GVU Trojaner Windows 7 32bit

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 03-09-2013
Ran by SYSTEM at 2013-09-04 16:36:11 Run:4
Running from H:\
Boot Mode: Recovery

==============================================

Content of fixlist:
*****************
HKU\Hani\...\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx] - C:\Users\Hani\AppData\Local\Temp\ndeairvrmjnxfewww.exe [ 2013-09-02] (Valve Corporation) <===== ATTENTION
HKU\Hani\...\Winlogon: [Shell] cmd.exe [ 2010-11-20] (Microsoft Corporation) <==== ATTENTION 
HKU\Hani\...\Command Processor: "C:\Users\Hani\AppData\Local\Temp\ndeairvrmjnxfewww.exe" <===== ATTENTION!
C:\Users\Hani\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tbhcn.lnk
HKLM\...\Run: [aSQw8ccL0] - C:\Users\Hani\AppData\Local\xajhmqxegrrunejqwqm.bfg [144384 2013-07-31] ()
HKU\Hani\...\Run: [aSQw8ccL0] - C:\Users\Hani\AppData\Local\xajhmqxegrrunejqwqm.bfg [ 2013-07-31] ()
2013-09-02 15:47 - 2013-09-02 15:47 - 00163071 _____ C:\ProgramData\2433f433
2013-09-02 15:47 - 2013-09-02 15:47 - 00163032 _____ C:\Users\Hani\AppData\Local\2433f433
2013-09-02 15:47 - 2013-09-02 15:47 - 00163011 _____ C:\Users\Hani\AppData\Roaming\2433f433
C:\Users\Hani\AppData\Local\Temp\ndeairvrmjnxfewww.exe
C:\Users\Hani\AppData\Local\Temp\ndeairvrmjnxfewww.dll
C:\Users\Hani\AppData\Local\xajhmqxegrrunejqwqm.bfg
*****************

HKU\Hani\Software\Microsoft\Windows\CurrentVersion\Run\\qcgce2mrvjq91kk1e7pnbb19m52fx => Value not found.
HKU\Hani\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => Value deleted successfully.
HKU\Hani\Software\Microsoft\Command Processor\\AutoRun => Value not found.
C:\Users\Hani\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tbhcn.lnk => Moved successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\aSQw8ccL0 => Value deleted successfully.
HKU\Hani\Software\Microsoft\Windows\CurrentVersion\Run\\aSQw8ccL0 => Value deleted successfully.
"C:\ProgramData\2433f433" => File/Directory not found.
C:\Users\Hani\AppData\Local\2433f433 => Moved successfully.
C:\Users\Hani\AppData\Roaming\2433f433 => Moved successfully.
C:\Users\Hani\AppData\Local\Temp\ndeairvrmjnxfewww.exe => Moved successfully.
C:\Users\Hani\AppData\Local\Temp\ndeairvrmjnxfewww.dll => Moved successfully.
C:\Users\Hani\AppData\Local\xajhmqxegrrunejqwqm.bfg => Moved successfully.

==== End of Fixlog ====