Possibly something new?

Hello folks,

Your site is wonderful and your advice has made my workday easier many, many times. I have something my co-worker found just today and he couldn't get rid of it. He didn't realize what the name represented, but I thought I would drop the name here regardless. Just in case.

He had a problem with a file called euladisk.exe
It acted like spyware in that it would restart everytime it's process was halted.
I realize eula stands for End User License Agreement, but I've also never seen euladisk as one word. Google and Yahoo searches didn't produce any results.

Anyway, have any of you seen/heard of this yet?

ApTechMe

 

I checked with my co-worker and he said that he had looked closely, himself thinking it might have been ezula... but nope, it was euladisk.exe

If we find out anything, I'll be certain to post. Even it turns out to be some pogram the user install and it has some strange eula file.

Thanks for the response, folks!

ApTechMe

 

I've been following those technique for student-use lab comps since the day I noticed it had been stickied.

This, i believe, is going to turn out to be some software(game or something) the staff member installed and doesn't want to tell us. It's the only instance seen from over 2500 comps, so unless it pops up again, I'll assume it isn't spyware, but a glitch.

Thanks!

APTechMe

 

Found another file that simply won't go away and is a strange sounding name...

dvdhard.exe

Acting exactly like the euladisk.exe below.
Delete all occurrences, including registry entries, and run through the steps per this forum... only to find the registry entry etc.. back in place after reboot.

We haven't been able to find the code that is causing these files to be so persistant. As I said before, I'll post whenever there is a change or something new found.

We will also get a hijackthis copy as soon as we can and post it for you guys to check out.

Thanks!

ApTechMe

 

I wonder if it's some sort of copy protection software.

 

I wondered about that possibility. It could be some software the users installed and then unistalled improperly.

These are two separate machines but I'll look into what the users may have in common and try to find some software they both use/install.

ApTechMe