Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Avast found but can't remove Trojan viruses


  • Please log in to reply

#16
adelehirst

adelehirst

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts

Sorry that was a typo... I meant 'location' folder.... but I've sorted that now... however the same error is occurring on starting task scheduler... and when I run through the folders it is not showing me the error again.... although I can see there is a file in the folder PerfTrack that is not showing in task scheduler....  any ideas whats happening??

 

many thanks.


  • 0

Advertisements


#17
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,031 posts
  • MVP

Copy the next 4 lines:

 

reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule" /s > \junk.txt
dir /a /s \windows\system32\tasks >> \junk.txt
dir /a /s \windows\tasks >> \junk.txt
notepad \junk.txt
Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue.  Right click and Paste or Edit then Paste and the copied lines should appear.
Hit Enter if notepad does not open.    (It will be too large for the forum.  You will need to attach the file c:\junk.txt  (Click on More Reply Options then Choose File then Open.  Attach This File.)
 
This is a list of the registry entries for all tasks as well as the files used for the tasks.  Will take a while to wade through it.
 
 

  • 0

#18
adelehirst

adelehirst

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts

cheers...  just attached file...

Attached Files

  • Attached File  junk.txt   153.71KB   265 downloads

  • 0

#19
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,031 posts
  • MVP

The way I understand it, the file or folder in system32\tasks is only important if there is an entry in the registry in Taskcache.  The only thing that a file without a TaskCache entry will do is keep you from scheduling a new task of the same name.

 

Where it really gets upset is when it has an entry in the TaskCache and no file or folder in System32\tasks.

 

Let's try deleting the following tasks which do not have files (in some cases the folder is also missing) .

 

Task Scheduler, Task Scheduler Library in the right pane find:

 

29B60F45-78D0-4DF7-9E16-888CE01E439C or PCDEventLauncher

 

Right click on it and DELETE

 

repeat for:

 

{7045A06E-965A-402F-9A76-29866C6ADF36} or CreateChoiceProcessTask

 

 

{5C367FF4-CFEF-47B4-8463-C7AC04BE1C5A} or avast! Emergency Update 

 

 

 

Look in Microsoft, Windows Live, SOXE  or maybe it's just Windows Live, SOXE  and delete this one:

 
{B6899CF2-5B30-4602-9D85-39E4031B0E3B}  or Extractor Definitions Update Task
 
 
 
Look in Windows, Media Center and right click and disable everything in that and the subfolder Extender.  For some reason you only have two files available so best to just disable all of them.
 
 

Reboot and check to see if that helped.  If not run the same

reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule" /s > \junk.txt
dir /a /s \windows\system32\tasks >> \junk.txt
dir /a /s \windows\tasks >> \junk.txt
notepad \junk.txt

as before and attach it.


  • 0

#20
adelehirst

adelehirst

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts

Ive deleted the PCDEventLauncher task... but cannot see the other two in task scheduler??

 

I've attached a new copy of junk.txt

Attached Files

  • Attached File  junk.txt   151.72KB   31 downloads

Edited by adelehirst, 19 December 2014 - 07:05 AM.

  • 0

#21
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,031 posts
  • MVP

Copy the lines:

 

reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7045A06E-965A-402F-9A76-29866C6ADF36}"
reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7045A06E-965A-402F-9A76-29866C6ADF36}"
reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CreateChoiceProcessTask"
reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5C367FF4-CFEF-47B4-8463-C7AC04BE1C5A}"
reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5C367FF4-CFEF-47B4-8463-C7AC04BE1C5A}"
reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\avast! Emergency Update"
 
 
Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue.  Right click and Paste or Edit then Paste and the copied lines should appear.
Hit Enter.  This should remove them completely.  Reboot and then go into Task Scheduler.  Do you still get the error?
 
 

  • 0

#22
adelehirst

adelehirst

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts

done this however get an access denied on a couple of them even when logged on to cmd as admin..   Ive recreated the junk.txt if that's any use and attached it.... 

 

checked task scheduler and still getting error on loading it but cant find the folder the error appears in ....

 

 

Attached Files

  • Attached File  junk.txt   148.59KB   149 downloads

  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP