A rare command from Microsoft

Q: How can I disable a process that cannot be closed by the task manager? Some time ago, I found that I had another process in my machine. As long as I started the machine, I couldn't close it with the task manager.

Answer 1: It is easy to kill the process. You can find any tool. For example, icesword. The key is to find the starting method of the process, or restart it again next time. By the way, let's take a look. In fact, most processes can be killed using tools provided by Windows:

C:> ntsd-C q-P PID

Only system, SMSs. EXE, and CSRSS. EXE cannot be killed. The first two are pure kernel state, and the last one is the Win32 subsystem. ntsd needs it. Ntsd is a user-mode debugging tool provided by the system starting from 2000. The attach process exits along with the debugger, so it can be used to terminate the process under the command line. You can use ntsd to automatically obtain the debug permission to kill most processes. Ntsd will open a new debugging window, which cannot be controlled in pure command lines, but if it is just a simple command, such as exit (Q ), use the-C parameter to pass it from the command line. Ntsdntsd is also provided to software developers by convention. Only system developers use this command. For more information, see the Help file attached to ntsd. Usage: Open the cmd.exe window and enter:

Ntsd-C q-P PID

Change the last PID to the ID of the process to be terminated. If you do not know the process ID, choose Task Manager> process tab> View> Select column> check PID (process identifier.

Answer 2: There are two good tasklists and tskill in XP. Tasklist can list all processes and related information. Tskill is a simple syntax for killing processes: tskillProgramName !!