RPCSS and NETBIOS ghosts

From: Bobby (waystark_at_yahoo.com)
Date: 04/03/04


Date: 2 Apr 2004 16:25:20 -0800

I have strange problem with my computer.
After starting computer, I open Outpost firewall and
see in Open Port view that rpcss.exe opened two
TCP ports 135 and 1025. I didn't start any other applications
yet, only Outpost. I've checked registry but no references
to rpcss.exe were found. I blocked TCP ports 135 and 1025
for rpcss.exe and rebooted computer. Everything remained the
same, I still can see rpcss.exe in open port view. Can anyone
explain:
Why rpcss.exe open TCP ports 135 and 1025?
How can I find who starts this application?
Do I need this application running all the time?

If I connect to internet I see that rpcss.exe tries to setablish connection
at the begining of each session, but Outpost firewall blocks it.

Another strange thing is happening too on my computer.
As soon I open internet connection I see that netbios opened
three ports 137-139. Can anyone answer the following questions
about netbios as well:
How can I find who starts this application?
Do I need this application running all the time?
How can I block this application and/or prevent it from starting?

I am running Windows Me. Thanks in advance


Quantcast