I'm getting a virus message related to expamapi.dll in c:\Windows (windows xp). When I used ProcessExplorer, this dll is related to a bunch of processes, which isn't making sense. Some of the processes listed are:

  • explorer.exe
  • svchost.exe
  • MOM.exe
  • CTDVDDET.exe
  • CTSysVol.exe
  • DLLML.exe
  • Dropbox.exe

So, does this make sense? Or do I need to do some deep cleaning?

  • 1
    are you 100% certain thats the file name ? the only google result for expamapi.dll is this page, which is really Odd... Sep 27, 2010 at 4:29
  • Agreed - I was just about to post that exact question for Greg.
    – EEAA
    Sep 27, 2010 at 4:36
  • Yeah, I'm sure. And this is what is causing me confusion as well...what the hell is this thing? That file is in the Windows folder and apparently associated with all of those processes, according to ProcessExplorer. Sep 27, 2010 at 14:27

1 Answer 1


I posted a related question on the BitDefender forum and they confirmed that this is a malicious file. A deep scan removed it.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.