asked on

Terminate a system process with .vbs

Hi Experts,

I have a script that I have been working which should terminate specific processes I target.

It works fine for the user processes...but it seems to ignore the System processes... I can manually go in to the Process List and end the process...so permissions, I believe, are not the issue.

Please provide me with the code required to kill a process by either the PID or the .exe.

Many thanks!

dineesh

Hi,

try a "Run as" on your script and see if it is able to terminate system processes?

regards
Dinesh

joshlunsford

You can try:

Option Explicit
Dim objWMI, objP, colP
Dim strComputer, strProcess
strComputer = "."
strProcess = "'notepad.exe'" 
Set objWMI = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!\\" _
& strComputer & "\root\cimv2")
 
Set colP = objWMI.ExecQuery _
("Select * from Win32_Process Where Name = " & strProcess )
For Each objP in colP
	objP.Terminate()
Next

Open in new window

r_johnston

ASKER

Joshlunsford, thx for the input, but I have that already and it will not close items that are listed under the User Name as System...

dineesh, code example please.

Thanks y'all.

joshlunsford

try running taskkill -f -im notepad.exe
Set objShell = CreateObject("Shell.Application")
shell.run "taskkill.exe -f -im notepad.exe"

r_johnston

ASKER

I have attached the code that I have thus far for reference.

As of right now...the items marked with 'System Process will not close, the other items will.

The items that I marked as such I can manually go into CTRL+ALT+DEL and close them...I wish to have them close automatically with this .vbs script.


Option Explicit
 
'--------------------------------------------------------------------------------------
 
'This script loops the Cease sub every 5 minutes, time can be set to anything.
 
   while true
      Cease()
      WScript.Sleep 300000  '60 seconds = 60000
   wend
 
'--------------------------------------------------------------------------------------
 
'The following kills the individual programs running in the background.
 
 
Cease
 
Sub Cease
 
'-----------------------------------------------------
'The following code kills User level processes.
 
	Dim objWMIService, objProcess, colProcess
	Dim strComputer, strProcessKill1, strProcessKill2, strProcessKill3, strProcessKill4, strProcessKill5, strProcessKill6, strProcessKill7, strProcessKill8, strProcessKill9, strProcesskill10
 
		strComputer = "."
		strProcessKill1 = "'CCC.exe'" 						'User Level
		strProcessKill2 = "'DWRCST.exe'"					'User Level
		strProcessKill3 = "'LSSrvc.exe'"					'System Level
		strProcessKill4 = "'DWRCS.exe'"						'System Level
		strProcessKill5 = "'xferwan.exe'"					'System Level
		strProcessKill6 = "'cagent32.exe'"					'System Level
		strProcessKill7 = "'connectivity.EDMWS.Server.exe'"			'System Level
		strProcessKill8 = "'connectivity.windowsservice.jobdispatch.exe'"	'System Level
		strProcessKill9 = "'sqlservr.exe'"					'System Level
		strProcessKill10 = "'mom.exe'"						'User Level
 
Killtask 1624
 
 
			Set objWMIService = GetObject("winmgmts:" _
			& "{impersonationLevel=impersonate}!\\" _
			& strComputer & "\root\cimv2")
 
			Set colProcess = objWMIService.ExecQuery ("Select * from Win32_Process Where Name = " & strProcessKill1 )
				For Each objProcess in colProcess
					objProcess.Terminate()
				Next
		
			Set colProcess = objWMIService.ExecQuery ("Select * from Win32_Process Where Name = " & strProcessKill2 )
				For Each objProcess in colProcess
					objProcess.Terminate()
				Next
 
			Set colProcess = objWMIService.ExecQuery ("Select * from Win32_Process Where Name = " & strProcessKill3 )
				For Each objProcess in colProcess
					objProcess.Terminate()
				Next
		
			Set colProcess = objWMIService.ExecQuery ("Select * from Win32_Process Where Name = " & strProcessKill4 )
				For Each objProcess in colProcess
					objProcess.Terminate()
				Next
 
			Set colProcess = objWMIService.ExecQuery ("Select * from Win32_Process Where Name = " & strProcessKill5 )
				For Each objProcess in colProcess
					objProcess.Terminate()
				Next
				
			Set colProcess = objWMIService.ExecQuery ("Select * from Win32_Process Where Name = " & strProcessKill6 )
				For Each objProcess in colProcess
					objProcess.Terminate()
				Next
		
			Set colProcess = objWMIService.ExecQuery ("Select * from Win32_Process Where Name = " & strProcessKill7 )
				For Each objProcess in colProcess
					objProcess.Terminate()
				Next
				
			Set colProcess = objWMIService.ExecQuery ("Select * from Win32_Process Where Name = " & strProcessKill8 )
				For Each objProcess in colProcess
					objProcess.Terminate()
				Next
 
			Set colProcess = objWMIService.ExecQuery ("Select * from Win32_Process Where Name = " & strProcessKill9 )
				For Each objProcess in colProcess
					objProcess.Terminate()
				Next
 
			Set colProcess = objWMIService.ExecQuery ("Select * from Win32_Process Where Name = " & strProcessKill10 )
				For Each objProcess in colProcess
					objProcess.Terminate()
				Next
		
	Exit Sub	
	
End Sub

Open in new window

r_johnston

ASKER

Ignore the Killtask line, I forgot to remove it from the script.

r_johnston

ASKER

So no one knows how to kill a SYSTEM task?

joshlunsford

Both the taskkill and the WMI ways work fine if you have rights to close out the process in question. Do you have admin rights to this machine?

r_johnston

ASKER

joshlunsford, yes, I have full rights to the machine, but I am not familiar with programming the taskkill method.

I could probably search it out, but that would defeat me opening this question. :o)

Please provide a code example for me to try and if it works, you win and I win!!

Thanks!

ASKER CERTIFIED SOLUTION

joshlunsford

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

r_johnston

ASKER

I got it to work, thanks so much!!!

I have one last Q for ya, is there a way to make it so the boxes don't have to pop up???

r_johnston

ASKER

Just had to set the Dim for the variables, other than that, worked like a charm!

joshlunsford

yes you can
change
objShell.run "taskkill.exe -f -im " & program
to
objShell.run "taskkill.exe -f -im " & program,7

if you want to wait for each program to close before moving to the next change it to
objShell.run "taskkill.exe -f -im " & program,7,true

r_johnston

ASKER

Many thanks!

I have attached my final code with notes for anyone else that should need this information.

BE SURE TO CHANGE THE ATTACHED FILE EXTENSION TO .DLL, I CHANGED IT TO .DOC SO IT COULD BE POSTED!!


Option Explicit
 
 
'--------------------------------------------------------------------------------------
 
'The following causes this script to loop every 15 minutes; time can be set to anything.
 
   while true
      Cease()
      WScript.Sleep 900000  '60 seconds = 60000
   wend
 
 
 
'--------------------------------------------------------------------------------------
 
'The following code kills ANY level processes.
'The dbghelp.dll file will be required in the c:\windows\system32 folder.
'It must also be registered by going to the "Run" option on the start menu and typing in "regsvr32 *.dll".
 
'To get rid of the pop-up windows change the following from
   'objShell.run "taskkill.exe -f -im " & program
'to
   'objShell.run "taskkill.exe -f -im " & program,7
 
'if you want to wait for each program to close before moving to the next change it to
   'objShell.run "taskkill.exe -f -im " & program,7,true
 
 
Cease
 
Sub Cease
 
 
	Dim objshell, strprograms, arrprograms, program
 
			Set objShell = WScript.CreateObject( "WScript.Shell" )
			strPrograms = "Program1.exe,Program2.exe,Program3.exe,ProgramN.exe"
			arrPrograms = split(strPrograms,",")
			for each program in arrPrograms
      			objShell.run "taskkill.exe -f -im " & program
			Next
		
	Exit Sub	
	
End Sub

Open in new window

DbgHelp.doc