Inlaid.exe scheduled tasks slow PC following bad infection - Virus, Trojan, Spyware, and Malware Removal Help (2024)

Chapster14

• 
• Members
• 5 posts
• OFFLINE

• Local time:04:38 AM

Hello,

A few months ago I had a very bad virus infection on my PC. Passwords taken and alerts from many online retailers, bank, etc., for suspicious login attempts from apparent locations around the globe. Even had Clearscore (credit rating provider) warn me that my email and passwords were available on the "dark web".

Took a long time to change all my passwords, and I used lots of antivirus and spyware programs to clear my PC (I thought).

Eset online scanner seemed to find the most things.

However, since then I've had slowdowns and my mouse cursor freezing and lagging. Very irritating.

While looking into why Windows Defender is constantly using 25% CPU, I was following a guide related to the problem and accidentally I found I have scheduled tasks in Task Scheduler Library with names made of random characters. 12 schedules I can see so far with one showing as running.

Each one has a dozen or so subfolders, with the last subfolder actually containing information. Using one as an example, that last subfolder has under location: \qzo24q\ijf5nm\paxno7\il65gc\qkmy9t\kh36e3\3fibtc\i11h6z\xypa0w\x3q5dp\pmp3l0\yakio5\dbc4cp\zxp58j\jjoi7z\s9jzbw and under "Actions" it has: %localappdata%\cup.exe. A different one has "Actions" as %localappdata%\inlaid.exe.config.

Inlaid.exe.config is in appdata/local. I also see there is a file called app.exe.config in there too but no cup.exe.

When I open Task Manager, there are three services running which are completely blank, no writing, just an icon of a cog. Right clicking and choosing open file location takes me to svchost.exe in Windows/sysWOW64.

I also am having problems printing, although I don't know what is causing that. I have to stop the print spooler process, start it again, then I can print. Perhaps unconnected.

Edited by Chapster14, 31 May 2024 - 09:05 PM.

Oh My!

Adware and Spyware and Malware



• 
• Malware Response Instructor
• 57,971 posts
• OFFLINE

• Gender:Male
• Location:California
• Local time:08:38 PM

Greetings and to BleepingComputer's Virus/Trojan/Spyware/Malware Removal forum.

My name is Oh My! and I am here to help you! Now that we are "friends" please call me Gary.

===================================================

Ground Rules:

• First, please keep in mind most of us at BleepingComputer volunteer our assistance for your benefit in your time of need. Please try to match our commitment to you with your patience toward us.
• It is important to not run any tools or take any steps other than those I will provide for you.
• Please perform all steps in the order they are listed. If things are not clear or you experience problems be sure to stop and let me know.
• Please copy and paste all logs into your post unless otherwise requested.
• When your computer is clean I will let you know, provide instructions to remove tools and reports, and offer you information about how you can combat future infections.
• If you do not reply to your topic after 5 days I will assume it has been abandoned and I will close it.

===================================================

Now that I am assisting you, you can expect that I will be very responsive to your situation. If you are able,

so that we can try to resolve your issues effectively and efficiently. If you are going to be delayed please be considerate and let me know.

Please allow me some time to review what you have posted.

Oh My!

Adware and Spyware and Malware



• 
• Malware Response Instructor
• 57,971 posts
• OFFLINE

• Gender:Male
• Location:California
• Local time:08:38 PM

Unfortunately there is evidence of unauthorized/illegal software on your computer. I am going to request you completely uninstall all products requiring proper activation for which you do not have a valid Product Key, including all "cracked" software. If you prefer to leave the program(s) on your computer let me know that and I will be closing the Topic.

If you are willing to remove all cracked software run a new FRST scan and copy/paste both reports in your reply.

Oh My!

Adware and Spyware and Malware



• 
• Malware Response Instructor
• 57,971 posts
• OFFLINE

• Gender:Male
• Location:California
• Local time:08:38 PM

Greetings,

===================================================

Do You Still Need Help?

It has been 3 days since my last post.

• Do you still need help with this?
• If you have not replied within 48 hours I will assume you have abandoned the Topic and it will be closed.

Oh My!

Adware and Spyware and Malware



• 
• Malware Response Instructor
• 57,971 posts
• OFFLINE

• Gender:Male
• Location:California
• Local time:08:38 PM