netsh advfirewall firewall add rule name="Block SVCHOST tcp " dir=out action=block program="%SystemRoot%\System32\svchost.exe" enable=yes protocol=TCP
netsh advfirewall firewall set rule name="Block SVCHOST tcp" new enable=no
netsh advfirewall firewall set rule name="Block SVCHOST tcp" new enable=yes