RunDLL - Nie można odnaleźć określonego modułu - SysMenu.dll

[naxi]

Witam, 
od jakiegoś czasu pojawia się błąd: Wystąpił problem podczas uruchamiania pliku C:\PROGRA~1\COMMON~1\System\SysMenu.dll. 

Nie można odnaleźć określonego modułu. 

Proszę o pomoc.

 

Wszystkie LOGI w załączniku 

 

@Edit

Dodałem log GMER`a

Addition.txt

FRST.txt

Shortcut.txt

GMER.txt

[naxi]

@reff

[naxi]

@reff

[jessica]

Otwórz Notatnik i wklej w nim:

 

Task: C:\WINDOWS\Tasks\SMupdate1.job => C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll <==== UWAGA
Task: C:\WINDOWS\Tasks\SMupdate2.job => C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll <==== UWAGA
Task: C:\WINDOWS\Tasks\SMupdate3.job => C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll <==== UWAGA
C:\PROGRA~1\COMMON~1\System\SysMenu.dll
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mystartsearch.com/?type=hp&ts=1439228067&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=cmi&uid=ST380013AS_5JV9PJPF
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mystartsearch.com/web/?type=ds&ts=1439228067&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=cmi&uid=ST380013AS_5JV9PJPF&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mystartsearch.com/?type=hp&ts=1439228067&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=cmi&uid=ST380013AS_5JV9PJPF
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1439228067&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=cmi&uid=ST380013AS_5JV9PJPF&q={searchTerms}
HKU\S-1-5-21-790525478-1957994488-682003330-1005\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mystartsearch.com/?type=hp&ts=1439228067&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=cmi&uid=ST380013AS_5JV9PJPF
HKU\S-1-5-21-790525478-1957994488-682003330-1005\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mystartsearch.com/?type=hp&ts=1439228067&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=cmi&uid=ST380013AS_5JV9PJPF
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1439228067&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=cmi&uid=ST380013AS_5JV9PJPF&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1439228067&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=cmi&uid=ST380013AS_5JV9PJPF&q={searchTerms}
SearchScopes: HKU\S-1-5-21-790525478-1957994488-682003330-1005 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=ST380013AS_5JV9PJPF&ts=1439228168&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-790525478-1957994488-682003330-1005 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=ST380013AS_5JV9PJPF&ts=1439228168&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-790525478-1957994488-682003330-1005 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=ST380013AS_5JV9PJPF&ts=1439228168&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-790525478-1957994488-682003330-1005 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=ST380013AS_5JV9PJPF&ts=1439228168&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-790525478-1957994488-682003330-1005 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=ST380013AS_5JV9PJPF&ts=1439228168&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-790525478-1957994488-682003330-1005 -> {szukaj.gazeta.pl} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=ST380013AS_5JV9PJPF&ts=1439228168&type=default&q={searchTerms}
BHO: Coupon Time 1.0.0.7 -> {b7f975e4-2467-475f-9cfd-994f39ab5bb5} -> Brak pliku
Toolbar: HKLM - Brak nazwy - {e6eeb20c-cf4a-4789-becf-64f78340708f} -  Brak pliku
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://start.qone8.com/?type=sc&ts=1400135433&from=tt4u&uid=ST380013AS_5JV9PJPF
S3 cleanhlp; \??\C:\Program Files\Emsisoft Anti-Malware\cleanhlp32.sys [X]
S3 DualCoreCenter; \??\C:\Program Files\MSI\DualCoreCenter\NTGLM7X.sys [X]
S3 EagleXNt; \??\C:\WINDOWS\system32\drivers\EagleXNt.sys [X]
S3 GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS [X]
S3 NTACCESS; \??\D:\NTACCESS.sys [X]
S3 NVR0Dev; \??\C:\WINDOWS\nvoclock.sys [X]
S3 RushTopDevice2; \??\C:\Program Files\MSI\DualCoreCenter\RushTop.sys [X]
S1 wsafd_1_10_0_19; system32\drivers\wsafd_1_10_0_19.sys [X]
S3 XFDriver; \??\C:\Program Files\Xfire2\XFDriver.sys [X]
S1 {f64c1459-b911-4fd8-a74e-36a496bf26e3}t; system32\drivers\{f64c1459-b911-4fd8-a74e-36a496bf26e3}t.sys [X]
C:\Documents and Settings\Naxi\TempWmicBatchFile.bat
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST.exe
Uruchom FRST i kliknij przycisk Fix (NAPRAW).

 

Zrób nowe logi FRST.

 

jessi

[naxi]

Zrobione, ale pod koniec FRST program przestał działać.

 

 

Addition.txt

Fixlog.txt

FRST.txt

Shortcut.txt

[jessica]

Otwórz Notatnik i wklej w nim:

 

DeleteKey: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\upgmsd_pl_005010057.exe
DeleteKey: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\gmsd_pl_005010057
C:\Program Files\gmsd_pl_005010057
ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} =>  Brak pliku
ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} =>  Brak pliku
ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} =>  Brak pliku
ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} =>  Brak pliku
Toolbar: HKLM - Brak nazwy - {e6eeb20c-cf4a-4789-becf-64f78340708f} -  Brak pliku
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://start.qone8.com/?type=sc&ts=1400135433&from=tt4u&uid=ST380013AS_5JV9PJPF
S3 cleanhlp; \??\C:\Program Files\Emsisoft Anti-Malware\cleanhlp32.sys [X]
S3 DualCoreCenter; \??\C:\Program Files\MSI\DualCoreCenter\NTGLM7X.sys [X]
S3 EagleXNt; \??\C:\WINDOWS\system32\drivers\EagleXNt.sys [X]
S3 GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS [X]
S3 NTACCESS; \??\D:\NTACCESS.sys [X]
S3 NVR0Dev; \??\C:\WINDOWS\nvoclock.sys [X]
S3 RushTopDevice2; \??\C:\Program Files\MSI\DualCoreCenter\RushTop.sys [X]
S1 wsafd_1_10_0_19; system32\drivers\wsafd_1_10_0_19.sys [X]
S3 XFDriver; \??\C:\Program Files\Xfire2\XFDriver.sys [X]
S1 {f64c1459-b911-4fd8-a74e-36a496bf26e3}t; system32\drivers\{f64c1459-b911-4fd8-a74e-36a496bf26e3}t.sys [X]
C:\Documents and Settings\Naxi\TempWmicBatchFile.bat
C:\Documents and Settings\TEMP\Pulpit\TeamSpeak 3 Client.lnk
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST.exe
Uruchom FRST i kliknij przycisk Fix (NAPRAW).

 

Potem chyba możemy kończyć:

Otwórz Notatnik i wklej w nim:

 

DeleteQuarantine:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST. Uruchom FRST i kliknij w Fix (NAPRAW).
przez SHIFT+DEL usuń pozostały folder C:\FRST.

 

Uaktualni Javę, wg https://www.fixitpc.pl/topic/5-dezynfekcja-kroki-finalizuj%C4%85ce-temat/?do=findComment&comment=43590

 

jessi