Recently, there are several processes in this book that cannot find the auto-start item in the registry. Today, I think we can simply get rid of it in DOS, but I have to rape it once every time I start the system. No way, who calls it so cheap? No cancellation method can be found at the startup.
Let's just kill it.
============================================
====== Save the following code as "Rape system spam process. Bat" ==========
============================================
@ Echo off
ECHO is rape the system spam process. Please wait ......
Taskkill/f/IM notepad.exe/IM ipolicer.exe
Echo rape system spam process completed!
============================================
Put this file under "start"-> "All Programs"-> "start", so that some auto-start items are automatically cleared at each boot.
Over
============================================
============================================
============================================
Let's take a look at some dos code:
In the CMD window, you can view processes that are not displayed in the task manager more quickly, so as to effectively monitor system running and prevent virus running.
: Tasklist: displays all process commands of the current system.
: Taskkill: Shut down at least one system process command
/PID is followed by the system process ID. If the ID of notepad.exe is 2152 first, the format is taskkill/PID 2152.
The format is taskkill/PID 2152/PID 1284.
/IM is followed by the system process name, for example, to close notepad.exe, in the format of taskkill/IM notepad.exe. When multiple times are specified, the format is taskkill/IM notepad.exe/IM icycler.exe. if you want to disable all, use the wildcard *, that is, askkill/IM *. EXE
/T is followed by the above two commands, such as taskkill/T/IM notepad.exe or taskkill/T/PID 2152. The effect is to close the prompt after the user confirms it. There is a prompt box.
/F is followed by/PID and/IM, such as taskkill/f/IM notepad.exe or taskkill/f/PID 2152.
The specified process is forcibly disabled without a prompt box.
You can also view the running program in "start --> Run --> msconfig", but it is a little tedious than cmd.
============================================
Taskkill [/S system [/u username [/P [Password]
{[/FI filter] [/PID processid |/IM imagename]} [/F] [/T]
Description:
This command line tool can end at least one process.
You can end a process based on the process ID or image name.
Parameter List:
/S system specifies the remote system to connect.
/U [domain/] User specifies the user Context
Run this command.
/P [Password] specifies the user context provided
Password. If this parameter is ignored, a prompt is displayed.
/F indicates forcible termination
Process.
/FI filter specifies to filter in or out the query
.
/PID process ID specifies the process to terminate
PID.
/Im image name specifies the process to terminate
Image name. Wildcard '*'
All image names can be specified.
/T tree kill: Terminate the specified process
And any sub-processes started from this.
/? Show Help/usage.
Filter:
Valid value of the filter name Operator
----------------------------------------
Status EQ, run by ne | no response
Imagename EQ, ne image name
Pid eq, NE, GT, LT, GE, le PID Value
Session EQ, NE, GT, LT, GE, le session number
Cputime EQ, NE, GT, LT, GE, le CPU time, format:
Hh: mm: Ss.
Hh-hour,
Mm-clock, SS-second
Memusage EQ, NE, GT, LT, GE, and Le memory usage, in KB
Username EQ, ne user name, in the format
[Domain/] user
Modules EQ, ne DLL name
Services EQ, ne service name
Windowtitle EQ, ne window title
Note: The wildcard '*' can be used for switching with/Im only when a filter is available '*'.
Note: The Remote Process must always be forcibly terminated,
Whether or not the/F option is specified.
For example:
Taskkill/S system/f/IM notepad.exe/T
Taskkill/PID 1230/PID 1241/PID 1253/T
Taskkill/f/IM notepad.exe/IM mspaint.exe
Taskkill/f/fi "PID Ge 1000"/fi "windowtitle ne untitle *"
Taskkill/f/fi "username EQ nt authority/system"/IM notepad.exe
Taskkill/S system/u domain/username/fi "username ne Nt *"/IM *
Taskkill/S system/u username/P password/fi "imagename EQ note *"