| 网络飞虫 |
2006-02-05 17:33 |
Win2000命令全集及解释
在进行Windows 2000安全检查时，经常会在进程表中发现很多不明缘由的进程，这些进程到底是系统自带的程序，还是应用程序或者是恶意程序，特洛伊木马服务器等，让大家很头疼，应用程序进程一般可以从磁盘中搜索到，并根据程序所在位置判断是它属于哪个应用软件，但系统自带的进程如何知道呢？下面就是Windws 2000的命令集合，供大家参考。 lS'-xEv?
accwiz.exe > Accessibility Wizard for walking you through setting up your machine for your mobility needs. 辅助工具向导 P)MDPI+~
c;n * AK
acsetups.exe > ACS setup DCOM server executable ; o 0&`b?
8@2OJ =`[
actmovie.exe > Direct Show setup tool 直接显示安装工具 "huFA|`
Gch[Otq]%
append.exe > Allows programs to open data in specified directories as if they were in the current directory. 允许程序打开制定目录中的数据 vDxe/x%
s! }ne"&0
arp.exe > NETWORK Display and modify IP - Hardware addresses 显示和更改计算机的IP与硬件物理地址的对应列表 .sj^{kGE
?)1{)Erf8x
at.exe > AT is a scheduling utility also included with UNIX 计划运行任务 Dqe^E%mc
< !dqTJos
atmadm.exe > Displays statistics for ATM call manager. ATM调用管理器统计 .P MZX%*v
nw<&3k(g}
attrib.exe > Display and modify attributes for files and folders 显示和更改文件和文件夹属性 @p NNq
vbD{N3p)?n
autochk.exe > Used to check and repair Windows File Systems 检测修复文件系统 8peDI7[|
2g>SHS@1>
autoconv.exe > Automates the file system conversion during reboots 在启动过程中自动转化系统 Oms. e
o17ekM L
autofmt.exe > Automates the file format process during reboots 在启动过程中格式化进程 CS=qj-(
FZtfh
autolfn.exe > Used for formatting long file names 使用长文件名格式 vOc 9ZE
*?Kr*]dnLl
bootok.exe > Boot acceptance application for registry :E@3Vl#U
y1bbILWej
bootvrfy.exe > Bootvrfy.exe, a program included in Windows 2000 that notifies the system that startup was successful. Bootvrfy.exe can be run on a local or remote computer. 通报启动成功 Qe5U<3 {JZ
cacls.exe > Displays or modifies access control lists (ACLs) of files. 显示和编辑ACL 7e#? e+5+A
?hWwj6i&
calc.exe > Windows Calculators 计算器 D6G oa(!9d
H+ 0$tHi
cdplayer.exe > Windows CD Player CD播放器 de; GrPLAi
e*;c(3>(
change.exe > Change { User | Port | Logon } 与终端服务器相关的查询 B {C??g8/
Q Z:8+[oy
charmap.exe > Character Map 字符映射表 *i- _6s
8$ma;U d
chglogon.exe > Same as using "Change Logon" 启动或停用会话记录 I9 mvt e
P3nb2.
chgport.exe > Same as using "Change Port" 改变端口（终端服务） X '`~s}vGO
"gne_Ye.
chgusr.exe > Same as using "Change User" 改变用户（终端服务） 0VGPEKRh
'
)?f{
chkdsk.exe > Check the hard disk for errors similar to Scandisk 3 Stages must specify a Drive Letter 磁盘检测程序 t $xY #:
_;~,Cgfi
chkntfs.exe > Same as using chkdsk but for NTFS NTFS磁盘检测程序 oNU0 qZ5
r]l!WRn
cidaemon.exe > Component of Ci Filer Service 组成Ci文档服务 xg NJ eQ
-sjd&)~S[
cipher.exe > Displays or alters the encryption of directories [files] on NTFS partitions. 在NTFS上显示或改变加密的文件或目录 /~Z?27F6@
u
a~CEs
cisvc.exe > Content Index -- It's the content indexing service for I 索引内容 4x;/HEb7?
3plzHz ,x
ckcnv.exe > Cookie Convertor 变换Cookie "E8zh| m o
a(9L,v#?
cleanmgr.exe > Disk Cleanup, popular with Windows 98 磁盘清理 C0
/g1;p(
`(f!*Ru@/z
cliconfg.exe > SQL Server Client Network Utility SQL客户网络工具
mi)LP?q
'6xQT-sUih
clipbrd.exe > Clipboard viewer for Local will allow you to connect to other clipboards 剪贴簿查看器 }2uI?i8
u9}1)9
clipsrv.exe > Start the clipboard Server 运行Clipboard服务 t0nI ('LX,
6C-/`>m
clspack.exe > CLSPACK used to create a file listing of system packages 建立系统文件列表清单 D!.+Y-+Xzu
z-LB^kc8oQ
cluster.exe > Display a cluster in a domain 显示域的集群 @Q^P{
ZP;j9 T!
_cmd_.exe > Famous command prompt 没什么好说的！ eXK o.JL
C #t'Y*
cmdl32.exe > Connection Manager Auto-Download 自动下载连接管理 4 &_NJ\
S6+y?,^
cmmgr32.exe > Connection Manager 连接管理器 DWID$w
OnF3l Cmu
cmmon32.exe > Connection Manager Monitor 连接管理器监视 |ZCn`9hvn
<YOLx R
cmstp.exe > Connection Manager Profile Manager 连接管理器配置文件安装程序 l411a9o
H~+ l7OhV
comclust.exe > about cluster server 集群 =9z[[dQ|L
/}PF\j9#4
comp.exe > ComClust Add, Remove, or Join a cluster. 比较两个文件和文件集的内容＊ H'LD}\K l
F8uNL)gKj)
compact.exe > Displays or alters the compression of files on NTFS partitions. 显示或改变NTFS分区上文件的压缩状态 ` bdZ/*E
Q<KvBg mT
conime.exe > Console IME IME控制台 r4Qx oaM
;w %*M}`5
control.exe > Starts the control panel 控制面板 rc/nFl 6#
ooV3gj4
convert.exe > Convert File System to NTFS 转换文件系统到NTFS ^B@Wp
*_KFW@bC:
convlog.exe > Converts MS IIS log files 转换IIS日志文件格式到NCSA格式 :^fcC[$K
raCi 8
cprofile.exe > Copy profiles 转换显示模式 UY <e&Npo
Ojt`^r !V
cscript.exe > MS Windows Scripts Host Version 5.1 较本宿主版本 g=]u^&
:s P!p`dl
csrss.exe > Client Server Runtime Process 客户服务器Runtime进程 Q^q1 ns;r
sPps q
csvde.exe > Comma Separated Variable Import/Export Utility 日至格式转换程序 13+<Q \
Vg>( Y,
dbgtrace.exe > 和Terminal Server相关 _ ^ 'I
,N
e;kI
dcomcnfg.exe > Display the current DCOM configuration. DCOM配置属性 j8n4fv-)f
Ai/b\:V9S
dcphelp.exe > ? .p=sBLp8
X5`A GyX
dcpromo.exe > Promote a domain controller to ADSI AD安装向导 8?i7U<CB
S _T1y
ddeshare.exe > Display DDE shares on local or remote computer DDE共享 ! Mu|mz=
OZIW_'Wm/
ddmprxy.exe > )6w}<W*1E
Ezi-VGjr]
debug.exe > Runs Debug, a program testing and editing tool. 就是DEBUG啦！ q-rB 2
mCWhUBghR
dfrgfat.exe > Defrag FAT file system FAT分区磁盘碎片整理程序 "n: %E
=r.mlc``W
dfrgntfs.exe > Defrag NTFS file system NTFS分区磁盘碎片整理程序 =Me5ft w
J8"[6vI d~
dfs_cmd_.exe > configures a Dfs tree 配置一个DFS树 qBQ`~4s
tBm_YP[
dfsinit.exe > Distributed File System Initialization 分布式文件系统初始化 NO0"* c ;
Z{
u a=0
dfssvc.exe > Distributed File System Server 分布式文件系统服务器 tU^kQR!
<97d[/7 i
diantz.exe > MS Cabinet Maker 制作CAB文件 U|5nNiJM
)
gzR=9l
diskperf.exe > Starts physical Disk Performance counters 磁盘性能计数器 sT/c_^y
< n:}kQTT
dllhost.exe > dllhost is used on all versions of Windows 2000. dllhost is the hedost process for all COM+ applications. 所有COM+应用软件的主进程 wBInq~ K_
[Cb` {
dllhst3g.exe > )' hH^(Yu
>^ OC{~Az
dmadmin.exe > Disk Manager Service 磁盘管理服务 LT~YFS
xESjM1 A)
dmremote.exe > Part of disk management 磁盘管理服务的一部分 )$&dg2[
xEltwuDd?
dns.exe > DNS Applications DNS e|rg;`AW
sjM;s{ gy
doskey.exe > recalls Windows command lines and creates macros 命令行创建宏 * FeQ*`r
a2f^x@0k
dosx.exe > DOS Extender DOS扩展 3-%Cw2ds
2q Hf'
dplaysvr.exe > Direct Play Helper 直接运行帮助 +@Ad1fJi
i,nm`Z>u
drwatson.exe > Dr Watson for 2000 Fault Detector 华生医生错误检测 k78Vh$AA6%
8$c bVM jh
drwtsn32.exe > Dr Watson for 2000 viewer and configuration manager 华生医生显示和配置管理 y E \wj
a|Bcn YN
dtcsetup.exe > Installs MDTC +'G0 {;b
Ox#Q2W@Uy
dvdplay.exe > Windows 2000 DVD player DVD播放 x-'~Bu
|T4kqW{
dxdiag.exe > Direct-X Diagnostics Direct-X诊断工具 ]O`
{dnP
<X_!x_x
edlin.exe > line-oriented text editor. 命令行的文本编辑器（历史悠久啊！） ~RBrSu)
edlin.exe > line-oriented text editor. 命令行的文本编辑器（历史悠久啊！） 7Mx 6
%Td )0Lqp
esentutl.exe > MS Database Utility MS数据库工具 4<X!<]3]
@f!Ak zI
eudcedit.exe > Private character editor Ture Type造字程序 C N2_bz
DOQc"+
eventvwr.exe > Windows 2000 Event Viewer 事件查看器 =l9T7az
45@]:2j
evnt_cmd_.exe > Event to trap translator; Configuration tool =9G;PVk|
a{!r`>I\f
evntwin.exe > Event to trap translator setup >qo~d? +
t0#[#I1+
exe2bin.exe > Converts EXE to binary format 转换EXE文件到二进制 U{ ;l0 2S
Ao7 `G':
expand.exe > Expand Files that have been compressed 解压缩 m9md| yS
+<.\5+
extrac32.exe > CAB File extraction utility 解CAB工具 q+a.G2S
kL S(w??T
fastopen.exe > Fastopen tracks the location of files on a hard disk and stores the information in memory for fast access. 快速访问在内存中的硬盘文件 XMRNuEU
xAwf49N~
faxcover.exe > Fax Cover page editor 传真封面编辑 ;$BdP7i:
3_`szl-
faxqueue.exe > Display Fax Queue 显示传真队列 Hwm?#6\ 5
-Z^4 L
faxsend.exe > Fax Wizard for sending faxes 发送传真向导 S)A'Y]2X
M]HgIL@9#
faxsvc.exe > Starts fax server 启动传真服务 =C
f(B<u
me \cLFw
fc.exe > Compares two files or sets of files and their differences 比较两个文件的不同 eX2<}'W<
pGIe= Um0W
find.exe > Searches for a text string in file or files 查找文件中的文本行 15zrrU~D
!RlC~^
-
findstr.exe > Searches for strings in files 查找文件中的行 uO >x:*^8
ecX/K.8l
finger.exe > Fingers a user and displays statistics on that user Finger一个用户并显示出统计结果 s (&;q4|
)~rB}>^Z
fixmapi.exe > Fix mapi files 修复MAPI文件 x7RdZC
n+D#k 8{
flattemp.exe > Enable or disable temporally directories 允许或者禁用临时文件目录 y1BgK>R
2D([Z -<i
fontview.exe > Display fonts in a font file 显示字体文件中的字体 ~]8p _;\
Sd:.KRTu.
forcedos.exe > Forces a file to start in dos mode. 强制文件在DOS模式下运行 {6x PdUhw
2 Y|D'^
freecell.exe > Popular Windows Game 空当接龙 !U BVPR*
@ ERu>nSP
ftp.exe > File Transfer Protocol used to transfer files over a network connection 就是FTP了 T+RZ
:w?7j_p#
gdi.exe > Graphic Device Interface 图形界面驱动 ~2/{3m{3 A
hkW{88
grovel.exe > gvnj&h.GV
-{9Gagy2&
grpconv.exe > Program Manager Group Convertor 转换程序管理员组 2[dIOb4b
aQcN&UA@
help.exe > displays help for Windows 2000 commands 显示帮助 $Kq<W{H3ut
yty` 2$O
hostname.exe > Display hostname for machine. 显示机器的Hostname agaq`^[(P
el' j&I
ie4uinit.exe > IE5 User Install tool IE5用户安装工具 xaL#MIR"u"
CtT~0 Y|
ieshwiz.exe > Customize folder wizard 自定义文件夹向导 \]Z&P,}w
67J*&5? |
iexpress.exe > Create and setup packages for install 穿件安装包 HR3_@^<7
n=`w9qajd
iisreset.exe > Restart IIS Admin Service 重启IIS服务 jNy?[
)
n6d^>s9J
internat.exe > Keyboard Language Indicator Applet 键盘语言指示器 Y jup
3#Y3Dz`
ipconfig.exe > Windows 2000 IP configuration. 察看IP配置 C(,=[Fi-
VjTe4$ *
ipsecmon.exe > IP Security Monitor IP安全监视器 j
0
Y
Ko}2%4o n
ipxroute.exe > IPX Routing and Source Routing Control Program IPX路由和源路由控制程序 vF>gU_gz.
yL"i
irftp.exe > Setup FTP for wireless communication 无线连接 (^H5EeG V{
h#{T}[
ismserv.exe > Intersite messaging Service 安装或者删除Service Control Manager中的服务 )
p^
\n@V-b
jdbgmgr.exe > Microsoft debugger for java 4 Java4的调试器 +{6`F1MO
Zu=kT}aGg
jetconv.exe > Convert a Jet Engine Database 转换Jet Engine数据库 feCqbWq:
uu>lDvR*
jetpack.exe > Compact Jet Database. 压缩Jet数据库 | mj#
0
,U%=rfB~
jview.exe > Command-line loader for Java Java的命令行装载者 e}Q>\ t45
=hcPTU-QU
krnl386.exe > Core Component for Windows 2000 2000的核心组件 -SJSTO[/J
~ Oh=
label.exe > Change label for drives 改变驱动器的卷标 l7Lj[d<n
wsfysat$
lcwiz.exe > License Compliance Wizard for local or remote systems. 许可证符合向导 6F `\YSn+
rB evVc![
ldifde.exe > LDIF cmd line manager LDIF目录交换命令行管理 E!@/N E\-
MW]8;`|jC
licmgr.exe > Terminal Server License Manager 终端服务许可协议管理 +=, u jO:
jvO3_Zt9
lights.exe > display connection status lights 显示连接状况 cDO:'-
~@YQ,\Y
llsmgr.exe > Windows 2000 License Manager 2000许可协议管理 "=ElCaP}
l7 Y8b`
llssrv.exe > Start the license Server 启动许可协议服务器 Vr\Q`H.
VV\Xb31J
lnkstub.exe > &Y=.D:z<
i7f%^7!
locator.exe > RPC Locator 远程定位 y.fs,!|%@
&gWiu9WbS
lodctr.exe > Load perfmon counters 调用性能计数 B<+pg
;[cai MA-
logoff.exe > Log current user off. 注销用户 /u ?9S/
WQ.i$ID/
lpq.exe > Displays status of a remote LPD queue 显示远端的LPD打印队列的状态，显示被送到基于Unix的服务器的打印任务 ~B*~'I9b*
:p&IX"Hh
lpr.exe > Send a print job to a network printer. 重定向打印任务到网络中的打印机。通常用于Unix客户打印机将打印任务发送给连接了打印设备的NT的打印机服务器。 u0'i!@795
Q,n4i@E
lsass.exe > LSA Executable and Server DLL 运行LSA和Server的DLL fwH`}<o
;24'f-Eri
lserver.exe > Specifies the new DNS domain for the default server 指定默认Server新的DNS域 $vqU|]J`
k)i"tpw
macfile.exe > Used for managing MACFILES 管理MACFILES U,38q KE
x?rbgsB5 &
magnify.exe > Used to magnify the current screen 放大镜 FbBX}n
\KN dZC?V2
makecab.exe > MS Cabinet Maker 制作CAB文件 Uf^RLdoDn
Lxz
mdm.exe > Machine Debug Manager 机器调试管理 wH#-mu#Yl<
f^u^-l
mem.exe > Display current Memory stats 显示内存状态 '5V^}/
eB7>t@ED
migpwd.exe > Migrate passwords. 迁移密码 Wk,6) jS=}
:Dt\:`(r'
mmc.exe > Microsoft Management Console 控制台 U81;7L8
[]r T? -
mnmsrvc.exe > Netmeeting Remote Desktop Sharing NetMeeting远程桌面共享 9,w}Xe=C
LjC6?a_?l
mobsync.exe > Manage Synchronization. 同步目录管理器 .P 8-~?&M
=tNzGaWJ
mountvol.exe > Creates, deletes, or lists a volume mount point. 创建、删除或列出卷的装入点。 ?-d
Ain1w
6QW<RXom
mplay32.exe > MS Media Player 媒体播放器 #TIX_ RXh
*[VEF
mpnotify.exe > Multiple Provider Notification application 多提供者通知应用程序 6 1L7
-~
6{ C Fe|XN
mq1sync.exe > 3y/1 !A3
U |9 U(il
mqbkup.exe > MS Message Queue Backup and Restore Utility 信息队列备份和恢复工具 " NJ ,0A
z^gi[
mi
mqexchng.exe > MSMQ Exchange Connector Setup 信息队列交换连接设置 ~~ U <
L)1C'8 ).
mqmig.exe > MSMQ Migration Utility 信息队列迁移工具 U%h7h`=F?
\m%J`{Mt
mqsvc.exe > ? P &,hiGTDi
yB=C5-\F
mrinfo.exe > Multicast routing using SNMP 使用SNMP多点传送路由 jT{f<P0
tK*%8I\s
mscdexnt.exe > Installs MSCD (MS CD Extensions) 安装MSCD jk
K#e$ 7
>1m)%zt
msdtc.exe > Dynamic Transaction Controller Console 动态事务处理控制台 )-)ss"\+Ju
(LRNU)vD7$
msg.exe > Send a message to a user local or remote. 发送消息到本地或远程客户 HgYc@P*b
&|s+KP|d
mshta.exe > HTML Application HOST HTML应用程序主机 [ k!-;mi
uXjoGcW
msiexec.exe > Starts Windows Installer Program 开始Windows安装程序 3Ca
\`m)l
+g)_4fV0|
mspaint.exe > Microsoft Paint 画板 wH+FFXGJs
zjea4>!A2
msswchx.exe > Ft )t`E'%j
mVa?aWpez
mstask.exe > Task Schedule Program 任务计划表程序 @k_Jl>X
} /[_
mstinit.exe > Task scheduler setup 任务计划表安装 7t ZW^dF
s Ke,
narrator.exe > Program will allow you to have a narrator for reading. Microsoft讲述人 ?]s%(R,B5
eVZa6la"
nbtstat.exe > Displays protocol stats and current TCP/IP connections using NBT 使用 NBT（TCP/IP 上的 NetBIOS）显示协议统计和当前 TCP/IP 连接。 o`b$^hv{A
-,FK{[h]ka
nddeapir.exe > NDDE API Server side NDDE API服务器端 79 TPg
}Q!h ov
net.exe > Net Utility 详细用法看/？ 1P+Mv^%I
y> >vGU;
net1.exe > Net Utility updated version from MS Net的升级版
|
|