Command line: rundll32.exe user.exe, exitwindows. Function: Shut down the system. Command line: rundll32.exe shell32.dll, Control_RunDLL
forums.yoosecurity.com