1. Windows Registry Editor Version 5.00

2. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Schedule][HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Schedule]

3. "AtTaskMaxHours"=dword:00000048

4. "Description"="Enables a user to configure and schedule automated tasks on this computer. If this service is stopped, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start."

5. "Type"=dword:00000020

6. "Start"=dword:00000002

7. "ErrorControl"=dword:00000001

8. "ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\

9. 74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\

10. 00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\

11. 6b,00,20,00,6e,00,65,00,74,00,73,00,76,00,63,00,73,00,00,00

12. "DisplayName"="Task Scheduler"

13. "Group"="SchedulerGroup"

14. "DependOnService"=hex(7):52,00,70,00,63,00,53,00,73,00,00,00,00,00"DependOnService"=hex(7):52,00,70,00,63,00,53,00,73,00,00,00,00,00

15. "DependOnGroup"=hex(7):00,00

16. "ObjectName"="LocalSystem"

17. "FailureActions"=hex:80,51,01,00,00,00,00,00,00,00,00,00,03,00,00,00,61,00,70,\"FailureActions"=hex:80,51,01,00,00,00,00,00,00,00,00,00,03,00,00,00,61,00,70,\

18. 00,01,00,00,00,70,17,00,00,01,00,00,00,60,ea,00,00,00,00,00,00,00,00,00,00

19. "NextAtJobId"=dword:00000001

20. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Schedule\Parameters][HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Schedule\Parameters]

21. "ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\"ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\

22. 00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\

23. 73,00,63,00,68,00,65,00,64,00,73,00,76,00,63,00,2e,00,64,00,6c,00,6c,00,00,\

24. 00

25. "ServiceMain"="SchedServiceMain"

26. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Schedule\Security][HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Schedule\Security]

27. "Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\

28. 00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\

29. 00,00,02,00,60,00,04,00,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,\

30. 05,0b,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\

31. 20,02,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,25,\

32. 02,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,\

33. 00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

34. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Schedule\Enum][HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Schedule\Enum]

35. "0"="Root\\LEGACY_SCHEDULE\\0000"

36. "Count"=dword:00000001

37. "NextInstance"=dword:00000001