Versions

16, 10, 0, 0	1.45%
16, 6, 0, 0	0.72%
16, 5, 0, 0	0.72%
16, 1, 0, 0	0.72%
16, 1, 0, 0	0.72%
15, 8, 0, 0	0.72%
15, 6, 0, 0	1.45%
15, 6, 0, 0	0.72%
15, 5, 5, 0	3.62%
15, 5, 5, 0	1.45%
15, 5, 0, 0	2.17%
15, 2, 0, 0	2.90%
15, 1, 1, 0	2.17%
15, 1, 0, 0	5.07%
15, 0, 0, 0	3.62%
14, 3, 1, 0	0.72%
14, 3, 0, 0	1.45%
14, 3, 0, 0	0.72%
14, 2, 1, 9	4.35%
14, 2, 0, 8	7.97%
14, 1, 2, 7	1.45%
14, 1, 1, 7	1.45%
14, 1, 1, 7	5.07%
14, 1, 1, 7	0.72%
14, 0, 2011, 7	0.72%
14, 0, 2, 7	2.17%
14, 0, 1, 7	7.97%
14, 0, 1, 7	0.72%
13, 5, 0, 7	0.72%
13, 4, 0, 6	1.45%
13, 3, 0, 6	6.52%
13, 2, 0, 3	10.14%
13, 2, 0, 3	0.72%
13, 1, 1, 1	0.72%
13, 0, 0, 0	1.45%
13, 0, 0, 0	1.45%
12, 4, 4, 0	0.72%
12, 4, 3, 0	1.45%
12, 4, 0, 0	0.72%
12, 4, 0, 0	0.72%
12, 2, 0, 0	0.72%
12, 1, 2, 0	0.72%
12, 1, 1, 0	1.45%
12, 1, 1, 0	1.45%
12, 0, 4, 0	0.72%
12, 0, 4, 0	0.72%
12, 0, 2, 0	2.17%
12, 0, 1, 0	0.72%
12, 0, 0, 0	0.72%

Warning 7 antivirus scanners has detected malware in various versions of EvtEng.exe.

There are 49 versions of evteng.exe in the wild, the latest version being 16, 10, 0, 0. It is started as a Windows Service called 'Intel® PROSet/Wireless Event Log' with the name 'EvtEng' and described as “Manages the event trace messages for all the Intel® PROSet/Wireless Software components.”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 967.77 KB. The file is a digitally signed and issued to Intel Corporation by Intel Corporation. The programs Intel(R) TV Wizard, Intel® PROSet/Wireless WiFi Software and Intel® PROSet/Wireless WiFi-Software have been observed as installing specific variations of evteng.exe. During the process's lifecycle, the typical CPU resource utilization is about 0.0007% including both foreground and background operations, the average private memory consumption is about 9.26 MB with the maximum memory reaching around 15.13 MB. Addionally, typically read and write I/O disk operations is about 76 Bytes per minute for reads and 4 Bytes per minute for writes.

Intel PROSet/Wireless WiFi Software Event Log Service is used to set up, edit, and manage network profiles to connect to a network. It also includes advanced settings such as power management and channel selection for setting up ad-hoc networks. The WiFi Connection Utility Main Window lets users view the current connection details (signal quality, speed and current network name), scan for available WiFi networks and troubleshoot wireless connection problems.

Based on 40+ industry antivirus scanners, 7 of them detected the following malware.