Aborting a shutdown

Devilsbane

Is there any way to stop a shutdown after it has already started?

A coworker of mine thinks he is all fancy by turning off his computer at the end of the day using the shutdown -r command and leaving all of his apps open. I keep trying to get in there with the shutdown -a to abort the shutdown but he is clever and leaves very little time on the clock.

So once the shutdown has begun, is there a way to stop it? Maybe a process to kill or something like that? He leaves all of his apps open so there is about 30+ seconds between the shutdown starting and explorer going away.

humdingy02

If you don't have time to WindowKey-R and type shutdown /a, then there probably isn't time to kill a process. (isn't shutdown /r a reboot and not a shutdown?)
However: I used to abort shutdowns in XP all the time (virus or whatever), but I seem to remember trying this a while back on a Win7 computer that was shutting down and it didn't work. Maybe something has changed?

Devilsbane

humdingy02 wrote: »

If you don't have time to WindowKey-R and type shutdown /a, then there probably isn't time to kill a process. (isn't shutdown /r a reboot and not a shutdown?)
However: I used to abort shutdowns in XP all the time (virus or whatever), but I seem to remember trying this a while back on a Win7 computer that was shutting down and it didn't work. Maybe something has changed?

Yes, /r is reboot but the computer still shutsdown, it just comes back up too.

I also recall having some troubles with this on windows 7 but was able to solve it. Maybe it needs an elevated prompt or something, I forget

The point is that the shutdown /a only works while the countdown is in progress. Once it hits 0 the computer begins to shutdown and running this command is useless. However the computer is still on and I still have some control over it (launching apps usually fail to initialize because it knows that the computer is shutting down).

pzero

You could always start making WMI calls to his machine thru the day and start killing random processes

RobertKaucher

Devilsbane wrote: »

Is there any way to stop a shutdown after it has already started?

A coworker of mine thinks he is all fancy by turning off his computer at the end of the day using the shutdown -r command and leaving all of his apps open. I keep trying to get in there with the shutdown -a to abort the shutdown but he is clever and leaves very little time on the clock.

So once the shutdown has begun, is there a way to stop it? Maybe a process to kill or something like that? He leaves all of his apps open so there is about 30+ seconds between the shutdown starting and explorer going away.

If you want to play a joke on him do this: Install the SysInternals suite, then run this command:

psexec [URL="file://\\computername"]\\computername[/URL] -i -d -c "sysinternals bluescreen.scr" /s

It will copy the BSoD screen saver to his PC and run it. So do it while he is taking a break. When he comes back he will think his PC is boot looping.

EDIT:
Well, it has not been updated for 7 and is not included in the suite. You can get it from Sysinternals page, though.

blargoe

One time I put a script to eject the CD tray in the scheduled tasks of a coworker's laptop. When it popped out for the first few times, I made like I was controlling it from my desk, but it was really just executing every 37 minutes or something odd like that. I knew he'd be working from home that night, so I left the task in there. Freaked him the hell out when he was home and it kept happening.

"How did you keep ejecting my drive? I wasn't even on the VPN!!!"

CodeBlox

I've only known the "shutdown -a" method but I do know that it doesn't work after the timer elapses. Sorry I can't be of more help :P

pzero

Just thinking about this for you....

As long as the guy is using XP (not tested on Vista/7) and isnt using -f (force) in his shutdown command and you have access to his machine during the shutdown timer..

what you can do is open notepad, whack in a bunch of rubbish text and when the counter hits 0 and attempts to reboot, notepad will ask if you want to save the document, then give you the End Task dialog. From there you can "cancel, cancel". Shutdown aborted.

Or just rename shutdown.exe. Windows Protection will kick in doing that tho.

pzero

blargoe wrote: »

One time I put a script to eject the CD tray in the scheduled tasks of a coworker's laptop. When it popped out for the first few times, I made like I was controlling it from my desk, but it was really just executing every 37 minutes or something odd like that. I knew he'd be working from home that night, so I left the task in there. Freaked him the hell out when he was home and it kept happening.

"How did you keep ejecting my drive? I wasn't even on the VPN!!!"

LOL - funny stuff.

demonfurbie

well i dont know if this will work for you but you can make a macro to open up word pad and type a space and if he isnt around to hit no on the "do you want to save this document" shutdown will stall, you just may have to have it open multi wordpads way like 60 or so all with 1 space.

crrussell3

If he only uses shutdown /a, it defaults to 30 seconds. If it was me, I would create a scheduled task (or psexec the batch file to him) that starts maybe 5 or so minutes before he typically leaves work, and have it run a batch file like so:

shutdown /a
PAUSE 25
shutdown /a
PAUSE 25

and keep repeating that sequence long enough to cover when he would leave. Granted, he might notice the shutdown window going away if it happens to fire off at the right time, but, you might get lucky!

rsutton

You can use the shutdown command on a remote machine so I assume you could use shutdown /a on a remote machine as well. That would take care of the whole time factor thing.

Devilsbane

crrussell3 wrote: »

If he only uses shutdown /a, it defaults to 30 seconds. If it was me, I would create a scheduled task (or psexec the batch file to him) that starts maybe 5 or so minutes before he typically leaves work, and have it run a batch file like so:

shutdown /a
PAUSE 25
shutdown /a
PAUSE 25

and keep repeating that sequence long enough to cover when he would leave. Granted, he might notice the shutdown window going away if it happens to fire off at the right time, but, you might get lucky!

haha this seems like a good idea. I'll have to script it out but I think I'll get it down to a 5 second gap and use a loop to prevent an early onset of Carpal Tunnel!

By the way, pause 25 just does a pause. You're looking for sleep 25.

Devilsbane

@echo off
set x=0
:Shutdownz
shutdown /a
sleep 5
set /a X+=1
if %x%==60 (exit)
goto Shutdownz

Giving this a try tonight! Might add an output redirect to NULL on the sleep statement. We'll see.

crrussell3

Devilsbane wrote: »

@echo off
set x=0
:Shutdownz
shutdown /a
sleep 5
set /a X+=1
if %x%==60 (exit)
goto Shutdownz

Giving this a try tonight! Might add an output redirect to NULL on the sleep statement. We'll see.

Looks good. Ha! Just realized I put pause instead of sleep I would psexec this guy when he is close to leaving and you should be good.

crrussell3

Devilsbane wrote: »

By the way, pause 25 just does a pause. You're looking for sleep 25.

Ya it's a Monday. Need more caffeine!

Devilsbane

This will have to wait until tomorrow, he just locked his computer.

I decided to run it anyway, and it failed out. Sleep is not a recognized command because he doesn't have the resource kit installed. Small detail that I will have to plan for.

EDIT: Copied the sleep.exe program to the same directory as my batch file.

demonfurbie

Devilsbane wrote: »

This will have to wait until tomorrow, he just locked his computer.

I decided to run it anyway, and it failed out. Sleep is not a recognized command because he doesn't have the resource kit installed. Small detail that I will have to plan for.

EDIT: Copied the sleep.exe program to the same directory as my batch file.

dont forget to hide your folder and make sure show hidden files/folders is turned off on his station

Devilsbane

demonfurbie wrote: »

dont forget to hide your folder and make sure show hidden files/folders is turned off on his station

It's hidden in a program files folder. He shouldn't have any reason to be navigating over there.

mikedisd2

Devilsbane wrote: »

A coworker of mine thinks he is all fancy by turning off his computer at the end of the day using the shutdown -r command and leaving all of his apps open. I keep trying to get in there with the shutdown -a to abort the shutdown but he is clever and leaves very little time on the clock.

Maybe you should tell your coworker to find a girlfriend.