How to kill all svchost processes except system ones?

Question

cmd/bat

It is necessary to end all svchost.exe processes with the CMD command, except for the system ones.
taskkill /f /im svchost.exe - this is understandable, but you need to bypass the system ones so that they don't even twitch.
The system ones are in the system32 folder, but viruses can also be in the same place, just in a subfolder.

Answer 1

Well, they're all systemic.
Scan your system with an antivirus. DrWeb CureIt or there KVRT, it will help.

Answer 2

How to kill all svchost processes except system ones?

Just complete. They are all systemic.
In principle, there can be no non-systemic ones.

Answer 3

Do where.exe svchost.exeit and see the wrong one, not in the system32. Rename it to svchost.delete. After restarting, it will not start and can be deleted.
Also, to limit the launch of the file, you can reset it to zero in length and make it read-only.

Answer 4

I don't think one team is enough.
You can get a list of running svchosts with PIDs and paths, then filter it by removing those in %SystemRoot%\System32. After that, it is already possible to kill the processes remaining in the list by PID from the list.
tasklist does not display the full path. The full path can be obtained with:
True, for most of the svchosts I run, this command also does not give the full path to the ExecutablePath (Win10 x64), I assume that these are some kind of secondary spawned processes.