Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

10.00.00.21 82.61%
10.00.00.21 4.35%
10.00.00.17 4.35%
9.00.00.09 4.35%
9.00.00.06 4.35%

Relationships

PE structurePE file structure
Show functions
Import table
advapi32.dll
ImpersonateLoggedOnUser, SetThreadToken, RevertToSelf, RegConnectRegistryW, RegOpenKeyExW, RegCloseKey, RegQueryValueExW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, OpenSCManagerW, OpenServiceW, CloseServiceHandle, QueryServiceStatus, DuplicateTokenEx, GetSecurityInfo, GetSecurityDescriptorDacl, GetUserNameW, BuildExplicitAccessWithNameW, SetEntriesInAclW, SetSecurityInfo, SetTokenInformation, CreateProcessAsUserW, OpenProcessToken, StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerExW, SetServiceStatus, RegQueryValueExA, RegOpenKeyExA
iphlpapi.dll
NotifyAddrChange
kernel32.dll
CreateDirectoryW, lstrcatW, GetModuleHandleW, GetExitCodeProcess, CreateProcessW, GetStartupInfoW, OpenProcess, LocalFree, SetLastError, GetCurrentProcess, CloseHandle, GetDateFormatW, GetTimeFormatW, lstrcpyW, MoveFileW, GetCurrentProcessId, DeleteFileW, OpenEventW, Sleep, FileTimeToSystemTime, DeleteCriticalSection, InitializeCriticalSection, GetVolumeInformationW, EnterCriticalSection, FindFirstFileW, FindNextFileW, FindClose, LeaveCriticalSection, GetProcAddress, GetLastError, ResumeThread, SuspendThread, CreateEventW, ResetEvent, WaitForMultipleObjects, WaitForSingleObject, LoadLibraryW, FreeLibrary, GetLocalTime, SystemTimeToFileTime, SetEvent, ExpandEnvironmentStringsA, GetSystemTimeAsFileTime, QueryPerformanceCounter, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, InterlockedCompareExchange, InterlockedExchange, GetTickCount, LoadLibraryA, DeviceIoControl, GetFileSize, ReadFile, GetCurrentThreadId, LocalAlloc, GetVersionExW, SetProcessWorkingSetSize, TerminateProcess, WriteFile, lstrcpynW, GetFileAttributesW, SetFileAttributesW, CreateFileW, PulseEvent, WritePrivateProfileStringW, LoadLibraryExW, GetModuleFileNameW, GetPrivateProfileIntW, lstrlenW, GetPrivateProfileStringW
msvcp90.dll
DllMain
msvcr90.dll
DllMain
shell32.dll
ShellExecuteW
user32.dll
wsprintfW, GetForegroundWindow, LoadStringW, RegisterDeviceNotificationW, UnregisterDeviceNotification
version.dll
GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW

sched.exe

AntiVir Desktop by Avira GmbH (Signed)

Remove sched.exe
Version:   9.00.00.06
MD5:   7c98f7a5bde8a775b7db9a1e808266d9
SHA1:   7111d066da84f2b215e529f59a9bdd6c95c41bde
SHA256:   885851bb333a751ea9f6ed9ef27ace37a9ea7645f5e508235e98872cd32be571

What is sched.exe?

Antivirus Scheduler for Avira Antivirus runs as a background process which checks every file opened or downloaded. Like many antivirus programs, it can run a full or custom scan to check the computer for malware in order to remove them. It updates its virus definitions automatically everyday by default using the Internet.

About sched.exe (from Avira GmbH)

“Avira Free Antivirus eliminates many forms of malware including worms, rootkits, and costly dialers. Features include system scanner prevents infection from viruses, worms, and Trojans, blocks new vir”

DetailsDetails

File name:sched.exe
Publisher:Avira GmbH
Product name:AntiVir Desktop
Description:Antivirus Scheduler
Typical file path:C:\Program Files\avira\antivir desktop\sched.exe
File version:9.00.00.06
Size:105.75 KB (108,289 bytes)
Build date:3/31/2009 5:13 PM
Certificate
Issued to:Avira GmbH
Authority (CA):VeriSign
Effective date:Tuesday, February 10, 2009
Expiration date:Saturday, February 11, 2012
Digital DNA
PE subsystem:Windows Console
Entropy:6.565785
File packed:No
Code language:Microsoft Visual C++ 9.0
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • AntiVirSchedulerService
  • 'AntiVirSchedulerService' (Avira AntiVir Scheduler)

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.03809119%
0.028634%
Kernel CPU:0.01482836%
0.013761%
User CPU:0.02326283%
0.014873%
Kernel CPU time:109 ms/min
100,923,805ms/min
Memory
Private memory:5.57 MB
21.59 MB
Private (maximum):1.57 MB
Private (minimum):264 KB
Non-paged memory:5.57 MB
21.59 MB
Virtual memory:50.75 MB
140.96 MB
Virtual memory (peak):55.01 MB
169.69 MB
Working set:1.57 MB
18.61 MB
Working set (peak):8.48 MB
37.95 MB
I/O
I/O read transfer:2.03 KB/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:509 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:30 Bytes/sec
448.09 KB/min
I/O other operations:2/sec
1,671/min
Resource allocations
Threads:8
12
Handles:221
600
GUI GDI count:8
103
GUI USER count:3
49

BehaviorsProcess properties

Integrety level:Undefined
Platform:32-bit
Owner:SYSTEM
Windows Service
Service name:SYSTEM\CurrentControlSet\Services\AntiVirSchedulerService
Display name:AntiVirSchedulerService
Description:“Service to schedule Avira AntiVir Personal - Free Antivirus jobs and updates.”
Type:Win32OwnProcess, InteractiveProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
MSVCR90.dll
Total CPU:0.01261830%
0.272967%
Kernel CPU:0.00210305%
0.107585%
User CPU:0.01051525%
0.165382%
Memory:652 KB
1.16 MB
sched.exe (main module)
Total CPU:0.01051304%
Kernel CPU:0.00630782%
User CPU:0.00420521%
Memory:120 KB
ADVAPI32.dll
Total CPU:0.00841167%
Kernel CPU:0.00210292%
User CPU:0.00630875%
Memory:620 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 38.10%
Windows 7 Ultimate 38.10%
Windows Vista Home Premium 9.52%
Windows 8 4.76%
Windows XP Professional 4.76%
Windows 7 Starter 4.76%

Distribution by countryDistribution by country

United States installs about 25.00% of AntiVir Desktop.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Compaq 26.67%
Dell 26.67%
Acer 20.00%
American Megatrends 13.33%
ASUS 13.33%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE