| 网络飞虫 |
2006-02-05 17:33 |
Win2000命令全集及解释
在进行Windows 2000安全检查时,经常会在进程表中发现很多不明缘由的进程,这些进程到底是系统自带的程序,还是应用程序或者是恶意程序,特洛伊木马服务器等,让大家很头疼,应用程序进程一般可以从磁盘中搜索到,并根据程序所在位置判断是它属于哪个应用软件,但系统自带的进程如何知道呢?下面就是Windws 2000的命令集合,供大家参考。 *k[kV accwiz.exe > Accessibility Wizard for walking you through setting up your machine for your mobility needs. 辅助工具向导 PC0HH bN!u}DnN acsetups.exe > ACS setup DCOM server executable <vLdBfw&N d/4ubf+$k actmovie.exe > Direct Show setup tool 直接显示安装工具 @Q3, bj Yg|"- append.exe > Allows programs to open data in specified directories as if they were in the current directory. 允许程序打开制定目录中的数据 g~|y$T #AvEH=: arp.exe > NETWORK Display and modify IP - Hardware addresses 显示和更改计算机的IP与硬件物理地址的对应列表 zM\IKo_" <L2GUX36# at.exe > AT is a scheduling utility also included with UNIX 计划运行任务 5Abz5-^KH b_ZNI0Hp@ atmadm.exe > Displays statistics for ATM call manager. ATM调用管理器统计 XK3!V|y` ]'6'<S attrib.exe > Display and modify attributes for files and folders 显示和更改文件和文件夹属性 ;9vIa7L& A$N+9n\ autochk.exe > Used to check and repair Windows File Systems 检测修复文件系统 3Cd<p[%3#, q>P[n z% autoconv.exe > Automates the file system conversion during reboots 在启动过程中自动转化系统 !^]q0x qKA_A% autofmt.exe > Automates the file format process during reboots 在启动过程中格式化进程 F6DxvyANr r:.6"VQu} autolfn.exe > Used for formatting long file names 使用长文件名格式 EZ*t$3.T ~R'BU=!;F bootok.exe > Boot acceptance application for registry C~{xL>I K:uQ#W.& bootvrfy.exe > Bootvrfy.exe, a program included in Windows 2000 that notifies the system that startup was successful. Bootvrfy.exe can be run on a local or remote computer. 通报启动成功 ` %l&zwj> cacls.exe > Displays or modifies access control lists (ACLs) of files. 显示和编辑ACL ),MU+*` {dZ!I calc.exe > Windows Calculators 计算器 \+G.]|" Y JR!Q,7S2!N cdplayer.exe > Windows CD Player CD播放器 R/Tj^lM T0s35z9 change.exe > Change { User | Port | Logon } 与终端服务器相关的查询 2'|XtSj An/>05| charmap.exe > Character Map 字符映射表 BB0g}6M :ao^/&HZ chglogon.exe > Same as using "Change Logon" 启动或停用会话记录 J-b~4 G 2!}R chgport.exe > Same as using "Change Port" 改变端口(终端服务) >,kL p|gA /i> ?i@O- chgusr.exe > Same as using "Change User" 改变用户(终端服务) "OVi /:*B D8gQRQ chkdsk.exe > Check the hard disk for errors similar to Scandisk 3 Stages must specify a Drive Letter 磁盘检测程序 @Jkui ,eyp$^ 2 chkntfs.exe > Same as using chkdsk but for NTFS NTFS磁盘检测程序 8?A@/ ^dheJ]n=k cidaemon.exe > Component of Ci Filer Service 组成Ci文档服务 SgyqmYTvZw -|6V}wHg~ cipher.exe > Displays or alters the encryption of directories [files] on NTFS partitions. 在NTFS上显示或改变加密的文件或目录 }!eF
B,r5kQI4 cisvc.exe > Content Index -- It's the content indexing service for I 索引内容 $xLEA\s M\9at\$ ckcnv.exe > Cookie Convertor 变换Cookie H]Y#pLu| 9qnuR'BDu cleanmgr.exe > Disk Cleanup, popular with Windows 98 磁盘清理 *iPs4Es- 7zOhyl? cliconfg.exe > SQL Server Client Network Utility SQL客户网络工具 r(PJ~8)(= 9cl{hdP{ clipbrd.exe > Clipboard viewer for Local will allow you to connect to other clipboards 剪贴簿查看器 f&=K]:WDe v!nm
&" clipsrv.exe > Start the clipboard Server 运行Clipboard服务 qK<aZ%V ww-XMz h clspack.exe > CLSPACK used to create a file listing of system packages 建立系统文件列表清单 =|^X$H 32M6EEmPG cluster.exe > Display a cluster in a domain 显示域的集群 :yd=No@ <+ -V5O^ _cmd_.exe > Famous command prompt 没什么好说的! t^`<*H ] dW%g? cmdl32.exe > Connection Manager Auto-Download 自动下载连接管理 s4!|v`+$M ,G916J*XA cmmgr32.exe > Connection Manager 连接管理器 c ,Qw; zG&WWc`K cmmon32.exe > Connection Manager Monitor 连接管理器监视 0*37D5jH ;+S2h-4 cmstp.exe > Connection Manager Profile Manager 连接管理器配置文件安装程序 $ijx#a&O tpN]evp| comclust.exe > about cluster server 集群 ~+sne7
6 U +J\L4ri k
comp.exe > ComClust Add, Remove, or Join a cluster. 比较两个文件和文件集的内容* ~r(g|?}P ;m-6.AV compact.exe > Displays or alters the compression of files on NTFS partitions. 显示或改变NTFS分区上文件的压缩状态 >l7eoj 34"{rMbQ conime.exe > Console IME IME控制台 i n[n Aa fs]#/* RR control.exe > Starts the control panel 控制面板 '?&B5C FCsyKdM convert.exe > Convert File System to NTFS 转换文件系统到NTFS U)&H.^@r$ nEjo, convlog.exe > Converts MS IIS log files 转换IIS日志文件格式到NCSA格式 O JZ!|J8? BsoFQw4$9 cprofile.exe > Copy profiles 转换显示模式 @t{{Q1 7H8GkuO cscript.exe > MS Windows Scripts Host Version 5.1 较本宿主版本 H}u)%qY+~ ;`X`c csrss.exe > Client Server Runtime Process 客户服务器Runtime进程 *Y|lO jUV#HT csvde.exe > Comma Separated Variable Import/Export Utility 日至格式转换程序 Mqrt-VPh {|8:U}<#h dbgtrace.exe > 和Terminal Server相关 eZa3K3^ F9>(W#aC dcomcnfg.exe > Display the current DCOM configuration. DCOM配置属性 ; Xnk+ Hl4vLx@ dcphelp.exe > ? =RCfibT!C 2dp*>F0L dcpromo.exe > Promote a domain controller to ADSI AD安装向导 -jcrXskb&N @j)f(Zlu# ddeshare.exe > Display DDE shares on local or remote computer DDE共享 rRF+\cP?. C9"f6>i ddmprxy.exe > NKIk d YyX^lL_ debug.exe > Runs Debug, a program testing and editing tool. 就是DEBUG啦! ];YglHH vZ1D3ytfG dfrgfat.exe > Defrag FAT file system FAT分区磁盘碎片整理程序 fzPgX ijR-?nrR dfrgntfs.exe > Defrag NTFS file system NTFS分区磁盘碎片整理程序 tA;ZW2$# (o6A?37i dfs_cmd_.exe > configures a Dfs tree 配置一个DFS树 .{-iq(3 #=)?s
8T dfsinit.exe > Distributed File System Initialization 分布式文件系统初始化 hs -}:^S` Z(Ls#hp dfssvc.exe > Distributed File System Server 分布式文件系统服务器 <E(-QJ DcFV^8O& diantz.exe > MS Cabinet Maker 制作CAB文件 *`\4j*$^ 8&`T<ECq> diskperf.exe > Starts physical Disk Performance counters 磁盘性能计数器 !'6J;Fb#
2_ZHJ,r dllhost.exe > dllhost is used on all versions of Windows 2000. dllhost is the hedost process for all COM+ applications. 所有COM+应用软件的主进程 V.E.~<7D\ ^YB\\a9 dllhst3g.exe > D%5 {A= B4M'Er{v dmadmin.exe > Disk Manager Service 磁盘管理服务 [8om9 Z3 0zq\ j dmremote.exe > Part of disk management 磁盘管理服务的一部分 "~i#9L/H SbQ{ > dns.exe > DNS Applications DNS v~W6yjp fu7[8R"{ doskey.exe > recalls Windows command lines and creates macros 命令行创建宏 ":ws~Zep
:jN;l dosx.exe > DOS Extender DOS扩展 HjETinm"
# 8-P dplaysvr.exe > Direct Play Helper 直接运行帮助 Q%b46" 'KN!m|
z drwatson.exe > Dr Watson for 2000 Fault Detector 华生医生错误检测 '&o>
%V Qg8eq_m( drwtsn32.exe > Dr Watson for 2000 viewer and configuration manager 华生医生显示和配置管理 )Lv6vnT> hGaYQgGq dtcsetup.exe > Installs MDTC G@l|u aV0;WH_3 dvdplay.exe > Windows 2000 DVD player DVD播放 b^|,9en mhHm# dxdiag.exe > Direct-X Diagnostics Direct-X诊断工具 EzY
scX.[ T J"{nB edlin.exe > line-oriented text editor. 命令行的文本编辑器(历史悠久啊!) Lh5+fk~i~8 edlin.exe > line-oriented text editor. 命令行的文本编辑器(历史悠久啊!) ='l6&3X GQc%OQc\ esentutl.exe > MS Database Utility MS数据库工具 [+[fD 4QN6BZJ5 eudcedit.exe > Private character editor Ture Type造字程序 )F9V=PJE 9ixnf=$Jp eventvwr.exe > Windows 2000 Event Viewer 事件查看器 A5J#x6@ D\i8rqU/l evnt_cmd_.exe > Event to trap translator; Configuration tool hF?\K^tF J jL0/& evntwin.exe > Event to trap translator setup ,\">o vV33 hrtN.4p[ exe2bin.exe > Converts EXE to binary format 转换EXE文件到二进制 (l,YI"TzT HoQ(1e$G- expand.exe > Expand Files that have been compressed 解压缩 UW~tS {gq:sj> extrac32.exe > CAB File extraction utility 解CAB工具 TuT= Vt 5XC~jK fastopen.exe > Fastopen tracks the location of files on a hard disk and stores the information in memory for fast access. 快速访问在内存中的硬盘文件 @x\gk5 ieK'<%dxF faxcover.exe > Fax Cover page editor 传真封面编辑 pz z`4VS: _a02# faxqueue.exe > Display Fax Queue 显示传真队列 L?pvz} ckkM)|kK faxsend.exe > Fax Wizard for sending faxes 发送传真向导 iS^^Z ZyR sZ(Q4)r
faxsvc.exe > Starts fax server 启动传真服务 N/SB}Fj q.Aw!]:! fc.exe > Compares two files or sets of files and their differences 比较两个文件的不同 ?%TM7Z4 d(cYtM,P find.exe > Searches for a text string in file or files 查找文件中的文本行 @;-Un/'C;7 {s^n|b} findstr.exe > Searches for strings in files 查找文件中的行 ^*T{-U' ~8qFM finger.exe > Fingers a user and displays statistics on that user Finger一个用户并显示出统计结果 O#ajoE
[}B{e=`! fixmapi.exe > Fix mapi files 修复MAPI文件 (:hmp"S /t2<OU9 flattemp.exe > Enable or disable temporally directories 允许或者禁用临时文件目录 w2_I/s6B hB1 iSm fontview.exe > Display fonts in a font file 显示字体文件中的字体 7UnO/K7oB. &ppZRdq] forcedos.exe > Forces a file to start in dos mode. 强制文件在DOS模式下运行 s#CEhb x[<#mt freecell.exe > Popular Windows Game 空当接龙 CMB$RLf 5+PBS)pJ]% ftp.exe > File Transfer Protocol used to transfer files over a network connection 就是FTP了 E;*TRr>< C3
c|@7FU gdi.exe > Graphic Device Interface 图形界面驱动 ;bu;t# 9U%}"uE grovel.exe > j;c^pLUP Q? |M BTo grpconv.exe > Program Manager Group Convertor 转换程序管理员组 bSKV|z/x Y
.X-8 help.exe > displays help for Windows 2000 commands 显示帮助 vG=$UUh@~ ]$%4;o4O hostname.exe > Display hostname for machine. 显示机器的Hostname fpC@3 itI @G&xq"Fg7 ie4uinit.exe > IE5 User Install tool IE5用户安装工具 YV+dUvz Q#AHEm{9;s ieshwiz.exe > Customize folder wizard 自定义文件夹向导 m,"tdVo . "pJEzC iexpress.exe > Create and setup packages for install 穿件安装包 [1X5r<(W5 c35vjYQx0 iisreset.exe > Restart IIS Admin Service 重启IIS服务 Yl3PZ*#@ Q >LZ)<-Mk internat.exe > Keyboard Language Indicator Applet 键盘语言指示器 hndRgCo 23?0'AU ipconfig.exe > Windows 2000 IP configuration. 察看IP配置 mAERZ<I v[=E f ipsecmon.exe > IP Security Monitor IP安全监视器 rm;"98~zJ? 3S21DC@Y ipxroute.exe > IPX Routing and Source Routing Control Program IPX路由和源路由控制程序 9O_N
iu0 |Y8o+O_` irftp.exe > Setup FTP for wireless communication 无线连接 *y$r y] DFH6.0UW ismserv.exe > Intersite messaging Service 安装或者删除Service Control Manager中的服务 Oc3%pb; qt;Tfuo jdbgmgr.exe > Microsoft debugger for java 4 Java4的调试器 ooxzM ` QxL
FN(d jetconv.exe > Convert a Jet Engine Database 转换Jet Engine数据库 {;~iq Z0@ImhejuB jetpack.exe > Compact Jet Database. 压缩Jet数据库 &xT~;R^ BFRSYwPr jview.exe > Command-line loader for Java Java的命令行装载者 -v2q:x'G# ~#Mx&mZ krnl386.exe > Core Component for Windows 2000 2000的核心组件 S :|*wB -w0>4JDs label.exe > Change label for drives 改变驱动器的卷标 jv^L~<u !~kzxY lcwiz.exe > License Compliance Wizard for local or remote systems. 许可证符合向导 `a9>4 -L3RzX ldifde.exe > LDIF cmd line manager LDIF目录交换命令行管理 cC]1D*Bn WHT%m|yn licmgr.exe > Terminal Server License Manager 终端服务许可协议管理 )o,0aGo>Of +5\\wGo< lights.exe > display connection status lights 显示连接状况 W.<<azi ^!tI+F{n{ llsmgr.exe > Windows 2000 License Manager 2000许可协议管理 o\gQYi tfQq3 # llssrv.exe > Start the license Server 启动许可协议服务器 ?5gpk1 Hvk?(\x lnkstub.exe > U$Z}<8 Xqw7lj;K locator.exe > RPC Locator 远程定位 xo+z[OIlF T`;M!-)2 lodctr.exe > Load perfmon counters 调用性能计数 g>CQO,s;w M] *pBc(o0 logoff.exe > Log current user off. 注销用户 C_)>VPD h!]A(T\J lpq.exe > Displays status of a remote LPD queue 显示远端的LPD打印队列的状态,显示被送到基于Unix的服务器的打印任务 A4x3TW? b>EUa> h lpr.exe > Send a print job to a network printer. 重定向打印任务到网络中的打印机。通常用于Unix客户打印机将打印任务发送给连接了打印设备的NT的打印机服务器。 JR)rp3o- CxV%/ChJ# lsass.exe > LSA Executable and Server DLL 运行LSA和Server的DLL ,oil}N( z w9r0bG lserver.exe > Specifies the new DNS domain for the default server 指定默认Server新的DNS域 RMXj)~4. dG+xr! macfile.exe > Used for managing MACFILES 管理MACFILES lY`<-`{I_ bS<p dOX_ magnify.exe > Used to magnify the current screen 放大镜 \:7EKzQ E(#2/E6 makecab.exe > MS Cabinet Maker 制作CAB文件 r0>T7yPAK !HYqM(|{. mdm.exe > Machine Debug Manager 机器调试管理 '~0&m]N t"fD"Xpj mem.exe > Display current Memory stats 显示内存状态 }fZBP]<I( AJu. migpwd.exe > Migrate passwords. 迁移密码 f'S"F (#qVtN`t mmc.exe > Microsoft Management Console 控制台 "
cg>g/ cO9Aw ! mnmsrvc.exe > Netmeeting Remote Desktop Sharing NetMeeting远程桌面共享 :Ib\v88WIv @dNbL}qQ mobsync.exe > Manage Synchronization. 同步目录管理器 <Vb{QOgc; (WvA9s{/ mountvol.exe > Creates, deletes, or lists a volume mount point. 创建、删除或列出卷的装入点。 u!W00;`L XLT<,B}e mplay32.exe > MS Media Player 媒体播放器 CS49M )3 mpnotify.exe > Multiple Provider Notification application 多提供者通知应用程序 '>BHwc {'%=tJ[YX mq1sync.exe > %<t/xAge
@$]h[ mqbkup.exe > MS Message Queue Backup and Restore Utility 信息队列备份和恢复工具 om6R/K e<K=Q$U. mqexchng.exe > MSMQ Exchange Connector Setup 信息队列交换连接设置 7Z_iQ1 &3V4~L1aEg mqmig.exe > MSMQ Migration Utility 信息队列迁移工具 3Daq5(fLP ?$Pj[O^hl mqsvc.exe > ? 6%-2G@6d Ai;Pht9qi mrinfo.exe > Multicast routing using SNMP 使用SNMP多点传送路由 75y#^pD?c $ }53f'QjW mscdexnt.exe > Installs MSCD (MS CD Extensions) 安装MSCD RiklwR#~r/ szHUHW~;J msdtc.exe > Dynamic Transaction Controller Console 动态事务处理控制台 syF/jWM5 {$^|^n5j msg.exe > Send a message to a user local or remote. 发送消息到本地或远程客户 UpILr\3U &BkNkb 0 mshta.exe > HTML Application HOST HTML应用程序主机 xlAaIo)T }O/Nn0, msiexec.exe > Starts Windows Installer Program 开始Windows安装程序 #~b9H05D /_P`xm+=AC mspaint.exe > Microsoft Paint 画板 S(pfd2^ @u^Ib33 msswchx.exe > f+&yc'[ s6I]H mstask.exe > Task Schedule Program 任务计划表程序 Z5Cv$bUc >:=TS"}yS} mstinit.exe > Task scheduler setup 任务计划表安装 IF=rD-x `*]r.u0 narrator.exe > Program will allow you to have a narrator for reading. Microsoft讲述人 _[x(p6Xp 7_RU*U^ nbtstat.exe > Displays protocol stats and current TCP/IP connections using NBT 使用 NBT(TCP/IP 上的 NetBIOS)显示协议统计和当前 TCP/IP 连接。 lk80)sTZ dZ*o H#B nddeapir.exe > NDDE API Server side NDDE API服务器端 !s$fqn
6 (\j<`"n net.exe > Net Utility 详细用法看/? vd~O:=)4 !E%!, net1.exe > Net Utility updated version from MS Net的升级版
|
|