講解SQLServer危險擴展存儲刪除和恢復

字號:

將有安全問題的SQL過程刪除.比較全面.一切為了安全! 刪除了調(diào)用shell,注冊表,COM組件的破壞權(quán)限 MS SQL SERVER2000
    使用系統(tǒng)帳戶登陸查詢分析器
    運行以下腳本:
    use master
    exec sp_dropextendedproc 'xp_cmdshell'
    exec sp_dropextendedproc 'xp_enumgroups'
    exec sp_dropextendedproc 'xp_loginconfig'
    exec sp_dropextendedproc 'xp_enumerrorlogs'
    exec sp_dropextendedproc 'xp_getfiledetails'
    exec sp_dropextendedproc 'Sp_OACreate'
    exec sp_dropextendedproc 'Sp_OADestroy'
    exec sp_dropextendedproc 'Sp_OAGetErrorInfo'
    exec sp_dropextendedproc 'Sp_OAGetProperty'
    exec sp_dropextendedproc 'Sp_OAMethod'
    exec sp_dropextendedproc 'Sp_OASetProperty'
    exec sp_dropextendedproc 'Sp_OAStop'
    exec sp_dropextendedproc 'xp_regaddmultistring'
    exec sp_dropextendedproc 'xp_regdeletekey'
    exec sp_dropextendedproc 'xp_regdeletevalue'
    exec sp_dropextendedproc 'xp_regenumvalues'
    exec sp_dropextendedproc 'xp_regremovemultistring'
    exec sp_dropextendedproc 'xp_regwrite'
    drop procedure sp_makewebtask
    go
    刪除所有危險的擴展:
    exec sp_dropextendedproc 'xp_cmdshell' [刪除此項擴展后,將無法遠程連接數(shù)據(jù)庫]
    以下3個存儲過程會在SQL SERVER恢復備份時被使用,非必要請勿刪除
    #exec sp_dropextendedproc 'xp_dirtree' [刪除此項擴展后,將無法新建或附加數(shù)據(jù)庫]
    #exec sp_dropextendedproc 'Xp_regread' [刪除此項擴展后, 還原數(shù)據(jù)庫輔助]
    #exec sp_dropextendedproc 'xp_fixeddrives' [刪除此項擴展后,將無法還原數(shù)據(jù)庫] 恢復腳本
    use master
    EXEC sp_addextendedproc xp_cmdshell ,@dllname ='xplog70.dll'
    EXEC sp_addextendedproc xp_enumgroups ,@dllname ='xplog70.dll'
    EXEC sp_addextendedproc xp_loginconfig ,@dllname ='xplog70.dll'
    EXEC sp_addextendedproc xp_enumerrorlogs ,@dllname ='xpstar.dll'
    EXEC sp_addextendedproc xp_getfiledetails ,@dllname ='xpstar.dll'
    EXEC sp_addextendedproc Sp_OACreate ,@dllname ='odsole70.dll'
    EXEC sp_addextendedproc Sp_OADestroy ,@dllname ='odsole70.dll'
    EXEC sp_addextendedproc Sp_OAGetErrorInfo ,@dllname ='odsole70.dll'
    EXEC sp_addextendedproc Sp_OAGetProperty ,@dllname ='odsole70.dll'
    EXEC sp_addextendedproc Sp_OAMethod ,@dllname ='odsole70.dll'
    EXEC sp_addextendedproc Sp_OASetProperty ,@dllname ='odsole70.dll'
    EXEC sp_addextendedproc Sp_OAStop ,@dllname ='odsole70.dll'
    EXEC sp_addextendedproc xp_regaddmultistring ,@dllname ='xpstar.dll'
    EXEC sp_addextendedproc xp_regdeletekey ,@dllname ='xpstar.dll'
    EXEC sp_addextendedproc xp_regdeletevalue ,@dllname ='xpstar.dll'
    EXEC sp_addextendedproc xp_regenumvalues ,@dllname ='xpstar.dll'
    EXEC sp_addextendedproc xp_regremovemultistring ,@dllname ='xpstar.dll'
    EXEC sp_addextendedproc xp_regwrite ,@dllname ='xpstar.dll'
    EXEC sp_addextendedproc xp_dirtree ,@dllname ='xpstar.dll'
    EXEC sp_addextendedproc xp_regread ,@dllname ='xpstar.dll'
    EXEC sp_addextendedproc xp_fixeddrives ,@dllname ='xpstar.dll'
    go
    全部復制到"SQL查詢分析器"
    點擊菜單上的--"查詢"--"執(zhí)行",就會將有安全問題的SQL過程刪除。