Hello
Currently, I am using Black Ice on my Windows NT server.
I typically connect to the internet using Comcast cable.

Recently, whenever I start up an program (for example -
Internet explorer, Netscape Navigator, or Microsoft word)I
get a message concerning rpcrt4.dll

For example -
When I double clicked the Microsoft word icon, the
following message appeared -

Possible trojan application detected Winword.exe
(rpcrt4.dll)

After I selected the More info button, the following
information appeared -
the suspect component is C:\Winnts\system\rpcrt4.dll
The next things that happened is my modem tried to dial
out.

I am concerned that remote procedure call utility is
present on my machine. What is rpcrt4.dll?

Thank you

remote procedure call utility ? by rob

rob
Tue Sep 16 11:58:00 CDT 2003

rpcrt4.dll is a normally present file. Its sounds,
however, like you have a virus or trojan problem: this
file is hooked by many viri, including msblaster. What
antivirus program are you using? Have you scanned?
>-----Original Message-----
>Hello
>Currently, I am using Black Ice on my Windows NT server.
>I typically connect to the internet using Comcast cable.
>
>Recently, whenever I start up an program (for example -
>Internet explorer, Netscape Navigator, or Microsoft word)
I
>get a message concerning rpcrt4.dll
>
>For example -
>When I double clicked the Microsoft word icon, the
>following message appeared -
>
>Possible trojan application detected Winword.exe
>(rpcrt4.dll)
>
>After I selected the More info button, the following
>information appeared -
>the suspect component is C:\Winnts\system\rpcrt4.dll
>The next things that happened is my modem tried to dial
>out.
>
>I am concerned that remote procedure call utility is
>present on my machine. What is rpcrt4.dll?
>
>Thank you
>
>.
>

Re: remote procedure call utility ? by Karl

Karl
Tue Sep 16 12:31:56 CDT 2003

www.grisoft.com is free antivirus, if you have no antivirus. www.kerio.com
is free firewall. Both are useful if not necessary here.

You can also run a scan from http://housecall.antivirus.com, but this does
nothing to protect you from becoming infected.


"rob" <rob@rob.net> wrote in message
news:453d01c37c73$af8e7ce0$a501280a@phx.gbl...
> rpcrt4.dll is a normally present file. Its sounds,
> however, like you have a virus or trojan problem: this
> file is hooked by many viri, including msblaster. What
> antivirus program are you using? Have you scanned?
> >-----Original Message-----
> >Hello
> >Currently, I am using Black Ice on my Windows NT server.
> >I typically connect to the internet using Comcast cable.
> >
> >Recently, whenever I start up an program (for example -
> >Internet explorer, Netscape Navigator, or Microsoft word)
> I
> >get a message concerning rpcrt4.dll
> >
> >For example -
> >When I double clicked the Microsoft word icon, the
> >following message appeared -
> >
> >Possible trojan application detected Winword.exe
> >(rpcrt4.dll)
> >
> >After I selected the More info button, the following
> >information appeared -
> >the suspect component is C:\Winnts\system\rpcrt4.dll
> >The next things that happened is my modem tried to dial
> >out.
> >
> >I am concerned that remote procedure call utility is
> >present on my machine. What is rpcrt4.dll?
> >
> >Thank you
> >
> >.
> >



Re: remote procedure call utility ? by Bill

Bill
Tue Sep 16 18:02:30 CDT 2003

Karl - forgive my laziness:

Is there a list of online scanners in your FAQ web pages?

I tend to recommend TREND, simply because I can remember their URL. There's
nothing wrong with that, but I'd be happy to point to a list including their
competitors. I've never figured out a URL for Symantec's online scan.

"Karl Levinson [x y] mvp" <levinson_k@despammed.com> wrote in message
news:eKrQHgHfDHA.368@TK2MSFTNGP12.phx.gbl...
> www.grisoft.com is free antivirus, if you have no antivirus.
www.kerio.com
> is free firewall. Both are useful if not necessary here.
>
> You can also run a scan from http://housecall.antivirus.com, but this does
> nothing to protect you from becoming infected.
>
>
> "rob" <rob@rob.net> wrote in message
> news:453d01c37c73$af8e7ce0$a501280a@phx.gbl...
> > rpcrt4.dll is a normally present file. Its sounds,
> > however, like you have a virus or trojan problem: this
> > file is hooked by many viri, including msblaster. What
> > antivirus program are you using? Have you scanned?
> > >-----Original Message-----
> > >Hello
> > >Currently, I am using Black Ice on my Windows NT server.
> > >I typically connect to the internet using Comcast cable.
> > >
> > >Recently, whenever I start up an program (for example -
> > >Internet explorer, Netscape Navigator, or Microsoft word)
> > I
> > >get a message concerning rpcrt4.dll
> > >
> > >For example -
> > >When I double clicked the Microsoft word icon, the
> > >following message appeared -
> > >
> > >Possible trojan application detected Winword.exe
> > >(rpcrt4.dll)
> > >
> > >After I selected the More info button, the following
> > >information appeared -
> > >the suspect component is C:\Winnts\system\rpcrt4.dll
> > >The next things that happened is my modem tried to dial
> > >out.
> > >
> > >I am concerned that remote procedure call utility is
> > >present on my machine. What is rpcrt4.dll?
> > >
> > >Thank you
> > >
> > >.
> > >
>
>