SharedTaskScheduler:Windows Update

9cats · Jan 7, 2008

Hi,

My friend's computer running XP has an MSN homepage hijack on Internet Explorer and the desktop properties also changed (shortcuts and backround). I ran HijackThis and only one line was Extremely Nasty. All other lines were safe or very safe.

Of course I tried to change the homepage back to the preferred site using Tools, Internet Options, Use current home page (also tried manually typing in the UrL), but it is definitely a Hijack homepage and will not change.

This is the "HijackThis" line from the log:

SharedTaskScheduler: Windows Update - {C1A8B66A1-2C81-1C3D-A3C6-A1CCDB10B47F} - (no file)

Is this spyware? I did not want to delete it because it read "Windows Update".

Thank you.

TimW · Jan 7, 2008

Malware can present as legit file names.

Please uninstall HJT as it will be properly installed when you do the following:

Please follow the instructions in the below link and attach the requested logs when you finish these instructions.

READ & RUN ME FIRST. Malware Removal Guide

9cats · Jan 7, 2008

Thank you. I'm not sure when I will be going back to my friend's house and they are not very computer saavy. They have had problems with this computer before and we thought we had it all cleaned up. It had been working good for about a year now.

TimW · Jan 7, 2008

Just attach the logs when you can ...we'll be here.

Log in or Sign up

SharedTaskScheduler:Windows Update

9cats Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

9cats Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member