System wurde [...] blockiert

Skillcaps

Hey auch ich habe das "Glück", dass mein Administrator-Konto futsch ist.
Habe aus einem anderen beitrag mal die srep.exe laufen lassen im gesicherten modus.
Meine Shell Datei sieht jetzt so aus:


WIN_VISTA X86
Running from J:\

HKLM\..\Winlogon; Shell = explorer.exe [ Microsoft Corporation ]
.
.
.
HKCU\..\Winlogon; Shell not found
.


[System Process]
System
smss.exe
csrss.exe
csrss.exe
wininit.exe
winlogon.exe
services.exe
lsass.exe
lsm.exe
svchost.exe
svchost.exe
svchost.exe
svchost.exe
svchost.exe
svchost.exe
cmd.exe
srep.exe
WmiPrvSE.exe


HKLM\..\Run [Windows Defender] = %ProgramFiles%\Windows Defender\MSASCui.exe -hide
HKLM\..\Run [hpsysdrv] = c:\hp\support\hpsysdrv.exe
HKLM\..\Run [KBD] = C:\HP\KBD\KbdStub.EXE
HKLM\..\Run [OsdMaestro] = "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
HKLM\..\Run [RtHDVCpl] = RtHDVCpl.exe
HKLM\..\Run [HP Software Update] = c:\Program Files\HP\HP Software Update\HPWuSchd2.exe
HKLM\..\Run [] =
HKLM\..\Run [NvCplDaemon] = RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\..\Run [avgnt] = "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
HKLM\..\Run [netset] = C:\Windows\System32\netset.exe
HKLM\..\Run [GrooveMonitor] = "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
HKLM\..\Run [DivXUpdate] = "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
HKLM\..\Run [SunJavaUpdateSched] = "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
HKLM\..\Run [TkBellExe] = "c:\program files\real\realplayer\Update\realsched.exe" -osboot
HKLM\..\Run [MSConfig] = "C:\Windows\System32\msconfig.exe" /auto

HKCU\..\Run [Sidebar] = C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
HKCU\..\Run [WindowsWelcomeCenter] = rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKCU\..\Run [ehTray.exe] = C:\Windows\ehome\ehTray.exe
HKCU\..\Run [ICQ] = "C:\Program Files\ICQ7.6\ICQ.exe" silent loginmode=4
HKCU\..\Run [WMPNSCFG] = C:\Program Files\Windows Media Player\WMPNSCFG.exe
HKCU\..\Run [{6FE23060-2A0C-11DF-BBB3-806E6F6E6963}] = C:\Users\Mr. Skillcap\AppData\Roaming\Microsoft\dllhsts.exe

HKU\.DEFAULT\..\Winlogon; Shell =
HKU\S-1-5-19\..\Winlogon; Shell =
HKU\S-1-5-20\..\Winlogon; Shell =
HKU\S-1-5-21-4072944325-798613960-277523342-1000\..\Winlogon; Shell =
HKU\S-1-5-21-4072944325-798613960-277523342-1000_Classes\..\Winlogon; Shell =
HKU\S-1-5-18\..\Winlogon; Shell =

HKU\S-1-5-19\..\Run [Sidebar] = %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
HKU\S-1-5-19\..\Run [WindowsWelcomeCenter] = rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\..\Run [Sidebar] = %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
HKU\S-1-5-20\..\Run [WindowsWelcomeCenter] = rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-4072944325-798613960-277523342-1000\..\Run [Sidebar] = C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
HKU\S-1-5-21-4072944325-798613960-277523342-1000\..\Run [WindowsWelcomeCenter] = rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-4072944325-798613960-277523342-1000\..\Run [ehTray.exe] = C:\Windows\ehome\ehTray.exe
HKU\S-1-5-21-4072944325-798613960-277523342-1000\..\Run [ICQ] = "C:\Program Files\ICQ7.6\ICQ.exe" silent loginmode=4
HKU\S-1-5-21-4072944325-798613960-277523342-1000\..\Run [WMPNSCFG] = C:\Program Files\Windows Media Player\WMPNSCFG.exe
HKU\S-1-5-21-4072944325-798613960-277523342-1000\..\Run [{6FE23060-2A0C-11DF-BBB3-806E6F6E6963}] = C:\Users\Mr. Skillcap\AppData\Roaming\Microsoft\dllhsts.exe

==== FINISH 22.12-22.38 ====






Funkionieren tut es noch immer nicht. Was tun?


lG