site Search:


 
    All Forums Hot Topics Gallery






how-to block ads


 
Search Topic:
Uniqs:
1158
Share Topic
Posting?
Post a:
Post a:
Links: ·Hijack This logs? ·Panda Free Tools ·Vundo Removal
AuthorAll Replies

zach3
Zach
Premium
join:2000-05-04
Saint Louis, MO
Reviews:
·AT&T Yahoo
·AT&T Southwest

Distributed COM Services?

I have just recently seen this notice when running a security scan form several sites. This one below during a scan by DSL Reports.

Inbound TCP connection
Local address, service is (home,dcom)
Remote address, service is (206.65.191.129,41517)
Process name is "C:\WINDOWS\SYSTEM\RPCSS.EXE"

I have made a rule to block this intrusion (Distributed COM Services) but would like to know what “RPCSS.EXE”, a Microsoft file, is used for and if I should make a rule to block any inbound remote address’s or only block each one on an individual basis?

Thanks,

Zach


wafen
Mr woogie
Premium,Mod
join:2001-02-01
Maplewood MN
kudos:1
Reviews:
·Comcast Formerl..
Host:
Mediacom
Cable users
For Sale/Wanted
Electronics
Cable & Satellite TV

There has been so much about this subject I thought I would just give you the links.

»MS & rpcss.exe..... Hmmmm quite interesting....

»Short Explanation of RPCSS.EXE

»RPCSS.EXE

»RPCSS.EXE

I think this is enough to keep you busy for a while.


zach3
Zach
Premium
join:2000-05-04
Saint Louis, MO

Thanks! Should keep me working for awhile.


zach3
Zach
Premium
join:2000-05-04
Saint Louis, MO

reply to wafen
Finished reading and I think I will block it and see what happens. You have my vote for this evening. Thanks Again, Zach



wafen
Mr woogie
Premium,Mod
join:2001-02-01
Maplewood MN
kudos:1

No problem.
Glad to of been of help.
BTW, there was a lot more than that, but figured you wanted to go to bed this week.:)


Sunday, 03-Jun 16:03:42 Terms of Use & Privacy | feedback | contact | Hosting by nac.net - DSL,Hosting & Co-lo
over 12.5 years online © 1999-2012 dslreports.com.
Most commented news this week
Hot Topics