GMER 2.1.19357 - http://www.gmer.net Rootkit scan 2014-02-06 13:37:15 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 WDC_WD32 rev.01.0 298,09GB Running: dw2m9n8s.exe; Driver: C:\Users\EWA\AppData\Local\Temp\pxlirkog.sys ---- Processes - GMER 2.1 ---- Process C:\ProgramData\DatacardService\HWDeviceService64.exe (*** suspicious ***) @ C:\ProgramData\DatacardService\HWDeviceService64.exe [1952](2010-11-16 13:38:16) 000000013f9f0000 Process C:\ProgramData\DatacardService\DCSHelper.exe (*** suspicious ***) @ C:\ProgramData\DatacardService\DCSHelper.exe [2172] (DataCardMonitor MFC Application/Huawei Technologies Co., Ltd.)(2010-11-16 13:37:30) 0000000000400000 Process C:\ProgramData\Multimedia mobilNET\OnlineUpdate\ouc.exe (*** suspicious ***) @ C:\ProgramData\Multimedia mobilNET\OnlineUpdate\ouc.exe [2272](2012-06-23 12:32:51) 0000000000400000 Library C:\ProgramData\Multimedia mobilNET\OnlineUpdate\mingwm10.dll (*** suspicious ***) @ C:\ProgramData\Multimedia mobilNET\OnlineUpdate\ouc.exe [2272](2012-06-23 12:32:51) 000000006fbc0000 Library C:\ProgramData\Multimedia mobilNET\OnlineUpdate\libgcc_s_dw2-1.dll (*** suspicious ***) @ C:\ProgramData\Multimedia mobilNET\OnlineUpdate\ouc.exe [2272](2012-06-23 12:32:51) 000000006e940000 Library C:\ProgramData\Multimedia mobilNET\OnlineUpdate\QtCore4.dll (*** suspicious ***) @ C:\ProgramData\Multimedia mobilNET\OnlineUpdate\ouc.exe [2272](2012-06-23 12:32:51) 000000006a1c0000 Library C:\ProgramData\Multimedia mobilNET\OnlineUpdate\QtNetwork4.dll (*** suspicious ***) @ C:\ProgramData\Multimedia mobilNET\OnlineUpdate\ouc.exe [2272](2012-06-23 12:32:51) 000000006ff00000 ---- EOF - GMER 2.1 ----