@echo off
setlocal enabledelayedexpansion
for /f "tokens=1* skip=1" %%a in ('reg /?^| findstr /e ?') do (
reg %%b
) 
pause>nul
复制代码

@echo off
echo HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run里面的启动项及路径有:
for /f "skip=4 tokens=1,3" %%a in ('reg query HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run') do echo %%a &echo %%b 
echo 「开始」菜单\程序\启动里面的项目有: 
for /r C:\DOCUME~1\ADMINI~1\LOCALS~1\「开始」菜单\程序\启动 %%i in (*) do echo %%i
pause>nul
复制代码

wmic startup list brief |findstr /v "desktop.ini ctfmon.exe" >启动项.txt
复制代码

 start msinfo32 /categories +SWEnvStartupPrograms /report 启动项.txt
复制代码

方法一: wmic process list status >进程列表.txt

方法二：tasklist >进程列表.txt

方法三: start msinfo32 /categories +SWEnvRunningTasks /report 进程列表.txt
复制代码

方法一:taskill /im 进程名 或PID 例:taskill /im notepad.exe 又如:taskill 514 (514
为进程PID)

方法二:ntsd -c q -p 进程PID 

方法三:wmic process where name="进程名" call terminate
复制代码