Instructables
Picture of How to over-ride a shutdown virus
You may have read my last instructable, on how to make a shutdown virus, but this
instructable will show you how to OVER-RIDE that shutdown virus =]

THIS IS EXTREMELY EASY!!!
 
Remove these adsRemove these ads by Signing Up

Step 1: Making Or Activating The Over-Ride

Picture of Making Or Activating The Over-Ride
To make a over-ride shortcut (that sits on your desktop until it is needed) follow these steps.

If you want to make it look cool (because all your friends are around and you want to look like a hacker), go to step 3.


-Go to your desktop.

-right click.

-select "New".

-select "Shortcut".

A box should come up as shown below.

Step 2: Writing The Over-Ride Code

In the text box (shown), type:

shutdown -a

Now click "Next".
Name it Shutdown Over-Rider.

Now click Finish!
Now you have your Shutdown Over-Rider!!!

To Make it look cool (You dont have to):

Right-Click the shortcut and click "Properties".
Now click "Change Icon" and choose your icon.

Personally I like the yellow Key symbol   =]

Congratulations! =]
Please look at my other instructables =]

Step 3: CMD.exe

So, you've chosen to impress your friends or family.
This Works best if you do it fast, so it looks like you know what your doing.
Rather than having a piece of paper telling you everything you have to do.

Right click your desktop and click "New" then "Shortcut".

In the box (shown below) type cmd.exe and click "Next" and "Ok".
Double click the new shortcut provided and a black box should come up (also shown below).

In the black box type shutdown -a and press enter.

This automatically Over-Rides the shutdown.
Congratulations! You over-rided a shutdown =]

Please look at my other instructables =]
hellrider754 years ago
nice pic and VERY nice trick
messmaker (author)  hellrider754 years ago
Thanks, anything you want to know, inbox me or ask me here =]
How could I make admin quickly if cmd is blocked. the only way I know to do is start the computer and shut it down before it starts. then restart it and do system repair. when it asks if you want to use a program to fix the problem pick no. after a bit more scanning it gives a report. open the report then click file and go to open. then make your way to the system32 file. find the sethc (stick key). exe and rename it to sethc-bak and then find the cmd.exe and make a copy of it named sethc. then restart the computer and once you get to the login screen hit shift 5 times. it opens up cmd (which is the only way I know on my school computers) then you put in the command to make a new admin account. my question is. is there an easier way to open cmd even if it's blocked
lieuwe4 years ago
 useful trick, it only works if you have time left before it shuts down, override is without a dash though, nice ible
messmaker (author)  lieuwe4 years ago
Yeah, that is a problem.
However if they havent written a forced code such as

shutdown -s -f -t 100

you can just open a word document and it will ask if you would like to save it before it shutsdown, this will give you all the time you need to run the file
or go through the "look like a hacker" option.
shutdown/p shuts it down immediately and is shorter to type.....
 assuming that you have time to open a word file, shutdown viruses are nasty buggers, but booting into safe mode will often keep them from starting...
messmaker (author)  lieuwe4 years ago
if your computer is too slow to load a word document or notepad in 3 seconds, you should just get a new computer.
 if you have a shutdown virus it might as well shut down instantly, there is no rule that they have to wait 3 seconds...
messmaker (author)  lieuwe4 years ago
i never said it did.
but im saying if you cant open a word document fast enough, you might aswell get a new computer because.

a standard, stock computer should be able to open a word document on desktop before immediate shutdown.
 that's not true, as soon as a program gives the shutdown command, windows prevents any new programs from opening, and if the virus maker is just a bit smart, the virus will use the /f argument when shutting down, this forces all opened programs to close, no matter what...
messmaker (author)  lieuwe4 years ago
u mean Shutdown -s -f -t 100 -c "message here" the "-f" making it a force shutdown. but a shutdown -a over rides even a Forced shutdown. a shutdown -a will only fail if its a shutdown coming straight from windows itself. -f doesnt stop u aborting it.and u could even have the shutdown over ride in a usb pre made, so u can immediatly open it =]
like a said, you might not have time to override it, if no delay is given it'll start shutting down, preventing any new programs from opening, if i give my computer the shutdown command it logs out almost immediately...
messmaker (author)  lieuwe4 years ago
yes but, you could write the code, and run it through start up. (start up files) so, on a seperate Computer, make a program that opens autonomously and runs a ISO (Instant Shutdown Over-ride). that will open before the shutdown commances, or has time to process =]
yes, but that isn't metioned in the instructable anywhere, i'm well aware that you *can* stop these viruses, but not always as mentioned in the instructable. the best possible way to remove these viruses is to boot into safe mode and remove the registry entry that starts it up...
messmaker (author)  lieuwe4 years ago
If you were smart about making the virus in the first place you would make it come under the Administrators name, so even the system will allow it, and delete the Admin and create a new one. you can make viruses do it, by programming it to add a new Admin and delete the old one. and put a total random password like "8456589n-t5489549458y" (you wont have to remember it, it just means the Admin wont be able to guess the password and they will have to do a total system delete, and re-setup.)
messmaker (author)  messmaker4 years ago
you could even make it as complex as telling the virus to: 1. Make a new hidden Admin. 2. Under that admin name, run a immediate shutdown into start up files. 3. Delete the Admin user. . Leaving no trace that you created the Admin in the first place, and making it seem to the system that the Shutdown file in the start-up files was legally placed by a former Admin.
use ophcrack live cd to get the admin pass, boot in save mode, remove start up entries change admin pass back, reboot normally. but that isn't the point, i know that you can make pretty advanced viruses, and there's almost always a way to get rid of it, the point is that NONE of this is mentioned in the instructable, you might want to add a step for the shutdown viruses that you can't stop this way.
messmaker (author)  lieuwe4 years ago
oph crack doesnt get hidden admins passwords. and this is a simple virus instructable. if i made it too complex people would just get tied up in knots. and if i wanted to do this to someone, i would break in, and fry the main processor. then you would need a whole new computer. and i could make it a hidden permanent file in the start up also, so its part of the system, then it will never let u delete it. i cant mention everything in the insctructable. this instructable is only for getting rid of a noob virus. made by a "script kiddy".
grundisimo2 years ago
You can make a batch file that automatically aborts remote shutdowns... I did at school...