RPCSS.exe disable and NT/2000/XP?

I would like to disable RPCSS.exe to close port 135.

I understand (from the Avast! thread) that renaming the file rpcltscm.dll to a .txt extnesion *may* lobotomize the server functionality of RPCSS.exe (and hence close pesky port 135).

But has anyone actually successfully done this on an NT/2000/XP machine? I understand NT systems rely heavily on RPC, and may not boot if RPC functions are modified or switched off.

Can anyone confirm this workaround works on NT systems with no ill effects?

 

Heh heh heh, yeah, that's what they said over at Microsoft. "Hey, what's 135 open for?" "(cough, cough, spitting up their coffee)...just use a firewall, Okay?" Uh-huh. I guess it's something to try disabling next time I'm re-building my machine anyway.

Securing Windows XP Inside Out, a Microsoft book, indicates there are two RPC services, 'RPC' and 'RPC locator', but XP Pro shows only RPC (I'm guessing 'locator' was integrated into 'RPC'), which of course you can't disable without making the system unusable. I understand more or less what RPC does generally, I think it's just too bad that a 'server' portion of it has 135 open, for unspecified reasons, at all times...

I have Port Explorer logging it now, I wonder if I'll see anything. Probably not!

Ah, well, maybe time to start using Linux...

I don't think what you said was funny, but I do think it is sort of funny coming from them. Thank you for your input!

P.S.: I was just checking this out with Faber Toys, and among the many imported modules associated with the particular Svchost process (pid 764 on my machine), that keeps port 135 open, and more specifically with RPCSS.dll, is some sort of function call called "impersonateloggedonuser". I'm not a programmer, but that sounds just lovely. At least the calling thread needs 'privileges'. Discussed here: http://msdn.microsoft.com/library/default.asp?url=/library/en-us/security/security/impersonateloggedonuser.asp

Incidentally, I cannot even find rpcltscm.dll on my machine.

 

Well actually their is a registry hack which will stop it from listening on port 135, and I haven't expirenced any side effects

http://www.hsc.fr/ressources/breves/min_srv_res_win.en.html

 

LOLOLOL

Welcome Justin

I had to look twice at this thread , thinking that was me posting.
Foghorn Icon

I am a very newbi Linux user and been trying Cookers 9.2 without any luck at all. So I am now taking the Mandrake users advice and downloading 9.1

Here is what the Linux users tell me about Windows and Microsoft.

"The first thing you will notice between xp and linux, is that mandrake is not reporting your movements and activities to France, where as windex is reporting anything it can about you to Redmond. No, it didn't ask for your permission, it just does it. You see, you don't own xp. You paid to be allowed to use it and microblast figures you owe them something. No, your money wasn't enough! "

I am sure MS would not Use port 135 to keep tabs on people.
I also don't think there is a Magic Lantern? What ever happened to that government worm anyways? I don't hear much talk about that anymore.

con