• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 214
  • Last Modified:

Anyone know what the "eulalog.exe" process is?

I was troubleshooting an associates PC that was running extremely slow and found something strange.

I was cleaning out the startup items in MSCONFIG and saw an entry for 'eulalog.exe' that I unchecked.

After restarting I saw eulalog.exe runinng in the processes list and I stopped that from running a few times but it kept coming back.

I googled for the file and there were no responces at all. Has anyone heard of it and what is it and what should I do?

Thanks.

Gary
0
gzembow
Asked:
gzembow
  • 2
1 Solution
 
grbladesCommented:
Hi gzembow,
I have not heard of it. It sounds suspicious. Have you run any spyware tools?
I suggest you run Spybot from http://www.safer-networking.org/en/index.html and Ad-Aware from http://www.lavasoft.de
0
 
mugman21Commented:
It's an interesting name for a file.... eulalog.exe... eula gernerally translates to  "End-User License Agreement"...... Eula LOG definatly sounds as if it's monitoring the system, the name sounds as if it's logging the registration of applications installed on the system; but that is pure speculation! More than likely it's a trojan or something simular that a hacker created and tried to give it an official sounding computer type name to fool people (but not you).

If you right click on the file, what does it show within properties? What company produced the file???? What are the files' time stamps???????????????????????????????


Often times when I find a file on my system and I'm not sure where it came from, I do a time/date search.... Look at the specific files time stamps, when it was created and when it was last modified, then search the harddrive to see what other files were created at the same time (within one or two minutes). If the only files that have a matching time stamp are webcache, consider it junk placed there by hostile java script. If the time stamp matches that of legitimate software, double check that is where it came from. (just use windows advanced hard drive search to do the time date check)

Also, for all of us, please copy the file and upload it to SARC's lab (symantec anti-virus research center, that is norton's antivirus team). SARC with analyze the file, then email you back what it is. If it's a new virus or trojan, SARC will notify anti-virus companies world wide that they have detected something new that is out in the wild.

Mugman

0
 
mugman21Commented:
P.S. I also searched EVERY WHERE online for a file named this, none of the top 10 search engines had a reference to the file name in question, betting it's a new variation of spyware or some sort of virus...
0
 
jvuzCommented:
Do a check with HijackThis


http://tools.radiosplace.com/HijackThis.exe


and post the log into here:


www.hijackthis.de


It will analyze the log for you
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now