CloseProcesses:
CreateRestorePoint:
HKU\S-1-5-21-842925246-1770027372-725345543-1003\...\Run: [] => [X]
HKU\S-1-5-21-842925246-1770027372-725345543-1003\...\Policies\Explorer: [ClearRecentDocsOnExit] 
HKU\S-1-5-21-842925246-1770027372-725345543-1003\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-842925246-1770027372-725345543-1003\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-842925246-1770027372-725345543-1003\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\S-1-5-21-842925246-1770027372-725345543-1003 -> DefaultScope {FC2CAF36-95DD-4FF4-8E29-2D5FEB9012FA} URL = hxxp://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKU\S-1-5-21-842925246-1770027372-725345543-1003 -> {FC2CAF36-95DD-4FF4-8E29-2D5FEB9012FA} URL = hxxp://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
S2 MySql; c:\usr/MYSQL/bin/mysqld.exe [X]
U2 CertPropSvc; Brak ImagePath
S0 d346bus; system32\DRIVERS\d346bus.sys [X]
C:\Documents and Settings\bzyTek1\NetHood\Moje witryny sieci Web w sieci MSN\target.lnk
AlternateDataStreams: C:\Documents and Settings\bzyTek1\Pulpit\pagedfrg.exe:SummaryInformation [65]
AlternateDataStreams: C:\Documents and Settings\bzyTek1\Pulpit\pagedfrg.exe:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-842925246-1770027372-725345543-1003\...\007guard.com -> install.007guard.com
EmptyTemp:
HOSTS: