ntkmlpa.exe!KelnsertQueueDpc+0x265 50% PC Auslastung

JaggerJack · 14.02.2015, 01:20

Hallo ich habe dieses Problem seit 1 Woche unszwar macht der Prozess ntkmlpa.exe!KelnsertQueueDpc+0x265 eine PC Auslastung von 50% das geht nie unter 50%
das nervt mich langsam und ich weiß nicht wie ich es beheben kann :/

burningice · 14.02.2015, 01:28

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Bitte poste dein Ergebnis zwischen Code-Tags
Wenn ein Log zu lange ist, teile ihn bitte auf mehrere Antworten.

Code-Tags?

Drücke einfach die # in Antwortfenster und füge den Log dazwischen ein

JaggerJack · 14.02.2015, 01:45

FRST :
FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-02-2015
Ran by Anon (administrator) on ANON-PC on 14-02-2015 01:39:31
Running from C:\Users\Anon\Downloads
Loaded Profiles: Anon & UpdatusUser (Available profiles: Anon & UpdatusUser)
Platform: Microsoft Windows 7 Home Premium  (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\System32\UI0Detect.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.26.9\GoogleCrashHandler.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [126712 2015-01-19] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [703280 2015-02-04] (Avira Operations GmbH & Co. KG)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-2054903393-4183559245-1667421128-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Anon\AppData\Roaming\Mozilla\Firefox\Profiles\a2bt8iwy.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Extension: Avira Browser Safety - C:\Users\Anon\AppData\Roaming\Mozilla\Firefox\Profiles\a2bt8iwy.default\Extensions\abs@avira.com [2015-02-13]
FF Extension: Adblock Plus - C:\Users\Anon\AppData\Roaming\Mozilla\Firefox\Profiles\a2bt8iwy.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-13]

Chrome: 
=======
CHR Profile: C:\Users\Anon\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Anon\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-14]
CHR Extension: (Google Search) - C:\Users\Anon\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-14]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [432888 2015-02-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [432888 2015-02-04] (Avira Operations GmbH & Co. KG)
S2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [182520 2015-01-19] (Avira Operations GmbH & Co. KG)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105864 2015-02-04] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2015-02-04] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2015-02-04] (Avira Operations GmbH & Co. KG)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2015-02-04] (Avira GmbH)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-14 01:39 - 2015-02-14 01:39 - 00005644 _____ () C:\Users\Anon\Downloads\FRST.txt
2015-02-14 01:39 - 2015-02-14 01:39 - 00000000 ____D () C:\FRST
2015-02-14 01:38 - 2015-02-14 01:38 - 01125376 _____ (Farbar) C:\Users\Anon\Downloads\FRST.exe
2015-02-14 01:27 - 2015-02-14 01:27 - 00002197 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-14 01:27 - 2015-02-14 01:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-02-14 01:26 - 2015-02-14 01:39 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-14 01:26 - 2015-02-14 01:34 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-14 01:26 - 2015-02-14 01:27 - 00000000 ____D () C:\Program Files\Google
2015-02-14 01:25 - 2015-02-14 01:27 - 00000000 ____D () C:\Users\Anon\AppData\Local\Google
2015-02-14 01:24 - 2015-02-14 01:24 - 00000000 ____D () C:\Users\Anon\AppData\Roaming\Macromedia
2015-02-14 01:24 - 2015-02-14 01:24 - 00000000 ____D () C:\Users\Anon\AppData\Roaming\Adobe
2015-02-14 01:24 - 2015-02-14 01:24 - 00000000 ____D () C:\Users\Anon\AppData\Local\Macromedia
2015-02-14 01:23 - 2015-02-14 01:23 - 42653776 _____ (Google Inc.) C:\Users\Anon\Downloads\ChromeStandaloneSetup.exe
2015-02-14 01:12 - 2015-02-14 01:12 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-02-14 01:12 - 2015-02-14 01:12 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-02-14 01:12 - 2015-02-14 01:12 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-14 01:12 - 2015-02-14 01:12 - 00000000 ____D () C:\Windows\system32\Macromed
2015-02-14 01:11 - 2015-02-14 01:17 - 00000000 ____D () C:\Users\Anon\AppData\Local\Adobe
2015-02-14 01:03 - 2015-02-14 01:03 - 00000000 ____D () C:\Users\Anon\AppData\Roaming\WinRAR
2015-02-14 00:57 - 2015-02-14 00:57 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-14 00:57 - 2015-02-14 00:57 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-13 12:05 - 2011-04-09 07:13 - 03957632 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-02-13 12:05 - 2011-04-09 07:13 - 03901824 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-13 12:05 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-02-13 12:04 - 2015-02-13 12:04 - 00000000 ____D () C:\Users\Anon\AppData\Roaming\Avira
2015-02-13 12:04 - 2015-02-04 03:55 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-13 12:04 - 2015-02-04 03:55 - 00482304 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-13 12:04 - 2015-02-04 03:55 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-13 12:04 - 2015-02-04 03:54 - 00767488 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-13 12:04 - 2015-02-04 03:54 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-13 12:04 - 2015-02-04 03:51 - 00886784 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-13 12:04 - 2015-01-28 00:28 - 01167520 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-13 12:04 - 2014-12-04 03:20 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-13 12:04 - 2014-09-15 01:42 - 02377216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-13 12:04 - 2010-12-18 06:29 - 00541184 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-13 12:04 - 2009-10-24 05:00 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2015-02-13 12:04 - 2009-10-24 04:58 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2015-02-13 11:58 - 2015-02-13 11:58 - 00133348 _____ () C:\Windows\PFRO.log
2015-02-13 11:58 - 2015-02-13 11:58 - 00131072 ____N () C:\Windows\Minidump\021315-34984-01.dmp
2015-02-13 11:58 - 2015-02-13 11:58 - 00000000 ____D () C:\Windows\Minidump
2015-02-13 02:03 - 2015-02-13 02:01 - 00037896 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-02-13 01:58 - 2015-02-04 17:51 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-02-13 01:58 - 2015-02-04 17:51 - 00105864 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-02-13 01:58 - 2015-02-04 17:51 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2015-02-13 01:58 - 2015-02-04 17:51 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2015-02-13 01:55 - 2015-02-13 01:55 - 00000000 ____D () C:\Users\Anon\Desktop\GG
2015-02-13 01:54 - 2015-02-13 02:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-02-13 01:54 - 2015-02-13 01:58 - 00000000 ____D () C:\ProgramData\Avira
2015-02-13 01:54 - 2015-02-13 01:58 - 00000000 ____D () C:\Program Files\Avira
2015-02-13 01:54 - 2015-02-13 01:54 - 00057560 _____ () C:\Users\Anon\AppData\Local\GDIPFONTCACHEV1.DAT
2015-02-13 01:54 - 2015-02-13 01:54 - 00001095 _____ () C:\Users\Public\Desktop\Avira.lnk
2015-02-13 01:54 - 2015-02-13 01:54 - 00000000 ____D () C:\ProgramData\Package Cache
2015-02-13 01:53 - 2015-02-13 01:53 - 04515896 _____ (Avira Operations & Co. KG) C:\Users\Anon\Downloads\avira_de_av_5847609749__ws.exe
2015-02-13 01:53 - 2015-02-13 01:53 - 00000000 ____D () C:\Users\Anon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-02-13 01:53 - 2015-02-13 01:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-02-13 01:53 - 2015-02-13 01:53 - 00000000 ____D () C:\Program Files\WinRAR
2015-02-13 01:52 - 2015-02-13 01:52 - 01870680 _____ () C:\Users\Anon\Downloads\wrar520d.exe
2015-02-13 01:50 - 2015-02-13 01:50 - 00001121 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-02-13 01:50 - 2015-02-13 01:50 - 00001109 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-02-13 01:50 - 2015-02-13 01:50 - 00000000 ____D () C:\Users\Anon\AppData\Roaming\Mozilla
2015-02-13 01:50 - 2015-02-13 01:50 - 00000000 ____D () C:\Users\Anon\AppData\Local\Mozilla
2015-02-13 01:50 - 2015-02-13 01:50 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-02-13 01:25 - 2014-12-23 00:50 - 00249488 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-02-13 01:19 - 2015-02-13 01:40 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-02-13 01:19 - 2015-02-13 01:19 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2015-02-13 01:19 - 2015-02-13 01:19 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2015-02-13 01:19 - 2015-02-13 01:19 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2015-02-13 01:19 - 2015-02-13 01:19 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2015-02-13 01:19 - 2015-02-13 01:19 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2015-02-13 01:19 - 2015-02-13 01:19 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2015-02-13 01:19 - 2015-02-13 01:19 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-02-13 01:19 - 2015-02-13 01:19 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2015-02-13 01:19 - 2009-07-14 05:42 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-02-13 01:19 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-02-13 01:18 - 2015-02-13 01:19 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-02-13 01:18 - 2015-02-13 01:18 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-02-13 01:18 - 2013-02-19 21:33 - 00053024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-02-13 01:18 - 2013-01-31 10:01 - 03970848 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-02-13 01:18 - 2013-01-31 10:01 - 02859296 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc.dll
2015-02-13 01:18 - 2013-01-31 10:00 - 02557728 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-02-13 01:18 - 2013-01-31 10:00 - 00634656 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-02-13 01:18 - 2013-01-31 10:00 - 00108832 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-02-13 01:18 - 2013-01-31 10:00 - 00062752 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-02-13 01:16 - 2015-02-14 01:03 - 01472002 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-13 01:13 - 2015-02-13 01:13 - 00001413 _____ () C:\Users\Anon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-02-13 01:12 - 2012-06-02 23:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-02-13 01:12 - 2012-06-02 23:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-02-13 01:12 - 2012-06-02 23:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-02-13 01:12 - 2012-06-02 23:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-02-13 01:11 - 2015-02-13 01:11 - 00000020 ___SH () C:\Users\Anon\ntuser.ini
2015-02-13 01:11 - 2015-02-13 01:11 - 00000000 _SHDL () C:\Users\Anon\Startmenü
2015-02-13 01:11 - 2015-02-13 01:11 - 00000000 _SHDL () C:\Users\Anon\Netzwerkumgebung
2015-02-13 01:11 - 2015-02-13 01:11 - 00000000 _SHDL () C:\Users\Anon\Druckumgebung
2015-02-13 01:11 - 2015-02-13 01:11 - 00000000 _SHDL () C:\Users\Anon\Documents\Eigene Musik
2015-02-13 01:11 - 2015-02-13 01:11 - 00000000 _SHDL () C:\Users\Anon\Documents\Eigene Bilder
2015-02-13 01:11 - 2015-02-13 01:11 - 00000000 _SHDL () C:\Users\Anon\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-02-13 01:11 - 2015-02-13 01:11 - 00000000 _SHDL () C:\Users\Anon\AppData\Local\Verlauf
2015-02-13 01:11 - 2015-02-13 01:11 - 00000000 ____D () C:\Users\Anon\AppData\Local\VirtualStore
2015-02-13 01:11 - 2015-02-13 01:11 - 00000000 ____D () C:\Users\Anon
2015-02-13 01:11 - 2012-06-02 23:19 - 00577048 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-02-13 01:11 - 2012-06-02 23:19 - 00035864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-02-13 01:11 - 2012-06-02 23:12 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-02-13 01:11 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-02-13 01:11 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-02-13 01:11 - 2009-07-14 05:42 - 00000000 ___RD () C:\Users\Anon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-02-13 01:11 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\Anon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\Users\Default\Startmenü
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\ProgramData\Startmenü
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\ProgramData\Dokumente
2015-02-13 01:04 - 2015-02-13 01:04 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2015-02-13 01:04 - 2015-02-13 01:04 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2015-02-13 01:03 - 2015-02-14 01:38 - 00522773 _____ () C:\Windows\WindowsUpdate.log
2015-02-13 01:01 - 2015-02-13 01:03 - 00001313 _____ () C:\Windows\TSSysprep.log
2015-02-13 00:59 - 2015-02-13 01:10 - 00000000 ____D () C:\Windows\Panther
2015-02-13 00:59 - 2015-02-13 00:59 - 00008192 __RSH () C:\BOOTSECT.BAK
2015-02-13 00:59 - 2009-07-14 02:38 - 00383562 __RSH () C:\bootmgr
2015-02-13 00:27 - 2015-02-13 01:10 - 00000000 __SHD () C:\Recovery
2015-02-13 00:27 - 2015-02-13 00:27 - 00000000 _SHDL () C:\Programme

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-14 01:01 - 2009-07-14 05:34 - 00012208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-14 01:01 - 2009-07-14 05:34 - 00012208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-14 00:58 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-14 00:58 - 2009-07-14 05:39 - 00015600 _____ () C:\Windows\setupact.log
2015-02-14 00:58 - 2009-07-14 05:33 - 00266464 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-14 00:57 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\AppCompat
2015-02-13 02:00 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\LiveKernelReports
2015-02-13 01:39 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2015-02-13 01:18 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Help
2015-02-13 01:11 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system32\restore
2015-02-13 01:10 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Default
2015-02-13 01:10 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\Recovery
2015-02-13 01:10 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Windows NT
2015-02-13 01:08 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2015-02-13 01:05 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-02-13 01:04 - 2009-07-14 05:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-02-13 01:04 - 2009-07-14 03:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-02-13 01:01 - 2009-07-14 05:34 - 00001774 _____ () C:\Windows\DtcInstall.log
2015-02-13 00:59 - 2009-07-14 05:57 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2015-02-13 00:59 - 2009-07-14 05:52 - 00028672 _____ () C:\Windows\system32\config\BCD-Template

Some content of TEMP:
====================
C:\Users\Anon\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-13 01:00

==================== End Of Log ============================

--- --- ---

--- --- ---

Addition :

Code:

ATTFilter

Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.

Error: (02/14/2015 00:57:30 AM) (Source: Microsoft-Windows-WHEA-Logger) (EventID: 18) (User: NT-AUTORITÄT)
Description: Schwerwiegender Hardwarefehler.

Gemeldet von Komponente: Prozessorkern
Fehlerquelle: 3
Fehlertyp: 256
Prozessor-ID: 1

Die Detailansicht dieses Eintrags beinhaltet weitere Informationen.

Error: (02/14/2015 00:56:49 AM) (Source: NVENETFD) (EventID: 5008) (User: )
Description: NVIDIA nForce-Netzwerkcontroller : Ungültige Netzwerkadresse entdeckt.

Error: (02/14/2015 00:56:47 AM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 6) (User: NT-AUTORITÄT)
Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.

Error: (02/13/2015 00:00:33 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.


Microsoft Office Sessions:
=========================
Error: (02/14/2015 00:59:47 AM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Fehler beim Verarbeiten von Sitzungsänderung. System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
   bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
   bei System.ServiceProcess.ServiceBase.DeferredSessionChange(Int32 eventType, IntPtr eventData)


==================== Memory info =========================== 

Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 5000+
Percentage of memory in use: 63%
Total physical RAM: 1983.3 MB
Available physical RAM: 714.68 MB
Total Pagefile: 3966.61 MB
Available Pagefile: 2540.35 MB
Total Virtual: 2047.88 MB
Available Virtual: 1898.74 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:914.51 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 78382BC2)
Partition 1: (Active) - (Size=931.4 GB) - (Type=07 NTFS)

==================== End Of Log ============================

PS: Danke für die Schnelle Antwort

burningice · 14.02.2015, 02:03

Zitat:

Running from C:\Users\Anon\Downloads

Leider hast du unsere Anleitung nicht richtig befolgt:
Bitte alle Tools direkt auf den Desktop downloaden bzw. dorthin verschieben und vom Desktop starten, da unsere Anleitungen daraufhin ausgelegt sind.
Zudem lassen sich dann am Ende der Bereinigung alle verwendeten Tools sehr einfach entfernen.
Alle Tools bis zum Ende der Bereinigung auf dem Desktop lassen, evtl. benötigen wir manche öfter.

Zudem ist die Addition.txt mehr als unvollständig.

Bitte verschiebe FRST auf den Desktop, vergewissere dich, dass der Haken bei Addition gesetzt ist und poste bitte neue Logfiles.

JaggerJack · 14.02.2015, 02:14

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-02-2015
Ran by Anon (administrator) on ANON-PC on 14-02-2015 02:11:11
Running from C:\Users\Anon\Desktop
Loaded Profiles: Anon & UpdatusUser (Available profiles: Anon & UpdatusUser)
Platform: Microsoft Windows 7 Home Premium  (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
(Microsoft Corporation) C:\Windows\System32\UI0Detect.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Farbar) C:\Users\Anon\Desktop\FRST(1).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [126712 2015-01-19] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [703280 2015-02-04] (Avira Operations GmbH & Co. KG)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-2054903393-4183559245-1667421128-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Anon\AppData\Roaming\Mozilla\Firefox\Profiles\a2bt8iwy.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Extension: Avira Browser Safety - C:\Users\Anon\AppData\Roaming\Mozilla\Firefox\Profiles\a2bt8iwy.default\Extensions\abs@avira.com [2015-02-13]
FF Extension: Adblock Plus - C:\Users\Anon\AppData\Roaming\Mozilla\Firefox\Profiles\a2bt8iwy.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-13]

Chrome: 
=======
CHR Profile: C:\Users\Anon\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Anon\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-14]
CHR Extension: (Google Search) - C:\Users\Anon\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-14]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [432888 2015-02-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [432888 2015-02-04] (Avira Operations GmbH & Co. KG)
S2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [182520 2015-01-19] (Avira Operations GmbH & Co. KG)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105864 2015-02-04] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2015-02-04] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2015-02-04] (Avira Operations GmbH & Co. KG)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2015-02-04] (Avira GmbH)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-14 02:11 - 2015-02-14 02:11 - 00005629 _____ () C:\Users\Anon\Desktop\FRST.txt
2015-02-14 02:09 - 2015-02-14 02:09 - 01125376 _____ (Farbar) C:\Users\Anon\Desktop\FRST(1).exe
2015-02-14 01:40 - 2015-02-14 01:41 - 00010321 _____ () C:\Users\Anon\Downloads\Addition.txt
2015-02-14 01:39 - 2015-02-14 02:11 - 00000000 ____D () C:\FRST
2015-02-14 01:39 - 2015-02-14 01:41 - 00022094 _____ () C:\Users\Anon\Downloads\FRST.txt
2015-02-14 01:38 - 2015-02-14 01:38 - 01125376 _____ (Farbar) C:\Users\Anon\Downloads\FRST.exe
2015-02-14 01:27 - 2015-02-14 01:27 - 00002197 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-14 01:27 - 2015-02-14 01:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-02-14 01:26 - 2015-02-14 01:39 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-14 01:26 - 2015-02-14 01:34 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-14 01:26 - 2015-02-14 01:27 - 00000000 ____D () C:\Program Files\Google
2015-02-14 01:25 - 2015-02-14 01:27 - 00000000 ____D () C:\Users\Anon\AppData\Local\Google
2015-02-14 01:24 - 2015-02-14 01:24 - 00000000 ____D () C:\Users\Anon\AppData\Roaming\Macromedia
2015-02-14 01:24 - 2015-02-14 01:24 - 00000000 ____D () C:\Users\Anon\AppData\Roaming\Adobe
2015-02-14 01:24 - 2015-02-14 01:24 - 00000000 ____D () C:\Users\Anon\AppData\Local\Macromedia
2015-02-14 01:23 - 2015-02-14 01:23 - 42653776 _____ (Google Inc.) C:\Users\Anon\Downloads\ChromeStandaloneSetup.exe
2015-02-14 01:12 - 2015-02-14 02:05 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-14 01:12 - 2015-02-14 01:12 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-02-14 01:12 - 2015-02-14 01:12 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-02-14 01:12 - 2015-02-14 01:12 - 00000000 ____D () C:\Windows\system32\Macromed
2015-02-14 01:11 - 2015-02-14 01:17 - 00000000 ____D () C:\Users\Anon\AppData\Local\Adobe
2015-02-14 01:03 - 2015-02-14 01:03 - 00000000 ____D () C:\Users\Anon\AppData\Roaming\WinRAR
2015-02-14 00:57 - 2015-02-14 00:57 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-14 00:57 - 2015-02-14 00:57 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-13 12:05 - 2011-04-09 07:13 - 03957632 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-02-13 12:05 - 2011-04-09 07:13 - 03901824 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-13 12:05 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-02-13 12:04 - 2015-02-13 12:04 - 00000000 ____D () C:\Users\Anon\AppData\Roaming\Avira
2015-02-13 12:04 - 2015-02-04 03:55 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-13 12:04 - 2015-02-04 03:55 - 00482304 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-13 12:04 - 2015-02-04 03:55 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-13 12:04 - 2015-02-04 03:54 - 00767488 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-13 12:04 - 2015-02-04 03:54 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-13 12:04 - 2015-02-04 03:51 - 00886784 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-13 12:04 - 2015-01-28 00:28 - 01167520 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-13 12:04 - 2014-12-04 03:20 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-13 12:04 - 2014-09-15 01:42 - 02377216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-13 12:04 - 2010-12-18 06:29 - 00541184 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-13 12:04 - 2009-10-24 05:00 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2015-02-13 12:04 - 2009-10-24 04:58 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2015-02-13 11:58 - 2015-02-13 11:58 - 00133348 _____ () C:\Windows\PFRO.log
2015-02-13 11:58 - 2015-02-13 11:58 - 00131072 ____N () C:\Windows\Minidump\021315-34984-01.dmp
2015-02-13 11:58 - 2015-02-13 11:58 - 00000000 ____D () C:\Windows\Minidump
2015-02-13 02:03 - 2015-02-13 02:01 - 00037896 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-02-13 01:58 - 2015-02-04 17:51 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-02-13 01:58 - 2015-02-04 17:51 - 00105864 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-02-13 01:58 - 2015-02-04 17:51 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2015-02-13 01:58 - 2015-02-04 17:51 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2015-02-13 01:55 - 2015-02-13 01:55 - 00000000 ____D () C:\Users\Anon\Desktop\GG
2015-02-13 01:54 - 2015-02-13 02:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-02-13 01:54 - 2015-02-13 01:58 - 00000000 ____D () C:\ProgramData\Avira
2015-02-13 01:54 - 2015-02-13 01:58 - 00000000 ____D () C:\Program Files\Avira
2015-02-13 01:54 - 2015-02-13 01:54 - 00057560 _____ () C:\Users\Anon\AppData\Local\GDIPFONTCACHEV1.DAT
2015-02-13 01:54 - 2015-02-13 01:54 - 00001095 _____ () C:\Users\Public\Desktop\Avira.lnk
2015-02-13 01:54 - 2015-02-13 01:54 - 00000000 ____D () C:\ProgramData\Package Cache
2015-02-13 01:53 - 2015-02-13 01:53 - 04515896 _____ (Avira Operations & Co. KG) C:\Users\Anon\Downloads\avira_de_av_5847609749__ws.exe
2015-02-13 01:53 - 2015-02-13 01:53 - 00000000 ____D () C:\Users\Anon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-02-13 01:53 - 2015-02-13 01:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-02-13 01:53 - 2015-02-13 01:53 - 00000000 ____D () C:\Program Files\WinRAR
2015-02-13 01:52 - 2015-02-13 01:52 - 01870680 _____ () C:\Users\Anon\Downloads\wrar520d.exe
2015-02-13 01:50 - 2015-02-13 01:50 - 00001121 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-02-13 01:50 - 2015-02-13 01:50 - 00001109 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-02-13 01:50 - 2015-02-13 01:50 - 00000000 ____D () C:\Users\Anon\AppData\Roaming\Mozilla
2015-02-13 01:50 - 2015-02-13 01:50 - 00000000 ____D () C:\Users\Anon\AppData\Local\Mozilla
2015-02-13 01:50 - 2015-02-13 01:50 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-02-13 01:25 - 2014-12-23 00:50 - 00249488 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-02-13 01:19 - 2015-02-13 01:40 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-02-13 01:19 - 2015-02-13 01:19 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2015-02-13 01:19 - 2015-02-13 01:19 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2015-02-13 01:19 - 2015-02-13 01:19 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2015-02-13 01:19 - 2015-02-13 01:19 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2015-02-13 01:19 - 2015-02-13 01:19 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2015-02-13 01:19 - 2015-02-13 01:19 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2015-02-13 01:19 - 2015-02-13 01:19 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-02-13 01:19 - 2015-02-13 01:19 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2015-02-13 01:19 - 2009-07-14 05:42 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-02-13 01:19 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-02-13 01:18 - 2015-02-13 01:19 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-02-13 01:18 - 2015-02-13 01:18 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-02-13 01:18 - 2013-02-19 21:33 - 00053024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-02-13 01:18 - 2013-01-31 10:01 - 03970848 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-02-13 01:18 - 2013-01-31 10:01 - 02859296 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc.dll
2015-02-13 01:18 - 2013-01-31 10:00 - 02557728 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-02-13 01:18 - 2013-01-31 10:00 - 00634656 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-02-13 01:18 - 2013-01-31 10:00 - 00108832 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-02-13 01:18 - 2013-01-31 10:00 - 00062752 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-02-13 01:16 - 2015-02-14 01:03 - 01472002 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-13 01:13 - 2015-02-13 01:13 - 00001413 _____ () C:\Users\Anon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-02-13 01:12 - 2012-06-02 23:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-02-13 01:12 - 2012-06-02 23:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-02-13 01:12 - 2012-06-02 23:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-02-13 01:12 - 2012-06-02 23:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-02-13 01:11 - 2015-02-13 01:11 - 00000020 ___SH () C:\Users\Anon\ntuser.ini
2015-02-13 01:11 - 2015-02-13 01:11 - 00000000 _SHDL () C:\Users\Anon\Startmenü
2015-02-13 01:11 - 2015-02-13 01:11 - 00000000 _SHDL () C:\Users\Anon\Netzwerkumgebung
2015-02-13 01:11 - 2015-02-13 01:11 - 00000000 _SHDL () C:\Users\Anon\Druckumgebung
2015-02-13 01:11 - 2015-02-13 01:11 - 00000000 _SHDL () C:\Users\Anon\Documents\Eigene Musik
2015-02-13 01:11 - 2015-02-13 01:11 - 00000000 _SHDL () C:\Users\Anon\Documents\Eigene Bilder
2015-02-13 01:11 - 2015-02-13 01:11 - 00000000 _SHDL () C:\Users\Anon\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-02-13 01:11 - 2015-02-13 01:11 - 00000000 _SHDL () C:\Users\Anon\AppData\Local\Verlauf
2015-02-13 01:11 - 2015-02-13 01:11 - 00000000 ____D () C:\Users\Anon\AppData\Local\VirtualStore
2015-02-13 01:11 - 2015-02-13 01:11 - 00000000 ____D () C:\Users\Anon
2015-02-13 01:11 - 2012-06-02 23:19 - 00577048 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-02-13 01:11 - 2012-06-02 23:19 - 00035864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-02-13 01:11 - 2012-06-02 23:12 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-02-13 01:11 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-02-13 01:11 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-02-13 01:11 - 2009-07-14 05:42 - 00000000 ___RD () C:\Users\Anon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-02-13 01:11 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\Anon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\Users\Default\Startmenü
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\ProgramData\Startmenü
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2015-02-13 01:10 - 2015-02-13 01:10 - 00000000 _SHDL () C:\ProgramData\Dokumente
2015-02-13 01:04 - 2015-02-13 01:04 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2015-02-13 01:04 - 2015-02-13 01:04 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2015-02-13 01:03 - 2015-02-14 01:38 - 00522773 _____ () C:\Windows\WindowsUpdate.log
2015-02-13 01:01 - 2015-02-13 01:03 - 00001313 _____ () C:\Windows\TSSysprep.log
2015-02-13 00:59 - 2015-02-13 01:10 - 00000000 ____D () C:\Windows\Panther
2015-02-13 00:59 - 2015-02-13 00:59 - 00008192 __RSH () C:\BOOTSECT.BAK
2015-02-13 00:59 - 2009-07-14 02:38 - 00383562 __RSH () C:\bootmgr
2015-02-13 00:27 - 2015-02-13 01:10 - 00000000 __SHD () C:\Recovery
2015-02-13 00:27 - 2015-02-13 00:27 - 00000000 _SHDL () C:\Programme

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-14 01:01 - 2009-07-14 05:34 - 00012208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-14 01:01 - 2009-07-14 05:34 - 00012208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-14 00:58 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-14 00:58 - 2009-07-14 05:39 - 00015600 _____ () C:\Windows\setupact.log
2015-02-14 00:58 - 2009-07-14 05:33 - 00266464 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-14 00:57 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\AppCompat
2015-02-13 02:00 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\LiveKernelReports
2015-02-13 01:39 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2015-02-13 01:18 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Help
2015-02-13 01:11 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system32\restore
2015-02-13 01:10 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Default
2015-02-13 01:10 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\Recovery
2015-02-13 01:10 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Windows NT
2015-02-13 01:08 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2015-02-13 01:05 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-02-13 01:04 - 2009-07-14 05:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-02-13 01:04 - 2009-07-14 03:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-02-13 01:01 - 2009-07-14 05:34 - 00001774 _____ () C:\Windows\DtcInstall.log
2015-02-13 00:59 - 2009-07-14 05:57 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2015-02-13 00:59 - 2009-07-14 05:52 - 00028672 _____ () C:\Windows\system32\config\BCD-Template

Some content of TEMP:
====================
C:\Users\Anon\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-13 01:00

==================== End Of Log ============================

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 12-02-2015
Ran by Anon at 2015-02-14 02:11:42
Running from C:\Users\Anon\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Avira (HKLM\...\{bd538030-07d4-4999-a525-7fafa2483f56}) (Version: 1.1.30.21727 - Avira Operations & Co. KG)
Avira (Version: 1.1.30.21727 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 15.0.8.624 - Avira)
Google Chrome (HKLM\...\Google Chrome) (Version: 40.0.2214.111 - Google Inc.)
Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.26.9 - Google Inc.) Hidden
Mozilla Firefox 35.0.1 (x86 de) (HKLM\...\Mozilla Firefox 35.0.1 (x86 de)) (Version: 35.0.1 - Mozilla)
NVIDIA Grafiktreiber 307.83 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 307.83 - NVIDIA Corporation)
NVIDIA Update 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.10.8 - NVIDIA Corporation)
WinRAR 5.20 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

13-02-2015 01:11:20 Windows Update
13-02-2015 01:17:03 Windows Update
13-02-2015 12:51:39 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {417AC092-C060-4F34-BBB7-D768F329DDCF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-14] (Adobe Systems Incorporated)
Task: {97696B28-8014-4581-88E4-D4FDE14D2C1A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-02-14] (Google Inc.)
Task: {9BA1A2A5-C222-416A-BCF6-20FE2B4F6B9E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-02-14] (Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2015-02-13 01:18 - 2013-01-31 10:00 - 00079648 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2015-02-13 01:50 - 2015-01-23 11:37 - 03925104 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2015-02-14 01:12 - 2015-02-14 01:12 - 16852144 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2054903393-4183559245-1667421128-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Anon\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== Accounts: =============================

Administrator (S-1-5-21-2054903393-4183559245-1667421128-500 - Administrator - Disabled)
Anon (S-1-5-21-2054903393-4183559245-1667421128-1000 - Administrator - Enabled) => C:\Users\Anon
Gast (S-1-5-21-2054903393-4183559245-1667421128-501 - Limited - Disabled)
UpdatusUser (S-1-5-21-2054903393-4183559245-1667421128-1001 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Faulty Device Manager Devices =============

Name: Coprozessor
Description: Coprozessor
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/14/2015 00:59:47 AM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Fehler beim Verarbeiten von Sitzungsänderung. System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
   bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
   bei System.ServiceProcess.ServiceBase.DeferredSessionChange(Int32 eventType, IntPtr eventData)


System errors:
=============
Error: (02/14/2015 01:00:07 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.

Error: (02/14/2015 00:59:49 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (02/14/2015 00:59:45 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Windows Modules Installer" wurde mit folgendem Fehler beendet: 
%%16405

Error: (02/14/2015 00:59:34 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (02/14/2015 00:58:40 AM) (Source: NVENETFD) (EventID: 5008) (User: )
Description: NVIDIA nForce-Netzwerkcontroller : Ungültige Netzwerkadresse entdeckt.

Error: (02/14/2015 00:58:36 AM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 6) (User: NT-AUTORITÄT)
Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.

Error: (02/14/2015 00:57:30 AM) (Source: Microsoft-Windows-WHEA-Logger) (EventID: 18) (User: NT-AUTORITÄT)
Description: Schwerwiegender Hardwarefehler.

Gemeldet von Komponente: Prozessorkern
Fehlerquelle: 3
Fehlertyp: 256
Prozessor-ID: 1

Die Detailansicht dieses Eintrags beinhaltet weitere Informationen.

Error: (02/14/2015 00:56:49 AM) (Source: NVENETFD) (EventID: 5008) (User: )
Description: NVIDIA nForce-Netzwerkcontroller : Ungültige Netzwerkadresse entdeckt.

Error: (02/14/2015 00:56:47 AM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 6) (User: NT-AUTORITÄT)
Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.

Error: (02/13/2015 00:00:33 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.


Microsoft Office Sessions:
=========================
Error: (02/14/2015 00:59:47 AM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Fehler beim Verarbeiten von Sitzungsänderung. System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
   bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
   bei System.ServiceProcess.ServiceBase.DeferredSessionChange(Int32 eventType, IntPtr eventData)


==================== Memory info =========================== 

Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 5000+
Percentage of memory in use: 58%
Total physical RAM: 1983.3 MB
Available physical RAM: 823.28 MB
Total Pagefile: 3966.61 MB
Available Pagefile: 2484.03 MB
Total Virtual: 2047.88 MB
Available Virtual: 1914.07 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:914.39 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 78382BC2)
Partition 1: (Active) - (Size=931.4 GB) - (Type=07 NTFS)

==================== End Of Log ============================

So besser ?

burningice · 14.02.2015, 02:47

Ich kann dir dazu keine weiteren Sachen mehr sagen, weil ich mich noch in Ausbildung befinde.

Ein Kollege wird das dann übernehmen

Aber was mir auffällt, ist dass dir alleine der Servicepack 1 vom Windows Update und vermutlich der Chipsatztreiber fehlt.

JaggerJack · 14.02.2015, 02:59

Woher weiß ich welchen Chipsatztreiber ich brauch ?

Ok danke Trotzdem

ntkmlpa.exe!KelnsertQueueDpc+0x265 50% PC Auslastung

Netzwerk und Hardware: ntkmlpa.exe!KelnsertQueueDpc+0x265 50% PC Auslastung