Bonjour,
Peut être avec
ProcessClose ( "process" )
Avec ce code produit par scriptomatic, vous récupérez tous les process avec leur PID, une simple recherche détermine le processus qui déclenche la fenêtre
Code : Tout sélectionner
;Généré par AutoIt ScriptOMatic
$wbemFlagReturnImmediately = 0x10
$wbemFlagForwardOnly = 0x20
$colItems = ""
$strComputer = "localhost"
$OutputTitle = ""
$Output = ""
$OutputTitle &= "Computer: " & $strComputer & @CRLF
$objWMIService = ObjGet("winmgmts:\\" & $strComputer & "\root\CIMV2")
$colItems = $objWMIService.ExecQuery("SELECT * FROM Win32_Process", "WQL", _
$wbemFlagReturnImmediately + $wbemFlagForwardOnly)
If IsObj($colItems) then
Local $Object_Flag = 0
For $objItem In $colItems
$Object_Flag = 1
$Output &= "Caption: " & $objItem.Caption & @CRLF
$Output &= "CommandLine: " & $objItem.CommandLine & @CRLF
$Output &= "CreationClassName: " & $objItem.CreationClassName & @CRLF
$Output &= "CreationDate: " & WMIDateStringToDate($objItem.CreationDate) & @CRLF
$Output &= "CSCreationClassName: " & $objItem.CSCreationClassName & @CRLF
$Output &= "CSName: " & $objItem.CSName & @CRLF
$Output &= "Description: " & $objItem.Description & @CRLF
$Output &= "ExecutablePath: " & $objItem.ExecutablePath & @CRLF
$Output &= "ExecutionState: " & $objItem.ExecutionState & @CRLF
$Output &= "Handle: " & $objItem.Handle & @CRLF
$Output &= "HandleCount: " & $objItem.HandleCount & @CRLF
$Output &= "InstallDate: " & WMIDateStringToDate($objItem.InstallDate) & @CRLF
$Output &= "KernelModeTime: " & $objItem.KernelModeTime & @CRLF
$Output &= "MaximumWorkingSetSize: " & $objItem.MaximumWorkingSetSize & @CRLF
$Output &= "MinimumWorkingSetSize: " & $objItem.MinimumWorkingSetSize & @CRLF
$Output &= "Name: " & $objItem.Name & @CRLF
$Output &= "OSCreationClassName: " & $objItem.OSCreationClassName & @CRLF
$Output &= "OSName: " & $objItem.OSName & @CRLF
$Output &= "OtherOperationCount: " & $objItem.OtherOperationCount & @CRLF
$Output &= "OtherTransferCount: " & $objItem.OtherTransferCount & @CRLF
$Output &= "PageFaults: " & $objItem.PageFaults & @CRLF
$Output &= "PageFileUsage: " & $objItem.PageFileUsage & @CRLF
$Output &= "ParentProcessId: " & $objItem.ParentProcessId & @CRLF
$Output &= "PeakPageFileUsage: " & $objItem.PeakPageFileUsage & @CRLF
$Output &= "PeakVirtualSize: " & $objItem.PeakVirtualSize & @CRLF
$Output &= "PeakWorkingSetSize: " & $objItem.PeakWorkingSetSize & @CRLF
$Output &= "Priority: " & $objItem.Priority & @CRLF
$Output &= "PrivatePageCount: " & $objItem.PrivatePageCount & @CRLF
$Output &= "ProcessId: " & $objItem.ProcessId & @CRLF
$Output &= "QuotaNonPagedPoolUsage: " & $objItem.QuotaNonPagedPoolUsage & @CRLF
$Output &= "QuotaPagedPoolUsage: " & $objItem.QuotaPagedPoolUsage & @CRLF
$Output &= "QuotaPeakNonPagedPoolUsage: " & $objItem.QuotaPeakNonPagedPoolUsage & @CRLF
$Output &= "QuotaPeakPagedPoolUsage: " & $objItem.QuotaPeakPagedPoolUsage & @CRLF
$Output &= "ReadOperationCount: " & $objItem.ReadOperationCount & @CRLF
$Output &= "ReadTransferCount: " & $objItem.ReadTransferCount & @CRLF
$Output &= "SessionId: " & $objItem.SessionId & @CRLF
$Output &= "Status: " & $objItem.Status & @CRLF
$Output &= "TerminationDate: " & WMIDateStringToDate($objItem.TerminationDate) & @CRLF
$Output &= "ThreadCount: " & $objItem.ThreadCount & @CRLF
$Output &= "UserModeTime: " & $objItem.UserModeTime & @CRLF
$Output &= "VirtualSize: " & $objItem.VirtualSize & @CRLF
$Output &= "WindowsVersion: " & $objItem.WindowsVersion & @CRLF
$Output &= "WorkingSetSize: " & $objItem.WorkingSetSize & @CRLF
$Output &= "WriteOperationCount: " & $objItem.WriteOperationCount & @CRLF
$Output &= "WriteTransferCount: " & $objItem.WriteTransferCount & @CRLF
Next
If $Object_Flag = 0 Then Msgbox(1,"Sortie WMI",$OutputTitle)
ConsoleWrite($Output)
FileWrite(@TempDir & "\Win32_Process.TXT", $Output )
Run(@Comspec & " /c start " & @TempDir & "\Win32_Process.TXT" )
Else
Msgbox(0,"Sortie WMI","Aucun objets WMI trouvés pour la Classe :" & "Win32_Process" )
Endif
Func WMIDateStringToDate($dtmDate)
Return (StringMid($dtmDate, 5, 2) & "/" & _
StringMid($dtmDate, 7, 2) & "/" & StringLeft($dtmDate, 4) _
& " " & StringMid($dtmDate, 9, 2) & ":" & StringMid($dtmDate, 11, 2) & ":" & StringMid($dtmDate,13, 2))
EndFunc
J'ai créé une extension bidon pour afficher la fenêtre "#32770", le résultat du code me donne
Caption: rundll32.exe
CommandLine: "C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\PC\Desktop\Nouveau document texte.popo
CreationClassName: Win32_Process
CreationDate: 12/17/2020 17:51:40
CSCreationClassName: Win32_ComputerSystem
Description: rundll32.exe
ExecutablePath: C:\Windows\system32\rundll32.exe
ExecutionState:
Handle: 2628
.....
Ayant le PID, je suis sûr de fermer le bon processus