begin
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet003\Services\ERSvc\','ImagePath','C:\WINDOWS\System32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet004\Services\ERSvc\','ImagePath','C:\WINDOWS\System32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\ERSvc\','ImagePath','C:\WINDOWS\System32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet003\Services\helpsvc\','ImagePath','C:\WINDOWS\System32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet004\Services\helpsvc\','ImagePath','C:\WINDOWS\System32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\helpsvc\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet003\Services\HTTPFilter\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet004\Services\HTTPFilter\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\HTTPFilter\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet003\Services\mnmsrvc\','ImagePath','C:\WINDOWS\system32\mnmsrvc.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet004\Services\mnmsrvc\','ImagePath','C:\WINDOWS\system32\mnmsrvc.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\mnmsrvc\','ImagePath','C:\WINDOWS\system32\mnmsrvc.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet003\Services\NtLmSsp\','ImagePath','C:\WINDOWS\system32\lsass.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet004\Services\NtLmSsp\','ImagePath','C:\WINDOWS\system32\lsass.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\NtLmSsp\','ImagePath','C:\WINDOWS\system32\lsass.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet003\Services\PolicyAgent\','ImagePath','C:\WINDOWS\system32\lsass.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet004\Services\PolicyAgent\','ImagePath','C:\WINDOWS\system32\lsass.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\PolicyAgent\','ImagePath','C:\WINDOWS\system32\lsass.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet003\Services\RemoteRegistry\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet004\Services\RemoteRegistry\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\RemoteRegistry\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet003\Services\seclogon\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet004\Services\seclogon\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\seclogon\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet003\Services\SSDPSRV\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet004\Services\SSDPSRV\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\SSDPSRV\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet003\Services\SSDPSRV\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet004\Services\SSDPSRV\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\SSDPSRV\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet003\Services\TrkWks\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet004\Services\TrkWks\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\TrkWks\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet003\Services\upnphost\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet004\Services\upnphost\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\upnphost\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet003\Services\W32Time\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet004\Services\W32Time\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\W32Time\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet003\Services\WebClient\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet004\Services\WebClient\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\WebClient\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet003\Services\WmdmPmSN\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet004\Services\WmdmPmSN\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\WmdmPmSN\','ImagePath','C:\WINDOWS\system32\svchost.exe');
RebootWindows(true);
end.