Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 18-12-2013 05
Ran by SYSTEM at 2013-12-19 18:53:07 Run:1
Running from G:\
Boot Mode: Recovery
==============================================

Content of fixlist:
*****************
S2 Winmgmt; C:\ProgramData\7tbnrabnw.zvv [61536 2013-12-17] (Microsoft Corporation)
HKLM\...\Policies\Explorer\Run: [1914] - c:\progra~3\msmqic.exe No File
HKLM\...\Policies\Explorer: [TaskbarNoNotification] 1
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
HKU\Mariusz\...\Run: [AdobeBridge] - [x]
C:\Users\Mariusz\AppData\Local\Temp\*.exe
C:\Users\Mariusz\AppData\Roaming\9PX9tbY2jLO.mkj
C:\Users\Mariusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7tbnrabnw.lnk
C:\Users\Mariusz\Desktop\Smart Guard Protection.lnk
C:\Users\Mariusz\Desktop\Smart Guard Protection support.url
C:\ProgramData\3XDV9nRn
C:\ProgramData\7tbnrabnw.zvv
C:\ProgramData\7tbnrabnw.reg
C:\ProgramData\7tbnrabnw.fee
C:\ProgramData\7tbnrabnw.odd
C:\ProgramData\wnbarnbt7.jss
C:\ProgramData\ms56283FDA.dat
C:\found.*
*****************

Winmgmt => Service restored successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\\1914 => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\TaskbarNoNotification => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\HideSCAHealth => Value deleted successfully.
HKU\Mariusz\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => Value deleted successfully.
C:\Users\Mariusz\AppData\Local\Temp\*.exe => Moved successfully.
C:\Users\Mariusz\AppData\Roaming\9PX9tbY2jLO.mkj => Moved successfully.
C:\Users\Mariusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7tbnrabnw.lnk => Moved successfully.
C:\Users\Mariusz\Desktop\Smart Guard Protection.lnk => Moved successfully.
C:\Users\Mariusz\Desktop\Smart Guard Protection support.url => Moved successfully.
C:\ProgramData\3XDV9nRn => Moved successfully.
C:\ProgramData\7tbnrabnw.zvv => Moved successfully.
C:\ProgramData\7tbnrabnw.reg => Moved successfully.
C:\ProgramData\7tbnrabnw.fee => Moved successfully.
C:\ProgramData\7tbnrabnw.odd => Moved successfully.
C:\ProgramData\wnbarnbt7.jss => Moved successfully.
C:\ProgramData\ms56283FDA.dat => Moved successfully.
"C:\found.*" => Could not move.

==== End of Fixlog ====