Re: Worm or not?

Hi Kenny,

What folder is it in? PDsched.exe should be in the Raxco program folder. A
worm would not be there, but rather in the system32 folder.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Associate Expert - WindowsXP Expert Zone
www.microsoft.com/windowsxp/expertzone
Windows help - www.rickrogers.org

"Kenny" <me@xxxxxxxxxxx> wrote in message
news:uu0$eKQYFHA.3184@xxxxxxxxxxxxxxxxxxxxxxx
> Trying to figure out why PC was locking up when using CPU intensive tasks
> I started trying to identify Processes in Task Manager.
> Found an entry "PDSched.exe" which is identified here:
> http://www.bleepingcomputer.com/startups/PDSched.exe-2844.html
> and many other sites as a worm.
> I do have Roxio Perfect Disk on PC which should have a "pdsched.exe", note
> the case difference, process which doesn't show, see here:
> http://www.liutilities.com/products/wintaskspro/processlibrary/pdsched/
> I ran updated AVG free, Panda online and Trend scans and none of them
> identified it as a virus/worm.
> Also have Zone Alarm free and regularly use AdAware SpyBot etc.
> Until my subs ran out recently I had been using Norton Utilities with NAV
> 2003 and never seemed to have any problems then.
>
> XP Pro with SP2
> Asus A7N8X m/b
> Athlon 2500XP Barton
> 512MB PC2700
> Internal 120 & 160 GB and external USB 160GB HDD's.
> Matrox G450 eTV graphics (this was my first suspect!)
>
> When PC did lock up CPU went to 100%, the 2 progs it happened in mostly
> were World Snooker 2005 and Changes, a program my daughter uses to show
> herself with different hairstyles etc. This particular program runs
> perfect on hers which is only Athlon 600MHz with 256MB and 8MB ATI
> graphics, (my hand me down).
> Big question is do I have a worm or not? Should I invest in a paid for
> anti-virus prog, if so which one if Panda and Trend don't see this as a
> risk?
>
> --
>
> Kenny Cargill
>
>
>


.

Relevant Pages

  • Re: Is winlogon.exe a virus and WinLogon.exe a windows utility?
    ... | possible relationship between winlogn and WinLogon as follows: ... | Process Name: Microsoft Windows Logon Process ... The worm has it?s own SMTP ... If you find WINLOGON.EXE in %windir% or some other folder such as ...
    (microsoft.public.windowsxp.general)
  • re:Cannot enable firewall!
    ... > find the worm on my computer. ... TrendMicro's Sysclean is an extensive antivirus tool which has the ... scanning engine and the virus pattern files. ... Create a new folder on your Desktop or the C: ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Is winlogon.exe a virus and WinLogon.exe a windows utility?
    ... Searched WINNT directory and winlogon.exe seems legit, ... > | Process Name: Microsoft Windows Logon Process ... In worst cases this worm can allow attackers to access ... > If you find WINLOGON.EXE in %windir% or some other folder such as ...
    (microsoft.public.windowsxp.general)
  • Re: Queries on kb836528 removal tool
    ... I read your posts and found the log file; ... I am free of the worm -dishearten the it was indicated that I ... "Ricardo Dias Marques" wrote: ... > file called doomcln.log in my C:\WINNT\debug folder after I installed ...
    (microsoft.public.windowsxp.general)