Hi guys, I have a machine that has had echo removed from its list of commands. (my little info gathering machine in the DMZ)

I remember seeing a post here once on how to do that, but I cant find it.

What I would like to know is how to do it, so I can understand it, and then how to get it back in there so I can fix up my machine.

As I understand, it is a command that is emedded in cmd.exe? Do I just replace that file? Or is there another way.

Thanks

if I remember the post you are talking about correctly.

it was just a simple hexediting of cmd.exe. just remember that the echo command will be unicode in that binarie. also don't forget to turn off windows file protection and also replace the backup binarie.

perhaps you mean this post?

http://www.governmentsecurity.org/forum/in...t=0&#entry54243

thats the one he means Blade... Nice searching btw.

Holy crap dude, I searched and I searched and I couldnt find the dang thing

Thank a bunch for that, time for some reading!!

if u got WindowsXP just delete the cmd.exe and then windows will put a nice one back (from the '%windir%/system32/dllcache' dir)