1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Eulaip.exe????? C:\Windows\Driver Cache

Discussion in 'Security and Privacy' started by bristow, 2004/07/08.

Thread Status:
Not open for further replies.
  1. 2004/07/08
    bristow

    bristow Inactive Thread Starter

    Joined:
    2004/07/08
    Messages:
    4
    Likes Received:
    0
    I have an application called "eulaip.exe" located in c:\windows\driver cache.

    Does anyone know what purpose this program serves?
     
    Last edited: 2004/07/08
  2. 2004/07/08
    LDTate

    LDTate Inactive

    Joined:
    2004/06/29
    Messages:
    284
    Likes Received:
    0
    Google search shows nothing. :eek:
     

  3. to hide this advert.

  4. 2004/07/08
    LDTate

    LDTate Inactive

    Joined:
    2004/06/29
    Messages:
    284
    Likes Received:
    0
    Are you having issues with the computer or just wanting to know about the file?
     
  5. 2004/07/08
    Newt

    Newt Inactive

    Joined:
    2002/01/07
    Messages:
    10,974
    Likes Received:
    2
    As a general rule of thumb, if you have an exe you don't recognize and it doesn't search up in Google, it was a bad thing dropped on you by some app that random-names it's little gift baskets. Not always but usually.

    If you haven't, I strongly suggest scans & cleans with RAV or any other online virus scanner followed by Ad-aware and Spybot.
     
    Newt,
    #4
  6. 2004/07/11
    bristow

    bristow Inactive Thread Starter

    Joined:
    2004/07/08
    Messages:
    4
    Likes Received:
    0
    Well, here is the whole story...

    Just installed an extra 512mb of memory, and every once in a while I get an error message while trying to open multiple IE windows. The error message says the following:

    SysUpdShadowProcessing: eulaip.exe Application Error
    The instruction at "0x77f58d2c" refrenced memory at "0x00000000 ". The memory could not be "written ". Click OK to terminate the program.

    I click OK and the computer continues to work normally, and this error message doesn't come up every single time I open multiple IE windows.

    I am just wondering if I should delete the eulaip.exe app or if it has some necessary function .

    Thanks in advance for the help.
     
  7. 2004/07/11
    Newt

    Newt Inactive

    Joined:
    2002/01/07
    Messages:
    10,974
    Likes Received:
    2
    SysUpdShadowProcessing

    You almost certainly have This Trojan infecting your PC.

    Lucky thing it is behaving badly or you wouldn't have known. As I said earlier in this thread, RAV online virus scan (since any onboard AV you have may be disabled by the critter) followed by the spyware killer apps also mentioned.
     
    Newt,
    #6
  8. 2004/07/12
    bristow

    bristow Inactive Thread Starter

    Joined:
    2004/07/08
    Messages:
    4
    Likes Received:
    0
    Thanks for all the help
     
  9. 2004/07/12
    bristow

    bristow Inactive Thread Starter

    Joined:
    2004/07/08
    Messages:
    4
    Likes Received:
    0
    Still having problems...ran RAv, AdAware, and SpyBot, but when I go into C:\Windows\Driver Cache, eulaip.exe is still there. there is also a configuration settings file named pialue which is simply eulaip apelled backwards. I tried opening task manager to end the process for eulaip, but the program NEVER shuts down. Anyone have an idea on how to gid rid of this.

    I know it's spyware at this point, but it seems relentless.
     
  10. 2004/07/12
    Newt

    Newt Inactive

    Joined:
    2002/01/07
    Messages:
    10,974
    Likes Received:
    2
    Hi ho, Hi ho, and off to the security section we go.
     
    Newt,
    #9
  11. 2004/07/12
    markp62

    markp62 Geek Member Alumni

    Joined:
    2002/05/01
    Messages:
    4,012
    Likes Received:
    16
    You have more than one file doing this to you. Did you use the latest versions of Ad-Aware 6 Build 6.181 and Spybot 1.3? If you have an earlier version, you will not be able to update the definitions, instead you'll get the message that they are up to date.
    You may want to get MoveOnBoot and install it. It creates a new entry to the right click menu, so if you wanted to delete a file but cannot because of 'in use' problems. Use the MoveOnBoot option and reboot. It will be deleted.
    Please post a HijackThis log, unzip into it's own folder, click on Scan. When done, the Scan button now says Save Log. It will open in Notepad, post the entire thing on here. Advice will be given based on the log.
    The link is below.
     
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.