hi,

Drücke bitte die + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

HKU\Underclass_Hero\...\Winlogon: [Shell] explorer.exe,C:\Users\Underclass_Hero\AppData\Roaming\skype.dat [167936 2009-04-10] () <==== ATTENTION
C:\Users\Underclass_Hero\AppData\Roaming\skype.dat
C:\Users\Underclass_Hero\AppData\Roaming\skype.ini
C:\ProgramData\0tbpw.pad
C:\ProgramData\4910585.pad
C:\ProgramData\9tBEnPT.pad
C:\ProgramData\ms0003B3F3.dat
C:\ProgramData\slpcsrj.pad
         

Speichere diese bitte als Fixlist.txt auf deinem USB Stick.

• Starte deinen Rechner erneut in die Reparaturoptionen
• Starte nun die FRST.exe erneut und klicke den Entfernen Button.

Das Tool erstellt eine Fixlog.txt auf deinem USB Stick. Poste den Inhalt bitte hier.


Rechner normal starten.

hier der Log:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 30-10-2013
Ran by SYSTEM at 2013-10-31 14:38:37 Run:1
Running from G:\
Boot Mode: Recovery
==============================================

Content of fixlist:
*****************
HKU\Underclass_Hero\...\Winlogon: [Shell] explorer.exe,C:\Users\Underclass_Hero\AppData\Roaming\skype.dat [167936 2009-04-10] () <==== ATTENTION
C:\Users\Underclass_Hero\AppData\Roaming\skype.dat
C:\Users\Underclass_Hero\AppData\Roaming\skype.ini
C:\ProgramData\0tbpw.pad
C:\ProgramData\4910585.pad
C:\ProgramData\9tBEnPT.pad
C:\ProgramData\ms0003B3F3.dat
C:\ProgramData\slpcsrj.pad
*****************

HKU\Underclass_Hero\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => Value deleted successfully.
C:\Users\Underclass_Hero\AppData\Roaming\skype.dat => Moved successfully.
C:\Users\Underclass_Hero\AppData\Roaming\skype.ini => Moved successfully.
C:\ProgramData\0tbpw.pad => Moved successfully.
C:\ProgramData\4910585.pad => Moved successfully.
C:\ProgramData\9tBEnPT.pad => Moved successfully.
C:\ProgramData\ms0003B3F3.dat => Moved successfully.
C:\ProgramData\slpcsrj.pad => Moved successfully.

==== End of Fixlog ====