Thank you for a useful information but it is not answer for my question (probably it is a result from my poor english :-\).
[17/Dec/2004 16:33:14] “Network” action = ‘denied’, descr = ‘N/A’, proto = 6, laddr = 0.0.0.0, raddr = 83.29.148.201, lport = 135, rport = 3877, direc = ‘in’, ruleId = 1543504693, proc = ‘C:\WINDOWS\SYSTEM\RPCSS.EXE’
[17/Dec/2004 16:33:16] “Network” action = ‘denied’, descr = ‘N/A’, proto = 6, laddr = 0.0.0.0, raddr = 83.29.148.201, lport = 135, rport = 3877, direc = ‘in’, ruleId = 1543504693, proc = ‘C:\WINDOWS\SYSTEM\RPCSS.EXE’
[17/Dec/2004 16:33:20] “Network” action = ‘denied’, descr = ‘N/A’, proto = 6, laddr = 0.0.0.0, raddr = 83.31.150.207, lport = 135, rport = 3213, direc = ‘in’, ruleId = 1543504693, proc = ‘C:\WINDOWS\SYSTEM\RPCSS.EXE’
[17/Dec/2004 16:33:22] “Network” action = ‘denied’, descr = ‘N/A’, proto = 6, laddr = 0.0.0.0, raddr = 83.31.150.207, lport = 135, rport = 3213, direc = ‘in’, ruleId = 1543504693, proc = ‘C:\WINDOWS\SYSTEM\RPCSS.EXE’
[17/Dec/2004 16:33:28] “Network” action = ‘denied’, descr = ‘N/A’, proto = 6, laddr = 0.0.0.0, raddr = 83.31.214.48, lport = 135, rport = 1376, direc = ‘in’, ruleId = 1543504693, proc = ‘C:\WINDOWS\SYSTEM\RPCSS.EXE’
[17/Dec/2004 16:33:56] “Network” action = ‘denied’, descr = ‘N/A’, proto = 6, laddr = 0.0.0.0, raddr = 83.31.2.178, lport = 135, rport = 2311, direc = ‘in’, ruleId = 1543504693, proc = ‘C:\WINDOWS\SYSTEM\RPCSS.EXE’
It is fragment from my log, which was made by Keiro Firewall, just after installing Avast!. And I don’t know why rpcss started opening new connections??