Wallpaper got changed automatically to manager's photo

  • Thread starter Thread starter Newbie
  • Start date Start date
N

Newbie

We just had a few computers where the wallpaper background got changed to
manager's picture all of a sudden? Checked the task manager and it got a
scheduled task called "AT1", details as below:

RUN: C:\Windows\wc.exe C:\Windows\icon.jpg 0

Comments: Created by NetScheduleJobAdd

Is there any way I can trace who created the job? The mystery is how does
the system know how to retrieve manager's photo?

Thanks for your help.
 
We just had a few computers where the wallpaper background got
changed to manager's picture all of a sudden? Checked the task
manager and it got a scheduled task called "AT1", details as
below:

RUN: C:\Windows\wc.exe C:\Windows\icon.jpg 0

Comments: Created by NetScheduleJobAdd

Is there any way I can trace who created the job? The mystery is
how does the system know how to retrieve manager's photo?

Probably not. You might be able to tell when it was done by looking at
the file dates for wc.exe and icon.jpg. I'm sure you will find that
"icon.jog" is the picture of the manager. Either the picture was placed
in the Windows directory by the practical joker, or the wallpaper
changer program can be told where to retrieve it from on the network.
If you can find its options, that might provide another clue.
 
Back
Top