I don't recall what it is off hand but you can call a Win32 function to shutdown the OS using rundll.exe. Someone who is interested could just go search on google using that info. Joshua Jore Minneapolis Ward 3, precinct 10 "The irony of this man being imprisoned in the United States and longing to return to once-Communist Russia so he can regain his right to free speach is simply staggering." On Mon, 6 Aug 2001, Clay Fandre wrote: > Nate Carlson [natecars at real-time.com] wrote: > > On Mon, 6 Aug 2001, Clay Fandre wrote: > > > > > Thanks for all of the help. I was starting to get worried when my cable > > > > > modem & router lights were going crazy last night and the fact that I > > > > > heard that there is a new strain out that effects shells or something. > > > > > > > > Not "effects shells", really. It makes a shell available (without any > > > > authentication, of course) available remotely on infected machines. > > > > > > > > > > Any idea how to access it? Does NT have a shutdown command? :-) > > > > get /scripts/root.exe > > That only answers half of my questions. Anyone have time to modify the worm to go and shutdown all these damn unpatched boxes? Or better yes, have it download and boot a linux fs. > _______________________________________________ > tclug-list mailing list > tclug-list at mn-linux.org > https://mailman.mn-linux.org/mailman/listinfo/tclug-list >