China DOS Union

-- Unite DOS · Advance DOS · Grow DOS --
Union site: www.cn-dos.net　Forum site: www.cn-dos.net/forum

中国DOS联盟论坛
The time now is 2026-08-02 20:29

48,038 topics / 350,123 posts / today 1 new / 48,251 members

DOS批处理 & 脚本技术（批处理室） » How to end hidden processes with batch processing?

Floor1　xiaoyao1987	Posted 2006-12-20 01:46
初级用户　Posts 24　Credits 63　From 南京
Killing a virus, can only see hidden processes with icesword and end them. I don't know how to write it with batch processing... Hope an expert can give guidance!

Floor2　lxmxn	Posted 2006-12-21 12:23
版主　Posts 4,938　Credits 11,386
If you know the process name or process ID, you can end it, unless it's a stubborn process or a system core process. taskkill /im imagename /f :: taskkill /f /pid processid

Floor3　xiaoyao1987	Posted 2006-12-23 02:36
初级用户　Posts 24　Credits 63　From 南京
Can it automatically read the pid and use it as a variable to end the process?

Floor4　lxmxn	Posted 2006-12-23 03:07
版主　Posts 4,938　Credits 11,386
Why do you always need to know the PID to end a process? If you know the process name, you can end it without knowing its ProcessID. Both tasklist and wmic process can be used to view the PID of a process.

Floor5　xiaoyao1987	Posted 2006-12-23 04:57
初级用户　Posts 24　Credits 63　From 南京
I know the process name, but it's hidden... It seems these can't end hidden processes, right?

Floor6　tao0610	Posted 2006-12-23 06:32
高级用户　Posts 218　Credits 579
Most hidden processes use Rootkit technology. Continuing to use your IceSword is still the most convenient.

Floor7　xiaoyao1987	Posted 2006-12-23 09:26
初级用户　Posts 24　Credits 63　From 南京
I want to write a special killer for batch processing, which is more convenient... I don't know if there is a way to achieve it?

Floor8　tianzizhi	Posted 2006-12-23 10:14
高级用户　Posts 214　Credits 623
You need to post the process name you want to end and the virus name you want to scan for viruses. In this way, we can help you in a targeted manner. We need to know the methods and some properties of process hiding to write batch processing. Usually, most hidden processes are mostly hooked in the explorer process.