Ways to end Windows system processes

A process is a program's execution activity on the computer. When you run a program, you start a process. Obviously, the program is Dead (static), the process is alive (dynamic). Processes can be divided into system processes and user processes. The processes that are used to complete the various functions of the operating system are system processes, which are operating systems themselves; The user process is all the processes that you start. A process is the unit in which the operating system allocates resources. Some processes we through the "Task Manager" is not the end, if the encounter Trojan how to do? We can force the end of this process, please see the techniques described below.

Only system, SMSS in the Windows operating system. EXE and CSRSS.EXE can't kill. The first two are pure kernel state, the last one is the WIN32 subsystem, NTSD itself needs it. NTSD starting from 2000 is the system's own user-state debugging tool. A process that is attached to the debugger (attach) exits with the debugger, so it can be used to terminate the process at the command line. Using NTSD automatically gets debug permissions, which kills most of the process. NTSD will open a new debugging window, which could not be controlled at the pure command line, but if it is simply a command, such as exit (Q), it can be passed from the command line with the-c parameter. NTSDNTSD is also provided to software developers in accordance with established practice. This command is only used by system developers. For more information, see the Help file that is attached to the NTSD. Usage: Open a cmd.exe window and enter:

Ntsd-c q-p PID

Change the last PID to the ID of the process you want to terminate. If you do not know the ID of the process, Task Manager-> process tab-> view-> Select column-> tick "PID (process Identifier)" and then you can see it.

XP also has two handy tools tasklist and Tskill. Tasklist can list all the processes, and the corresponding information. 　　Tskill can killing process, the syntax is very simple: Tskill program name. 1 sleep and wake of the Linux process

In Linux, processes that wait only for CPU time are called ready processes, which are placed in a running queue, and a ready process has a status flag of task_running. Once a running process time slice runs out, the Linux kernel scheduler robs the process of controlling the CPU and chooses a suitable process to run from the run queue.

Of course, a process can also actively release the control of the CPU. The function schedule () is a dispatch function that can be invoked by a process to schedule other processes to occupy the CPU. Once the active abort process is scheduled to occupy the CPU, it will begin execution from the last stop execution, meaning it will start at the next line of code that calls schedule ().

Sometimes, a process waits until a specific event occurs, such as device initialization, I/O operations completed, or timer time. In this case, the process must be moved out of the running queue and added to a waiting queue, at which point the process enters the sleep state.