Unusual task in Task Scheduler

XavierGaming

Level 3
Thread author
Verified
Oct 18, 2015
102
530
167
Unknown
Early in this morning, I decided to clean install my system. I noticed a task after I've set up all my drivers and software named "CreateExplorerShellUnelevatedTask" that executes explorer.exe from the Windows directory and has "/NOUACCHECK " an argument. It's author is "ExplorerShellEnelevated" It is triggered to launch at task creation/modification.

Is this normal? I don't notice any malicious activity or any weird explorer.exe behaviour whatsoever. If this task indeed is malicious, I do not need any assistance, as I know what to do afterwards.

If you want to help me but have no knowledge on what is going on, you can view your Task Scheduler and if you see the same task and reply to this thread. Thank you :D
 
Last edited:
Sorry task scheduler and task manager are the same thing?
Anyway I suppose you want us to check our active processes

Wait I have to turn on PC
 
Last edited:
  • Like
Reactions: XavierGaming
That's a task implemented in some builds of Windows 10 before November Update came up. Did ISO file was clean and download from a trusted source? What AdwCleaner says?
 
i don't think i see it in my pc. and try to google it: other persons were suggested to scan with anti-everything
 
  • Like
Reactions: AtlBo
If I am not wrong, some software like Ccleaner, etc... have option to not invoke UAC on run & if you enable the option then an entry is created in TaskScheduler.
 
  • Like
Reactions: AtlBo
Backup is done and I deleted the task. Nothing has changed, I think the task was not necessary. Many thanks, @BoraMurdar. :D


If I am not wrong, some software like Ccleaner, etc... have option to not invoke UAC on run & if you enable the option then an entry is created in TaskScheduler.

CCleaner has a separate entry to skip UAC it indeed is created in the Task Scheduler. :D


Sorry task scheduler and task manager are the same thing?
Anyway I suppose you want us to check our active processes

Wait I have to turn on PC

TM and TS are two different things. The TS is used to schedule tasks, skip UAC, automate stuff and etc. I suggest that you learn about it more. It's a pretty useful tool. :D

For all who helped, thank you. :D
 
I found that line today after running FRST under addition.txt

C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

Thing is I checked task scheduler and couldn't find it. Neither with Comodo Killswitch.
 
  • Like
Reactions: AtlBo