Access denied for Application Data Rpcnet and Flagged as Rootkit

Viruses and worms
1

Hello to this great service, and I honestly mean that.

This file (which I google searched and not found any information) was flagged as an unknown rootkit with unknown author in a scan.

When I click on the folder, XP says file is not accessible, access is denied. But I have all options to allow me to access all files.

C:\Documents and Settings\All Users\Application Data\Rpcnet

Rpcnet
Tested files/folders: 1/6
Amount od data tested: 422.0 B
Infected fles: 0

Avast, MBAM says clean. When I right-click properties, it says nothing inside and MBAM says nothing, but avast says 6 files and memory.

I see a lot of old folders of uninstalled programs in Application Data, this one says created August 2010, but I worried that nothing lets me see what inside this one. Any ideas what this folder is for?

It was logged as an unknown author in a scan, and this is first time I found.

I have HP laptop with XP.

A few days ago had a security scare on my work laptop, that why more concerned than usual. I need to remember to be less paranoid :slight_smile:

2

The file is legitimate but the location is very wrong

Are you able to delete it ?

3

Not able to delete or make copy, in normal and safe mode.

Also, my Windows Firewall is again shutting off/on when reconnecting to Internet. I’m the author of “Hosts File In Chinese” topic.

4

Run a quick OTL scan selecting all users

5

Here OTL.

Sorry for my late reply, I was trying Comodo Firewall, but when I used Comodo Firewall the turn off/on never happened, seems only Windows Firewall is having that problem.

About the firewall issue, what do you think is the cause of problem?

6

No apparent problems there. Are you using Comodo now instead of windows firewall ?

7

I tried Comodo today, but uninstalled it after I did bad options configuration.

8

About the firewall issue, could it be because of some firewalls needing to be off when DNS?

9

DNS has no effect on firewalls, is it still being tardy in turning on

10

Yes :cry:

11

1…Rpcnet…My laptop before my Dell desktop crashed was the family’s at our home. So maybe it had Lojack before. Should I consider Rpcnet an infection or part of uninstalled program?

2…Windows Firewall…Is there anything else I can do for it, besides switching to another firewall?

12

You cannot uninstall lockjack without a special tool

Did you run the tweaking.com firewall reset programme

13

Yes, I also reinstalled Windows Firewall…same problem after.

Before Avast, the laptop had Norton. I read Norton can cause problems.

Is having Rpcnet a security risk?

14

Have you run the Norton removal tool https://support.norton.com/sp/en/uk/home/current/solutions/kb20080710133834EN_EndUserProfile_en_us

15

While you wrote that, I thought about it and used the Norton Removal tool ;D

16

Firewall reconnection problem, again :cry:

17

Reviewing my laptop’s firewall problem, do you think it is an error, or infection?

Also, do you consider the Application Data/Rpcnet to be remaining uninstalled program, or infection?

18

The firewall is indicative of an error

Lockjack is a part of the laptop and not an infection :slight_smile:

19

:slight_smile: :smiley: ;D.

20

Any other instructions, or should the 2 problems be considered solved?