Is there a BAT that has hidden processes? - China DOS Union Forum

**Method 1: Modify taskmgr.exe with Resource Hacker**
Specifically, in Dialog→110, delete the line with 1009, or change 1009 to any other number, such as changing it to 10091.

Is this okay? If it is, then → Download the modified taskmgr.exe.

Method to replace the system's taskmgr.exe:

Method 1: Possibly first rename c:\WINDOWS\system32\dllcache\taskmgr.exe, and then you can replace c:\WINDOWS\system32\taskmgr.exe.

Method 2: Use "image hijacking". Run the following command:
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe" /v debugger /t reg_sz /d "path of the modified taskmgr.exe" /f

Method 2: Use the command-line tool NirCmd
The command is: nircmd win child title "Windows Task Manager" hide class "SysListView32"

are all uniformly blank.

If you want the user to start "Windows Task Manager" to be like this, I think the only way is to compile the above command into an exe, and then "image hijack" to start this exe.

Compile with AutoHotkey. The code is basically like this:

#NoTrayIcon
run,taskmgr.exe
WinWait,Windows 任务管理器
run,nircmd win child title "Windows 任务管理器" hide class "SysListView32"

The effect is that the user watches the process list being hidden. If this is okay, then → Download the compiled exe.

If the above is problematic, then first minimize taskmgr.exe → hide the list → activate the window. The code:

#NoTrayIcon
run,taskmgr.exe,,Min
WinWait,Windows 任务管理器
run,nircmd win child title "Windows 任务管理器" hide class "SysListView32"
sleep 300
WinActivate,Windows 任务管理器

Download

Of course, you also need to put Nircmd.exe into %windir%.

AutoHotkey should be able to directly implement that hiding function...

[ Last edited by tireless on 2008-9-13 at 03:15 AM ]

Floor1　dos9527	Posted 2008-07-08 19:20
中级用户　Posts 56　Credits 252
As the title says

Floor2　pusofalse	Posted 2008-07-08 21:21
银牌会员　Posts 646　Credits 1,604
Not showing cmd.exe in Task Manager during runtime?

Floor3　HAT	Posted 2008-07-08 23:51
版主　Posts 5,017　Credits 9,023
9527 Hehe I don't know if this counts @echo off copy "%windir%\system32\cmd.exe" .\SMSS.exe start SMSS.exe

Floor4　dos9527	Posted 2008-07-09 01:52
中级用户　Posts 56　Credits 252
Hide all processes

Floor5　tireless	Posted 2008-07-11 09:19
银牌会员　Posts 1,122　Credits 2,025
Open the process manager so that it is completely blank?

Floor6　dos9527	Posted 2008-07-11 16:42
中级用户　Posts 56　Credits 252

Floor7　xzm7358	Posted 2008-09-08 15:51
新手上路　Posts 6　Credits 12
What's the use of hiding?

Floor8　23112656	Posted 2008-09-08 20:37
中级用户　Posts 99　Credits 220
Just lock the Task Manager directly.

Floor9　knoppix7	Posted 2008-09-08 21:18
银牌会员　Posts 634　Credits 1,287　From cmd.exe
Deleted the task manager...

Floor10　tireless	Posted 2008-09-13 22:55
银牌会员　Posts 1,122　Credits 2,025
Method 1: Modify taskmgr.exe with Resource Hacker Specifically, in Dialog→110, delete the line with 1009, or change 1009 to any other number, such as changing it to 10091. Is this okay? If it is, then → Download the modified taskmgr.exe. Method to replace the system's taskmgr.exe: Method 1: Possibly first rename c:\WINDOWS\system32\dllcache\taskmgr.exe, and then you can replace c:\WINDOWS\system32\taskmgr.exe. Method 2: Use "image hijacking". Run the following command: reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe" /v debugger /t reg_sz /d "path of the modified taskmgr.exe" /f Method 2: Use the command-line tool NirCmd The command is: nircmd win child title "Windows Task Manager" hide class "SysListView32" are all uniformly blank. If you want the user to start "Windows Task Manager" to be like this, I think the only way is to compile the above command into an exe, and then "image hijack" to start this exe. Compile with AutoHotkey. The code is basically like this: #NoTrayIcon run,taskmgr.exe WinWait,Windows 任务管理器 run,nircmd win child title "Windows 任务管理器" hide class "SysListView32" The effect is that the user watches the process list being hidden. If this is okay, then → Download the compiled exe. If the above is problematic, then first minimize taskmgr.exe → hide the list → activate the window. The code: #NoTrayIcon run,taskmgr.exe,,Min WinWait,Windows 任务管理器 run,nircmd win child title "Windows 任务管理器" hide class "SysListView32" sleep 300 WinActivate,Windows 任务管理器 Download Of course, you also need to put Nircmd.exe into %windir%. AutoHotkey should be able to directly implement that hiding function... [ Last edited by tireless on 2008-9-13 at 03:15 AM ]

Floor11　BC	Posted 2008-09-14 11:08
中级用户　Posts 175　Credits 338
Powerful and tireless brother Tireless...

Floor12　lllvvvfff	Posted 2008-09-18 09:24
新手上路　Posts 8　Credits 18
Learned, I don't know if binding it with other programs can also achieve your requirement

Floor13　mgq	Posted 2008-09-19 12:50
中级用户　Posts 103　Credits 206　From 广东肇庆
10楼的tireless Little brother is currently learning nircmd, can you explain the help file of nricmd in more detail?

Floor14　tireless	Posted 2008-09-19 14:08
银牌会员　Posts 1,122　Credits 2,025
Originally posted by mgq at 2008-9-18 04:50 PM: Tireless on floor 10 I'm currently learning nircmd. Could you explain the help file of nircmd in more detail? There are too many. Moreover, the help file explains it in detail, with both command explanations and many examples. Since my English is not very good, I just keep the translation dictionary open and read it carefully... The above child window class was obtained using spy++. [ Last edited by tireless on 2008-9-18 at 06:10 PM ]

Floor15　cad55	Posted 2008-09-19 15:22
高级用户　Posts 329　Credits 620
What's the meaning of this? Most people don't use the system's own one. Instead, they use a small tool to check processes...