rpcss.dll
rpcss.dll sample submitted on 2010-04-06 and identified as a threat.
Alias:
Threat File:rpcss.dll
Submit time:2010-04-06
Excute time:8 min 37 sec
Level of Spread:3
Level of Threat:5
type:Trojan-Dropper.Win32.Kamboda
Filesize:61K Bytes
RPCSS.DLL has been seen to perform the following behavior:
Found on infected systems and resists interrogation by security products
Uses low level functions to hide itself from the user and from system/security processes
RPCSS.DLL has been the subject of the following behavior:
Created as a process on disk
Copied to multiple locations on the system
Deleted as a process from disk
This Process may have been infected by a file infecting virus
Registered as a Dynamic Link Library File
Created as a new Background Service on the machine
Files type
rpcss.dll is a A dynamic-link library,which acts as a shared library of functions.
MD5:nBaNMH5k6ODHqCLxO3Au75pKs71iQ0sF
SHA1..:vj2UupP6AwfI8dT2WJi1CQ8s0EM5yK0G16JddxxB
Path:
\windows\system32\rpcss.dll
Report Countries:
United Kindom
Hungary
Antivirus Program Report:
Avast! Antivirus :Backdoor.Win32.Agent.qnr
BitDefender :AdWare.Win32.SuperJuan.dpo
Sophos :Backdoor.Win32.Agent.lxc
F-Secure :AdWare.Win32.SuperJuan.cfg
Norman:Trojan.Win32.DNSChanger.jdm
Need help? Post you problem on Free Malware Remove Help forum
rpcss.dll Summary
1.Temporarily Disable System Restore;2.Reboot computer in SafeMode;3.delte rpcss.dll virus files and kill rpcss.dll file task process(if have);4.Delete/Modify any values added to the registry by rpcss.dll ;5.delete IE temp files,restart the computer and run a whole scan with F-Secure, Norman. rpcss.dll virus files as following: