Jump to content

Should I delete these quarantined files - Registry Keys and Values?


Recommended Posts

Hey there everybody. I apologize if this has already been answered, but I wanted to get your advice on something as I have more than one question. My computer has been popping up with the black screen displaying "taskeng.exe" very quickly, and then it goes away. It usually only does this a bit after starting up and sometimes after opening Chrome. I looked this up and some people say it's fine, others say it could be a sign of a virus/spyware. I did open up task scheduler, go to the task scheduler library, and disabled a task called "User_Feed_Synchronization" after being advised to do so on a Microsoft forum regarding taskeng.exe issues. But apparently that didn't help, because I saw it again? Today I ran a scan with Malwarebytes and 6 threats were detected. I quarantined them, but have not deleted them yet. Should I? Do you think that would help my taskeng.exe problem? Problem is, after I did this scan, the taskeng.exe popup still came after the scan's restart. I will post my results here. Do you think the taskeng.exe is a virus, or don't worry about it? To anyone who replies, thank you so much!!!

 

-Scan Summary-
Scan Type: Custom Scan
Result: Completed
Objects Scanned: 227556
Threats Detected: 6
Threats Quarantined: 6
Time Elapsed: 12 hr, 5 min, 0 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 3
PUP.Optional.ASK, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2FA28606-DE77-4029-AF96-B231E3B8F827}, Quarantined, [478], [341071],1.0.4030
PUP.Optional.ASK, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2FA28606-DE77-4029-AF96-B231E3B8F827}, Quarantined, [478], [341071],1.0.4030
PUP.Optional.ASK, HKU\S-1-5-21-470504079-2056641531-4023931026-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2fa28606-de77-4029-af96-b231e3b8f827}, Quarantined, [478], [341071],1.0.4030

Registry Value: 3
PUP.Optional.ASK, HKU\S-1-5-21-470504079-2056641531-4023931026-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2fa28606-de77-4029-af96-b231e3b8f827}|URL, Quarantined, [478], [341071],1.0.4030
PUP.Optional.ASK, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2fa28606-de77-4029-af96-b231e3b8f827}|URL, Quarantined, [478], [341070],1.0.4030
PUP.Optional.ASK, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2fa28606-de77-4029-af96-b231e3b8f827}|URL, Quarantined, [478], [341070],1.0.4030

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 0
(No malicious items detected)

Physical Sector: 0
(No malicious items detected)
 

Link to post
Share on other sites

Hi all, I posted a thread earlier regarding this and here I am with my Farbar results (both FRST and Additional) as well as my Malwarebytes scan results. The issue that brought me here was my computer popping up with a black box that says "taskeng.exe" on the top. It would then disappear immediately. This happens pretty much every time I turn on my computer and/or open Chrome at some point. I've tried to look around at Microsoft forums and such for an answer to this question but I'm still not sure what's going on. I was told to see if is malware or not, check its location and make sure it's in  C:\Windows\System32, which it is. I also was told that disabling "User_Feed_Synchronization" would potentially disable the taskeng.exe box from popping up. went into Task Scheduler and tried to disable User_Feed_Synchronization and that hasn't stopped the black box. I'm curious if I go under Task Scheduler again and "Edit Trigger" and completely disable it through expiring it, if that would help or if that would harm my computer at all. Anyways, here are my two Farbar logs attached as well as the Malwarebytes scan. Thank you so much anyone willing to help!

malwarebytes.txt

Addition.txt

FRST.txt

Link to post
Share on other sites

Hello @imagesandwords and :welcome:

I wouldn't worry too much about leaving them in quarantine for at least a week to make sure no issues.

Let's go ahead and scan your system again to see if we can find anything.

 

Please run the following steps and post back the logs as an attachment when ready.

STEP 01

  • If you're already running Malwarebytes 3 then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
  • If you don't have Malwarebytes 3 installed yet please download it from here and install it.
  • Once installed then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
  • Once the scan is completed click on the Export Summary button and save the file as a Text file to your desktop or other location you can find, and attach that log on your next reply.
  • If Malwarebytes won't run then please skip to the next step and let me know on your next reply.

STEP 02

Please download AdwCleaner by Malwarebytes and save the file to your Desktop.

  • Right-click on the program and select RunAsAdmin.jpg Run as Administrator to start the tool.
  • Accept the Terms of use.
  • Wait until the database is updated.
  • Click Scan.
  • When finished, please click Clean.
  • Your PC should reboot now if any items were found.
  • After reboot, a log file will be opened. Copy its content into your next reply.

 

RESTART THE COMPUTER Before running Step 3

STEP 03
Please download the Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

  • Double-click to run it. When the tool opens, click Yes to disclaimer.
  • Press the Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  • The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a check mark here.
  • Please attach the Additions.txt log to your reply as well.

 

Thanks

Ron

 

Link to post
Share on other sites
  • 2 weeks later...

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Thanks

 

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.