Author Topic: fun with task manager (Read 5007 times)

White Stripes · « **on:** August 18, 2009, 11:16:54 pm »

http://akshayjain.org/blog/2008/08/hack-unable-to-change-priority-in-task-manager/

lets you change the process priority of 'system' processes (amongst other things)

ñòóKýçrÕôK · « **Reply #1 on:** August 19, 2009, 01:57:28 pm »

I didn't see a reply to the question in that thread to whether or not you would have to do that every time to open task manager with system priveledge so I copied the command and pasted it in notepad and saved it to desktop as task.bat and tried it and it worked. makes a right propper shortcut to taskmanager.

White Stripes · « **Reply #2 on:** August 20, 2009, 12:49:37 am »

i put it in the 'run' box as "cmd /c ntsd -c qd tasmgr" (without the quotes) ... works the same as the .bat file without creating a file since its in the run boxs' history list

guess it would have been nice tho if the blogger had mentioned that it -does- need to be run like that every time...

intesting tidbit; change the .bat to .cmd and it will start quicker.... (using .bat starts the ntvdm and the old 16 bit dos command.com to run it)

ñòóKýçrÕôK · « **Reply #3 on:** August 20, 2009, 12:01:58 pm »

Quote from: Silver Stripes on August 20, 2009, 12:49:37 am

"cmd /c ntsd -c qd tasmgr"

Ok, so just out of curiousity can you break that down and tell me what exactly I'm telling windows when I type that command?

wonderer · « **Reply #4 on:** August 20, 2009, 01:31:29 pm »

First of all I think SS meant

cmd /c ntsd -c qd taskmgr

and breaking down,

CMD start command shell

/C Carries out My_Command and then terminates

ntsd invokes windows command line debugger

-c executes the following debugger command

qd quit and detach the application

another nice "feature"

Kill *any* process:
Get list of processes : tasklist /svc
Kill Process : ntsd -p <pid> -c "q"

Start Task Manager with Elevated Privileges (Kill System Processes, etc):
ntsd -hd -c "qd" taskmgr
-c "qd" tells debugger to execute 'qd' command at the first breakpoint.
-hd forces the target process to use regular heap (when the process is started under debugger the default is to use the NT debug heap. This is slower and takes up more memory)

note: qd has another function than "qd"