自制控制进程和控制开机启动项批处理(ntsd强制结束版)

自动结束强制智能结束.vbs

vbs主要起到运行bat的目地，传参
复制代码 代码如下:
set wshshell=createobject("wscript.shell")
wshshell.run "针对性进程管理.bat"
wscript.sleep 2000

for x=1 to 30
wscript.sleep 1000
wshshell.sendkeys "{enter 3}"
next

针对性进程管理.bat

复制代码 代码如下:
@echo off&setlocal enabledelayedexpansion
ping -n 3 127.0>nul
if exist tem.txt del /f /q tem.txt
echo.正在刷选进程.............
echotem.txt explorer.exe
echotem.txt System Idle Process
echotem.txt System
echotem.txt smss.exe
echotem.txt csrss.exe
echotem.txt winlogon.exe
echotem.txt services.exe
echotem.txt TheWorld.exe
echotem.txt lsass.exe
echotem.txt svchost.exe
echotem.txt spoolsv.exe
echotem.txt alg.exe
echotem.txt ctfmon.exe
echotem.txt ekrn.exe
echotem.txt wdfmgr.exe
echotem.txt 360tray.exe
echotem.txt egui.exe
echotem.txt wmiprvse.exe
echotem.txt QQ.exe
echotem.txt cmd.exe
echotem.txt IEXPLORE.EXE
echotem.txt TXPlatform.exe
echotem.txt tasklist.exe
echotem.txt conime.exe
echotem.txt safeboxTray.exe
echotem.txt wscript.exe
for /f "eol= tokens=1,2 delims=," %%i in ('tasklist /nh /fo csv') do (
findstr /i /x %%i tem.txt >nul
if errorlevel 1 (
echo =============================================================
echo =============================================================
echo %%i位于以下路径
wmic process where processid=%%j get executablepath|findstr /v /i "executablepath"
ntsd -c q -p %%j 1>nul 2>nul
ping -n 1 127.0>nul
tasklist|findstr /i %%i >nul
if errorlevel 1 (
echo %%i已经完全成功结束
) else (
echo %%i未能完全结束，估计是个流氓程序
)
)
)
del tem.txt & echo 结束进程任务基本完成
taskkill /f /im wscript.exe
mshta vbscript:msgbox("我的任务完成了！请看详细信息",,"刷选进程")(window.close)
taskkill /f /im cmd.exe