Problem: Rechner mit Windows 7 fährt hoch, dann erscheint weißer Bildschirm. Nach Start im abgesicherten Modus fährt sich der Rechner wieder automatisch runter.

Habe nun nach Anleitung einen Scan mit Farbars Recovery Scan Tool durchgeführt mit folgendem Ergebnis:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-02-2014 01
Ran by SYSTEM on MININT-BC6RCDH on 14-02-2014 09:41:55
Running from H:\
Windows 7 Home Premium (X64) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.


The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6602856 2011-01-11] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2480936 2010-12-20] (Synaptics Incorporated)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [615584 2011-03-01] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379552 2011-03-01] (Atheros Commnucations)
HKLM\...\Run: [HPWirelessAssistant] - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe [363064 2010-07-21] (Hewlett-Packard Company)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2011-08-17] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-13] (Intel Corporation)
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [586296 2010-11-09] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [PDF Complete] - C:\Program Files (x86)\PDF Complete\pdfsty.exe [656920 2011-01-31] (PDF Complete Inc)
HKLM-x32\...\Run: [HPOSD] - C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [318520 2010-12-13] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [248552 2010-05-14] (Sun Microsystems, Inc.)
HKU\hajo beyer\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19603048 2013-06-03] (Skype Technologies S.A.)
HKU\hajo beyer\...\Winlogon: [Shell] explorer.exe,C:\Users\hajo beyer\AppData\Roaming\cache.dat [62976 2011-11-16] () <==== ATTENTION 

==================== Services (Whitelisted) =================

S2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [138400 2011-03-01] (Atheros)
S2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe [130008 2011-04-16] (Symantec Corporation)
S2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1127448 2011-01-31] (PDF Complete Inc)
S2 XobniService; C:\Program Files (x86)\Xobni\XobniService.exe [62184 2011-02-24] (Xobni Corporation)

==================== Drivers (Whitelisted) ====================

S1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\BASHDefs\20121130.005\BHDrvx64.sys [1384608 2012-10-23] (Symantec Corporation)
S1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2012-10-17] (Symantec Corporation)
S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [138912 2012-10-17] (Symantec Corporation)
S1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\IPSDefs\20121202.001\IDSvia64.sys [513184 2012-11-07] (Symantec Corporation)
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\VirusDefs\20121204.003\ENG64.SYS [126112 2012-11-06] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\VirusDefs\20121204.003\EX64.SYS [2084000 2012-11-06] (Symantec Corporation)
S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1207020.003\SRTSP64.SYS [744568 2011-03-30] (Symantec Corporation)
S1 SRTSPX; C:\Windows\system32\drivers\NISx64\1207020.003\SRTSPX64.SYS [40568 2011-03-30] (Symantec Corporation)
S0 SymDS; C:\Windows\System32\drivers\NISx64\1207020.003\SYMDS64.SYS [450680 2011-01-26] (Symantec Corporation)
S0 SymEFA; C:\Windows\System32\drivers\NISx64\1207020.003\SYMEFA64.SYS [912504 2011-03-14] (Symantec Corporation)
S3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [174200 2012-10-17] (Symantec Corporation)
S1 SymIRON; C:\Windows\system32\drivers\NISx64\1207020.003\Ironx64.SYS [171128 2011-01-26] (Symantec Corporation)
S1 SymNetS; C:\Windows\System32\Drivers\NISx64\1207020.003\SYMNETS.SYS [386168 2011-04-20] (Symantec Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-14 09:40 - 2014-02-14 09:41 - 00000000 ____D () C:\FRST

==================== One Month Modified Files and Folders =======

2014-02-14 09:41 - 2014-02-14 09:40 - 00000000 ____D () C:\FRST
2014-02-13 00:37 - 2012-04-07 00:32 - 01855328 _____ () C:\Windows\WindowsUpdate.log
2014-02-13 00:37 - 2009-07-13 20:45 - 00031856 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-13 00:37 - 2009-07-13 20:45 - 00031856 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-13 00:33 - 2011-11-15 05:41 - 00000000 ____D () C:\ProgramData\PDFC
2014-02-13 00:32 - 2009-07-13 21:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-13 00:32 - 2009-07-13 20:51 - 00046677 _____ () C:\Windows\setupact.log
2014-02-13 00:29 - 2013-08-25 13:23 - 00000004 _____ () C:\Users\hajo beyer\AppData\Roaming\cache.ini
2014-02-13 00:28 - 2012-04-07 00:57 - 00000035 _____ () C:\Users\Public\Documents\AtherosServiceConfig.ini
2014-02-13 00:21 - 2011-11-15 13:58 - 00654166 _____ () C:\Windows\System32\perfh007.dat
2014-02-13 00:21 - 2011-11-15 13:58 - 00130006 _____ () C:\Windows\System32\perfc007.dat
2014-02-13 00:21 - 2009-07-13 21:13 - 01498506 _____ () C:\Windows\System32\PerfStringBackup.INI
2014-02-13 00:16 - 2012-10-15 09:02 - 00000000 ____D () C:\Users\hajo beyer\Documents\Bluetooth Folder

Files to move or delete:
====================
C:\Users\hajo beyer\AppData\Roaming\cache.dat
C:\Users\hajo beyer\AppData\Roaming\cache.ini


Some content of TEMP:
====================
C:\Users\hajo beyer\AppData\Local\Temp\Extract.exe
C:\Users\hajo beyer\AppData\Local\Temp\rtqqtpxewxabtjrxj.exe
C:\Users\hajo beyer\AppData\Local\Temp\sp54620.exe
C:\Users\hajo beyer\AppData\Local\Temp\SP54714.exe
C:\Users\hajo beyer\AppData\Local\Temp\UninstallHPSA.exe
C:\Users\hajo beyer\AppData\Local\Temp\UninstallHPTCA.exe
C:\Users\hajo beyer\AppData\Local\Temp\vcredist_x64.exe


==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

Restore point made on: 2013-02-13 11:26:02
Restore point made on: 2013-04-04 08:18:59
Restore point made on: 2013-04-23 01:17:04
Restore point made on: 2013-04-25 03:55:43
Restore point made on: 2013-06-20 14:06:39
Restore point made on: 2013-07-31 11:57:52
Restore point made on: 2013-07-31 12:09:29
Restore point made on: 2013-08-22 03:07:57
Restore point made on: 2014-02-12 23:46:11

==================== Memory info =========================== 

Percentage of memory in use: 17%
Total physical RAM: 3957.86 MB
Available physical RAM: 3246.68 MB
Total Pagefile: 3956 MB
Available Pagefile: 3245.4 MB
Total Virtual: 8192 MB
Available Virtual: 8191.88 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:449.82 GB) (Free:401.49 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (RECOVERY) (Fixed) (Total:15.65 GB) (Free:1.94 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive f: (HP_TOOLS) (Fixed) (Total:0.1 GB) (Free:0.09 GB) FAT32
Drive h: (WS-STICK) (Removable) (Total:1.86 GB) (Free:0.86 GB) FAT32
Drive i: (INTENSO) (Removable) (Total:3.78 GB) (Free:3.7 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (SYSTEM) (Fixed) (Total:0.19 GB) (Free:0.16 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 9FB0C11A)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=450 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=16 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 2 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=2 GB) - (Type=0B)

========================================================
Disk: 2 (Size: 4 GB) (Disk ID: C9AA99EC)
Partition 1: (Not Active) - (Size=4 GB) - (Type=0B)


LastRegBack: 2007-01-01 17:26

==================== End Of Log ============================
         

Was mache ich nun? Bitte um ganz einfache Lösungen

Hallo und

Drücke bitte die + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

HKU\hajo beyer\...\Winlogon: [Shell] explorer.exe,C:\Users\hajo beyer\AppData\Roaming\cache.dat [62976 2011-11-16] () <==== ATTENTION 
C:\Users\hajo beyer\AppData\Roaming\cache.dat
C:\Users\hajo beyer\AppData\Roaming\cache.ini
C:\Users\hajo beyer\AppData\Local\Temp\Extract.exe
C:\Users\hajo beyer\AppData\Local\Temp\rtqqtpxewxabtjrxj.exe
C:\Users\hajo beyer\AppData\Local\Temp\sp54620.exe
C:\Users\hajo beyer\AppData\Local\Temp\SP54714.exe
C:\Users\hajo beyer\AppData\Local\Temp\UninstallHPSA.exe
C:\Users\hajo beyer\AppData\Local\Temp\UninstallHPTCA.exe
C:\Users\hajo beyer\AppData\Local\Temp\vcredist_x64.exe
         

Speichere diese bitte als Fixlist.txt auf deinem USB Stick.

• Starte deinen Rechner erneut in die Reparaturoptionen
• Starte nun die FRST.exe erneut und klicke den Entfernen Button.

Das Tool erstellt eine Fixlog.txt auf deinem USB Stick. Poste den Inhalt bitte hier.