Deskmodder.de

Verfasst: **11.04.2022, 16:50**

Ich nutze da eure Vorlage aus dem Wiki als Batch-Datei (brauch man ja regelmäßiger

):

REM https://www.deskmodder.de/wiki/index.php?title=Startmen%C3%BC_Cache_l%C3%B6schen_Windows_10
@echo off
taskkill /f /im explorer.exe
taskkill /f /im StartMenuExperienceHost.exe
timeout /t 3 /NOBREAK > nul
del %localappdata%\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\* /q
timeout /t 1 /NOBREAK > nul
start explorer
@echo on

Es werden auch die Icons zurück gesetzt, aber diese defekte Verknüpfung klebt schlimmer im Startmenü als Hundekot am Schuh.

Verfasst: **14.04.2022, 21:53**

Ich habe mal mit dem Procmon genauer geschaut und gefiltert nach sechealth:

Code: Alles auswählen

"Time of Day","Process Name","PID","Operation","Path","Result","Detail"
"21:42:20,0006119","RuntimeBroker.exe","12304","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS","Desired Access: Read"
"21:42:20,0006240","RuntimeBroker.exe","12304","RegEnumKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS","Index: 0, Name: 1b"
"21:42:20,0006331","RuntimeBroker.exe","12304","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS",""
"21:42:20,0007914","RuntimeBroker.exe","12304","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS","Desired Access: Read"
"21:42:20,0007992","RuntimeBroker.exe","12304","RegEnumKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS","Index: 0, Name: 1b"
"21:42:20,0008059","RuntimeBroker.exe","12304","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS",""
"21:42:20,0013558","RuntimeBroker.exe","12304","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\AppModel\StateChange\PackageList\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","NAME NOT FOUND","Desired Access: Read"
"21:42:20,0014497","RuntimeBroker.exe","12304","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageUserStatus\Index\UserAndPackageFullName\5^Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","NAME NOT FOUND","Desired Access: Read"
"21:42:20,0020077","RuntimeBroker.exe","12304","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS","Desired Access: Read"
"21:42:20,0020174","RuntimeBroker.exe","12304","RegEnumKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS","Index: 0, Name: 1b"
"21:42:20,0020259","RuntimeBroker.exe","12304","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS",""
"21:42:20,0021373","RuntimeBroker.exe","12304","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS","Desired Access: Read"
"21:42:20,0021449","RuntimeBroker.exe","12304","RegEnumKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS","Index: 0, Name: 1b"
"21:42:20,0021523","RuntimeBroker.exe","12304","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS",""
"21:42:20,0023136","RuntimeBroker.exe","12304","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS","Desired Access: Read"
"21:42:20,0023219","RuntimeBroker.exe","12304","RegEnumKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS","Index: 0, Name: 1b"
"21:42:20,0023292","RuntimeBroker.exe","12304","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS",""
"21:42:20,0024106","RuntimeBroker.exe","12304","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\ResourcesConfig","REPARSE","Desired Access: Read"
"21:42:20,0024197","RuntimeBroker.exe","12304","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\ResourcesConfig","NAME NOT FOUND","Desired Access: Read"
"21:42:20,0033295","RuntimeBroker.exe","12304","CreateFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\resources.pri","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"21:42:20,0033431","RuntimeBroker.exe","12304","QueryNetworkOpenInformationFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\resources.pri","SUCCESS","CreationTime: 11.04.2022 14:28:59, LastAccessTime: 14.04.2022 21:42:09, LastWriteTime: 28.10.2021 18:51:05, ChangeTime: 09.11.2021 22:02:29, AllocationSize: 01.01.1601 02:00:00, EndOfFile: 01.01.1601 02:00:00, FileAttributes: A"
"21:42:20,0033499","RuntimeBroker.exe","12304","CloseFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\resources.pri","SUCCESS",""
"21:42:20,0034137","RuntimeBroker.exe","12304","CreateFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\resources.pri","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"21:42:20,0034420","RuntimeBroker.exe","12304","QueryEAFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\resources.pri","SUCCESS",""
"21:42:20,0035899","RuntimeBroker.exe","12304","QueryStandardInformationFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\resources.pri","SUCCESS","AllocationSize: 368.640, EndOfFile: 366.632, NumberOfLinks: 1, DeletePending: False, Directory: False"
"21:42:20,0035988","RuntimeBroker.exe","12304","CreateFileMapping","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\resources.pri","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE_READ"
"21:42:20,0036204","RuntimeBroker.exe","12304","QueryStandardInformationFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\resources.pri","SUCCESS","AllocationSize: 368.640, EndOfFile: 366.632, NumberOfLinks: 1, DeletePending: False, Directory: False"
"21:42:20,0036317","RuntimeBroker.exe","12304","CreateFileMapping","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\resources.pri","SUCCESS","SyncType: SyncTypeOther"
"21:42:20,0036477","RuntimeBroker.exe","12304","CloseFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\resources.pri","SUCCESS",""
"21:42:20,0037731","RuntimeBroker.exe","12304","CreateFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"21:42:20,0037953","RuntimeBroker.exe","12304","QueryDirectory","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources*.pri","SUCCESS","FileInformationClass: FileBothDirectoryInformation, Filter: resources*.pri, 2: resources.de-DE.pri"
"21:42:20,0038168","RuntimeBroker.exe","12304","QueryDirectory","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris","SUCCESS","FileInformationClass: FileBothDirectoryInformation, 1: resources.en-US.pri"
"21:42:20,0038315","RuntimeBroker.exe","12304","QueryDirectory","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris","NO MORE FILES","FileInformationClass: FileBothDirectoryInformation"
"21:42:20,0038402","RuntimeBroker.exe","12304","CloseFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris","SUCCESS",""
"21:42:20,0039729","RuntimeBroker.exe","12304","CreateFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"21:42:20,0039931","RuntimeBroker.exe","12304","QueryDirectory","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\resources.pri","SUCCESS","FileInformationClass: FileBothDirectoryInformation, Filter: resources.pri, 2: resources.pri"
"21:42:20,0040092","RuntimeBroker.exe","12304","CloseFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy","SUCCESS",""
"21:42:20,0046690","RuntimeBroker.exe","12304","CreateFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"21:42:20,0046906","RuntimeBroker.exe","12304","QueryDirectory","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.de-DE.pri","SUCCESS","FileInformationClass: FileBothDirectoryInformation, Filter: resources.de-DE.pri, 2: resources.de-DE.pri"
"21:42:20,0047039","RuntimeBroker.exe","12304","CloseFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris","SUCCESS",""
"21:42:20,0048171","RuntimeBroker.exe","12304","CreateFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.de-DE.pri","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"21:42:20,0048307","RuntimeBroker.exe","12304","QueryNetworkOpenInformationFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.de-DE.pri","SUCCESS","CreationTime: 11.04.2022 14:29:00, LastAccessTime: 14.04.2022 21:42:09, LastWriteTime: 28.10.2021 18:58:44, ChangeTime: 09.11.2021 22:02:29, AllocationSize: 01.01.1601 02:00:00, EndOfFile: 01.01.1601 02:00:00, FileAttributes: A"
"21:42:20,0048369","RuntimeBroker.exe","12304","CloseFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.de-DE.pri","SUCCESS",""
"21:42:20,0049004","RuntimeBroker.exe","12304","CreateFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"21:42:20,0049213","RuntimeBroker.exe","12304","QueryDirectory","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.en-US.pri","SUCCESS","FileInformationClass: FileBothDirectoryInformation, Filter: resources.en-US.pri, 2: resources.en-US.pri"
"21:42:20,0049346","RuntimeBroker.exe","12304","CloseFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris","SUCCESS",""
"21:42:20,0050354","RuntimeBroker.exe","12304","CreateFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.en-US.pri","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"21:42:20,0050476","RuntimeBroker.exe","12304","QueryNetworkOpenInformationFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.en-US.pri","SUCCESS","CreationTime: 11.04.2022 14:29:00, LastAccessTime: 14.04.2022 15:41:12, LastWriteTime: 28.10.2021 18:58:25, ChangeTime: 09.11.2021 22:02:29, AllocationSize: 01.01.1601 02:00:00, EndOfFile: 01.01.1601 02:00:00, FileAttributes: A"
"21:42:20,0050535","RuntimeBroker.exe","12304","CloseFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.en-US.pri","SUCCESS",""
"21:42:20,0051667","RuntimeBroker.exe","12304","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\ResourcesConfig","REPARSE","Desired Access: Read"
"21:42:20,0051759","RuntimeBroker.exe","12304","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\ResourcesConfig","NAME NOT FOUND","Desired Access: Read"
"21:42:20,0052603","RuntimeBroker.exe","12304","CreateFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.de-DE.pri","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"21:42:20,0052862","RuntimeBroker.exe","12304","QueryEAFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.de-DE.pri","SUCCESS",""
"21:42:20,0054482","RuntimeBroker.exe","12304","QueryStandardInformationFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.de-DE.pri","SUCCESS","AllocationSize: 163.840, EndOfFile: 160.888, NumberOfLinks: 1, DeletePending: False, Directory: False"
"21:42:20,0054587","RuntimeBroker.exe","12304","CreateFileMapping","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.de-DE.pri","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE_READ"
"21:42:20,0054672","RuntimeBroker.exe","12304","QueryStandardInformationFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.de-DE.pri","SUCCESS","AllocationSize: 163.840, EndOfFile: 160.888, NumberOfLinks: 1, DeletePending: False, Directory: False"
"21:42:20,0054793","RuntimeBroker.exe","12304","CreateFileMapping","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.de-DE.pri","SUCCESS","SyncType: SyncTypeOther"
"21:42:20,0054947","RuntimeBroker.exe","12304","CloseFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.de-DE.pri","SUCCESS",""
"21:42:20,0182063","RuntimeBroker.exe","12304","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS","Desired Access: Read"
"21:42:20,0182176","RuntimeBroker.exe","12304","RegEnumKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS","Index: 0, Name: 1b"
"21:42:20,0182272","RuntimeBroker.exe","12304","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS",""
"21:42:20,0183758","RuntimeBroker.exe","12304","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS","Desired Access: Read"
"21:42:20,0183826","RuntimeBroker.exe","12304","RegEnumKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS","Index: 0, Name: 1b"
"21:42:20,0183888","RuntimeBroker.exe","12304","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS",""
"21:42:20,0187421","RuntimeBroker.exe","12304","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\AppModel\StateChange\PackageList\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","NAME NOT FOUND","Desired Access: Read"
"21:42:20,0188348","RuntimeBroker.exe","12304","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageUserStatus\Index\UserAndPackageFullName\5^Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","NAME NOT FOUND","Desired Access: Read"
"21:42:20,0189449","RuntimeBroker.exe","12304","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS","Desired Access: Read"
"21:42:20,0189519","RuntimeBroker.exe","12304","RegEnumKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS","Index: 0, Name: 1b"
"21:42:20,0189598","RuntimeBroker.exe","12304","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS",""
"21:42:20,0190646","RuntimeBroker.exe","12304","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS","Desired Access: Read"
"21:42:20,0190729","RuntimeBroker.exe","12304","RegEnumKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS","Index: 0, Name: 1b"
"21:42:20,0190799","RuntimeBroker.exe","12304","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS",""
"21:42:20,0192516","RuntimeBroker.exe","12304","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS","Desired Access: Read"
"21:42:20,0192610","RuntimeBroker.exe","12304","RegEnumKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS","Index: 0, Name: 1b"
"21:42:20,0192698","RuntimeBroker.exe","12304","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS",""
"21:42:20,0193551","RuntimeBroker.exe","12304","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\ResourcesConfig","REPARSE","Desired Access: Read"
"21:42:20,0193630","RuntimeBroker.exe","12304","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\ResourcesConfig","NAME NOT FOUND","Desired Access: Read"
"21:42:20,0195507","RuntimeBroker.exe","12304","CreateFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\resources.pri","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"21:42:20,0195646","RuntimeBroker.exe","12304","QueryNetworkOpenInformationFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\resources.pri","SUCCESS","CreationTime: 11.04.2022 14:28:59, LastAccessTime: 14.04.2022 21:42:20, LastWriteTime: 28.10.2021 18:51:05, ChangeTime: 09.11.2021 22:02:29, AllocationSize: 01.01.1601 02:00:00, EndOfFile: 01.01.1601 02:00:00, FileAttributes: A"
"21:42:20,0195713","RuntimeBroker.exe","12304","CloseFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\resources.pri","SUCCESS",""
"21:42:20,0196347","RuntimeBroker.exe","12304","CreateFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\resources.pri","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"21:42:20,0196613","RuntimeBroker.exe","12304","QueryEAFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\resources.pri","SUCCESS",""
"21:42:20,0198100","RuntimeBroker.exe","12304","QueryStandardInformationFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\resources.pri","SUCCESS","AllocationSize: 368.640, EndOfFile: 366.632, NumberOfLinks: 1, DeletePending: False, Directory: False"
"21:42:20,0198206","RuntimeBroker.exe","12304","CreateFileMapping","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\resources.pri","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE_READ"
"21:42:20,0198287","RuntimeBroker.exe","12304","QueryStandardInformationFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\resources.pri","SUCCESS","AllocationSize: 368.640, EndOfFile: 366.632, NumberOfLinks: 1, DeletePending: False, Directory: False"
"21:42:20,0198418","RuntimeBroker.exe","12304","CreateFileMapping","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\resources.pri","SUCCESS","SyncType: SyncTypeOther"
"21:42:20,0198579","RuntimeBroker.exe","12304","CloseFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\resources.pri","SUCCESS",""
"21:42:20,0199882","RuntimeBroker.exe","12304","CreateFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"21:42:20,0200111","RuntimeBroker.exe","12304","QueryDirectory","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources*.pri","SUCCESS","FileInformationClass: FileBothDirectoryInformation, Filter: resources*.pri, 2: resources.de-DE.pri"
"21:42:20,0200318","RuntimeBroker.exe","12304","QueryDirectory","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris","SUCCESS","FileInformationClass: FileBothDirectoryInformation, 1: resources.en-US.pri"
"21:42:20,0200463","RuntimeBroker.exe","12304","QueryDirectory","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris","NO MORE FILES","FileInformationClass: FileBothDirectoryInformation"
"21:42:20,0200534","RuntimeBroker.exe","12304","CloseFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris","SUCCESS",""
"21:42:20,0201821","RuntimeBroker.exe","12304","CreateFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"21:42:20,0202021","RuntimeBroker.exe","12304","QueryDirectory","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\resources.pri","SUCCESS","FileInformationClass: FileBothDirectoryInformation, Filter: resources.pri, 2: resources.pri"
"21:42:20,0202197","RuntimeBroker.exe","12304","CloseFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy","SUCCESS",""
"21:42:20,0208666","RuntimeBroker.exe","12304","CreateFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"21:42:20,0208877","RuntimeBroker.exe","12304","QueryDirectory","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.de-DE.pri","SUCCESS","FileInformationClass: FileBothDirectoryInformation, Filter: resources.de-DE.pri, 2: resources.de-DE.pri"
"21:42:20,0209011","RuntimeBroker.exe","12304","CloseFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris","SUCCESS",""
"21:42:20,0210010","RuntimeBroker.exe","12304","CreateFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.de-DE.pri","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"21:42:20,0210129","RuntimeBroker.exe","12304","QueryNetworkOpenInformationFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.de-DE.pri","SUCCESS","CreationTime: 11.04.2022 14:29:00, LastAccessTime: 14.04.2022 21:42:20, LastWriteTime: 28.10.2021 18:58:44, ChangeTime: 09.11.2021 22:02:29, AllocationSize: 01.01.1601 02:00:00, EndOfFile: 01.01.1601 02:00:00, FileAttributes: A"
"21:42:20,0210188","RuntimeBroker.exe","12304","CloseFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.de-DE.pri","SUCCESS",""
"21:42:20,0210760","RuntimeBroker.exe","12304","CreateFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"21:42:20,0210947","RuntimeBroker.exe","12304","QueryDirectory","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.en-US.pri","SUCCESS","FileInformationClass: FileBothDirectoryInformation, Filter: resources.en-US.pri, 2: resources.en-US.pri"
"21:42:20,0211080","RuntimeBroker.exe","12304","CloseFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris","SUCCESS",""
"21:42:20,0212050","RuntimeBroker.exe","12304","CreateFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.en-US.pri","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"21:42:20,0212197","RuntimeBroker.exe","12304","QueryNetworkOpenInformationFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.en-US.pri","SUCCESS","CreationTime: 11.04.2022 14:29:00, LastAccessTime: 14.04.2022 15:41:12, LastWriteTime: 28.10.2021 18:58:25, ChangeTime: 09.11.2021 22:02:29, AllocationSize: 01.01.1601 02:00:00, EndOfFile: 01.01.1601 02:00:00, FileAttributes: A"
"21:42:20,0212269","RuntimeBroker.exe","12304","CloseFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.en-US.pri","SUCCESS",""
"21:42:20,0213412","RuntimeBroker.exe","12304","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\ResourcesConfig","REPARSE","Desired Access: Read"
"21:42:20,0213502","RuntimeBroker.exe","12304","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\ResourcesConfig","NAME NOT FOUND","Desired Access: Read"
"21:42:20,0214341","RuntimeBroker.exe","12304","CreateFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.de-DE.pri","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"21:42:20,0214619","RuntimeBroker.exe","12304","QueryEAFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.de-DE.pri","SUCCESS",""
"21:42:20,0216244","RuntimeBroker.exe","12304","QueryStandardInformationFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.de-DE.pri","SUCCESS","AllocationSize: 163.840, EndOfFile: 160.888, NumberOfLinks: 1, DeletePending: False, Directory: False"
"21:42:20,0216331","RuntimeBroker.exe","12304","CreateFileMapping","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.de-DE.pri","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE_READ"
"21:42:20,0216401","RuntimeBroker.exe","12304","QueryStandardInformationFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.de-DE.pri","SUCCESS","AllocationSize: 163.840, EndOfFile: 160.888, NumberOfLinks: 1, DeletePending: False, Directory: False"
"21:42:20,0216518","RuntimeBroker.exe","12304","CreateFileMapping","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.de-DE.pri","SUCCESS","SyncType: SyncTypeOther"
"21:42:20,0216671","RuntimeBroker.exe","12304","CloseFile","C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\pris\resources.de-DE.pri","SUCCESS",""
"21:42:22,5602833","RuntimeBroker.exe","12304","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS","Desired Access: Read"
"21:42:22,5602945","RuntimeBroker.exe","12304","RegEnumKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS","Index: 0, Name: 1b"
"21:42:22,5603057","RuntimeBroker.exe","12304","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy","SUCCESS",""
"21:42:22,5988949","svchost.exe","8264","CreateFile","C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Windows.SecHealthUI_10.0.19041.423_neutral__cw5n1h2txyewy.xml","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"

Lässt sich da evtl. eine Lösung rauslesen?

Verfasst: **17.04.2022, 20:33**

Ich habe das Problem nun gelöst. Ich dokumentiere hier für die, die das selbe Problem haben.

Unter %ProgramData%\Microsoft\Windows\AppRepository\Packages (hier muss der Ordner erst als Inhaber übernommen werden) lagen noch 2 Ordner, die mit Microsoft.Windows.SecHealthUI_10.0.19041 begannen. Ich habe diese gelöscht, den obigen CMD-Batch aus eurer Wiki ausgeführt. Dann war es weg.

Verfasst: **14.07.2022, 16:10**

Da ich das Problem mit der Phantomapp "ms-resource:DisplayName" nach einem Windows11-Update aus Windows 10 heraus auch hatte und keine der bereits vorhandenen Lösungen funktionierte, hier mal meine:

Wenn nach einem Update von Win10 zu Win11 über Windows-Update oder nach Win11-Installation aus Windows10 im Startmenü ein Eintrag "ms-resource:DisplayName" erscheint, der sich nicht deinstallieren oder sonstwie löschen lässt:

- zunächst "ausgeblendete Dateien, Ordner und Laufwerke anzeigen" in Exploreroptionen aktivieren

- Rechtsklick auf tote App -> Mehr -> App-Einstellungen

- im neu geöffneten Fenster ganz oben den vollständigen Dateinamen mit genauer Versionsnummer (wenn diese vorhanden) notieren

- der Dateiname wird auch angezeigt, wenn man auf die Option "Deinstallieren" weiter unten in diesem Fenster klickt
(die Deinstallation misslingt jedoch mit einer Fehlermeldung - hier stehen dann auch App-Name und Versionsnummer)

- jetzt in "ProgramData\Microsoft\Windows\AppRepository\" der aktuellen Windows-Installation gehen und hier die Datei
"StateRepository-Machine.srd" in Editor öffnen (aber NICHTS verändern!)

- in dieser Datei über die Suchfunktion und den genauen App-Namen den Installationspfad der App, die das fehlerhafte Icon
"ms-resource:DisplayName" verursacht, suchen. Ziemlich sicher wird diese Datei mehrfach in der Suche auftauchen,
aber bei irgendeinem der Suchergebnisse ist der Installationspfad zu sehen (teilweise hin und herscrollen nötig
wegen langer Zeilen), Achtung, teilweise habe Apps den gleichen Namen und unterscheiden sich nur durch die Versionsnummer, hier die
Richtige suchen

- jetzt im Windows.old-Ordner der alten Win10-Installation den notierten Ordner aus der StateRepository-Machine.srd-Datei suchen
(z.B. in C:\Windows.old\Windows\SystemApps oder C:\Windows.old\Users\User\AppData\Local\Microsoft\WindowsApps\ usw.)

- den Dateiordner mit Inhalt aus der alten Win10-Installation in genau den gleichen Ordner der aktuellen
Windows11-Installation kopieren, wenn nicht vorhanden, neu anlegen und dann reinkopieren

- jetzt auf das Platzhalter-Icon "ms-resource:DisplayName" rechts klicken und "Deinstallieren" auswählen,
der Platzhalter sollte durch eine nun durchlaufende Deinstallation verschwinden (wenn nicht, war es eine falsche
Datei oder Dateiversion oder ein falscher Installationspfad)

- in den Dateiordner der aktuellen Windows11-Installation gehen und den aus der alten Windows.old-Installation
rüberkopierten Ordner samt Inhalt löschen

- Das Platzhalter-Icon sollte nun dauerhaft verschwunden sein

Für dieses Vorgehen hat man 10 Tage Zeit, danach wird laut Microsoft der Windows.old-Ordner der alten Windows-Installation gelöscht.

Verfasst: **14.07.2022, 16:19**

Klingt sehr interessant. Danke dir.

Deskmodder.de

ms-resource displayname

Re: ms-resource displayname

Re: ms-resource displayname

Re: ms-resource displayname

Re: ms-resource displayname

Re: ms-resource displayname