Check Browsers' LNK  by Alex Dragokas & regist                                 ver. 2.2.0.27

OS:       x64 Windows 7 (Ultimate), 6.1.7601.0, Service Pack: 1		( SingleUserTS / Workstation )
Time:     06.07.2018 - 18:08
Language: OS: Russian (0x419). Display: Russian (0x419). Non-Unicode: Russian (0x419). Codepage: OEM - c_866.nls (ok), ANSI - c_1251.nls (ok)
Elevated: Yes
User:     Ден4иК	(group: Administrator) on ДЕН4ИК-ПК


* Подозрительные объекты будут отмечены префиксом >>>

===========================================================================
              ((((((        БРАУЗЕРНЫЕ ярлыки        ))))))
===========================================================================

[_______________________  Имя браузера неверное  _________________________]

>>> [MASK] "C:\Users\Ден4иК\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Gооglе Сhrоmе.lnk"        -> ["C:\PROGRAM FILES (X86)\GOOGLE\СHRОMЕ.BАT.EXE"] -> (813896 байт) (MD5: 98FA788238E71D9563D4BF177A4FC22C) -> (PE EXE)
>>> [MASK] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Gооglе Сhrоmе.lnk"    -> ["C:\PROGRAM FILES (X86)\GOOGLE\СHRОMЕ.BАT.EXE"] -> (813896 байт) (MD5: 98FA788238E71D9563D4BF177A4FC22C) -> (PE EXE)
>>> [MASK] "C:\Users\Ден4иК\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gооglе Сhrоmе.lnk"        -> ["C:\PROGRAM FILES (X86)\GOOGLE\СHRОMЕ.BАT.EXE"] -> (813896 байт) (MD5: 98FA788238E71D9563D4BF177A4FC22C) -> (PE EXE)

[___________________  Подозрительные ( низкий риск )  ____________________]

- "C:\Users\Ден4иК\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\fe6e7bc80bf2ed7d\Google Chrome.lnk"       -> ["C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"  =>> --profile-directory=Default]
- "C:\Users\Ден4иК\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk"       -> ["C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"  =>> --profile-directory=Default]

[=========================================================================]
                ((((((       Прочие ярлыки       ))))))
===========================================================================

[___________________  Подозрительные ( низкий риск )  ____________________]

-[script] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Holdem Manager 2\Utilities\HM2 - Backup Settings.lnk"    -> ["D:\Holdem Manager 2\Utilities\BackupSettings.bat"] -> @ECHO OFF¶ ¶ REM Backup (and optionally delete) HM2 settings except NoteCaddy and Database¶ ¶ ECHO **********************************¶ ECHO  Holdem Manager - Backup Settings¶ ECHO **********************************¶ ECHO.¶ ECHO **********************************¶ ECHO  Step 1 - Backup Settings¶ ECHO (4157 байт.) (cp: 20127) (MD5:76D986901A2CA71F2868369E0DDA4636)
-[script] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Holdem Manager 2\Utilities\HM2 - Restore Settings.lnk"   -> ["D:\Holdem Manager 2\Utilities\RestoreSettings.bat"] -> @ECHO OFF¶ ¶ REM Restore HM2 settings if previously backed up¶ ¶ ECHO **********************************¶ ¶ ECHO  Holdem Manager - Restore Settings¶ ¶ ECHO **********************************¶ ECHO.¶ ECHO This will restore HM2 settings from a backup in TEMP folder¶ ECHO.¶ ECHO Please make sure HM2 is (821 байт.) (cp: 20127) (MD5:765393BB8035D4E005460F942B926CA1)
-[script] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Holdem Manager 2\Utilities\Copy Log Files to Desktop.lnk"          -> ["D:\Holdem Manager 2\Utilities\CopyLogFiles.bat"] -> @ECHO OFF¶ ¶ REM Copy Log Files to HM2Logs folder on desktop¶ ¶ ECHO ***********************************************¶ ECHO  Holdem Manager - Copy Log Files and Settings¶ ECHO ***********************************************¶ ECHO.¶ ECHO ***************************¶ ECHO  Step 1 - Copy to Desktop¶ ECH (1889 байт.) (cp: 20127) (MD5:9AEF4C104093A41F8BB15F35B3C70A8F)
-[script] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PostgreSQL 8.4\SQL Shell (psql).lnk"           -> ["C:\postgreSQL\scripts\runpsql.bat"] -> @echo off¶ REM Copyright (c) 2012-2014, EnterpriseDB Corporation.  All rights reserved¶ ¶ REM PostgreSQL server psql runner script for Windows¶ ¶ SET server=localhost¶ SET /P server="Server [%server%]: "¶ ¶ SET database=postgres¶ SET /P database="Database [%database%]: "¶ ¶ SET port=5432¶ SET /P port (731 байт.) (cp: 20127) (MD5:08501D7FF6FD4CA293654964A2DA8CDE)
-[script] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PostgreSQL 8.4\Reload Configuration.lnk"       -> ["C:\Windows\system32\cscript.exe"  =>> //NoLogo "c:\postgreSQL\scripts\serverctl.vbs" reload wait] -> ' Copyright (c) 2012-2014, EnterpriseDB Corporation.  All rights reserved¶ On Error Resume Next¶ ¶ ' PostgreSQL server control script for Windows¶ ¶ ' Check the command line¶ If WScript.Arguments.Count = 0 OR WScript.Arguments.Count > 2 Then¶     usage¶ End If¶ ¶ bWait = False¶ If WScript.Arguments.C (2214 байт.) (cp: 20127) (MD5:006229D7BC7A86550EB9A1D7BCCE6FB9)
-[script] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PostgreSQL 8.4\Restart Server.lnk"   -> ["C:\Windows\system32\cscript.exe"  =>> //NoLogo "c:\postgreSQL\scripts\serverctl.vbs" restart wait] -> ' Copyright (c) 2012-2014, EnterpriseDB Corporation.  All rights reserved¶ On Error Resume Next¶ ¶ ' PostgreSQL server control script for Windows¶ ¶ ' Check the command line¶ If WScript.Arguments.Count = 0 OR WScript.Arguments.Count > 2 Then¶     usage¶ End If¶ ¶ bWait = False¶ If WScript.Arguments.C (2214 байт.) (cp: 20127) (MD5:006229D7BC7A86550EB9A1D7BCCE6FB9)
-[script] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PostgreSQL 8.4\Start Server.lnk"     -> ["C:\Windows\system32\cscript.exe"  =>> //NoLogo "c:\postgreSQL\scripts\serverctl.vbs" start wait] -> ' Copyright (c) 2012-2014, EnterpriseDB Corporation.  All rights reserved¶ On Error Resume Next¶ ¶ ' PostgreSQL server control script for Windows¶ ¶ ' Check the command line¶ If WScript.Arguments.Count = 0 OR WScript.Arguments.Count > 2 Then¶     usage¶ End If¶ ¶ bWait = False¶ If WScript.Arguments.C (2214 байт.) (cp: 20127) (MD5:006229D7BC7A86550EB9A1D7BCCE6FB9)
-[script] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PostgreSQL 8.4\Stop Server.lnk"      -> ["C:\Windows\system32\cscript.exe"  =>> //NoLogo "c:\postgreSQL\scripts\serverctl.vbs" stop wait] -> ' Copyright (c) 2012-2014, EnterpriseDB Corporation.  All rights reserved¶ On Error Resume Next¶ ¶ ' PostgreSQL server control script for Windows¶ ¶ ' Check the command line¶ If WScript.Arguments.Count = 0 OR WScript.Arguments.Count > 2 Then¶     usage¶ End If¶ ¶ bWait = False¶ If WScript.Arguments.C (2214 байт.) (cp: 20127) (MD5:006229D7BC7A86550EB9A1D7BCCE6FB9)

[_________________________  Облачные хранилища  __________________________]

- "C:\Users\Ден4иК\Links\Яндекс.Диск.lnk"          -> ["C:\Users\Ден4иК\YandexDisk"]

[=========================================================================]
                ((((((       Интернет-ярлыки       ))))))
===========================================================================

- "C:\Users\Ден4иК\AppData\Local\Yandex\yapin\Яндекс.website"  ->     hxxps://vvv.yandex.ru/?win=302&clid=2256545&from=dist_pin
- "C:\Users\Ден4иК\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Яндекс.website"  ->     hxxps://vvv.yandex.ru/?win=302&clid=2256545&from=dist_pin
- "C:\Users\Ден4иК\YandexDisk\Литература\Брэгг Поль. Шокирующая правда о воде и соли - royallib.com.txt\áâ ¢¨âì ®â§ë¢ ® ª­¨£¥.url" ("C:\Users\41551~1\YANDEX~1\9503~1\-ROYAL~1.TXT\455E~1.URL")  ->              hxxp://royallib.ru/comment/bregg_pol/shokiruyushchaya_pravda_o_vode_i_soli.html
- "C:\Users\Ден4иК\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Голосовой помощник\Помощь.url"  ->             hxxps://yandex.ru/support/alice-windows/
- "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PostgreSQL 8.4\Documentation\Installation notes.url"  ->        file://c:\postgreSQL/doc/installation-notes.html
- "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PostgreSQL 8.4\Documentation\PostgreSQL documentation.url"  ->  file://c:\postgreSQL/doc/postgresql/html/index.html
- "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PostgreSQL 8.4\Documentation\PostgreSQL release notes.url"  ->  file://c:\postgreSQL/doc/postgresql/html/release.html
- "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PostgreSQL 8.4\Documentation\PL Java users guide.url"  ->       file://c:\postgreSQL/doc/pljava/userguide.html
- "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PostgreSQL 8.4\Documentation\PL Java README.url"  ->            file://c:\postgreSQL/doc/pljava/readme.html
- "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AlReader2\Сайт AlReader2 в Интернете.url"  ->    hxxp://vvv.alreader.kms.ru/

[_____________________________  Избранное  _______________________________]

- "C:\Users\Ден4иК\Favorites\Links\Яндекс.url"  ->                    hxxp://vvv.yandex.ru/?win=173&clid=2041431
- "C:\Users\Ден4иК\Favorites\Links\Почта.url"  ->                     hxxp://mail.yandex.ru/?win=173&clid=2041431

[_________________________   Другие протоколы   __________________________]

- "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lattice3D Player 64-bit Edition\License Folder.url"  ->         C:\Program Files\Lattice\License\

[____________________ Статистика ___________________]

Найдено угроз:      3
Перечислено файлов: 183958 (папок: 35640, ярлыков: 337)
Затрачено времени:  28 сек. (поиск: 19 сек., анализ: 8 сек.; engine: MFT)

Проверены:
C:\Users\Ден4иК
C:\Users\postgres
C:\Users\Default
C:\Users\Public
C:\ProgramData
C:\Users\Р”РµРЅ4РёРљ - НЕ профиль
______________________________ Конец лога ________________________________19980 bytes, CRC32: FFFFFFFF. Sign: 欂