Uninformed: Informative Information for the Uninformed

Vol 3» 2006.Jan


Userland Scheduler

An userland scheduler, as opposed to the kernel scheduler, runs inside an application scope and deals with the application threads and processes. The userland scheduler is still subject to the kernel scheduler and meant to improve the application multi-threads management. One of the major tasks that the scheduler performs is context switching. Taking airtime from one thread to another. Improvising a userland scheduler inside an infected process will give the option of switching from the original process to the virus and back, without attracting too much attention on the way.