IT and Business Insights for SMB Solution Providers

Killing stubborn Processes or Services in Windows 10

You always could kill some applications and services by using task manager and clicking on end task but that does not always work. 


Tasklist is a command that displays a list of applications and services with their Process ID (PID) for all tasks running on either a local or a remote computer.
Syntax
tasklist[.exe] [/s computer] [/u domain\user [/p password]] [/fo{TABLE|LIST|CSV}] [/nh] [/fi FilterName[/fi FilterName2 [ ... ]]] [/m[ModuleName] | /svc | /v

Parameters


/s   Computer  : Specifies the name or IP address of a remote computer (do not use backslashes). The default is the local computer.


/u   Domain \User   : Runs the command with the account permissions of the user specified by User or Domain\User. The default is the permissions of the current logged on user on the computer issuing the command.


/p   Password  : Specifies the password of the user account that is specified in the /u parameter.


/fo { TABLE |LIST | CSV } : Specifies the format to use for the output. Valid values are TABLE, LIST, and CSV. The default format for output is TABLE.


/nh   : Suppresses column headers in the output. Valid when the /fo parameter is set to TABLE or CSV.


/fi   FilterName  : Specifies the types of process(es) to include in or exclude from the query. The following table lists valid filter names, operators, and values.



Name


Operators


Value


Status


eq, ne


RUNNING|NOT RESPONDING


Imagename


eq, ne


Any valid string.


PID


eq, ne, gt, lt, ge, le


Any valid positive integer.


Session


eq, ne, gt, lt, ge, le


Any valid session number.


SessionName


eq, ne


Any valid string.


CPUTime


eq, ne, gt, lt, ge, le


Valid time in the format of hh:mm:ss. The mm and ss parameters should be between 0 and 59 and hh can be any valid unsigned numeric value.


Memusage


eq, ne, gt, lt, ge, le


Any valid integer.


Username


eq, ne


Any valid user name ([Domain\]User).


Services


eq, ne


Any valid string.


Windowtitle


eq, ne


Any valid string.


Modules


eq, ne


Any valid string.


/m [ ModuleName ] : Specifies to show module information for each process. When a module is specified, all the processes using that module are shown. When a module is not specified, all the processes for all the modules are shown. Cannot be used with the /svcor the /v parameter.


/svc   : Lists all the service information for each process without truncation. Valid when the /foparameter is set to TABLE. Cannot be used with the /mor the /v parameter.


/v   : Specifies that verbose task information be displayed in the output. Cannot be used with the /svc or the /m parameter.


/? : Displays help at the command prompt.


Remarks


·       

Tasklist is a replacement for the TList tool.

Examples


The following examples show how you can use the tasklistcommand:


tasklist /v /fi "PID gt 1000" /fo csv
tasklist /fi "USERNAME ne NT AUTHORITY\SYSTEM" /fi "STATUS eq running"
tasklist /v /fi "STATUS eq running"
tasklist /s srvmain /nh
tasklist /s srvmain /s srvny
tasklist /s srvmain /u maindom\hiropln /p p@ssW23 /nh



 

When we have information about a process or service that we like to kill no we can use an command in Windows 10 TASKKILL


 

Taskkill Ends one or more tasks or processes. Processes can be killed by process ID or image name.

Syntax

taskkill [/s Computer] [/u Domain\User[/p Password]]] [/fi FilterName] [/pid ProcessID]|[/im ImageName] [/f][/t]

Parameters

/s  Computer   : Specifies the name or IP address of a remote computer (do not use backslashes). The default is the local computer.

/u  Domain \ User   : Runs the command with the account permissions of the user specified by Useror Domain\User. The default is the permissions of the current logged on user on the computer issuing the command.

/p  Password   : Specifies the password of the user account that is specified in the /u parameter.

/fi   FilterName   : Specifies the types of process(es) to include in or exclude from termination. The following are valid filter names, operators, and values.



Name


Operators


Value


Hostname


eq, ne


Any valid string.


Status


eq, ne


RUNNING|NOT RESPONDING


Imagename


eq, ne


Any valid string.


PID


eg, ne, gt, lt, ge, le


Any valid positive integer.


Session


eg, ne, gt, lt, ge, le


Any valid session number.


CPUTime


eq, ne, gt, lt, ge, le


Valid time in the format of hh:mm:ss. The mm and ss parameters should be between 0 and 59 and hh can be any valid unsigned numeric value.


Memusage


eg, ne, gt, lt, ge, le


Any valid integer.


Username


eq, ne


Any valid user name ([Domain\]User).


Services


eq, ne


Any valid string.


Windowtitle


eq, ne


Any valid string.

/pid   ProcessID   : Specifies the process ID of the process to be terminated.

/im   ImageName   : Specifies the image name of the process to be terminated. Use the wildcard (*) to specify all image names.

/f  : Specifies that process(es) be forcefully terminated. This parameter is ignored for remote processes; all remote processes are forcefully terminated.

/t  : Specifies to terminate all child processes along with the parent process, commonly known as a tree kill.

/?: Displays help at the command prompt.

About the Author

ChannelPro SMB Magazine
SUBSCRIBE FREE!

Get an edge on the competition

With each issue packed full of powerful news, reviews, analysis, and advice targeting IT channel professionals, ChannelPro-SMB will help you cultivate your SMB customers and run your business more profitably.