Re: Nutty idea?
From: sponge (yosponge@yahoo.com)
Date: 01/17/03
- Next message: Thorsten Suckow-Homberg: "Trouble on Port 80"
- Previous message: Joe Samangitak: "Re: I received an unknown Echo Request. What should I do, DENY or PERMIT?"
- In reply to: Art Kopp: "Re: Nutty idea?"
- Next in thread: Skeeter: "Re: Nutty idea?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: yosponge@yahoo.com (sponge) Date: 17 Jan 2003 13:45:05 -0800
>Sketter -
>Would you explain the purpose of rpcss.exe and the downside to
>renaming this file? This is the first time I have seen this posted.
>Thank you.
RPCSS.EXE, first up, ***CANNOT*** be deleted or renamed on Windows NT,
and I think that's true of 2000 as well. Otherwise it should be fine.
RPCSS, to greatly simplify, allows your system to act as a shell for a
remote host. It is thought by some, though incorrectly, to be the
mechanism by which Windows phones home and tattles to Microsoft on
what you search for, what Mp3's you play, etc. Windows even without
it. However it's purpose does place some level of security risk and
this is why many people rename it. It beats deleting it in case some
application needs it. Very few do though.
RPCSS also has some sort of memory management function, although I'm
not completely clear on why or what it does. I can say that any
non-NT/2000 system should usually run fine without it, and you alway
can rename it back if you want to.
Sponge
Sponge's Anti-Spyware Source
www.geocities.com.yosponge
Another new sig...
>>Skeeter <skeeter@bug.net> wrote:
>Well, Sygate is an excellent firewall. Once setup properly, it needs
>little attention. It justs sits there, unnoticed, and does its
thing.
>If you feel it needs to be checked on each startup, having one of the
>startup applications set to "ask me" is an excellent check. So, its
>not a nutty idea. I have rpcss.exe renamed to rpcssXX.exe so it
won't
>phone home to M$. Also, I keep the kernel32.dll "blocked". Just
about
>each time I am on line I do look at my Sygate traffic log just to see
>what is going on.
>Skeeter
- Next message: Thorsten Suckow-Homberg: "Trouble on Port 80"
- Previous message: Joe Samangitak: "Re: I received an unknown Echo Request. What should I do, DENY or PERMIT?"
- In reply to: Art Kopp: "Re: Nutty idea?"
- Next in thread: Skeeter: "Re: Nutty idea?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|