rasmans.dll? Is that bad?

system · 2016-12-16T22:36:55.000Z

Hello everyone.

Today, I was using the tablet and suddenlly, Avast told me that rasmans.dll tried to modify a file.
Since I didn’t know if that’s a file from Microsoft or not, I decided to deny the modification.

Now, after researching, it looks like it’s from Microsoft, but there’s also a possibility of it being a malware disguised as the file, so in any case, I will leave here the logs to prevent any future problems.

This is the information got from the file C:\ProgramData\AVAST Software\Avast\report\FileSystemShield.txt:

16/12/2016 12:16:12 Modification of: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\RasMan\Parameters
By: C:\Windows\System32\rasmans.dll
Via: C:\Windows\System32\svchost.exe
→ Action denied

PS: The tablet has been scanned with Avast full scan, MBAM full scan, ESET Online Scan and nothing was detected.

Pondus · 2016-12-17T00:47:07.000Z

suspicious file(s) can be uploaded and testet here > virustotal.com / jotti.org / metadefender.com
if scanned before, click rescan for a fresh result
use the additional tabs to find additional file info

system · 2016-12-17T03:38:50.000Z

Pondus post:2:

suspicious file(s) can be uploaded and testet here > virustotal.com / jotti.org / metadefender.com
if scanned before, click rescan for a fresh result
use the additional tabs to find additional file info

Link of the scan of svchost.exe:
https://www.virustotal.com/pt/file/710134ffaf3a08d1b217da2f90afd85ae2e0d20f5d8968901b5943b26aa2f44b/analysis/1481945538/

Link of the scan of rasmans.dll:
https://www.virustotal.com/pt/file/7bd1f41bbb4cbf9ee144933a15821ca70b316896c2b8330c5d00ed9cf835253b/analysis/1481945461/

In the rasmans.dll scan, 1 AV (that I never heard about) detected as a malware, all the rest told is clean. Maybe it’s a false-positive?

dbrisendine · 2016-12-17T09:31:34.000Z

Clean logs = False Positive.

system · 2016-12-17T12:56:56.000Z

dbrisendine post:4:

Clean logs = False Positive.

Well then, that’s nice to hear.
But it’s strange that it only happenned in my tablet, and my laptop (which is also using Windows 10), didn’t happenned anything.

Thank you.

Announcements