ForeWord
Hello, everyone. We again meet in this article. The learning process is one interesting and exciting travel. Our lives both ephemeral that we aslo could do many things to rich it.
At First
Text
The COMPCommand, it likes the below Codes:
C:\Users\dell\Desktop>HELP COMP
比较两个文件或两个文件集的内容。
COMP [data1] [data2] [/D] [/A] [/L] [/N=number] [/C] [/OFF[LINE]] [/M]
data1 指定要比较的第一批文件的位置和名称。
data2 指定要比较的第二批文件的位置和名称。
/D 以十进制格式显示差异。
/A 以 ASCII 字符显示差异。
/L 显示不同的行数。
/N=number 只比较每个文件中第一个指定的行数。
/C 比较文件时 ASCII 字母不区分大小写。
/OFF[LINE] 不要跳过带有脱机属性集的文件。
/M 不提示比较更多文件。
要比较文件集，请在 data1 和 data2 参数中使用通配符。
C:\Users\dell\Desktop>DIR *.txt
驱动器 C 中的卷是 OS
卷的序列号是 3E3C-C5C8
C:\Users\dell\Desktop 的目录
2026/10/10 18:23 37 12_34.txt
2026/10/10 18:28 35 56_78.txt
2026/10/11 07:46 28 Chars.txt
2026/10/11 07:50 56 Chars2.txt
4 个文件 156 字节
0 个目录 102,296,178,688 可用字节
C:\Users\dell\Desktop>TYPE 12_34.txt
ONE TWO THREE
First Second Third
C:\Users\dell\Desktop>TYPE 56_78.txt
one two three
FirstSecondThird
C:\Users\dell\Desktop>COMP 12_34.txt 56_78.txt /L
比较 12_34.txt 和 56_78.txt...
文件的大小不同。
是否要比较更多文件 (Y/N)? Y
第一个比较文件的名称:Chars.txt
第二个比较文件的名称:Chars2.txt
选项: /L
选项:
比较 Chars.txt 和 Chars2.txt...
文件的大小不同。
是否要比较更多文件 (Y/N)? N
C:\Users\dell\Desktop>COMP 12_34.txt 56_78.txt /L /C
比较 12_34.txt 和 56_78.txt...
文件的大小不同。
是否要比较更多文件 (Y/N)? N
C:\Users\dell\Desktop>COPY NUL New.txt
已复制 1 个文件。
C:\Users\dell\Desktop>COPY NUL New2.txt
已复制 1 个文件。
C:\Users\dell\Desktop>COMP New.txt New2.txt /M
比较 New.txt 和 New2.txt...
文件比较无误The TREE Command, it likes the below Codes:
C:\Users\dell\Desktop>HELP TREE
以图形显示驱动器或路径的文件夹结构。
TREE [drive:][path] [/F] [/A]
/F 显示每个文件夹中文件的名称。
/A 使用 ASCII 字符，而不使用扩展字符。
C:\Users\dell\Desktop>(MKDIR Text) && (MOVE .\*.txt Text\) && (TREE .\Text\ /F)
C:\Users\dell\Desktop\12_34.txt
C:\Users\dell\Desktop\56_78.txt
C:\Users\dell\Desktop\Chars.txt
C:\Users\dell\Desktop\Chars2.txt
C:\Users\dell\Desktop\New.txt
C:\Users\dell\Desktop\New2.txt
移动了 6 个文件。
卷 OS 的文件夹 PATH 列表
卷序列号为 3E3C-C5C8
C:\USERS\DELL\DESKTOP\TEXT
12_34.txt
56_78.txt
Chars.txt
Chars2.txt
New.txt
New2.txt
没有子文件夹
C:\Users\dell\Desktop>TREE Text /A
卷 OS 的文件夹 PATH 列表
卷序列号为 3E3C-C5C8
C:\USERS\DELL\DESKTOP\TEXT
没有子文件夹
C:\Users\dell\Desktop>(MKDIR .\Text\Son_Text) && (MOVE .\Text\New.txt .\Text\Son_Text) && (TREE .\Text /A)
移动了 1 个文件。
卷 OS 的文件夹 PATH 列表
卷序列号为 3E3C-C5C8
C:\USERS\DELL\DESKTOP\TEXT
\---Son_Text
C:\Users\dell\Desktop>DIR .\Text\Son_Text\
驱动器 C 中的卷是 OS
卷的序列号是 3E3C-C5C8
C:\Users\dell\Desktop\Text\Son_Text 的目录
2026/10/11 18:33 <DIR> .
2026/10/11 18:33 <DIR> ..
2026/10/11 17:54 0 New.txt
1 个文件 0 字节
2 个目录 102,285,021,184 可用字节
C:\Users\dell\Desktop>DIR .\Text\
驱动器 C 中的卷是 OS
卷的序列号是 3E3C-C5C8
C:\Users\dell\Desktop\Text 的目录
2026/10/11 18:33 <DIR> .
2026/10/11 18:16 <DIR> ..
2026/10/10 18:23 37 12_34.txt
2026/10/10 18:28 35 56_78.txt
2026/10/11 07:46 28 Chars.txt
2026/10/11 07:50 56 Chars2.txt
2026/10/11 17:54 0 New2.txt
2026/10/11 18:33 <DIR> Son_Text
5 个文件 156 字节
3 个目录 102,285,021,184 可用字节The TASKLIST Command, it likes the below Codes:
C:\Users\dell\Desktop>HELP TASKLIST
TASKLIST [/S system [/U username [/P [password]]]]
[/M [module] | /SVC | /V] [/FI filter] [/FO format] [/NH]
描述:
该工具显示在本地或远程机器上当前运行的进程列表。
参数列表:
/S system 指定连接到的远程系统。
/U [domain\]user 指定应该在哪个用户上下文执行这个命令。
/P [password] 为提供的用户上下文指定密码。如果省略，则
提示输入。
/M [module] 列出当前使用所给 exe/dll 名称的所有任务。
如果没有指定模块名称，显示所有加载的模块。
/SVC 显示每个进程中主持的服务。
/APPS 显示 Microsoft Store 应用及其关联的进程。
/V 显示详细任务信息。
/FI filter 显示一系列符合筛选器
指定条件的任务。
/FO format 指定输出格式。
有效值: "TABLE"、"LIST"、"CSV"。
/NH 指定列标题不应该
在输出中显示。
只对 "TABLE" 和 "CSV" 格式有效。
/? 显示此帮助消息。
筛选器:
筛选器名称 有效运算符 有效值
----------- --------------- --------------------------
STATUS eq, ne RUNNING | SUSPENDED
NOT RESPONDING | UNKNOWN
IMAGENAME eq, ne 映像名称
PID eq, ne, gt, lt, ge, le PID 值
SESSION eq, ne, gt, lt, ge, le 会话编号
SESSIONNAME eq, ne 会话名称
CPUTIME eq, ne, gt, lt, ge, le CPU 时间，格式为
hh:mm:ss。
hh - 小时，
mm - 分钟，ss - 秒
MEMUSAGE eq, ne, gt, lt, ge, le 内存使用(以 KB 为单位)
USERNAME eq, ne 用户名，格式为
[域\]用户
SERVICES eq, ne 服务名称
WINDOWTITLE eq, ne 窗口标题
模块 eq, ne DLL 名称
注意: 当查询远程计算机时，不支持 "WINDOWTITLE" 和 "STATUS"
筛选器。
Examples:
TASKLIST
TASKLIST /M
TASKLIST /V /FO CSV
TASKLIST /SVC /FO LIST
TASKLIST /APPS /FI "STATUS eq RUNNING"
TASKLIST /M wbem*
TASKLIST /S system /FO LIST
TASKLIST /S system /U 域\用户名 /FO CSV /NH
TASKLIST /S system /U username /P password /FO TABLE /NH
TASKLIST /FI "USERNAME ne NT AUTHORITY\SYSTEM" /FI "STATUS eq running"
C:\Users\dell\Desktop>TASKLIST /M
映像名称 PID 模块
========================= ======== ============================================
System Idle Process 0 暂缺
System 4 暂缺
Registry 272 暂缺
smss.exe 844 暂缺
csrss.exe 1228 暂缺
wininit.exe 1392 暂缺
services.exe 1468 暂缺
lsass.exe 1476 暂缺
svchost.exe 1608 暂缺
fontdrvhost.exe 1616 暂缺
C:\Users\dell\Desktop>TASKLIST /V /FO CSV
"映像名称","PID","会话名","会话# ","内存使用 ","状态 ","用户名 ","CPU 时间","窗口标题 "
"System Idle Process","0","Services","0","8 K","Unknown","NT AUTHORITY\SYSTEM","2564:31:12","暂缺"
"System","4","Services","0","5,876 K","Unknown","暂缺","6:39:19","暂缺"
"Registry","272","Services","0","48,384 K","Unknown","暂缺","0:00:34","暂缺"
"smss.exe","844","Services","0","1,500 K","Unknown","暂缺","0:00:00","暂缺"
"csrss.exe","1228","Services","0","8,472 K","Unknown","暂缺","0:01:59","暂缺"
"wininit.exe","1392","Services","0","10,756 K","Unknown","暂缺","0:00:02","暂缺"
"services.exe","1468","Services","0","21,024 K","Unknown","暂缺","0:35:59","暂缺"
"lsass.exe","1476","Services","0","33,056 K","Unknown","暂缺","0:19:18","暂缺"
"svchost.exe","1608","Services","0","68,208 K","Unknown","暂缺","0:15:41","暂缺"
"fontdrvhost.exe","1616","Services","0","4,076 K","Unknown","暂缺","0:00:00","暂缺"
"svchost.exe","1708","Services","0","25,360 K","Unknown","暂缺","0:25:23","暂缺"
C:\Users\dell\Desktop>TASKLIST /SVC /FO LIST
映像名称: System Idle Process
PID: 0
服务 : 暂缺
映像名称: System
PID: 4
服务 : 暂缺
映像名称: Registry
PID: 272
服务 : 暂缺
映像名称: smss.exe
PID: 844
服务 : 暂缺
映像名称: csrss.exe
PID: 1228
服务 : 暂缺
映像名称: wininit.exe
PID: 1392
服务 : 暂缺
映像名称: services.exe
PID: 1468
服务 : 暂缺
C:\Users\dell\Desktop>TASKLIST /FI "MEMUSAGE LE 5000"
映像名称 PID 会话名 会话# 内存使用
========================= ======== ================ =========== ============
System Idle Process 0 Services 0 8 K
smss.exe 844 Services 0 1,500 K
fontdrvhost.exe 1616 Services 0 4,076 K
NahimicSvc64.exe 17076 Console 15 2,848 K
NVIDIA Web Helper.exe 14648 Console 15 1,512 K
conhost.exe 9044 Console 15 984 K
C:\Users\dell\Desktop>TASKLIST /FI "PID GT 8000"
映像名称 PID 会话名 会话# 内存使用
========================= ======== ================ =========== ============
kxewsc.exe 8072 Services 0 7,484 K
unsecapp.exe 8692 Services 0 9,212 K
svchost.exe 8740 Services 0 34,024 K
svchost.exe 9208 Services 0 9,684 K
wlanext.exe 9472 Services 0 15,424 K
Intel_PIE_Service.exe 9596 Services 0 12,120 K
svchost.exe 9644 Services 0 5,656 K
svchost.exe 9912 Services 0 11,236 K
svchost.exe 10212 Services 0 19,140 K
svchost.exe 9312 Services 0 17,108 K
svchost.exe 9772 Services 0 58,668 K
SearchIndexer.exe 10412 Services 0 48,844 K
svchost.exe 10420 Services 0 19,384 K
svchost.exe 11096 Services 0 27,576 K
svchost.exe 13292 Services 0 27,088 K
svchost.exe 13076 Services 0 36,844 K
svchost.exe 11064 Services 0 24,804 K
SecurityHealthService.exe 21052 Services 0 26,072 K
Dell.CoreServices.Client. 23912 Services 0 137,276 K
conhost.exe 24236 Services 0 10,040 K
Dell.TechHub.Analytics.Su 24344 Services 0 135,716 K
Dell.TechHub.Diagnostics. 23576 Services 0 166,008 K
conhost.exe 24320 Services 0 10,072 K
Dell.TechHub.DataManager. 23884 Services 0 142,420 K
conhost.exe 23144 Services 0 10,148 K
conhost.exe 23720 Services 0 10,076 K
C:\Users\dell\Desktop>TASKLIST /FI "MEMUSAGE GT 8000" /FO CSV >> Storage_GT8000.txt
C:\Users\dell\Desktop>DIR *.txt
驱动器 C 中的卷是 OS
卷的序列号是 3E3C-C5C8
C:\Users\dell\Desktop 的目录
2026/10/11 21:31 12,201 Storage_GT8000.txt
1 个文件 12,201 字节
0 个目录 102,251,098,112 可用字节
C:\Users\dell\Desktop>TYPE Storage_GT8000.txt
"映像名称","PID","会话名","会话# ","内存使用 "
"Registry","272","Services","0","48,408 K"
"csrss.exe","1228","Services","0","8,472 K"
"wininit.exe","1392","Services","0","10,752 K"
"services.exe","1468","Services","0","20,668 K"
"lsass.exe","1476","Services","0","33,216 K"
"svchost.exe","1608","Services","0","68,052 K"
"svchost.exe","1708","Services","0","25,344 K"
"svchost.exe","1752","Services","0","12,476 K"
"svchost.exe","1988","Services","0","11,296 K"
"svchost.exe","2032","Services","0","18,004 K"
"svchost.exe","2040","Services","0","9,952 K"
"svchost.exe","1216","Services","0","13,148 K"
"svchost.exe","1028","Services","0","17,456 K"
"svchost.exe","2112","Services","0","13,000 K"
"svchost.exe","2196","Services","0","13,780 K"
"svchost.exe","2208","Services","0","13,688 K"
"svchost.exe","2204","Services","0","15,468 K"
"svchost.exe","2272","Services","0","10,644 K"
"svchost.exe","2412","Services","0","16,704 K"
"svchost.exe","2424","Services","0","11,468 K"
"svchost.exe","2520","Services","0","21,256 K"
"svchost.exe","2564","Services","0","10,208 K"
C:\Users\dell\Desktop>TASKLIST /FI "PID GT 10000" /FO CSV >> PID_GT10000.csv
C:\Users\dell\Desktop>DIR *.csv
驱动器 C 中的卷是 OS
卷的序列号是 3E3C-C5C8
C:\Users\dell\Desktop 的目录
2026/10/11 21:33 6,853 PID_GT10000.csv
1 个文件 6,853 字节
0 个目录 102,250,385,408 可用字节
C:\Users\dell\Desktop>TYPE *.CSV
PID_GT10000.csv
"映像名称","PID","会话名","会话# ","内存使用 "
"svchost.exe","10212","Services","0","19,092 K"
"SearchIndexer.exe","10412","Services","0","50,900 K"
"svchost.exe","10420","Services","0","19,380 K"
"svchost.exe","11096","Services","0","23,012 K"
"svchost.exe","13292","Services","0","26,752 K"
"svchost.exe","13076","Services","0","36,812 K"
"svchost.exe","11064","Services","0","24,520 K"
"SecurityHealthService.exe","21052","Services","0","26,044 K"
"Dell.CoreServices.Client.exe","23912","Services","0","134,520 K"
"conhost.exe","24236","Services","0","10,040 K"
"Dell.TechHub.Analytics.SubAgent.exe","24344","Services","0","134,928 K"
"Dell.TechHub.Diagnostics.SubAgent.exe","23576","Services","0","165,100 K"
"conhost.exe","24320","Services","0","10,072 K"
"Dell.TechHub.DataManager.SubAgent.exe","23884","Services","0","137,684 K"
"conhost.exe","23144","Services","0","10,148 K"
"conhost.exe","23720","Services","0","10,076 K"
"svchost.exe","23076","Services","0","9,896 K"The TASKKILL Command, because it's very very very dangerous , so I couldn't show how to use it. You could follow the Examples in HELP TASKKILL Command. It's likes the below Codes:
C:\Users\dell\Desktop>HELP TASKKILL
TASKKILL [/S system [/U username [/P [password]]]]
{ [/FI filter] [/PID processid | /IM imagename] } [/T] [/F]
描述:
使用该工具按照进程 ID (PID) 或映像名称终止任务。
参数列表:
/S system 指定要连接的远程系统。
/U [domain\]user 指定应该在哪个用户上下文执行这个命令。
/P [password] 为提供的用户上下文指定密码。如果忽略，提示
输入。
/FI filter 应用筛选器以选择一组任务。
允许使用 "*"。例如，映像名称 eq acme*
/PID processid 指定要终止的进程的 PID。
使用 TaskList 取得 PID。
/IM imagename 指定要终止的进程的映像名称。通配符 '*'可用来
指定所有任务或映像名称。
/T 终止指定的进程和由它启用的子进程。
/F 指定强制终止进程。
/? 显示帮助消息。
筛选器:
筛选器名 有效运算符 有效值
----------- --------------- -------------------------
STATUS eq, ne RUNNING |
NOT RESPONDING | UNKNOWN
IMAGENAME eq, ne 映像名称
PID eq, ne, gt, lt, ge, le PID 值
SESSION eq, ne, gt, lt, ge, le 会话编号。
CPUTIME eq, ne, gt, lt, ge, le CPU 时间，格式为
hh:mm:ss。
hh - 时，
mm - 分，ss - 秒
MEMUSAGE eq, ne, gt, lt, ge, le 内存使用量，单位为 KB
USERNAME eq, ne 用户名，格式为 [domain\]user
MODULES eq, ne DLL 名称
SERVICES eq, ne 服务名称
WINDOWTITLE eq, ne 窗口标题
说明
----
1) 只有在应用筛选器的情况下，/IM 切换才能使用通配符 '*'。
2) 远程进程总是要强行 (/F) 终止。
3) 当指定远程机器时，不支持 "WINDOWTITLE" 和 "STATUS" 筛选器。
例如:
TASKKILL /IM notepad.exe
TASKKILL /PID 1230 /PID 1241 /PID 1253 /T
TASKKILL /F /IM cmd.exe /T
TASKKILL /F /FI "PID ge 1000" /FI "WINDOWTITLE ne untitle*"
TASKKILL /F /FI "USERNAME eq NT AUTHORITY\SYSTEM" /IM notepad.exe
TASKKILL /S system /U 域\用户名 /FI "用户名 ne NT*" /IM *
TASKKILL /S system /U username /P password /FI "IMAGENAME eq note*"In the End
I'm pleasure for your watching. We know the studying isn't easy, but fate couldn't let's fall down. We could learn constantly that it will let's go out of fool and stupid. I'm not a gentle man. In fact, I always be strict to myself. However, I know everybody both have your choice. I accept this point, I think it's one good thing. Beacuse all kinds of things and persons in the world that the world could be wonderful and fantasic. Cheers!! my dear friends, Your PanOne low-quality and irritable male of human.