Is it possible to attack a pc through local network ? Or from the isp ? A remote attack to shutdown the pc ?
My desktop have been shutting down for past few days, I suspect a local network attack.
No virus or malware found on the pc.
7
-
Anything in the system event logs?– DavidPostill ♦Commented Apr 26, 2021 at 8:27
-
Does it also happen when you don't have a network connected? Or while booted into secure mode? Then it is most likely something local, maybe some malware which was not detected– DarkDiamondCommented Apr 26, 2021 at 8:51
-
It is possible, and also very unlikely. The eventlog will tell you what happened though. If the computer was shutdown by a hacker, it will say that. If its a faulty PSU, it will state something like: The computer shutdown unexpectedly.– LPChipCommented Apr 26, 2021 at 8:58
-
Event logs shows critical power loss, ibb.co/w6x2NPH– Mehdi HasanCommented Apr 26, 2021 at 9:32
-
Changed what the power buttons do, also removed power button plug from motherboard– Mehdi HasanCommented Apr 26, 2021 at 9:33
|
Show 2 more comments
1 Answer
You are referring to a type of exploit that allows someone to send "something" to your ip. A Nuke exploit would result in your PC going offline, maybe stopping a certain service or perhaps (highly unlikely) shutting down. A Flood exploit would swamp a targeted service (perhaps HTTP webserver, a gaming server your run, ...) into giving up and becoming unresponsive but that would hardly shutdown your computer unless your BIOS maybe initiates a critical shutdown when it detects the CPU overheating limit is reached (configurable). Although many Nukers/Flooders exist they are pretty much harmless when you apply all security patches/updates for your OS and nowadays there are pretty much no more existing or freely available Nukers/Flooders for current OS's that would result in a instant & full shutdown. If there were, it would be big news. Many other things could be at play, if you're running an expired trial copy of Windows Server it will somewhat randomly shut itself down every 24h.
A sudden shutdown is most likely a problem with your hardware such as a defect RAM board. To find those you could run a full test from the BIOS and make sure the hardware is correctly working.
-
so how do i counter the attacks if it's a nuke/flooder attack somehow ? what about a modified shutdown.exe ? or a new file/process created, here's a similar post superuser.com/questions/1423929/… Commented Apr 26, 2021 at 10:08
-
so how do i counter the attacks if it's a nuke/flooder attack somehow? --> You would use a firewall, the windows build-in firewall does a pretty good job stopping stuff like that, unless you manually openend a port for a specific service. What Windows version are you running? Can't comment on the modified shutdown.exe, there's a reason your host is shutting down, messing with that could cause permanent hardware problems when the root cause is an actual hardware issue. Commented Apr 26, 2021 at 11:21
-
windows firewall is on, using windows 10 insider preview dev channel. it shows on the screen that windows are shutting down, to check the power button, already removed it from the motherboard and disabled what power buttons do. device temperatures are, as usual, windows are stable too. I suspect it's a modified shutdown.exe/process or an attack from the local network/isp. And I'm living in a rented house, so the device could be tampered with, there were attacks on the desktop and Facebook account too few months ago. Commented Apr 26, 2021 at 11:43
-
Have you checked the power settings from Windows self? Going sleep/shutdown etc and all that. It's interesting you see it actually shutting down, granted, that -is- weird. I wouldn't suspect the ISP as such but perhaps (but it's a long shot) it could be an infected router but in that case we're talking MiTM style attacks with additional payload in your normal network traffic. All that is pretty advanced hardcore hacking to just "shutdown a computer randomly or grab someone's Facebook". Have you tried a second virusscanner and ran a full/deep virus scan? Commented Apr 26, 2021 at 12:00
-
Have you installed a lot of third party software? Games? Warez? Do you have roommates that have administrator access to the desktop? Remote Desktop access? Commented Apr 26, 2021 at 12:00