I have an @echo script running on a computer daily, want it OFF

Page 2 of 2 FirstFirst 12

  1. Posts : 1,416
    Windows 10 Pro x64
       #11

    Given that you know the contents of the batch file you must know where it is located? have you tried moving the batch file and seeing what it does at 21:00.


    • Does the computer shutdown?
    • Do you get an error?


    Maybe also worth checking the Event View for the last time it shutdown via the batch file method to see if anything in there relates to the shutdown process, are you familiar with Event Viewer?

    -Jamie
      My Computer


  2. Posts : 8
    w10, w7
    Thread Starter
       #12

    "The process C:\Windows\system32\shutdown.EXE (WOAC) has initiated the shutdown of computer PROBLEMCOMPUTERATM on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found
    Reason Code: 0x800000ff
    Shutdown Type: shutdown
    Comment: shutting down"

    As you can see, it does log the shutdown command, but I can't seem to find it in scheduler
    From my knowledge, you're 100% right and it should be in scheduler.

    I mean, I could probably remove shutdown.exe from system32, but I'm not sure if that'll cause issues.

    I removed the bat file off the computer, will see if shuts down in a second. Changing system time to 8:59.
      My Computer


  3. Posts : 1,416
    Windows 10 Pro x64
       #13

    Can you see anything relating to this in the Tasks folder? C:\Windows\Tasks

    Other than that have you gone through the long winded task of looking at all the folders within the Task Scheduler?
    The task may have been put under one of these folder (By design or accidentally when setup)

    I have an @echo script running on a computer daily, want it OFF-2016-01-26-22_49_09-task-scheduler.png

    -Jamie
      My Computer


  4. Posts : 8
    w10, w7
    Thread Starter
       #14

    I found something that look like it may pertain to shutdown. In C:\Windows\Tasks, there's a file At1, which isn't in scheduled tasks.....
    upon opening with notepad+
    <!-- Copyright (c) Microsoft Corporation -->
    <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
    <assemblyIdentity
    version="5.1.0.0"
    processorArchitecture="x86"
    name="Microsoft.Windows.Shutdown"
    type="win32"
    />
    <description>Windows Shutdown and Annotation Tool</description>


    <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
    <security>
    <requestedPrivileges>
    <requestedExecutionLevel
    level="asInvoker"
    uiAccess="false"
    />
    </requestedPrivileges>
    </security>
    </trustInfo>
    </assembly>


    looks like something shutdown related to me... will delete that file and set time to 8:59 again.

    UPDATE:
    Still shutting down...
      My Computer


  5. Posts : 1,416
    Windows 10 Pro x64
       #15

    misfit41 said:
    I found something that look like it may pertain to shutdown. In C:\Windows\Tasks, there's a file At1, which isn't in scheduled tasks.....
    upon opening with notepad+
    <!-- Copyright (c) Microsoft Corporation -->
    <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
    <assemblyIdentity
    version="5.1.0.0"
    processorArchitecture="x86"
    name="Microsoft.Windows.Shutdown"
    type="win32"
    />
    <description>Windows Shutdown and Annotation Tool</description>


    <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
    <security>
    <requestedPrivileges>
    <requestedExecutionLevel
    level="asInvoker"
    uiAccess="false"
    />
    </requestedPrivileges>
    </security>
    </trustInfo>
    </assembly>


    looks like something shutdown related to me... will delete that file and set time to 8:59 again.
    It mentions shutdown so could be it but the name AT1 seems to ring a bell with some kind of virus / malware.

    It may be worth running a scan with malwarebytes Malwarebytes | Free Anti-Malware & Internet Security Software

    -Jamie
      My Computer


  6. Posts : 1,416
    Windows 10 Pro x64
       #16

    Downadup is the virus, it would be worth runing a virus check to be sure
      My Computer


  7. Posts : 8
    w10, w7
    Thread Starter
       #17

    Oh No! tbh, I think tomorrow is the day to 'redo' that computer and check the rest of the household computers!

    Thanks for all your help throughout Jamie!

    I will update thread after I do virus scan though.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 02:20.
Find Us




Windows 10 Forums