617 _____ C:\Windows\win.ini</p><p>2013-10-09 14:32 - 2013-10-09 14:32 - 00090112 _____ C:\Windows\Minidump\Mini100913-03.dmp</p><p>2013-10-09 14:32 - 2013-10-09 09:47 - 00000000 ____D C:\Windows\Minidump</p><p>2013-10-09 09:51 - 2013-10-09 09:51 - 00090112 _____ C:\Windows\Minidump\Mini100913-02.dmp</p><p>2013-10-09 09:47 - 2013-10-09 09:48 - 00090112 _____ C:\Windows\Minidump\Mini100913-01.dmp</p><p>2013-10-09 09:47 - 2010-09-18 20:51 - 00000000 ____D C:\Program Files\Google</p><p>2013-10-09 09:47 - 2010-09-18 20:51 - 00000000 ____D C:\Documents and Settings\B. J. Buchanan\Local Settings\Application Data\Google</p><p>2013-10-09 05:43 - 2013-10-09 05:43 - 00000294 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Odessa_Mermaid Tamara I am cheerful person and I had no day in my l....url</p><p>2013-10-09 03:12 - 2010-01-01 21:35 - 00032438 _____ C:\Windows\SchedLgU.Txt</p><p>2013-10-09 03:03 - 2010-01-01 21:31 - 01377957 _____ C:\Windows\WindowsUpdate.log</p><p>2013-10-09 03:03 - 2010-01-01 16:19 - 00000049 _____ C:\Windows\wiaservc.log</p><p>2013-10-09 03:02 - 2009-08-06 10:44 - 00248739 _____ C:\Windows\System32\NvApps.xml</p><p>2013-10-09 03:02 - 2008-04-14 08:00 - 00013646 _____ C:\Windows\System32\wpa.dbl</p><p>2013-10-09 02:59 - 2013-10-09 02:59 - 00000000 __SHD C:\found.000</p><p>2013-10-08 09:16 - 2010-09-13 14:19 - 00126464 _____ C:\Documents and Settings\B. J. Buchanan\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini</p><p>2013-10-08 08:31 - 2013-10-08 08:31 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Yulia, age 25, Nikolayev - Jump4love.url</p><p>2013-10-08 08:31 - 2013-10-08 08:31 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Natalia, age 30, Nikolaev - Jump4love.url</p><p>2013-10-07 14:57 - 2013-10-07 14:57 - 00000234 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Sexy milfs, horny moms, hot housewives, mature pussy closeups, milf sex, sexy mom porn @ 40 Something Magazine free gallery (2).url</p><p>2013-10-07 14:57 - 2013-10-07 14:57 - 00000204 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Arkida karups private collection, karup teens, kpc, amateurs @ KarupsPCx Arkida.url</p><p>2013-10-07 14:56 - 2013-10-07 14:56 - 00000276 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Cornelia » Mature Housewives » mature women, sexy milfs, housewives from All Over 30 » Gallery Index.url</p><p>2013-10-07 14:56 - 2013-10-07 14:56 - 00000228 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Chrissy - » Amateurs » karups hometown amateurs, karupsha, real amateur teens Gallery Index.url</p><p>2013-10-07 14:56 - 2013-10-07 14:56 - 00000218 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Lori » Amateurs » karups hometown amateurs, karupsha, real amateur teens Gallery Index.url</p><p>2013-10-07 14:56 - 2013-10-07 14:56 - 00000202 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Nessa-bj- karups private collection, karup teens, kpc, amateurs @ KarupsPCx Nessa-bj- (2).url</p><p>2013-10-07 14:55 - 2013-10-07 14:55 - 00000592 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Brooke » Amateurs » karups hometown amateurs, karupsha, real amateur teens Gallery Index (2).url</p><p>2013-10-07 14:55 - 2013-10-07 14:55 - 00000216 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Ivy » Amateurs » karups hometown amateurs, karupsha, real amateur teens Gallery Index.url</p><p>2013-10-07 14:08 - 2013-10-07 14:08 - 00000306 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Miss_Universe Anna I am romantic and kind person. I like sweets ....url</p><p>2013-10-07 14:08 - 2013-10-07 14:08 - 00000306 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Laila_Arafel Aliona From the first sight at me you will realize t....url</p><p>2013-10-06 10:25 - 2013-10-06 10:25 - 00000277 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Olga, age 35, Kiev - Jump4love.url</p><p>2013-10-06 10:24 - 2013-10-06 10:24 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Svetlana, age 38, Odessa - Jump4love.url</p><p>2013-10-06 10:24 - 2013-10-06 10:24 - 00000277 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Ludmila, age 27, Nikolaev - Jump4love.url</p><p>2013-10-05 12:48 - 2013-10-05 12:48 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Irina, age 28, Nikolaev - Jump4love.url</p><p>2013-10-05 12:48 - 2013-10-05 12:48 - 00000277 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Vicktoriya, age 24, Nikolaev - Jump4love.url</p><p>2013-10-05 12:48 - 2013-10-05 12:48 - 00000277 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Valeria, age 27, Nikolaev - Jump4love (2).url</p><p>2013-10-05 12:47 - 2013-10-05 12:47 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Yana , age 20, Smila - Jump4love.url</p><p>2013-10-05 12:47 - 2013-10-05 12:47 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Elena, age 26, Kharkov - Jump4love.url</p><p>2013-10-05 12:45 - 2013-10-05 12:45 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Tonya, age 20, Nikolaev - Jump4love.url</p><p>2013-10-05 12:45 - 2013-10-05 12:45 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Irina, age 34, Nikolaev - Jump4love.url</p><p>2013-10-05 12:45 - 2013-10-05 12:45 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Aliona, age 22, Nikolayev - Jump4love.url</p><p>2013-10-04 19:10 - 2010-09-18 20:53 - 00001813 _____ C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk</p><p>2013-10-04 14:09 - 2010-01-12 22:08 - 00017476 _____ C:\Windows\System32\OPC3200N.cah</p><p>2013-10-03 12:49 - 2010-01-07 22:00 - 00000020 ____H C:\Documents and Settings\All Users\Application Data\PKP_DLbx.DAT</p><p>2013-10-02 06:36 - 2013-10-02 06:36 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Julia, age 21, Kyiv - Jump4love.url</p><p>2013-10-01 15:58 - 2013-10-01 15:58 - 00000847 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Hard teen dick stretches a lovely mature pussy in a wild #####ing session. ##### Moms Around..url</p><p>2013-10-01 15:58 - 2013-10-01 15:58 - 00000487 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Sex-starved mature wife lets her lover come out and give her good pounding. Boys Love Matures..url</p><p>2013-10-01 15:58 - 2013-10-01 15:58 - 00000483 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Sassy big titted mature dildo drilling hairy hole. Older Woman Sex..url</p><p>2013-09-30 05:42 - 2010-01-01 22:06 - 00000000 ____D C:\Program Files\Common Files\Adobe</p><p>2013-09-29 21:42 - 2013-09-29 21:42 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Juliya, age 21, Sumy - Jump4love.url</p><p>2013-09-29 21:41 - 2013-09-29 21:41 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Yulia, age 21, Kharkov - Jump4love.url</p><p>2013-09-29 21:41 - 2013-09-29 21:41 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Victoria, age 25, Kharkov - Jump4love.url</p><p>2013-09-29 21:41 - 2013-09-29 21:41 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Maria, age 20, Nikolaev - Jump4love.url</p><p>2013-09-29 21:41 - 2013-09-29 21:41 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Svetlana, age 22, Kyiv - Jump4love.url</p><p>2013-09-29 21:41 - 2013-09-29 21:41 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anastasiya, age 19, Varvarovka - Jump4love.url</p><p>2013-09-29 21:40 - 2013-09-29 21:40 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Yana, age 19, Nikolaev - Jump4love.url</p><p>2013-09-29 21:40 - 2013-09-29 21:40 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Ekaterina, age 18, Nikopol - Jump4love.url</p><p>2013-09-29 21:40 - 2013-09-29 21:40 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Diana, age 20, Zaporozhye - Jump4love.url</p><p>2013-09-29 21:40 - 2013-09-29 21:40 - 00000277 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Marina, age 21, Nikolaev - Jump4love.url</p><p>2013-09-29 21:39 - 2013-09-29 21:39 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Victoria, age 22, Nikopol - Jump4love.url</p><p>2013-09-27 13:39 - 2013-09-27 13:39 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Oksana, age 23, Nikolaev - Jump4love.url</p><p>2013-09-27 13:39 - 2013-09-27 13:39 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anna, age 24, Kharkov - Jump4love (2).url</p><p>2013-09-24 17:02 - 2013-09-24 17:02 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Irina, age 21, Kremenchug - Jump4love.url</p><p>2013-09-24 17:01 - 2013-09-24 17:01 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Ekaterina, age 26, Dnepropetrovsk - Jump4love.url</p><p>2013-09-24 17:01 - 2013-09-24 17:01 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anastasia, age 23, Kherson - Jump4love.url</p><p>2013-09-24 17:00 - 2013-09-24 17:00 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Natalia, age 25, Odessa - Jump4love.url</p><p>2013-09-24 16:32 - 2013-09-24 16:32 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Victoria, age 19, Nikolaev - Jump4love.url</p><p>2013-09-24 16:32 - 2013-09-24 16:32 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Julia, age 20, Nikolaev - Jump4love.url</p><p>2013-09-24 06:03 - 2013-09-24 06:03 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Olga, age 22, Voznesensk - Jump4love.url</p><p>2013-09-23 10:13 - 2013-09-23 10:13 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Elena, age 24, Kiev - Jump4love.url</p><p>2013-09-23 10:13 - 2013-09-23 10:13 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Elena , age 20, Kherson - Jump4love.url</p><p>2013-09-22 09:40 - 2013-09-22 09:40 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Tatiana, age 21, Yalta,Gurzuf - Jump4love.url</p><p>2013-09-22 09:40 - 2013-09-22 09:40 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anna, age 21, Kherson - Jump4love.url</p><p>2013-09-22 09:40 - 2013-09-22 09:40 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anastasia, age 20, Slavyansk - Jump4love.url</p><p>2013-09-22 09:40 - 2013-09-22 09:40 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Elena, age 31, Nikolaev - Jump4love.url</p><p>2013-09-22 09:39 - 2013-09-22 09:39 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Valeria, age 20, Odessa - Jump4love.url</p><p>2013-09-21 09:12 - 2013-09-21 09:12 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Tatyana, age 25, Simferopol - Jump4love.url</p><p>2013-09-21 09:11 - 2013-09-21 09:11 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anna, age 25, Poltava - Jump4love.url</p><p>2013-09-21 09:11 - 2013-09-21 09:11 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anastasia, age 19, Nikopol - Jump4love.url</p><p>2013-09-21 09:11 - 2013-09-21 09:11 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Alena, age 19, Nikolaev - Jump4love.url</p><p>2013-09-21 09:10 - 2013-09-21 09:10 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Julia, age 18, Nikolaev - Jump4love.url</p><p>2013-09-21 09:10 - 2013-09-21 09:10 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Ekaterina, age 21, Cherkassy - Jump4love.url</p><p>2013-09-21 09:10 - 2013-09-21 09:10 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Oksana, age 33, Kherson - Jump4love.url</p><p>2013-09-21 09:10 - 2013-09-21 09:10 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Evgenia, age 27, Mariupol - Jump4love.url</p><p>2013-09-21 09:09 - 2013-09-21 09:09 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Victoria, age 25, Nikolaev - Jump4love.url</p><p>2013-09-21 09:09 - 2013-09-21 09:09 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Karina, age 21, Poltava - Jump4love.url</p><p>2013-09-21 09:09 - 2013-09-21 09:09 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anna, age 24, Hmelnitskiy - Jump4love.url</p><p>2013-09-21 09:09 - 2013-09-21 09:09 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Natalya, age 26, Nikolaev - Jump4love.url</p><p>2013-09-21 09:09 - 2013-09-21 09:09 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Elena, age 26, Nikolaev - Jump4love.url</p><p>2013-09-21 09:08 - 2013-09-21 09:08 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Margarita, age 20, Kharkov - Jump4love.url</p><p>2013-09-21 09:08 - 2013-09-21 09:08 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Julia, age 26, Kremenchug - Jump4love.url</p><p>2013-09-21 09:07 - 2013-09-21 09:07 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Irina, age 27, Nikolaev - Jump4love.url</p><p>2013-09-21 09:07 - 2013-09-21 09:07 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Inna, age 24, Nikolaev - Jump4love.url</p><p>2013-09-21 09:07 - 2013-09-21 09:07 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Daria, age 19, Nikolaev - Jump4love.url</p><p>2013-09-21 09:07 - 2013-09-21 09:07 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Bozjena, age 22, Odessa - Jump4love.url</p><p>2013-09-21 09:07 - 2013-09-21 09:07 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Alina, age 21, Kherson - Jump4love.url</p><p>2013-09-21 09:00 - 2013-09-21 09:00 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Karina, age 20, Nikolaev - Jump4love.url</p><p>2013-09-21 09:00 - 2013-09-21 09:00 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Valeria, age 27, Nikolaev - Jump4love.url</p><p>2013-09-21 08:59 - 2013-09-21 08:59 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Olga, age 23, Poltava - Jump4love.url</p><p>2013-09-21 08:59 - 2013-09-21 08:59 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Olga , age 28, Nikolaev - Jump4love.url</p><p>2013-09-21 08:59 - 2013-09-21 08:59 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anna, age 24, Kharkov - Jump4love.url</p><p>2013-09-21 08:59 - 2013-09-21 08:59 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Julia, age 21, Poltava - Jump4love.url</p><p>2013-09-19 19:50 - 2012-06-27 08:41 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe</p><p>2013-09-19 19:50 - 2012-06-27 08:41 - 00071048 ____C (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl</p><p></p><p>ZeroAccess:</p><p>C:\Windows\assembly\GAC\Desktop.ini</p><p></p><p>Files to move or delete:</p><p>====================</p><p>ZeroAccess:</p><p>C:\Documents and Settings\B. J. Buchanan\Local Settings\Application Data\Google\Desktop\Install</p><p>ZeroAccess:</p><p>C:\Program Files\Google\Desktop\Install</p><p></p><p></p><p>Some content of TEMP:</p><p>====================</p><p>C:\Documents and Settings\B. J. Buchanan\Local Settings\Temp\jre-7u13-windows-i586-iftw.exe</p><p>C:\Documents and Settings\B. J. Buchanan\Local Settings\Temp\jre-7u17-windows-i586-iftw.exe</p><p>C:\Documents and Settings\B. J. Buchanan\Local Settings\Temp\jre-7u21-windows-i586-iftw.exe</p><p>C:\Documents and Settings\B. J. Buchanan\Local Settings\Temp\jre-7u25-windows-i586-iftw.exe</p><p>C:\Documents and Settings\B. J. Buchanan\Local Settings\Temp\jre-7u9-windows-i586-iftw.exe</p><p>C:\Documents and Settings\B. J. Buchanan\Local Settings\Temp\ose00000.exe</p><p>C:\Documents and Settings\B. J. Buchanan\Local Settings\Temp\setup_wm.exe</p><p></p><p></p><p>==================== Known DLLs (Whitelisted) ============</p><p></p><p></p><p>==================== Bamital & volsnap Check =================</p><p></p><p>C:\Windows\explorer.exe => MD5 is legit</p><p>C:\Windows\System32\winlogon.exe => MD5 is legit</p><p>C:\Windows\System32\svchost.exe => MD5 is legit</p><p>C:\Windows\System32\services.exe => MD5 is legit</p><p>C:\Windows\System32\User32.dll => MD5 is legit</p><p>C:\Windows\System32\userinit.exe => MD5 is legit</p><p>C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit</p><p></p><p>==================== EXE ASSOCIATION =====================</p><p></p><p>HKLM\...\.exe: exefile => OK</p><p>HKLM\...\exefile\DefaultIcon: %1 => OK</p><p>HKLM\...\exefile\open\command: "%1" %* => OK</p><p></p><p>==================== Restore Points (XP) =====================</p><p></p><p>RP: -> 2013-10-08 18:22 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1272 </p><p></p><p>RP: -> 2013-10-07 17:11 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1271 </p><p></p><p>RP: -> 2013-10-06 16:04 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1270 </p><p></p><p>RP: -> 2013-10-05 14:16 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1269 </p><p></p><p>RP: -> 2013-10-04 13:29 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1268 </p><p></p><p>RP: -> 2013-10-03 13:24 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1267 </p><p></p><p>RP: -> 2013-10-02 13:11 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1266 </p><p></p><p>RP: -> 2013-10-01 12:46 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1265 </p><p></p><p>RP: -> 2013-09-30 12:44 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1264 </p><p></p><p>RP: -> 2013-09-29 10:58 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1263 </p><p></p><p>RP: -> 2013-10-28 23:42 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1262 </p><p></p><p>RP: -> 2013-09-28 05:36 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1261 </p><p></p><p>RP: -> 2013-09-27 04:37 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1260 </p><p></p><p>RP: -> 2013-09-26 03:37 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1259 </p><p></p><p>RP: -> 2013-09-25 03:01 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1258 </p><p></p><p>RP: -> 2013-09-24 02:02 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1257 </p><p></p><p>RP: -> 2013-09-23 01:02 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1256 </p><p></p><p>RP: -> 2013-09-22 00:41 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1255 </p><p></p><p>RP: -> 2013-09-21 00:25 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1254 </p><p></p><p>RP: -> 2013-09-19 23:30 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1253 </p><p></p><p>RP: -> 2013-09-18 22:41 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1252 </p><p></p><p>RP: -> 2013-09-17 22:10 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1251 </p><p></p><p>RP: -> 2013-09-16 21:34 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1250 </p><p></p><p>RP: -> 2013-09-15 20:45 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1249 </p><p></p><p>RP: -> 2013-09-14 17:50 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1248 </p><p></p><p>RP: -> 2013-09-13 17:13 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1247 </p><p></p><p>RP: -> 2013-09-12 16:13 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1246 </p><p></p><p>RP: -> 2013-09-11 15:06 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1245 </p><p></p><p>RP: -> 2013-09-10 14:03 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1244 </p><p></p><p>RP: -> 2013-09-09 13:13 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1243 </p><p></p><p>RP: -> 2013-09-08 13:06 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1242 </p><p></p><p>RP: -> 2013-09-07 12:24 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1241 </p><p></p><p>RP: -> 2013-09-06 11:13 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1240 </p><p></p><p>RP: -> 2013-09-05 11:04 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1239 </p><p></p><p>RP: -> 2013-09-04 10:55 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1238 </p><p></p><p>RP: -> 2013-09-03 10:38 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1237 </p><p></p><p>RP: -> 2013-09-02 09:33 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1236 </p><p></p><p>RP: -> 2013-09-01 07:54 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1235 </p><p></p><p>RP: -> 2013-08-31 00:22 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1234 </p><p></p><p>RP: -> 2013-08-29 23:45 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1233 </p><p></p><p>RP: -> 2013-08-28 23:14 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1232 </p><p></p><p>RP: -> 2013-08-27 22:50 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1231 </p><p></p><p>RP: -> 2013-08-26 22:38 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1230 </p><p></p><p>RP: -> 2013-08-25 22:18 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1229 </p><p></p><p>RP: -> 2013-08-24 21:53 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1228 </p><p></p><p>RP: -> 2013-08-23 20:59 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1227 </p><p></p><p>RP: -> 2013-08-22 20:37 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1226 </p><p></p><p>RP: -> 2013-08-21 18:51 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1225 </p><p></p><p>RP: -> 2013-08-20 18:24 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1224 </p><p></p><p>RP: -> 2013-08-19 18:22 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1223 </p><p></p><p>RP: -> 2013-08-18 18:19 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1222 </p><p></p><p>RP: -> 2013-08-17 17:04 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1221 </p><p></p><p>RP: -> 2013-08-16 15:15 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1220 </p><p></p><p>RP: -> 2013-08-15 13:05 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1219 </p><p></p><p>RP: -> 2013-08-14 12:53 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1218 </p><p></p><p>RP: -> 2013-08-13 11:31 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1217 </p><p></p><p>RP: -> 2013-08-12 09:51 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1216 </p><p></p><p>RP: -> 2013-08-11 06:38 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1215 </p><p></p><p>RP: -> 2013-08-10 00:55 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1214 </p><p></p><p>RP: -> 2013-08-09 00:07 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1213 </p><p></p><p>RP: -> 2013-08-08 00:03 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1212 </p><p></p><p>RP: -> 2013-08-06 23:16 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1211 </p><p></p><p>RP: -> 2013-08-05 22:18 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1210 </p><p></p><p>RP: -> 2013-08-04 21:14 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1209 </p><p></p><p>RP: -> 2013-08-03 21:07 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1208 </p><p></p><p>RP: -> 2009-03-31 00:18 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1207 </p><p></p><p>RP: -> 2013-08-03 02:11 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1206 </p><p></p><p>RP: -> 2013-08-02 01:12 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1205 </p><p></p><p>RP: -> 2013-08-01 01:01 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1204 </p><p></p><p>RP: -> 2013-07-31 00:13 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1203 </p><p></p><p>RP: -> 2013-07-29 23:14 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1202 </p><p></p><p>RP: -> 2013-07-28 22:27 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1201 </p><p></p><p>RP: -> 2013-07-27 19:26 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1200 </p><p></p><p>RP: -> 2013-07-26 19:00 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1199 </p><p></p><p>RP: -> 2013-07-25 18:01 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1198 </p><p></p><p>RP: -> 2013-07-24 17:27 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1197 </p><p></p><p>RP: -> 2013-07-23 17:03 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1196 </p><p></p><p>RP: -> 2013-07-22 16:47 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1195 </p><p></p><p>RP: -> 2013-07-21 15:56 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1194 </p><p></p><p>RP: -> 2013-07-20 15:33 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1193 </p><p></p><p>RP: -> 2013-07-19 15:19 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1192 </p><p></p><p>RP: -> 2013-07-18 14:19 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1191 </p><p></p><p>RP: -> 2013-07-17 14:06 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1190 </p><p></p><p>RP: -> 2013-07-16 13:25 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1189 </p><p></p><p>RP: -> 2013-07-15 12:08 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1188 </p><p></p><p>RP: -> 2013-07-14 11:30 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1187 </p><p></p><p>RP: -> 2013-07-13 10:42 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1186 </p><p></p><p>RP: -> 2013-07-12 10:33 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1185 </p><p></p><p>RP: -> 2013-07-12 10:33 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1184 </p><p></p><p>RP: -> 2013-07-11 18:40 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1183 </p><p></p><p></p><p>==================== Memory info =========================== </p><p></p><p>Percentage of memory in use: 8%</p><p>Total physical RAM: 3326.11 MB</p><p>Available physical RAM: 3045.46 MB</p><p>Total Pagefile: 3149.28 MB</p><p>Available Pagefile: 3072.81 MB</p><p>Total Virtual: 2047.88 MB</p><p>Available Virtual: 1993.16 MB</p><p></p><p>==================== Drives ================================</p><p></p><p>Drive b: (RAMDisk) (Fixed) (Total:0.06 GB) (Free:0.06 GB) NTFS</p><p>Drive c: () (Fixed) (Total:931.5 GB) (Free:182.94 GB) NTFS ==>[Drive with boot components (Windows XP)]</p><p>Drive d: (HITMANPRO) (Removable) (Total:14.99 GB) (Free:14.99 GB) FAT32</p><p>Drive x: (ReatogoPE) (CDROM) (Total:0.43 GB) (Free:0 GB) CDFS</p><p></p><p>==================== MBR & Partition Table ==================</p><p></p><p>========================================================</p><p>Disk: 0 (Size: 15 GB) (Disk ID: D783B488)</p><p>Partition 1: (Active) - (Size=15 GB) - (Type=0B)</p><p></p><p>========================================================</p><p>Disk: 1 (MBR Code: Windows XP) (Size: 932 GB) (Disk ID: EE17EE17)</p><p>Partition 1: (Active) - (Size=932 GB) - (Type=07 NTFS)</p><p></p><p>==================== End Of Log ============================</p><p></p><p>List Parts file:</p><p>ListParts by Farbar Version: 10-05-2013</p><p>Ran by SYSTEM (administrator) on 11-10-2013 at 10:20:22</p><p>Windows XP (X86)</p><p>Running From: D:\</p><p>Language: 0409</p><p>************************************************************</p><p></p><p>========================= Memory info ====================== </p><p></p><p>Percentage of memory in use: 6%</p><p>Total physical RAM: 3326.11 MB</p><p>Available physical RAM: 3094.44 MB</p><p>Total Pagefile: 3149.28 MB</p><p>Available Pagefile: 3084.54 MB</p><p>Total Virtual: 2047.88 MB</p><p>Available Virtual: 2007.38 MB</p><p></p><p>======================= Partitions =========================</p><p></p><p>1 Drive b: (RAMDisk) (Fixed) (Total:0.06 GB) (Free:0.06 GB) NTFS</p><p>2 Drive c: () (Fixed) (Total:931.5 GB) (Free:182.94 GB) NTFS ==>[Drive with boot components (Windows XP)]</p><p>3 Drive d: (HITMANPRO) (Removable) (Total:14.99 GB) (Free:14.99 GB) FAT32</p><p>4 Drive x: (ReatogoPE) (CDROM) (Total:0.43 GB) (Free:0 GB) CDFS</p><p></p><p> Disk ### Status Size Free Dyn Gpt</p><p> -------- ---------- ------- ------- --- ---</p><p> Disk 1 Online 932 GB 0 B </p><p></p><p>Partitions of Disk 1:</p><p>===============</p><p></p><p> Partition ### Type Size Offset</p><p> ------------- ---------------- ------- -------</p><p> Partition 1 Primary 932 GB 32 KB</p><p>======================================================================================================</p><p></p><p>Disk: 1</p><p>Partition 1</p><p>Type : 07</p><p>Hidden: No</p><p>Active: Yes</p><p></p><p> Volume ### Ltr Label Fs Type Size Status Info</p><p> ---------- --- ----------- ----- ---------- ------- --------- --------</p><p>* Volume 2 C NTFS Partition 932 GB Healthy </p><p>======================================================================================================</p><p>============================== MBR Partition Table ==================</p><p></p><p>==============================</p><p>Partitions of Disk 1:</p><p>===============</p><p>Disk ID: EE17EE17</p><p>Partition 1: (Active) - (Size=932 GB) - (Type=07 NTFS)</p><p></p><p></p><p>****** End Of Log ****** </p><p></p><p>FYI, ran Kaspersky a second time yesterday and came back clean!</p><p>From reading posts here though not convinced DOJ has been removed, but have not tried to boot yet.</p><p>When I do try do you recommend disconnecting from internet just to be safe?</p></blockquote><p></p>
[QUOTE="Carsus, post: 139163, member: 13612"] File created by FRST: Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-10-2013 Ran by SYSTEM on REATOGO on 11-10-2013 10:17:15 Running from D:\ Microsoft Windows XP (X86) OS Language: English(US) Internet Explorer Version 8 Boot Mode: Recovery The current controlset is ControlSet001 [b]ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.[/b] ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDCPL] - C:\Windows\RTHDCPL.EXE [16858624 2007-11-30] (Realtek Semiconductor Corp.) HKLM\...\Run: [Alcmtr] - C:\Windows\ALCMTR.EXE [69632 2005-05-03] (Realtek Semiconductor Corp.) HKLM\...\Run: [UpdateLBPShortCut] - C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2008-02-21] (CyberLink Corp.) HKLM\...\Run: [CLMLServer] - C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [104936 2008-07-18] (CyberLink) HKLM\...\Run: [UpdateP2GoShortCut] - C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [210216 2008-09-24] (CyberLink Corp.) HKLM\...\Run: [UpdatePPShortCut] - C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [210216 2008-06-13] (CyberLink Corp.) HKLM\...\Run: [UpdatePSTShortCut] - C:\Program Files\CyberLink\Blu-ray Disc Suite\MUITransfer\MUIStartMenu.exe [210216 2008-10-20] (CyberLink Corp.) HKLM\...\Run: [nwiz] - C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [1657376 2009-08-06] () HKLM\...\Run: [NvMediaCenter] - RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup HKLM\...\Run: [Nikon Transfer Monitor] - C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe [479232 2009-05-29] (Nikon Corporation) HKLM\...\Run: [Kernel and Hardware Abstraction Layer] - C:\Windows\KHALMNPR.EXE [55824 2009-06-17] (Logitech, Inc.) HKLM\...\Run: [BDRegion] - C:\Program Files\Cyberlink\Shared Files\brs.exe [75048 2009-09-04] (cyberlink) HKLM\...\Run: [RemoteControl] - C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [87336 2009-04-16] (Cyberlink Corp.) HKLM\...\Run: [LanguageShortcut] - C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [62760 2009-04-16] () HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated) HKLM\...\Run: [SwitchBoard] - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM\...\Run: [AdobeCS5ServiceManager] - C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [402432 2010-07-22] (Adobe Systems Incorporated) HKLM\...\Run: [AppleSyncNotifier] - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-11-02] (Apple Inc.) HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [UserFaultCheck] - %systemroot%\system32\dumprep 0 -u HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM\...\Run: [Nikon Message Center 2] - C:\Program Files\Nikon\Nikon Message Center 2\NkMC2.exe [571392 2011-10-30] (Nikon Corporation) HKLM\...\Run: [mcui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [1278064 2013-03-13] (McAfee, Inc.) HKLM\...\Run: [LWS] - C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.) HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\qttask.exe [421888 2013-05-01] (Apple Inc.) HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) HKLM\...\Run: [WindowsInfo] - "C:\Documents and Settings\B. J. Buchanan\Templates\WindowsInfo.exe" HKLM\...\Run: [KernelFaultCheck] - %systemroot%\system32\dumprep 0 -k Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.) HKU\B. J. Buchanan\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [ 2008-07-30] (Hewlett-Packard Company) HKU\B. J. Buchanan\...\Run: [NortonUpdateAgent] - C:\Documents and Settings\All Users\Application Data\Norton\NUA.exe [ 2011-04-05] (Symantec Corporation) HKU\B. J. Buchanan\...\Run: [AdobeBridge] - [x] Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Logitech SetPoint.lnk ShortcutTarget: Logitech SetPoint.lnk -> C:\Program Files\Logitech\SetPoint\SetPoint.exe (Logitech, Inc.) Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Logo Calibration Loader.lnk ShortcutTarget: Logo Calibration Loader.lnk -> C:\Program Files\GretagMacbeth\i1\Eye-One Match 3\CalibrationLoader\CalibrationLoader.exe (LOGO Kommunikations- und Drucktechnik GmbH & Co. KG) Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microtek Scanner Finder.lnk ShortcutTarget: Microtek Scanner Finder.lnk -> C:\Program Files\Microtek\ScanWizard 5\ScannerFinder.exe () Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ProfileReminder.lnk ShortcutTarget: ProfileReminder.lnk -> C:\Program Files\GretagMacbeth\i1\Eye-One Match 3\ProfileReminder.exe (LOGO Kommunikations- und Drucktechnik GmbH & Co. KG) Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Windows Search.lnk ShortcutTarget: Windows Search.lnk -> C:\Program Files\Windows Desktop Search\WindowsSearch.exe (Microsoft Corporation) SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\WINDOWS\system32\CbFsMntNtf3.dll (EldoS Corporation) ========================== Services (Whitelisted) ================= S2 CCALib8; C:\Program Files\Canon\CAL\CALMAIN.exe [96370 2007-01-31] (Canon Inc.) S2 mcmscsvc; C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe [167784 2012-08-31] (McAfee, Inc.) S2 McNaiAnn; C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe [167784 2012-08-31] (McAfee, Inc.) S2 McNASvc; C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe [167784 2012-08-31] (McAfee, Inc.) S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [279048 2012-11-16] (McAfee, Inc.) S2 McProxy; C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe [167784 2012-08-31] (McAfee, Inc.) S2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [203840 2013-02-19] (McAfee, Inc.) S2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [169320 2013-02-19] (McAfee, Inc.) S2 mfevtp; C:\WINDOWS\system32\mfevtps.exe [172416 2013-02-19] (McAfee, Inc.) S3 OKI OPHC DCS Loader; C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\OPHCLDCS.EXE [24576 2005-05-10] (Oki Data Corporation) S2 JavaQuickStarterService; "C:\Program Files\Java\jre7\bin\jqs.exe" -service -config "C:\Program Files\Java\jre7\lib\deploy\jqs\jqs.conf" ==================== Drivers (Whitelisted) ==================== S1 cbfs3; C:\WINDOWS\system32\drivers\cbfs3.sys [296592 2011-11-04] (EldoS Corporation) S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [60920 2013-02-19] (McAfee, Inc.) S0 CLBStor; C:\Windows\System32\Drivers\CLBStor.sys [10368 2008-10-20] (Cyberlink Co.,Ltd.) S2 CLBUDFR; C:\Windows\System32\Drivers\CLBUDFR.sys [154368 2008-10-20] (CyberLink Corporation.) S3 eyeonedp; C:\Windows\System32\DRIVERS\eyeonedp.sys [44344 2003-11-27] () S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [133416 2013-02-19] (McAfee, Inc.) S3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [235264 2013-02-19] (McAfee, Inc.) S3 mfebopk; C:\Windows\System32\drivers\mfebopk.sys [65928 2013-02-19] (McAfee, Inc.) S3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [363080 2013-02-19] (McAfee, Inc.) S0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [565888 2013-02-19] (McAfee, Inc.) S3 mfendisk; C:\Windows\System32\DRIVERS\mfendisk.sys [84904 2013-02-19] (McAfee, Inc.) S3 mfendiskmp; C:\Windows\System32\DRIVERS\mfendisk.sys [84904 2013-02-19] (McAfee, Inc.) S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [92632 2013-02-19] (McAfee, Inc.) S1 mfetdi2k; C:\Windows\System32\drivers\mfetdi2k.sys [91640 2013-02-19] (McAfee, Inc.) S3 NdisIP; C:\Windows\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation) S2 PDIHWCTL; C:\WINDOWS\system32\drivers\pdihwctl.sys [14416 2006-05-11] (Portrait Displays, Inc.) S3 yukonwxp; C:\Windows\System32\DRIVERS\yk51x86.sys [285824 2007-11-29] (Marvell) S2 {95808DC4-FA4A-4C74-92FE-5B863F82066B}; C:\Program Files\CyberLink\PowerDVD\000.fcl [87536 2009-09-04] (CyberLink Corp.) S2 ASPI32; No ImagePath S4 IntelIde; No ImagePath S1 WS2IFSL; ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-10-11 10:17 - 2013-10-11 10:17 - 00000000 ____D C:\FRST 2013-10-09 14:32 - 2013-10-09 14:32 - 00090112 _____ C:\Windows\Minidump\Mini100913-03.dmp 2013-10-09 09:51 - 2013-10-09 09:51 - 00090112 _____ C:\Windows\Minidump\Mini100913-02.dmp 2013-10-09 09:48 - 2013-10-09 09:47 - 00090112 _____ C:\Windows\Minidump\Mini100913-01.dmp 2013-10-09 09:47 - 2013-10-09 14:32 - 00000000 ____D C:\Windows\Minidump 2013-10-09 05:43 - 2013-10-09 05:43 - 00000294 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Odessa_Mermaid Tamara I am cheerful person and I had no day in my l....url 2013-10-09 02:59 - 2013-10-09 02:59 - 00000000 __SHD C:\found.000 2013-10-08 22:06 - 2013-10-11 05:04 - 00000000 ____D C:\Kaspersky Rescue Disk 10.0 2013-10-08 08:31 - 2013-10-08 08:31 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Yulia, age 25, Nikolayev - Jump4love.url 2013-10-08 08:31 - 2013-10-08 08:31 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Natalia, age 30, Nikolaev - Jump4love.url 2013-10-07 14:57 - 2013-10-07 14:57 - 00000234 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Sexy milfs, horny moms, hot housewives, mature pussy closeups, milf sex, sexy mom porn @ 40 Something Magazine free gallery (2).url 2013-10-07 14:57 - 2013-10-07 14:57 - 00000204 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Arkida karups private collection, karup teens, kpc, amateurs @ KarupsPCx Arkida.url 2013-10-07 14:56 - 2013-10-07 14:56 - 00000276 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Cornelia » Mature Housewives » mature women, sexy milfs, housewives from All Over 30 » Gallery Index.url 2013-10-07 14:56 - 2013-10-07 14:56 - 00000228 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Chrissy - » Amateurs » karups hometown amateurs, karupsha, real amateur teens Gallery Index.url 2013-10-07 14:56 - 2013-10-07 14:56 - 00000218 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Lori » Amateurs » karups hometown amateurs, karupsha, real amateur teens Gallery Index.url 2013-10-07 14:56 - 2013-10-07 14:56 - 00000202 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Nessa-bj- karups private collection, karup teens, kpc, amateurs @ KarupsPCx Nessa-bj- (2).url 2013-10-07 14:55 - 2013-10-07 14:55 - 00000592 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Brooke » Amateurs » karups hometown amateurs, karupsha, real amateur teens Gallery Index (2).url 2013-10-07 14:55 - 2013-10-07 14:55 - 00000216 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Ivy » Amateurs » karups hometown amateurs, karupsha, real amateur teens Gallery Index.url 2013-10-07 14:08 - 2013-10-07 14:08 - 00000306 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Miss_Universe Anna I am romantic and kind person. I like sweets ....url 2013-10-07 14:08 - 2013-10-07 14:08 - 00000306 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Laila_Arafel Aliona From the first sight at me you will realize t....url 2013-10-06 10:25 - 2013-10-06 10:25 - 00000277 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Olga, age 35, Kiev - Jump4love.url 2013-10-06 10:24 - 2013-10-06 10:24 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Svetlana, age 38, Odessa - Jump4love.url 2013-10-06 10:24 - 2013-10-06 10:24 - 00000277 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Ludmila, age 27, Nikolaev - Jump4love.url 2013-10-05 12:48 - 2013-10-05 12:48 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Irina, age 28, Nikolaev - Jump4love.url 2013-10-05 12:48 - 2013-10-05 12:48 - 00000277 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Vicktoriya, age 24, Nikolaev - Jump4love.url 2013-10-05 12:48 - 2013-10-05 12:48 - 00000277 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Valeria, age 27, Nikolaev - Jump4love (2).url 2013-10-05 12:47 - 2013-10-05 12:47 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Yana , age 20, Smila - Jump4love.url 2013-10-05 12:47 - 2013-10-05 12:47 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Elena, age 26, Kharkov - Jump4love.url 2013-10-05 12:45 - 2013-10-05 12:45 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Tonya, age 20, Nikolaev - Jump4love.url 2013-10-05 12:45 - 2013-10-05 12:45 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Irina, age 34, Nikolaev - Jump4love.url 2013-10-05 12:45 - 2013-10-05 12:45 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Aliona, age 22, Nikolayev - Jump4love.url 2013-10-02 06:36 - 2013-10-02 06:36 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Julia, age 21, Kyiv - Jump4love.url 2013-10-01 15:58 - 2013-10-01 15:58 - 00000847 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Hard teen dick stretches a lovely mature pussy in a wild #####ing session. ##### Moms Around..url 2013-10-01 15:58 - 2013-10-01 15:58 - 00000487 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Sex-starved mature wife lets her lover come out and give her good pounding. Boys Love Matures..url 2013-10-01 15:58 - 2013-10-01 15:58 - 00000483 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Sassy big titted mature dildo drilling hairy hole. Older Woman Sex..url 2013-09-29 21:42 - 2013-09-29 21:42 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Juliya, age 21, Sumy - Jump4love.url 2013-09-29 21:41 - 2013-09-29 21:41 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Yulia, age 21, Kharkov - Jump4love.url 2013-09-29 21:41 - 2013-09-29 21:41 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Victoria, age 25, Kharkov - Jump4love.url 2013-09-29 21:41 - 2013-09-29 21:41 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Maria, age 20, Nikolaev - Jump4love.url 2013-09-29 21:41 - 2013-09-29 21:41 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Svetlana, age 22, Kyiv - Jump4love.url 2013-09-29 21:41 - 2013-09-29 21:41 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anastasiya, age 19, Varvarovka - Jump4love.url 2013-09-29 21:40 - 2013-09-29 21:40 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Yana, age 19, Nikolaev - Jump4love.url 2013-09-29 21:40 - 2013-09-29 21:40 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Ekaterina, age 18, Nikopol - Jump4love.url 2013-09-29 21:40 - 2013-09-29 21:40 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Diana, age 20, Zaporozhye - Jump4love.url 2013-09-29 21:40 - 2013-09-29 21:40 - 00000277 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Marina, age 21, Nikolaev - Jump4love.url 2013-09-29 21:39 - 2013-09-29 21:39 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Victoria, age 22, Nikopol - Jump4love.url 2013-09-27 13:39 - 2013-09-27 13:39 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Oksana, age 23, Nikolaev - Jump4love.url 2013-09-27 13:39 - 2013-09-27 13:39 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anna, age 24, Kharkov - Jump4love (2).url 2013-09-24 17:02 - 2013-09-24 17:02 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Irina, age 21, Kremenchug - Jump4love.url 2013-09-24 17:01 - 2013-09-24 17:01 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Ekaterina, age 26, Dnepropetrovsk - Jump4love.url 2013-09-24 17:01 - 2013-09-24 17:01 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anastasia, age 23, Kherson - Jump4love.url 2013-09-24 17:00 - 2013-09-24 17:00 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Natalia, age 25, Odessa - Jump4love.url 2013-09-24 16:32 - 2013-09-24 16:32 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Victoria, age 19, Nikolaev - Jump4love.url 2013-09-24 16:32 - 2013-09-24 16:32 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Julia, age 20, Nikolaev - Jump4love.url 2013-09-24 06:03 - 2013-09-24 06:03 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Olga, age 22, Voznesensk - Jump4love.url 2013-09-23 10:13 - 2013-09-23 10:13 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Elena, age 24, Kiev - Jump4love.url 2013-09-23 10:13 - 2013-09-23 10:13 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Elena , age 20, Kherson - Jump4love.url 2013-09-22 09:40 - 2013-09-22 09:40 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Tatiana, age 21, Yalta,Gurzuf - Jump4love.url 2013-09-22 09:40 - 2013-09-22 09:40 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anna, age 21, Kherson - Jump4love.url 2013-09-22 09:40 - 2013-09-22 09:40 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anastasia, age 20, Slavyansk - Jump4love.url 2013-09-22 09:40 - 2013-09-22 09:40 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Elena, age 31, Nikolaev - Jump4love.url 2013-09-22 09:39 - 2013-09-22 09:39 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Valeria, age 20, Odessa - Jump4love.url 2013-09-21 09:12 - 2013-09-21 09:12 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Tatyana, age 25, Simferopol - Jump4love.url 2013-09-21 09:11 - 2013-09-21 09:11 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anna, age 25, Poltava - Jump4love.url 2013-09-21 09:11 - 2013-09-21 09:11 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anastasia, age 19, Nikopol - Jump4love.url 2013-09-21 09:11 - 2013-09-21 09:11 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Alena, age 19, Nikolaev - Jump4love.url 2013-09-21 09:10 - 2013-09-21 09:10 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Julia, age 18, Nikolaev - Jump4love.url 2013-09-21 09:10 - 2013-09-21 09:10 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Ekaterina, age 21, Cherkassy - Jump4love.url 2013-09-21 09:10 - 2013-09-21 09:10 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Oksana, age 33, Kherson - Jump4love.url 2013-09-21 09:10 - 2013-09-21 09:10 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Evgenia, age 27, Mariupol - Jump4love.url 2013-09-21 09:09 - 2013-09-21 09:09 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Victoria, age 25, Nikolaev - Jump4love.url 2013-09-21 09:09 - 2013-09-21 09:09 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Karina, age 21, Poltava - Jump4love.url 2013-09-21 09:09 - 2013-09-21 09:09 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anna, age 24, Hmelnitskiy - Jump4love.url 2013-09-21 09:09 - 2013-09-21 09:09 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Natalya, age 26, Nikolaev - Jump4love.url 2013-09-21 09:09 - 2013-09-21 09:09 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Elena, age 26, Nikolaev - Jump4love.url 2013-09-21 09:08 - 2013-09-21 09:08 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Margarita, age 20, Kharkov - Jump4love.url 2013-09-21 09:08 - 2013-09-21 09:08 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Julia, age 26, Kremenchug - Jump4love.url 2013-09-21 09:07 - 2013-09-21 09:07 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Irina, age 27, Nikolaev - Jump4love.url 2013-09-21 09:07 - 2013-09-21 09:07 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Inna, age 24, Nikolaev - Jump4love.url 2013-09-21 09:07 - 2013-09-21 09:07 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Daria, age 19, Nikolaev - Jump4love.url 2013-09-21 09:07 - 2013-09-21 09:07 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Bozjena, age 22, Odessa - Jump4love.url 2013-09-21 09:07 - 2013-09-21 09:07 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Alina, age 21, Kherson - Jump4love.url 2013-09-21 09:00 - 2013-09-21 09:00 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Karina, age 20, Nikolaev - Jump4love.url 2013-09-21 09:00 - 2013-09-21 09:00 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Valeria, age 27, Nikolaev - Jump4love.url 2013-09-21 08:59 - 2013-09-21 08:59 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Olga, age 23, Poltava - Jump4love.url 2013-09-21 08:59 - 2013-09-21 08:59 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Olga , age 28, Nikolaev - Jump4love.url 2013-09-21 08:59 - 2013-09-21 08:59 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anna, age 24, Kharkov - Jump4love.url 2013-09-21 08:59 - 2013-09-21 08:59 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Julia, age 21, Poltava - Jump4love.url ==================== One Month Modified Files and Folders ======= 2013-10-11 10:17 - 2013-10-11 10:17 - 00000000 ____D C:\FRST 2013-10-11 05:04 - 2013-10-08 22:06 - 00000000 ____D C:\Kaspersky Rescue Disk 10.0 2013-10-09 14:34 - 2010-01-01 16:15 - 01040182 _____ C:\Windows\setupapi.log 2013-10-09 14:33 - 2010-01-01 16:19 - 00000159 _____ C:\Windows\wiadebug.log 2013-10-09 14:33 - 2008-04-14 08:00 - 00000617 _____ C:\Windows\win.ini 2013-10-09 14:32 - 2013-10-09 14:32 - 00090112 _____ C:\Windows\Minidump\Mini100913-03.dmp 2013-10-09 14:32 - 2013-10-09 09:47 - 00000000 ____D C:\Windows\Minidump 2013-10-09 09:51 - 2013-10-09 09:51 - 00090112 _____ C:\Windows\Minidump\Mini100913-02.dmp 2013-10-09 09:47 - 2013-10-09 09:48 - 00090112 _____ C:\Windows\Minidump\Mini100913-01.dmp 2013-10-09 09:47 - 2010-09-18 20:51 - 00000000 ____D C:\Program Files\Google 2013-10-09 09:47 - 2010-09-18 20:51 - 00000000 ____D C:\Documents and Settings\B. J. Buchanan\Local Settings\Application Data\Google 2013-10-09 05:43 - 2013-10-09 05:43 - 00000294 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Odessa_Mermaid Tamara I am cheerful person and I had no day in my l....url 2013-10-09 03:12 - 2010-01-01 21:35 - 00032438 _____ C:\Windows\SchedLgU.Txt 2013-10-09 03:03 - 2010-01-01 21:31 - 01377957 _____ C:\Windows\WindowsUpdate.log 2013-10-09 03:03 - 2010-01-01 16:19 - 00000049 _____ C:\Windows\wiaservc.log 2013-10-09 03:02 - 2009-08-06 10:44 - 00248739 _____ C:\Windows\System32\NvApps.xml 2013-10-09 03:02 - 2008-04-14 08:00 - 00013646 _____ C:\Windows\System32\wpa.dbl 2013-10-09 02:59 - 2013-10-09 02:59 - 00000000 __SHD C:\found.000 2013-10-08 09:16 - 2010-09-13 14:19 - 00126464 _____ C:\Documents and Settings\B. J. Buchanan\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2013-10-08 08:31 - 2013-10-08 08:31 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Yulia, age 25, Nikolayev - Jump4love.url 2013-10-08 08:31 - 2013-10-08 08:31 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Natalia, age 30, Nikolaev - Jump4love.url 2013-10-07 14:57 - 2013-10-07 14:57 - 00000234 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Sexy milfs, horny moms, hot housewives, mature pussy closeups, milf sex, sexy mom porn @ 40 Something Magazine free gallery (2).url 2013-10-07 14:57 - 2013-10-07 14:57 - 00000204 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Arkida karups private collection, karup teens, kpc, amateurs @ KarupsPCx Arkida.url 2013-10-07 14:56 - 2013-10-07 14:56 - 00000276 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Cornelia » Mature Housewives » mature women, sexy milfs, housewives from All Over 30 » Gallery Index.url 2013-10-07 14:56 - 2013-10-07 14:56 - 00000228 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Chrissy - » Amateurs » karups hometown amateurs, karupsha, real amateur teens Gallery Index.url 2013-10-07 14:56 - 2013-10-07 14:56 - 00000218 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Lori » Amateurs » karups hometown amateurs, karupsha, real amateur teens Gallery Index.url 2013-10-07 14:56 - 2013-10-07 14:56 - 00000202 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Nessa-bj- karups private collection, karup teens, kpc, amateurs @ KarupsPCx Nessa-bj- (2).url 2013-10-07 14:55 - 2013-10-07 14:55 - 00000592 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Brooke » Amateurs » karups hometown amateurs, karupsha, real amateur teens Gallery Index (2).url 2013-10-07 14:55 - 2013-10-07 14:55 - 00000216 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Ivy » Amateurs » karups hometown amateurs, karupsha, real amateur teens Gallery Index.url 2013-10-07 14:08 - 2013-10-07 14:08 - 00000306 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Miss_Universe Anna I am romantic and kind person. I like sweets ....url 2013-10-07 14:08 - 2013-10-07 14:08 - 00000306 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Laila_Arafel Aliona From the first sight at me you will realize t....url 2013-10-06 10:25 - 2013-10-06 10:25 - 00000277 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Olga, age 35, Kiev - Jump4love.url 2013-10-06 10:24 - 2013-10-06 10:24 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Svetlana, age 38, Odessa - Jump4love.url 2013-10-06 10:24 - 2013-10-06 10:24 - 00000277 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Ludmila, age 27, Nikolaev - Jump4love.url 2013-10-05 12:48 - 2013-10-05 12:48 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Irina, age 28, Nikolaev - Jump4love.url 2013-10-05 12:48 - 2013-10-05 12:48 - 00000277 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Vicktoriya, age 24, Nikolaev - Jump4love.url 2013-10-05 12:48 - 2013-10-05 12:48 - 00000277 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Valeria, age 27, Nikolaev - Jump4love (2).url 2013-10-05 12:47 - 2013-10-05 12:47 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Yana , age 20, Smila - Jump4love.url 2013-10-05 12:47 - 2013-10-05 12:47 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Elena, age 26, Kharkov - Jump4love.url 2013-10-05 12:45 - 2013-10-05 12:45 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Tonya, age 20, Nikolaev - Jump4love.url 2013-10-05 12:45 - 2013-10-05 12:45 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Irina, age 34, Nikolaev - Jump4love.url 2013-10-05 12:45 - 2013-10-05 12:45 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Aliona, age 22, Nikolayev - Jump4love.url 2013-10-04 19:10 - 2010-09-18 20:53 - 00001813 _____ C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk 2013-10-04 14:09 - 2010-01-12 22:08 - 00017476 _____ C:\Windows\System32\OPC3200N.cah 2013-10-03 12:49 - 2010-01-07 22:00 - 00000020 ____H C:\Documents and Settings\All Users\Application Data\PKP_DLbx.DAT 2013-10-02 06:36 - 2013-10-02 06:36 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Julia, age 21, Kyiv - Jump4love.url 2013-10-01 15:58 - 2013-10-01 15:58 - 00000847 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Hard teen dick stretches a lovely mature pussy in a wild #####ing session. ##### Moms Around..url 2013-10-01 15:58 - 2013-10-01 15:58 - 00000487 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Sex-starved mature wife lets her lover come out and give her good pounding. Boys Love Matures..url 2013-10-01 15:58 - 2013-10-01 15:58 - 00000483 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Sassy big titted mature dildo drilling hairy hole. Older Woman Sex..url 2013-09-30 05:42 - 2010-01-01 22:06 - 00000000 ____D C:\Program Files\Common Files\Adobe 2013-09-29 21:42 - 2013-09-29 21:42 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Juliya, age 21, Sumy - Jump4love.url 2013-09-29 21:41 - 2013-09-29 21:41 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Yulia, age 21, Kharkov - Jump4love.url 2013-09-29 21:41 - 2013-09-29 21:41 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Victoria, age 25, Kharkov - Jump4love.url 2013-09-29 21:41 - 2013-09-29 21:41 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Maria, age 20, Nikolaev - Jump4love.url 2013-09-29 21:41 - 2013-09-29 21:41 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Svetlana, age 22, Kyiv - Jump4love.url 2013-09-29 21:41 - 2013-09-29 21:41 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anastasiya, age 19, Varvarovka - Jump4love.url 2013-09-29 21:40 - 2013-09-29 21:40 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Yana, age 19, Nikolaev - Jump4love.url 2013-09-29 21:40 - 2013-09-29 21:40 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Ekaterina, age 18, Nikopol - Jump4love.url 2013-09-29 21:40 - 2013-09-29 21:40 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Diana, age 20, Zaporozhye - Jump4love.url 2013-09-29 21:40 - 2013-09-29 21:40 - 00000277 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Marina, age 21, Nikolaev - Jump4love.url 2013-09-29 21:39 - 2013-09-29 21:39 - 00000280 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Victoria, age 22, Nikopol - Jump4love.url 2013-09-27 13:39 - 2013-09-27 13:39 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Oksana, age 23, Nikolaev - Jump4love.url 2013-09-27 13:39 - 2013-09-27 13:39 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anna, age 24, Kharkov - Jump4love (2).url 2013-09-24 17:02 - 2013-09-24 17:02 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Irina, age 21, Kremenchug - Jump4love.url 2013-09-24 17:01 - 2013-09-24 17:01 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Ekaterina, age 26, Dnepropetrovsk - Jump4love.url 2013-09-24 17:01 - 2013-09-24 17:01 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anastasia, age 23, Kherson - Jump4love.url 2013-09-24 17:00 - 2013-09-24 17:00 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Natalia, age 25, Odessa - Jump4love.url 2013-09-24 16:32 - 2013-09-24 16:32 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Victoria, age 19, Nikolaev - Jump4love.url 2013-09-24 16:32 - 2013-09-24 16:32 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Julia, age 20, Nikolaev - Jump4love.url 2013-09-24 06:03 - 2013-09-24 06:03 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Olga, age 22, Voznesensk - Jump4love.url 2013-09-23 10:13 - 2013-09-23 10:13 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Elena, age 24, Kiev - Jump4love.url 2013-09-23 10:13 - 2013-09-23 10:13 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Elena , age 20, Kherson - Jump4love.url 2013-09-22 09:40 - 2013-09-22 09:40 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Tatiana, age 21, Yalta,Gurzuf - Jump4love.url 2013-09-22 09:40 - 2013-09-22 09:40 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anna, age 21, Kherson - Jump4love.url 2013-09-22 09:40 - 2013-09-22 09:40 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anastasia, age 20, Slavyansk - Jump4love.url 2013-09-22 09:40 - 2013-09-22 09:40 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Elena, age 31, Nikolaev - Jump4love.url 2013-09-22 09:39 - 2013-09-22 09:39 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Valeria, age 20, Odessa - Jump4love.url 2013-09-21 09:12 - 2013-09-21 09:12 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Tatyana, age 25, Simferopol - Jump4love.url 2013-09-21 09:11 - 2013-09-21 09:11 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anna, age 25, Poltava - Jump4love.url 2013-09-21 09:11 - 2013-09-21 09:11 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anastasia, age 19, Nikopol - Jump4love.url 2013-09-21 09:11 - 2013-09-21 09:11 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Alena, age 19, Nikolaev - Jump4love.url 2013-09-21 09:10 - 2013-09-21 09:10 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Julia, age 18, Nikolaev - Jump4love.url 2013-09-21 09:10 - 2013-09-21 09:10 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Ekaterina, age 21, Cherkassy - Jump4love.url 2013-09-21 09:10 - 2013-09-21 09:10 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Oksana, age 33, Kherson - Jump4love.url 2013-09-21 09:10 - 2013-09-21 09:10 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Evgenia, age 27, Mariupol - Jump4love.url 2013-09-21 09:09 - 2013-09-21 09:09 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Victoria, age 25, Nikolaev - Jump4love.url 2013-09-21 09:09 - 2013-09-21 09:09 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Karina, age 21, Poltava - Jump4love.url 2013-09-21 09:09 - 2013-09-21 09:09 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anna, age 24, Hmelnitskiy - Jump4love.url 2013-09-21 09:09 - 2013-09-21 09:09 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Natalya, age 26, Nikolaev - Jump4love.url 2013-09-21 09:09 - 2013-09-21 09:09 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Elena, age 26, Nikolaev - Jump4love.url 2013-09-21 09:08 - 2013-09-21 09:08 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Margarita, age 20, Kharkov - Jump4love.url 2013-09-21 09:08 - 2013-09-21 09:08 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Julia, age 26, Kremenchug - Jump4love.url 2013-09-21 09:07 - 2013-09-21 09:07 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Irina, age 27, Nikolaev - Jump4love.url 2013-09-21 09:07 - 2013-09-21 09:07 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Inna, age 24, Nikolaev - Jump4love.url 2013-09-21 09:07 - 2013-09-21 09:07 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Daria, age 19, Nikolaev - Jump4love.url 2013-09-21 09:07 - 2013-09-21 09:07 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Bozjena, age 22, Odessa - Jump4love.url 2013-09-21 09:07 - 2013-09-21 09:07 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Alina, age 21, Kherson - Jump4love.url 2013-09-21 09:00 - 2013-09-21 09:00 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Karina, age 20, Nikolaev - Jump4love.url 2013-09-21 09:00 - 2013-09-21 09:00 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Valeria, age 27, Nikolaev - Jump4love.url 2013-09-21 08:59 - 2013-09-21 08:59 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Olga, age 23, Poltava - Jump4love.url 2013-09-21 08:59 - 2013-09-21 08:59 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Olga , age 28, Nikolaev - Jump4love.url 2013-09-21 08:59 - 2013-09-21 08:59 - 00000184 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Anna, age 24, Kharkov - Jump4love.url 2013-09-21 08:59 - 2013-09-21 08:59 - 00000182 _____ C:\Documents and Settings\B. J. Buchanan\Desktop\Julia, age 21, Poltava - Jump4love.url 2013-09-19 19:50 - 2012-06-27 08:41 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe 2013-09-19 19:50 - 2012-06-27 08:41 - 00071048 ____C (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl ZeroAccess: C:\Windows\assembly\GAC\Desktop.ini Files to move or delete: ==================== ZeroAccess: C:\Documents and Settings\B. J. Buchanan\Local Settings\Application Data\Google\Desktop\Install ZeroAccess: C:\Program Files\Google\Desktop\Install Some content of TEMP: ==================== C:\Documents and Settings\B. J. Buchanan\Local Settings\Temp\jre-7u13-windows-i586-iftw.exe C:\Documents and Settings\B. J. Buchanan\Local Settings\Temp\jre-7u17-windows-i586-iftw.exe C:\Documents and Settings\B. J. Buchanan\Local Settings\Temp\jre-7u21-windows-i586-iftw.exe C:\Documents and Settings\B. J. Buchanan\Local Settings\Temp\jre-7u25-windows-i586-iftw.exe C:\Documents and Settings\B. J. Buchanan\Local Settings\Temp\jre-7u9-windows-i586-iftw.exe C:\Documents and Settings\B. J. Buchanan\Local Settings\Temp\ose00000.exe C:\Documents and Settings\B. J. Buchanan\Local Settings\Temp\setup_wm.exe ==================== Known DLLs (Whitelisted) ============ ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== EXE ASSOCIATION ===================== HKLM\...\.exe: exefile => OK HKLM\...\exefile\DefaultIcon: %1 => OK HKLM\...\exefile\open\command: "%1" %* => OK ==================== Restore Points (XP) ===================== RP: -> 2013-10-08 18:22 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1272 RP: -> 2013-10-07 17:11 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1271 RP: -> 2013-10-06 16:04 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1270 RP: -> 2013-10-05 14:16 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1269 RP: -> 2013-10-04 13:29 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1268 RP: -> 2013-10-03 13:24 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1267 RP: -> 2013-10-02 13:11 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1266 RP: -> 2013-10-01 12:46 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1265 RP: -> 2013-09-30 12:44 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1264 RP: -> 2013-09-29 10:58 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1263 RP: -> 2013-10-28 23:42 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1262 RP: -> 2013-09-28 05:36 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1261 RP: -> 2013-09-27 04:37 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1260 RP: -> 2013-09-26 03:37 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1259 RP: -> 2013-09-25 03:01 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1258 RP: -> 2013-09-24 02:02 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1257 RP: -> 2013-09-23 01:02 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1256 RP: -> 2013-09-22 00:41 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1255 RP: -> 2013-09-21 00:25 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1254 RP: -> 2013-09-19 23:30 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1253 RP: -> 2013-09-18 22:41 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1252 RP: -> 2013-09-17 22:10 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1251 RP: -> 2013-09-16 21:34 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1250 RP: -> 2013-09-15 20:45 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1249 RP: -> 2013-09-14 17:50 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1248 RP: -> 2013-09-13 17:13 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1247 RP: -> 2013-09-12 16:13 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1246 RP: -> 2013-09-11 15:06 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1245 RP: -> 2013-09-10 14:03 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1244 RP: -> 2013-09-09 13:13 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1243 RP: -> 2013-09-08 13:06 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1242 RP: -> 2013-09-07 12:24 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1241 RP: -> 2013-09-06 11:13 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1240 RP: -> 2013-09-05 11:04 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1239 RP: -> 2013-09-04 10:55 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1238 RP: -> 2013-09-03 10:38 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1237 RP: -> 2013-09-02 09:33 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1236 RP: -> 2013-09-01 07:54 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1235 RP: -> 2013-08-31 00:22 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1234 RP: -> 2013-08-29 23:45 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1233 RP: -> 2013-08-28 23:14 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1232 RP: -> 2013-08-27 22:50 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1231 RP: -> 2013-08-26 22:38 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1230 RP: -> 2013-08-25 22:18 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1229 RP: -> 2013-08-24 21:53 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1228 RP: -> 2013-08-23 20:59 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1227 RP: -> 2013-08-22 20:37 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1226 RP: -> 2013-08-21 18:51 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1225 RP: -> 2013-08-20 18:24 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1224 RP: -> 2013-08-19 18:22 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1223 RP: -> 2013-08-18 18:19 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1222 RP: -> 2013-08-17 17:04 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1221 RP: -> 2013-08-16 15:15 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1220 RP: -> 2013-08-15 13:05 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1219 RP: -> 2013-08-14 12:53 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1218 RP: -> 2013-08-13 11:31 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1217 RP: -> 2013-08-12 09:51 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1216 RP: -> 2013-08-11 06:38 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1215 RP: -> 2013-08-10 00:55 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1214 RP: -> 2013-08-09 00:07 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1213 RP: -> 2013-08-08 00:03 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1212 RP: -> 2013-08-06 23:16 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1211 RP: -> 2013-08-05 22:18 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1210 RP: -> 2013-08-04 21:14 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1209 RP: -> 2013-08-03 21:07 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1208 RP: -> 2009-03-31 00:18 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1207 RP: -> 2013-08-03 02:11 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1206 RP: -> 2013-08-02 01:12 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1205 RP: -> 2013-08-01 01:01 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1204 RP: -> 2013-07-31 00:13 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1203 RP: -> 2013-07-29 23:14 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1202 RP: -> 2013-07-28 22:27 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1201 RP: -> 2013-07-27 19:26 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1200 RP: -> 2013-07-26 19:00 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1199 RP: -> 2013-07-25 18:01 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1198 RP: -> 2013-07-24 17:27 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1197 RP: -> 2013-07-23 17:03 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1196 RP: -> 2013-07-22 16:47 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1195 RP: -> 2013-07-21 15:56 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1194 RP: -> 2013-07-20 15:33 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1193 RP: -> 2013-07-19 15:19 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1192 RP: -> 2013-07-18 14:19 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1191 RP: -> 2013-07-17 14:06 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1190 RP: -> 2013-07-16 13:25 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1189 RP: -> 2013-07-15 12:08 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1188 RP: -> 2013-07-14 11:30 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1187 RP: -> 2013-07-13 10:42 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1186 RP: -> 2013-07-12 10:33 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1185 RP: -> 2013-07-12 10:33 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1184 RP: -> 2013-07-11 18:40 - 020480 _restore{7A310BF1-C477-4B07-A4A6-1AD546608259}\RP1183 ==================== Memory info =========================== Percentage of memory in use: 8% Total physical RAM: 3326.11 MB Available physical RAM: 3045.46 MB Total Pagefile: 3149.28 MB Available Pagefile: 3072.81 MB Total Virtual: 2047.88 MB Available Virtual: 1993.16 MB ==================== Drives ================================ Drive b: (RAMDisk) (Fixed) (Total:0.06 GB) (Free:0.06 GB) NTFS Drive c: () (Fixed) (Total:931.5 GB) (Free:182.94 GB) NTFS ==>[Drive with boot components (Windows XP)] Drive d: (HITMANPRO) (Removable) (Total:14.99 GB) (Free:14.99 GB) FAT32 Drive x: (ReatogoPE) (CDROM) (Total:0.43 GB) (Free:0 GB) CDFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 15 GB) (Disk ID: D783B488) Partition 1: (Active) - (Size=15 GB) - (Type=0B) ======================================================== Disk: 1 (MBR Code: Windows XP) (Size: 932 GB) (Disk ID: EE17EE17) Partition 1: (Active) - (Size=932 GB) - (Type=07 NTFS) ==================== End Of Log ============================ List Parts file: ListParts by Farbar Version: 10-05-2013 Ran by SYSTEM (administrator) on 11-10-2013 at 10:20:22 Windows XP (X86) Running From: D:\ Language: 0409 ************************************************************ ========================= Memory info ====================== Percentage of memory in use: 6% Total physical RAM: 3326.11 MB Available physical RAM: 3094.44 MB Total Pagefile: 3149.28 MB Available Pagefile: 3084.54 MB Total Virtual: 2047.88 MB Available Virtual: 2007.38 MB ======================= Partitions ========================= 1 Drive b: (RAMDisk) (Fixed) (Total:0.06 GB) (Free:0.06 GB) NTFS 2 Drive c: () (Fixed) (Total:931.5 GB) (Free:182.94 GB) NTFS ==>[Drive with boot components (Windows XP)] 3 Drive d: (HITMANPRO) (Removable) (Total:14.99 GB) (Free:14.99 GB) FAT32 4 Drive x: (ReatogoPE) (CDROM) (Total:0.43 GB) (Free:0 GB) CDFS Disk ### Status Size Free Dyn Gpt -------- ---------- ------- ------- --- --- Disk 1 Online 932 GB 0 B Partitions of Disk 1: =============== Partition ### Type Size Offset ------------- ---------------- ------- ------- Partition 1 Primary 932 GB 32 KB ====================================================================================================== Disk: 1 Partition 1 Type : 07 Hidden: No Active: Yes Volume ### Ltr Label Fs Type Size Status Info ---------- --- ----------- ----- ---------- ------- --------- -------- * Volume 2 C NTFS Partition 932 GB Healthy ====================================================================================================== ============================== MBR Partition Table ================== ============================== Partitions of Disk 1: =============== Disk ID: EE17EE17 Partition 1: (Active) - (Size=932 GB) - (Type=07 NTFS) ****** End Of Log ****** FYI, ran Kaspersky a second time yesterday and came back clean! From reading posts here though not convinced DOJ has been removed, but have not tried to boot yet. When I do try do you recommend disconnecting from internet just to be safe? [/QUOTE]
Insert quotes…
Verification
Post reply
Top