Jump to content

Home

Strange Program turning up in ZoneAlarm...


•-BLaCKouT-•

Recommended Posts

Heya folks,

I've been having a few probs with my Broadband Modem this last week, and I've been trying to diagnose the cause. After a variable length of time, it just seems to ignore my broswers and e-mail programs.

When I refresh Mozilla I just get a 'Done' message in the bottom left, even though the page is blank. Using IE6 I get a 'Page Not Found'.

Trouble is I can have a BitTorrent download in the background and it runs fine, so I don't know if it's a port problem.

And disconnecting and re-connecting 'seems' to work okay (but actually doesn't), you get the 'handshake' and everything but the browsers still don't respond.

The only way to 'fix' it seems to be to restart the computer.

 

Now, I have noticed a strange program in ZoneAlarm that I've never noticed before, and I don't know if this is affecting my modem access...

 

My System: (don't laugh ;) )

750mhz Athlon / 256 RAM / Windows 98

ISP: BT Broadband

 

Things that have changed on my system in the last week:

 

• I've installed (after MUCH grief) a Lexmark USB Printer, which constantly runs a program called Lexpps in the background whether the printer's plugged in or not.

• I installed Spybot: Search & Destroy, but I've since uninstalled it, wondering if it had 'fixed' something it maybe shouldn't have. I've got no problem in re-installing it if needs be.

 

What Zone-Alarm's got to say

 

When it's got access, floating the mouse over the icon brings up:

Distributed COM Services

Listening to Port(s): TCP: 135, 1025

 

When you select the prog in the list, it displays these details:

Product Name: Microsoft® Windows NT Operating System

File Name: C:\Windows\System\RPCSS.exe

 

None of these names show up in the Task list. So I don't know what task to end :confused:

Now I've got a funny feeling that the NT Operating System is a load of crap designed to lull you into letting it have internet access, but I could be wrong...

 

My virus scanner's picking up nothing either.

 

Any ideas you good, good people? :confused:

 

Thanks in advance,

B.

Link to comment
Share on other sites

I got a COM thing before, too. Surrogate Com was it's name, ZA said that it was supposed to be dangerous, but I checked on google and it was really supposed to be a part of the system. Mind you, I have XP, so maybe it's the same thing in 98 except with a different name.

 

Anyway, a google brings up this.

 

http://cexx.org/rpc.htm

 

Judging from it, it isn't dangerous. A security hole maybe, but it's presence isn't bad.

Link to comment
Share on other sites

This is the infamous ports that should be closed down ASAP, I think it may have been MSBlast that uses these ports to try and get in on.

 

There is no need for RPC (Remote Procedure Calls) to be run at all on most PCs.

 

I would do a search on a program called "Dcombobulator" so that it can turn off those IP ports.

Link to comment
Share on other sites

  • 2 weeks later...

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...