Link to home
Start Free TrialLog in
Avatar of Axter
AxterFlag for United States of America

asked on

How to remove virus associated with Apache.exe, opmn.exe, rotatelogs.exe

I have a virus on my computer, and I can see the following process running in the Windows Task Manager:
Apache.exe
opmn.exe
rotatelogs.exe

I can't find these executables on my computer, or any file that has any of these names included.

I've tried running Norton Antivirus, and it doesn't seem to locate them.
I also tried running Spybot Search & Destroy.  Although it keeps finding new ones, it doesn't seem to find the source that creating the new viruses.


Does any one know how to remove these viruses?
How do these virus rename themselfs on the Windows Task Manager?
Avatar of SheharyaarSaahil
SheharyaarSaahil
Flag of United Arab Emirates image

Hello Axter =)

Who has told u that these are viruses ??
which antivirus software is picking them up.... coz i dont think so that these are viruses :-/
look at here, Apache.exe >> http://www.reger24.de/prozesse/Apache.exe.php

and if will look for the rest two processes on Google, u will find them related to Apache server thingies !!
So... are u sure u have not this server or any of its application is installed on ur system ??
Avatar of Axter

ASKER

>>Who has told u that these are viruses ??
They have the tail tail sign of viruses.

1. There are two sets of them.
2. When I kill them, they quickly popup again in pairs
3. There are no associated executables with those names


>>which antivirus software is picking them up.... coz i dont think so that these are viruses :-/
I'm positive they're viruses.  I'm not running this server on my computer, and there is no apache.exe file on my computer.
No Axter..... i cannot recognise any such virus and neither i can find any information of such virus which has all these processes !! =\

why dont u try this, goto Start>Run>msconfig>Startup and click on Disable All
then in Services section, click Hide Microsoft Services, now u will get all third party services
untick all of them, and now restart ur system
check now if same processes are running or not ??
ASKER CERTIFIED SOLUTION
Avatar of acmp
acmp
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
BTW,

The file names are all valid _if_ you are running an apache web server. This can be bundled with some other software.

I guess this is why people don't think you have a virus. And If I'm honest, I agree with them. But then again, this wouldn't be the first time I ws wrong. ;-)

acmp<><
Avatar of Axter

ASKER

>>The file names are all valid _if_ you are running an apache web server. This can be bundled with some other software.

I'm not running appache web server.
Furthermore, even if I had some third party program that was calling these files, wouldn't the name of the executable listed in Windows Task Manager, match the name of the actual executable.

I see no ligitimate reason for having a process named Apache.exe, and when there is no such executable on my computer.

I did a search for this executable on my entire computer, and it was not found.
I also don't see why this executable would pop back up so quickly after I kill the process.
Avatar of Axter

ASKER

acmp,
That's a great utility.

Thanks a bunch!
Glad you like it.

If you get chance I'd like to know what was creating the exe's/the path to them.  This is so I can help others if they have a similar problem.

TIA

acmp<><
Avatar of Axter

ASKER

>>If you get chance I'd like to know what was creating the exe's/the path to them.  This is so I can help others if they have a similar
>>problem.

The virus was hiding in a network drive I had mapped out, which I forgot to search on.
That utility showed me the exact location of the executable.
Thanks (sorry for the late reply, I've been on holiday :-)

acmp<><