Solved! Use OREANS32.SYS (Unclassified Malware) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

OREANS32.SYS – Unclassified Malware removal

OREANS32.SYS size: 33824 bytes
OREANS32.SYS hash: 21DC5B289DCE2D32A32BAAB7BCF29A6A

Created files:

%SysDir%\drivers\oreans32.sys

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\oreans32\Type: 01000000
HKLM\System\CurrentControlSet\Services\oreans32\Start: 01000000
HKLM\System\CurrentControlSet\Services\oreans32\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\oreans32\DisplayName: oreans32
HKLM\System\CurrentControlSet\Services\oreans32\ImagePath: %WinDir%\System32\drivers\oreans32.sys

Detected by UnHackMe:

OREANS32.SYS
Default location: %SYSDIR%\DRIVERS\OREANS32.SYS

Dropper information:
MD5: ee249cb0c3c64a800ce17fdf5229591e
File size: 1486848 bytes

Leave a Reply