Atitit.木马病毒自动启动-------------win7计划任务的管理
1. 计划任务的Windows系统中取代AT 的schtasks命令1
2.1. 计划任务列表管理gui版本 %windir%\system32\taskschd.msc /s1
6. Qa schtasks在win7下提示错误:无法加载列资源 3
1. 计划任务的Windows系统中取代AT 的schtasks命令
、SchTasks.exe 取代了包含在 Windows 早期版本中的工具 At.exe。XP、Vista、Windows7、Windows2003/2008等系统中均可以使用。
2. Win本身的系统计划任务列表
2.1. 计划任务列表管理gui版本 %windir%\system32\taskschd.msc /s
2.2. 计划任务列表管理cli版本
作者:: 绰号:老哇的爪子 （ 全名：：Attilax Akbar Al Rapanui 阿提拉克斯 阿克巴 阿尔 拉帕努伊 ） 汉字名：艾龙， EMAIL:1466519819@qq.com
转载请注明来源： http://blog.csdn.net/attilax
3. 360的列表接口ui
4. task Scheduler的计划任务服务
服务对话框中找到名称为Task Scheduler的计划任务服务，
5. 错误日志
、要确认计划运行或要找出计划不运行的原因，请查看“任务计划”服务事务日志 Systemroot\SchedLgU.txt。该日志记录了由包括“计划任务”和 SchTasks.exe 在内的所有使用该服务的工具启动的尝试运行。
6. Qa schtasks在win7下提示错误:无法加载列资源
Char encode问题...
查看编码
C:\Users\Administrator>chcp
活动代码页: 936
如使用 936中文GBK编码的话
schtasks.exe /query 会报错
错误: 无法加载列资源。
chcp 65001 就是换成UTF-8代码页走ok兰...
7. 添加一个atitask1任务以后
360的列表显示如下图片
Cli显示
Folder: \
TaskName Next Run Time Status
======================================== ====================== ===============
Adobe Flash Player Updater Disabled
atitask1 2016/3/10 14:51:06 Ready
ComputerZ-Tray Disabled
DandelionStarter Disabled
Google Pinyin Daemon Disabled
PowerWord-Notify-AT6T5TKUVHGT0IG_Adminis Disabled
PowerWord-Update-AT6T5TKUVHGT0IG_Adminis Disabled
QQBrowser Updater Task 2016/3/9 16:50:00 Ready
QQBrowser Updater Task(Core) N/A Ready
SogouImeMgr Disabled
WpsNotifyTask_Administrator 2016/3/9 15:00:00 Ready
WpsUpdateTask_Administrator 2016/3/9 15:00:00 Ready
8. 自己创建一个任务通过cli
schtasks /create /tn atitask0309_153509_775 /tr "'D:\workspace 空格\AtiPlatf\0screenUtil.bat'" /sc MINUTE /mo 2
----echo:
成功: 成功创建计划任务 "atitask0309_153509_775"。
注意:: 空格的双引号转义..要多传导一个双引号,不个单个引号trans类k...
9. Schtasks 显示的输出如下
Folder: \
TaskName Next Run Time Status
======================================== ====================== ===============
Adobe Flash Player Updater Disabled
ComputerZ-Tray Disabled
DandelionStarter Disabled
Google Pinyin Daemon Disabled
PowerWord-Notify-AT6T5TKUVHGT0IG_Adminis Disabled
PowerWord-Update-AT6T5TKUVHGT0IG_Adminis Disabled
QQBrowser Updater Task 2016/3/9 14:50:00 Ready
QQBrowser Updater Task(Core) N/A Ready
SogouImeMgr Disabled
WpsNotifyTask_Administrator 2016/3/9 15:00:00 Ready
WpsUpdateTask_Administrator 2016/3/9 15:00:00 Ready
Folder: \Apple
TaskName Next Run Time Status
======================================== ====================== ===============
AppleSoftwareUpdate Disabled
Folder: \Microsoft
TaskName Next Run Time Status
======================================== ====================== ===============
INFO: There are no scheduled tasks presently available at your access level.
Folder: \Microsoft\Windows
TaskName Next Run Time Status
======================================== ====================== ===============
INFO: There are no scheduled tasks presently available at your access level.
Folder: \Microsoft\Windows\Active Directory Rights Management Services Client
TaskName Next Run Time Status
======================================== ====================== ===============
AD RMS Rights Policy Template Management Disabled
AD RMS Rights Policy Template Management N/A Ready
Folder: \Microsoft\Windows\AppID
TaskName Next Run Time Status
======================================== ====================== ===============
PolicyConverter Disabled
VerifiedPublisherCertStoreCheck Disabled
Folder: \Microsoft\Windows\Application Experience
TaskName Next Run Time Status
======================================== ====================== ===============
AitAgent Disabled
Folder: \Microsoft\Windows\Autochk
TaskName Next Run Time Status
======================================== ====================== ===============
Proxy Disabled
Folder: \Microsoft\Windows\Bluetooth
TaskName Next Run Time Status
======================================== ====================== ===============
UninstallDeviceTask N/A Ready
Folder: \Microsoft\Windows\CertificateServicesClient
TaskName Next Run Time Status
======================================== ====================== ===============
SystemTask N/A Ready
UserTask N/A Ready
UserTask-Roam Disabled
Folder: \Microsoft\Windows\Customer Experience Improvement Program
TaskName Next Run Time Status
======================================== ====================== ===============
Consolidator 2016/3/9 18:00:00 Could not start
KernelCeipTask 2016/3/10 3:30:00 Ready
UsbCeip 2016/3/11 1:30:00 Ready
Folder: \Microsoft\Windows\Defrag
TaskName Next Run Time Status
======================================== ====================== ===============
ScheduledDefrag Disabled
Folder: \Microsoft\Windows\Diagnosis
TaskName Next Run Time Status
======================================== ====================== ===============
Scheduled 2016/3/13 1:00:00 Ready
Folder: \Microsoft\Windows\Location
TaskName Next Run Time Status
======================================== ====================== ===============
Notifications Disabled
Folder: \Microsoft\Windows\Maintenance
TaskName Next Run Time Status
======================================== ====================== ===============
WinSAT 2016/3/13 1:00:00 Ready
Folder: \Microsoft\Windows\MemoryDiagnostic
TaskName Next Run Time Status
======================================== ====================== ===============
CorruptionDetector N/A Ready
DecompressionFailureDetector N/A Ready
Folder: \Microsoft\Windows\MUI
TaskName Next Run Time Status
======================================== ====================== ===============
LPRemove N/A Ready
Folder: \Microsoft\Windows\Multimedia
TaskName Next Run Time Status
======================================== ====================== ===============
SystemSoundsService N/A Running
Folder: \Microsoft\Windows\NetTrace
TaskName Next Run Time Status
======================================== ====================== ===============
GatherNetworkInfo Disabled
Folder: \Microsoft\Windows\PerfTrack
TaskName Next Run Time Status
======================================== ====================== ===============
BackgroundConfigSurveyor Disabled
Folder: \Microsoft\Windows\PLA
TaskName Next Run Time Status
======================================== ====================== ===============
INFO: There are no scheduled tasks presently available at your access level.
Folder: \Microsoft\Windows\Power Efficiency Diagnostics
TaskName Next Run Time Status
======================================== ====================== ===============
AnalyzeSystem Disabled
Folder: \Microsoft\Windows\RAC
TaskName Next Run Time Status
======================================== ====================== ===============
RacTask 2016/3/9 15:05:17 Ready
Folder: \Microsoft\Windows\Ras
TaskName Next Run Time Status
======================================== ====================== ===============
MobilityManager N/A Ready
Folder: \Microsoft\Windows\Registry
TaskName Next Run Time Status
======================================== ====================== ===============
RegIdleBackup 2016/3/19 0:25:49 Ready
Folder: \Microsoft\Windows\RemoteAssistance
TaskName Next Run Time Status
======================================== ====================== ===============
RemoteAssistanceTask Disabled
Folder: \Microsoft\Windows\Shell
TaskName Next Run Time Status
======================================== ====================== ===============
WindowsParentalControls Disabled
WindowsParentalControlsMigration Disabled
Folder: \Microsoft\Windows\SoftwareProtectionPlatform
TaskName Next Run Time Status
======================================== ====================== ===============
SvcRestartTask Disabled
Folder: \Microsoft\Windows\SystemRestore
TaskName Next Run Time Status
======================================== ====================== ===============
SR Disabled
Folder: \Microsoft\Windows\Task Manager
TaskName Next Run Time Status
======================================== ====================== ===============
Interactive N/A Ready
Folder: \Microsoft\Windows\Tcpip
TaskName Next Run Time Status
======================================== ====================== ===============
IpAddressConflict1 N/A Ready
IpAddressConflict2 N/A Ready
Folder: \Microsoft\Windows\TextServicesFramework
TaskName Next Run Time Status
======================================== ====================== ===============
MsCtfMonitor N/A Running
Folder: \Microsoft\Windows\Time Synchronization
TaskName Next Run Time Status
======================================== ====================== ===============
SynchronizeTime 2016/3/13 1:00:00 Ready
Folder: \Microsoft\Windows\UPnP
TaskName Next Run Time Status
======================================== ====================== ===============
UPnPHostConfig N/A Ready
Folder: \Microsoft\Windows\User Profile Service
TaskName Next Run Time Status
======================================== ====================== ===============
HiveUploadTask Disabled
Folder: \Microsoft\Windows\WDI
TaskName Next Run Time Status
======================================== ====================== ===============
ResolutionHost N/A Ready
Folder: \Microsoft\Windows\Windows Error Reporting
TaskName Next Run Time Status
======================================== ====================== ===============
QueueReporting N/A Ready
Folder: \Microsoft\Windows\Windows Filtering Platform
TaskName Next Run Time Status
======================================== ====================== ===============
BfeOnServiceStartTypeChange Disabled
Folder: \Microsoft\Windows\Windows Media Sharing
TaskName Next Run Time Status
======================================== ====================== ===============
UpdateLibrary N/A Ready
Folder: \Microsoft\Windows\WindowsBackup
TaskName Next Run Time Status
======================================== ====================== ===============
ConfigNotification Disabled
Folder: \Microsoft\Windows\WindowsColorSystem
TaskName Next Run Time Status
======================================== ====================== ===============
Calibration Loader Disabled
10. 引用
使用命令行创建计划任务(windows)_百度文库.htm