shutdown command is shutting down systems

some script kiddies in my place just run a SHUTDOWN - command and systems were shutting down after 30 seconds . what is the remedy

sorry, it is a winxp box

shutdown -a will abort the shutdown, but you will have to know the computer name, and if the "script kiddie" gave it a time before it shut down.

factory 909

when you use shutdown -a it will actually abort. but when system restarts the shutdown in 30 seconds reappears. so how do you stop it permanently

It could be a virus, I've seen viruses that do the same. I'd do an antivirus update then a full scan.

If it's no use, try inspecting the following entries in the registry:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

It lists the auto start up programs. See if the kid did place some thing there. There is also the [Start] -> [All programs] -> [Startup] menu which can also auto start programs.

I agree with S0lo that it more than likely is a virus. If this indeed was from a script kiddie you have a couple pressing issues:

1. Security on users isn't locked down and not specific to job role/function.

2. Relating to the above plus the fact that somebody has far more access than they need and have decided to take advantage it.

I would definitely scan the box first and also check those registry entries. If the box turns up clean, let us know and we can start hunting down the childish script kiddie on your network; who apparently doesn't have any work to do. :lol:

*sigh* Dealing with children on the playground we all know as the enterprise network.


Cheers,

ZiPPy