Re: Something weird going on



"Ken" <shaba@xxxxxxxxxxxxxx> wrote in message
news:2t6kp4p7ogou87cvv0pk5barv31a63fq6j@xxxxxxxxxx
Anyone know what this file "pdkhost.exe" is?

I think I may be partialy infected with a trojan.

NAV 2009 caught a URL redirector and killed it but all of a sudden
Windows Update is blocked. ZoneAlarm popped up an access warning for
pdkhost.exe. I hit DENY so I think all is fairly well right now but
what the hell is going on?

CK

I can't find any info on it, but it is a non-standard file. If it exists
in System or System32 then run some malware checkers (e.g.,
Spybot, Adaware, etc) and try one or more 3rd party online
anti-virus utilities. If no problems are reported, try renaming the
file (safer than deleting it). If still no problems, send the original
file to Norton for analysis.


.



Relevant Pages

  • Something weird going on
    ... I think I may be partialy infected with a trojan. ... NAV 2009 caught a URL redirector and killed it but all of a sudden ... what the hell is going on? ...
    (alt.os.windows-xp)
  • Re: Windows update agent error
    ... Any files of this name that are found that DO NOT have those properties is a Trojan. ... Windows Update AutoUpdate Client is a background process which checks with Microsoft website for updates to the operating system. ... Here are the recommended programs and the instructions for how to use them to ensure that your system is totally clean. ... the Aumha HiJackThis forums ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Windows update agent error
    ... Any files of this name that are found that DO NOT have those properties is a Trojan. ... Windows Update AutoUpdate Client is a background process which checks with Microsoft website for updates to the operating system. ... the Aumha HiJackThis forums ... How to make a good newsgroup post: ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Activex and norton antivirus - Alwayup trojan
    ... NAV was up-to-date when this problem occurred. ... use mode and also did another scan in safe mode. ... > This link is to Symantec's page on the Alwayup Trojan ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: TAKEOVER OF PC
    ... idgsearch = "CWS.Googlems" trojan ... this type hijack indicates an unpatched machine, ... Please visit Windows Update to avoid these exploits. ... >>and "favorites" folder, but when rebooting, they pop ...
    (microsoft.public.security)