RPC sonsume 100% Cpu time please helP!

[CyberThug]

Environment:
WIN NT 4.0 TSE SP6. WITH MF1.8

Since last thursday our tse server have been very very slow. I was out of town. Came in yesterday to find out RPCSS.EXE taken up 100% Processor.

I thought perhaps there's a security issue spoofing attack. I reapplied WTSE SP6. That didn't work either. Please let me know what else I should try. I can't stop the service.

 

[browolf]

i found this easy to understand explanation of what rpcss.exe does:

http://www.cexx.org/rpc.htm

it also says you cant stop it and if you somehow do stop it, winnt wont work anymore.
Apparently it's used internally in winnt as well.

if you unplug the server from the network that might show whether its an internal or external problem.

or run foundstone's fport to see what incoming connections there are.

hth ===============
Security Forums

http://www.security-forums.com