hi,

Drücke bitte die + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

HKU\Regina-Web\...\Winlogon: [Shell] explorer.exe,C:\Users\Regina-Web\AppData\Roaming\data.dat [70160 2013-08-01] () <==== ATTENTION 
Startup: C:\Users\Regina-Web\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\3fbblcrj.lnk
ShortcutTarget: 3fbblcrj.lnk -> C:\PROGRA~3\jrclbbf3.plz ()
C:\ProgramData\3fbblcrj.ctrl
C:\ProgramData\3fbblcrj.reg
C:\ProgramData\dclago.dat
C:\ProgramData\jrclbbf3.plz
C:\ProgramData\qabijr.dat
C:\Users\Regina-Web\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\3fbblcrj.lnk
C:\Users\Regina-Web\AppData\Roaming\data.dat
C:\Users\Regina-Web\AppData\Roaming\data.ini
         

Speichere diese bitte als Fixlist.txt auf deinem USB Stick.

• Starte deinen Rechner erneut in die Reparaturoptionen
• Starte nun die FRST.exe erneut und klicke den Entfernen Button.

Das Tool erstellt eine Fixlog.txt auf deinem USB Stick. Poste den Inhalt bitte hier.


Rechner normal starten

Vielen vielen Dank für die schnelle Antwort...

Rechner startet... sieht gut aus...

was meint der Fachmann?

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 16-09-2013 01
Ran by SYSTEM at 2013-09-16 21:55:29 Run:1
Running from F:\
Boot Mode: Recovery
==============================================

Content of fixlist:
*****************
HKU\Regina-Web\...\Winlogon: [Shell] explorer.exe,C:\Users\Regina-Web\AppData\Roaming\data.dat [70160 2013-08-01] () <==== ATTENTION
Startup: C:\Users\Regina-Web\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\3fbblcrj.lnk
ShortcutTarget: 3fbblcrj.lnk -> C:\PROGRA~3\jrclbbf3.plz ()
C:\ProgramData\3fbblcrj.ctrl
C:\ProgramData\3fbblcrj.reg
C:\ProgramData\dclago.dat
C:\ProgramData\jrclbbf3.plz
C:\ProgramData\qabijr.dat
C:\Users\Regina-Web\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\3fbblcrj.lnk
C:\Users\Regina-Web\AppData\Roaming\data.dat
C:\Users\Regina-Web\AppData\Roaming\data.ini

*****************

HKU\Regina-Web\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => Value deleted successfully.
C:\Users\Regina-Web\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\3fbblcrj.lnk => Moved successfully.
C:\PROGRA~3\jrclbbf3.plz => Moved successfully.
C:\ProgramData\3fbblcrj.ctrl => Moved successfully.
C:\ProgramData\3fbblcrj.reg => Moved successfully.
C:\ProgramData\dclago.dat => Moved successfully.
"C:\ProgramData\jrclbbf3.plz" => File/Directory not found.
C:\ProgramData\qabijr.dat => Moved successfully.
"C:\Users\Regina-Web\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\3fbblcrj.lnk" => File/Directory not found.
C:\Users\Regina-Web\AppData\Roaming\data.dat => Moved successfully.
"C:\Users\Regina-Web\AppData\Roaming\data.ini" => File/Directory not found.

==== End of Fixlog ====