/K echo exec+stay /C echo exec+exit /? echo help - command&&command - remarks starting with.. Bemerkungen beginnen mit.. une remarque commence avec "-" - die Volltextsuche ist case sensitive echo hallo dir dir >"my list.txt"&&dir *.txt&&pause -- sample delete iconcache -as batch @echo off taskkill /f /IM explorer.exe CD /d %userprofile%\AppData\Local DEL IconCache.db /a Start explorer.exe -as parameter /K @echo off&&taskkill /f /IM explorer.exe&&CD /d %userprofile%\AppData\Local&&DEL IconCache.db /a&&Start explorer.exe TIMEOUT /T 10 TIMEOUT /T 10 /NOBREAK -ignoriert gedrückte Tasten (ausser ctrl-c, das zeigt er an) und wartet den angegebenen Zeitraum ab TIMEOUT /T -1 -es wird unendlich lang auf einen Hauptprozess gewartet (wait until fileexists?) Quser -The quser command is used to display information about users currently logged on to the system (W11,10,8,7) tasklist -Displays a list of applications, services, and the Process ID (PID) currently running on either a local or -a remote computer (W11,10,8,7) -Konvert fat32 to NTFS (z.B. USB Sticks) c:\windows\system32\convert lw: /FS:NTFS -neuen Ordner erstellen, diesen umbenennen in GodMode.{ED7BA470-8E54-465E-825C-99712043E01C} c:&&cd\&&md god&&ren god GodMode.{ED7BA470-8E54-465E-825C-99712043E01C}&&dir *.*&&pause c:&&cd\&&md god&&ren god GodMode.{ED7BA470-8E54-465E-825C-99712043E01C}&&explorer c: tracert ipconfig -mac adr auslesen ipconfig /all|findstr /V 00-00-00|findstr Physische ipconfig /all|findstr /V 00-00-00 -MSC files are snap-in control files associated with the MS Management Console to run administrative tasks. /C start "" https://www.ghacks.net/2017/06/10/windows-msc-files-overview/ -services.msc spooler stop/start (Druckerwarteschlange) net stop spooler net start spooler -stop/start spooler with a 6 sec timeout @echo off&&net stop spooler&&TIMEOUT /T 6&&net start spooler net stop server net start server net session net files net use M: \\x-Pc-main\d net use T: \\Srv\C\tbl /persistent:yes net use p: \\Srv\d x /USER:admin net use lpt1 /delete net use lpt1 "\\Srv\ZDesigner TLP 2844" passwort /user:x -network connections (both incoming and outgoing) TCP/UDP netstat -an -windows file recovery, Version: 0.1.20151.0 /C start "" https://apps.microsoft.com/detail/9n26s50ln705?hl=en-us&gl=US -run as admin: USAGE: winfr source-drive: destination-folder [/mode] [/switches] -/n - Filter search (wildcards allowed, trailing \ for folder) -winfr C: D:\RecoveryDestination /regular /n "Users\\My pictures\" -winfr C: D:\RecoveryDestination /extensive /n *.pdf /n *.jpg winfr C: d:\ /regular /n *.pdf /n *.jpg -Wipe disk with format (slow, diskwipe2009 is faster) -Data Sanitization Methods: "Write Zero" - Random data must be written into the sectors several times because someone with the diagnostic know-how and a clean-room - can detect previous magnetic residue if the magnetic bits are overwritten only once. - Sure, YOU will see zeros if you look at the sectors.. but an data recovery expert might be able to read what you had - there beforehand. - Here is a specific reference from DOD clearing and sanitizing standard: DOD 5220.22-M : - that hard disk media is sanitized by overwriting with a character, then the character's complement, and then a random - character. Note that the standard specifically states that this method is not suitable for TOP SECRET information. - TOP SECRET data sanatizing is only achievable by a Type 1 or 2 degauss of the disk, or by disintegrating, incinerating, - pulverizing, shredding, or melting the disk. -format drv: /fs(filesystem FAT,FAT32,UDF):NTFS /p(count):2 -format D: /fs:NTFS /p:1 -? /P:count Zero every sector on the volume. After that, the volume will be overwritten "count" times using a different random number each time. If "count" is zero, no additional overwrites are made after zeroing every sector. Switch is ignored when /Q is specified. -wipes free space on a drive, which effectively overwrites that space with zeros. cipher /w:C:\ - Shift-DEL a file or folder followed by cipher /w -Start - calls the def win app for this filetype -cmd /C start "" "E:\folder\file.jpg" -ps start "E:\folder\file.jpg" start "" "drv:\path\my file name.ext" -DISM.exe (Deployment Image Servicing and Management Tool) w11/10/8 (s. also blog2 WinSxS) -command-line tool for servicing a Windows image or preparing a Windows PE image. Dism.exe /online /Cleanup-Image /AnalyzeComponentStore Dism.exe /online /Cleanup-Image /ScanHealth -e.g. - Tatsächliche Größe des Komponentenspeichers : 10.20 GB - Freigegeben für Windows : 4.76 GB - Sicherungen und deaktivierte Features : 5.43 GB - Cache und temporäre Daten : 0 bytes Dism.exe /online /Cleanup-Image /CheckHealth -e.g. - Anzahl von Paketen, die freigegeben werden können : 7 - Bereinigung des Komponentenspeichers empfohlen : Ja Dism.exe /online /Cleanup-Image /RestoreHealth -Es werden alle ersetzten Versionen jeder Komponente im Komponentenspeicher entfernt. w10 oder höher, asAdmin Dism.exe /online /Cleanup-Image /StartComponentCleanup /ResetBase - reservierte Speicher für Updates und temporäre Systemaufgaben 5-8 GB, abfragen DISM /online /Get-ReservedStorageState DISM /online /Set-ReservedStorageState /State:Disabled - abschalten ist temporär, da Windows den res. Speicher bei größeren Fkt-Updates automatisch wieder aktiviert - Ruhezustand „hiberfil.sys“ orientiert sich grob an der Größe des Arbeitsspeichers - aktuellen Ruhezustand prüfen powercfg /a - abschalten löscht hiberfil.sys powercfg /h off powercfg /h on - lediglich Schnellstart behalten powercfg /h /type reduced -SFC (System File Checker) protects registry keys and folders as well as critical system files. -any changes detected to a protected system file, the modified file is restored from a cached copy located in the Windows folder itself. sfc /scannow /C start "" https://support.microsoft.com/de-ch/help/929833/use-the-system-file-checker-tool-to-repair-missing-or-corrupted-system -WinSxS (side by side) folder cleanup (Windows Component Store) explorer C:\Windows\WinSxS -firefox_profilepath explorer C:\Users\x\AppData\Roaming\Mozilla\Firefox\Profiles -tbird explorer C:\Users\x\AppData\Roaming\Thunderbird\Profiles\ -eml to pdf (.EML tbird, webmail) -default call browser /C start "" "https://www.freeconvert.com/de/eml-to-pdf/download" "%programfiles%\Mozilla Firefox\firefox.exe" https://www.freeconvert.com/de/eml-to-pdf/download "C:\Program Files\Mozilla Firefox\firefox.exe" https://www.freeconvert.com/de/eml-to-pdf/download "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" https://www.freeconvert.com/de/eml-to-pdf/download "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://www.freeconvert.com/de/eml-to-pdf/download -open tbird profiles & eml to pdf start explorer C:\Users\x\AppData\Roaming\Thunderbird\Profiles\&&start "" "https://www.freeconvert.com/de/eml-to-pdf/download" -systemeigenschaften c:\windows\system32\SystemPropertiesProtection.exe -systemeigenschaften/Erweitert c:\windows\system32\SystemPropertiesAdvanced.exe -find key (w11) powershell "(Get-WmiObject -query 'select * from SoftwareLicensingService').OA3xOriginalProductKey" -old - not run as admin (path is c:\windows\system32>) or declare a path keyfinder.exe - download - magical jelly bean keyfinder v2.0.10.14 /C start "" https://appdata.inpha.ch/keyfinder.exe -steps recorder - deprecated (kann durch DoNotSpy oder andere antispy-tools deaktiviert sein) /C start "" https://support.microsoft.com/en-us/windows/steps-recorder-deprecation-a64888d7-8482-4965-8ce3-25fb004e975f -zeichnet das Nutzerverhalten einschließlich sensibler Daten wie Tastatureingaben auf. %windir%\system32\psr.exe -abgelöst z.B. durch +G(amebar) -management console - w7 aufstarten ohne anmeldung - seit 14.1.2020 eol mmc -Advanced User Accounts Control Panel -Benutzerkonten -> Benutzer müssen Benutzernamen + Kennwort eingeben oder nicht control userpasswords2 C:\Windows\SysWOW64\Netplwiz.exe -*db enthält auch *edb -show winsearchindex @echo off&&echo show *db *edb files + sizes&&dir C:\ProgramData\Microsoft\Search\Data\Applications\Windows\*db -reset winsearchindex - entmüllen (click line Part1 and run cmd-Btn, reboot, then Part2) @echo off&&echo Part1 go to Service [windows search] - Dienst beenden - dblClick: Starttyp: deaktiviert&&echo Reboot&&C:\Windows\system32\services.msc @echo off&&echo Part2 echo DEL *db *edb&&del C:\ProgramData\Microsoft\Search\Data\Applications\Windows\*db&&echo go to [windows search] - dblClick: Starttyp: automatisch verzögerter Start - übernehmen - Dienst starten&&C:\Windows\system32\services.msc - ? dienst beenden, deaktivieren wieso noch reboot -classicShell folders userprofile /C explorer C:\Users\x\AppData\Roaming\Microsoft\Windows\Start Menu\Programs alluserprofiles /C explorer C:\ProgramData\Microsoft\Windows\Start Menu -netzwerk /C explorer \\inpha11 /K taskkill /f /IM explorer.exe /K explorer C:\Users\x\AppData\Roaming\Thunderbird\Profiles\ -datenmüll /C explorer C:\Users\%username%\AppData\Local\Temp /C explorer C:\Windows\Temp /C start explorer C:\Users\%username%\AppData\Local\Temp&&start explorer C:\Windows\Temp Bildschirmfotos /C start explorer C:\Users\x\Pictures\Screenshots %WINDIR%\system32\diskpart.exe -DISKPART> -?, list disk, select disk number (target) -convert -GPT - Konvertion Datenträger von MBR in GPT. -MBR - Konversion Datenträger von GPT in MBR. -BASIC - Konvertion dynamischen Datenträger in einen Basisdatenträger. -DYNAMIC - Konvertion einen Basisdatenträger in einen dynamischen Datenträger. -CLEAN [ALL] Gibt an, dass jedes Byte\jeder Sektor auf dem Datenträger auf null festgelegt wird - vollständige Löschung. -msg (wohl nicht mehr aktuell) -kann schon damit beginnen: Msg.exe is missing in Windows 10/11 /C start "" https://www.winhelponline.com/blog/msg-exe-missing-windows/ msg * /v Test Message! s(peed)g(uide) tcp optimizer für windows (latest 2021) /C start "" https://www.speedguide.net/downloads.php -Dateierweiterungen "Erweiterungen bei bekannten Dateitypen ausblenden" (s. auch [Explorer Optionen]) /C %WINDIR%\system32\rundll32.exe %WINDIR%\system32\shell32.dll,Options_RunDLL 7 -download winsupportbox /C start "" https://dl.inpha.ch/get/fdd43778-360e-5044-925b-1093af0fd77c/winsupportboxInst.exe /C start "" https://dl.inpha.ch/get/854d60d0-5e72-586e-b5dc-2b860ea42adf/etiInst.exe -delphi -Block Comment (* *) -read of address/lesen von adresse 00000000 : try to access a declared but not created component -pipe chr#124 -Suche "run" oder Win+R run-Ausführen > Eingabe: "cmd" mit Ctrl+shift+Eingabe as admin ausführen -remote desktop - Remotedesktop Protocol RDP - Aufruf via CMD/RUN as admin (/console /f gleiche Wirkung) mstsc /console mstsc /v:computername - Zulassen remote desktop / Protocol aktivieren: reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 0 /f - nicht nötig - netsh advfirewall firewall set rule group="remote desktop" new enable=Yes - Nicht zulassen remote desktop / Protocol deaktivieren: reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 1 /f - Systemeigenschaften Remote (run-ausführen / cmd) sysdm.cpl - RDP hint /C start "" https://www.helpwire.app/blog/de/enable-remote-desktop-command-line/#So_aktivieren_Sie_Remote_Desktop_in_der_Windows_10_CMD-Eingabeaufforderung - DivX codec /C start "" "https://www.divx.com/divx-11/" - apple - .heic format - CopyTrans Viewer auf .heic und .mov dateien linken - free w10(x64) - copy photos from iphone, save to PC and konvert {bsp pCloud:\bildli\heic} /C start "" "https://copytrans.studio/de/" -HWMONITOR /C start "" https://www.cpuid.com/softwares/hwmonitor.html#version-history -CPU /C start "" https://www.cpuid.com/softwares/cpu-z.html#version-history -inpha public section /C start "" https://appdata.inpha.ch/ - create localhost mit npx Node.js - cors-problem (cross origin - ein file:///C:/temp/list.html beantwortet browser mit error) - This command is useful for testing web applications locally - npx http-server is a command that allows you to quickly start a simple web server using Node.js without - needing to install the package globally. It serves files from a specified directory over HTTP. - - How to Use npx http-server - Install Node.js: check if Node.js is installed on your System run: /K node -v /K npm -v /K npx -v /K @echo off&&echo check if Node.js is installed on your system&&node -v&&npm -v&&npx -v - Run Command: Open your terminal and navigate to the directory you want to serve. Then, run: /K npx http-server - If you want to serve the current directory, simply use: /K npx http-server - Access the Server: By default, the server runs on port 8080. - You can access it by entering http://localhost:8080 in your web browser. - - Customizing the Server - Change Port: npx http-server --port - To open the browser automatically when starting the server, add the -o option: /K npx http-server -o - To stop the Server press Control-C in the terminal where the server is running. xcopy \dp\img\c\*.* C:\dp\img\c /e /s /Y /D - /D:m-d-y Copies files changed on or after the specified date. - If no date is given, copies only those files whose - source time is newer than the destination time. - /P Prompts you before creating each destination file. - /S Copies directories and subdirectories except empty ones. - /E Copies directories and subdirectories, including empty ones. - Same as /S /E. May be used to modify /T. - /Y Suppresses prompting to confirm you want to overwrite an - existing destination file. - /-Y Causes prompting to confirm you want to overwrite an - existing destination file. - /Z Copies networked files in restartable mode. - /B Copies the Symbolic Link itself versus the target of the link. - /J Copies using unbuffered I/O. Recommended for very large files. /K C:\WINDOWS\system32\shutdown -s -f -t 0 /K c:\windows\system32\shutdown.exe -s -f -t5 - -s einfach herunterfahen ohne Wahl zwischen Herunterfahren, Neu Starten und Ruhezustand anzubieten. - -f schließt alle laufenden Anwendungen. - -t und eine Zahl bestimmen die Sekunden, die zwischen dem Trigger und dem Ausführen des Programms liegen. - -c und ein Text zeigt den eingegebenen Text an, sobald die Aktion ausgeführt wird. -c"Tschüss" - "microsoft.ui.windowing.core.dll not found" when launching Notepad/Mspaint - Insider builds is linked to a missing/corrupted Windows App SDK runtime dependency for the UWP version. - One effective solution is to delete registry entry. - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\App Paths - Find the entry for Notepad/Mspaint and delete it.