Windows Task Scheduling Utility
at.exe is a legitimate Windows utility. It schedules one-time commands via the legacy AT scheduler. It only runs when a scheduled job is present.
at.exe is the Windows legacy AT scheduler executable. It accepts commands from the command line to schedule one-time tasks to run at a future time. The tool is part of Windows for compatibility with older scripts and batch automation.
at.exe interacts with the Task Scheduler service to create a RunOnce task at the requested time. It can be used in scripts and batch files to automate maintenance or reminders without long-running services.
Quick Fact: The AT scheduler predates Task Scheduler and was designed for simple one-off job runs from the command line.
Yes, at.exe is safe when it is the legitimate file from Microsoft located in the System32 directory.
The real at.exe is not a virus. Malware may imitate names, so verify path and digital signature.
C:\Windows\System32\at.exe. Other locations are suspicious.C:\Windows\System32\at.exe → Properties → Digital Signatures. Should show a Microsoft signature (e.g., "Microsoft Corporation").Red Flags: If at.exe is found outside C:\Windows\System32, runs without an 'at' command, or lacks a valid Microsoft signature, scan for malware.
at.exe runs when a legacy AT command schedules a one-time task or when a script triggers the legacy scheduler. It does not stay active like modern background services.
Reasons it's running:
Yes, you can disable its usage. Do not delete the file; instead remove scheduled AT tasks and stop using the at command.
If at.exe seems to be consuming resources or behaving oddly, check scheduled tasks and verify legitimacy.
Quick Fixes:
1. Open Command Prompt as Administrator and run: at /delete * to clear schedules
2. Open Task Scheduler and review RunOnce tasks created by at.exe
3. Run: sfc /scannow and DISM to repair system files
4. Scan with Windows Defender or other AV software for any malware
5. Avoid using the at command in scripts if not needed
at.exe is the Windows legacy scheduler executable that allows one-time task scheduling via the AT command, tied to the Task Scheduler service.
No, when located in C:\Windows\System32\at.exe and signed by Microsoft, it is a legitimate Windows utility. Malware may imitate its name, so verify.
You can disable its usage by avoiding the at command and removing any RunOnce tasks created by it. There is no always-on service to disable.
Deleting system files can harm Windows; do not delete at.exe. Remove scheduled tasks instead and consider migrating to Task Scheduler-based automation.
C:\Windows\System32\at.exe is the legitimate location for at.exe. If you find it elsewhere or with no digital signature, treat with suspicion.
Modern Windows uses Task Scheduler for automation; AT is legacy. Use Task Scheduler or PowerShell ScheduledJobs for future-proof scheduling.