msfeeds*.* self-scheduled task

[Marek Kalisz]

I have some scheduled by myself tasks. Today I discovered that I have also
something like
User_Feed_Synchronization-{B675BB44-7EBB-4...-4A4D-907E8197-81971EDAA4F6}
(periods mark charcters I didn't catch). It has a remark "multiple
schedules" but is scheduled only once every day. Properties shows:
"Windows\system32\msfeedssync.exe.sync"
In the system32 subdirectory I founded a few files msfeeds*.*. Their
properties shows a legit company - Microsoft.
I also looked into Microsoft resources searching for those files. Search
didn't find any mentions of those. So, what are they and for what
reason/function?
Any help...
Marek Kalisz

 

[Wesley Vogel]

msfeedssync.exe has something to do with Internet Explorer 7 Beta.

User_Feed_Synchronization-{08191A17-E708-4B0E-9015-1F6D3CABEAD6}" ->
launches: "C:\WINDOWS\system32\msfeedssync.exe sync" [MS]

"User_Feed_Synchronization-{4B6D7030-2632-41DA-AD17-740A3BF8F0B8}" ->
launches: "C:\WINDOWS\system32\msfeedssync.exe sync" [MS]

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Marek Kalisz]

Thanks for this tip. But - maybe IE7Beta. However, I have IE7 installed
already a few months. Listing in Scheduled Tasks showed up probably just
yesterday (it wasn't before). Also, since yesterday, my CPU and other
resources were overloaded with something and system was very sluggish (to do
some work I had to constantly reboot it to have a fresh start). This task
started work 9:57 AM and was slowing my system even more. Finally, after
abt. 40 min. I stopped iy and deleted entry from Scheduled tasks. Now
somehow my system works a little better. So?
What also bother me that there I couldn't find any reference in Microsoft
base to this process and related files in my \system32 subdirectory.
I feel (and know) that my system is constantly under attack and have several
safeguards (AV, A-spam, etc.) installed. Nothing is perfect, however.
Marek Kalisz

msfeedssync.exe has something to do with Internet Explorer 7 Beta.

User_Feed_Synchronization-{08191A17-E708-4B0E-9015-1F6D3CABEAD6}" ->
launches: "C:\WINDOWS\system32\msfeedssync.exe sync" [MS]

"User_Feed_Synchronization-{4B6D7030-2632-41DA-AD17-740A3BF8F0B8}" ->
launches: "C:\WINDOWS\system32\msfeedssync.exe sync" [MS]

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

I have some scheduled by myself tasks. Today I discovered that I have
also something like
User_Feed_Synchronization-{B675BB44-7EBB-4...-4A4D-907E8197-81971EDAA4F6}
(periods mark charcters I didn't catch). It has a remark "multiple
schedules" but is scheduled only once every day. Properties shows:
"Windows\system32\msfeedssync.exe.sync"
In the system32 subdirectory I founded a few files msfeeds*.*. Their
properties shows a legit company - Microsoft.
I also looked into Microsoft resources searching for those files. Search
didn't find any mentions of those. So, what are they and for what
reason/function?
Any help...
Marek Kalisz

 

[Wesley Vogel]

What's the Description at the top of msfeedssync.exe Properties on the
Version tab?

Right click msfeedssync.exe | Properties | Version tab

There should be a description on both General and Version tabs.

This info is part of the file and not all files have real good info.
Especially if it is spyware or a virus. Or whoever put it together was lazy
or secretive.

On the Version tab.

Click a category on the left to display the information on the right.

Other version information
Item Name:
Company
File Version
Internal Name
Language
Original File Name
Product Name
Product Version

Sometimes, if someone was really industrious, there is info under the
Summary tab also.

16-bit programs do not have a Version tab.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

Thanks for this tip. But - maybe IE7Beta. However, I have IE7 installed
already a few months. Listing in Scheduled Tasks showed up probably just
yesterday (it wasn't before). Also, since yesterday, my CPU and other
resources were overloaded with something and system was very sluggish (to
do some work I had to constantly reboot it to have a fresh start). This
task started work 9:57 AM and was slowing my system even more. Finally,
after abt. 40 min. I stopped iy and deleted entry from Scheduled tasks.
Now somehow my system works a little better. So?
What also bother me that there I couldn't find any reference in Microsoft
base to this process and related files in my \system32 subdirectory.
I feel (and know) that my system is constantly under attack and have
several safeguards (AV, A-spam, etc.) installed. Nothing is perfect,
however. Marek Kalisz

msfeedssync.exe has something to do with Internet Explorer 7 Beta.

User_Feed_Synchronization-{08191A17-E708-4B0E-9015-1F6D3CABEAD6}" ->
launches: "C:\WINDOWS\system32\msfeedssync.exe sync" [MS]

"User_Feed_Synchronization-{4B6D7030-2632-41DA-AD17-740A3BF8F0B8}" ->
launches: "C:\WINDOWS\system32\msfeedssync.exe sync" [MS]

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

I have some scheduled by myself tasks. Today I discovered that I have
also something like
User_Feed_Synchronization-{B675BB44-7EBB-4...-4A4D-907E8197-81971EDAA4F6}
(periods mark charcters I didn't catch). It has a remark "multiple
schedules" but is scheduled only once every day. Properties shows:
"Windows\system32\msfeedssync.exe.sync"
In the system32 subdirectory I founded a few files msfeeds*.*. Their
properties shows a legit company - Microsoft.
I also looked into Microsoft resources searching for those files.
Search didn't find any mentions of those. So, what are they and for
what reason/function?
Any help...
Marek Kalisz

 

[Marek Kalisz]

Thanks for attention. I did check the properties of a fe with similarly
starting names files and realized that all are related to the gadget
"WhoSLocking" which supposedly should show what processes are running behind
DLLs. I did Google serach and in a few reports authors mentioned that
WhoSLocking didn't help them at all. The mysterious part is that I had it
installed about a week ago, together with some Rootkits searchers, and only
recently this culprit installed something as Sxheduled Task. Also, a few
files that I checked properties show as a maker MS. Also, this program is
not listed in Cntrol Panel installed programs. So, I'm going soon to check
all dependencies related to this gadget and try to save details of all files
related. Then I'll send a list in my next message. There is evidently
something wrong with this gadget.
Marek Kalisz
PS. After that I'll try to remove it from my system, of course.
PS2: I realized now that I should rather follow this thread in security
group but I'm still just a newsgroups dummy.

What's the Description at the top of msfeedssync.exe Properties on the
Version tab?

Right click msfeedssync.exe | Properties | Version tab

There should be a description on both General and Version tabs.

This info is part of the file and not all files have real good info.
Especially if it is spyware or a virus. Or whoever put it together was
lazy
or secretive.

On the Version tab.

Click a category on the left to display the information on the right.

Other version information
Item Name:
Company
File Version
Internal Name
Language
Original File Name
Product Name
Product Version

Sometimes, if someone was really industrious, there is info under the
Summary tab also.

16-bit programs do not have a Version tab.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

Thanks for this tip. But - maybe IE7Beta. However, I have IE7 installed
already a few months. Listing in Scheduled Tasks showed up probably just
yesterday (it wasn't before). Also, since yesterday, my CPU and other
resources were overloaded with something and system was very sluggish (to
do some work I had to constantly reboot it to have a fresh start). This
task started work 9:57 AM and was slowing my system even more. Finally,
after abt. 40 min. I stopped iy and deleted entry from Scheduled tasks.
Now somehow my system works a little better. So?
What also bother me that there I couldn't find any reference in Microsoft
base to this process and related files in my \system32 subdirectory.
I feel (and know) that my system is constantly under attack and have
several safeguards (AV, A-spam, etc.) installed. Nothing is perfect,
however. Marek Kalisz

msfeedssync.exe has something to do with Internet Explorer 7 Beta.

User_Feed_Synchronization-{08191A17-E708-4B0E-9015-1F6D3CABEAD6}" ->
launches: "C:\WINDOWS\system32\msfeedssync.exe sync" [MS]

"User_Feed_Synchronization-{4B6D7030-2632-41DA-AD17-740A3BF8F0B8}" ->
launches: "C:\WINDOWS\system32\msfeedssync.exe sync" [MS]

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In Marek Kalisz <[email protected]> hunted and pecked:
I have some scheduled by myself tasks. Today I discovered that I have
also something like
User_Feed_Synchronization-{B675BB44-7EBB-4...-4A4D-907E8197-81971EDAA4F6}
(periods mark charcters I didn't catch). It has a remark "multiple
schedules" but is scheduled only once every day. Properties shows:
"Windows\system32\msfeedssync.exe.sync"
In the system32 subdirectory I founded a few files msfeeds*.*. Their
properties shows a legit company - Microsoft.
I also looked into Microsoft resources searching for those files.
Search didn't find any mentions of those. So, what are they and for
what reason/function?
Any help...
Marek Kalisz

 

[Wesley Vogel]

What's the Description at the top of msfeedssync.exe Properties on the
Version tab?

Start | Run | Type: system32 | Click OK |
Hit your M Key a couple of times | Navigate to msfeedssync.exe |
Right click msfeedssync.exe | Properties | Version tab

There should be a description on both General and Version tabs.

This info is part of the file and not all files have real good info.
Especially if it is spyware or a virus. Or whoever put it together was lazy
or secretive.

On the Version tab.

Click a category on the left to display the information on the right.

Other version information
Item Name:
Company
File Version
Internal Name
Language
Original File Name
Product Name
Product Version

Sometimes, if someone was really industrious, there is info under the
Summary tab also.

16-bit programs do not have a Version tab.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

Thanks for attention. I did check the properties of a fe with similarly
starting names files and realized that all are related to the gadget
"WhoSLocking" which supposedly should show what processes are running
behind DLLs. I did Google serach and in a few reports authors mentioned
that WhoSLocking didn't help them at all. The mysterious part is that I
had it installed about a week ago, together with some Rootkits searchers,
and only recently this culprit installed something as Sxheduled Task.
Also, a few files that I checked properties show as a maker MS. Also,
this program is not listed in Cntrol Panel installed programs. So, I'm
going soon to check all dependencies related to this gadget and try to
save details of all files related. Then I'll send a list in my next
message. There is evidently something wrong with this gadget.
Marek Kalisz
PS. After that I'll try to remove it from my system, of course.
PS2: I realized now that I should rather follow this thread in security
group but I'm still just a newsgroups dummy.

What's the Description at the top of msfeedssync.exe Properties on the
Version tab?

Right click msfeedssync.exe | Properties | Version tab

There should be a description on both General and Version tabs.

This info is part of the file and not all files have real good info.
Especially if it is spyware or a virus. Or whoever put it together was
lazy
or secretive.

On the Version tab.

Click a category on the left to display the information on the right.

Other version information
Item Name:
Company
File Version
Internal Name
Language
Original File Name
Product Name
Product Version

Sometimes, if someone was really industrious, there is info under the
Summary tab also.

16-bit programs do not have a Version tab.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

Thanks for this tip. But - maybe IE7Beta. However, I have IE7
installed already a few months. Listing in Scheduled Tasks showed up
probably just yesterday (it wasn't before). Also, since yesterday, my
CPU and other resources were overloaded with something and system was
very sluggish (to do some work I had to constantly reboot it to have a
fresh start). This task started work 9:57 AM and was slowing my system
even more. Finally, after abt. 40 min. I stopped iy and deleted entry
from Scheduled tasks. Now somehow my system works a little better. So?
What also bother me that there I couldn't find any reference in
Microsoft base to this process and related files in my \system32
subdirectory.
I feel (and know) that my system is constantly under attack and have
several safeguards (AV, A-spam, etc.) installed. Nothing is perfect,
however. Marek Kalisz

msfeedssync.exe has something to do with Internet Explorer 7 Beta.

User_Feed_Synchronization-{08191A17-E708-4B0E-9015-1F6D3CABEAD6}" ->
launches: "C:\WINDOWS\system32\msfeedssync.exe sync" [MS]

"User_Feed_Synchronization-{4B6D7030-2632-41DA-AD17-740A3BF8F0B8}" ->
launches: "C:\WINDOWS\system32\msfeedssync.exe sync" [MS]

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In Marek Kalisz <[email protected]> hunted and pecked:
I have some scheduled by myself tasks. Today I discovered that I have
also something like
User_Feed_Synchronization-{B675BB44-7EBB-4...-4A4D-907E8197-81971EDAA4F6}
(periods mark charcters I didn't catch). It has a remark "multiple
schedules" but is scheduled only once every day. Properties shows:
"Windows\system32\msfeedssync.exe.sync"
In the system32 subdirectory I founded a few files msfeeds*.*. Their
properties shows a legit company - Microsoft.
I also looked into Microsoft resources searching for those files.
Search didn't find any mentions of those. So, what are they and for
what reason/function?
Any help...
Marek Kalisz

 

[Marek Kalisz]

Sorry for delay but - work, work, work... Now all 5 files msfeed*.* have a
proper, I guess, information related to Microsoft. However, when my problem
started and I was checking properties, all those files showed in General tab
Opens with information "WhoSLocking MFC App". Now at same place is open
with: "Microsoft Feeds Synchronization". Also, Versions tab in a few
listing showd WhoSLocking instead, ad is now, Microsoft. I somehow deleted
manually (the only way) this WhoSLocking gadget, cleaned system a few times
(AV, anti-spywares, Registry Mechanic and now everything came (I think) to
normal. It seem that the problem was related to this (useful sometime,
maybe) gadget WhoSLocking and MS feeds through IE7 (yes, I took a look into
this tab and closed it immediately). I don't need to waste time reading MS
internal memos. But, again, even I don't used feeds, when something
installed feeding as Scheduled task, something was feeding my sytem and
feeding without stopping for over an hour and a half until I killed this
process myself.
Anyway, thanks for tips and help.
Marek Kalisz.

What's the Description at the top of msfeedssync.exe Properties on the
Version tab?

Start | Run | Type: system32 | Click OK |
Hit your M Key a couple of times | Navigate to msfeedssync.exe |
Right click msfeedssync.exe | Properties | Version tab

There should be a description on both General and Version tabs.

This info is part of the file and not all files have real good info.
Especially if it is spyware or a virus. Or whoever put it together was
lazy
or secretive.

On the Version tab.

Click a category on the left to display the information on the right.

Other version information
Item Name:
Company
File Version
Internal Name
Language
Original File Name
Product Name
Product Version

Sometimes, if someone was really industrious, there is info under the
Summary tab also.

16-bit programs do not have a Version tab.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

Thanks for attention. I did check the properties of a fe with similarly
starting names files and realized that all are related to the gadget
"WhoSLocking" which supposedly should show what processes are running
behind DLLs. I did Google serach and in a few reports authors mentioned
that WhoSLocking didn't help them at all. The mysterious part is that I
had it installed about a week ago, together with some Rootkits searchers,
and only recently this culprit installed something as Sxheduled Task.
Also, a few files that I checked properties show as a maker MS. Also,
this program is not listed in Cntrol Panel installed programs. So, I'm
going soon to check all dependencies related to this gadget and try to
save details of all files related. Then I'll send a list in my next
message. There is evidently something wrong with this gadget.
Marek Kalisz
PS. After that I'll try to remove it from my system, of course.
PS2: I realized now that I should rather follow this thread in security
group but I'm still just a newsgroups dummy.

What's the Description at the top of msfeedssync.exe Properties on the
Version tab?

Right click msfeedssync.exe | Properties | Version tab

There should be a description on both General and Version tabs.

This info is part of the file and not all files have real good info.
Especially if it is spyware or a virus. Or whoever put it together was
lazy
or secretive.

On the Version tab.

Click a category on the left to display the information on the right.

Other version information
Item Name:
Company
File Version
Internal Name
Language
Original File Name
Product Name
Product Version

Sometimes, if someone was really industrious, there is info under the
Summary tab also.

16-bit programs do not have a Version tab.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In Marek Kalisz <[email protected]> hunted and pecked:
Thanks for this tip. But - maybe IE7Beta. However, I have IE7
installed already a few months. Listing in Scheduled Tasks showed up
probably just yesterday (it wasn't before). Also, since yesterday, my
CPU and other resources were overloaded with something and system was
very sluggish (to do some work I had to constantly reboot it to have a
fresh start). This task started work 9:57 AM and was slowing my system
even more. Finally, after abt. 40 min. I stopped iy and deleted entry
from Scheduled tasks. Now somehow my system works a little better. So?
What also bother me that there I couldn't find any reference in
Microsoft base to this process and related files in my \system32
subdirectory.
I feel (and know) that my system is constantly under attack and have
several safeguards (AV, A-spam, etc.) installed. Nothing is perfect,
however. Marek Kalisz

msfeedssync.exe has something to do with Internet Explorer 7 Beta.

User_Feed_Synchronization-{08191A17-E708-4B0E-9015-1F6D3CABEAD6}" ->
launches: "C:\WINDOWS\system32\msfeedssync.exe sync" [MS]

"User_Feed_Synchronization-{4B6D7030-2632-41DA-AD17-740A3BF8F0B8}" ->
launches: "C:\WINDOWS\system32\msfeedssync.exe sync" [MS]

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In Marek Kalisz <[email protected]> hunted and pecked:
I have some scheduled by myself tasks. Today I discovered that I
have
also something like

User_Feed_Synchronization-{B675BB44-7EBB-4...-4A4D-907E8197-81971EDAA4F6}
(periods mark charcters I didn't catch). It has a remark "multiple
schedules" but is scheduled only once every day. Properties shows:
"Windows\system32\msfeedssync.exe.sync"
In the system32 subdirectory I founded a few files msfeeds*.*. Their
properties shows a legit company - Microsoft.
I also looked into Microsoft resources searching for those files.
Search didn't find any mentions of those. So, what are they and for
what reason/function?
Any help...
Marek Kalisz