UTILEULA.EXE

[Guest]

My system is running extremely slowly all of a sudden and I noticed that a
Process called utileula.exe was using up hundreds of MB of RAM - jumping
right to the top of the Task Manager Processes. I kill the process and it
simply starts up again, first using only a few MB, then rapidly using several
hundred MB.
I checked the details of the process and it links to a file in the
Windows\Registration folder of the same name. In that folder, there is a tmp
file with the name aluelita, which is the exe name backwards (!). When I
renamed the utileula.exe file, there immediately appeared another version of
same with the original name.

All this sounds to me like a virus, but none of my virus checkers detect
anything. I looked at another PC with the same build of XP (Professional) on
it, and it did not have the utileula.exe file in the REgistration folder.

Does anyone have a clue what this is - should it be there - and mostly, how
might I get rid of it? I assume it is slowing my system down, running 300 -
400 MB of RAM (on a 512 MB RAM system).
Thanks for any help.
DM

 

[Carey Frisch [MVP]]

Download Ad-Aware SE Personal Edition and scan your PC for the presence of spyware:
http://www.download.com/3000-2144-10045910.html?part=69274&subj=dlpage&tag=button

Symantec Security Check
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/?id=827315

Dealing with Unwanted Spyware and Parasites
http://www.mvps.org/winhelp2002/unwanted.htm

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect Your PC!
http://www.microsoft.com/athome/security/protect/default.aspx

----------------------------------------------------------------------------------

"UTILEULA ?" wrote:

| My system is running extremely slowly all of a sudden and I noticed that a
| Process called utileula.exe was using up hundreds of MB of RAM - jumping
| right to the top of the Task Manager Processes. I kill the process and it
| simply starts up again, first using only a few MB, then rapidly using several
| hundred MB.
| I checked the details of the process and it links to a file in the
| Windows\Registration folder of the same name. In that folder, there is a tmp
| file with the name aluelita, which is the exe name backwards (!). When I
| renamed the utileula.exe file, there immediately appeared another version of
| same with the original name.
|
| All this sounds to me like a virus, but none of my virus checkers detect
| anything. I looked at another PC with the same build of XP (Professional) on
| it, and it did not have the utileula.exe file in the REgistration folder.
|
| Does anyone have a clue what this is - should it be there - and mostly, how
| might I get rid of it? I assume it is slowing my system down, running 300 -
| 400 MB of RAM (on a 512 MB RAM system).
| Thanks for any help.
| DM

 

[Will Denny]

Hi

Please try these programs as well:

Ad-Aware - www.lavasoftusa.com
Spybot - http://www.safer-networking.org/
CWShredder - http://forum.aumha.org/downloads/cwshredder.zip
Spy Sweeper - www.webroot.com

Try SpyWareBlaster to stop intrusions:

http://www.javacoolsoftware.com/spywareblaster.html

Also see the following links:

http://aumha.org/a/parasite.htm
http://mvps.org/winhelp2002/unwanted.htm
http://www.microsoft.com/security/articles/spyware.asp

 

[David H. Lipman]

1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend Pattern File.
http://www.trendmicro.com/download/pattern.asp

Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download Sysclean.com and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt251.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) Update Adaware with the latest definitions.
3) Disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode
5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) Re-enable System Restore and re-apply any System Restore preferences,
(e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) Create a new Restore point


* * * Please report your results ! * * *

Dave





| My system is running extremely slowly all of a sudden and I noticed that a
| Process called utileula.exe was using up hundreds of MB of RAM - jumping
| right to the top of the Task Manager Processes. I kill the process and it
| simply starts up again, first using only a few MB, then rapidly using several
| hundred MB.
| I checked the details of the process and it links to a file in the
| Windows\Registration folder of the same name. In that folder, there is a tmp
| file with the name aluelita, which is the exe name backwards (!). When I
| renamed the utileula.exe file, there immediately appeared another version of
| same with the original name.
|
| All this sounds to me like a virus, but none of my virus checkers detect
| anything. I looked at another PC with the same build of XP (Professional) on
| it, and it did not have the utileula.exe file in the REgistration folder.
|
| Does anyone have a clue what this is - should it be there - and mostly, how
| might I get rid of it? I assume it is slowing my system down, running 300 -
| 400 MB of RAM (on a 512 MB RAM system).
| Thanks for any help.
| DM