Process name: oreans
If you want a detailed security rating about your oreans32.sys (and all other running background processes) read the following user opinions, and download the free trial version of Security Task Manager.
Note: Any malware can be named anything - so you should check where the files of the running processes are located on your disk.
If a "non-Microsoft" .exe file is located in the C:\Windows or C:\Windows\System32 folder, then there is a high risk for a virus, spyware, trojan or worm infection!
Check it out!
Click to Run a Free Scan for oreans32.sys related registry errors
Average user rating of oreans32.sys:
based on 9 votes. Read also the 8 reviews.
552 users ask for this file.
1 user rated it as not dangerous.
3 users rated it as neutral.
2 users rated it as little bit dangerous.
3 users rated it as dangerous.
1 user didn't rate it ("don't know").
|All comments about oreans32.sys: |
| Corrupt Dr|| AVG attacks this file every other time I run Prey. Seems harmless but beware. |
| Kilgore87|| it's a driver but i'm not sure what it does |
| Smil0r|| "oreans32(.sys)" ist gleich "W32/Rbot-EWD". "W32/Rbot-EWD" ist ein Netzwerkwurm und Backdoortrojaner, er läuft kontinuierlich im Hintergrund und stellt einen Backdoorserver zur Verfügung, der einem remoten Eindringling den Zugriff auf und die Steuerung über den Computer mittels IRC-Kanälen ermöglicht. See also: Link |
| EmmettLBrown|| The Windows oreans32.sys is a driver for selection and highlighting and clicking functionality. Whenever masked by or accompanied by a virus, it takes over user-defined selections, and runs as user to double-click and select whatever the virus wants access to. It allows viruses to take control, but the real file appears to be necessary. |
| Serge Nerd|| ComboFix, just classified and removed this virus! See also: Link |
| || Sets the drive to autoplay by creating autorun.inf file in its root directory. If the drive is shared across the network then other remote computers can be infected any time they try to access this share. See also: Link |
| desoto|| oreans32.sys is not necessarily W32/Rbot-EWD! It's a driver by Oreans Technology used mainly for software protection tools like Themida. It's also used to protect modern pc games, for example 'Prey'. Check your #winroot#/system/ dir for a file named "msdn-nt.exe". If it's not there your oreans32.sys should be harmless. In case your system is infected with "msdn-nt.exe", you should remove both files immediately with anti-spyware/antivirus software. |
| Anon|| This driver is created for executables that are packed with Themida (aka WinLicense). The presence of this file should be of no concern, as legitimate applications are packed with this, though some virusses may be packed with this to avoid detection (most if not all av are unable to open Themida packed executables). See also: Link |
More process information
Is oreans32.sys spyware or a virus, trojans, adware or worm? Is there a known oreans32.sys error?
Read more about oreans32.sys on file.net
servicelayer.exe fssm32.exe googledesktopie.dll oreans32.sys clmlserver.exe winamp.exe srvload.exe wintems.exe nodshex.dll lirsgt.sys skype.exe [all processes]