win32 DCom-F virus

system · 2007-08-21T02:51:26.000Z

I have 2 computers running Windows XP Pro with the Avast Pro version running, on a daily basis they report the win32 DCOM-F virus, where is it coming from and how can I stop it from coming back, I am unable to find any info on this virus anywhere.

system · 2007-08-21T03:37:09.000Z

Some info here in this Google search …

http://g.s.scandoo.com/search?hl=en&meta=on&q=win32+DCOM-F+virus

One of the results pages suggested this …

Manual Exploit.Win32.DCom.f removal:
Kill process rpc_kotic.exe
Delete file rpc_kotic.exe

Spybot - Search & Destroy should also be able to remove this trojan exploit.

DavidR · 2007-08-21T12:31:47.000Z

Which provider is reporting the win32 DCOM-F infection ?

The Network Shield can block DCOM exploits but this sounds more like it is detected by either the web shield or the standard shield providers.

What is the infected file name, where was it found e.g. (C:\windows\system32\infected-file-name.xxx) ?
Check the avast! Log Viewer (right click the avast ‘a’ icon), Warning section, this contains information on all avast detections.

Announcements