VIRY.CZ

Zdravím ,přesně po 4 letech.
V roce 2014 jsem měl stejný problém: https://forum.viry.cz/viewtopic.php?f=4&t=140249
Celé 4 roky se to už neobjevilo. Minulý týden jsem si postavil nový počítač+čistá instalace win7 a za tři dny na mě vyskočilo mcxsvc.
Použil jsem rkill,combofix což mcxsvc smazalo,ale po restartu je zpátky ,přesně jako minule.
Tím bych chtěl poprosit o pomoc.

P.S. Log je v zip.

Zdravím!
Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

Předem díky za pomoc.
Adwcleaner nenašel.

Malwarebytes AdwCleaner 7.2.4.0
# -------------------------------
# Build: 09-25-2018
# Database: 2018-10-04.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 10-06-2018
# Duration: 00:00:00
# OS: Windows 7 Professional
# Cleaned: 0
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1257 octets] - [06/10/2018 11:27:44]
AdwCleaner[C00].txt - [1443 octets] - [06/10/2018 11:28:04]
AdwCleaner[S01].txt - [1379 octets] - [06/10/2018 11:30:40]
AdwCleaner[S02].txt - [1440 octets] - [06/10/2018 11:32:03]
AdwCleaner[S03].txt - [1501 octets] - [06/10/2018 11:32:22]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C03].txt ##########

Jistě. Však také mcxsvc je součást oper. systému. Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
C:\Users\Adi\AppData\Local\Temp

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Proč spouštíte ComboFix, utilitu určenou pouze profesionálům? Chcete si poškodit systém?

Fix result of Farbar Recovery Scan Tool (x64) Version: 04.10.2018
Ran by Adi (06-10-2018 13:37:32) Run:3
Running from C:\Users\Adi\Desktop
Loaded Profiles: Adi (Available Profiles: Adi)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
C:\Users\Adi\AppData\Local\Temp

EmptyTemp:
End
*****************

Processes closed successfully.

"C:\Users\Adi\AppData\Local\Temp" folder move:

Could not move "C:\Users\Adi\AppData\Local\Temp" => Scheduled to move on reboot.


=========== EmptyTemp: ==========

BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 4724381 B
Java, Flash, Steam htmlcache => 16445684 B
Windows/system/drivers => 54494 B
Edge => 0 B
Chrome => 0 B
Firefox => 88757121 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 66228 B
NetworkService => 71494 B
Adi => 76002341 B

RecycleBin => 0 B
EmptyTemp: => 177.5 MB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 06-10-2018 13:39:05)

C:\Users\Adi\AppData\Local\Temp => moved successfully

==== End of Fixlog 13:39:05 ====

Právě jsem zapojil tiskárnu a fronta na tisk se mi začne plnit "Místní dokument starší verze" datový typ: RAW Procesor : winprint.
A tiskárna stále tiskne nesmyslné znaky a do fronty stále přibývají nové dokumenty.
Zastavit to jde pouze rkill.

Když už jste dělal sken CF, dejte z něj log.

ComboFix 18-08-08.01 - Adi 06.10.2018 8:34.4.12 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.16318.14369 [GMT 2:00]
Spuštěný z: j:\download mozilla\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Adi\AppData\Roaming\User
c:\users\Adi\AppData\Roaming\User\fussvc.exe
c:\users\Adi\AppData\Roaming\User\mcxsvc.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2018-09-06 do 2018-10-06 )))))))))))))))))))))))))))))))
.
.
2018-10-06 06:35 . 2018-10-06 06:35 -------- d-----w- c:\users\Default\AppData\Local\temp
2018-10-05 19:16 . 2018-10-06 00:10 -------- d-----w- C:\FRST
2018-10-03 17:11 . 2008-01-21 15:43 4244744 ----a-w- c:\windows\SysWow64\qtp-mt334.dll
2018-10-03 17:11 . 2008-01-21 15:43 36368 ----a-w- c:\windows\SysWow64\drivers\hotcore3.sys
2018-10-03 17:11 . 2008-01-21 15:43 13576 ----a-w- c:\windows\SysWow64\wnaspi32.dll
2018-10-03 17:11 . 2008-01-21 15:43 247560 ----a-w- c:\windows\SysWow64\prgiso.dll
2018-10-03 17:11 . 2018-10-03 17:11 -------- d-----w- c:\program files (x86)\Paragon Software
2018-10-03 17:11 . 2018-10-03 17:11 -------- d-----w- c:\program files (x86)\Common Files\InstallShield
2018-10-03 17:01 . 2018-10-03 17:04 -------- d-----w- c:\program files\CCleaner
2018-10-02 21:50 . 2018-10-02 21:50 -------- d-----w- c:\program files (x86)\Rockstar Games
2018-10-02 21:50 . 2018-10-02 21:50 -------- d-----w- c:\program files\Rockstar Games
2018-10-01 15:46 . 2018-10-01 15:46 -------- d-----w- c:\program files (x86)\EPSON Software
2018-10-01 15:45 . 2018-10-01 15:45 -------- d-----w- c:\program files (x86)\epson
2018-10-01 15:45 . 2016-04-18 17:58 145224 ----a-w- c:\windows\system32\escsvc64.exe
2018-10-01 15:45 . 2016-04-18 17:58 147472 ----a-w- c:\windows\SysWow64\twaindsm.dll
2018-10-01 15:45 . 2016-01-18 16:18 474624 ----a-w- c:\windows\system32\esxw2ud.dll
2018-10-01 15:44 . 2018-10-01 15:44 -------- d-----w- c:\program files\Common Files\EPSON
2018-10-01 15:44 . 2015-12-09 02:08 182784 ----a-w- c:\windows\system32\E_YLMBRRE.DLL
2018-10-01 15:44 . 2011-03-15 01:03 83968 ----a-w- c:\windows\system32\E_YD4BRRE.DLL
2018-10-01 15:44 . 2018-10-01 15:46 -------- d-----w- c:\programdata\EPSON
2018-09-30 12:13 . 2018-09-30 12:14 -------- d-----w- C:\totalcmd
2018-09-29 19:27 . 2018-10-05 21:00 -------- d-----w- c:\program files (x86)\Common Files\BattlEye
2018-09-29 19:27 . 2008-10-15 04:22 519000 ----a-w- c:\windows\system32\d3dx10_40.dll
2018-09-29 19:27 . 2008-10-15 04:22 452440 ----a-w- c:\windows\SysWow64\d3dx10_40.dll
2018-09-29 19:27 . 2008-10-15 04:22 2605920 ----a-w- c:\windows\system32\D3DCompiler_40.dll
2018-09-29 19:27 . 2008-10-15 04:22 2036576 ----a-w- c:\windows\SysWow64\D3DCompiler_40.dll
2018-09-29 19:27 . 2008-10-15 04:22 5631312 ----a-w- c:\windows\system32\D3DX9_40.dll
2018-09-29 19:27 . 2008-10-15 04:22 4379984 ----a-w- c:\windows\SysWow64\D3DX9_40.dll
2018-09-29 19:25 . 2018-09-29 19:25 -------- d-----w- c:\program files (x86)\EasyAntiCheat
2018-09-29 17:08 . 2018-09-29 17:08 -------- d-----w- c:\program files (x86)\Futuremark
2018-09-29 17:05 . 2018-09-29 17:05 -------- d-----w- c:\programdata\Futuremark
2018-09-29 16:53 . 2018-09-29 16:53 -------- d-----w- C:\Temp
2018-09-29 16:52 . 2018-09-29 16:52 -------- d-----w- c:\windows\SysWow64\config\systemprofile\.oracle_jre_usage
2018-09-29 16:52 . 2018-09-29 16:52 -------- d-----w- c:\programdata\UL
2018-09-29 16:52 . 2018-09-29 16:52 -------- d-----w- c:\program files\UL
2018-09-29 16:26 . 2018-09-29 16:26 -------- d-----w- c:\program files\Razer Chroma SDK
2018-09-29 16:26 . 2018-09-29 16:26 -------- d-----w- c:\program files (x86)\Razer Chroma SDK
2018-09-29 16:21 . 2018-09-29 16:27 -------- d-----w- c:\programdata\Razer
2018-09-29 16:21 . 2018-09-29 16:26 -------- d-----w- c:\program files (x86)\Razer
2018-09-29 14:41 . 2018-09-29 14:41 -------- d-----w- c:\program files\CPUID
2018-09-29 14:21 . 2018-09-29 14:21 34568 ----a-w- c:\windows\SysWow64\drivers\AsrDrv103.sys
2018-09-29 13:53 . 2018-10-06 00:07 -------- d-----w- c:\program files (x86)\Steam
2018-09-29 13:53 . 2018-09-29 15:43 -------- d-----w- c:\program files (x86)\Common Files\Steam
2018-09-29 13:41 . 2018-09-29 13:41 -------- d-----w- c:\programdata\LOGFILES
2018-09-29 13:38 . 2018-09-29 13:44 -------- d-----w- C:\Hry
2018-09-29 13:21 . 2018-09-29 13:21 -------- d-----w- C:\Intel
2018-09-29 13:21 . 2018-09-29 13:21 -------- d-----w- c:\program files (x86)\VulkanRT
2018-09-29 13:18 . 2018-09-29 13:18 -------- d-----w- c:\program files (x86)\Fatal1ty Utility
2018-09-29 13:18 . 2016-06-19 09:38 20712 ----a-w- c:\windows\system32\drivers\AsrHidFilter.sys
2018-09-29 13:16 . 2018-09-29 12:37 429032 ----a-w- c:\windows\system32\PROUnstl.exe
2018-09-29 13:15 . 2018-09-29 13:15 -------- d-----w- c:\program files (x86)\Intel Driver
2018-09-29 13:15 . 2018-09-29 13:15 22280 ----a-w- c:\windows\SysWow64\drivers\AsrDrv101.sys
2018-09-29 13:14 . 2018-09-29 13:17 -------- d-----w- c:\program files\Intel
2018-09-29 13:12 . 2018-09-29 13:12 -------- d-----w- c:\program files (x86)\ASM106xSATA
2018-09-29 13:11 . 2018-09-29 13:11 -------- d-----w- c:\programdata\ASRock
2018-09-29 13:11 . 2018-09-29 13:19 -------- d-----w- c:\program files (x86)\ASRock Utility
2018-09-29 12:56 . 2018-09-25 20:12 208936 ----a-w- c:\windows\system32\nvaudcap64v.dll
2018-09-29 12:55 . 2018-09-26 13:44 28974128 ----a-w- c:\windows\system32\nvwgf2umx.dll
2018-09-29 12:54 . 2018-09-29 12:56 -------- d-----w- c:\program files\NVIDIA Corporation
2018-09-29 12:52 . 2011-10-01 05:45 886784 ----a-w- c:\program files\Common Files\System\wab32.dll
2018-09-29 12:52 . 2011-10-01 04:37 708608 ----a-w- c:\program files (x86)\Common Files\System\wab32.dll
2018-09-29 12:52 . 2013-10-12 02:32 150016 ----a-w- c:\windows\system32\wshom.ocx
2018-09-29 12:52 . 2013-10-12 02:31 202752 ----a-w- c:\windows\system32\scrrun.dll
2018-09-29 12:52 . 2013-10-12 02:04 121856 ----a-w- c:\windows\SysWow64\wshom.ocx
2018-09-29 12:52 . 2013-10-12 02:03 163840 ----a-w- c:\windows\SysWow64\scrrun.dll
2018-09-29 12:52 . 2013-10-12 01:33 156160 ----a-w- c:\windows\system32\cscript.exe
2018-09-29 12:52 . 2013-10-12 01:33 168960 ----a-w- c:\windows\system32\wscript.exe
2018-09-29 12:52 . 2013-10-12 01:15 141824 ----a-w- c:\windows\SysWow64\wscript.exe
2018-09-29 12:52 . 2013-10-12 01:15 126976 ----a-w- c:\windows\SysWow64\cscript.exe
2018-09-29 12:44 . 2015-02-04 03:16 392192 ----a-w- c:\windows\system32\WMPhoto.dll
2018-09-29 12:44 . 2015-02-04 02:54 318464 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2018-09-29 12:39 . 2018-10-03 17:11 -------- d--h--w- c:\program files (x86)\InstallShield Installation Information
2018-09-29 12:37 . 2018-09-29 12:37 50152 ----a-w- c:\windows\system32\drivers\iqvw64e.sys
2018-09-29 12:37 . 2018-09-29 12:37 2269456 ----a-w- c:\windows\system32\PRONtObj.dll
2018-09-29 12:37 . 2018-09-29 12:37 166992 ----a-w- c:\windows\system32\drivers\iANSW60e.sys
2018-09-29 12:32 . 2018-09-29 12:32 -------- d-----w- c:\program files\DIFX
2018-09-29 12:31 . 2018-09-29 20:01 -------- d-----w- c:\programdata\CLink4
2018-09-29 12:31 . 2018-09-29 12:32 -------- d-----w- c:\program files (x86)\CorsairLink4
2018-09-29 12:25 . 2018-09-29 12:25 -------- d-----w- c:\program files (x86)\Microsoft.NET
2018-09-29 12:25 . 2018-10-05 17:59 -------- d-sh--w- c:\windows\Installer
2018-09-29 12:17 . 2012-02-17 04:58 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2018-09-29 12:17 . 2012-02-17 04:57 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2018-09-29 12:16 . 2018-10-03 16:12 -------- d-----w- c:\program files (x86)\Mozilla Maintenance Service
2018-09-29 12:15 . 2018-09-29 12:15 -------- d-----w- C:\Zaloha
2018-09-29 12:09 . 2013-06-29 04:49 1930240 ----a-w- c:\windows\system32\drivers\athurx.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2018-09-29 12:37 . 2018-05-08 06:03 89584 ----a-w- c:\windows\system32\e1dmsg.dll
2018-09-29 12:37 . 2018-05-08 06:03 536560 ----a-w- c:\windows\system32\drivers\e1d62x64.sys
2018-09-29 12:37 . 2018-05-08 06:03 100336 ----a-w- c:\windows\system32\NicInstD.dll
2018-09-29 12:37 . 2015-06-16 23:29 90608 ----a-w- c:\windows\system32\NicInE1R.dll
2018-09-29 12:37 . 2015-06-04 22:51 76784 ----a-w- c:\windows\system32\e1rmsg.dll
2018-09-29 12:37 . 2015-06-04 22:34 499184 ----a-w- c:\windows\system32\drivers\e1r62x64.sys
2018-09-29 12:37 . 2009-05-26 08:05 36472 ----a-w- c:\windows\system32\NicCo36.dll
2018-08-10 15:54 . 2018-09-29 12:51 190464 ----a-w- c:\windows\system32\rpchttp.dll
2018-08-10 15:41 . 2018-09-29 12:51 141312 ----a-w- c:\windows\SysWow64\rpchttp.dll
2018-08-10 15:39 . 2018-09-29 12:51 44032 ----a-w- c:\windows\apppatch\acwow64.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CorsairLink4"="c:\program files (x86)\CorsairLink4\CorsairLink4.exe" [2018-03-30 27146448]
"EPLTarget\P0000000000000000"="c:\windows\system32\spool\DRIVERS\x64\3\E_YATIRRE.EXE" [2014-11-14 417776]
"wcssvc"="c:\users\Adi\AppData\Roaming\Services\wcssvc.exe" [2012-05-20 4004016]
"fussvc"="c:\users\Adi\AppData\Roaming\User\fussvc.exe" [BU]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Razer Synapse"="c:\program files (x86)\Razer\Synapse\RzSynapse.exe" [2018-06-06 598200]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe;c:\windows\SYSNATIVE\IProsetMonitor.exe [x]
R3 amdhub3;AMD USB 3.0 Hub;c:\windows\system32\drivers\amdhub3.sys;c:\windows\SYSNATIVE\drivers\amdhub3.sys [x]
R3 amdhub30;AMD USB 3.0 Hub Driver;c:\windows\system32\drivers\amdhub30.sys;c:\windows\SYSNATIVE\drivers\amdhub30.sys [x]
R3 amdhub31;AMD USB3.1 Hub Service;c:\windows\system32\drivers\amdhub31.sys;c:\windows\SYSNATIVE\drivers\amdhub31.sys [x]
R3 amdxhc;AMD USB 3.0 Host Controller Driver;c:\windows\system32\drivers\amdxhc.sys;c:\windows\SYSNATIVE\drivers\amdxhc.sys [x]
R3 amdxhc31;AMD XHCI Service;c:\windows\system32\drivers\amdxhc31.sys;c:\windows\SYSNATIVE\drivers\amdxhc31.sys [x]
R3 amdxhci;AMD USB3 Host Controller Driver;c:\windows\system32\drivers\amdxhci.sys;c:\windows\SYSNATIVE\drivers\amdxhci.sys [x]
R3 AsrDrv101;AsrDrv101;c:\windows\SysWOW64\Drivers\AsrDrv101.sys;c:\windows\SysWOW64\Drivers\AsrDrv101.sys [x]
R3 AsrDrv103;AsrDrv103;c:\windows\SysWOW64\Drivers\AsrDrv103.sys;c:\windows\SysWOW64\Drivers\AsrDrv103.sys [x]
R3 AsrKbMsHk;AsrKbMsHk;c:\windows\SysWOW64\Drivers\AsrKbMsHk.sys;c:\windows\SysWOW64\Drivers\AsrKbMsHk.sys [x]
R3 BEService;BattlEye Service;c:\program files (x86)\Common Files\BattlEye\BEService.exe;c:\program files (x86)\Common Files\BattlEye\BEService.exe [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 EasyAntiCheat;EasyAntiCheat;c:\program files (x86)\EasyAntiCheat\EasyAntiCheat.exe;c:\program files (x86)\EasyAntiCheat\EasyAntiCheat.exe [x]
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\System32\Drivers\EtronHub3.sys;c:\windows\SYSNATIVE\Drivers\EtronHub3.sys [x]
R3 EtronSTOR;Etron Enhance USB BOT/UASP Mass Storage Driver;c:\windows\System32\Drivers\EtronSTOR.sys;c:\windows\SYSNATIVE\Drivers\EtronSTOR.sys [x]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\System32\Drivers\EtronXHCI.sys;c:\windows\SYSNATIVE\Drivers\EtronXHCI.sys [x]
R3 FLxHCIc;Fresco Logic xHCI (USB3) Device Driver;c:\windows\system32\drivers\FLxHCIc.sys;c:\windows\SYSNATIVE\drivers\FLxHCIc.sys [x]
R3 FLxHCIh;Fresco Logic xHCI (USB3) Hub Device Driver;c:\windows\system32\drivers\FLxHCIh.sys;c:\windows\SYSNATIVE\drivers\FLxHCIh.sys [x]
R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files (x86)\Futuremark\SystemInfo\FMSISvc.exe;c:\program files (x86)\Futuremark\SystemInfo\FMSISvc.exe [x]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\drivers\nusb3hub.sys;c:\windows\SYSNATIVE\drivers\nusb3hub.sys [x]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\drivers\nusb3xhc.sys;c:\windows\SYSNATIVE\drivers\nusb3xhc.sys [x]
R3 rusb3hub;Renesas Electronics USB 3.0 Hub Driver (Version 3.0);c:\windows\system32\drivers\rusb3hub.sys;c:\windows\SYSNATIVE\drivers\rusb3hub.sys [x]
R3 rusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver (Version 3.0);c:\windows\system32\drivers\rusb3xhc.sys;c:\windows\SYSNATIVE\drivers\rusb3xhc.sys [x]
R3 tihub3;TI USB3 Hub Service;c:\windows\system32\drivers\tihub3.sys;c:\windows\SYSNATIVE\drivers\tihub3.sys [x]
R3 tixhci;TI XHCI Service;c:\windows\system32\drivers\tixhci.sys;c:\windows\SYSNATIVE\drivers\tixhci.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 VUSB3HUB;VIA USB 3 Root Hub Service;c:\windows\system32\drivers\ViaHub3.sys;c:\windows\SYSNATIVE\drivers\ViaHub3.sys [x]
R3 xhcdrv;VIA USB eXtensible Host Controller Service;c:\windows\system32\drivers\xhcdrv.sys;c:\windows\SYSNATIVE\drivers\xhcdrv.sys [x]
S0 asstor64;asstor64;c:\windows\system32\DRIVERS\asstor64.sys;c:\windows\SYSNATIVE\DRIVERS\asstor64.sys [x]
S0 hotcore3;hotcore3;c:\windows\SysWOW64\drivers\hotcore3.sys;c:\windows\SysWOW64\drivers\hotcore3.sys [x]
S0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\drivers\iusb3hcs.sys;c:\windows\SYSNATIVE\drivers\iusb3hcs.sys [x]
S0 stornvme;Ovladač Microsoft Standard NVM Express ;c:\windows\system32\drivers\stornvme.sys;c:\windows\SYSNATIVE\drivers\stornvme.sys [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 EPSON_PM_RPCV4_06;EPSON V3 Service4(06);c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE;c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE [x]
S2 EpsonScanSvc;Epson Scanner Service;c:\windows\system32\EscSvc64.exe;c:\windows\SYSNATIVE\EscSvc64.exe [x]
S2 NVDisplay.ContainerLocalSystem;NVIDIA Display Container LS;c:\program files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe;c:\program files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [x]
S2 NvTelemetryContainer;NVIDIA Telemetry Container;c:\program files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe;c:\program files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [x]
S2 Razer Chroma SDK Server;Razer Chroma SDK Server;c:\program files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe;c:\program files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe [x]
S2 Razer Chroma SDK Service;Razer Chroma SDK Service;c:\program files (x86)\Razer Chroma SDK\bin\RzSDKService.exe;c:\program files (x86)\Razer Chroma SDK\bin\RzSDKService.exe [x]
S3 asmthub3;ASMedia USB3.1 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x]
S3 asmtxhci;ASMedia XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]
S3 AsrHidFilter;AsrHidFilter;c:\windows\system32\DRIVERS\AsrHidFilter.sys;c:\windows\SYSNATIVE\DRIVERS\AsrHidFilter.sys [x]
S3 athur;Wireless Network Adapter Service;c:\windows\system32\DRIVERS\athurx.sys;c:\windows\SYSNATIVE\DRIVERS\athurx.sys [x]
S3 CLink4Service;Corsair LINK 4;c:\program files (x86)\CorsairLink4\CorsairLink4.Service.exe;c:\program files (x86)\CorsairLink4\CorsairLink4.Service.exe [x]
S3 cpuz146;cpuz146;c:\windows\temp\cpuz146\cpuz146_x64.sys;c:\windows\temp\cpuz146\cpuz146_x64.sys [x]
S3 e1dexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver D;c:\windows\system32\DRIVERS\e1d62x64.sys;c:\windows\SYSNATIVE\DRIVERS\e1d62x64.sys [x]
S3 e1rexpress;Intel(R) PCI Express Network Connection Driver R;c:\windows\system32\DRIVERS\e1r62x64.sys;c:\windows\SYSNATIVE\DRIVERS\e1r62x64.sys [x]
S3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 MBfilt;MBfilt;c:\windows\system32\drivers\MBfilt64.sys;c:\windows\SYSNATIVE\drivers\MBfilt64.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 rzendpt;rzendpt;c:\windows\system32\DRIVERS\rzendpt.sys;c:\windows\SYSNATIVE\DRIVERS\rzendpt.sys [x]
S3 rzudd;Razer Mouse Driver;c:\windows\system32\DRIVERS\rzudd.sys;c:\windows\SYSNATIVE\DRIVERS\rzudd.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2018-10-05 c:\windows\Tasks\EPSON L382 Series Update {CDC34044-4531-48C0-A01B-67194285368E}.job
- c:\windows\system32\spool\DRIVERS\x64\3\E_YTSRRE.EXE [2018-10-01 23:30]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2018-09-29 18388928]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\Adi\AppData\Roaming\Mozilla\Firefox\Profiles\wstcaygu.default\
FF - prefs.js: browser.startup.homepage - about:home
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-{050d4fc8-5d48-4b8f-8972-47c82c46020f} - c:\programdata\Package Cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\vcredist_x64.exe
AddRemove-{21e80113-175b-4eb9-8f9e-49fdc5e68235} - c:\programdata\Package Cache\{21e80113-175b-4eb9-8f9e-49fdc5e68235}\3dmark-setup.exe
AddRemove-{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f} - c:\programdata\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
AddRemove-{40036d0c-634b-4fc0-be89-13343b4bea96} - c:\programdata\Package Cache\{40036d0c-634b-4fc0-be89-13343b4bea96}\CLink4Installer.exe
AddRemove-{c239cea1-d49e-4e16-8e87-8c055765f7ec} - c:\programdata\Package Cache\{c239cea1-d49e-4e16-8e87-8c055765f7ec}\VC_redist.x86.exe
AddRemove-{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6} - c:\programdata\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\vcredist_x64.exe
AddRemove-{eb0d4a41-3065-42b0-a868-c60d42d3ea98} - c:\programdata\Package Cache\{eb0d4a41-3065-42b0-a868-c60d42d3ea98}\SetupChipset.exe
AddRemove-{f1e7e313-06df-4c56-96a9-99fdfd149c51} - c:\programdata\Package Cache\{f1e7e313-06df-4c56-96a9-99fdfd149c51}\VC_redist.x64.exe
AddRemove-{f65db027-aff3-4070-886a-0d87064aabb1} - c:\programdata\Package Cache\{f65db027-aff3-4070-886a-0d87064aabb1}\vcredist_x86.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2018-10-06 08:36:29
ComboFix-quarantined-files.txt 2018-10-06 06:36
.
Před spuštěním: Volných bajtů: 97 458 081 792
Po spuštění: Volných bajtů: 97 481 412 608
.
- - End Of File - - BDEC441C8938439AEC55435D31C7A27A

CF smazal, co našel. Udělejte ještě sken AVPTool: http://www.viry.cz/forum/viewtopic.php?f=29&t=58179 . Stáhněte, spusťte, nechte pracovat a po ukončení akce smažte vše, co najde.

Kaspersky Virus Removal Tool našel celkem 10 věcí co jsem nechal vymazat.
Teď asi po 20 min. vypadá všechno v pořádku a hláška mcxsvc už nevyskakuje.
Děkuji moc za pomoc.
A poslední věc,jake programy by jste doporučil k prevenci proti havěti,placené i free?

Z free antivirů Avast, nebo Aviru a z placených Eset, Norton, AVP. Nemáte zač!