Board logo

标题: [系统增强] 进程与DLL模块相互查询及管理批处理版 [打印本页]

作者: foxJL    时间: 2008-1-7 23:15     标题: 进程与DLL模块相互查询及管理批处理版

没做界面美化,实用为主.
因为网页不能处理Tab(跳格键),都会自动用空格代替,请下载附件使用.
  1. @echo off&setlocal enabledelayedexpansion
  2. ::code by foxjl@bbs.bathome.net 2008/01/07
  3. :menu
  4. cls&echo\&echo\
  5. echo.    1.显示进程及所被调用的模块(简洁)
  6. echo\
  7. echo.    2.通过进程查找并列出所调用的模块(包括模块详细信息)
  8. echo\
  9. echo.    3.通过模块找到所调用它的进程
  10. echo\
  11. echo.    4.结束进程
  12. :afresh
  13. echo\
  14. set/p choice=    请输入选项:
  15. set error=    错误的选择,请重新输入.
  16. if %choice% leq 0 (echo.%error%&goto afresh) else (if %choice% gtr 4 (echo.%error%&goto afresh))
  17. goto choice%choice%
  18. pause&exit
  19. :choice1
  20. cls
  21. tasklist /m /fo "csv" /nh
  22. echo.所有进程及所被调用的模块显示完毕.按任意键返回.
  23. pause>nul&goto menu
  24. :choice2
  25. del particular.txt >nul 2>nul
  26. echo\
  27. set /p name=    请输入进程名(如Q.exe):
  28. for /f %%i in ('TASKLIST /fi "IMAGENAME eq %name%" /fo "csv" /nh /m') do (
  29. set namedll=%%~i
  30. set namedll=!namedll:"=!
  31. echo !namedll!
  32. )
  33. echo\
  34. set /p yes=进程"%name%"调用的所有模块列举完毕,是否列出模块详细信息(Y/N):
  35. set /p all=A-仅路径(默认完整信息):
  36. mode con cols=150 lines=80
  37. if /i "%yes%"=="y" (
  38. start msinfo32 /categories +swenvloadedmodules /report particular.txt
  39. echo.请稍候...
  40. :particular
  41. if not exist particular.txt (
  42.    ping -n 1 127.1>nul
  43.    goto particular
  44.   ) else (
  45.     cls
  46.     if /i "%all%"=="A" (echo.名称---路径) else (echo.名称---版本---大小---文件日期---制造商---路径)
  47.     for %%i in (%namedll%) do (
  48.     if /i "%all%"=="A" (
  49.      for /f "delims=  tokens=1,6" %%j in ('type particular.txt ^| find /i "%%i"') do (
  50.      echo %%j---%%k
  51.     )
  52.     ) else (
  53.     for /f "delims=" %%j in ('type particular.txt ^| find /i "%%i"') do (
  54.     set particular=%%j
  55.     set particular=!particular: =-!
  56.     echo !particular!
  57.    )
  58.    )
  59.    )
  60.    echo.进程"%name%"调用的所有模块详细信息列举完毕,按任意键返回.
  61.    pause>nul&goto menu
  62. )
  63. )
  64. goto menu
  65. :choice3
  66. echo\&set /p b=输入DLL名:
  67. for /f "tokens=*" %%i in ('TASKLIST /m /fo "csv" /nh') do (
  68. echo %%i | find /i "%b%"
  69. if not %ERRORLEVEL% equ 0 echo\&echo %%i)
  70. echo\&echo.显示完毕.按任意键返回.
  71. pause>nul&goto menu
  72. :choice4
  73. Tasklist
  74. echo ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━以上是进程列表.
  75. Set /p IM=输入所要结束进程的名称(如:id.exe):
  76. taskkill /f /t /im %IM%
  77. ECHO 命令完成!按任意键返回.
  78. pause>nul&goto menu
复制代码
链接: https://pan.baidu.com/s/1j7P6l5TBTqgsuLtxeFCF4Q?pwd=7jyf
作者: somebody    时间: 2008-1-8 00:18

1. 走我的老路~~~~~想当初为这个问题浪费N 多精力,狂想突破批处理瓶脊,发现自己是傻瓜....VBS解救了我.
   tasklist 和 msinfo32
  tasklist 得到的信息不详细,比如DLL全路径,你用批处理很难得到(全面的)
至于msinfo32 ,运行完我都吃完一餐了。想以前我狂研究这个令人郁闷的东西
2. 一发出来马上高亮,厉害!"forJL出品,必属精品" 是不是这样吖 youxi01
3. 若你真正有兴趣研究安全问题....本论坛的关于进程的精华贴你看过后绝对有收获,就算看了没收获,用过后你也会有另翻想法...

[ 本帖最后由 somebody 于 2008-1-8 00:19 编辑 ]
作者: 随风    时间: 2008-1-8 00:24

原来纯批也可以做到这么厉害,佩服!!!
作者: somebody    时间: 2008-1-8 00:25

我帮你测试一下...
  1.   1.显示进程及所被调用的模块(简洁)
  2.   2.通过进程查找并列出所调用的模块(包括模块详细信息)
  3.   3.通过模块找到所调用它的进程
  4.   4.结束进程
  5.   请输入选项:1
复制代码
结果:
  1. "System Idle Process","0","暂缺"
  2. "System","4","暂缺"
  3. "smss.exe","688","ntdll.dll"
  4. "csrss.exe","756","ntdll.dll,CSRSRV.dll,basesrv.dll,winsrv.dll,USER32.dll,KERNEL
  5. 32.dll,GDI32.dll,LPK.DLL,USP10.dll,msvcrt.dll,ADVAPI32.dll,RPCRT4.dll,sxs.dll,Ap
  6. phelp.dll,VERSION.dll"
  7. "winlogon.exe","780","ntdll.dll,kernel32.dll,ADVAPI32.dll,RPCRT4.dll,AUTHZ.dll,m
  8. svcrt.dll,CRYPT32.dll,USER32.dll,GDI32.dll,MSASN1.dll,NDdeApi.dll,PROFMAP.dll,NE
  9. TAPI32.dll,USERENV.dll,PSAPI.DLL,REGAPI.dll,Secur32.dll,SETUPAPI.dll,VERSION.dll
  10. ,WINSTA.dll,WINTRUST.dll,IMAGEHLP.dll,WS2_32.dll,WS2HELP.dll,IMM32.DLL,LPK.DLL,U
  11. SP10.dll,MSGINA.dll,SHELL32.dll,SHLWAPI.dll,COMCTL32.dll,ODBC32.dll,comdlg32.dll
  12. ,comctl32.dll,odbcint.dll,SHSVCS.dll,sfc.dll,sfc_os.dll,ole32.dll,Apphelp.dll,ms
  13. ctfime.ime,sxs.dll,WINSCARD.DLL,WTSAPI32.dll,uxtheme.dll,WINMM.dll,cscdll.dll,kl
  14. ogon.dll,rsaenh.dll,WlNotify.dll,WINSPOOL.DRV,MPR.dll,SAMLIB.dll,msv1_0.dll,iphl
  15. papi.dll,wldap32.dll,cscui.dll,xpsp2res.dll,NTMARTA.DLL,wdmaud.drv,msacm32.drv,M
  16. SACM32.dll,midimap.dll,COMRes.dll,OLEAUT32.dll,CLBCATQ.DLL,wbemprox.dll,wbemcomn
  17. .dll,wbemsvc.dll,fastprox.dll,MSVCP60.dll,NTDSAPI.dll,DNSAPI.dll"
  18. "services.exe","824","ntdll.dll,kernel32.dll,msvcrt.dll,ADVAPI32.dll,RPCRT4.dll,
  19. USER32.dll,GDI32.dll,USERENV.dll,SCESRV.dll,AUTHZ.dll,umpnpmgr.dll,WINSTA.dll,NE
  20. TAPI32.dll,NCObjAPI.DLL,MSVCP60.dll,ShimEng.dll,AcGenral.DLL,WINMM.dll,ole32.dll
  21. ,OLEAUT32.dll,MSACM32.dll,VERSION.dll,SHELL32.dll,SHLWAPI.dll,UxTheme.dll,IMM32.
  22. DLL,LPK.DLL,USP10.dll,comctl32.dll,comctl32.dll,secur32.dll,Apphelp.dll,eventlog
  23. .dll,WS2_32.dll,WS2HELP.dll,PSAPI.DLL,wtsapi32.dll"
  24. "lsass.exe","836","ntdll.dll,kernel32.dll,ADVAPI32.dll,RPCRT4.dll,LSASRV.dll,msv
  25. crt.dll,Secur32.dll,USER32.dll,GDI32.dll,SAMSRV.dll,cryptdll.dll,DNSAPI.dll,WS2_
  26. 32.dll,WS2HELP.dll,MSASN1.dll,NETAPI32.dll,SAMLIB.dll,MPR.dll,NTDSAPI.dll,WLDAP3
  27. 2.dll,ShimEng.dll,AcGenral.DLL,WINMM.dll,ole32.dll,OLEAUT32.dll,MSACM32.dll,VERS
  28. ION.dll,SHELL32.dll,SHLWAPI.dll,USERENV.dll,UxTheme.dll,IMM32.DLL,LPK.DLL,USP10.
  29. dll,comctl32.dll,comctl32.dll,msprivs.dll,kerberos.dll,msv1_0.dll,iphlpapi.dll,n
  30. etlogon.dll,w32time.dll,MSVCP60.dll,schannel.dll,CRYPT32.dll,wdigest.dll,rsaenh.
  31. dll,setupapi.dll,scecli.dll,ipsecsvc.dll,AUTHZ.dll,oakley.DLL,WINIPSEC.DLL,pstor
  32. svc.dll,mswsock.dll,hnetcfg.dll,wshtcpip.dll,psbase.dll,dssenh.dll,iissuba.dll"
  33. "svchost.exe","1000","ntdll.dll,kernel32.dll,ADVAPI32.dll,RPCRT4.dll,ShimEng.dll
  34. ,AcGenral.DLL,USER32.dll,GDI32.dll,WINMM.dll,ole32.dll,msvcrt.dll,OLEAUT32.dll,M
  35. SACM32.dll,VERSION.dll,SHELL32.dll,SHLWAPI.dll,USERENV.dll,UxTheme.dll,IMM32.DLL
  36. ,LPK.DLL,USP10.dll,comctl32.dll,comctl32.dll,NTMARTA.DLL,WLDAP32.dll,SAMLIB.dll,
  37. rpcss.dll,WS2_32.dll,WS2HELP.dll,Secur32.dll,xpsp2res.dll,CLBCATQ.DLL,COMRes.dll
  38. ,termsrv.dll,ICAAPI.dll,SETUPAPI.dll,WINTRUST.dll,CRYPT32.dll,MSASN1.dll,IMAGEHL
  39. P.dll,AUTHZ.dll,mstlsapi.dll,ACTIVEDS.dll,adsldpc.dll,NETAPI32.dll,ATL.DLL,REGAP
  40. I.dll,rsaenh.dll,rdpwsx.dll,WINSPOOL.DRV,Apphelp.dll,WTSAPI32.dll,WINSTA.dll,msv
  41. 1_0.dll,iphlpapi.dll"
  42. "svchost.exe","1060","ntdll.dll,kernel32.dll,ADVAPI32.dll,RPCRT4.dll,ShimEng.dll
  43. ,AcGenral.DLL,USER32.dll,GDI32.dll,WINMM.dll,ole32.dll,msvcrt.dll,OLEAUT32.dll,M
  44. SACM32.dll,VERSION.dll,SHELL32.dll,SHLWAPI.dll,USERENV.dll,UxTheme.dll,IMM32.DLL
  45. ,LPK.DLL,USP10.dll,comctl32.dll,comctl32.dll,rpcss.dll,WS2_32.dll,WS2HELP.dll,Se
  46. cur32.dll,xpsp2res.dll,rsaenh.dll,mswsock.dll,hnetcfg.dll,wshtcpip.dll,DNSAPI.dl
  47. l,iphlpapi.dll,winrnr.dll,WLDAP32.dll,rasadhlp.dll,CLBCATQ.DLL,COMRes.dll,msi.dl
  48. l"
  49. "svchost.exe","1388","ntdll.dll,kernel32.dll,ADVAPI32.dll,RPCRT4.dll,ShimEng.dll
  50. ,AcGenral.DLL,USER32.dll,GDI32.dll,WINMM.dll,ole32.dll,msvcrt.dll,OLEAUT32.dll,M
  51. SACM32.dll,VERSION.dll,SHELL32.dll,SHLWAPI.dll,USERENV.dll,UxTheme.dll,IMM32.DLL
  52. ,LPK.DLL,USP10.dll,comctl32.dll,comctl32.dll,NTMARTA.DLL,WLDAP32.dll,SAMLIB.dll,
  53. xpsp2res.dll,shsvcs.dll,WINSTA.dll,NETAPI32.dll,dhcpcsvc.dll,DNSAPI.dll,WS2_32.d
  54. ll,WS2HELP.dll,iphlpapi.dll,Secur32.dll,rsaenh.dll,wzcsvc.dll,rtutils.dll,WMI.dl
  55. l,CRYPT32.dll,MSASN1.dll,WTSAPI32.dll,ESENT.dll,ATL.DLL,schedsvc.dll,NTDSAPI.dll
  56. ,IMAGEHLP.dll,rastls.dll,CRYPTUI.dll,WINTRUST.dll,WININET.dll,MPRAPI.dll,ACTIVED
  57. S.dll,adsldpc.dll,SETUPAPI.dll,RASAPI32.dll,rasman.dll,TAPI32.dll,SCHANNEL.dll,W
  58. inSCard.dll,raschap.dll,msv1_0.dll,MSIDLE.DLL,audiosrv.dll,wkssvc.dll,cryptsvc.d
  59. ll,certcli.dll,pchsvc.dll,es.dll,COMRes.dll,CLBCATQ.DLL,ersvc.dll,dmserver.dll,s
  60. rvsvc.dll,netman.dll,netshell.dll,credui.dll,WZCSAPI.DLL,trkwks.dll,srsvc.dll,PO
  61. WRPROF.dll,sens.dll,seclogon.dll,HNETCFG.DLL,wmisvc.dll,VSSAPI.DLL,SXS.DLL,w32ti
  62. me.dll,MSVCP60.dll,ipnathlp.dll,MSWSOCK.dll,AUTHZ.dll,wscsvc.dll,msi.dll,wshtcpi
  63. p.dll,comsvcs.dll,MTXCLU.DLL,WSOCK32.dll,colbact.DLL,CLUSAPI.DLL,RESUTILS.DLL,br
  64. owser.dll,wbemcomn.dll,wbemcore.dll,esscli.dll,FastProx.dll,upnp.dll,WINHTTP.dll
  65. ,SSDPAPI.dll,wmiutils.dll,rasadhlp.dll,repdrvfs.dll,wmiprvsd.dll,NCObjAPI.DLL,wb
  66. emess.dll,netcfgx.dll,rasmans.dll,WINIPSEC.DLL,tapisrv.dll,PSAPI.DLL,rastapi.dll
  67. ,unimdm.tsp,uniplat.dll,ncprov.dll,kmddsp.tsp,ndptsp.tsp,ipconf.tsp,h323.tsp,hid
  68. phone.tsp,HID.DLL,rasppp.dll,ntlsapi.dll,kerberos.dll,cryptdll.dll,RASDLG.dll,ms
  69. xml3.dll,urlmon.dll,wbemsvc.dll"
  70. "svchost.exe","1460","ntdll.dll,kernel32.dll,ADVAPI32.dll,RPCRT4.dll,ShimEng.dll
  71. ,AcGenral.DLL,USER32.dll,GDI32.dll,WINMM.dll,ole32.dll,msvcrt.dll,OLEAUT32.dll,M
  72. SACM32.dll,VERSION.dll,SHELL32.dll,SHLWAPI.dll,USERENV.dll,UxTheme.dll,IMM32.DLL
  73. ,LPK.DLL,USP10.dll,comctl32.dll,comctl32.dll,dnsrslvr.dll,DNSAPI.dll,WS2_32.dll,
  74. WS2HELP.dll,iphlpapi.dll,mswsock.dll,hnetcfg.dll,wshtcpip.dll"
  75. "svchost.exe","1620","ntdll.dll,kernel32.dll,ADVAPI32.dll,RPCRT4.dll,ShimEng.dll
  76. ,AcGenral.DLL,USER32.dll,GDI32.dll,WINMM.dll,ole32.dll,msvcrt.dll,OLEAUT32.dll,M
  77. SACM32.dll,VERSION.dll,SHELL32.dll,SHLWAPI.dll,USERENV.dll,UxTheme.dll,IMM32.DLL
  78. ,LPK.DLL,USP10.dll,comctl32.dll,comctl32.dll,NTMARTA.DLL,WLDAP32.dll,SAMLIB.dll,
  79. xpsp2res.dll,lmhsvc.dll,iphlpapi.dll,WS2_32.dll,WS2HELP.dll,webclnt.dll,WININET.
  80. dll,CRYPT32.dll,MSASN1.dll,Secur32.dll,urlmon.dll,wsock32.dll,ssdpsrv.dll,hnetcf
  81. g.dll,CLBCATQ.DLL,COMRes.dll,mswsock.dll,wshtcpip.dll,rsaenh.dll,httpapi.dll,WIN
  82. HTTP.dll,DNSAPI.dll,rasadhlp.dll,RASAPI32.DLL,rasman.dll,NETAPI32.dll,TAPI32.dll
  83. ,rtutils.dll,msv1_0.dll,sensapi.dll"
  84. "stormliv.exe","236","ntdll.dll,kernel32.dll,SHLWAPI.dll,msvcrt.dll,GDI32.dll,US
  85. ER32.dll,ADVAPI32.dll,RPCRT4.dll,WS2_32.dll,WS2HELP.dll,MSVCP60.dll,MFC42.DLL,co
  86. mdlg32.dll,COMCTL32.dll,SHELL32.dll,ole32.dll,OLEAUT32.dll,VERSION.dll,SETUPAPI.
  87. dll,WININET.dll,CRYPT32.dll,MSASN1.dll,IMM32.DLL,LPK.DLL,USP10.dll,MFC42LOC.DLL,
  88. uxtheme.dll,xpsp2res.dll,mswsock.dll,hnetcfg.dll,wshtcpip.dll,CLBCATQ.DLL,COMRes
  89. .dll,DNSAPI.dll,msxml3.dll,winrnr.dll,WLDAP32.dll,rasadhlp.dll,urlmon.dll,mlang.
  90. dll,Secur32.dll"
  91. "explorer.exe","436","ntdll.dll,kernel32.dll,msvcrt.dll,ADVAPI32.dll,RPCRT4.dll,
  92. GDI32.dll,USER32.dll,SHLWAPI.dll,SHELL32.dll,ole32.dll,OLEAUT32.dll,BROWSEUI.dll
  93. ,SHDOCVW.dll,CRYPT32.dll,MSASN1.dll,CRYPTUI.dll,WINTRUST.dll,IMAGEHLP.dll,NETAPI
  94. 32.dll,WININET.dll,WLDAP32.dll,VERSION.dll,UxTheme.dll,ShimEng.dll,AcGenral.DLL,
  95. WINMM.dll,MSACM32.dll,USERENV.dll,IMM32.DLL,LPK.DLL,USP10.dll,comctl32.dll,comct
  96. l32.dll,apphelp.dll,msctfime.ime,CLBCATQ.DLL,COMRes.dll,cscui.dll,CSCDLL.dll,the
  97. meui.dll,Secur32.dll,MSIMG32.dll,xpsp2res.dll,scrchpg.dll,msutb.dll,MSCTF.dll,SA
  98. MLIB.dll,SETUPAPI.dll,LINKINFO.dll,ntshrui.dll,ATL.DLL,urlmon.dll,NETSHELL.dll,r
  99. tutils.dll,credui.dll,WS2_32.dll,WS2HELP.dll,iphlpapi.dll,msi.dll,WINSTA.dll,web
  100. check.dll,WSOCK32.dll,safemon.dll,stobject.dll,BatMeter.dll,POWRPROF.dll,WTSAPI3
  101. 2.dll,wdmaud.drv,msacm32.drv,midimap.dll,nvcpl.dll,comdlg32.dll,WINSPOOL.DRV,OLE
  102. ACC.dll,MSVCP60.dll,NTMARTA.DLL,nvshell.dll,rsaenh.dll,MPR.dll,drprov.dll,ntlanm
  103. an.dll,NETUI0.dll,NETUI1.dll,NETRAP.dll,davclnt.dll,SXS.DLL,shdoclc.dll,Unlocker
  104. COM.dll,rarext.dll,nppcm.dll,ShellEx.dll,MSVCR80.dll,MSVCP80.dll,browselc.dll,DU
  105. SER.dll,MSGINA.dll,ODBC32.dll,odbcint.dll,MLANG.dll,winabc.ime,jscript.dll,klsca
  106. v.dll,gdiplus.dll,mscms.dll,mydocs.dll,prremote.dll,prloader.dll,quartz.dll,msdm
  107. o.dll,l3codeca.acm,RASAPI32.DLL,rasman.dll,TAPI32.dll,msv1_0.dll,sensapi.dll,MSV
  108. FW32.dll,wmvcore.dll,wmidx.dll,WMASF.DLL,DRMClien.DLL,shimgvw.dll,actxprxy.dll,z
  109. ipfldr.dll,sendmail.dll,shgina.dll"
  110. "inetinfo.exe","504","ntdll.dll,kernel32.dll,msvcrt.dll,ADVAPI32.dll,RPCRT4.dll,
  111. USER32.dll,GDI32.dll,ole32.dll,IisRTL.DLL,WS2_32.dll,WS2HELP.dll,IMM32.DLL,LPK.D
  112. LL,USP10.dll,rpcref.dll,iisadmin.dll,VSSAPI.DLL,ATL.DLL,OLEAUT32.dll,NETAPI32.dl
  113. l,COADMIN.dll,SHELL32.dll,SHLWAPI.dll,ADMWPROX.dll,comctl32.dll,comctl32.dll,uxt
  114. heme.dll,xpsp2res.dll,CLBCATQ.DLL,COMRes.dll,VERSION.dll,metadata.dll,rsaenh.dll
  115. ,CRYPT32.dll,MSASN1.dll,nsepm.dll,IISMAP.dll,schannel.dll,Secur32.dll,USERENV.dl
  116. l,wamreg.dll,admexs.dll,svcext.dll,Security.dll,SAMLIB.dll,SMTPSVC.dll,INFOCOMM.
  117. dll,ISATQ.dll,IISFECNV.dll,WSOCK32.dll,DNSAPI.dll,FCACHDLL.dll,RWNH.dll,exstrace
  118. .dll,STAXMEM.dll,NTDSAPI.dll,WLDAP32.dll,w3svc.dll,lonsint.dll,mswsock.dll,hnetc
  119. fg.dll,wshtcpip.dll,wintrust.dll,IMAGEHLP.dll,iscomlog.dll,sspifilt.dll,seo.dll,
  120. iphlpapi.dll,compfilt.dll,aqueue.dll,gzip.dll,pwsdata.dll,md5filt.dll,wdigest.dl
  121. l,httpext.dll,iislog.dll"
  122. 所有进程及所被调用的模块显示完毕.按任意键返回.
复制代码
这样子看毛.....我宁愿去看小说..
作者: somebody    时间: 2008-1-8 00:28

原帖由 随风 于 2008-1-8 00:24 发表
原来纯批也可以做到这么厉害,佩服!!!


厉个鬼~~~
几百年前我somebody不是在狂跟你研究这个问题吖,普通人,你就忘了....
作者: foxJL    时间: 2008-1-8 01:17

仅得dll完全路径的代码已在顶楼更新,不过又多了一个选项.
因为网页不能处理tab,都用了空格代替
下面代码红色部分应该是TAB:
for /f "delims=tab  tokens=1,6" %%j in ('type particular.txt ^| find /i "%%i"') do (
     echo %%j---%%k
    )
---------------------------
set particular=!particular:tab=-!

[ 本帖最后由 foxJL 于 2008-1-8 01:25 编辑 ]
作者: somebody    时间: 2008-1-8 14:55

原帖由 foxJL 于 2008-1-8 01:17 发表
因为网页不能处理tab,都用了空格代替
下面代码红色部分应该是TAB:
for /f "delims=tab  tokens=1,6" %%j in ('type particular.txt ^| find /i "%%i"') d ...


---------------------------------------------------------------------------------------------------------------------
哈,不是网页不能处理tab,是CMD里你用不了tab,制表符你得用VBS操作
可不就是了,用批处理来处理msinfo32导出来的文本,那个结果我想连你自己都看不下去....
虽然你把CMD窗口调大了...
执行效率也是个大问题..

以下是测试时出错截图...查的是调用指定DLL的所有进程,出来的却是DLL。这东西不就是用tasklist,真正用到的技术含量不怎么有.
有的是你在处理过程中用到的批处理语法功底..
作者: foxJL    时间: 2008-1-8 15:51

cmd是可以用TAB的,可能是你代码编辑器的问题,我用的是:Notepad2.
下面是我测试查看DLL完全路径的结果,看起来似乎不是很累.
  1. jscript---c:\windows\system32\jscript.dll
  2. vbscript---c:\windows\system32\vbscript.dll
  3. mfc42---c:\windows\system32\mfc42.dll
  4. mfc42loc---c:\windows\system32\mfc42loc.dll
  5. MSIMTF---c:\windows\system32\msimtf.dll
  6. msohev---c:\program files\microsoft office\office11\msohev.dll
  7. mpr---c:\windows\system32\mpr.dll
  8. drprov---c:\windows\system32\drprov.dll
  9. ntlanman---c:\windows\system32\ntlanman.dll
  10. netui0---c:\windows\system32\netui0.dll
  11. netui1---c:\windows\system32\netui1.dll
  12. netrap---c:\windows\system32\netrap.dll
  13. samlib---c:\windows\system32\samlib.dll
  14. davclnt---c:\windows\system32\davclnt.dll
  15. shgina---c:\windows\system32\shgina.dll
  16. msgina---c:\windows\system32\msgina.dll
  17. winsta---c:\windows\system32\winsta.dll
  18. odbc32---c:\windows\system32\odbc32.dll
  19. comdlg32---c:\windows\system32\comdlg32.dll
  20. odbcint---c:\windows\system32\odbcint.dll
  21. Audiodev---c:\windows\system32\audiodev.dll
  22. wmvcore---c:\windows\system32\wmvcore.dll
  23. wmasf---c:\windows\system32\wmasf.dll
  24. wdmaud---c:\windows\system32\wdmaud.drv
  25. msacm32---c:\windows\system32\msacm32.drv
  26. msacm32---c:\windows\system32\msacm32.dll
  27. midimap---c:\windows\system32\midimap.dll
  28. Flash9e---c:\windows\system32\macromed\flash\flash9e.ocx
  29. xpsp3res---c:\windows\system32\xpsp3res.dll
  30. schannel---c:\windows\system32\schannel.dll
  31. imgutil---c:\windows\system32\imgutil.dll
  32. pngfilt---c:\windows\system32\pngfilt.dll
  33. ddrawex---c:\windows\system32\ddrawex.dll
  34. ddraw---c:\windows\system32\ddraw.dll
  35. dciman32---c:\windows\system32\dciman32.dll
  36. dxtrans---c:\windows\system32\dxtrans.dll
  37. atl---c:\windows\system32\atl.dll
  38. dxtmsft---c:\windows\system32\dxtmsft.dll
  39. mshtmled---c:\windows\system32\mshtmled.dll
  40. iepeers---c:\windows\system32\iepeers.dll
  41. winspool---c:\windows\system32\winspool.drv
  42. mshtmler---c:\windows\system32\mshtmler.dll
复制代码
至于说效率问题,在start msinfo32的时候确实要等待片刻,但显示的时候好像比你VBS代码还快一点点.

你说的功能 3通过模块找到所调用它的进程,在这里每一段第1句就是进程名,第2句是PID符,还是应该很容易看出来的吧.

我开始就说了没有做界面美化,实用为主,我不想为了这些无所谓的细节浪费过多的代码.
作者: somebody    时间: 2008-1-8 18:32

开玩笑,比我的VBS快!
你获取的是单个进程调用的模块
我获取的是所有进程调用的模块````这什么概念来的
而且我整个过程是动态的,而你调用msinfo32时等个半天,人家以为没响应会关掉。
----------------------------------------------------------------
功能3是列出进程
你列出DLL做什么..!
------------------------------------------------------------------
我图都截出来了,你还能怎么说,你那些代码是文本来的,你截图出来看看吖
别乱说什么代码编辑器
我直接用记事本保存你的代码,双击自然用CMD解析
不要说什么代码编辑器问题...排版就是这样乱,你那个好看的,除非是你改过代码..
----------------------------------------------------------------------------------------------------
你说做美观就是搞无谓的细节,你这不是在讽刺我..你做不了美化就别说别人...
人家做美化还不是为了别人用着舒服,这是搞安全批处理,你做出来不美观,不方便人家分析,你懂不!搞出来若跟垃圾一样难看,谁还想用....
-----------------------------------------------------------------------------------------
贴子不是发出来给我somebody和你foxJL两个人看的...不是你不理会人家其他人就不会判断..

[ 本帖最后由 somebody 于 2008-1-8 18:43 编辑 ]
作者: foxJL    时间: 2008-1-8 18:40

不相信算了,费事理你.
作者: hjh700913    时间: 2009-5-9 18:34

顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶顶
作者: caruko    时间: 2009-12-25 17:16

ntsd 可以列出程序的详细模块的路径, 起始内存地址...
tasklist 太落后了...
作者: qwd    时间: 2010-2-9 21:53

估计是版本不同 你的Notepad2  我系统都只有notepad.exe 没那个2的
速度和排版对我们来说就是有问题啊!不过在列举上下了一番功夫也算是有心了!
somebody 也的确曾在群里大搞过此法最终是在速度和排版上放弃了!这都是几年前的事了!




欢迎光临 批处理之家 (http://bbs.bathome.net/) Powered by Discuz! 7.2