[killer12]

Could someone tell me what is Oreans.sys and if it's safe? or what kinda file it is and what it do. it's located in system32 / drivers

[Advertisements]

Do you have XProtector Professional Software Protection System for Windows installed? Or any of the related software:

Oxygen Software- tools for your mobile phone.
Oxygen Phone Manager II

More:

1) oreans.sys information
2) Oreans.sys file information


May be more related programs that use that file like the game Prey.

Ron

Edited by Major Payne, 31 August 2007 - 11:13 PM.

[Major Payne]

Do you have XProtector Professional Software Protection System for Windows installed? Or any of the related software:

Oxygen Software- tools for your mobile phone.
Oxygen Phone Manager II

More:

1) oreans.sys information
2) Oreans.sys file information


May be more related programs that use that file like the game Prey.

Ron

Edited by Major Payne, 31 August 2007 - 11:13 PM.

[killer12]

No i haven't installed any of those Softwares and i never heard of them neither, what should i do? delete the file? will it cause harm?, People said it could contain a trojan -.- please help

Edited by killer12, 01 September 2007 - 08:51 AM.

[sarahw]

Hi,
As far as I am aware the legitimate file comes from this company: Oreans.com
This file has also been known to be installed by malware that is packed by it, so you should visit the Malware Removal Forum. Start Here.

Edited by sarahw, 01 September 2007 - 10:58 AM.

[killer12]

I have scan my computer with many online scanners such as kaspersky , panda , and F-secure and they said my system was clean so i'm not sure if it's really legit because i did a file scan at virus total and it scanned a Rookit in it. the Results of it are below.


File oreans32.sys received on 09.01.2007 20:05:23 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED


Result: 1/32 (3.13%)
Loading server information...
Your file is queued in position: 2.
Estimated start time is between 43 and 62 seconds.
Do not close the window until scan is complete.
The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result.
If you are waiting for more than five minutes you have to resend your file.
Your file is being scanned by VirusTotal in this moment,
results will be shown as they're generated.
Compact Print results
Your file has expired or does not exists.
Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time.

You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished.
Email:


Antivirus Version Last Update Result
AhnLab-V3 2007.9.1.0 2007.09.01 -
AntiVir 7.4.1.66 2007.09.01 -
Authentium 4.93.8 2007.09.01 -
Avast 4.7.1029.0 2007.09.01 -
AVG 7.5.0.484 2007.09.01 -
BitDefender 7.2 2007.09.01 -
CAT-QuickHeal 9.00 2007.09.01 Rootkit.Agent.ad
ClamAV 0.91.2 2007.09.01 -
DrWeb 4.33 2007.09.01 -
eSafe 7.0.15.0 2007.08.29 -
eTrust-Vet 31.1.5100 2007.08.31 -
Ewido 4.0 2007.09.01 -
FileAdvisor 1 2007.09.01 -
Fortinet 3.11.0.0 2007.09.01 -
F-Prot 4.3.2.48 2007.08.31 -
F-Secure 6.70.13030.0 2007.08.31 -
Ikarus T3.1.1.12 2007.09.01 -
Kaspersky 4.0.2.24 2007.09.01 -
McAfee 5110 2007.08.31 -
Microsoft 1.2803 2007.09.01 -
NOD32v2 2497 2007.09.01 -
Norman 5.80.02 2007.08.31 -
Panda 9.0.0.4 2007.09.01 -
Prevx1 V2 2007.09.01 -
Rising 19.38.52.00 2007.09.01 -
Sophos 4.21.0 2007.09.01 -
Sunbelt 2.2.907.0 2007.08.31 -
Symantec 10 2007.09.01 -
TheHacker 6.1.9.175 2007.08.31 -
VBA32 3.12.2.3 2007.09.01 -
VirusBuster 4.3.26:9 2007.09.01 -
Webwasher-Gateway 6.0.1 2007.09.01 -
Additional information
File size: 33952 bytes
MD5: aad837bf3b475092fd515cd0842334e9
SHA1: 2f845acac30e40d5aea3ccf8d02f5226089366a5

[Major Payne]

The file is installed by a number of programs, not all that I mentioned. If you are sure you have not installed any recent programs/tool bars that may have need of this program, I would make a folder for it and move the file there. If all goes well, and moving file doesn't cause you any other problems, then it can be safely deleted. You might double check under you Add/Remove programs to jog your memory of programs installed. Also, you can check in task manager to see what processes you have running that may relate to this file.

Rootkits are not what you want in your system. I would recommend that you do go to the Malware section of this forum and let the Malware Experts thoroughly help you out.

Ron