Uninstall patch removal protection get Windows2003 password

Uninstall Windows2003 sp1/sp2 under command line

%systemroot%$NtServicePackUninstall$spuninstspuninst

/u

Remove the service pack in unattended mode. If you use this option, you will not be prompted until a fatal error occurs during the uninstall of SP1.

/q

Remove SP1 in quiet mode, which is the same as unattended mode, except that the user interface is hidden. If you use this option, you will not be prompted during uninstall of SP1.

/z

Do not restart the computer when the SP1 process is uninstalled.

/F

Force close other applications when you restart the computer after uninstalling SP1.

Because some Windows2003 in "Add/Remove" There is no patch uninstall selected, so I use the command

%systemroot%$ NtServicePackUninstall$spuninstspuninst.exe /Q

deleted automatically at the command line, but some Windows2003 machines do not have the total directory of this sp1/sp2, such as the following:

C:windows$ntuninstallkb929969$ 's Directory

2007-01-11 03:00 <DIR> spuninst
0 个文件 0 字节

C:windows$ntuninstallkb931836$ 's Directory

2007-02-18 03:01 <DIR> spuninst
0 个文件 0 字节

Then we'll go into a directory. Using the above method to delete, you can write a batch program to delete automatically. Do the above operation only one purpose, Windows2003 +sp0 can use Findpass from Winlogin process to grasp the system account clear password, although this method is very violent, but compared to some machine account password abnormal to use pwdump+ lc5 a few months can not break out to be useful, Grab the password and don't forget to reinstall the patch. In fact, you can test the deletion of a small patch can be findpass out the password, so that the action is much smaller, or in order to keep secret may also help others to play sp1/sp2.

Finally said Windows2003 's Findpass tool now has two kinds, one is Wineggdrop writes, one is www.white-scorpion.nl website.