Microsoft/Windows2009. 10. 15. 19:59
회사 직원분 컴퓨터가 이상하다고 해서 고쳐 드리러 갔더니..
작업관리자가 구동이 안된다!!!


ctrl-alt-del도 안되고
ctrl-shift-esc도 안되고
시작-실행-taskmgr도 안되고
c:\windows\system32\taskmgr 직접 클릭해도 안된다...



그래서 process explorer 를 다운받아서 실행해보니
taskmgr을 구동할때 마다 t.exe라는 녀석이 실행이 되고 있었다.


아무튼 결론은 나쁜놈!
네이버 무료 백신으로 치료하니
f.exe를 삭제하는데

삭제후에 작업관리자는 여전히 구동되지 않는다.
.. OTL

[링크 : http://www.threatexpert.com/files/f.exe.html]
Posted by 구차니
Microsoft/Windows2009. 9. 28. 16:19
C:\>nbtstat /?

Displays protocol statistics and current TCP/IP connections using NBT(NetBIOS over TCP/IP).

NBTSTAT [ [-a RemoteName] [-A IP address] [-c] [-n] [-r] [-R] [-RR] [-s] [-S] [interval] ]

  -a   (adapter status) Lists the remote machine's name table given its name
  -A   (Adapter status) Lists the remote machine's name table given its IP address.
  -c   (cache)          Lists NBT's cache of remote [machine] names and their IP addresses
  -n   (names)          Lists local NetBIOS names.
  -r   (resolved)       Lists names resolved by broadcast and via WINS
  -R   (Reload)         Purges and reloads the remote cache name table
  -S   (Sessions)       Lists sessions table with the destination IP addresses
  -s   (sessions)       Lists sessions table converting destination IP ddresses to computer NETBIOS names.
  -RR  (ReleaseRefresh) Sends Name Release packets to WINS and then, starts Refresh

  RemoteName   Remote host machine name.
  IP address   Dotted decimal representation of the IP address.
  interval     Redisplays selected statistics, pausing interval seconds
               between each display. Press Ctrl+C to stop redisplaying

nbtstat는 윈도우 내장된 NetBIOS 도우미 프로그램중에 하나이다.
-c 를 하면 현재 reolve된 녀석들의 목록이 나오고
-R 을 reolve table을 Purge 하고 다시 불러온다.

[링크 : http://cc10.net/gag/2110]
Posted by 구차니
Microsoft/Windows2009. 9. 28. 15:44
open with cmd.exe 라고 하면되려나?

어짜피 둘다 레지스트리 상에 등록은 될텐데 귀찮게 레지스트리에서 할 바에는
메뉴에서 하는게 편할 듯 하다.

Step 1. 아무 폴더나 열고 "도구 - 폴더 옵션"을 누른다.

Step 2. 파일 형식에서 폴더를 찾는다. (솔찍히 파일 폴더랑 차이는 모르겠다)


Step 3. 고급을 누르면 아래의 파일 형식 편집이 뜨고, "새로 만들기"를 누른다.

Step 4. 명령은 우클릭 메뉴에서 나오는 말이니 대충 알아서 넣고, 응용 프로그램에 "cmd.exe"를 입력한다.

Step 5. 눌러본다.


[링크 : http://sagess.tistory.com/63]
[링크 : http://www.koosaj.com/usefully/tricks-for-your-pc/open-active-folder-in-command-prompt/]

귀찮으면 다음 파일을 받아서 설치 right, now~!

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\Folder\shell\open_with_cmd]
@="open with cmd"

[HKEY_CLASSES_ROOT\Folder\shell\open_with_cmd\command]
@="cmd.exe \"%1\""


Posted by 구차니
Microsoft/Windows2009. 9. 16. 14:09
net view <SERVERNAME>
하면 서버에서 공유중인 목록이 출력된다.

그런데
시스템 오류 5이(가) 생겼습니다.

액세스가 거부되었습니다.
요런 에러가 발생을 해서 검색을 해보니

에러 메시지의 원인은 다음과 같을 수 있습니다:
 
    1. 시간 동기화 문제
 
    2. 원격 컴퓨터에 대한 접근권한 없음 (Share, NTFS, GPO).
 
    3. 방화벽 혹은 3rd 파티 프로그램에 의한 원격지 접속의 방해
 
    4. 컴퓨터의 계정이 사용불가능함 (혹은 암호의 유효기간이 지남)
 
             혹은 존재하지 않는 도메인
 
    5. 액티브 디렉토리의 복제 문제

[링크 : http://support.microsoft.com/kb/555644]
라고 되어있다.

일단 서버측의 시간을 보니.. 임베디드라서 0 epoch에서 시작.. 1970년이다.. (멍....)
Posted by 구차니
Microsoft/Windows2009. 7. 5. 23:23
오래전에 상당히 알려진 녀석이었는데 귀찮아서 안하다가
도저히 안되겠다 싶어서 적용을 했다.

프로그램은 아래의 링크에서 직접받는게 그래도 실뢰할 수 있을 것이고
그냥 실행하고나서 USB 자동실행 하지 않기 버튼 누르면 해결!

깜찍한 아이콘

매우 구린 UI

[링크 : http://www.ncsc.go.kr/Global/p_Print.jsp?tbName=IGMSCRDOC&bIndex=1415]
Posted by 구차니
Microsoft/Windows2009. 4. 15. 11:39
VC++ 6.0 기준으로 사용가능한 방법은 아직 찾지 못했다.
리눅스에서는 ps -ef 하면 실행시의 옵션항목(아규먼트)들이 같이 표기 되는데
윈도우에서는 프로그램 이름만 보이게 되어서, 어떠한 옵션으로 실행이 되었는지 궁금해질때가 있다.

그래서 검색을 해보니 .net framework에서는 process 클래스에 startinfo 라는 항목이 존재한다.
이것을 사용하면 argument를 알아 올수 있겠지만, 난 .net을 싫어하는 관계로.. 다른 방법을 찾아 봐야겠다.

using System; 
using System.Diagnostics; 

namespace ProcessArgsTest 
{ 
  class Test 
  { 
    static void Main()  
    { 
      Process [] localAll = Process.GetProcesses(); 
      foreach (Process p in localAll) 
      {   
        if (p.ProcessName == "notepad") 
        { 
          Console.WriteLine(p.ProcessName + " [" + p.StartInfo.Arguments + "]"); 
        } 
      } 
    } 
  } 
} 


[발견 : http://social.msdn.microsoft.com/Forums/en-US/netfxbcl/thread/669eeaeb-e6fa-403b-86fd-302b24c569fb/]
[process.GetProcesses method : http://msdn.microsoft.com/en-us/library/1f3ys1f9.aspx]
[process.StartInfo method : http://msdn.microsoft.com/en-us/library/system.diagnostics.process.startinfo.aspx]
Posted by 구차니
Microsoft/Windows2009. 3. 27. 16:19
제목은 저렇게 적었지만, 제대로 되는지는 모르겠다.
내꺼에서 해보니.. 의도한 것 처럼 많이 나오지 않는다 ㄱ-

C:\>ipconfig /displaydns

Windows IP Configuration

         1.0.0.127.in-addr.arpa
         ----------------------------------------
         Record Name . . . . . : 1.0.0.127.in-addr.arpa.
         Record Type . . . . . : 12
         Time To Live  . . . . : 579879
         Data Length . . . . . : 4
         Section . . . . . . . : Answer
         PTR Record  . . . . . : localhost


         minimonk.tistory.com
         ----------------------------------------
         Record Name . . . . . : minimonk.tistory.com
         Record Type . . . . . : 1
         Time To Live  . . . . : 2
         Data Length . . . . . : 4
         Section . . . . . . . : Answer
         A (Host) Record . . . : 211.172.252.15



C:\>ipconfig /?

USAGE:
    ipconfig [/? | /all | /renew [adapter] | /release [adapter] |
              /flushdns | /displaydns | /registerdns |
              /showclassid adapter |
              /setclassid adapter [classid] ]

where
    adapter         Connection name
                   (wildcard characters * and ? allowed, see examples)

    Options:
       /?           Display this help message
       /all         Display full configuration information.
       /release     Release the IP address for the specified adapter.
       /renew       Renew the IP address for the specified adapter.
       /flushdns    Purges the DNS Resolver cache.
       /registerdns Refreshes all DHCP leases and re-registers DNS names
       /displaydns  Display the contents of the DNS Resolver Cache.
       /showclassid Displays all the dhcp class IDs allowed for adapter.
       /setclassid  Modifies the dhcp class id.



Displaying or clearing the DNS Resolver Cache in Windows

ipconfig /displaydns

With the displaydns option you can display the contents of the DNS Resolver Cache



[발견 1: http://www.myptsmail.com/blog/?p=333]

[발견 2: http://www.windowsnetworking.com/kbase/WindowsTips/WindowsXP/AdminTips/Network/ManagetheDNSresolvercachewithIPCONFIG.html]

Posted by 구차니
Microsoft/Windows2009. 3. 23. 18:20

Basic Naming Conventions

The following fundamental rules enable applications to create and process valid names for files and directories, regardless of the file system:

  • Use a period to separate the base file name from the extension in the name of a directory or file.
  • Use a backslash (\) to separate the components of a path. The backslash divides the file name from the path to it, and one directory name from another directory name in a path. For additional details about what a path is, see the Path Names and Namespaces section below.
  • Use a backslash as required as part of volume names, for example, the "C:\" in "C:\path\file" or the "\\server\share" in "\\server\share\path\file" for Universal Naming Convention (UNC) names. You cannot use a backslash in the actual file or directory name components because it separates the names into components.
  • Use almost any character in the current code page for a name, including Unicode characters and characters in the extended character set (128–255), except for the following:

    • The following reserved characters are not allowed:

      < > : " / \ | ? *

    • Characters whose integer representations are in the range from zero through 31 are not allowed.
    • Any other character that the target file system does not allow.
  • Use a period as a directory component in a path to represent the current directory, for example ".\tmp.txt".
  • Use two consecutive periods (..) as a directory component in a path to represent the parent of the current directory, for example "..\tmp.txt".
  • Do not use the following reserved device names for the name of a file:

    CON, PRN, AUX, NUL, COM1, COM2, COM3, COM4, COM5, COM6, COM7, COM8, COM9, LPT1, LPT2, LPT3, LPT4, LPT5, LPT6, LPT7, LPT8, and LPT9

    Also avoid these names followed immediately by an extension; for example, NUL.txt is not recommended.

  • Do not assume case sensitivity. For example, consider the names OSCAR, Oscar, and oscar to be the same, even though some file systems (such as a POSIX-compliant file system) may consider them as different. Note that NTFS supports POSIX semantics for case sensitivity but this is not the default behavior. For additional information, see CreateFile.
  • Do not end a file or directory name with a trailing space or a period. Although the underlying file system may support such names, the operating system does not. However, it is acceptable to start a name with a period.

[출처 : http://msdn.microsoft.com/en-us/library/aa365247.aspx]




Posted by 구차니
Microsoft/Windows2009. 3. 18. 16:50
Windows generates short file names from long file names in the following manner:
  • Windows deletes any invalid characters and spaces from the file name. Invalid characters include:
    . " / \ [ ] : ; = ,
  • Because short file names can contain only one period (.), Windows removes additional periods from the file name if valid, non-space characters follow the final period in the file name. For example, Windows generates the short file name
    Thisis~1.txt
    from the long file name
    This is a really long filename.123.456.789.txt
    Otherwise, Windows ignores the final period and uses the next to the last period. For example, Windows generates the short file name
    Thisis~1.789
    from the long file name
    This is a really long filename.123.456.789.
  • Windows truncates the file name, if necessary, to six characters and appends a tilde (~) and a digit. For example, each unique file name created ends with "~1." Duplicate file names end with "~2," "~3," and so on.
  • Windows truncates the file name extension to three characters or less.
  • Windows translates all characters in the file name and extension to uppercase.
Note that if a folder or file name contains a space, but less than eight characters, Windows still creates a short file name. This behavior may cause problems if you attempt to access such a file or folder over a network. To work around this situation, substitute a valid character, such as an underscore (_), for the space. If you do so, Windows does not create a different short file name

For example, "Afile~1.doc" is generated from "A file.doc" because the long file name contains a space.

No short file name is generated from "A_file.doc" because the file name contains less than eight characters and does not contain a space.

The short file name "Alongf~1.txt" is generated from the long file name "A long filename.txt" because the long file name contains more than eight characters.


가끔 case sensitive 하지 않은 이 써글 파일 시스템이 저주스럽습니다 ㄱ-


[링크 : http://support.microsoft.com/kb/142982]
Posted by 구차니
Microsoft/Windows2009. 2. 6. 07:12
윈도우 기준으로 한글폰트중 **체 폰트는 고정폭이다.
(예: 굴림체는 고정폭 , 굴림은 가변폭)
[참고 : http://mwultong.blogspot.com/2006/07/html-css.html]

그러면.. 영문은 어떻게 구분해야 하나?
Courier New
Courier
Lucida Console
Fixedsys
정도 일려나..

[참고 : http://www.lowing.org/fonts/]
Posted by 구차니