Folder AVG Forums » AVG SMB » AVG Admin » C:\Windows\System32\rpcss.dll Infected
February 20, 2014 00:27 C:\Windows\System32\rpcss.dll Infected #240410
Top
tesla1886

Avatar

Novice
Join Date: 27.6.2013
Posts: 8
How can I resolve this?

AVG Business Edition reports C:\Windows\System32\rpcss.dll is infected and cannot be removed automatically. I have run Spybot, Malwarebytes, AVG and Combofix all from safe mode. While numerous other issues were resolved this issue remains.

I do not want to just delete the file because doing some research rpcss is related to Remote Procedure Call.

AVG did not detect anything in Safe Mode.

I have attached a jpeg of further details provided by AVG Admin Console.

Thank You
AVG.jpg
February 20, 2014 15:59 Re: C:\Windows\System32\rpcss.dll Infected #240438
Top
Optic

Avatar

Moderator
Join Date: 27.10.2009
Posts: 953
Hi tesla1886,

The detection is on an operating system file so will need replacing. You should be able to get a clean version of the file from a matching operating system or Windows installation disc.

To replace the file, it depends on the operating system. For XP, use the Recovery Console or Vista+, use the repair your computer option - http://windows.microsoft.com/en-gb/windows/advanced-startup-options-including-safe-mode#1TC=windows-7 - command prompt can be accessed here to replace the system file.

Another option would be to use the AVG Rescue CD to replace the file - http://www.avg.com/gb-en/download.prd-arl

Instructions for File Manager utility can be found here - http://www.avg.com/gb-en/226386

Let me know if you need any detailed instructions.

Thanks,

Michael Allen

AVG Customer Services

http://www.avg.com



Join the AVG community!

http://www.facebook.com/AVGFree

http://www.twitter.com/avgfree

http://www.youtube.com/officialavg
May 13, 2014 20:35 Re: C:\Windows\System32\rpcss.dll Infected #242992
Top
rogd39

Avatar

Novice
Join Date: 13.5.2014
Posts: 1
rpcss.dll file..

I have an infected rpcss.dll file that AVG cannot remove. I don't have the Windows installation disk but I do have a laptop with the same vs of Windows 7. I was going to copy it from my laptop and use it to replace the infected one on my computer but although both files have the same date created and date modified, the laptop file is 500kb and the infected one is 508kb.

Will that be a problem replacing the file?

Thanks,

Roger
May 13, 2014 20:53 Re: C:\Windows\System32\rpcss.dll Infected #242993
Top
BIG AL 43

Avatar

Moderator
Join Date: 19.6.2014
Posts: 0
@ rogd39

Roger, Please see top of this webpage. You may not have noticed but this forum has now been virtually closed down to become 'read only'. Perhaps you may wish to also now post @ 'AVG Community' http://www.avg.com/support (Scroll Down). [Search & Post in 'Business Products']. Within that post then refer back to this posting #242992 on this AVG Forums.


AVG Forums Volunteer ModeratorAVG Forum member since - Nov. 27, 2004My total posts on the Old AVG Free Forum - 27,063
Alan
How-To Articles | FAQ | Free Support
May 15, 2014 11:48 Re: C:\Windows\System32\rpcss.dll Infected #243010
Top
Optic

Avatar

Moderator
Join Date: 27.10.2009
Posts: 953
Hi rogd39,

It may be possible for Windows to replace the file automatically:

- Goto Start > All Programs > Accessories
- Right click 'Command Prompt' > Run as adminstrator
- Copy this into command prompt and press 'enter'

sfc /scanfile="c:\windows\system32\rpcss.dll"

SFC will scan the file and will replace it on reboot if found to be different from the original.

If this doesn't help, as long the version of rpcss.dll is the same and copied from the same operating system and service pack, then there shouldn't be any problems. The discrepency in file size is probably because the infected one has been modified.

Please let us know if you need anything else.

Thanks,

Michael Allen

AVG Customer Services

http://www.avg.com



Join the AVG community!

http://www.facebook.com/AVGFree

http://www.twitter.com/avgfree

http://www.youtube.com/officialavg