Disable "1ED570D2-8DDF-3F78-27CD-13850F70022F" Scheduled Task on Windows 7

Q

What is the scheduled task "1ED570D2-8DDF-3F78-27CD-13850F70022F" on my Windows 7 computer?

✍: FYIcenter.com

A

"1ED570D2-8DDF-3F78-27CD-13850F70022F" is a suspicious scheduled task on Windows 7 system.

You will see "1ED570D2-8DDF-3F78-27CD-13850F70022F" listed on Task Scheduler with the following information:

Name: {1ED570D2-8DDF-3F78-27CD-13850F70022F}
Actions: Start a program - C:\Users\...\AppData\Roaming\1ED570~1\sync.exe
Triggers: Daily - .At 12:35 AM every day - After triggered, repeat every 1 hour for a duration of 1 day
Conditions: None
History: 
   Information 4:17:16 Task completed
   Information 4:17:15 Action completed
   Information 4:16:58 Created Task Process
   Information 4:16:57 Action Started
   Information 4:16:56 Task Started
   Information 4:16:55 Task Engine received message to start task
   Information 4:16:54 Task triggered on scheduler
   ...

Programe file information about "sync.exe":

File name: sync.exe
File path: C:\users\...\AppData\Roaming\1ed570d28ddf3f7827cd13850f70022f\sync.exe
File size: 2736640 bytes
Last modified time: 5/6/2013 1:06:52 AM
File description: 
File version: 
Company name: 

"sync.exe" is an unknown program with no description and publisher name, and located in an unusual program folder. It is probably installed as part of the WinZip installation.

If you run "sync.exe" directly, you will see a blank screen with a title of "Cakasobicaso" as shown below:
Windows Domain, Account, and Controller

It is strongly recommended to disable "1ED570D2-8DDF-3F78-27CD-13850F70022F" as a scheduled task to keep your computer more secure. And consider to delete C:\users\...\AppData\Roaming\1ed570d28ddf3f7827cd13850f70022f\ folder.

 

Delete or Disable Scheduled Tasks on Windows 7

⇒⇒Windows 7 Security

2017-03-25, 278👍, 0💬