in reply to Deleting a running script

On windows you may execute an at job (see the at command) to run 5 minutes after the process completes -- do this right before your program would normally exit and delete the entire directory your malware is running from. This will resolve the dll left behind issue and is built into nt -> xp

-Waswas