 zach3ZachPremium join:2000-05-04 Saint Louis, MO Reviews:
·AT&T Yahoo
·AT&T Southwest
| Distributed COM Services? I have just recently seen this notice when running a security scan form several sites. This one below during a scan by DSL Reports.
Inbound TCP connection Local address, service is (home,dcom) Remote address, service is (206.65.191.129,41517) Process name is "C:\WINDOWS\SYSTEM\RPCSS.EXE"
I have made a rule to block this intrusion (Distributed COM Services) but would like to know what RPCSS.EXE, a Microsoft file, is used for and if I should make a rule to block any inbound remote addresss or only block each one on an individual basis?
Thanks,
Zach |
|
 wafenMr woogiePremium,Mod join:2001-02-01 Maplewood MN kudos:1 Reviews:
·Comcast Formerl.. Host: Mediacom Cable users For Sale/Wanted Electronics Cable & Satellite TV
| There has been so much about this subject I thought I would just give you the links.
»MS & rpcss.exe..... Hmmmm quite interesting....
»Short Explanation of RPCSS.EXE
»RPCSS.EXE
»RPCSS.EXE
I think this is enough to keep you busy for a while. |
|
 zach3ZachPremium join:2000-05-04 Saint Louis, MO | Thanks! Should keep me working for awhile. |
|
|
|
 zach3ZachPremium join:2000-05-04 Saint Louis, MO | reply to wafen Finished reading and I think I will block it and see what happens. You have my vote for this evening. Thanks Again, Zach |
|
 wafenMr woogiePremium,Mod join:2001-02-01 Maplewood MN kudos:1 | No problem. Glad to of been of help. BTW, there was a lot more than that, but figured you wanted to go to bed this week.:) |
|