What if you find that there are some suspicious processes in the process List of Task Manager that you can't kill with Task manager?
The Windows xp/2000 Task Manager is a very useful tool, can let you see the system is running which programs (processes), as long as you usually look at the task Manager in the process list, familiar with the basic process of the system, you can find suspicious process at any time, which is helpful to prevent Trojan horse and virus!
One, which system processes can not be turned off
When Windows runs, multiple processes are started. As soon as you press the "Ctrl+alt+del" key to open Task Manager, click "View"/select column, check "PIO (process Identifier)", and then click the "Process" tab to see these processes. However, there are some processes the individual users do not use, such as Systray.exe (Display system tray small horn icon), Ctfmon.exe (Microsoft Office Input Method), Winampa.exe, etc., we can completely prohibit them, this does not affect the normal operation of the system.
Second, how to close the Task manager can not kill the process
If you cannot close a suspicious process in Task Manager, you can use the following method to force the shutdown, and be careful not to kill the system core processes in the process table:
1. Using Windows xp/2000 with its own tools
Starting with Windows 2000, the Windows system comes with a user-state debugging tool NTSD, which kills most processes because the process that is attached to the debugger exits with the debugger, so as long as you use NTSD to pull up a process at the command line, You can then terminate the process by exiting NTSD, and using NTSD automatically obtains debug permissions, so NTSD kills most of the process.
How to: Click Start/Program/attachment/Command prompt, enter command: NTSD-C q-p pid (change the last PID to the PID of the process you want to terminate). In the process list you can find the PID of a process, for example we want to turn off the Explorer.exe process in Figure 1, enter: Ntsd-c q-p 408.
The above parameter-P indicates that the process PID followed, C-Q means to execute the debugging command to exit the NTSD, the above parameters from the command line passed the past on the line.
2. Use specialized software to kill the process
Task Manager cannot kill the process, you can use specialized software to shut it down. There are many software that can kill processes, such as process killers, IceSword, Willow Wipes, System View masters, kill process, and so on.
(1) Process killer 2.7
It can browse through all the processes running in the system, including processes that are not visible with Ctrl+alt+del, you can streamline processes, automatically abort all processes except the basic process of the system, and have a certain scavenging effect on Trojans and virus processes, you can use it to abort any running process at any time, select the process, and press " Abort the process button.