Any clue as to what this file is?

Hello.

anyone have any clue what a opls.dll file is? because where i live at here I’m responsible for 3 computers and SUPERantispyware flagged this as a “Trojan.agent/gen-nullo[short]” and here is the virustotal report of the file
http://www.virustotal.com/analisis/40fec79ceaa5c4b9af6d4b766f85fa25905066857c55c7004b3db102b6e36f3c-1270576233
since only 4 scanners detecting it I’m almost sure its a FP because of that I sent it to SUPERantispyware as a suspected false positive, that was 2 weeks ago and after daily updates it is still flagged as a Trojan.agent and because it was still being detected I sent it to avast! as a possible undetected malware sample and that was 2 weeks ago and its not detected by avast as any malware. and MBAM does not detect it either.
The reason why I post this is because I am honestly confused as to what to do with this file.

Thanks

Google doesn’t give any indication that opls.dll is legit. I’d be inclined to move a copy of it into the Virus Chest for safekeeping and then delete it from your system. If that doesn’t cause any problems, then I think you can safely leave it in the chest and forget about it.

In Avast 5: Right-click anywhere in the Maintenance > Virus Chest pane, browse to the opls.dll file and click Open to copy it to the chest. Then browse to it with Window Explorer and delete it.

Edit: It looks like it may be associated with OpinionSquare software. Do you have that installed on your computers?

I already have a copy in the virus vault AND a copy on a USB stick (how i transfered it to this computer) and ive never heard of Opinionsquare software but Ill have to check tomorrow.

EDIT* I forgot to mention in the opening post that this file was found in a folder named “Avenger” on the C drive.

Isn’t “Avenger” one of the tools that essexboy uses on occasion for more stubborn malware removal.

Hello DavidR, Im not quite sure, and if it is im not sure how it would have gotten on the computer where I discovered this file at because I never used a tool called “Avenger” on it, Im just trying to figure out what this file is and if its malicious or not because both avast! and SAS are not budging on it.

Justin_xp, what you might have is some file that has been previously removed by Avenger but is now inactive in so much as it is not a running process (this is just a guess). certainly it is rated a danger, given a specific environment.

Check this link
http://forums.techguy.org/windows-xp/466533-i-think-i-got-w32.html

Potentially a Winsock hijacker, that is hijack internet access, and a keylogger.
But rather unusual circumstances you have so I wouldn’t hazard more than a guess

A bit weird if you haven’t used Avenger (to the best of your knowledge).

However I would certainly not rule it as an FP, given you have know knowledge of the folder either. Is there any other information that you might glen from this folder, e.g. any program files (.exe) which have any information in the file properties as to the program/company.

I would certainly view it on the side of safety as Alan mentioned and add it to the avast chest, remove the original and see if anything has a whinge about it being missing. I would also say you should check out the link given by mkis.

If it were a keylogger I don’t know if Zemana would a) detect its presence or b) prevent any data harvesting. You should also check running processes (task manager and or process explorer) to see if it, opls.dll is running.

Thank you DavidR I will do as you instructed. As for a .exe? opls.dll is the only file in the folder no other which makes me question its legitimacy since I have never seen that before.

Hi justin_XP,

Look here: http://www.prevx.com/filenames/X1387222194110511682-X1/RLLS.DLL.html

Generic malware has been detected in these two files,

opls.dll 26168a2db2706d26be605e77b3d714d2
rlls.dll 94a54c469442b5dd83431e2f5b571d8b

polonus

Thank you Polonus that helps alot :slight_smile: when i googled the file name I couldn’t find much info at all.