rasmans.dll? Is that bad?

Viruses and worms
1

Hello everyone.

Today, I was using the tablet and suddenlly, Avast told me that rasmans.dll tried to modify a file.
Since I didn’t know if that’s a file from Microsoft or not, I decided to deny the modification.

Now, after researching, it looks like it’s from Microsoft, but there’s also a possibility of it being a malware disguised as the file, so in any case, I will leave here the logs to prevent any future problems.

This is the information got from the file C:\ProgramData\AVAST Software\Avast\report\FileSystemShield.txt:

16/12/2016 12:16:12 Modification of: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\RasMan\Parameters
By: C:\Windows\System32\rasmans.dll
Via: C:\Windows\System32\svchost.exe
→ Action denied

PS: The tablet has been scanned with Avast full scan, MBAM full scan, ESET Online Scan and nothing was detected.

2

suspicious file(s) can be uploaded and testet here > virustotal.com / jotti.org / metadefender.com
if scanned before, click rescan for a fresh result
use the additional tabs to find additional file info

3

Link of the scan of svchost.exe:
https://www.virustotal.com/pt/file/710134ffaf3a08d1b217da2f90afd85ae2e0d20f5d8968901b5943b26aa2f44b/analysis/1481945538/

Link of the scan of rasmans.dll:
https://www.virustotal.com/pt/file/7bd1f41bbb4cbf9ee144933a15821ca70b316896c2b8330c5d00ed9cf835253b/analysis/1481945461/

In the rasmans.dll scan, 1 AV (that I never heard about) detected as a malware, all the rest told is clean. Maybe it’s a false-positive?

4

Clean logs = False Positive.

5

Well then, that’s nice to hear.
But it’s strange that it only happenned in my tablet, and my laptop (which is also using Windows 10), didn’t happenned anything.

Thank you.