[list]Hi gmicco,
Do not be alarm for Gmer “rootkit activity” detections. These files are avast related and as Gmer is RootKit scanner and all kernel drivers are rootkits ( rootkit itself may be legit or malware ), these detectins are legit. But your system is infected with a malware worm that spread via USB devices.
=> Do NOT attach USB devices. We shall use MCShield tool to clean USB devices from this malware. 
Multiple Antivirus Programs
You are running more than 1 Antivirus program!
AV: AVG AntiVirus Free Edition 2013 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
Running - more than one - antivirus program is not recommended because:
[*]They can conflict with each other.
[*]Report the other antivirus software as malicious.
[*]Antivirus programs use an enormous amount of computer’s resources… actively scanning your computer.
[*]Can cause your computer to become unstable…run slowly and even, in rare cases, BSOD crash…etc
I strongly suggest you uninstall one of them. Which one, is your decision.
THEN…
Then go here to download tool to remove posible AV leftovers:
http://www.avast.com/en-us/faq.php?article=AVKB11
------ next ------
1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system
START
HKCU\...\Run: [84182bbbv] - wscript.exe //B "C:\Users\SALENTUM\AppData\Local\Temp\84182bbbv.vbs" <===== ATTENTION
C:\Users\SALENTUM\AppData\Local\Temp\84182bbbv.vbs
MountPoints2: {0b8feeef-acff-11e2-8bf3-1c7508e7c1df} - E:\setup_vmc_lite.exe /checkApplicationPresence
MountPoints2: {0dc58187-fdaa-11e1-83a0-1c7508e7c1df} - E:\LaunchU3.exe -a
MountPoints2: {8850abb2-f13c-11e1-b848-ec55f98b5a45} - E:\setup_vmc_lite.exe /checkApplicationPresence
MountPoints2: {8850abbc-f13c-11e1-b848-ec55f98b5a45} - E:\setup_vmc_lite.exe /checkApplicationPresence
MountPoints2: {af9c2c31-7f48-11e2-840b-1c7508e7c1df} - E:\setup_vmc_lite.exe /checkApplicationPresence
MountPoints2: {b7231fac-767a-11e2-997b-1c7508e7c1df} - E:\setup_vmc_lite.exe /checkApplicationPresence
MountPoints2: {f27f0489-fb93-11e1-9ac5-1c7508e7c1df} - E:\setup_vmc_lite.exe /checkApplicationPresence
Startup: C:\Users\SALENTUM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\imollo.lnk
Startup: C:\Users\SALENTUM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\My 190.lnk
C:\Program Files (x86)\imollo
C:\Program Files (x86)\My 190
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO-x32: No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} - No File
Toolbar: HKLM-x32 - No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} - No File
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
2013-10-19 19:46 - 2013-10-19 20:01 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-10-19 19:45 - 2013-10-20 10:29 - 00003108 _____ C:\Windows\System32\Tasks\RegClean Pro
2013-10-19 19:45 - 2013-10-20 10:10 - 00000290 _____ C:\Windows\Tasks\RegClean Pro_UPDATES.job
2013-10-19 19:45 - 2013-10-20 10:10 - 00000282 _____ C:\Windows\Tasks\RegClean Pro_DEFAULT.job
2013-10-19 19:45 - 2013-10-19 19:45 - 00003044 _____ C:\Windows\System32\Tasks\RegClean Pro_UPDATES
2013-10-19 19:45 - 2013-10-19 19:45 - 00002888 _____ C:\Windows\System32\Tasks\RegClean Pro_DEFAULT
2013-10-19 19:45 - 2013-10-19 19:45 - 00001058 _____ C:\Users\Public\Desktop\RegClean Pro.lnk
2013-10-19 19:45 - 2013-10-19 19:45 - 00000000 ____D C:\Program Files (x86)\RegClean Pro
Folder: C:\Users\SALENTUM\AppData\Roaming\Systweak
2013-10-19 15:20 - 2013-10-19 19:33 - 00000000 ____D C:\Program Files (x86)\IminentToolbar
2013-10-20 10:29 - 2013-10-19 19:45 - 00003108 _____ C:\Windows\System32\Tasks\RegClean Pro
Folder: C:\Program Files (x86)\PoP1-Total Pack
C:\Users\SALENTUM\AppData\Local\Temp
AlternateDataStreams: C:\ProgramData\Temp:0B9176C0
AlternateDataStreams: C:\ProgramData\Temp:1A60DE96
AlternateDataStreams: C:\ProgramData\Temp:5D7E5A8F
AlternateDataStreams: C:\ProgramData\Temp:798A3728
AlternateDataStreams: C:\ProgramData\Temp:93EB7685
AlternateDataStreams: C:\ProgramData\Temp:CDFF58FE
AlternateDataStreams: C:\ProgramData\Temp:E36F5B57
AlternateDataStreams: C:\ProgramData\Temp:E3C56885
CMD: ipconfig /flushdns
END
2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It’s important that both files, FRST and fixlist.txt are in the same location or the fix will not work.
3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.
------ next ------
Check USB storage devices / removable drives
Download MCShield from one of the following links:
MyCity - Official download link
Softpedija - Mirror download link
[*] Double click MCShield-Setup to install the application.
[*] Wait a few seconds to MCShield finish initial scan.
Recommendation to under General and Scanner tab you click on Defaults button to choose recommended options.
[*] Connect your USB storage devices to the computer one at a time. Scanning will be done automatically.
When all scanning is done, you need to attach a logreport that MCShield has created.
Start → All Programs → MCShield → Logs
Attach here → AllScans.txt
Explanation: USB storage devices are all the USB devices that get their own partition letter at connecting to the PC,
e.g. flash drives (thumb/pen drives, USB sticks), external HDDs, MP3/MP4 players, digital cameras,
memory cards (SD cards, Sony Memory Stick, MultiMedia Cards etc.), some mobile phones, some GPS navigation devices etc.
------ next ------
Re-run FRST, just press Scan button and attach here fresh created FRST.txt logreport.
