Forum: Offtopic Markwürde Sicherheits Sachen IT


Markwürde Sicherheits Sachen IT
von Odie S. (funkhardy)

Angehängte Dateien:
Lesenswert?
• ▲
▼ 
Hallo,
Bei dem Befehl netstat bekomme ich folgendes: (c) 2020 Microsoft 
Corporation. Alle Rechte vorbehalten.

C:\Windows\system32>netstat

Aktive Verbindungen

  Proto  Lokale Adresse         Remoteadresse          Status
  TCP    127.0.0.1:53508        Capsaicist:53509       HERGESTELLT
  TCP    127.0.0.1:53509        Capsaicist:53508       HERGESTELLT
  TCP    127.0.0.1:55580        Capsaicist:55581       HERGESTELLT
  TCP    127.0.0.1:55581        Capsaicist:55580       HERGESTELLT
  TCP    127.0.0.1:55582        Capsaicist:55583       HERGESTELLT
  TCP    127.0.0.1:55583        Capsaicist:55582       HERGESTELLT
  TCP    127.0.0.1:55585        Capsaicist:55586       HERGESTELLT
  TCP    127.0.0.1:55586        Capsaicist:55585       HERGESTELLT
  TCP    127.0.0.1:63960        Capsaicist:63961       HERGESTELLT
  TCP    127.0.0.1:63961        Capsaicist:63960       HERGESTELLT
  TCP    127.0.0.1:63984        Capsaicist:63985       HERGESTELLT
  TCP    127.0.0.1:63985        Capsaicist:63984       HERGESTELLT
  TCP    127.0.0.1:64019        Capsaicist:64020       HERGESTELLT
  TCP    127.0.0.1:64020        Capsaicist:64019       HERGESTELLT
  TCP    127.0.0.1:64021        Capsaicist:64022       HERGESTELLT
  TCP    127.0.0.1:64022        Capsaicist:64021       HERGESTELLT
  TCP    192.168.2.107:56548    54.148.16.225:https    HERGESTELLT
  TCP    192.168.2.107:63928    51.105.249.228:https   HERGESTELLT
  TCP    192.168.2.107:63933    51.105.249.228:https   HERGESTELLT
  TCP    192.168.2.107:64001    151.101.114.49:http    HERGESTELLT
  TCP    192.168.2.107:64002    151.101.114.49:https   HERGESTELLT
  TCP    192.168.2.107:64005    151.101.114.49:https   HERGESTELLT
  TCP    192.168.2.107:64008    151.101.14.49:https    HERGESTELLT
  TCP    192.168.2.107:64011    212:https              HERGESTELLT
  TCP    192.168.2.107:64012    212:https              HERGESTELLT
  TCP    192.168.2.107:64013    151.101.114.133:https  HERGESTELLT
  TCP    192.168.2.107:64016    13.107.4.254:https     WARTEND
  TCP    192.168.2.107:64017    204.79.197.222:https   WARTEND
  TCP    192.168.2.107:64025    104.16.90.50:https     HERGESTELLT
  TCP    192.168.2.107:64026    93.184.220.29:http     HERGESTELLT
  TCP    192.168.2.107:64027    93.184.220.29:http     HERGESTELLT
  TCP    192.168.2.107:64029    18:https               HERGESTELLT
  TCP    [2003:c1:9714:1152:c44:88ee:96a6:86ea]:64014 
[2606:4700::6812:18f3]:http  HERGESTELLT
  TCP    [2003:c1:9714:1152:c44:88ee:96a6:86ea]:64023 
[2606:4700:20::ac43:4b57]:https  WARTEND
  TCP    [2003:c1:9714:1152:c44:88ee:96a6:86ea]:64050 
[2620:0:862:ed1a::1]:https  WARTEND
  TCP    [2003:c1:9714:1152:c44:88ee:96a6:86ea]:64064 
[2620:1ec:c11::200]:https  HERGESTELLT
  TCP    [2003:c1:9714:1152:c44:88ee:96a6:86ea]:64067 
[2620:1ec:c11::200]:https  HERGESTELLT
  TCP    [2003:c1:9714:1152:c44:88ee:96a6:86ea]:64074 
[2a02:26f0:3500:3::b818:4d32]:http  HERGESTELLT

C:\Windows\system32>netstat

Aktive Verbindungen

  Proto  Lokale Adresse         Remoteadresse          Status
  TCP    127.0.0.1:53508        Capsaicist:53509       HERGESTELLT
  TCP    127.0.0.1:53509        Capsaicist:53508       HERGESTELLT
  TCP    127.0.0.1:55580        Capsaicist:55581       HERGESTELLT
  TCP    127.0.0.1:55581        Capsaicist:55580       HERGESTELLT
  TCP    127.0.0.1:55582        Capsaicist:55583       HERGESTELLT
  TCP    127.0.0.1:55583        Capsaicist:55582       HERGESTELLT
  TCP    127.0.0.1:55585        Capsaicist:55586       HERGESTELLT
  TCP    127.0.0.1:55586        Capsaicist:55585       HERGESTELLT
  TCP    127.0.0.1:57757        Capsaicist:57758       HERGESTELLT
  TCP    127.0.0.1:57758        Capsaicist:57757       HERGESTELLT
  TCP    127.0.0.1:63960        Capsaicist:63961       HERGESTELLT
  TCP    127.0.0.1:63961        Capsaicist:63960       HERGESTELLT
  TCP    127.0.0.1:63984        Capsaicist:63985       HERGESTELLT
  TCP    127.0.0.1:63985        Capsaicist:63984       HERGESTELLT
  TCP    127.0.0.1:64019        Capsaicist:64020       HERGESTELLT
  TCP    127.0.0.1:64020        Capsaicist:64019       HERGESTELLT
  TCP    127.0.0.1:64021        Capsaicist:64022       HERGESTELLT
  TCP    127.0.0.1:64022        Capsaicist:64021       HERGESTELLT
  TCP    127.0.0.1:64045        Capsaicist:64046       HERGESTELLT
  TCP    127.0.0.1:64046        Capsaicist:64045       HERGESTELLT
  TCP    127.0.0.1:64047        Capsaicist:64048       HERGESTELLT
  TCP    127.0.0.1:64048        Capsaicist:64047       HERGESTELLT
  TCP    192.168.2.107:55700    text-lb:https          HERGESTELLT
  TCP    192.168.2.107:55705    ec2-34-255-250-159:https  HERGESTELLT
  TCP    192.168.2.107:55708    eq4:https              HERGESTELLT
  TCP    192.168.2.107:55709    eq4:https              WARTEND
  TCP    192.168.2.107:55710    eq4:https              HERGESTELLT
  TCP    192.168.2.107:55711    eq4:https              HERGESTELLT
  TCP    192.168.2.107:55712    eq4:https              HERGESTELLT
  TCP    192.168.2.107:55713    eq4:https              WARTEND
  TCP    192.168.2.107:55716    x5bec7a1e:https        HERGESTELLT
  TCP    192.168.2.107:55717    172.217.19.68:https    HERGESTELLT
  TCP    192.168.2.107:55718    www:http               WARTEND
  TCP    192.168.2.107:55719    www:http               WARTEND
  TCP    192.168.2.107:55725    199.232.53.140:https   HERGESTELLT
  TCP    192.168.2.107:55726    www:https              HERGESTELLT
  TCP    192.168.2.107:55727    199.232.57.140:https   HERGESTELLT
  TCP    192.168.2.107:55732    199.232.57.140:https   HERGESTELLT
  TCP    192.168.2.107:55733    104.23.99.190:https    WARTEND
  TCP    192.168.2.107:55736    eq4:https              WARTEND
  TCP    192.168.2.107:55737    eq4:https              WARTEND
  TCP    192.168.2.107:55738    eq4:https              WARTEND
  TCP    192.168.2.107:55739    eq4:https              WARTEND
  TCP    192.168.2.107:55740    eq4:https              WARTEND
  TCP    192.168.2.107:55741    eq4:https              WARTEND
  TCP    192.168.2.107:55742    151.101.114.49:https   HERGESTELLT
  TCP    192.168.2.107:55744    ham02s17-in-f4:https   WARTEND
  TCP    192.168.2.107:55747    www:http               WARTEND
  TCP    192.168.2.107:55748    www:http               WARTEND
  TCP    192.168.2.107:55757    ocsp:http              FIN_WARTEN_1
  TCP    192.168.2.107:55759    www:http               ZULETZT_ACK
  TCP    192.168.2.107:55766    23.111.9.35:https      HERGESTELLT
  TCP    192.168.2.107:55769    ham02s15-in-f202:https  HERGESTELLT
  TCP    192.168.2.107:55774    eq4:https              HERGESTELLT
  TCP    192.168.2.107:55775    www:http               HERGESTELLT
  TCP    192.168.2.107:55776    www:http               HERGESTELLT
  TCP    192.168.2.107:55778    www:http               HERGESTELLT
  TCP    192.168.2.107:55779    www:http               WARTEND
  TCP    192.168.2.107:55780    www:http               WARTEND
  TCP    192.168.2.107:55801    8.241.72.250:https     FIN_WARTEN_1
  TCP    192.168.2.107:55802    a23-213-165-28:https   FIN_WARTEN_1
  TCP    192.168.2.107:55806    104.23.99.190:https    FIN_WARTEN_1
  TCP    192.168.2.107:55807    104.22.51.93:https     FIN_WARTEN_1
  TCP    192.168.2.107:55810    185.172.148.128:https  FIN_WARTEN_1
  TCP    192.168.2.107:55812    104.16.132.229:https   HERGESTELLT
  TCP    192.168.2.107:55813    104.16.132.229:https   HERGESTELLT
  TCP    192.168.2.107:55815    www:http               HERGESTELLT
  TCP    192.168.2.107:55816    server-13-224-194-75:https  HERGESTELLT
  TCP    192.168.2.107:55817    18:https               HERGESTELLT
  TCP    192.168.2.107:55822    eq4:https              WARTEND
  TCP    192.168.2.107:55823    ip-185-85-0-221:https  HERGESTELLT
  TCP    192.168.2.107:55824    ham02s15-in-f206:https  HERGESTELLT
  TCP    192.168.2.107:55825    ip-185-85-0-221:https  HERGESTELLT
  TCP    192.168.2.107:55830    23.253.248.31:http     HERGESTELLT
  TCP    192.168.2.107:55831    23.253.248.31:http     HERGESTELLT
  TCP    192.168.2.107:55832    23.253.248.31:http     HERGESTELLT
  TCP    192.168.2.107:55833    23.253.248.31:http     HERGESTELLT
  TCP    192.168.2.107:55835    18:https               HERGESTELLT
  TCP    192.168.2.107:55836    upload-lb:https        HERGESTELLT
  TCP    192.168.2.107:55837    server-13-224-194-75:https  HERGESTELLT
  TCP    192.168.2.107:55841    www:http               FIN_WARTEN_1
  TCP    192.168.2.107:55847    www:http               FIN_WARTEN_1
  TCP    192.168.2.107:55850    mil02s05-in-f67:https  HERGESTELLT
  TCP    192.168.2.107:55851    www:http               HERGESTELLT
  TCP    192.168.2.107:55852    www:http               FIN_WARTEN_1
  TCP    192.168.2.107:55853    151.101.114.109:https  HERGESTELLT
  TCP    192.168.2.107:55856    eq4:https              HERGESTELLT
  TCP    192.168.2.107:55857    23.253.248.31:http     FIN_WARTEN_1
  TCP    192.168.2.107:55858    23.253.248.31:http     FIN_WARTEN_1
  TCP    192.168.2.107:55859    23.253.248.31:http     FIN_WARTEN_1
  TCP    192.168.2.107:55860    23.253.248.31:http     FIN_WARTEN_1
  TCP    192.168.2.107:56803    51.105.249.228:https   HERGESTELLT
  TCP    [2003:c1:9714:1152:701b:2403:dd9f:ce58]:55750 
[2606:4700:20::681a:502]:https  FIN_WARTEN_1
  TCP    [2003:c1:9714:1152:701b:2403:dd9f:ce58]:55954  upload-lb:https 
HERGESTELLT


Ist das normal ?

Und Folgende Logdateien


Wenn ich den Taskmanager öfffne ist Systemunterbrechungen auch kurz auf 
100% aber verschwindet dann ganz ominös

Beitrag melden Bearbeiten Thread verschieben Thread sperren Anmeldepflicht aktivieren Anpinnen Thread löschen Thread mit anderem zusammenführen Markierten Text zitieren Antwort Antwort mit Zitat
Re: Markwürde Sicherheits Sachen IT
von Georg A. (georga)

Lesenswert?
• ▲
▼ 
Odie S. schrieb:
> Ist das normal ?

Was ist denn bitte schon normal bei Windows?

Mach mal netstat -bf, da sieht man (meistens) das Programm, das die 
Ports offen hat und aufgelöste Hostnamen.

Beitrag melden Bearbeiten Löschen Markierten Text zitieren Antwort Antwort mit Zitat
Re: Markwürde Sicherheits Sachen IT
von Odie S. (funkhardy)

Lesenswert?
• ▲
▼ 
https://ibb.co/DpCwySq
https://ibb.co/92xTg6q
https://ibb.co/9n40X7V
https://ibb.co/yXHnvhq
https://ibb.co/Pt6Znff
https://ibb.co/dkjKgzj
https://ibb.co/cF4sTgW
https://ibb.co/TqP4BLg
https://ibb.co/d7FvhMk
https://ibb.co/WkqVQZN
https://ibb.co/3MLpY4j
https://ibb.co/64p9JsX
https://ibb.co/fSjVLd6
https://ibb.co/0987hyt
https://ibb.co/vmbSby5
https://ibb.co/mtG2Knd
https://ibb.co/ZhyXHjt
https://ibb.co/cXkZ9bD

Da steht auch irgendwo was mit payload

und mein Firefox löscht nichtmehr die Anmeldedaten und Cache obwohl ich 
die FUnktion aktiviert habe + ccleaner Portable als autorun mit windows 
und ebenfalls da das löschen aktiviert

Microsoft Windows [Version 10.0.19041.388]
(c) 2020 Microsoft Corporation. Alle Rechte vorbehalten.

C:\Windows\system32>netstat -bf

Aktive Verbindungen

  Proto  Lokale Adresse         Remoteadresse          Status
  TCP    127.0.0.1:49671        Capsaicist.1312:49672  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:49672        Capsaicist.1312:49671  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:49673        Capsaicist.1312:49674  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:49674        Capsaicist.1312:49673  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:49675        Capsaicist.1312:49676  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:49676        Capsaicist.1312:49675  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:49677        Capsaicist.1312:49678  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:49678        Capsaicist.1312:49677  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:49679        Capsaicist.1312:49680  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:49680        Capsaicist.1312:49679  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:49969        Capsaicist.1312:49970  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:49970        Capsaicist.1312:49969  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:51316        Capsaicist.1312:51317  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:51317        Capsaicist.1312:51316  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:51318        Capsaicist.1312:51319  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:51319        Capsaicist.1312:51318  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:51320        Capsaicist.1312:51321  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:51321        Capsaicist.1312:51320  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:51322        Capsaicist.1312:51323  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:51323        Capsaicist.1312:51322  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:51324        Capsaicist.1312:51325  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:51325        Capsaicist.1312:51324  HERGESTELLT
 [firefox.exe]
  TCP    192.168.2.103:51223 
ec2-54-148-16-225.us-west-2.compute.amazonaws.com:https  HERGESTELLT
 [firefox.exe]

Beitrag melden Bearbeiten Löschen Markierten Text zitieren Antwort Antwort mit Zitat
Re: Markwürde Sicherheits Sachen IT
von Odie S. (funkhardy)

Lesenswert?
• ▲
▼ 
crosoft Windows [Version 10.0.19041.388]
(c) 2020 Microsoft Corporation. Alle Rechte vorbehalten.

C:\Windows\system32>netstat -bf

Aktive Verbindungen

  Proto  Lokale Adresse         Remoteadresse          Status
  TCP    127.0.0.1:49671        Capsaicist.1312:49672  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:49672        Capsaicist.1312:49671  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:49673        Capsaicist.1312:49674  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:49674        Capsaicist.1312:49673  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:49675        Capsaicist.1312:49676  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:49676        Capsaicist.1312:49675  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:49677        Capsaicist.1312:49678  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:49678        Capsaicist.1312:49677  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:49679        Capsaicist.1312:49680  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:49680        Capsaicist.1312:49679  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:49969        Capsaicist.1312:49970  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:49970        Capsaicist.1312:49969  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:51316        Capsaicist.1312:51317  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:51317        Capsaicist.1312:51316  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:51318        Capsaicist.1312:51319  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:51319        Capsaicist.1312:51318  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:51320        Capsaicist.1312:51321  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:51321        Capsaicist.1312:51320  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:51322        Capsaicist.1312:51323  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:51323        Capsaicist.1312:51322  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:51324        Capsaicist.1312:51325  HERGESTELLT
 [firefox.exe]
  TCP    127.0.0.1:51325        Capsaicist.1312:51324  HERGESTELLT
 [firefox.exe]
  TCP    192.168.2.103:51223 
ec2-54-148-16-225.us-west-2.compute.amazonaws.com:https  HERGESTELLT
 [firefox.exe]
  TCP    192.168.2.103:51227    51.105.249.223:https   HERGESTELLT
  WpnService
 [svchost.exe]
  TCP    192.168.2.103:51302    93.184.220.29:http     ZULETZT_ACK
 [SearchApp.exe]
  TCP    192.168.2.103:51311    ns1001298.ip-51-81-57.us:https 
HERGESTELLT
 [firefox.exe]
  TCP    192.168.2.103:51327    i.ibb.co:https         HERGESTELLT
 [firefox.exe]
  TCP    192.168.2.103:51329    ns1001298.ip-51-81-57.us:https 
HERGESTELLT
 [firefox.exe]
  TCP    192.168.2.103:51330    eq4.andreas-s.net:https  HERGESTELLT
 [firefox.exe]
  TCP    192.168.2.103:51331    eq4.andreas-s.net:https  HERGESTELLT
 [firefox.exe]
  TCP    192.168.2.103:51332    eq4.andreas-s.net:https  HERGESTELLT
 [firefox.exe]
  TCP    192.168.2.103:51335    151.101.114.109:https  HERGESTELLT
 [firefox.exe]
  TCP    192.168.2.103:51337    eq4.andreas-s.net:https  HERGESTELLT
 [firefox.exe]
  TCP    192.168.2.103:51338    eq4.andreas-s.net:https  HERGESTELLT
 [firefox.exe]
  TCP    192.168.2.103:51339    eq4.andreas-s.net:https  HERGESTELLT
 [firefox.exe]
  TCP    192.168.2.103:51340    eq4.andreas-s.net:https  WARTEND
  TCP    192.168.2.103:51341    eq4.andreas-s.net:https  WARTEND
  TCP    192.168.2.103:51342    eq4.andreas-s.net:https  WARTEND
  TCP    192.168.2.103:51343    i.ibb.co:https         HERGESTELLT
 [firefox.exe]
  TCP    192.168.2.103:51345    52.114.32.24:https     WARTEND
  TCP    192.168.2.103:51350    204.79.197.222:https   HERGESTELLT
 [SearchApp.exe]
  TCP    192.168.2.103:51351    13.107.6.254:https     HERGESTELLT
 [SearchApp.exe]
  TCP    192.168.2.103:55865    51.105.249.223:https   HERGESTELLT
  WpnService
 [svchost.exe]
  TCP    [2003:c1:9714:1152:9ca1:2a4e:a5a2:57e0]:51306 
[2620:1ec:22::14]:https  HERGESTELLT
 [SearchApp.exe]
  TCP    [2003:c1:9714:1152:9ca1:2a4e:a5a2:57e0]:51344 
[2606:4700:3032::6812:302a]:https  WARTEND

Beitrag melden Bearbeiten Löschen Markierten Text zitieren Antwort Antwort mit Zitat
Re: Markwürde Sicherheits Sachen IT
von Odie S. (funkhardy)

Angehängte Dateien:
Lesenswert?
• ▲
▼ 
Das Merkwürdige war, gerade als ich mein Handy über den Hotspot 
verbunden hatte stieg die Zahl gesendeter Pakete auf einer 
Netzwerkverbindung an die ich unter Netzwerkverbindungen garnicht sehen, 
außerdem stieg die Zahl der Empfangenen auf meiner normalen WLAN 
Verbindung rasant. Bis plötzlich das Geräusch für Gerät entfernt ertönte 
und dann sich das Internet lurz deaktivierte.

Im Order C:\Windows\tracing\SystemSettingsBroker_RASAPI32

1
[2420] 07-24 02:07:01:763: IsRasmanServiceRunning=1

2
[2420] 07-24 02:07:01:764: ReadPhonebookFileEx: called for pbk C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk, flags 1032

3
[2420] 07-24 02:07:01:764: IsPublicPhonebook=1

4
[2420] 07-24 02:07:01:764: path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

5
[2420] 07-24 02:07:01:764: full path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

6
[2420] 07-24 02:07:01:765:  IsVirtualizationNeeded: return value = 1

7
8
[2420] 07-24 02:07:01:765: GetLUAPhonebookPath: Return value 0 hiddenpbk path C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk\rasphone.pbk

9
10
[2420] 07-24 02:07:01:766: ReadRasFile: ReadEntryList returned 0

11
[2420] 07-24 02:07:01:766: SyncMasterPhonebookFile:++

12
[2420] 07-24 02:07:01:766: IsPublicPhonebook=1

13
[2420] 07-24 02:07:01:766: path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

14
[2420] 07-24 02:07:01:766: full path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

15
[2420] 07-24 02:07:01:766: FindFirstFile failed with 0x3

16
[2420] 07-24 02:07:01:766: ReadRasFile: File C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk does not exist

17
[2420] 07-24 02:07:01:766: DeleteEntriesOnlyInHiddenPhonebookFile ++

18
[2420] 07-24 02:07:01:766: WritePhonebookFile

19
[2420] 07-24 02:07:01:767: ModifyEntryList: Number of connections written 0

20
[2420] 07-24 02:07:01:767: RASSQM: In WritePhonebookFile Number of alluser profiles set 0

21
[2420] 07-24 02:07:01:767: DeleteEntriesOnlyInHiddenPhonebookFile : WritePhonebookFile failed with 0

22
[2420] 07-24 02:07:01:767: RASSQM: In ReadPhonebookFile Number of alluser profiles set 0

23
[2420] 07-24 02:07:01:767: ReadPhonebookFile returns 0

24
[2420] 07-24 02:07:01:770: IsRasmanServiceRunning=1

25
[2420] 07-24 02:07:01:771: IsRasmanServiceRunning=1

26
[2420] 07-24 02:07:01:771: ReadPhonebookFileEx: called for pbk C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk, flags 1032

27
[2420] 07-24 02:07:01:771: IsPublicPhonebook=0

28
[2420] 07-24 02:07:01:771: path = C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk

29
[2420] 07-24 02:07:01:771: full path = C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk

30
[2420] 07-24 02:07:01:771:  IsVirtualizationNeeded: return value = 0

31
32
[2420] 07-24 02:07:01:771: FindFirstFile failed with 0x2

33
[2420] 07-24 02:07:01:771: ReadRasFile: File C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk does not exist

34
[2420] 07-24 02:07:01:771: RASSQM: In ReadPhonebookFile Number of myuse profiles set 0

35
[2420] 07-24 02:07:01:771: ReadPhonebookFile returns 0

36
[2420] 07-24 02:07:01:917: IsRasmanProcess: CmdLine=c:\windows\system32\systemsettingsbroker.exe -embedding

37
38
[2420] 07-24 02:07:01:917: IsRasmanProcess: returning 0

39
40
[6576] 07-24 02:07:01:917: IsRasmanServiceRunning=1

41
[9140] 07-24 02:35:27:973: IsRasmanServiceRunning=1

42
[9140] 07-24 02:35:27:973: ReadPhonebookFileEx: called for pbk C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk, flags 1032

43
[9140] 07-24 02:35:27:973: IsPublicPhonebook=1

44
[9140] 07-24 02:35:27:973: path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

45
[9140] 07-24 02:35:27:981: full path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

46
[9140] 07-24 02:35:27:981:  IsVirtualizationNeeded: return value = 1

47
48
[9140] 07-24 02:35:27:981: GetLUAPhonebookPath: Return value 0 hiddenpbk path C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk\rasphone.pbk

49
50
[9140] 07-24 02:35:27:981: ReadRasFile: ReadEntryList returned 0

51
[9140] 07-24 02:35:27:981: SyncMasterPhonebookFile:++

52
[9140] 07-24 02:35:27:981: IsPublicPhonebook=1

53
[9140] 07-24 02:35:27:981: path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

54
[9140] 07-24 02:35:27:981: full path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

55
[9140] 07-24 02:35:27:981: FindFirstFile failed with 0x3

56
[9140] 07-24 02:35:27:981: ReadRasFile: File C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk does not exist

57
[9140] 07-24 02:35:27:981: DeleteEntriesOnlyInHiddenPhonebookFile ++

58
[9140] 07-24 02:35:27:981: WritePhonebookFile

59
[9140] 07-24 02:35:27:981: ModifyEntryList: Number of connections written 0

60
[9140] 07-24 02:35:27:981: RASSQM: In WritePhonebookFile Number of alluser profiles set 0

61
[9140] 07-24 02:35:27:981: DeleteEntriesOnlyInHiddenPhonebookFile : WritePhonebookFile failed with 0

62
[9140] 07-24 02:35:27:981: RASSQM: In ReadPhonebookFile Number of alluser profiles set 0

63
[9140] 07-24 02:35:27:981: ReadPhonebookFile returns 0

64
[9140] 07-24 02:35:27:983: IsRasmanServiceRunning=1

65
[9140] 07-24 02:35:27:983: IsRasmanServiceRunning=1

66
[9140] 07-24 02:35:27:983: ReadPhonebookFileEx: called for pbk C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk, flags 1032

67
[9140] 07-24 02:35:27:983: IsPublicPhonebook=0

68
[9140] 07-24 02:35:27:983: path = C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk

69
[9140] 07-24 02:35:27:983: full path = C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk

70
[9140] 07-24 02:35:27:983:  IsVirtualizationNeeded: return value = 0

71
72
[9140] 07-24 02:35:27:983: FindFirstFile failed with 0x2

73
[9140] 07-24 02:35:27:983: ReadRasFile: File C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk does not exist

74
[9140] 07-24 02:35:27:983: RASSQM: In ReadPhonebookFile Number of myuse profiles set 0

75
[9140] 07-24 02:35:27:983: ReadPhonebookFile returns 0

76
[9140] 07-24 02:35:27:983: IsRasmanProcess: CmdLine=c:\windows\system32\systemsettingsbroker.exe -embedding

77
78
[9140] 07-24 02:35:27:983: IsRasmanProcess: returning 0

79
80
[8808] 07-24 02:35:28:002: IsRasmanServiceRunning=1

81
[6788] 07-24 02:54:29:933: IsRasmanServiceRunning=1

82
[6788] 07-24 02:54:29:936: IsRasmanServiceRunning=1

83
[6788] 07-24 02:54:29:956: IsRasmanServiceRunning=1

84
[6788] 07-24 02:54:29:957: IsRasmanServiceRunning=1

85
[5588] 07-24 03:26:50:292: IsRasmanServiceRunning=1

86
[5588] 07-24 03:26:50:308: ReadPhonebookFileEx: called for pbk C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk, flags 1032

87
[5588] 07-24 03:26:50:308: IsPublicPhonebook=1

88
[5588] 07-24 03:26:50:308: path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

89
[5588] 07-24 03:26:50:308: full path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

90
[5588] 07-24 03:26:50:308:  IsVirtualizationNeeded: return value = 1

91
92
[5588] 07-24 03:26:50:323: GetLUAPhonebookPath: Return value 0 hiddenpbk path C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk\rasphone.pbk

93
94
[5588] 07-24 03:26:50:323: ReadRasFile: ReadEntryList returned 0

95
[5588] 07-24 03:26:50:323: SyncMasterPhonebookFile:++

96
[5588] 07-24 03:26:50:323: IsPublicPhonebook=1

97
[5588] 07-24 03:26:50:323: path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

98
[5588] 07-24 03:26:50:323: full path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

99
[5588] 07-24 03:26:50:323: FindFirstFile failed with 0x3

100
[5588] 07-24 03:26:50:323: ReadRasFile: File C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk does not exist

101
[5588] 07-24 03:26:50:323: DeleteEntriesOnlyInHiddenPhonebookFile ++

102
[5588] 07-24 03:26:50:323: WritePhonebookFile

103
[5588] 07-24 03:26:50:323: ModifyEntryList: Number of connections written 0

104
[5588] 07-24 03:26:50:323: RASSQM: In WritePhonebookFile Number of alluser profiles set 0

105
[5588] 07-24 03:26:50:323: DeleteEntriesOnlyInHiddenPhonebookFile : WritePhonebookFile failed with 0

106
[5588] 07-24 03:26:50:323: RASSQM: In ReadPhonebookFile Number of alluser profiles set 0

107
[5588] 07-24 03:26:50:323: ReadPhonebookFile returns 0

108
[5588] 07-24 03:26:50:323: IsRasmanServiceRunning=1

109
[5588] 07-24 03:26:50:323: IsRasmanServiceRunning=1

110
[5588] 07-24 03:26:50:323: ReadPhonebookFileEx: called for pbk C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk, flags 1032

111
[5588] 07-24 03:26:50:323: IsPublicPhonebook=0

112
[5588] 07-24 03:26:50:323: path = C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk

113
[5588] 07-24 03:26:50:323: full path = C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk

114
[5588] 07-24 03:26:50:323:  IsVirtualizationNeeded: return value = 0

115
116
[5588] 07-24 03:26:50:323: FindFirstFile failed with 0x2

117
[5588] 07-24 03:26:50:323: ReadRasFile: File C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk does not exist

118
[5588] 07-24 03:26:50:323: RASSQM: In ReadPhonebookFile Number of myuse profiles set 0

119
[5588] 07-24 03:26:50:323: ReadPhonebookFile returns 0

120
[5588] 07-24 03:26:50:323: IsRasmanProcess: CmdLine=c:\windows\system32\systemsettingsbroker.exe -embedding

121
122
[5588] 07-24 03:26:50:323: IsRasmanProcess: returning 0

123
124
[9072] 07-24 03:26:50:323: IsRasmanServiceRunning=1

125
[5976] 07-24 18:27:36:812: IsRasmanServiceRunning=1

126
[5976] 07-24 18:27:36:812: ReadPhonebookFileEx: called for pbk C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk, flags 1032

127
[5976] 07-24 18:27:36:812: IsPublicPhonebook=1

128
[5976] 07-24 18:27:36:812: path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

129
[5976] 07-24 18:27:36:812: full path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

130
[5976] 07-24 18:27:36:812:  IsVirtualizationNeeded: return value = 1

131
132
[6564] 07-24 18:27:36:812: IsRasmanServiceRunning=1

133
[5976] 07-24 18:27:36:812: GetLUAPhonebookPath: Return value 0 hiddenpbk path C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk\rasphone.pbk

134
135
[5976] 07-24 18:27:36:812: ReadRasFile: ReadEntryList returned 0

136
[5976] 07-24 18:27:36:812: SyncMasterPhonebookFile:++

137
[5976] 07-24 18:27:36:812: IsPublicPhonebook=1

138
[5976] 07-24 18:27:36:812: path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

139
[5976] 07-24 18:27:36:812: full path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

140
[5976] 07-24 18:27:36:812: FindFirstFile failed with 0x3

141
[5976] 07-24 18:27:36:812: ReadRasFile: File C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk does not exist

142
[5976] 07-24 18:27:36:812: DeleteEntriesOnlyInHiddenPhonebookFile ++

143
[5976] 07-24 18:27:36:812: WritePhonebookFile

144
[5976] 07-24 18:27:36:812: ModifyEntryList: Number of connections written 0

145
[5976] 07-24 18:27:36:812: RASSQM: In WritePhonebookFile Number of alluser profiles set 0

146
[5976] 07-24 18:27:36:812: DeleteEntriesOnlyInHiddenPhonebookFile : WritePhonebookFile failed with 0

147
[5976] 07-24 18:27:36:812: RASSQM: In ReadPhonebookFile Number of alluser profiles set 0

148
[5976] 07-24 18:27:36:812: ReadPhonebookFile returns 0

149
[5976] 07-24 18:27:36:812: IsRasmanServiceRunning=1

150
[5976] 07-24 18:27:36:812: IsRasmanServiceRunning=1

151
[5976] 07-24 18:27:36:812: ReadPhonebookFileEx: called for pbk C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk, flags 1032

152
[5976] 07-24 18:27:36:812: IsPublicPhonebook=0

153
[5976] 07-24 18:27:36:812: path = C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk

154
[5976] 07-24 18:27:36:812: full path = C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk

155
[5976] 07-24 18:27:36:812:  IsVirtualizationNeeded: return value = 0

156
157
[5976] 07-24 18:27:36:812: FindFirstFile failed with 0x2

158
[5976] 07-24 18:27:36:812: ReadRasFile: File C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk does not exist

159
[5976] 07-24 18:27:36:812: RASSQM: In ReadPhonebookFile Number of myuse profiles set 0

160
[5976] 07-24 18:27:36:812: ReadPhonebookFile returns 0

161
[5976] 07-24 18:27:36:843: IsRasmanProcess: CmdLine=c:\windows\system32\systemsettingsbroker.exe -embedding

162
163
[5976] 07-24 18:27:36:843: IsRasmanProcess: returning 0

164
165
[7788] 07-24 19:51:34:177: IsRasmanServiceRunning=1

166
[7788] 07-24 19:51:34:178: ReadPhonebookFileEx: called for pbk C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk, flags 1032

167
[7788] 07-24 19:51:34:178: IsPublicPhonebook=1

168
[7788] 07-24 19:51:34:178: path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

169
[7788] 07-24 19:51:34:244: full path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

170
[7788] 07-24 19:51:34:244:  IsVirtualizationNeeded: return value = 1

171
172
[7788] 07-24 19:51:34:245: GetLUAPhonebookPath: Return value 0 hiddenpbk path C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk\rasphone.pbk

173
174
[7788] 07-24 19:51:34:246: ReadRasFile: ReadEntryList returned 0

175
[7788] 07-24 19:51:34:246: SyncMasterPhonebookFile:++

176
[7788] 07-24 19:51:34:246: IsPublicPhonebook=1

177
[7788] 07-24 19:51:34:246: path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

178
[7788] 07-24 19:51:34:246: full path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

179
[7788] 07-24 19:51:34:246: FindFirstFile failed with 0x3

180
[7788] 07-24 19:51:34:246: ReadRasFile: File C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk does not exist

181
[7788] 07-24 19:51:34:246: DeleteEntriesOnlyInHiddenPhonebookFile ++

182
[7788] 07-24 19:51:34:246: WritePhonebookFile

183
[7788] 07-24 19:51:34:246: ModifyEntryList: Number of connections written 0

184
[7788] 07-24 19:51:34:246: RASSQM: In WritePhonebookFile Number of alluser profiles set 0

185
[7788] 07-24 19:51:34:246: DeleteEntriesOnlyInHiddenPhonebookFile : WritePhonebookFile failed with 0

186
[7788] 07-24 19:51:34:246: RASSQM: In ReadPhonebookFile Number of alluser profiles set 0

187
[7788] 07-24 19:51:34:246: ReadPhonebookFile returns 0

188
[7788] 07-24 19:51:34:249: IsRasmanServiceRunning=1

189
[7788] 07-24 19:51:34:250: IsRasmanServiceRunning=1

190
[7788] 07-24 19:51:34:250: ReadPhonebookFileEx: called for pbk C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk, flags 1032

191
[7788] 07-24 19:51:34:250: IsPublicPhonebook=0

192
[7788] 07-24 19:51:34:250: path = C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk

193
[7788] 07-24 19:51:34:250: full path = C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk

194
[7788] 07-24 19:51:34:250:  IsVirtualizationNeeded: return value = 0

195
196
[7788] 07-24 19:51:34:251: FindFirstFile failed with 0x2

197
[7788] 07-24 19:51:34:251: ReadRasFile: File C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk does not exist

198
[7788] 07-24 19:51:34:251: RASSQM: In ReadPhonebookFile Number of myuse profiles set 0

199
[7788] 07-24 19:51:34:251: ReadPhonebookFile returns 0

200
[7788] 07-24 19:51:34:264: IsRasmanProcess: CmdLine=c:\windows\system32\systemsettingsbroker.exe -embedding

201
202
[7788] 07-24 19:51:34:264: IsRasmanProcess: returning 0

203
204
[8092] 07-24 19:51:34:179: IsRasmanServiceRunning=1

205
[9876] 07-24 20:28:05:846: IsRasmanServiceRunning=1

206
[9876] 07-24 20:28:05:847: IsRasmanServiceRunning=1

207
[9876] 07-24 20:28:05:848: IsRasmanServiceRunning=1

208
[9876] 07-24 20:28:05:849: IsRasmanServiceRunning=1

209
[9668] 07-24 20:48:36:036: IsRasmanServiceRunning=1

210
[9668] 07-24 20:48:36:062: ReadPhonebookFileEx: called for pbk C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk, flags 1032

211
[9668] 07-24 20:48:36:062: IsPublicPhonebook=1

212
[9668] 07-24 20:48:36:062: path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

213
[9668] 07-24 20:48:36:062: full path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

214
[7976] 07-24 20:48:36:062: IsRasmanServiceRunning=1

215
[9668] 07-24 20:48:36:062:  IsVirtualizationNeeded: return value = 1

216
217
[9668] 07-24 20:48:36:062: GetLUAPhonebookPath: Return value 0 hiddenpbk path C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk\rasphone.pbk

218
219
[9668] 07-24 20:48:36:063: ReadRasFile: ReadEntryList returned 0

220
[9668] 07-24 20:48:36:063: SyncMasterPhonebookFile:++

221
[9668] 07-24 20:48:36:063: IsPublicPhonebook=1

222
[9668] 07-24 20:48:36:063: path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

223
[9668] 07-24 20:48:36:063: full path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

224
[9668] 07-24 20:48:36:063: FindFirstFile failed with 0x3

225
[9668] 07-24 20:48:36:063: ReadRasFile: File C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk does not exist

226
[9668] 07-24 20:48:36:063: DeleteEntriesOnlyInHiddenPhonebookFile ++

227
[9668] 07-24 20:48:36:063: WritePhonebookFile

228
[9668] 07-24 20:48:36:063: ModifyEntryList: Number of connections written 0

229
[9668] 07-24 20:48:36:063: RASSQM: In WritePhonebookFile Number of alluser profiles set 0

230
[9668] 07-24 20:48:36:063: DeleteEntriesOnlyInHiddenPhonebookFile : WritePhonebookFile failed with 0

231
[9668] 07-24 20:48:36:063: RASSQM: In ReadPhonebookFile Number of alluser profiles set 0

232
[9668] 07-24 20:48:36:063: ReadPhonebookFile returns 0

233
[9668] 07-24 20:48:36:064: IsRasmanServiceRunning=1

234
[9668] 07-24 20:48:36:064: IsRasmanServiceRunning=1

235
[9668] 07-24 20:48:36:065: ReadPhonebookFileEx: called for pbk C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk, flags 1032

236
[9668] 07-24 20:48:36:065: IsPublicPhonebook=0

237
[9668] 07-24 20:48:36:065: path = C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk

238
[9668] 07-24 20:48:36:065: full path = C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk

239
[9668] 07-24 20:48:36:065:  IsVirtualizationNeeded: return value = 0

240
241
[9668] 07-24 20:48:36:065: FindFirstFile failed with 0x2

242
[9668] 07-24 20:48:36:065: ReadRasFile: File C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk does not exist

243
[9668] 07-24 20:48:36:065: RASSQM: In ReadPhonebookFile Number of myuse profiles set 0

244
[9668] 07-24 20:48:36:065: ReadPhonebookFile returns 0

245
[9668] 07-24 20:48:36:066: IsRasmanProcess: CmdLine=c:\windows\system32\systemsettingsbroker.exe -embedding

246
247
[9668] 07-24 20:48:36:066: IsRasmanProcess: returning 0

248
249
[9560] 07-25 03:24:49:717: IsRasmanServiceRunning=1

250
[9560] 07-25 03:24:49:736: ReadPhonebookFileEx: called for pbk C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk, flags 1032

251
[9560] 07-25 03:24:49:736: IsPublicPhonebook=1

252
[9560] 07-25 03:24:49:736: path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

253
[9560] 07-25 03:24:49:736: full path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

254
[9560] 07-25 03:24:49:736:  IsVirtualizationNeeded: return value = 1

255
256
[9560] 07-25 03:24:49:736: GetLUAPhonebookPath: Return value 0 hiddenpbk path C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk\rasphone.pbk

257
258
[9560] 07-25 03:24:49:737: ReadRasFile: ReadEntryList returned 0

259
[9560] 07-25 03:24:49:737: SyncMasterPhonebookFile:++

260
[9560] 07-25 03:24:49:737: IsPublicPhonebook=1

261
[9560] 07-25 03:24:49:737: path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

262
[9560] 07-25 03:24:49:737: full path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

263
[9560] 07-25 03:24:49:737: FindFirstFile failed with 0x3

264
[9560] 07-25 03:24:49:737: ReadRasFile: File C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk does not exist

265
[9560] 07-25 03:24:49:737: DeleteEntriesOnlyInHiddenPhonebookFile ++

266
[9560] 07-25 03:24:49:737: WritePhonebookFile

267
[9560] 07-25 03:24:49:737: ModifyEntryList: Number of connections written 0

268
[9560] 07-25 03:24:49:737: RASSQM: In WritePhonebookFile Number of alluser profiles set 0

269
[9560] 07-25 03:24:49:737: DeleteEntriesOnlyInHiddenPhonebookFile : WritePhonebookFile failed with 0

270
[9560] 07-25 03:24:49:737: RASSQM: In ReadPhonebookFile Number of alluser profiles set 0

271
[9560] 07-25 03:24:49:737: ReadPhonebookFile returns 0

272
[9560] 07-25 03:24:49:738: IsRasmanServiceRunning=1

273
[9560] 07-25 03:24:49:739: IsRasmanServiceRunning=1

274
[9560] 07-25 03:24:49:739: ReadPhonebookFileEx: called for pbk C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk, flags 1032

275
[9560] 07-25 03:24:49:739: IsPublicPhonebook=0

276
[9560] 07-25 03:24:49:739: path = C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk

277
[9560] 07-25 03:24:49:739: full path = C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk

278
[9560] 07-25 03:24:49:739:  IsVirtualizationNeeded: return value = 0

279
280
[9560] 07-25 03:24:49:739: FindFirstFile failed with 0x2

281
[9560] 07-25 03:24:49:740: ReadRasFile: File C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk does not exist

282
[9560] 07-25 03:24:49:740: RASSQM: In ReadPhonebookFile Number of myuse profiles set 0

283
[9560] 07-25 03:24:49:740: ReadPhonebookFile returns 0

284
[9560] 07-25 03:24:49:742: IsRasmanProcess: CmdLine=c:\windows\system32\systemsettingsbroker.exe -embedding

285
286
[9560] 07-25 03:24:49:742: IsRasmanProcess: returning 0

287
288
[5920] 07-25 03:24:49:747: IsRasmanServiceRunning=1

289
[4440] 07-25 03:31:35:604: IsRasmanServiceRunning=1

290
[4440] 07-25 03:31:35:604: IsRasmanServiceRunning=1

291
[4440] 07-25 03:31:35:609: IsRasmanServiceRunning=1

292
[4440] 07-25 03:31:35:609: IsRasmanServiceRunning=1

293
[3664] 07-25 20:52:00:398: IsRasmanServiceRunning=1

294
[3664] 07-25 20:52:00:435: ReadPhonebookFileEx: called for pbk C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk, flags 1032

295
[3664] 07-25 20:52:00:435: IsPublicPhonebook=1

296
[3664] 07-25 20:52:00:435: path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

297
[3664] 07-25 20:52:00:435: full path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

298
[3664] 07-25 20:52:00:435:  IsVirtualizationNeeded: return value = 1

299
300
[3664] 07-25 20:52:00:436: GetLUAPhonebookPath: Return value 0 hiddenpbk path C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk\rasphone.pbk

301
302
[3664] 07-25 20:52:00:436: ReadRasFile: ReadEntryList returned 0

303
[3664] 07-25 20:52:00:436: SyncMasterPhonebookFile:++

304
[3664] 07-25 20:52:00:436: IsPublicPhonebook=1

305
[3664] 07-25 20:52:00:436: path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

306
[3664] 07-25 20:52:00:436: full path = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk

307
[3664] 07-25 20:52:00:436: FindFirstFile failed with 0x3

308
[3664] 07-25 20:52:00:436: ReadRasFile: File C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk does not exist

309
[3664] 07-25 20:52:00:436: DeleteEntriesOnlyInHiddenPhonebookFile ++

310
[3664] 07-25 20:52:00:436: WritePhonebookFile

311
[3664] 07-25 20:52:00:436: ModifyEntryList: Number of connections written 0

312
[3664] 07-25 20:52:00:436: RASSQM: In WritePhonebookFile Number of alluser profiles set 0

313
[3664] 07-25 20:52:00:436: DeleteEntriesOnlyInHiddenPhonebookFile : WritePhonebookFile failed with 0

314
[3664] 07-25 20:52:00:436: RASSQM: In ReadPhonebookFile Number of alluser profiles set 0

315
[3664] 07-25 20:52:00:436: ReadPhonebookFile returns 0

316
[2408] 07-25 20:52:00:437: IsRasmanServiceRunning=1

317
[3664] 07-25 20:52:00:437: IsRasmanServiceRunning=1

318
[3664] 07-25 20:52:00:438: IsRasmanServiceRunning=1

319
[3664] 07-25 20:52:00:438: ReadPhonebookFileEx: called for pbk C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk, flags 1032

320
[3664] 07-25 20:52:00:438: IsPublicPhonebook=0

321
[3664] 07-25 20:52:00:438: path = C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk

322
[3664] 07-25 20:52:00:438: full path = C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk

323
[3664] 07-25 20:52:00:438:  IsVirtualizationNeeded: return value = 0

324
325
[3664] 07-25 20:52:00:438: FindFirstFile failed with 0x2

326
[3664] 07-25 20:52:00:438: ReadRasFile: File C:\Users\Scheune\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk does not exist

327
[3664] 07-25 20:52:00:438: RASSQM: In ReadPhonebookFile Number of myuse profiles set 0

328
[3664] 07-25 20:52:00:438: ReadPhonebookFile returns 0

329
[3664] 07-25 20:52:00:439: IsRasmanProcess: CmdLine=c:\windows\system32\systemsettingsbroker.exe -embedding

330
331
[3664] 07-25 20:52:00:439: IsRasmanProcess: returning 0



Klingt irgendwie suspekt

hier das auch

https://pastebin.com/5BGyqvY2

  


  




  

    Beitrag melden Bearbeiten Löschen Markierten Text zitieren Antwort Antwort mit Zitat
  







      

      



  

    Re: Markwürde Sicherheits Sachen IT
  


  

    

      von
      
        Oliver S.
        (phetty)
        
      
      


      
    


    

      
    

    

    

  
  


  

  Lesenswert?
  

  •
  
  ▲  
  

  ▼  
  		
  

  


  

      
Dein Problem ist unter anderem der oben kurz erwähnte CCleaner, der ist 
mittlerweile die größte Seuchen Schleuder.
Da hilft eigentlich nur eine Neuinstallation.

Du kannst es noch  mit bleachbit versuchen.

  


  




  

    Beitrag melden Bearbeiten Löschen Markierten Text zitieren Antwort Antwort mit Zitat
  








    

    

       Thread beobachten

      |
         Seitenaufteilung abschalten

    

        


Bitte melde dich an um einen Beitrag zu schreiben. Anmeldung ist kostenlos und dauert nur eine Minute.



  Bestehender Account

  


  
  

  
    

      

        
          
        
        
          
        
      

      

        
          
        
        
          
        
      

    


    
    
    





  Schon ein Account bei Google/GoogleMail? Keine Anmeldung erforderlich!

  Mit Google-Account einloggen
  





  Noch kein Account? Hier anmelden.