Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I'm getting a virus message related to expamapi.dll in c:\Windows (windows xp). When I used ProcessExplorer, this dll is related to a bunch of processes, which isn't making sense. Some of the processes listed are:

  • explorer.exe
  • svchost.exe
  • MOM.exe
  • CTDVDDET.exe
  • CTSysVol.exe
  • DLLML.exe
  • CTHELPER.EXE
  • Dropbox.exe

So, does this make sense? Or do I need to do some deep cleaning?

share|improve this question
1  
are you 100% certain thats the file name ? the only google result for expamapi.dll is this page, which is really Odd... –  Geraint Jones Sep 27 '10 at 4:29
    
Agreed - I was just about to post that exact question for Greg. –  EEAA Sep 27 '10 at 4:36
    
Yeah, I'm sure. And this is what is causing me confusion as well...what the hell is this thing? That file is in the Windows folder and apparently associated with all of those processes, according to ProcessExplorer. –  Greg McGuffey Sep 27 '10 at 14:27

1 Answer 1

up vote 0 down vote accepted

I posted a related question on the BitDefender forum and they confirmed that this is a malicious file. A deep scan removed it.

http://forum.bitdefender.com/index.php?showtopic=21462&st=0&gopid=93849&#entry93849

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.