<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Teh Tech &#187; Cute Secretary</title>
	<atom:link href="http://tehtech.com/tag/cute-secretary/feed/" rel="self" type="application/rss+xml" />
	<link>http://tehtech.com</link>
	<description>Being an Admin is Hard Enough</description>
	<lastBuildDate>Wed, 14 Jul 2010 16:14:56 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.1</generator>
		<item>
		<title>Cause a Computer to Stop Booting via Script</title>
		<link>http://tehtech.com/cause-a-computer-to-stop-booting-via-script/</link>
		<comments>http://tehtech.com/cause-a-computer-to-stop-booting-via-script/#comments</comments>
		<pubDate>Sat, 08 May 2010 18:26:06 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Scripts]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Tools]]></category>
		<category><![CDATA[Break]]></category>
		<category><![CDATA[Cute Secretary]]></category>
		<category><![CDATA[Stop Booting]]></category>

		<guid isPermaLink="false">http://tehtech.com/?p=371</guid>
		<description><![CDATA[Interesting simple script I wrote today to cause a computer to stop booting. When run the operating system will not load, the issue is easily reversed with a boot cd of any kind. Why would I ever want to do this you might ask. Simple I used it at the request of an employer. The [...]]]></description>
			<content:encoded><![CDATA[<p>Interesting simple script I wrote today to cause a computer to stop booting. When run the operating system will not load, the issue is easily reversed with a boot cd of any kind.  Why would I ever want to do this you might ask. Simple I used it at the request of an employer. The boss had requested a way to see exactly what a user was doing on his work computer without a chance to clean it up.  I used kaseya to push this script down and a few min later I got a call from the user saying his computer crashed. I told him to send it to IT and he did. I got the computer, renamed the file and turned it over to the boss so he could see what he wanted.  He was let go a few hours later.<br />
<span id="more-371"></span></p>
<p>More or less what we are doing is renaming ntdetect.com to ntdetect.bak.  When the computer reboots it will loop until you rename the file back by boot disk like bart pe.</p>
<p><script type="text/javascript"><!--
google_ad_client = "pub-2740910196434334";
google_ad_slot = "5492961778";
google_ad_width = 468;
google_ad_height = 60;
//--></script>
<script type="text/javascript" src="http://pagead2.googlesyndication.com/pagead/show_ads.js"></script>
</p>
<div class="box">
Script Name: Break the computer<br />
Script Description: Causes the computer to stop booting until a file is renamed.</p>
<p>IF True<br />
THEN<br />
Execute Shell Command<br />
Parameter 1 : attrib -H -R -S c:ntdetect.com<br />
Parameter 2 : 0<br />
OS Type : 0<br />
Execute Shell Command<br />
Parameter 1 : rename c:ntdetect.com ntdetect.bak<br />
Parameter 2 : 0<br />
OS Type : 0<br />
ELSE
</p></div>
<p>
This can also be used in a batch file:<br />

<div class="box">
attrib -H -R -S c:ntdetect.com<br />
rename c:ntdetect.com ntdetect.bak<br />
Shutdown -r -f -t 0
</div>
<p>Could be useful for trying to recover stolen computers, data from soon to be fired employees (not giving them the chance to delete things).  Or recovering a computer to investigation.  You can also use it as an excuse to go visit that cute new secretary&#8230;</p>
<p><script type="text/javascript"><!--
google_ad_client = "pub-2740910196434334";
google_ad_slot = "5492961778";
google_ad_width = 468;
google_ad_height = 60;
//--></script>
<script type="text/javascript" src="http://pagead2.googlesyndication.com/pagead/show_ads.js"></script>
</p>
]]></content:encoded>
			<wfw:commentRss>http://tehtech.com/cause-a-computer-to-stop-booting-via-script/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

