My long list of Task Scheduler corrupt or tampered with tasks!!

Trapper · 20 Aug 2015

Hi.
Below are the errors found on starting Task Scheduler, and at the bottom are the ones I have deleted in System32\Tasks. I think many are leftovers from my Windows 10 trial as I do not remember any problems with Task Scheduler prior to the change. Can anyone confirm if these are W10 related?
I also deleted one of the entries -{1A8F31C3-EEE6-4A46-BD43-71824B1D89BB} in the Registry and this does not appear to have caused any problems. I am wondering if I delete these references (after taking a backup of them) and then ran Ccleaner registry cleaner to remove any leftover keys would this work?

As they are all reported as corrupt or tampered with they are obviously not working anyway so removing them should not make any difference ???? I would really appreciate some guidance before I mess things up

.
TASK ERRORS.

StartRecording
sqlLiteRecovery
ReindexSearch
RegisterSearch
RecordingRestart
PvrsShedule
PvrRecovery
PbdaDiscoveryW2
PbdaDiscoveryW1
PbdaDiscovery
OcurDiscovery
ObjectStoreRecovery
MediaCentreRecovery
Mcupdate_Scheduled
McUpdate
InstallPlayReady
EhDRMInit
DispatchRecoveryTasks
ConfigureInternetTimeService
AcitivateWindowsSearch
HotStart
LaunchSignUp
GoogleUpdateTaskMachineUA
GoogleUpdateTaskMachineCore
DSite
AdobeAcrobatUpdate
SvcRestartTask
UpdateRecordPath
AppleSoftwareUpdate
BackgroundConfigSurveyor
WindowsParentalControls
SystemDataProviders
SessionAgent
GadgetManager
AutoWake
IpAddressConflict2
IpAddressConflict1
SvcRestart

Deleted from System32\Tasks:
SyncToyBackups
MyDeFragv4.3.1
CcleanerSkipUAC
BitdefenderUpdateProduct (BD has successfully updated itself everyday)
WindowsBackupMonitor
AutomaticBackup

All these dated the same day as my W10 trial.
{1A8F31C3-EEE6-4A46-BD43-71824B1D89BB}
{F28451A8-A717-4A24-8A90-8CA6CCE77EF3}
{11AA1A29-9809-498A-99D9-BFC1ACE60D91}
{205F3CCB-DD0B-4EAF-BAD8-E01B014AA14C}
{BF289746-5E77-4A33-A0DF-DD7C7A2FD552}
{9C965EF0-188F-49BE-8E53-EDE6BFEFE008}
{55F1047D-3A19-4265-8D69-4ABF02B13515}
{3570E32E-AD25-4236-9692-4D8ACE1A23F1}
{CD117B2F-A6AF-433C-BA86-91D204DE053B}

Trapper · 22 Aug 2015

Bump:)
Is it safe to remove these tasks? Are they W10 leftovers?

Having to go through them everytime before I can actually do something in Task Scheduler is a right pain

. But I do not want to risk messing up my PC.

carwiz · 22 Aug 2015

I didn't check the entire list but those look like valid Windows 7 tasks. Without a doubt, the Media Center and MCupdate are W7 only.

Did you run SFC /scannow?

Trapper · 22 Aug 2015

Hi CarWiz. Thanks for the reply if these are W7 tasks then something has gone wrong somewhere!

I have run sfc /scannow as on this link Another scannow log with a few unrepairable errors.....

UNI's reply advises the errors shown can be ignored.

Not sure how to resolve this one, any suggestions

.

NoN · 22 Aug 2015

No it's no safe removing them, you'll have to re-register them in task scheduler...

It could takes a while to manually re-register all those tasks but that's the best one i can find:

MS10-092: Vulnerability in Task Scheduler could allow for elevation of privilege

Follow the workaround chapter there...

You'll need only registry path :
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree

Also: C:\System32\Tasks\

And have opened the Task Scheduler console to import tasks one by one....(display all files *.*, not the XML files)

I can give you a backup copy (attached .zip) of my Windows 7 pro x64, but only the C:\System32\Tasks\Microsoft\Windows folder...

The others entries you'll have to uninstall/reinstall the applications in order to make them work again and because we are not using same softwares, those might be useless for you to have them.

Trapper · 22 Aug 2015

Thank you NoN, I have printed out the 'Workaround' but will have to go slowly as it looks a bit complicated on first read so a trial run will probably be in order. Mind you it does look like a MSoft problem that they leave to the poor user to sort out for themselves!

I note that the tasks must be validated, all well and good as long as you already know if they are malware or not. I have scanned with malwarebytes and nothing showed. Not sure if this is good enough or not.

Thank you for your zip attachment, if I screw up a windows task I will at least have them on your copy and be able to copy them across if needs be.

I have a feeling this will be a long job..........

NoN · 22 Aug 2015

Trapper said:

Thank you NoN, I have printed out the 'Workaround' but will have to go slowly as it looks a bit complicated on first read so a trial run will probably be in order. Mind you it does look like a MSoft problem that they leave to the poor user to sort out for themselves!

I note that the tasks must be validated, all well and good as long as you already know if they are malware or not. I have scanned with malwarebytes and nothing showed. Not sure if this is good enough or not.

Thank you for your zip attachment, if I screw up a windows task I will at least have them on your copy and be able to copy them across if needs be.

I have a feeling this will be a long job..........

*

Yeah, quite a long job when you do it the first time...Go slowly and you won't mess it up.

Delete carefully the registry setting,

then delete what's inside the C:\System32\Tasks\Microsoft\Windows\name of the task corrupted....

And in the Task Scheduler console be at the same folder than C:\System32\Tasks\Microsoft\Windows\name of the task corrupted and click import...point it from the .zip file foler i gave you.

Trapper · 26 Aug 2015

Hi NoN.

Please see my other thread here:
54 Task Scheduler corrupt or tampered with tasks. Best way to fix?

spacman found an open source program that sorted this problem in seconds! It's Bl***y brilliant

The program 'Repair Task' can be found here:
https://repairtasks.codeplex.com/

MrIan · 26 Aug 2015

Trapper said:

Hi NoN.

Please see my other thread here:
54 Task Scheduler corrupt or tampered with tasks. Best way to fix?

spacman found an open source program that sorted this problem in seconds! It's Bl***y brilliant

The program 'Repair Task' can be found here:
https://repairtasks.codeplex.com/

Brilliant, thanks that fixed it for me

NoN · 28 Aug 2015

Trapper said:

Hi NoN.

Please see my other thread here:
54 Task Scheduler corrupt or tampered with tasks. Best way to fix?

spacman found an open source program that sorted this problem in seconds! It's Bl***y brilliant

The program 'Repair Task' can be found here:
https://repairtasks.codeplex.com/

Hi, Glad you fixed the entries and thanks for Rep.

I haven't used yet the repairtasks from codeplex because at the time i was repairing mine it didn't exist. Codeplex date published shows Aug 13, 2015 as BETA.
I saved it for future use, thanks!

I found a tool before Codeplex but it didn't made properly the trick for me:

HERE =>

Name: TaskRepair.CMD
Author: Daniel Sheehan
Requires: REG.EXE if it is not included with the OS and SetACL.EXE from SetACL: Windows ACL management download | SourceForge.net
Summary: Removes and repairs manually specified scheduled task entries so they will not generate "The task image is corrupt or has been tampered with" errors.
Summary: This scrpt was inspired by JimFlyer from the forum post WIN 7 problem after intstalation of SP1 - Task Scheduler - "the task image is corrupt"
Summary: The steps in this script following the instructions in the KB article - http://support.microsoft.com/kb/2305420

That's why I've choose the manual way based on the Microsoft kb2305420.

Anyway, now we have the right tool for doing that repair!!!