rsEngineSvc bremst CPU-Leistung über 50% aus

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 31.07.2024
Scan-Zeit: 16:30
Protokolldatei: 624bca6c-4f49-11ef-a95b-34f39a19c74b.json

-Softwaredaten-
Version: 5.1.7.121
Komponentenversion: 1.0.1293
Version des Aktualisierungspakets: 1.0.87326
Lizenz: Testversion

-Systemdaten-
Betriebssystem: Windows 11 (Build 22621.3880)
CPU: x64
Dateisystem: NTFS
Benutzer: DESKTOP-FLR7RSH\DELL

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Scan gestartet von: Manuell
Ergebnis: Abgeschlossen
Gescannte Objekte: 239355
Erkannte Bedrohungen: 2
In die Quarantäne verschobene Bedrohungen: 2
Abgelaufene Zeit: 12 Min., 9 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswert: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Datei: 2
PUP.Optional.BundleInstaller.DDS, C:\$RECYCLE.BIN\S-1-5-21-4188264911-3070158168-183260160-1002\$RPPYL5K.EXE, In Quarantäne, 1000002, 0, 1.0.87326, AE967E2556C3910B23A5F639, dds, 02935508, ABB4D8D0250F25B1950F67BE9E60F072, BA06673ABABDB08D5C2CFF36D2CFF8F5F1F4A52EAD7BDA7B1B8512CCBF5336C3
PUP.Optional.BundleInstaller, C:\USERS\DELL\DOWNLOADS\AUDACITY-WIN3.0.0.EXE, In Quarantäne, 70, 947187, 1.0.87326, , ame, , 4BE9AC43A04FAD75ACFA80D6112E6AB0, 29A13C8C785519496826038D61519A2A68C3A5F3118EDF82F8B756B72700ED86

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)

WMI: 0
(keine bösartigen Elemente erkannt)


(end)
         

{"header": {"date": 133669376395090000, "properties": [{"key": "program", "value": "RogueKiller Anti-Malware"}, {"key": "version", "value": "15.17.4.0"}, {"key": "x64", "value": true}, {"key": "program_date", "value": "Jun 26 2024"}, {"key": "location", "value": "C:\\Users\\DELL\\Downloads\\RogueKiller_portable64.exe"}, {"key": "premium", "value": false}, {"key": "company", "value": "Adlice Software"}, {"key": "website", "value": "https://www.adlice.com/"}, {"key": "contact", "value": "https://adlice.com/contact/"}, {"key": "website", "value": "https://adlice.com/download/roguekiller/"}, {"key": "os", "value": "Windows 11 (10.0.22621) 64-bit"}, {"key": "os_x64", "value": true}, {"key": "startup", "value": 0}, {"key": "winpe", "value": false}, {"key": "user", "value": "DELL"}, {"key": "user_admin", "value": true}, {"key": "date", "value": "2024/07/31 22:13:59"}, {"key": "type", "value": "removal"}, {"key": "aborted", "value": false}, {"key": "scan_mode", "value": "standard"}, {"key": "is_ucheck", "value": false}, {"key": "duration", "value": 1623}, {"key": "found_count", "value": 4}, {"key": "total_count", "value": 79555}, {"key": "signatures_version", "value": "20240729_072142"}, {"key": "log_legit", "value": false}, {"key": "expert_mode", "value": false}, {"key": "truesight_loaded", "value": true}, {"key": "cloud_id", "value": ""}, {"key": "removal_id", "value": 0}, {"key": "scan_id", "value": 133669375521380000}, {"key": "updates_count", "value": 27}]}, "sections": [{"entries": [], "id": "WARNINGS", "name": "warnings"}, {"entries": [{"entries": [], "id": "removal", "properties": [{"key": "scan_what", "value": 1}, {"key": "vendors", "value": ["Suspicious.Path"]}, {"key": "name", "value": "HKEY_LOCAL_MACHINE\\System\\ControlSet001\\Services\\SharedAccess\\Parameters\\FirewallPolicy\\FirewallRules|TCP Query User{F53AC23C-23DD-4685-B1DC-9CA9448A2F5C}C:\\users\\dell\\appdata\\local\\temp\\_istmp1.dir\\_ins5576._mp"}, {"key": "value", "value": "[%localappdata%\\temp\\_istmp1.dir\\_ins5576._mp]"}, {"key": "type", "value": "Registry"}, {"key": "file_hash", "value": ""}, {"key": "file_vtscore", "value": 0}, {"key": "file_vttotal", "value": 0}, {"key": "is_malicious", "value": true}, {"key": "detection_level", "value": 3}, {"key": "id", "value": 0}, {"key": "status", "value": 3}, {"key": "status_str", "value": "[[DELETED]]"}, {"key": "removed", "value": true}, {"key": "status_choice", "value": 2}, {"key": "malpe_score", "value": 0}]}, {"entries": [], "id": "removal", "properties": [{"key": "scan_what", "value": 1}, {"key": "vendors", "value": ["Suspicious.Path"]}, {"key": "name", "value": "HKEY_LOCAL_MACHINE\\System\\ControlSet001\\Services\\SharedAccess\\Parameters\\FirewallPolicy\\FirewallRules|UDP Query User{54787297-2E10-4258-A8C1-12B5ECFF1A95}C:\\users\\dell\\appdata\\local\\temp\\_istmp1.dir\\_ins5576._mp"}, {"key": "value", "value": "[%localappdata%\\temp\\_istmp1.dir\\_ins5576._mp]"}, {"key": "type", "value": "Registry"}, {"key": "file_hash", "value": ""}, {"key": "file_vtscore", "value": 0}, {"key": "file_vttotal", "value": 0}, {"key": "is_malicious", "value": true}, {"key": "detection_level", "value": 3}, {"key": "id", "value": 1}, {"key": "status", "value": 3}, {"key": "status_str", "value": "[[DELETED]]"}, {"key": "removed", "value": true}, {"key": "status_choice", "value": 2}, {"key": "malpe_score", "value": 0}]}, {"entries": [], "id": "removal", "properties": [{"key": "scan_what", "value": 1}, {"key": "vendors", "value": ["PUP.AutoIt.Gen"]}, {"key": "name", "value": "FRST64.exe"}, {"key": "value", "value": "%USERPROFILE%\\Downloads\\FRST-OlderVersion\\FRST64.exe"}, {"key": "type", "value": "File/Folder"}, {"key": "file_hash", "value": "2B84CDCD5DD30ED418D12A891515DCFBECFF44F3165FAA892A5819031CB7327B"}, {"key": "file_vtscore", "value": 0}, {"key": "file_vttotal", "value": 0}, {"key": "is_malicious", "value": true}, {"key": "detection_level", "value": 3}, {"key": "id", "value": 2}, {"key": "status", "value": 3}, {"key": "status_str", "value": "[[DELETED]]"}, {"key": "removed", "value": true}, {"key": "status_choice", "value": 2}, {"key": "malpe_score", "value": -1}]}, {"entries": [], "id": "removal", "properties": [{"key": "scan_what", "value": 1}, {"key": "vendors", "value": ["PUP.AutoIt.Gen"]}, {"key": "name", "value": "FRST64.exe"}, {"key": "value", "value": "%USERPROFILE%\\Downloads\\FRST64.exe"}, {"key": "type", "value": "File/Folder"}, {"key": "file_hash", "value": "09E134D5526A41ACDCAB003D1A17D7929CC42F0A8EC86CFFE0A42BB2AFD89D62"}, {"key": "file_vtscore", "value": 0}, {"key": "file_vttotal", "value": 0}, {"key": "is_malicious", "value": true}, {"key": "detection_level", "value": 3}, {"key": "id", "value": 3}, {"key": "status", "value": 3}, {"key": "status_str", "value": "[[DELETED]]"}, {"key": "removed", "value": true}, {"key": "status_choice", "value": 2}, {"key": "malpe_score", "value": -1}]}], "id": "REMOVAL", "name": "removal"}], "type": "RK-REPORT"}