Unknown Task In Task Scheduler

[surfdude156]

I was looking through task schedular and I saw this task. It didnt look like any legit program but i wanted to see if it was. The name for it was: "{124410CA-53AF-4F63-B036-D8FA1716511B}" and it triggered opening an exe which was: "C:\Windows\system32\pcalua.exe -a "C:\Users\Dakota\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VEJV3ZXD\sp39951[1].exe" -d C:\Windows\system32". Im not sure if its a virus or not. Any info on what it is is appreciated.

[Klean]

pcalua.exe appears to be related to Microsoft's Program Compatibility Assistant:

[surfdude156]

Haha ok thats cool. And yea i think that the program is legit, but im not sure about the temporary file thats attatched to it. I checked to see if sp39951[1].exe was even i file i had and it wasnt . Ok so here's my hijackthis log:



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:30:04 AM, on 4/24/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18226)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O1 - Hosts: ::1 localhost
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O13 - Gopher Prefix:
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. (www.webroot.com) - C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe
O23 - Service: Webroot Client Service (WRConsumerService) - Webroot Software, Inc. - C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe

--
End of file - 2172 bytes





Oh and i uploaded the file to virustotal and here's the results

[Klean]

Everything is clean. I believe sp39951[1].exe belongs to your monitor.

I get no baddies.

*************************************************************************************************

This subject has been addressed or corrected. The subject is closed and if the original topic author needs to add to it please P.M. a staff member from this section.

*************************************************************************************************