★ Dbcc usage extension of a storage process can be very simple way after it is removed: For example: delete DROP PROCEDURE sp_addextendedprocDROP PROCEDURE sp_OACreateexec sp_dropextendedproc 'xp_cmdshell' recovery dbcc addextendedproc ( "sp_OACreate", "odsole70.dll") dbcc addextendedproc ( "xp_cmdshell "," XPLOG70.DLL ") This can be directly recovered without the existence of SP_ADDEXTENDPROC :) More DBCC command excavation. . .