Shulou(Shulou.com)06/03 Report--

This article mainly explains "dos process View and stop Command sharing". The content of the article is simple and clear, and it is easy to learn and understand. Please follow the editor's train of thought to study and learn "dos process View and stop Command sharing".

Dos process View and stop commands

View the process:

Tasklist / svc

Stop the process:

Taskkill / im 2468 / f

View the process under DOS and end the process command (commonly used by hackers)

When shall wants to upload a Trojan horse to the other party, it always encounters something to prevent it. Some things can stop the service, but some things can only be turned off. At this time, we have to use two commands: first, tasklist to view the process example table. Entering tasklist directly under dos will instantiate all the processes running, such as my computer.

In the example table, each process has a relative pid value, we just need to drop the relative pid value kill to OK, I do not need to say that everyone knows which to use, hehe.

Taskkill has the following parameters:

/ S system specifies the remote system to connect to.

/ U [domain\] user specifies which user context it should be in

Carry out this order.

/ P [password] specifies for the provided user context

Password. If ignored, prompt for input.

/ F specify to terminate forcibly

Process.

/ FI filter specifies whether to filter in or out of the query

It's a mission.

/ PID process id that specifies the process to be terminated

PID .

/ IM image name that specifies the process to be terminated

Image name. Wildcard character *

Can be used to specify all image names.

/ T Tree kill: terminates the specified process

And any child processes started therefrom.

/? Show help / usage.

For example:

TASKKILL / S system / F / IM notepad.exe / T

TASKKILL / PID 1230 / PID 1241 / PID 1253 / T

TASKKILL / F / IM notepad.exe / IM mspaint.exe

TASKKILL / F / FI "PID ge 1000" / FI "WINDOWTITLE ne untitle*"

TASKKILL / F / FI "USERNAME eq NT AUTHORITY\ SYSTEM" / IM notepad.exe

TASKKILL / S system / U domain\ username / FI "USERNAME ne NT*" / IM *

TASKKILL / S system / U username / P password / FI "IMAGENAME eq note*"

I usually use taskkill / f / pid / t

For example, if we want to end QQ.exe under DOS, first use tasklist to check the pid value of QQ. Mine is now 1376, so enter

Taskkill / f / pid 1376 / t

This command means to forcibly terminate a specific process of the remote computer process with an ID of 1376, and close the

This process opens any child processes.

Finally, to add, use the vbs script to view the pid method, save the following code as a vbs file, dos download to the other party

And then execute cscript pid.vbs

The code is as follows:

Wscript.echo "PID ProcessName"

For each ps in getobject ("winmgmts:\\.\ root\ cimv2:win32_process") .instances_

Wscript.echo ps.handle&vbtab&ps.name

Next

Other commands to kill the process

Ntsd-c Q-p PID

Thank you for your reading, the above is the content of "dos process View and stop Command sharing". After the study of this article, I believe you have a deeper understanding of the problem of dos process View and stop Command sharing, and the specific use needs to be verified in practice. Here is, the editor will push for you more related knowledge points of the article, welcome to follow!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.