Task manager processe using all my cpu

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

The file iosdt.exe has suddenly appeared in in my window task manager process pane and it is using all my CPU. The file is located in my prefetch folder - which I deleted. However the file continues to load each time I restart. Searching the registry locates the file in the system 32 folder but I can't find it.

Cant anyone help?
 
Andy ;
You have an unwelcome guest. See this:

http://www.distributed.net//trojans.php

[Oct 2003] A trojan claiming to be a "Product Activation" tool is in circulation. It installs in
system32\iosdt\. The id is (e-mail address removed). It emails it's log files through smtp.o2.pl. You will see a
process, iosdt.exe, using taskman.
 
Time to update your virus definitions. You have a trojan.

From Symantec technical support:

"Distributed Computing Technologies Inc., (DCTI), also know as
Distributed.net is a nonprofit organization that is made up of people from
all over the world, participating in distributed processing. For additional
information on Distributed.net go to http://distributed.net.

Distributed.net has identified security risks in the unauthorized
distribution of their Distributed.net program. Several worms and Trojans
have been used to distribute the Distributed.net client. However,
Distributed.net itself is a legitimate program and is not a worm or Trojan."

From Distributed.net:

"A trojan claiming to be a "Product Activation" tool is in circulation. It
installs in system32\iosdt\. The id is (e-mail address removed). It emails it's log
files through smtp.o2.pl. You will see a process, iosdt.exe, using taskman."

For more information: http://www.distributed.net//trojans.php.

Tom Swift


Andy said:
The file iosdt.exe has suddenly appeared in in my window task manager
Click to expand...
process pane and it is using all my CPU. The file is located in my prefetch
folder - which I deleted. However the file continues to load each time I
restart. Searching the registry locates the file in the system 32 folder but
I can't find it.
 
Thanks for your input Wes. I have tried the removal tool from distributed.net but the trojan is still running
I am at a loss because I have a firewall and Norton antivirus installed and my definitions are up to date

Thanks again

Andy
 
Thanks for the info Tom. I have tried to use the removel file from distributed.net but the trojan is stiil running. I have Norton antivirus 2003 installed and all my definitions are up to date so I am at a loss as to how this trojan got through

Thanks Agai

Andy
 
Andy;
Visit these sites. 2, 3 and 4 are especially good. Download and install, run one or all. They
are all good, FREE utilities. The first site gives some recommendations.
http://www.spywareinfo.com/downloads.php?cat=all#s-p
1) AdAware
http://www.lavasoft.de/support/download/
2) Spybot S & D
http://www.safer-networking.org/index.php?lang=en&page=download
3) SpywareBlaster
http://www.javacoolsoftware.com/spywareblaster.html
4) HijackThis (some other stuff that may be of interest also)
http://www.spywareinfo.com/~merijn/index.html
5) Free Anti-Virus software.
http://www.grisoft.com/us/us_dwnl_free.php
 
Back
Top