Page 1 of 2 12 LastLast
  1.    24 Aug 2017 #1
    Join Date : Aug 2017
    Posts : 10
    Windows 10

    What is "JD_TaskSchedulerSchedule"?


    So over several Windows 10 resets and the Creators Update, I've noticed something in my Task Scheduler that keeps giving me pause. At least once every night, a randomly named task that's not registered in the scheduler (and is not in the registry or the scheduler folders) will come up. The names look like Class IDs, stuff like {3ff0f6fb-1d05-4f62-8f1f-9be6d20167f8}, different each time. They always run one thing: an action by the name of "Global\JD_TaskSchedulerSchedule", with a different Class ID-looking number behind it, again different each time. Usually they terminate right off (within the same second of running) and I only see it once. Tonight, I've seen it three times and the third time is still running. It doesn't look to be doing anything beyond that.

    The good thing, if there is one, is that I'm pretty sure this isn't malware. I've thrown Norton 360, ESET Online Scanner, MBAM, MBAR, TDSSKiller, ADWCleaner, and even the Junkware Removal Tool at it, and they all say I'm clean, plus it's persisted across several resets and at least one upgrade so it's more than likely something that's s'posed to be on here.

    I've been up and down with Google and I can't find anything on it. I've even been to another forum, nothing there either.

    If anyone has seen this before and can help me out with figuring out what it's doing, I'd really appreciate it.
      My ComputerSystem Spec
  2.    24 Aug 2017 #2
    Join Date : Jul 2016
    Granite Bay, CA
    Posts : 712
    Windows 10 Professional

    What I would do:
    Extract the task and save it somewhere. Then delete it from the Task Scheduler. See what happens in the next few days, and see if it re-appears. If everything is working fine without it being there, then hold on to the extracted task for a while. If everything works good, then I would delete it. But that's what I would do.

    I also tried searching online. The only thing that I found was your post at the other forum.
      My ComputerSystem Spec
  3.    24 Aug 2017 #3
    Join Date : Aug 2017
    Posts : 10
    Windows 10
    Thread Starter

    Quote Originally Posted by pepanee View Post
    What I would do:
    Extract the task and save it somewhere. Then delete it from the Task Scheduler. See what happens in the next few days, and see if it re-appears. If everything is working fine without it being there, then hold on to the extracted task for a while. If everything works good, then I would delete it. But that's what I would do.

    I also tried searching online. The only thing that I found was your post at the other forum.
    Problem is, it doesn't show up in the registry, the scheduled tasks, or even the tasks folder. Just Task Status and the task scheduler operational log. I can't delete or extract from there.
      My ComputerSystem Spec
  4.    24 Aug 2017 #4
    Join Date : Jul 2016
    Granite Bay, CA
    Posts : 712
    Windows 10 Professional

    Okay I see. Can you take a screen shot of what you mean by that you see it in the Task Status? And can you copy/paste the text from the log file that relates to it? Lemme see if I can find anything about it. Hopefully someone else can jump in and help if they know anything about it.
      My ComputerSystem Spec
  5.    24 Aug 2017 #5
    Join Date : Aug 2017
    Posts : 10
    Windows 10
    Thread Starter

    https://i.imgur.com/hjqDNdN.jpg

    Log Name: Microsoft-Windows-TaskScheduler/Operational
    Source: Microsoft-Windows-TaskScheduler
    Date: 8/24/2017 1:35:00 AM
    Event ID: 100
    Task Category: Task Started
    Level: Information
    Keywords: (1)
    User: SYSTEM
    Computer: DESKTOP-111QOTA
    Description:
    Task Scheduler started "{86ec23fe-599b-4512-9abb-45540e754544}" instance of the "\{c7b2f625-9420-488d-822f-25eead9cd07e}" task for user "DESKTOP-111QOTA\Heart".
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name="Microsoft-Windows-TaskScheduler" Guid="{DE7B24EA-73C8-4A09-985D-5BDADCFA9017}" />
    <EventID>100</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>100</Task>
    <Opcode>1</Opcode>
    <Keywords>0x8000000000000001</Keywords>
    <TimeCreated SystemTime="2017-08-24T05:35:00.510284500Z" />
    <EventRecordID>5618</EventRecordID>
    <Correlation ActivityID="{86EC23FE-599B-4512-9ABB-45540E754544}" />
    <Execution ProcessID="1588" ThreadID="2412" />
    <Channel>Microsoft-Windows-TaskScheduler/Operational</Channel>
    <Computer>DESKTOP-111QOTA</Computer>
    <Security UserID="S-1-5-18" />
    </System>
    <EventData Name="TaskStartEvent">
    <Data Name="TaskName">\{c7b2f625-9420-488d-822f-25eead9cd07e}</Data>
    <Data Name="UserContext">DESKTOP-111QOTA\Heart</Data>
    <Data Name="InstanceId">{86EC23FE-599B-4512-9ABB-45540E754544}</Data>
    </EventData>
    </Event>
    Log Name: Microsoft-Windows-TaskScheduler/Operational
    Source: Microsoft-Windows-TaskScheduler
    Date: 8/24/2017 1:35:00 AM
    Event ID: 200
    Task Category: Action started
    Level: Information
    Keywords:
    User: SYSTEM
    Computer: DESKTOP-111QOTA
    Description:
    Task Scheduler launched action "Global\JD_TaskSchedulerSchedule_{0EF72C48-755C-44C0-B8AA-84AA3808FACA}" in instance "{86ec23fe-599b-4512-9abb-45540e754544}" of task "\{c7b2f625-9420-488d-822f-25eead9cd07e}".
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name="Microsoft-Windows-TaskScheduler" Guid="{DE7B24EA-73C8-4A09-985D-5BDADCFA9017}" />
    <EventID>200</EventID>
    <Version>1</Version>
    <Level>4</Level>
    <Task>200</Task>
    <Opcode>1</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2017-08-24T05:35:00.510286000Z" />
    <EventRecordID>5619</EventRecordID>
    <Correlation ActivityID="{86EC23FE-599B-4512-9ABB-45540E754544}" />
    <Execution ProcessID="1588" ThreadID="2412" />
    <Channel>Microsoft-Windows-TaskScheduler/Operational</Channel>
    <Computer>DESKTOP-111QOTA</Computer>
    <Security UserID="S-1-5-18" />
    </System>
    <EventData Name="ActionStart">
    <Data Name="TaskName">\{c7b2f625-9420-488d-822f-25eead9cd07e}</Data>
    <Data Name="ActionName">Global\JD_TaskSchedulerSchedule_{0EF72C48-755C-44C0-B8AA-84AA3808FACA}</Data>
    <Data Name="TaskInstanceId">{86EC23FE-599B-4512-9ABB-45540E754544}</Data>
    <Data Name="EnginePID">0</Data>
    </EventData>
    </Event>
    Log Name: Microsoft-Windows-TaskScheduler/Operational
    Source: Microsoft-Windows-TaskScheduler
    Date: 8/24/2017 2:28:28 AM
    Event ID: 111
    Task Category: Task terminated
    Level: Information
    Keywords: (1)
    User: SYSTEM
    Computer: DESKTOP-111QOTA
    Description:
    Task Scheduler terminated "{86ec23fe-599b-4512-9abb-45540e754544}" instance of the "\{c7b2f625-9420-488d-822f-25eead9cd07e}" task.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name="Microsoft-Windows-TaskScheduler" Guid="{DE7B24EA-73C8-4A09-985D-5BDADCFA9017}" />
    <EventID>111</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>111</Task>
    <Opcode>103</Opcode>
    <Keywords>0x8000000000000001</Keywords>
    <TimeCreated SystemTime="2017-08-24T06:28:28.785184000Z" />
    <EventRecordID>5638</EventRecordID>
    <Correlation ActivityID="{86EC23FE-599B-4512-9ABB-45540E754544}" />
    <Execution ProcessID="1588" ThreadID="4784" />
    <Channel>Microsoft-Windows-TaskScheduler/Operational</Channel>
    <Computer>DESKTOP-111QOTA</Computer>
    <Security UserID="S-1-5-18" />
    </System>
    <EventData Name="TaskTerminationEvent">
    <Data Name="TaskName">\{c7b2f625-9420-488d-822f-25eead9cd07e}</Data>
    <Data Name="InstanceId">{86EC23FE-599B-4512-9ABB-45540E754544}</Data>
    </EventData>
    </Event>
    The log entries are from the most recent instance, the one that decided to run longer than a second. I can copy/paste others that stopped in the same second, if need be.
      My ComputerSystem Spec
  6.    24 Aug 2017 #6
    Join Date : Aug 2017
    Posts : 10
    Windows 10
    Thread Starter

    I can and have, just need to wait for mod approval on the post.

    ...I tried posting it three times before I realized it needed to be approved first. Thought that new accounts couldn't post URLs or something like that. I feel rather dumb right now.
      My ComputerSystem Spec
  7.    24 Aug 2017 #7
    Join Date : Jul 2016
    Granite Bay, CA
    Posts : 712
    Windows 10 Professional

    Oh okay. Yea I don't really remember the rules of waiting some time in the beginning until you can post an attachment. So whenever you get the chance, attach that on here and we'll see what's what.
      My ComputerSystem Spec
  8.    24 Aug 2017 #8
    Join Date : Aug 2017
    Posts : 10
    Windows 10
    Thread Starter

    Quote Originally Posted by pepanee View Post
    Oh okay. Yea I don't really remember the rules of waiting some time in the beginning until you can post an attachment. So whenever you get the chance, attach that on here and we'll see what's what.
    Post has been approved. I linked the screenshot instead of attaching it, hope that's OK.
      My ComputerSystem Spec
  9.    25 Aug 2017 #9
    Join Date : Jul 2016
    Granite Bay, CA
    Posts : 712
    Windows 10 Professional

    I see. Okay. So I would open Task Scheduler itself (I see you're accessing Task Scheduler from Computer Management; refer to my screen shot). Then go through all the folders and look for something to do with JD.

    Notice how I accessed those folders, I pressed the arrow to the left the names. Maybe you can try pressing the arrow to the left of Task Scheduler, and maybe you'll have the same layout as mine.

    Click image for larger version. 

Name:	Task Scheduler.png 
Views:	2 
Size:	80.7 KB 
ID:	150398
      My ComputerSystem Spec
  10.    25 Aug 2017 #10
    Join Date : Aug 2017
    Posts : 10
    Windows 10
    Thread Starter

    Like I've said, it only shows up under Task Status and in the Event Viewer. I've been all over the Task Scheduler folders. It's not there. I've been in the task folder in System32. Not there. Even been in the registry, and as far as I can tell, not there either.
      My ComputerSystem Spec

 
Page 1 of 2 12 LastLast


Similar Threads
Thread Forum
Documents folders in "Quick Access", "One Drive" and "This PC"
Hi I have recently updated to the creator version My files end up in unintended destinations. When I click in the documents tab in the sidebar of the documents screen, it takes me to a “Documents” folder that appears in “One Drive” group. Any...
General Support
Solved Remove "Camera" and "Photos" from left hand side of File Dialog
I've got an error at the moment that whenever I try and use the file dialog (e.g. save a new file, open a file, attach file to email etc), whatever application I'm using will crash. This seems to have started ever since the Windows 10 Creator...
General Support
Context menu "Properties" uses "o" shortcut instead of "r"
One of our Win10 laptops has a context menu with "Properties" that uses shortcut key "r". The other uses key "o" which conflicts with "open". I have no idea how it got corrupted. Suggested locations in the registry for context menu doesn't list it....
General Support
"Boot Device Not Found" - but hitting "Enter" afterward PC boots fine
I had to buy a new (SSD) HD and had trouble booting from a disc until I enabled Legacy Mode and disabled Secure Boot in BIOS. Now whenever I boot up I get a "No Boot Device Found" message until I hit "Enter" at which point i'm allowed entry into my...
General Support
Solved delete "saved password" and "form data" from microsoft edge manually
Hello how can I delete "saved password" and "form data" of microsoft edge manually ?! after too much search in google .... I trid to delete some value of the following registry address HKEY_CURRENT_USER\SOFTWARE\Classes\Local...
Browsers and Email
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 17:21.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums