@melnichuk: Thanks a lot for your little tutorial! With "delallv" (delete all values) and "dk" (delete key) i was able to delete the malicious key "\Microsoft\Windows NT\CurrentVersion\Image File...