MARIA VALERIO asked on January 17, 2013. Status: Answered & Closed.
Is Rpcnetp.exe A Virus Or Trojan?
» is rpcnetp.exe a virus/trojan? i found it in my win vista. this service already running in windows vista service. can i stop this service and delete this file?
Malware bundles itself with legitimate software, or in Trojans, which will disguises itself as a normal exe file or program to trick users into downloading and installing it. Computers that are infected with malware/virus (TrojanSpy:Win32/Dabvegi.D, for example) can exhibit any of the following symptoms: Increased CPU usage; Appearance of strange files, programs, or desktop icons; Slow computer or web browser speeds; Problems connecting to networks; Freezing or crashing; Modified or deleted files.
In case that an exe file is infected with virus or malware, the safest and quickest approach, without being bothered to reinstall Windows, is to use a professional repair tool. It is for this purpose that DLL Suite is released. DLL Suite allows our users to get rid of the exe virus infection annoyance once for all, just because it has a special feature of Fix EXE Virus. This feature can do away with exe virus infection related problems mentioned above.
To determine whether a system file is missing or not, I may use Dashboard menu of DLL Suite. Just click on it and its arrowhead will be turned downward, and then click on the Scan DLL Errors button, DLL Suite will download your needed dll file including any exe file to replace the missing file in your computer. With DLL Suite's Fix Missing DLL, DLL missing, not found, could not be found, failed to load, runtime, startup errors and more PC problems caused by DLL files will never become problems any longer. Of course, you can use it to check Cm106eye.exe for its legitimate presence for Windows 10, Windows 8.1, Windows 8, Windows 7, window xp and vista.
JAMES BURCH replied on January 24, 2013
- WILLIAM LAVERDURE replied on January 17, 2013: » It may or may not be Malware.Malware will often disguise itself as legitimate software. Scan your System for Malware using Malwarebytes:http://www.malwarebytes.org/mbam.php
If necessary, Scan in Safe Mode with Networking. Sometimes Trojans, Viruses, Malware, etc stop you installing and/or updating Programs to remove them in Normal Mode.
How to use Malwarebytes after it is installed:
1. Open Malwarebytes > Click on the Update Tab across the top> get the latest updates.
2. On the Scanner tab, make sure the Perform quick scan option is selected and then click on the Scan button to start scanning your computer.
3. MBAM will now start scanning your computer for malware. This process can take quite a while.
4. When the scan is finished a message box will appear.
5. You should click on the OK button to close the message box and continue with the Malware removal process.
6. You will now be back at the main Scanner screen. At this point you should click on the Show Results button.
7. A screen displaying all the malware that the program found will be shown.
8. You should now click on the Remove Selected button to remove all the listed malware. MBAM will now delete all of the files and registry keys and add them to the programs quarantine. When removing the files, MBAM may require a reboot in order to remove some of them. If it displays a message stating that it needs to reboot, please allow it to do so. Once your computer has rebooted, and you are logged in, please continue with the rest of the steps.
9. When MBAM has finished removing the malware, it will open the scan log and display it in Notepad. Review the log as desired, and then close the Notepad window.
10. You can now exit the MBAM program.
- MARIA VALERIO replied on January 17, 2013: » Thanks but this is not a trojan. It is laptop recovery protection software put on many laptops by companies and schools to help recover stolen laptops. All technically competent malware fighters already know this since we have gone thru finding out what this was awhile ago now. It does not need to be removed. It is there for the owners protection.
- ANTHONY OHLANDT replied on January 18, 2013: » This file (obviously in the system 32 folder) belongs to a recovery tool.Now i have the issue of my antivirus striking alert on every second startup after removing the files again and again... but i just set up win 7 on my new netbook and im neither using any anti theft software nor anything else.
can anybody confirm for sure that this file is harmless and prove it with some evidence or quote?
- DIANE JONES replied on January 18, 2013: » After Trying many fixes to get rid of rpcnet.exe, I used every scanner, malware remover, spyware remover I could think of, and a lot of help from my AV forum (BitDefender). I ran a HJT log to see if it was in there, as it was, I also looked over about 18 different HJT logs with the same problem. And I didn't find one that was able to eliminate RPCNET.EXE. So I went back to where I started Absolute Software Corp. So now Realizing it was not malware or a virus, I had to confirm it was Absolute Software (Lojack tracking Software mostly used in Laptops in case they are stolen). When you go to "services" via Control Panel> Administrative Tools> and open the services icon, Their are two valid services for Remote Procedure Call. They are Remote Procedure Call (RPC) - Status = Started, Startup type = Automatic and Remote Procedure Call (RPC) Locator - Status = Stopped, Startup type = Manual, You do not want to Remove or Disable these. If you have a third one right click go to Properties and open, if the Path isC:\WINDOWS\system32\rpcnet.exe, you probably have Absolute Software. To confirm go to Start> Run and type msconfig, and OK, in the System Configuration Utility open the Services Tab and put a check in the "Hide All Microsoft Services" scroll down to see if it shows Absolute Software Corp.
DLL Q & A you might like:
- Might And Magic Single Player Steam Game in Games Start Menu »
- Mmc.exe Microsoft Management Console Won't Open »
- Netfxupdate.exe Blocked From Loading From Startup List »
- Ofex.exe Stopped Working In Windows »
- Exe Files Open With Adobe Reader »
- SmpSys.exe Has Stopped Working »
- Blue Screen In Dxgmms1.sys »