Hallo,

keine Ahnung ob ich hier richtig bin...

Seit 4 Tagen habe ich das Problem das ganz plötzlich der Bildschirm Blau wird und ein Text erscheint den ich leider nicht lesen kann weil es zu schnell wieder verschwindet irgendwas mit BAD_POOL_Head oder so konnte ich lesen.

Dann kommt ein schwarzer Bildschirm wo steht das Windows ein Problem hatte und ich werde gefragt ob ich Windows im abgesicherten Modus oder normal etc. starten möchte.

Ebend kam beim wieder starten dann eine Meldung von Windows, da hab ich mal auf Problemdetails geklickt.

Problemsignatur:
  Problemereignisname:	BlueScreen
  Betriebsystemversion:	6.1.7601.2.1.0.768.3
  Gebietsschema-ID:	1031

Zusatzinformationen zum Problem:
  BCCode:	19
  BCP1:	0000000000000020
  BCP2:	FFFFFA8006BECC60
  BCP3:	FFFFFA8006BECC80
  BCP4:	0000000004020009
  OS Version:	6_1_7601
  Service Pack:	1_0
  Product:	768_1

Dateien, die bei der Beschreibung des Problems hilfreich sind:
  C:\Windows\Minidump\080814-22089-01.dmp
  C:\Users\ren\AppData\Local\Temp\WER-78328-0.sysdata.xml

Lesen Sie unsere Datenschutzbestimmungen online:
  hxxp://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0407

Wenn die Onlinedatenschutzbestimmungen nicht verfügbar sind, lesen Sie unsere Datenschutzbestimmungen offline:
  C:\Windows\system32\de-DE\erofflps.txt
         

Kann mir jemand helfen?

LG Amathia

PS: Hatte mir am letzten Wochenende nen Trojaner oder so eingefangen kann der was zerschossen haben?

Der Trojaner wurde beseitigt?

Bitte lade dir die neuste Version von WhoCrashed auf deinen Computer: WhoCrashed Download

• Installiere es
• Starte es als Administrator
• Klicke oben links auf den Button "Analyze"
• Scrolle herunter, die Bereiche Crash Dump Analysis und Conclusion bitte ins Forum kopieren

Bitte poste dein Ergebnis zwischen Code-Tags

Wie mache ich das?

Drücke einfach die # in Antwortfenster und füge den Log dazwischen ein

Ja, der/die Trojaner wurden dank eurer hilfe beseitigt.

Crash Dump Analysis
--------------------------------------------------------------------------------

Crash dump directory: C:\Windows\Minidump

Crash dumps are enabled on your computer.

On Sat 09.08.2014 12:58:59 GMT your computer crashed
crash dump file: C:\Windows\Minidump\080914-17752-01.dmp
This was probably caused by the following module: tcpip.sys (tcpip+0x88DC6) 
Bugcheck code: 0x19 (0x20, 0xFFFFFA800777A980, 0xFFFFFA800777A9A0, 0x4020009)
Error: BAD_POOL_HEADER
file path: C:\Windows\system32\drivers\tcpip.sys
product: Betriebssystem Microsoft® Windows®
company: Microsoft Corporation
description: TCP/IP-Treiber
Bug check description: This indicates that a pool header is corrupt.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules. 
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system that cannot be identified at this time. 



On Sat 09.08.2014 12:58:59 GMT your computer crashed
crash dump file: C:\Windows\memory.dmp
This was probably caused by the following module: mwac.sys (mwac+0x6109) 
Bugcheck code: 0x19 (0x20, 0xFFFFFA800777A980, 0xFFFFFA800777A9A0, 0x4020009)
Error: BAD_POOL_HEADER
file path: C:\Windows\system32\drivers\mwac.sys
product: Malwarebytes Web Access Control
company: Malwarebytes Corporation
description: Malwarebytes Web Access Control
Bug check description: This indicates that a pool header is corrupt.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules. 
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: mwac.sys (Malwarebytes Web Access Control, Malwarebytes Corporation). 
Google query: Malwarebytes Corporation BAD_POOL_HEADER



On Sat 09.08.2014 10:37:47 GMT your computer crashed
crash dump file: C:\Windows\Minidump\080914-19281-01.dmp
This was probably caused by the following module: tcpip.sys (tcpip+0x88DC6) 
Bugcheck code: 0x19 (0x20, 0xFFFFFA80069C5C00, 0xFFFFFA80069C5C20, 0x4020016)
Error: BAD_POOL_HEADER
file path: C:\Windows\system32\drivers\tcpip.sys
product: Betriebssystem Microsoft® Windows®
company: Microsoft Corporation
description: TCP/IP-Treiber
Bug check description: This indicates that a pool header is corrupt.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules. 
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system that cannot be identified at this time. 



On Fri 08.08.2014 16:01:06 GMT your computer crashed
crash dump file: C:\Windows\Minidump\080814-22089-01.dmp
This was probably caused by the following module: tcpip.sys (tcpip+0x88DC6) 
Bugcheck code: 0x19 (0x20, 0xFFFFFA8006BECC60, 0xFFFFFA8006BECC80, 0x4020009)
Error: BAD_POOL_HEADER
file path: C:\Windows\system32\drivers\tcpip.sys
product: Betriebssystem Microsoft® Windows®
company: Microsoft Corporation
description: TCP/IP-Treiber
Bug check description: This indicates that a pool header is corrupt.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules. 
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system that cannot be identified at this time. 



On Fri 08.08.2014 10:35:52 GMT your computer crashed
crash dump file: C:\Windows\Minidump\080814-21871-01.dmp
This was probably caused by the following module: tcpip.sys (tcpip+0x88DC6) 
Bugcheck code: 0x19 (0x20, 0xFFFFFA80075CCA70, 0xFFFFFA80075CCA90, 0x402000C)
Error: BAD_POOL_HEADER
file path: C:\Windows\system32\drivers\tcpip.sys
product: Betriebssystem Microsoft® Windows®
company: Microsoft Corporation
description: TCP/IP-Treiber
Bug check description: This indicates that a pool header is corrupt.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules. 
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system that cannot be identified at this time. 



On Thu 07.08.2014 17:27:32 GMT your computer crashed
crash dump file: C:\Windows\Minidump\080714-18189-01.dmp
This was probably caused by the following module: tcpip.sys (tcpip+0x82726) 
Bugcheck code: 0x19 (0x20, 0xFFFFFA8006B21CD0, 0xFFFFFA8006B21CF0, 0x4020009)
Error: BAD_POOL_HEADER
file path: C:\Windows\system32\drivers\tcpip.sys
product: Betriebssystem Microsoft® Windows®
company: Microsoft Corporation
description: TCP/IP-Treiber
Bug check description: This indicates that a pool header is corrupt.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules. 
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system that cannot be identified at this time. 



On Tue 05.08.2014 21:54:31 GMT your computer crashed
crash dump file: C:\Windows\Minidump\080514-35849-01.dmp
This was probably caused by the following module: tcpip.sys (tcpip+0x82726) 
Bugcheck code: 0x19 (0x20, 0xFFFFFA800711C800, 0xFFFFFA800711C820, 0x4020030)
Error: BAD_POOL_HEADER
file path: C:\Windows\system32\drivers\tcpip.sys
product: Betriebssystem Microsoft® Windows®
company: Microsoft Corporation
description: TCP/IP-Treiber
Bug check description: This indicates that a pool header is corrupt.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules. 
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system that cannot be identified at this time. 




--------------------------------------------------------------------------------
Conclusion
--------------------------------------------------------------------------------

7 crash dumps have been found and analyzed. A third party driver has been identified to be causing system crashes on your computer. It is strongly suggested that you check for updates for these drivers on their company websites. Click on the links below to search with Google for updates for these drivers: 

mwac.sys (Malwarebytes Web Access Control, Malwarebytes Corporation)

If no updates for these drivers are available, try searching with Google on the names of these drivers in combination the errors that have been reported for these drivers and include the brand and model name of your computer as well in the query. This often yields interesting results from discussions from users who have been experiencing similar problems.


Read the topic general suggestions for troubleshooting system crashes for more information. 

Note that it's not always possible to state with certainty whether a reported driver is responsible for crashing your system or that the root cause is in another module. Nonetheless it's suggested you look for updates for the products that these drivers belong to and regularly visit Windows update or enable automatic updates for Windows. In case a piece of malfunctioning hardware is causing trouble, a search with Google on the bug check errors together with the model name and brand of your computer may help you investigate this further.
         

okay.

Also zunächst würde ich einmal in den Gerätemanager schauen und gucken, ob Geräte mit einem Problem gekennzeichnet sind.

Dann solltest du von deinem Hersteller den neusten Treiber für deine Netzwerkkarten herunterladen und installieren.

Ausserdem solltest du dein Malwarebytes deinstallieren.

Ich bekomme mehrmals täglich von Malwarebytes die Meldung das bösartige Websites geblockt werden, diese haben es (so we ich d verstehe) auf win32 abgesehen. Wenn Malwarebytes weg ist haben die doch freie Bahn oder?

Hast du deinen PC hier auf dem Board bereinigen lassen und dir wurde das bestätigt?

Meiner Erfahrung nach ist dieser Checker ziemlich empfindlich, ich weiß ja nicht auf was für Seiten du dich rumtreibst, aber solang du dich im "normalen seriösen" Web bewegst dürfte dir da nicht viel passieren.

Was für Seiten will er denn konkret blocken?

Ja, habe s mit eurer hilfe bereinigen lassen.
Und viel surfen tu ich eigentlich nicht, spiele ein browsergame und lese im dazu gehörigen Forum, ab und an mal was anschaen bei YouTbe oder was nachlesen bei Wiki.

Es wird meist immer die selbse IP blockiert, dazu mal das Schutzprotokoll von heute

 Malwarebytes Anti-Malware 
www.malwarebytes.org


Protection, 10.08.2014 00:24:10, SYSTEM, MASCHINE, Protection, Malware Protection, Starting, 
Protection, 10.08.2014 00:24:10, SYSTEM, MASCHINE, Protection, Malware Protection, Started, 
Protection, 10.08.2014 00:24:10, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Starting, 
Protection, 10.08.2014 00:24:41, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Started, 
Detection, 10.08.2014 00:39:14, SYSTEM, MASCHINE, Protection, Malicious Website Protection, IP, 80.82.70.119, 9064, Inbound, C:\Windows\System32\svchost.exe, 
Detection, 10.08.2014 00:39:14, SYSTEM, MASCHINE, Protection, Malicious Website Protection, IP, 80.82.70.119, 9064, Inbound, C:\Windows\System32\svchost.exe, 
Update, 10.08.2014 01:16:33, SYSTEM, MASCHINE, Scheduler, Malware Database, 2014.8.9.6, 2014.8.9.7, 
Protection, 10.08.2014 01:16:35, SYSTEM, MASCHINE, Protection, Refresh, Starting, 
Protection, 10.08.2014 01:16:35, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Stopping, 
Protection, 10.08.2014 01:16:35, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Stopped, 
Protection, 10.08.2014 01:16:40, SYSTEM, MASCHINE, Protection, Refresh, Success, 
Protection, 10.08.2014 01:16:40, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Starting, 
Protection, 10.08.2014 01:16:40, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Started, 
Protection, 10.08.2014 13:15:04, SYSTEM, MASCHINE, Protection, Malware Protection, Starting, 
Protection, 10.08.2014 13:15:04, SYSTEM, MASCHINE, Protection, Malware Protection, Started, 
Protection, 10.08.2014 13:15:04, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Starting, 
Protection, 10.08.2014 13:15:22, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Started, 
Update, 10.08.2014 13:19:27, SYSTEM, MASCHINE, Manual, Malware Database, 2014.8.9.7, 2014.8.10.2, 
Protection, 10.08.2014 13:19:28, SYSTEM, MASCHINE, Protection, Refresh, Starting, 
Protection, 10.08.2014 13:19:28, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Stopping, 
Protection, 10.08.2014 13:19:29, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Stopped, 
Protection, 10.08.2014 13:20:04, SYSTEM, MASCHINE, Protection, Refresh, Success, 
Protection, 10.08.2014 13:20:05, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Starting, 
Protection, 10.08.2014 13:20:06, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Started, 
Update, 10.08.2014 14:02:04, SYSTEM, MASCHINE, Scheduler, Malware Database, 2014.8.10.2, 2014.8.10.3, 
Protection, 10.08.2014 14:02:16, SYSTEM, MASCHINE, Protection, Refresh, Starting, 
Protection, 10.08.2014 14:02:16, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Stopping, 
Protection, 10.08.2014 14:02:16, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Stopped, 
Protection, 10.08.2014 14:02:20, SYSTEM, MASCHINE, Protection, Refresh, Success, 
Protection, 10.08.2014 14:02:20, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Starting, 
Protection, 10.08.2014 14:02:20, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Started, 
Protection, 10.08.2014 14:19:38, SYSTEM, MASCHINE, Protection, Malware Protection, Starting, 
Protection, 10.08.2014 14:19:38, SYSTEM, MASCHINE, Protection, Malware Protection, Started, 
Protection, 10.08.2014 14:19:38, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Starting, 
Protection, 10.08.2014 14:20:00, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Started, 
Detection, 10.08.2014 14:26:28, SYSTEM, MASCHINE, Protection, Malicious Website Protection, IP, 80.82.79.163, 21320, Inbound, C:\Windows\System32\svchost.exe, 
Detection, 10.08.2014 14:26:28, SYSTEM, MASCHINE, Protection, Malicious Website Protection, IP, 80.82.79.163, 21320, Inbound, C:\Windows\System32\svchost.exe, 
Detection, 10.08.2014 15:30:02, SYSTEM, MASCHINE, Protection, Malicious Website Protection, IP, 80.82.64.33, 2083, Inbound, C:\Windows\System32\svchost.exe, 
Detection, 10.08.2014 15:30:02, SYSTEM, MASCHINE, Protection, Malicious Website Protection, IP, 80.82.64.33, 2083, Inbound, C:\Windows\System32\svchost.exe, 
Detection, 10.08.2014 15:51:37, SYSTEM, MASCHINE, Protection, Malicious Website Protection, IP, 80.82.79.163, 21320, Inbound, C:\Windows\System32\svchost.exe, 
Protection, 10.08.2014 17:23:46, SYSTEM, MASCHINE, Protection, Malware Protection, Starting, 
Protection, 10.08.2014 17:23:46, SYSTEM, MASCHINE, Protection, Malware Protection, Started, 
Protection, 10.08.2014 17:23:46, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Starting, 
Protection, 10.08.2014 17:23:58, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Started, 
Update, 10.08.2014 17:42:58, SYSTEM, MASCHINE, Scheduler, Malware Database, 2014.8.10.3, 2014.8.10.4, 
Protection, 10.08.2014 17:43:00, SYSTEM, MASCHINE, Protection, Refresh, Starting, 
Protection, 10.08.2014 17:43:00, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Stopping, 
Protection, 10.08.2014 17:43:00, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Stopped, 
Protection, 10.08.2014 17:43:04, SYSTEM, MASCHINE, Protection, Refresh, Success, 
Protection, 10.08.2014 17:43:04, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Starting, 
Protection, 10.08.2014 17:43:05, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Started, 
Protection, 10.08.2014 18:15:07, SYSTEM, MASCHINE, Protection, Malware Protection, Starting, 
Protection, 10.08.2014 18:15:07, SYSTEM, MASCHINE, Protection, Malware Protection, Started, 
Protection, 10.08.2014 18:15:07, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Starting, 
Protection, 10.08.2014 18:16:21, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Started, 
Detection, 10.08.2014 18:55:22, SYSTEM, MASCHINE, Protection, Malicious Website Protection, IP, 80.82.79.163, 21320, Inbound, C:\Windows\System32\svchost.exe, 
Detection, 10.08.2014 18:55:22, SYSTEM, MASCHINE, Protection, Malicious Website Protection, IP, 80.82.79.163, 21320, Inbound, C:\Windows\System32\svchost.exe, 
Detection, 10.08.2014 19:19:48, SYSTEM, MASCHINE, Protection, Malicious Website Protection, IP, 222.186.42.40, 22, Inbound, C:\Windows\System32\svchost.exe, 
Detection, 10.08.2014 19:19:49, SYSTEM, MASCHINE, Protection, Malicious Website Protection, IP, 222.186.42.40, 22, Inbound, C:\Windows\System32\svchost.exe, 
Detection, 10.08.2014 19:23:49, SYSTEM, MASCHINE, Protection, Malicious Website Protection, IP, 80.82.70.156, 21320, Inbound, C:\Windows\System32\svchost.exe, 
Detection, 10.08.2014 19:23:49, SYSTEM, MASCHINE, Protection, Malicious Website Protection, IP, 80.82.70.156, 21320, Inbound, C:\Windows\System32\svchost.exe, 
Detection, 10.08.2014 19:23:49, SYSTEM, MASCHINE, Protection, Malicious Website Protection, IP, 80.82.70.156, 21320, Inbound, C:\Windows\System32\svchost.exe, 
Protection, 10.08.2014 19:30:19, SYSTEM, MASCHINE, Protection, Malware Protection, Starting, 
Protection, 10.08.2014 19:30:19, SYSTEM, MASCHINE, Protection, Malware Protection, Started, 
Protection, 10.08.2014 19:30:20, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Starting, 
Protection, 10.08.2014 19:30:49, SYSTEM, MASCHINE, Protection, Malicious Website Protection, Started, 

(end)
         

kommen die Meldungen immer, wenn du auf einer besonderen Seite bist? Oder irgendwas spezielles machst?

Nein, der PC muss nur laufen und mit dem Internet verbunden sein :/

befindet sich dein Rechner hinter einem Router?

Ich denke mal dass das ein Router ist ^^ Teledat 311 LAN steht da drauf.

hast du noch ein anderes Gerät, dass ganz ähnlich ausschaut und mit diesem Modem verbunden ist? Bzw. ist dein PC direkt mit diesem Gerät das du genannt hast verbunden?

is direkt verbunden

du hast schon eine Firewall aktiv oder? Am besten auch mal auf Standardeinstellungen zurücksetzen.

Ja die Windows Firewall ist aktiv und MSE läuft auch.