zach3
Zach
Premium
join:2000-05-04
Saint Louis, MO
clubs:
|  Distributed COM Services?
I have just recently seen this notice when running a security scan form several sites. This one below during a scan by DSL Reports.
Inbound TCP connection
Local address, service is (home,dcom)
Remote address, service is (206.65.191.129,41517)
Process name is "C:\WINDOWS\SYSTEM\RPCSS.EXE"
I have made a rule to block this intrusion (Distributed COM Services) but would like to know what “RPCSS.EXE”, a Microsoft file, is used for and if I should make a rule to block any inbound remote address’s or only block each one on an individual basis?
Thanks,
Zach |
|
wafen
My woogie is Home
Premium,Mod
join:2001-02-01
Maplewood MN
clubs: 
 ·Comcast Formerly ..
Host:
Mediacom
Cable users
For Sale/Wanted
Electronics
Cable & Satellite TV
| There has been so much about this subject I thought I would just give you the links.
»MS & rpcss.exe..... Hmmmm quite interesting....
»Short Explanation of RPCSS.EXE
»RPCSS.EXE
»RPCSS.EXE
I think this is enough to keep you busy for a while. |
|
zach3
Zach
Premium
join:2000-05-04
Saint Louis, MO
clubs: | Thanks! Should keep me working for awhile. |
|
zach3
Zach
Premium
join:2000-05-04
Saint Louis, MO
clubs: |  reply to wafen
Finished reading and I think I will block it and see what happens. You have my vote for this evening. Thanks Again, Zach |
|
wafen
My woogie is Home
Premium,Mod
join:2001-02-01
Maplewood MN
clubs: | No problem.
Glad to of been of help.
BTW, there was a lot more than that, but figured you wanted to go to bed this week.:) |
|
