Problem z C:\PROGRA~1\COMMON~1\System\SysMenu.dll

Dla specjalistów Bezpieczeństwo
#1

Witam mam problem z tym o wyświetla mi się 

C:\PROGRA~1\COMMON~1\System\SysMenu.dll  mam Win 8,1 

Co mogę zrobić aby usunąć ten błąd ?

W załączniku dodaje screnna i  link do wklejki 

http://www.wklej.org/id/1737768/

 

 

Pozdrawiam 

post-203601-0-33889600-1434276320_thumb.

#2

Otwórz notatnik systemowy i wklej:

CloseProcesses:
Task: {0EE7F0DA-D9E7-4DB6-AB80-DD9CA98ED673} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {2E30F6E1-0FC5-4BB0-9B13-F9A9B41919AB} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {9CBD346D-4976-4566-9658-BA0FE1A7E318} - System32\Tasks\{A1DA7694-D5EF-47C6-A3B1-906FD4B381EF} => pcalua.exe -a C:\Users\Jakub\AppData\Roaming\mystartsearch\UninstallManager.exe -c -ptid=smt
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [33648 2007-08-24] (Microsoft Corporation)
HKLM-x32\...\Run: [mbot_pl_175] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation)
HKU\S-1-5-21-3738601143-3523907461-1385081510-1001\...\Run: [ViStart] => C:\Users\Jakub\AppData\Roaming\ViStart\ViStart.exe
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
OPR Extension: (Sense) - C:\Users\Jakub\AppData\Roaming\Opera Software\Opera Stable\Extensions\knlpigpfaognbholppaembpfphilacie [2015-01-30]
OPR Extension: (Ge-Force) - C:\Users\Jakub\AppData\Roaming\Opera Software\Opera Stable\Extensions\nhjehbmopbfbomhchfkhbghcehpeiijl [2015-01-30]
S3 pccsmcfd; \SystemRoot\system32\DRIVERS\pccsmcfdx64.sys [X]
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

#3

działa dziękuje. 

#4

Skasuj folder C:\FRST