rpcnetp.exe/rpcnetp.dll removal - Having issues...

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by Byronious, Jan 7, 2007.

  1. Byronious

    Byronious Private E-2

    Alright, so I have searched the forums and have tried everything listed that I could find to get rid of this. I was first having the issue of AntiVir picking up the files as a trojan, I unfortunately do not remember the exact name of the virus and currently AntiVir is not on the system that is supposedly infected as I am trying other scans.

    AntiVir first started detecting it and I started my search to try and remove the issue. On these forums I found a post that contained some information on how to remove it. This infection is on a laptop and there is no retrieval type software as I have read in some areas that this may be what this is for. So after reading the forum posts here I was able to remove the files. However, they keep coming back only this time they are not listed as the original virus name, they are listed as a possible threat in AntiVir.

    So far I have run these scans:
    AVG AntiVirus
    AntiVir PE Classic
    Counterspy
    hijack_this
    killbox
    nod32 AntiVirus
    Pest Patrol
    Spy Sweeper
    Spybot S&D
    Spyware Doctor
    and xClean Micro

    So far nothing has been able to turn up any problems other than the AntiVir HEUR. I am now in the process of running Bit Defender, eWido and possibly Kaspersky. Any input would be greatly appreciated.

    UPDATE: Running BitDefender 8 it found rpcnetp.exe, rpcnetp.exe(2) and rpcnetp(3).exe all to be infected explaining "Behaves like: Win32.ExplorerHijack." All could not be disinfected, but they were moved to the quarantine.
     
  2. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    Welcome to MajorGeeks.com, please follow the steps below:

    - Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support
    • Make sure you check version numbers and get all updates.
    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis:

    Downloading, Installing, and Running HijackThis

    Make sure you also rename HijackThis.exe as suggested in the procedures. Use analyse.exe for the new name. This is very important due to some new infections going around.

    When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too:
    • CounterSpy
    • AVG Antispyware Log - ONLY IF NEEDED you were not able to run CounterSpy
    • Bitdefender - from step 6
    • Panda Scan - from step 6
    • runkeys.txt - the log from GetRunKey.bat
    • newfiles.txt - the log from ShowNew.bat
    • HijackThis
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds