Jump to content


Photo

oalinst.exe


  • Please log in to reply
3 replies to this topic

#1 memoemc2

memoemc2

    New Member

  • Members
  • Pip
  • 46 posts
  • Gender:Male
  • Location:Downunda !

Posted 17 October 2010 - 01:08 PM

Gooday mates:

I posted it first in the False Positives Section without success and here we go. Well I have a question about a file called: oalinst.exe

The file info as follows:

====================================================
C:\Program Files\OpenAL\oalinst.exe
Size: 764 KB (782,336 bytes)
Size on Disk: 764 KB (782,336 bytes)
Created: Tuesday, 3 November 2009, 7:47:52
Modified: Thursday, 31 July 2008, 7:02:28
Accessed: Today, 18 October 2010, 3:04:38
Comment: Installs OpenAL32.dll (6.14.357.22) and wrap_oal.dll (2.1.8.1)
Company: Creative Labs Inc.
File Version: 2, 0, 3, 0
Internal Name: oalinst.exe
Product Name: OpenAL Installer
Product Version: 2, 0, 3, 0
Format profile : Executable / Intel i386
File size: 764 KiB
Encoded date: UTC 2007-07-09 17:59:13

In the registry, it is in:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OpenAL

=============================================================

Well, I don't remember to have installed this "application", I was just checking the Program Files Folder and I found this pearl.
What is this?
What does it do, or even better What is it doing?
What does it come from?
In fact is doing something because I tried to uninstall it with Revo and it warned me about it was being used by other programs; but which one(s)?

I googleed the mystery and I found heaven and hell:

Heaven:
http://connect.creativelabs.com/openal
It says: OpenAL is a cross-platform 3D audio API appropriate for use with gaming applications and many other types of audio applications.

Hell:
http://spywarefiles....ALINST.EXE.html
The link above is from Prevx; well it appears with a girl in a mood of nagging (just imagine your girl expression when you arrive late and a little bit drunk ) and it says that it is a Worm and/or Malicious Software; additionally, tells me I'm being traced !?

Anyway I scanned with MB and with MS Essentials and nothing happened.

I didn't know that I could upload a file here; so I will provide a Megaupload link and I will zipped it and upload it (two is better than one)

Please let me know as much as you can about this file. It is in my 3 machines:
wife: Vista Home Premium SP2
daughter and me: Win XP Pro SP3

My machines are fully updated and protected

Thanks in advance for helping to solve this mystery.

bye

Attached Files



#2 Haider

Haider

    Forum Deity

  • Honorary Members
  • PipPipPipPipPipPip
  • 1,823 posts
  • Gender:Male

Posted 17 October 2010 - 01:18 PM

Hello memoemc2:

The first thing you should do is zip it and upload to VirusTotal, ThreatExpert, NoVirusThanks to check, then post back the resulting link from each using Posted Image button
"Learning is the only thing the mind never exhausts, never fears, and never regrets"

#3 memoemc2

memoemc2

    New Member

  • Members
  • Pip
  • 46 posts
  • Gender:Male
  • Location:Downunda !

Posted 17 October 2010 - 02:49 PM

well, I did the scan and it seems clean.

However:
What is this?
What does it do, or even better What is it doing?
What does it come from?
In fact is doing something because I tried to uninstall it with Revo and it warned me about it was being used by other programs; but which one(s)?


File Info

Report date: 2010-10-17 21:30:45 (GMT 1)
File name: oalinst-exe
File size: 782336 bytes
MD5 Hash: 75ca10b6d41ed18fc653461e63d247cf
SHA1 Hash: 598f976ffe6350b76d90b13afd199361a798c445
Detection rate: 0 on 16 (0%)
Status: CLEAN

Detections

a-squared -
Avast -
AVG -
Avira AntiVir -
BitDefender -
ClamAV -
Comodo -
Dr.Web -
F-PROT6 -
Ikarus T3 -
Kaspersky -
NOD32 -
Panda -
TrendMicro -
VBA32 -
VirusBuster -
[/color]
[i]Scan report generated by
NoVirusThanks.org


Thank you

#4 wildman424

wildman424

    Forum Deity

  • Malware Hunters
  • PipPipPipPipPipPip
  • 1,684 posts
  • Gender:Male
  • Location:USA

Posted 17 October 2010 - 03:49 PM

What is this?
What does it do, or even better What is it doing?
What does it come from?
In fact is doing something because I tried to uninstall it with Revo and it warned me about it was being used by other programs; but which one(s)?


Question ?
Do you do a lot of online gaming ??
I've seen OpenAL installed with online games in the past multiple applications use OpenAL

OpenAL (Open Audio Library) is a free software cross-platform audio API. It is designed for efficient rendering of multichannel three dimensional positional audio. Its API style and conventions deliberately resemble those of OpenGL.

OpenAL was originally developed by Loki Software in order to help them in their business of porting Windows games to Linux. After the demise of Loki, the project was maintained for a while by the free software/open source community and implemented on NVIDIA nForce sound cards and motherboards; it is now hosted (and largely developed) by Creative Technology with on-going support from Apple, Blue Ripple Sound, and free software/open source enthusiasts.

Virus Total Results - scan was ran on the file you provided
File name: oalinst.exe
Submission date: 2010-10-17 20:40:35 (UTC)
Current status: finished
Result: 0/ 42 (0.0%)
MD5: 75ca10b6d41ed18fc653461e63d247cf
http://www.virustota...1ba1-1287348035
Wildman424
malware fighter




1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users