Hot Downloads

Welcome, Guest
Username: Password: Remember me
  • Page:
  • 1
  • 2

TOPIC: shutdown command is shutting down systems

shutdown command is shutting down systems 7 years 3 months ago #31531

  • sose
  • sose's Avatar
  • Offline
  • Honored Member
  • Posts: 813
  • Thank you received: 4
  • Karma: 3
some script kiddies in my place just run a SHUTDOWN - command and systems were shutting down after 30 seconds . what is the remedy
sose
Network Engineer
analysethis.co/index.php/forum/index
The administrator has disabled public write access.

Re: shutdown command is shutting down systems 7 years 3 months ago #31532

  • sose
  • sose's Avatar
  • Offline
  • Honored Member
  • Posts: 813
  • Thank you received: 4
  • Karma: 3
sorry, it is a winxp box
sose
Network Engineer
analysethis.co/index.php/forum/index
The administrator has disabled public write access.

Re: shutdown command is shutting down systems 7 years 3 months ago #31534

  • factory909
  • factory909's Avatar
  • Offline
  • New Member
  • Posts: 15
  • Karma: 0
shutdown -a will abort the shutdown, but you will have to know the computer name, and if the "script kiddie" gave it a time before it shut down.
The administrator has disabled public write access.

Re: shutdown command is shutting down systems 7 years 3 months ago #31544

  • sose
  • sose's Avatar
  • Offline
  • Honored Member
  • Posts: 813
  • Thank you received: 4
  • Karma: 3
factory 909

when you use shutdown -a it will actually abort. but when system restarts the shutdown in 30 seconds reappears. so how do you stop it permanently
sose
Network Engineer
analysethis.co/index.php/forum/index
The administrator has disabled public write access.

Re: shutdown command is shutting down systems 7 years 3 months ago #31552

  • S0lo
  • S0lo's Avatar
  • Offline
  • Moderator
  • Posts: 1577
  • Thank you received: 7
  • Karma: 3
It could be a virus, I've seen viruses that do the same. I'd do an antivirus update then a full scan.

If it's no use, try inspecting the following entries in the registry:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

It lists the auto start up programs. See if the kid did place some thing there. There is also the [Start] -> [All programs] -> [Startup] menu which can also auto start programs.
Studying CCNP...

Ammar Muqaddas
Forum Moderator
www.firewall.cx
The administrator has disabled public write access.

Re: shutdown command is shutting down systems 7 years 3 months ago #31558

  • ZiPPy
  • ZiPPy's Avatar
  • Offline
  • Expert Member
  • Posts: 500
  • Karma: 0
I agree with S0lo that it more than likely is a virus. If this indeed was from a script kiddie you have a couple pressing issues:

1. Security on users isn't locked down and not specific to job role/function.

2. Relating to the above plus the fact that somebody has far more access than they need and have decided to take advantage it.

I would definitely scan the box first and also check those registry entries. If the box turns up clean, let us know and we can start hunting down the childish script kiddie on your network; who apparently doesn't have any work to do. :lol:

*sigh* Dealing with children on the playground we all know as the enterprise network.


Cheers,

ZiPPy
ZiPPy
The administrator has disabled public write access.
  • Page:
  • 1
  • 2
Time to create page: 0.084 seconds

CCENT/CCNA

Cisco Routers

  • SSL WebVPN
  • Securing Routers
  • Policy Based Routing
  • Router on-a-Stick

VPN Security

  • Understand DMVPN
  • GRE/IPSec Configuration
  • Site-to-Site IPSec VPN
  • IPSec Modes

Cisco Help

  • VPN Client Windows 8
  • VPN Client Windows 7
  • CCP Display Problem
  • Cisco Support App.

Windows 2012

  • New Features
  • Licensing
  • Hyper-V / VDI
  • Install Hyper-V

Linux

  • File Permissions
  • Webmin
  • Groups - Users
  • Samba Setup