went

@echo off
%1 start "" mshta vbscript:createobject("shell.application").shellexecute("""%~0""","REM",,"runas",1)(window.close)&exit
REM name
set "process=powershell.exe"
REM memory(KB)
set "m=73800"
:loop
echo %process% 
echo %m%KB
echo.
tasklist /fi "IMAGENAME eq %process%" | findstr /i "pid = %process%"
taskkill /f /fi "IMAGENAME eq %process%" /fi "MEMUSAGE gt %m%"
timeout /t 2 /nobreak  >nul 2>nul & cls
goto :loop
pause&exit
复制代码

进程名和内存自行修改

went

回复 3# heike045

/t后面是秒数,当前是2秒检查一次

timeout /t 2 /nobreak 
复制代码

went

回复 6# heike045


        显示和结束进程命令之间有延迟吧,实际上已经达到了,不然不会关闭

went

@echo off
%1 start "" mshta vbscript:createobject("shell.application").shellexecute("""%~0""","REM",,"runas",1)(window.close)&exit
:begin
REM CODE 1
timeout /t 60 /nobreak  >nul 2>nul 
REM CODE 2
timeout /t 60 /nobreak  >nul 2>nul 
REM CODE 3
timeout /t 60 /nobreak  >nul 2>nul 
goto :begin
pause&exit
复制代码

回复 9# heike045
REM 所在行替换成你的代码,提权代码须放在开头

went

@echo off&color 2f
%1 start "" mshta vbscript:createobject("shell.application").shellexecute("""%~0""","REM",,"runas",1)(window.close)&exit
set "s=60"
:loop
REM --------------------------------CODE1-----------------------------------
taskkill /f /im "werfault.exe"
timeout /t %s% /nobreak  >nul 2>nul
REM --------------------------------CODE2-----------------------------------
tasklist /FI "username eq dc2-user" | find /C "vds-qt.exe" > temp.txt
set /p num= < temp.txt
del /F temp.txt
echo %num%
if "%num%" == "0" del /F C:\Users\dc2-user\AppData\Roaming\VDS\mncache.dat C:\Users\dc2-user\AppData\Roaming\VDS\mnpayments.dat && start /D "C:\Program Files\vds" vds-qt.exe
timeout /t %s% /nobreak  >nul 2>nul
REM --------------------------------CODE3-----------------------------------
REM name
set "process=vds-qt.exe"
REM memory(KB)
set "m=6144000"
echo %process% 
echo %m%KB
echo.
tasklist /fi "IMAGENAME eq %process%" | findstr /i "pid = %process%"
taskkill /f /fi "IMAGENAME eq %process%" /fi "MEMUSAGE gt %m%"
timeout /t %s% /nobreak  >nul 2>nul
cls & goto :loop
pause&exit
复制代码

回复 11# heike045

went

回复 15# heike045


   不好意思,我也不知道