var j:integer; NumStr:string;
begin
for j:=0 to 999 do
begin
if j=0 then
NumStr:='CurrentControlSet' else 
if j<10 then
NumStr:='ControlSet00'+IntToStr(j) else
if j<100 then
NumStr:='ControlSet0'+IntToStr(j) else
NumStr:='ControlSet'+IntToStr(j);
if RegKeyExistsEx('HKLM', 'SYSTEM\'+NumStr+'\Services\yjgezw') then
begin
RegKeyResetSecurity('HKLM', 'SYSTEM\'+NumStr+'\Services\yjgezw');
RegKeyDel('HKLM', 'SYSTEM\'+NumStr+'\Services\yjgezw');
AddToLog('Значение yjgezw в ключе  HKLM\SYSTEM\'+NumStr+'\Services\  удалено.');
end;
end;
begin
DeleteService('yjgezw');
DeleteFile('C:\WINDOWS\system32\swzjqdj.dll');
ExecuteSysClean;
end;
SaveLog(GetAVZDirectory + 'yjgezw.log');
RebootWindows(true);
end.

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteFile('C:\DOCUME~1\7EE5~1\LOCALS~1\Temp\frnxzq.exe');
DeleteFile('C:\Windows\Tasks\Windows Update.job');
ExecuteSysClean;
RebootWindows(true);
end.