| 网络飞虫 |
2006-02-05 17:33 |
Win2000命令全集及解释
在进行Windows 2000安全检查时,经常会在进程表中发现很多不明缘由的进程,这些进程到底是系统自带的程序,还是应用程序或者是恶意程序,特洛伊木马服务器等,让大家很头疼,应用程序进程一般可以从磁盘中搜索到,并根据程序所在位置判断是它属于哪个应用软件,但系统自带的进程如何知道呢?下面就是Windws 2000的命令集合,供大家参考。 dHk{.n^p accwiz.exe > Accessibility Wizard for walking you through setting up your machine for your mobility needs. 辅助工具向导 HQ9X7[3 U #~;)fZ acsetups.exe > ACS setup DCOM server executable aSP4a+\* ~j'l.gQb actmovie.exe > Direct Show setup tool 直接显示安装工具 U/NBFc:[y:
$@i"un; append.exe > Allows programs to open data in specified directories as if they were in the current directory. 允许程序打开制定目录中的数据 _pH{yhA j.:h5Y^N arp.exe > NETWORK Display and modify IP - Hardware addresses 显示和更改计算机的IP与硬件物理地址的对应列表 wIf
{6z{ zT ZVehEe at.exe > AT is a scheduling utility also included with UNIX 计划运行任务 Y+qQI MZ Y\=FLO9 atmadm.exe > Displays statistics for ATM call manager. ATM调用管理器统计 "EV!>^Z $M:3 XAN attrib.exe > Display and modify attributes for files and folders 显示和更改文件和文件夹属性 "<i SZ c={Ft*N autochk.exe > Used to check and repair Windows File Systems 检测修复文件系统 F6hmku>\1 n$(p-po autoconv.exe > Automates the file system conversion during reboots 在启动过程中自动转化系统 z* <y5 yE} dj)wd autofmt.exe > Automates the file format process during reboots 在启动过程中格式化进程 Hk7K`9 _P?\.W@ autolfn.exe > Used for formatting long file names 使用长文件名格式 fj ,m cubUq5 bootok.exe > Boot acceptance application for registry q_Lo3|t i q:8_]Qt bootvrfy.exe > Bootvrfy.exe, a program included in Windows 2000 that notifies the system that startup was successful. Bootvrfy.exe can be run on a local or remote computer. 通报启动成功 \b*X:3g* cacls.exe > Displays or modifies access control lists (ACLs) of files. 显示和编辑ACL m%#`y\]I ir3VTqz calc.exe > Windows Calculators 计算器 /VHi> 19q{6X`x cdplayer.exe > Windows CD Player CD播放器 De_ CF8 rx :z#"?I change.exe > Change { User | Port | Logon } 与终端服务器相关的查询 mceG!@t k8]O65t| charmap.exe > Character Map 字符映射表 9PUes3"v c6Q(Ygc
chglogon.exe > Same as using "Change Logon" 启动或停用会话记录 >\A8#@1 n+1y chgport.exe > Same as using "Change Port" 改变端口(终端服务) {0YAzZ7 W
>(vYU chgusr.exe > Same as using "Change User" 改变用户(终端服务) ->lu#;A5 2yo
cu!4l chkdsk.exe > Check the hard disk for errors similar to Scandisk 3 Stages must specify a Drive Letter 磁盘检测程序 6yAA~;*5' nF)uTk chkntfs.exe > Same as using chkdsk but for NTFS NTFS磁盘检测程序 W2wpcc G&f7+e cidaemon.exe > Component of Ci Filer Service 组成Ci文档服务 4QJ8Z t cyd~2\Kv~ cipher.exe > Displays or alters the encryption of directories [files] on NTFS partitions. 在NTFS上显示或改变加密的文件或目录 %G3sjnI;l o{-<L cisvc.exe > Content Index -- It's the content indexing service for I 索引内容 9x`4RE MQcr^Y_ ckcnv.exe > Cookie Convertor 变换Cookie kVDe6},D7 IJU0[EA]F cleanmgr.exe > Disk Cleanup, popular with Windows 98 磁盘清理 y:}sD_m0W 7k=fZ$+O cliconfg.exe > SQL Server Client Network Utility SQL客户网络工具 Z$ KV&.=+
s* jfMY clipbrd.exe > Clipboard viewer for Local will allow you to connect to other clipboards 剪贴簿查看器 =fyyqb4 dX
)W0 clipsrv.exe > Start the clipboard Server 运行Clipboard服务 qS8B##x+= Wf>^bFb"$ clspack.exe > CLSPACK used to create a file listing of system packages 建立系统文件列表清单 x|~zHFm6 k<4P6? cluster.exe > Display a cluster in a domain 显示域的集群 kB\kpW X,v4d~>] _cmd_.exe > Famous command prompt 没什么好说的! $->d! %c6E-4b cmdl32.exe > Connection Manager Auto-Download 自动下载连接管理 XrN- 2HTV E(L<L1:" cmmgr32.exe > Connection Manager 连接管理器 @Z\~ mrZ`Lm#>pS cmmon32.exe > Connection Manager Monitor 连接管理器监视 S_8r\B[>P t;#Gmo cmstp.exe > Connection Manager Profile Manager 连接管理器配置文件安装程序 BgRZ<B` RazBc .o< comclust.exe > about cluster server 集群 h[=nx^ J4yt N3 comp.exe > ComClust Add, Remove, or Join a cluster. 比较两个文件和文件集的内容* H+cNX\, dbO# compact.exe > Displays or alters the compression of files on NTFS partitions. 显示或改变NTFS分区上文件的压缩状态 MEU[%hty_ |Cf
mcz(56 conime.exe > Console IME IME控制台 vg^Myn
lfy7w| control.exe > Starts the control panel 控制面板 =s[&;B`s D<nxr~pQ convert.exe > Convert File System to NTFS 转换文件系统到NTFS S;}qLjT l\}25
e convlog.exe > Converts MS IIS log files 转换IIS日志文件格式到NCSA格式 ~Fx&)kegTo 6GKT yN cprofile.exe > Copy profiles 转换显示模式 jzrt7p*k} oCJbkt= cscript.exe > MS Windows Scripts Host Version 5.1 较本宿主版本 %3,xaVN aIu2> csrss.exe > Client Server Runtime Process 客户服务器Runtime进程 *ro.mQ_ rl|Q)A{ csvde.exe > Comma Separated Variable Import/Export Utility 日至格式转换程序 P^(.tr3t ?L`ZKRD dbgtrace.exe > 和Terminal Server相关 qeMv
Vf j)6G7T|
dcomcnfg.exe > Display the current DCOM configuration. DCOM配置属性 Ed=}PrE @"8~Y|L93 dcphelp.exe > ? k5X b}@ !`C%Fkq dcpromo.exe > Promote a domain controller to ADSI AD安装向导 W uf/LKj ,o)4p\nV ddeshare.exe > Display DDE shares on local or remote computer DDE共享 ;o >WXw yqBa_XPV8 ddmprxy.exe > MOLO3?H( ~'[jBn) debug.exe > Runs Debug, a program testing and editing tool. 就是DEBUG啦! [|<EDR {]M>Y%j48 dfrgfat.exe > Defrag FAT file system FAT分区磁盘碎片整理程序 b_ JWnh h,hL?imD dfrgntfs.exe > Defrag NTFS file system NTFS分区磁盘碎片整理程序 2[BA(B (txt8q dfs_cmd_.exe > configures a Dfs tree 配置一个DFS树 `]hCUaV ;o%:7& dfsinit.exe > Distributed File System Initialization 分布式文件系统初始化 sU*3\ Zsk?QS FE dfssvc.exe > Distributed File System Server 分布式文件系统服务器 Gt5$6>A (uT^Nn9L= diantz.exe > MS Cabinet Maker 制作CAB文件 )"-fHW+fy z'e1"Y. diskperf.exe > Starts physical Disk Performance counters 磁盘性能计数器 f MzYFM'i c85O_J dllhost.exe > dllhost is used on all versions of Windows 2000. dllhost is the hedost process for all COM+ applications. 所有COM+应用软件的主进程 9C>ynH kDg{>mf dllhst3g.exe > gDj_KKd xiJz`KD& dmadmin.exe > Disk Manager Service 磁盘管理服务 c&A]pLn+x 8L{$v~ + dmremote.exe > Part of disk management 磁盘管理服务的一部分 W60Q3 J5-rp| dns.exe > DNS Applications DNS $~TfL{$ taixBNv doskey.exe > recalls Windows command lines and creates macros 命令行创建宏
Q_v\1"c QglYU dosx.exe > DOS Extender DOS扩展 :SQLfOQ .&L^J&V dplaysvr.exe > Direct Play Helper 直接运行帮助 bWUS9WT Kf&r21h drwatson.exe > Dr Watson for 2000 Fault Detector 华生医生错误检测 Z3Gm jvWI_Fto drwtsn32.exe > Dr Watson for 2000 viewer and configuration manager 华生医生显示和配置管理 Q+HZ?V( RAdvIIQp: dtcsetup.exe > Installs MDTC BQuRHi IV wYa0hNd dvdplay.exe > Windows 2000 DVD player DVD播放 rEg+i@~ `M,Nd'5&| dxdiag.exe > Direct-X Diagnostics Direct-X诊断工具 TXx'7[ V!H(;Tuuo edlin.exe > line-oriented text editor. 命令行的文本编辑器(历史悠久啊!) u8xk]:% edlin.exe > line-oriented text editor. 命令行的文本编辑器(历史悠久啊!) ujow?$& F1E.\l esentutl.exe > MS Database Utility MS数据库工具 U~Xf= f_Q$ 2[XltjO eudcedit.exe > Private character editor Ture Type造字程序 ~DK F%}E /5jKX 5r eventvwr.exe > Windows 2000 Event Viewer 事件查看器 $e>/?Ss |}%(6< evnt_cmd_.exe > Event to trap translator; Configuration tool dRHlx QUn HqB|SWyK evntwin.exe > Event to trap translator setup zU=YNrn Q;=6ag' exe2bin.exe > Converts EXE to binary format 转换EXE文件到二进制 ofVEao nD(w @c? expand.exe > Expand Files that have been compressed 解压缩 <( cM*kV <&KLo>B^ extrac32.exe > CAB File extraction utility 解CAB工具 r+SEw ; u0wn=Dg fastopen.exe > Fastopen tracks the location of files on a hard disk and stores the information in memory for fast access. 快速访问在内存中的硬盘文件 B<(Pd 4n#YDZ faxcover.exe > Fax Cover page editor 传真封面编辑 ~v^%ze jC#`PA3m= faxqueue.exe > Display Fax Queue 显示传真队列 e21E_exM0 o?;F.W_ faxsend.exe > Fax Wizard for sending faxes 发送传真向导 te4F"SEf P=&'wblm? faxsvc.exe > Starts fax server 启动传真服务 0S%tsXt+ f<'n5}{RO0 fc.exe > Compares two files or sets of files and their differences 比较两个文件的不同 ~6\& y ?e"Wu+q~L find.exe > Searches for a text string in file or files 查找文件中的文本行 a|8|@, 0Z@ARMCe|m findstr.exe > Searches for strings in files 查找文件中的行 83\o( /A%om|+Gq finger.exe > Fingers a user and displays statistics on that user Finger一个用户并显示出统计结果 N[#iT&@T}/ "xL;(Fqu fixmapi.exe > Fix mapi files 修复MAPI文件 '2wXV;` y;zt_O/ flattemp.exe > Enable or disable temporally directories 允许或者禁用临时文件目录 fEx+gQW_ (Nm}3 p fontview.exe > Display fonts in a font file 显示字体文件中的字体 A*G
)CG
oNiToFbQu forcedos.exe > Forces a file to start in dos mode. 强制文件在DOS模式下运行 av'd%LZP ~gSwxGT7d freecell.exe > Popular Windows Game 空当接龙 |\i:LG1 ?SB[lbU ftp.exe > File Transfer Protocol used to transfer files over a network connection 就是FTP了 fG X1y - 3C* P
gdi.exe > Graphic Device Interface 图形界面驱动 Y1#-^,qg =Jsg{vI grovel.exe > .jvSAV5B [?Mc4uT{ grpconv.exe > Program Manager Group Convertor 转换程序管理员组 gJ<@;O8zu0 6T R8D\
help.exe > displays help for Windows 2000 commands 显示帮助 Es.toOH$S 6V.awg, hostname.exe > Display hostname for machine. 显示机器的Hostname *37LN 7JxE|G ie4uinit.exe > IE5 User Install tool IE5用户安装工具 S4#A#a2J &&]"Y!r - ieshwiz.exe > Customize folder wizard 自定义文件夹向导 cmwzKu% f28gE7Y\a iexpress.exe > Create and setup packages for install 穿件安装包
ZAI1p+ nQ:ml iisreset.exe > Restart IIS Admin Service 重启IIS服务 `E./p kS@9c _3S internat.exe > Keyboard Language Indicator Applet 键盘语言指示器 }}kS~
w-# E9L!O.Q ipconfig.exe > Windows 2000 IP configuration. 察看IP配置 )ZS:gD gi1}5DR ipsecmon.exe > IP Security Monitor IP安全监视器 O\|C,Epm g28S3 '2 ipxroute.exe > IPX Routing and Source Routing Control Program IPX路由和源路由控制程序 .Ws iOJU {{^Mr)]5K irftp.exe > Setup FTP for wireless communication 无线连接 ^q4l4)8jX ZTQ$Ol+{q ismserv.exe > Intersite messaging Service 安装或者删除Service Control Manager中的服务 >XD02A[ JxX
jDYrU jdbgmgr.exe > Microsoft debugger for java 4 Java4的调试器 sDzD
8as 1Qp1Es<) jetconv.exe > Convert a Jet Engine Database 转换Jet Engine数据库 n4ds;N3Hd LU-#=1Q jetpack.exe > Compact Jet Database. 压缩Jet数据库 xm<5S;E5U4 \j,v/C@c- jview.exe > Command-line loader for Java Java的命令行装载者 ?#VP)A ]ro1{wm!WU krnl386.exe > Core Component for Windows 2000 2000的核心组件 '<RB ~ERRp3Ee? label.exe > Change label for drives 改变驱动器的卷标 ?:#>^eWYe7 )z?&"I lcwiz.exe > License Compliance Wizard for local or remote systems. 许可证符合向导 *@-q@5r}! TS\A`{^T ldifde.exe > LDIF cmd line manager LDIF目录交换命令行管理 yS:IRI. 9,iq"dQ licmgr.exe > Terminal Server License Manager 终端服务许可协议管理 9E->;0- ? e9XVQ* lights.exe > display connection status lights 显示连接状况 gTmUK{y' ="#:=i] llsmgr.exe > Windows 2000 License Manager 2000许可协议管理 ,p[\fT($] !T#8N7J> llssrv.exe > Start the license Server 启动许可协议服务器 Rk437vQD, oP|pOs\$p lnkstub.exe > eB(S+p? )|{1&F1 locator.exe > RPC Locator 远程定位 Pv{,aV\I} 94qHY1rp lodctr.exe > Load perfmon counters 调用性能计数 p5twL Qq;m"M / logoff.exe > Log current user off. 注销用户 H3/Y \Age9iz& lpq.exe > Displays status of a remote LPD queue 显示远端的LPD打印队列的状态,显示被送到基于Unix的服务器的打印任务 # o;CmB {.' ,%) lpr.exe > Send a print job to a network printer. 重定向打印任务到网络中的打印机。通常用于Unix客户打印机将打印任务发送给连接了打印设备的NT的打印机服务器。 ^H\-3/si* j &0fC!k lsass.exe > LSA Executable and Server DLL 运行LSA和Server的DLL YaY;o^11/ 8Y{}p[UFT lserver.exe > Specifies the new DNS domain for the default server 指定默认Server新的DNS域 pb/{ss+ .qb_/#Bas macfile.exe > Used for managing MACFILES 管理MACFILES <QkN}+B= U'h[{ek magnify.exe > Used to magnify the current screen 放大镜 TQ 5MKqR$ "dLMBY~ makecab.exe > MS Cabinet Maker 制作CAB文件 :C|>y4U&(s #T$'.M mdm.exe > Machine Debug Manager 机器调试管理 )bIK0h #g-*n@
1 mem.exe > Display current Memory stats 显示内存状态 o$H Jg z2s|.M]&-D migpwd.exe > Migrate passwords. 迁移密码 `%mBu`A ) v[Knp' mmc.exe > Microsoft Management Console 控制台 >jrz;r Z68Wf5@to& mnmsrvc.exe > Netmeeting Remote Desktop Sharing NetMeeting远程桌面共享 cDQw`ORP*g $D,
wO mobsync.exe > Manage Synchronization. 同步目录管理器 TReM8Vd rmg";(I mountvol.exe > Creates, deletes, or lists a volume mount point. 创建、删除或列出卷的装入点。 ax{-Qi7z-+ o trTrh mplay32.exe > MS Media Player 媒体播放器 mtWx ?x BJO~$/R?v mpnotify.exe > Multiple Provider Notification application 多提供者通知应用程序 :AqnWy xV n]m9i mq1sync.exe > T`w};]z^d2 RESGI}u mqbkup.exe > MS Message Queue Backup and Restore Utility 信息队列备份和恢复工具 Y9H *S*n GdfKxSO mqexchng.exe > MSMQ Exchange Connector Setup 信息队列交换连接设置 YnO1Lf@ Pdo5sve mqmig.exe > MSMQ Migration Utility 信息队列迁移工具 9a~BAH,j /m{?o mqsvc.exe > ? C!/8e
(!N K3r>nGLBo mrinfo.exe > Multicast routing using SNMP 使用SNMP多点传送路由 Vg [5bJ5 dS;|Kl[Om mscdexnt.exe > Installs MSCD (MS CD Extensions) 安装MSCD MBYD,v& Y^*$PED? msdtc.exe > Dynamic Transaction Controller Console 动态事务处理控制台 ukDH@/ 4KSP81}/\ msg.exe > Send a message to a user local or remote. 发送消息到本地或远程客户 >gi{x|/ C#?d=x mshta.exe > HTML Application HOST HTML应用程序主机 o%~K4 M". Jm J,~_ msiexec.exe > Starts Windows Installer Program 开始Windows安装程序 C@?e`=9( #:\+7mCF mspaint.exe > Microsoft Paint 画板 3d)+44G_) z`r4edk3 msswchx.exe > GLKN<2|2@y 4;c_ %=cU mstask.exe > Task Schedule Program 任务计划表程序 Ko]h r !{~7 )iq mstinit.exe > Task scheduler setup 任务计划表安装 knK=ENf;e p_40V%y^ narrator.exe > Program will allow you to have a narrator for reading. Microsoft讲述人 ah6F^Kpl{ "6NNId|Y nbtstat.exe > Displays protocol stats and current TCP/IP connections using NBT 使用 NBT(TCP/IP 上的 NetBIOS)显示协议统计和当前 TCP/IP 连接。 bd 1J#V] gmAKW4( nddeapir.exe > NDDE API Server side NDDE API服务器端 by
y1MgQd 2,e|,N"zN net.exe > Net Utility 详细用法看/? 2|NyAtPb5 zQ|x>3 net1.exe > Net Utility updated version from MS Net的升级版
|
|