OT: Avast! and Apache

Well, my HD and registry got so crowded that i re-started from scratch. One of the last programs i installed was Avast! and i found in the background that APACHE was running. Not in the installed program list, never existed before, not in the registry, and extremely difficult to remove. One of its "component" files was "hiding" in with Avast! and it was a text file that could not be viewed or removed with the installation running. Booted with old HD and put this one on USB to delete the bugger file.

WTF is Apache,what does it do besides eat RAM and HD space?

Reply to
Robert Baer
Loading thread data ...

It's a web server, so 3rd parties can download stuff from your computer, upload and install new software, stuff like that.

Best regards, Spehro Pefhany

--
"it's the network..."                          "The Journey is the reward" 
speff@interlog.com             Info for manufacturers: http://www.trexon.com 
Embedded software/hardware/analog  Info for designers:  http://www.speff.com
Reply to
Spehro Pefhany

I don't see this being a security issue without port 80 outgoing. Care to elaborate, or is this just bullshit intended to be a joke?

More likely he has some device that has a web interface. Most modern devices, say routers, have the server built in, but really old crap would load apache on your system to use the web interface. X10 did/does that. Or the PC is old enough that it has some device that used Apache and the software was never uninstalled.

Delete it and see what gets f***ed up.

I have Apache on one of my PCs for a PHP based SQL that uses the browser as an interface. I don't open the port to the outside world, nor is the PC the DMZ.

Reply to
miso

Pretty much the latter. ;-)

Back when I had a Win2K machine I recall some program that installed Apache automatically or optionally- might have been an something to do with CGI etc. editing.

Uninstall might be better.

You're aware of the server's presence and what it does. He does not seem to be.

Best regards, Spehro Pefhany

--
"it's the network..."                          "The Journey is the reward" 
speff@interlog.com             Info for manufacturers: http://www.trexon.com 
Embedded software/hardware/analog  Info for designers:  http://www.speff.com
Reply to
Spehro Pefhany

If it's not a web server it's probably malware.

--
?? 100% natural 

--- news://freenews.netfront.net/ - complaints: news@netfront.net ---
Reply to
Jasen Betts

Apache

formatting link
is the most widely used web server in the world. Although mainly used in data centers some programs may install it locally to serve documentation, allow web pages develpment or other uses. Unless it is something else hidden under that name, it is unlikely that it was installed with malicious intentions as viruses usually contain their own servers well hidden and dormant.

Reply to
asdf

It is an easy way to do a GUI. You write some web pages and some CGI like scripts and then use Apache (a web server) and the default browser. Kind of a cross platform GUI. The web server may just be listening to localhost. Not sure about newer windoze but on XP open a command window and use netstat -na to see all the open ports and connections.

--
Chisolm 
Republic of Texas
Reply to
Joe Chisolm

I have no way to look at the ports. I have NEVER had APACHE (i think i originally said that), period. My motherboard has an on-board Ethernet port which goes directly to my Comcast modem; that connection has been present for over 4 years now. No routers.

  • Apache and that text file leech removed; system runs a lot faster now.
Reply to
Robert Baer

  • READ what i wrote - it was NOT on the program list, so impossible to un-install. NOT in the registry either (which i also said).
Reply to
Robert Baer

That is exactly how i saw it.

Reply to
Robert Baer

Works on Win2K; how do you interpret all of those numbers in that long list?

Reply to
Robert Baer

Apache is definitely malware! After removal of the programs (and the &#$@! text file) from the HD, i found three ForceWare services started and running. WTF? Stopped them and disabled them. Where in the sh*i did they come from?

Reply to
Robert Baer

All those times you tried to download clonezilla etc, and downloaded the wrong thing?

--

John Devereux
Reply to
John Devereux

Idiot! 1) When i look for Z i ignore everything else. 2) Downloading something does not install anything (I avoid those online "installer" programs).

Reply to
Robert Baer

I found that even tho Apache was NOT in the registry, that ForceWare was salted all over hell in the registry. A number of the entries would NOT go away. Apache is definite malware! Will have to start over from scratch,only this time it will be a wiped HD!

Reply to
Robert Baer

That doesn't necessarily follow. Many programs have an uninstall program away in their program files directory. Or, in the case of apache, it's a command-line switch to the executable. Eg. apache -k uninstall

NOT surprising. Apache hails from the *nix world, where the Windows registry is just a bad dream.

Best regards, Spehro Pefhany

--
"it's the network..."                          "The Journey is the reward" 
speff@interlog.com             Info for manufacturers: http://www.trexon.com 
Embedded software/hardware/analog  Info for designers:  http://www.speff.com
Reply to
Spehro Pefhany

Sounds like it's time to blow your Win installation away and start from a clean formatted drive.

Best regards, Spehro Pefhany

--
"it's the network..."                          "The Journey is the reward" 
speff@interlog.com             Info for manufacturers: http://www.trexon.com 
Embedded software/hardware/analog  Info for designers:  http://www.speff.com
Reply to
Spehro Pefhany

Good approach. Unless you did so recently, it might be a good time to upgrade your HDD and keep the old one for a while as a data drive.

Best regards, Spehro Pefhany

--
"it's the network..."                          "The Journey is the reward" 
speff@interlog.com             Info for manufacturers: http://www.trexon.com 
Embedded software/hardware/analog  Info for designers:  http://www.speff.com
Reply to
Spehro Pefhany

It was a long thread, but pretty sure you said you downloaded several things that you thought were clonezilla, but were not.

Apache in itself is not malware, but it may well have been installed as part of a malware package.

--

John Devereux
Reply to
John Devereux

Or the apache installation is combined with whatever program installed it. I make it a point to never install software in situations where I know damn well it isn't needed, such as routers, modems, etc.

Reply to
miso

ElectronDepot website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.