These stored procedures are as follows:
Sp_makewebtask
Xp_mongoshell
Xp_dirtree
Xp_fileexist
Xp_terminate_process
Sp_oamethod
Sp_oacreate
Xp_regaddmultistring
Xp_regdeletekey
Xp_regdeletevalue
Xp_regenumkeys
Xp_regenumvalues
Sp_add_job
Sp_addtask
Xp_regread
Xp_regwrite
Xp_readwebtask
Xp_makewebtask
Xp_regremovemultistring
Corresponding Measures: Delete the stored procedure or executable file or modify the executable permission of the user group corresponding to the stored procedure. The script for deleting the stored procedure is:
Drop PROCEDURE sp_makewebtask
Exec master .. sp_dropextendedproc xp_cmdshell
Exec master .. sp_dropextendedproc xp_dirtree
Exec master .. sp_dropextendedproc xp_fileexist
Exec master .. sp_dropextendedproc xp_terminate_process
Exec master .. sp_dropextendedproc sp_oamethod
Exec master .. sp_dropextendedproc sp_oacreate
Exec master .. sp_dropextendedproc xp_regaddmultistring
Exec master .. sp_dropextendedproc xp_regdeletekey
Exec master .. sp_dropextendedproc xp_regdeletevalue
Exec master .. sp_dropextendedproc xp_regenumkeys
Exec master .. sp_dropextendedproc xp_regenumvalues
Exec master .. sp_dropextendedproc sp_add_job
Exec master .. sp_dropextendedproc sp_addtask
Exec master .. sp_dropextendedproc xp_regread
Exec master .. sp_dropextendedproc xp_regwrite
Exec master .. sp_dropextendedproc xp_readwebtask
Exec master .. sp_dropextendedproc xp_makewebtask
Exec master .. sp_dropextendedproc xp_regremovemultistring
Example:
Exec xp_dirtree 'C: '1,1