Questions

Answer for:

stopping "shutdown.exe"

Message 3 of 8

View entire thread
+
0 Votes
robo_dev
Collapse -

I never tried this myself.

Even better, replace shutdown.exe with another executable....so if you use something like bat2exe or perl2exe and create a 'shutdown.exe' that is actually running 'logevent.exe' which logs the user-id and machine name to the server (of the miscreant who was trying to run shutdown).