RegAsm.exe is not a virus, this is a process linked to Microsoft’s .net framework. However, the fact that you’re continuously seeing application errors saying that, RegAsm.exe application was unable to start correctly (0xc0000005), is a clear sign that the source of these messages is a malicious program opening up a RegAsm.exe process. Usually these malicious programs are Trojans part of the RAT family (Remote Access Tools); most of these are coded in VB.NET or VBS. Bladabindi is one perfect example.
When someone is using a RAT, no matter where they might be physically speaking, they can have the same experience as if they were in front of the controlled computer. Their keyboard becomes the distant keyboard, their screen shows whatever is on the distant screen, their mouse becomes the same as the distant mouse, etc… no restrictions whatsoever.
A RAT using RegAsm.exe processes might be distributed through e-mail messages. Even if not Spam, you must never open e-mails coming from senders you do not know or identify, nor you must click on links you get on e-mails.
Another way these programs are broadcast is by fake tools often found in P2P networks where parasites have the most enticing names, usually some game or popular song.
This free guide will help you remove the malicious program behind the RegAsm.exe errors.
View full solution