Tag Info

Hot answers tagged

3

Absolutely not! The svchost.exe processes are, as the name implies, hosts for Windows services that don't require their own process. (They appear with the line TYPE: 20 WIN32_SHARE_PROCESS in the list generated by sc query.) Many important system functions run inside these processes, including: Windows Update (wuauserv) Windows Management Instrumentation ...


1

To start the command in a different directory for /f "delims=" %d in ('dir c:\pathtostart /s /b /ad ^| sort /r') do rd "%d" and change c:\pathtostart as appropriate. To use a batch file Alternatively create a batch file RemoveEmptyDirs.cmd: @echo off for /f "delims=" %%d in ('dir %1 /s /b /ad ^| sort /r') do rd "%%d" and call as follows: ...


1

When users here get infections like this, with executables or processes that get left behind, I usually remove them from safe mode. I'd recommend giving that a shot. Safe mode will open Windows with the bare minimum of services running, which usually allows you to remove files that have processes that won't stop running. Hope that helps!



Only top voted, non community-wiki answers of a minimum length are eligible