Kill unimportant processes

Jackbox · Aug 17, 2019

Launch CMD as admin.

Code:

tasklist /fi "memusage gt 50000" | sort /r /+65

This could be helpful, to find other sessions.

Code:

tasklist /v /FI "Session gt 0"

Code:

tasklist /v /FI "Username eq N/A"

Code:

tasklist /v /FI "Username ne N/A"

If something besides System Idle Process is running, probably scream and figure shit out quickly. Could also swap this to eq Domain1\Username1

Code:

tasklist /v /FI "Username eq NT AUTHORITY\SYSTEM"

Search for Realtek drivers running?

Code:

tasklist /v /FI "Windowtitle eq Real*"

Any unresponsive processes? Kill 'em perhaps.

Code:

tasklist /v /FI "Status eq Not Responding"

Find some early processes?

Code:

tasklist /v /FI "pid lt 1000"

If you run a regular Command Prompt and then one as an Administrator, you will see the difference with this filter.

Code:

tasklist /v /FI "Imagename eq cmd*"

Find all processes running as an Administrator:

Code:

tasklist /v | findstr "Admin"
tasklist /v /FI "Windowtitle eq Admin*"

Any console apps running?

Code:

tasklist /v /FI "Sessionname eq Console"

Any non-console apps running?

Code:

tasklist /v /FI "Sessionname ne Console"

Anything running not a console nor a service?

Code:

tasklist /v /FI "Sessionname ne Console" /FI "Sessionname ne Services"

Get output in a csv view.

Code:

tasklist /v /FI "Imagename eq d*" /fo csv

Find what is using the "iexproxy" dll?

Code:

tasklist /M /fo csv | findstr "ieproxy"

Longest running app? Launch PowerShell as admin.

Code:

get-wmiobject Win32_PerfFormattedData_PerfProc_Process | Select -Property PercentProcessorTime, Name, ElapsedTime | Sort-Object -Property ElapsedTime | Format-Table ElapsedTime, Name, PercentProcessorTime

Code:

get-wmiobject Win32_PerfFormattedData_PerfProc_Process | Select -Property PercentProcessorTime, Name, ElapsedTime, Threadcount | Sort-Object -Property Threadcount

Code:

get-wmiobject Win32_PerfFormattedData_PerfProc_Process | Select -Property CreatingProcessID, Name | Sort-Object -Property CreatingProcessID | Format-List CreatingProcessID, Name

Jackbox · Aug 17, 2019

And so this is not "clickbait", here's a loop to kill everything? Good luck, don't BSoD.

taskkill /f /pid 7

Code:

for /L %i IN (1,1,9000) DO echo %i

So, that does.. cool stuff, now just loop that like this:

Code:

for /L %i IN (1,1,9000) DO taskkill /f /pid %i

Kill unimportant processes

Jackbox

Active Member

Jackbox

Active Member