Dos process viewing and stop command sharing (tasklist, taskkill)

Dos process viewing and stop command

View the process:
tasklist /svc
Stop the process:
taskkill /im 2468 /f

Check the process under DOS and end the process command (commonly used by hackers)

When you want to upload a * or something to the other party, you will always encounter some blocking. Some can stop the service or something, but some things can only be closed. At this time, we have to use two commands. First, tasklist to view the process example table. Enter tasklist directly under dos to example all processes running, such as my computer.
In the example table, each process has a relative PID value. We just need to kill the relative PID value and it will be OK. I don’t need to say that everyone knows which one to use, haha.

taskkill has the following parameters:

/S system Specifies the remote system to connect to.

/U [domain\]user Specifies which user context this command should be executed.
/P [password] Specify a password for the provided user context. If ignored, prompt for input.
/F Specifies that the process is to be terminated forcibly.
/FI filter Specifies the task to filter into or out queries.
/PID process id Specifies the PID of the process to be terminated.
/IM image name Specifies the image name of the process to be terminated. Wildcard * can be used to specify all image names.
/T Tree kill: Terminates the specified process and any child processes started therefrom.

/? Display help/usage

For example:

TASKKILL /S system /F /IM  /T
TASKKILL /PID 1230 /PID 1241 /PID 1253 /T
TASKKILL /F /IM  /IM 
TASKKILL /F /FI "PID ge 1000" /FI "WINDOWTITLE ne untitle*"
TASKKILL /F /FI "USERNAME eq NT AUTHORITY\SYSTEM" /IM 
TASKKILL /S system /U domain\username /FI "USERNAME ne NT*" /IM *
TASKKILL /S system /U username /P password /FI "IMAGENAME eq note*"

I usually use taskkill /f /pid <relative PID value> /t

For example, we want to end under DOS. First use tasklist to check the PID value of QQ. My current one is 1376, so enter

taskkill /f /pid 1376 /t

This command means to forcefully terminate a specific process with a remote computer process ID of 1376, and to open any child processes from this process...

Finally, use the vbs script to view the pid method, save the following code as a vbs file, pass it to the other party under dos, and then execute cscript

 "PID ProcessName"
for each ps in getobject("winmgmts:\\.\root\cimv2:win32_process").instances_
 &vbtab&
next

Other commands to kill the process

ntsd -c q -p PID

This is the article about the sharing of dos process viewing and stop commands (tasklist, taskkill). For more related process viewing content, please search for my previous articles or continue browsing the related articles below. I hope everyone will support me in the future!