Link to home
Start Free TrialLog in
Avatar of GSLBermuda
GSLBermuda

asked on

Can I trace or audit Remote Scheduled Task (at.exe) Commands?

I have some virus that remotely schedules tasks on other computers and that made me think:

On the machine that the task is created on, is it possible to see from which machine that task was actually created? I assume using auditing it should be possible to trace this?

Any ideas?
Avatar of Don
Don
Flag of United States of America image

Avatar of GSLBermuda
GSLBermuda

ASKER

We already found out which virus we are dealing with (and yes, it was that one), that wasn't my question (I didn't post the question in the antii virus section ;-) ) My question is more in general, if someone remotely schedules a task on another computer, it is possible to trace such an attempt (succes or not) on the remote machine and how would I identify that in the event viewer or something like that.
ASKER CERTIFIED SOLUTION
Avatar of Don
Don
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Also some people have posted in other sections unknowing that they had said virus, so better safe than sorry :-)

Hope the above helps you
No Worries! And thanks, that article was very helpful.