Windows 10: Weird timestamps in Autoruns

I searched and found here a post about that, marked as solved:

Autoruns: Puzzling entries Solved - Windows 10 Forums

The guy was talking about timestamps of 1975. Now check out what I found with the most recent version of Autoruns:





WTH is that? Any ideas? TIA.

Windows 10 Pro 2004 19041.508

:)

 

Autoruns displays decades old timestamps

Hello,

I recently reset my Windows 10 installation and it seemed I was attacked by some exploits like trying to rewrite the logon screensaver and writing strange string files to C:\Windows. When checking Autoruns I noticed there were several entries in Task Scheduler
with timestamps either decades old or decades ahead, some of these are related to Windows Defender. Are these tampered with? or are they normal? They are all verified and 0 on VirusTotal check.

 

How can I remove this virus remnant?

I was also going to suggest Autoruns.

Check to make sure it isn't attaching itself to explorer. It should be the 3rd thing listed in Autoruns, the listing for the Shell. It should just be Explorer.exe. If it is anything else, that might be your problem.

 

Windows 10 Autorun?

Hello,

As you are asking whether the security of disabling Autorun/Autoplay option from system settings is the same as disabling from the registry and will take affect in the same way. There is no need to worry about virus threats which usually attack from autorun/autoplay.
If you want to disable autorun/autoplay from registry, follow the steps provided below:

• Type regedit in the search box and press Enter.
• Navigate to the following location: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
• In the right pane of the window create a new DWORD value "NoDriveTypeAutorun".
• Set the value based on the following requirements:
  • FF – To disable AutoRun on all drives
  • 20 – To disable AutoRun on CD-ROM drives
  • 4 – To disable AutoRun on removable drives
  • 8 – To disable AutoRun on fixed drives
  • 10 – To disable AutoRun on network drives
  • 40 – To disable AutoRun on RAM disks
  • 1 – To disable AutoRun on unknown drives
• If you want to disable AutoRun on a certain combination of drives, you’ll have to combine their values. For example, if you want to disable AutoRun on CD-ROM and removable drives, set the value of DWORD to 28.
• If you want to return AutoRun functionality, just delete the NoDriveTypeAutorun DWORD value.

Note: This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore,
make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following
article number to view the article in the Microsoft Knowledge Base:

322756 (http://support.microsoft.com/kb/322756/ )

How to back up and restore the registry in Windows


Hope this helps. Keep us posted on the status for further assistance.