Wallpaper got changed automatically to manager's photo

N

Newbie

We just had a few computers where the wallpaper background got changed to
manager's picture all of a sudden? Checked the task manager and it got a
scheduled task called "AT1", details as below:

RUN: C:\Windows\wc.exe C:\Windows\icon.jpg 0

Comments: Created by NetScheduleJobAdd

Is there any way I can trace who created the job? The mystery is how does
the system know how to retrieve manager's photo?

Thanks for your help.
 
N

Nil

We just had a few computers where the wallpaper background got
changed to manager's picture all of a sudden? Checked the task
manager and it got a scheduled task called "AT1", details as
below:

RUN: C:\Windows\wc.exe C:\Windows\icon.jpg 0

Comments: Created by NetScheduleJobAdd

Is there any way I can trace who created the job? The mystery is
how does the system know how to retrieve manager's photo?

Probably not. You might be able to tell when it was done by looking at
the file dates for wc.exe and icon.jpg. I'm sure you will find that
"icon.jog" is the picture of the manager. Either the picture was placed
in the Windows directory by the practical joker, or the wallpaper
changer program can be told where to retrieve it from on the network.
If you can find its options, that might provide another clue.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top