Problem z uruchomieniem \SysMenu.dll

senthon · 4 Czerwiec 2015 07:55

Witam,

Przy starcie systemu lub wejściu na przeglądarkę pojawiają się 2x okienka: Wystąpił problem podczas uruchomiane pliku C:\PROGRA~1\COMMON~1\System\SysMenu.dll Nie można odnaleźć określonego modułu.

http://wklej.org/id/1729350/

http://wklej.org/id/1729351/

http://wklej.org/id/1729352/

Z góry dziękuję za każdą pomoc.

Atis · 4 Czerwiec 2015 08:18

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

CloseProcesses:
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-1702498427-2513449354-3355369947-1001\...\Winlogon: [Shell] "C:\Users\hektor\AppData\Roaming\J2Jz5vHuFLRvlmVN\8IvrejWbvTvE.exe",explorer.exe <==== ATTENTION 
Startup: C:\Users\hektor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Fifa 15 Crack Hack.lnk [2015-01-27]
Startup: C:\Users\hektor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Torpedo.lnk [2015-03-01]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220141207
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220141207
HKU\S-1-5-21-1702498427-2513449354-3355369947-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://mysearch.avg.com/?cid={A79D520C-C15B-4C6F-A8BA-CE14E5433CB2}&mid=50d1eb294c2a47d2a1e0c564610a3e67-58e2f05f54dfd858ea1117b382d05bc0f7385a82&lang=pl&ds=AVG&coid=avgtbavg&cmpid=0415av&pr=fr&d=2015-05-02 09:31:40&v=4.1.0.411&pid=wtu&sg=&sap=hp
HKU\S-1-5-21-1702498427-2513449354-3355369947-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = www.wp.pl/?src01=dp220141207
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1702498427-2513449354-3355369947-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = https://mysearch.avg.com/search?cid={A79D520C-C15B-4C6F-A8BA-CE14E5433CB2}&mid=50d1eb294c2a47d2a1e0c564610a3e67-58e2f05f54dfd858ea1117b382d05bc0f7385a82&lang=pl&ds=AVG&coid=avgtbavg&cmpid=0415av&pr=fr&d=2015-05-02 09:31:40&v=4.1.0.411&pid=wtu&sg=&sap=dsp&q={searchTerms}
BHO: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> No File
S3 zte_cdc_acm; C:\Windows\system32\DRIVERS\zte_cdc_acm.sys [79872 2011-08-10] (ZTE) [File not signed]
S0 BMLoad; system32\drivers\BMLoad.sys [X]
S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [X]
S1 tcpipBM; \??\C:\WINDOWS\system32\drivers\tcpipBM.sys [X]
C:\Users\hektor\AppData\Roaming\*.exe
2015-02-13 08:57 - 2015-05-06 13:56 - 0000020 _____ () C:\Users\hektor\AppData\Roaming\appdataFr3.bin
2015-01-11 18:19 - 2015-02-14 20:35 - 0081669 _____ () C:\Users\hektor\AppData\Roaming\no
2014-09-01 10:18 - 2014-09-01 10:18 - 0001248 _____ () C:\Users\hektor\AppData\Roaming\PQDLB
2014-09-01 10:18 - 2014-09-01 10:18 - 0002086 _____ () C:\Users\hektor\AppData\Roaming\TOQ
2015-05-26 12:10 - 2015-05-26 12:10 - 00000000 ___HD C:\Users\hektor\AppData\Roaming\J2Jz5vHuFLRvlmVN
Task: {25E1B2D6-267E-4357-BF98-DF3655F1BF9A} - System32\Tasks\1214avUpdateInfo => C:\ProgramData\Avg_Update_1214av\1214av_AVG-Secure-Search-Update.exe [2014-10-26] ()
Task: {3611DF4B-D121-48E7-8632-083E25D40411} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {DD8B0270-4171-45A3-B840-5905F2C63155} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: C:\WINDOWS\Tasks\1214avUpdateInfo.job => C:\ProgramData\Avg_Update_1214av\1214av_AVG-Secure-Search-Update.exe
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
EmptyTemp:

Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.

Kliknij Scan i pokaż nowy raport z FRST bez Addition i Shortcut.