Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Latest News: GandCrab v5 Ransomware Utilizing the ALPC Task Scheduler Exploit

Featured Deal: Get 92% off The Complete Cisco Network Certification Training Bundle

spywareinfo says Oreans32 might be bad or legitimate... how do I tell?

Started by Moginheden , Dec 15 2009 05:47 PM

Please log in to reply

No replies to this topic

#1 Moginheden

Members
14 posts
OFFLINE

Local time:01:43 AM

Posted 15 December 2009 - 05:47 PM

A few months ago I was infected with a Google hijack, (that seemed to bring along it's friends in the spyware community.) I think I'm clean now but my monthly spyware scans just picked up "Unclassified.Oreans32". I scanned with Malwarebytes and found nothing and scanned with spywareinfo and found Oreans32. I also have Kaspersky running all the time and it hasn't found anything so I THINK I'm clean...

Spywareinfo's "Explain Detected Item..." button told me that Oreans32 is sometimes legitimate and sometimes part of spyware, but didn't tell me what legitimate programs use it. I'm guessing it's part of the DRM on one of the games I have installed, (whoever came up with DRM should be shot BTW...) but I'd like to know for sure. How can I find out what is using c:\windows\system32\drivers\Oreans32.sys?