The day before yesterday, I saw a Kaspersky server version 5.0 and installed it on a remote server through the Remote Desktop. Who knows that after the installation, the Remote Desktop will be disconnected and cannot be connected any more. I cannot connect to IPC $ sharing, gene6ftpserver and sqlserver can still be connected, but the speed is slow .......... make a mistake
Pat the back of your head...
Start with gene6 and see if you can execute system commands. It has been wandering online for a long time ....
Let's take a look at sqlserver2000. Fortunately, xp_cmdshell is not disabled. I checked some information about task management commands on the Internet: tasklist, taskkill... and started to cut it down.
1. Exec xp_cmdshell 'tasklist-V' to view information about all processes on the server
2. Exec xp_cmdshell 'taskkill/f/IM kavmm.exe 'to kavmm !!!! Evil, monsters !!!!
3. Exec xp_mongoshell 'RD "path"/S/Q' deletes its installation folder and shared folder, respectively.
4. Exec xp_mongoshell 'shutdown-R-T 5-F' restart the server
^ _ ^, Now you can connect to it, and then run its anti-InstallationProgram, Take it from the system thoroughly.