Jump to content

RASAPI32 and RASMANCS detected


Recommended Posts

So i have this client with EAM MAV installed on their computer. I'll see every other day or so, when Emsisoft runs scans, it keeps picking up these entries

Key: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\HPSF_TASKS_RASAPI32 Application.Win32.InstallExt (A) [270559]

Key: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\HPSF_TASKS_RASMANCS Application.Win32.InstallExt (A) [270560] 

it removes them and then I'll see the damn thing come back later one with the same scan, removes, repeats.

I'm not finding a lot of informative information on the net in regards to this. i've run JRT, Adwcleaner, hitman, etc. I can't see what else is causing these entries. I'm thinking it's based on Microsoft's actual software/windows but not 100%. 

Can anyone else assist with shedding some light on this. If it's a false-positive I'll teach EAM to treat it as such. the rest of the computer is clean as a whistle.

 

Full scan log from my dashboard in case: 

Scan Log
Emsisoft Anti-Malware - Version 2017.8.0.7904

Last update: 26/09/2017 4:26:14 PM

Initiated by: Owner-PC\Owner

Computer name: OWNER-PC

OS version: Windows 7x64 Service Pack 1



Scan settings:



Scan type:

Objects: Rootkits, Memory, Traces, C:\, D:\



Detect PUPs: On

Scan archives: On

Scan mail archives: Off

ADS Scan: On

File extension filter: Off

Direct disk access: Off



Scan start: 27/09/2017 7:20:02 PM

Key: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\HPSF_TASKS_RASAPI32 Application.Win32.InstallExt (A) [270559]

Key: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\HPSF_TASKS_RASMANCS Application.Win32.InstallExt (A) [270560]



Scanned 228703

Found 2



Scan end: 27/09/2017 8:34:11 PM

Scan time: 1:14:09
 

 

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...