A process is a program's execution activity on the computer. When you run a program, you start a process. Obviously, the program is Dead (static), the process is alive (dynamic). Processes can be divided into system processes and user processes. The processes that are used to complete the various functions of the operating system are system processes, which are operating systems themselves; The user process is all the processes that you start. A process is the unit in which the operating system allocates resources. Some processes we through the "Task Manager" is not the end, if encounter Trojans how to do? We can force the end of this process, please see the techniques described below.
Only system, SMSS in the Windows operating system. EXE and CSRSS.EXE can't kill. The first two are pure kernel state, the last one is the WIN32 subsystem, NTSD itself needs it. NTSD starting from 2000 is the system's own user-state debugging tool. A process that is attached to the debugger (attach) exits with the debugger, so it can be used to terminate the process at the command line. Using NTSD automatically gets debug permissions, which kills most of the process. NTSD will open a new debugging window, which could not be controlled at the pure command line, but if it is simply a command, such as exit (Q), it can be passed from the command line with the-c parameter. NTSDNTSD is also provided to software developers in accordance with established practice. This command is only used by system developers. For more information, see the Help file that is attached to the NTSD. Usage: Open a cmd.exe window and enter:
ntsd-c q-p PID
Change the last PID to the ID of the process you want to terminate. If you do not know the ID of the process, Task Manager-> process tab-> view-> Select column-> tick "PID (process Identifier)" and then you can see it.
XP also has two handy tools tasklist and Tskill. Tasklist can list all the processes, and the corresponding information. Tskill can killing process, syntax is very simple: Tskill program name!!