Anyone know what the "eulalog.exe" process is?

I was troubleshooting an associates PC that was running extremely slow and found something strange.

I was cleaning out the startup items in MSCONFIG and saw an entry for 'eulalog.exe' that I unchecked.

After restarting I saw eulalog.exe runinng in the processes list and I stopped that from running a few times but it kept coming back.

I googled for the file and there were no responces at all. Has anyone heard of it and what is it and what should I do?


Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Hi gzembow,
I have not heard of it. It sounds suspicious. Have you run any spyware tools?
I suggest you run Spybot from and Ad-Aware from
It's an interesting name for a file.... eulalog.exe... eula gernerally translates to  "End-User License Agreement"...... Eula LOG definatly sounds as if it's monitoring the system, the name sounds as if it's logging the registration of applications installed on the system; but that is pure speculation! More than likely it's a trojan or something simular that a hacker created and tried to give it an official sounding computer type name to fool people (but not you).

If you right click on the file, what does it show within properties? What company produced the file???? What are the files' time stamps???????????????????????????????

Often times when I find a file on my system and I'm not sure where it came from, I do a time/date search.... Look at the specific files time stamps, when it was created and when it was last modified, then search the harddrive to see what other files were created at the same time (within one or two minutes). If the only files that have a matching time stamp are webcache, consider it junk placed there by hostile java script. If the time stamp matches that of legitimate software, double check that is where it came from. (just use windows advanced hard drive search to do the time date check)

Also, for all of us, please copy the file and upload it to SARC's lab (symantec anti-virus research center, that is norton's antivirus team). SARC with analyze the file, then email you back what it is. If it's a new virus or trojan, SARC will notify anti-virus companies world wide that they have detected something new that is out in the wild.



Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
P.S. I also searched EVERY WHERE online for a file named this, none of the top 10 search engines had a reference to the file name in question, betting it's a new variation of spyware or some sort of virus...
Do a check with HijackThis

and post the log into here:

It will analyze the log for you
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.