Bulk Kill process under windows

Sometimes, because of viruses or other causes, a series of processes are initiated, and sometimes this is killed, and more. Use the command Taskkill to kill all of these processes at once:

c:\users\nr>taskkill/f/im Frontpg.exe
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 3732.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 24544.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 3612.
Error: Unable to terminate process "FRONTPG. EXE "with a PID of 8268.
Cause: The operation is not supported.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 7532.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 14184.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 18384.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 16888.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 3280.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 18660.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 26440.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 20764.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 15572.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 4292.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 19844.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 25036.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 13736.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 15024.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 14948.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 23048.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 9864.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 22948.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 14872.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 7708.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 21956.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 21884.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 6212.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 6948.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 17016.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 9436.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 15808.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 14692.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 10044.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 13520.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 11508.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 17388.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 23544.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 13896.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 14728.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 2996.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 4536.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 18868.
Success: The process "FRONTPG" has been terminated. EXE "with a PID of 14124.

Description of the parameters:

/F Forced termination

/IM Process Image Name

Frontpg.exe Process Name

References:

Taskkill Command Specific explanation

The "Tasklist" command is a command-line tool that displays all processes executed on a local or remote computer with multiple execution parameters.

Role:
Ends one or more tasks or processes. Ability to end processes based on process ID or image name.

Syntax format:
TASKLIST [/S system [/u username [/p [password]]]
[/M [module] |/svc |/v] [/FI Filter] [/FO format] [/NH]

List of references:
/S system Specifies the remote system to which the connection is connected.
/u [domain\]user specifies which user to use to run this command.
/p [Password] specifies the password for the specified user.
/M [module] lists all processes that invoke the specified DLL module.
Assuming no module name is specified, all modules loaded by each process are displayed.
/SVC displays the services in each process.
/v Specifies that detailed information is to be displayed.
The/FI filter displays a series of processes that conform to the filter designation.

-eq,-ne:equal, not equal.
-GT,-lt:greater, less than.
-ge,-le:greater or equal, less than or equal.
/FO format Specifies the output formats, valid values: "TABLE", "LIST", "CSV".
/NH specifies that the column header should not be displayed in the output.
Valid only for "TABLE" and "CSV" formats.
－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－
Tasklist Combat:

1. View the native process (particularly effective in some special cases, such as when the Task Manager is disabled)
Execute "cmd" and enter the "tasklist" command in the prompt form to display the entire process of this machine. The results of this machine are composed of five parts: image name (process name), PID, session name, session #, memory usage.

2. View the services provided by the system process
The tasklist command is not only able to view system processes, but also to view the services provided by each process.
At the command prompt, enter: "Tasklist/svc", this lists the services that each process calls, how, every Svchost.exe process is normal, huh?

3. View a list of processes that call DLL module files
For example, we want to see which processes in the local system have called "Shell32.dll" DLL module files.
tasklist/m Shell32.dll
The system will display a list of all processes that have called the Shell32.dll file.

4. Use filters to find the specified process
At the command prompt, enter: tasklist/fi "USERNAME ne NT authority\system"/fi "STATUS eq Running"
This lists all processes in the system that are not in the "system" state being executed.

A lot of other ........
tasklist/v/fi "PID GT"/FO CSV

Tasklist/fi "USERNAME ne NT authority\system"/fi "STATUS eq Running"

tasklist/v/fi "STATUS eq Running"

tasklist/s srvmain/nh tasklist/s srvmain/svc/fi "Modules eq ntdll*"

tasklist/s srvmain/u maindom\hiropln/p [email protected]/nh


When it comes to the "Tasklist" command, we have to mention the "Taskkill" command, which, as the name implies, is used to end the process.

Taskkill
Ends one or more tasks or processes. Ability to end processes based on process ID or image name.

Syntax: TASKKILL [/S system [/u username [/p [password]]]
{[/FI filter] [/pid ProcessID |/im imagename]} [/F] [/T]

Number of references
/s computer
Specify the remote computer name or IP address (you cannot use backslashes). The default value is the local computer.

/u domain\username
Executes the command using the account permissions of the user specified by UserName or domain\username. Ability to specify/U only after specifying/s. The default value is the permissions that are available to users of the computer that is currently logged on to the advertisement command.

/P Password
Specifies the password of the user account specified in the/u parameter.

/FI Filter
Specifies the type of process that will be terminated or not terminated. Ability to specify multiple filters. Use a wildcard character (*) to specify all task or image names. The following are valid filter names, operators, and values:

/pid ProcessID
Specifies the process ID of the process that will be terminated.

/im ImageName
Specifies the image name of the process that will be terminated. Use a wildcard character (*) to specify the full image name.

/F
Specifies the process that will be forced to terminate. For remote processes to ignore this parameter, all remote processes will be forced to terminate.

/t
Terminates the specified process, regardless of the child process initiated by the process.

/?
Displays help at the command prompt.

Gaze
? The "WindowTitle" and "Status" filters are not supported when specifying a remote system.
? The wildcard character (*) is accepted only if it is specified with the filter.
? The terminate operation on the remote process is always enforced regardless of whether the/F parameter is specified.
? Supplying a computer name to the HOSTNAME filter causes the shutdown and aborts all processes.
? Use Tasklist to determine the process ID (PID) of the process to be terminated.
－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－
Taskkill Combat
1. End the Spoolsv.exe process
2. Ending all child processes of a process


Demo sample
The following demo sample shows how to use the Taskkill command:

Taskkill/pid 1230/pid 1241/pid 1253

taskkill/f/fi "USERNAME eq NT authority\system"/im notepad.exe

taskkill/s srvmain/f/im notepad.exe

taskkill/s srvmain/u maindom\hiropln/p [email protected]/fi "IMAGENAME eq note*"/im *

taskkill/s srvmain/u maindom\hiropln/fi "USERNAME ne nt*"/im *

Taskkill/pid 2134/t/fi "username EQ Administrator"

taskkill/f/fi "PID ge"/im *