Anyone know what the "eulalog.exe" process is?

Posted on 2004-12-01
Last Modified: 2010-04-11
I was troubleshooting an associates PC that was running extremely slow and found something strange.

I was cleaning out the startup items in MSCONFIG and saw an entry for 'eulalog.exe' that I unchecked.

After restarting I saw eulalog.exe runinng in the processes list and I stopped that from running a few times but it kept coming back.

I googled for the file and there were no responces at all. Has anyone heard of it and what is it and what should I do?


Question by:gzembow
    LVL 36

    Expert Comment

    Hi gzembow,
    I have not heard of it. It sounds suspicious. Have you run any spyware tools?
    I suggest you run Spybot from and Ad-Aware from
    LVL 8

    Accepted Solution

    It's an interesting name for a file.... eulalog.exe... eula gernerally translates to  "End-User License Agreement"...... Eula LOG definatly sounds as if it's monitoring the system, the name sounds as if it's logging the registration of applications installed on the system; but that is pure speculation! More than likely it's a trojan or something simular that a hacker created and tried to give it an official sounding computer type name to fool people (but not you).

    If you right click on the file, what does it show within properties? What company produced the file???? What are the files' time stamps???????????????????????????????

    Often times when I find a file on my system and I'm not sure where it came from, I do a time/date search.... Look at the specific files time stamps, when it was created and when it was last modified, then search the harddrive to see what other files were created at the same time (within one or two minutes). If the only files that have a matching time stamp are webcache, consider it junk placed there by hostile java script. If the time stamp matches that of legitimate software, double check that is where it came from. (just use windows advanced hard drive search to do the time date check)

    Also, for all of us, please copy the file and upload it to SARC's lab (symantec anti-virus research center, that is norton's antivirus team). SARC with analyze the file, then email you back what it is. If it's a new virus or trojan, SARC will notify anti-virus companies world wide that they have detected something new that is out in the wild.


    LVL 8

    Expert Comment

    P.S. I also searched EVERY WHERE online for a file named this, none of the top 10 search engines had a reference to the file name in question, betting it's a new variation of spyware or some sort of virus...
    LVL 22

    Expert Comment

    Do a check with HijackThis

    and post the log into here:

    It will analyze the log for you

    Featured Post

    Do You Know the 4 Main Threat Actor Types?

    Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

    Join & Write a Comment

    SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
    Password hashing is better than message digests or encryption, and you should be using it instead of message digests or encryption.  Find out why and how in this article, which supplements the original article on PHP Client Registration, Login, Logo…
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
    Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now