Unknown event occurs at exactly 10 minute intervals

Any advice on deleting the keys from the registry?

Please run the V2 log collector and post a share link into this thread using one drive, drop box, or google drive.

Does this work?

The computer has a two month installation.

The files displayed the use of software to bypass the activation of Microsoft software.

zbook said:

The computer has a two month installation.

The files displayed the use of software to bypass the activation of Microsoft software.

Click to expand...

I purchased a license.

Have you checked Task Scheduler?

Please uninstall the KMS software as it may come with malware / spyware.

cereberus said:

Have you checked Task Scheduler?

Click to expand...

There are a bunch of tasks there, but aside from Browser self-checking and CCleaner Update, everything appears to be a Microsoft service. Nothing is defined as starting every 10 minutes or as having a next run time on a 10 min mark.

zbook said:

Please uninstall the KMS software as it may come with malware / spyware.

Free Automated Malware Analysis Service - powered by Falcon Sandbox

Submit malware for free analysis with Falcon Sandbox and Hybrid Analysis technology. Hybrid Analysis develops and licenses analysis tools to fight malware.

www.hybrid-analysis.com

Click to expand...

It has been uninstalled and all vestiges removed with Revo Uninstaller.

After a reboot check to see whether Microsoft Office is able to be activated.

When available run one of the antivirus software that had detected the malware in this virus total report:

(consider backing up files and a clean install)

I don't have a suspicious file to upload to VirusTotal.

Each AV software has definitions in their database which identify malware.

Pick an AV software that is not in use > temporarily use it to check the computer > make sure that it is uninstalled after it completes the scan

Report whether your able or unable to activate Microsoft Office.

Post a new V2 share link into the newest post.

I have used WD, Malwarebytes and Rogue Killer. None have identified any threats. I bought a new Office license direct from MS.
If it was well-written malware, it wouldn't be flashing a terminal window every ten minutes. And if was was poorly written malware, one of those scanners would have picked up on it. I'm leaning towards a malfunctioning app but I have actual work to do in the meantime and no appetite for a clean install. The cure is worse than the disease.

When available post a new V2 share link into the newest post.

Could you please run another Process Monitor trace and then save it as .pml file? Please zip up that file and then upload it to something like WeTransfer so we can a look at the log.

x BlueRobot said:

Could you please run another Process Monitor trace and then save it as .pml file? Please zip up that file and then upload it to something like WeTransfer so we can a look at the log.

Click to expand...

Attached.

When available please post a new V2 share link into the newest post.

Could you please run the following commands from an elevated command prompt:


Please attach the services.txt file which would have been saved to your Desktop to your next post.

x BlueRobot said:

Could you please run the following commands from an elevated command prompt:

Code:

sc query sjctbcs >> %userprofile%\Desktop\services.txt
sc qc sjctbcs >> %userprofile%\Desktop\services.txt

Please attach the services.txt file which would have been saved to your Desktop to your next post.

Click to expand...

[SC] EnumQueryServicesStatus:OpenService FAILED 1060:
The specified service does not exist as an installed service.
[SC] OpenService FAILED 1060:
The specified service does not exist as an installed service.