Windows Server 2003 SP2. I have a batch file configured to shutdown all the PCs on the LAN every night at 10.30. Lately, I come in in the morning and they are all still running. When I interrogated the server, I find that the task scheduler service has stopped and is set to disabled. Obviously, I then set it back to started and automatic but every day at some stage it resets itself back to stopped and disabled. Weird what? I'm thinking virus but not sure really how to tackle this. I have Symantec Client Security running and it reports that the Conficker virus is active but every instance it encounters it, it manages to delete it successfuly. I have also scanned with the W32. downadup removal tool from Symantec but it doesn't find it. It's the same file that is identified every time (nowfeee.wi) in the system32 folder but I can never find the file. It's a bit of a phantom.