Help!!!!!! Ive been hacked!!!

[SchoolKidKemp15]

OHK SO I WAS IN FIRST PERIOD AND A MESSAGE APPERED SAYING

this computer will shutdown
please save all files
computer will shut down in ..14..13 etc.
and then it said a message frome user "unknown" "hahaha"
now i am quite a computer nerd my self so i have already
determined what code they used:
shutdown [/i | /l | /s | /r | /g | /a | /p | /h | /e | /o] [/hybrid] [/f] [/m \\computername] [/t xxx] [/d [p:|u:]xx:yy] [/c "comment"] [/?]

now i want to be able to track were this shutdown code came from using command prompt cmd PLZ HELP!!!!!

 

[Sergeant Steve]

First off you haven't been hacked, anyone on the school network who has access to command prompt can perform the shutdown command. As far as I know there is no way to track which computer the shutdown command came from via command prompt, however you MAY be able to track it from Event Viewer but being in a School the chances of you being able to access that are slim. I did the same thing to a friend in college and he also wasn't pleased but it was at the end of a class so he didn't lose any work.

This Microsoft Article tells you exactly what each parameter of the shutdown command does and is used for. The most commonly used would be /i /a and /s, /i gives you a graphical user interface so you get a few checkboxes and you can theoretically search for a list of computers in the Domain (Browse will not work outwith a school, college or big business network, and is usually pointless unless you know the name of the PC the person is working on), /a will ABORT a shutdown that is in progress (I'll get to this command soon), and shutdown /s will shutdown the targeted computer or IP address immediately with a 30 second countdown (which is what you got on the screen).

If something like this happens often firstly I would create a .bat file that aborts the shutdown, then secondly I would tell your teacher who should tell the network administrator what is happening and the network administrator can then put a stop to people using command prompt without the proper authority.

To create a .bat file to abort a shutdown, open Notepad, type the following exactly (minus quotes (")):

"shutdown /a
pause;"

Then go to File and Save As, and save it as something like "shutdown abort.bat" (without quotes) and ensure you save it as All Files (the really important part) otherwise it just gets saved as a text file which does nothing.

I am only providing you with this information for you to be able to ABORT the shutdown that someone else initiated, and so you understand that ANYBODY on the school network can do this. DO NOT start having shutdown fights with members of your class as it WILL all end in tears for everyone, not just those involved.

 

[Cris1]

OHK SO I WAS IN FIRST PERIOD AND A MESSAGE APPERED SAYING

this computer will shutdown
please save all files
computer will shut down in ..14..13 etc.
and then it said a message frome user "unknown" "hahaha"
now i am quite a computer nerd my self so i have already
determined what code they used:
shutdown [/i | /l | /s | /r | /g | /a | /p | /h | /e | /o] [/hybrid] [/f] [/m \\computername] [/t xxx] [/d [p:|u:]xx:yy] [/c "comment"] [/?]

now i want to be able to track were this shutdown code came from using command prompt cmd PLZ HELP!!!!!

By the way don't do titles like that , if you can see at the top corner you see a title format and this one is a bad one so please don't do it again.