Fuente. http://cexx.org/rpcss.htm
The RPCSS program ... is the Microsoft Remote Procedure Call Service.
It facilitates the development and debugging of distributed applications,
apps that are resident on machines other than the local one. While I'm
unaware of any current exploits the software is designed to make it easier
for "nonresident," i.e. non-local applications to run on your machine, and
vice versa.
The RPCSS program is installed by certain Microsoft products such as MS
Visual Studio and Visual C++, Visual Basic, Interdev, and J++. I actually
had this on my own system for some time--since its appearance seemed to
coincide with my installation of the Microsoft "Evil Movie Player"
(necessary for playing all those .ASF files college people on networks
insist on passing around), I assumed it was some kind of multimedia handler
a la MPREXE and MMTASK.
Behavior
RPCSS opens ports on your machine (usually 135 as well as some "random"
ports in the low 1000s) and proceeds to try and access the Internet, setting
off programs such as Zone Alarm and firewalls with its suspicious activity.
While the RPCSS program is probably supposed to serve some kind of
legitimate purpose, it has nonetheless been cited for numerous stability
problems as well as security concerns. (Not to mention the unverified, but
fairly wide-spread, other allegations...)
Post by Jordi Maycasbloquealo, no pasa nada. es microsoft.
A quien pueda ayudarme. Me ocurre que estando
con conexión a Internet, a diario, alguién (creo que
Microsoft)intenta acceder al siguiente
archivo "C:\WINDOWS\SYSTEM\RPCSS.EXE"
No sé si debo dar acceso o denegarlo, pues no sé qué es
este programa y para qué puede querer acceder Microsoft a
él. Alguién puede ayudarme al respecto. Muchas gracias y
un saludo a todos los que participan en este grupo de
noticias.
Yolanda.