When i secure my WMS's i rename NSIISLOG.DLL and put it in another folder then kill cmd.exe. Works on some If you got any other ways pls paste them in this thread im always curious to know more

Hmm yes, and perhaps info on killing shells in general..
Getting em isnt a problem, but when the time comes you need em to go away, that, to me, is the hard part.

In which folder is the NSIISLOG.DLL file?
And what you mean about kill cmd?
info.exe and then kill.exe with the number about cmd.exe?
Big thx 4 your info of course

NSIISLOG.DLL is in Inetpub\Scripts. I think it should help to kill the shell if u rename it and move it, i heard killing dllhost.exe and cmd.exe is the best thing but the problem is you cant get root access in any easy way?




"And what you mean about kill cmd?" i use kill.exe if u havnt heard it , syntax; kill.exe process , works good on some bot not on all.

Anyone got any other nice ways to secure? I scored something that i dont want stolen :/

yes i take kill.exe too
my question was:
After you renamed the NSIISLOG.DLL
You kill cmd.exe and dllhost.exe?

yeah IF i have the access to do it :/

You can use a restart proggie to restart the computer if yah want Refused has one as do I whenever yah return back online Bro ... Im not gonna post it cause from what Ive seen 1/4 of the people here need to learn how to use google and today is a good day to start

MpR O.o

dude maybe you havent a clue but its remotely, safest way would be to disable it in the services .. but after you get a media shell
you
a) are in a shell cmd prompt
normally dont have admin rights
c) usually not your computer
d) after it restarts lose most of what yah did because access rights to write to start up are gone
e) official patch can be rooted aswell

ren c:\Inetpub\scripts\NSIISLOG.DLL c:\Inetpub\scripts\secured.lol
move c:\Inetpub\scripts\secured.lol c:\inetpub\secured.lol

but this into a .bat file !
should work


monty

can somebody make an exe with all steps,maybe somebody has somthing new commands??

safest way to secure is to patch it with an official patch