I have just recovered my PC from a Spyware attack.
After running ComboFix, SDFix, HJT, and a couple others, everything seems to be back to normal for about a week.
The only problem that remains, is one of the Spywares deleted and copied over the file:
C:\Windows\System32\mstask.exe
The Spyware also removed the registry entries that normally load this file from:
HKLM/CurrentControlSet/Services/Scheduler
This program is the Task Scheduler Service accessed and configured from:
[Start]=>[Control Panel]=>[Task Scheduler]
I can still see tasks scheduled there, but the tasks just sit there and are never executed because the Task Scheduler Service is no longer available.
Normally I would see it at:
[Start]=>[Control Panel]=>[Administrative Tools]=>[Services]
but when I open it, there is no entry for Task Scheduler.
I would be very greatful if anyone can provide (or direct me to) a copy of mstask.exe and instructions or ".reg" file for registry configuration ?
Thanks for taking time to read this and for any help or suggestions you can offer.
Kevin