Posted 20 May 2008 - 01:07 PM
I got a virus on my home computer (XP Home) over the weekend, but thankfully I have been able to reverse most of the damage.
One issue I am still having problems resolving is the disabling of Scheduled Tasks. Somehow, the virus changed the executable path for Scheduled Tasks to "C:\WINDOWS\System32\drivers\Spools.exe" (a file propagated by the virus, which is now deleted).
On my work computer (XP Pro), I see that the correct path to executable should be "C:\WINDOWS\System32\svchost.exe -k netsvcs".
When I go to Computer Management > Services > Task Scheduler Properties , however, the path to executable is read-only.
I found three registry keys with the value of "C:\WINDOWS\System32\svchost.exe -k netsvcs" on my work computer:
However, those three keys have the same value in the registry of my home computer.
Are there any other registry keys that control the path to executable for the Task Scheduler? Or is there any other way to do so?
Edit: Moved topic from XP to the more appropriate forum. ~ Animal