Process Manipulation Utilities
Last Updated: 31 Oct 2005
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
*** PLEASE NOTE: Link(s), If Provided, May Be Wrapped ***
The following tools can be used to view and/or kill local
and remote processes.
CONSOLE COMMANDS
• TASKLIST ............... Native Utility (View) -- XP/2003
• TASKKILL ............... Native Utility (Kill) -- XP/2003
• MEMSNAP ................ Support Tools (Memory Usage View)
• POOLMON ................ Support Tools (Memory Usage View)
• PSTAT .................. Resource Kit (View)
• TLIST .................. Resource Kit (View)
• KILL ................... Resource Kit (View/Kill)
• PULIST ................. Resource Kit (View/Remote)
• RKILL .................. Resource Kit (View/Kill/Remote)
• PTREE .................. Resource Kit (View/Kill/Remote) -- Win2K
• ListDLLs ............... http://technet.microsoft.com/en-us/sysinternals/bb545027.aspx
• LoadOrder .............. http://www.sysinternals.com/ntw2k/source/misc.shtml#loadorder
• NT Handle .............. http://technet.microsoft.com/en-us/sysinternals/bb545027.aspx
• PsTools ................ http://www.sysinternals.com/ntw2k/freeware/pstools.shtml
• DevCon ................. http://support.microsoft.com/?KBID=311272
• AINTX Utilities ........ http://www.dwam.net/docs/aintx/
• WinInterrogate ......... http://winfingerprint.sourceforge.net/
• DRIVERQUERY ............ Native Utility View Loaded Drivers) -- XP/2003
• DRIVERS ................ Resource Kit (View Loaded Drivers)
• PMON ................... Resource Kit (Continuous View)
• TOP .................... Resource Kit (View Active Processes)
GUI
• Task Manager ........... Native Command (View/Kill)
• QSLICE ................. Resource Kit (View)
• PVIEWER ................ Resource Kit (View/Kill/Remote)
• WRKILL ................. Resource Kit (View/Kill/Remote)
• Northern Utilities ..... http://www.northern.net/siteUtilities/
• Process Explorer ....... http://technet.microsoft.com/en-us/sysinternals/bb545027.aspx
• RemoteNOW .............. http://www.liutilities.com/products/remotenow/
• Remote Task Manager .... http://www.ntutility.com/rtm/
• TaskInfo ............... http://www.iarsn.com/download.html
• WinRemote .............. http://www.admwin.com/
SETTING PRIORITY LEVELS
You can use the following utility to set the priority
level of an executable from the command line:
• PRIOSET ................ http://hem.spray.se/anders.peterson/prioset.html
SCRIPTING SAMPLES
The following batch file scans every machine in your
domain for a specific running process. It requires the
PSTools from http://www.sysinternals.com/
*** Requires Windows 2000 or higher ***
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
@ECHO OFF
SETLOCAL
SET @PROCESS=OUTLOOK
SET @LOGFILE="%TEMP%\Process.LOG"
( rem -- Consolidate LogFile Output
NOW Searching Domain for "%@PROCESS%" Process.
FOR /F %%V IN ('NET VIEW ^| FIND "\\"') DO PSLIST %%V "%@PROCESS%"
) >%@LOGFILE%
TYPE %@LOGFILE%
ENDLOCAL
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
WHITEPAPERS & TECH DOCUMENTS
• http://support.microsoft.com/?KBID=197155
• http://support.microsoft.com/?KBID=263201
• http://www.microsoft.com/windowsxp/home/using/productdoc/en/sys_srv_default_settings.asp
• http://www.microsoft.com/windows2000/techinfo/howitworks/management/w2kservices.asp
• http://www.microsoft.com/TechNet/prodtechnol/windows2000serv/deploy/prodspecs/win2ksvc.asp
• http://snakefoot.fateback.com/tweak/winnt/services.html
• http://www.tweaktown.com/document.php?dType=guide&dId=120&dPage=6
• http://www.greatis.com/regrun3useless.htm
• http://www.answersthatwork.com/Tasklist_pages/tasklist.htm
• https://brainwavecc.com/TechDocs/Tweaking.html
PERSONAL NOTES
• Be sure to check HELP at a command prompt in XP and
Server 2003, as there are a host of new command, and
extra options for older commands.
• You can also obtain PMON, PVIEWER, TLIST, MEMSNAP
and KILL along with other utilites on the Windows
2000 installation CD as part of the Windows 2000
Support Tools (SUPPORT folder)
• KILL should always be used with the -f parameter,
as it is considerably more effective that way.
• RKILL and PVIEWER will work on remote systems as
well, and RKILL will even install itself on a remote
system if you ask it to.
• PSLIST is one of many great PSTOOLS from the folks
at SysInternals. Don't leave home without it.