From: "A&C Thompson"

> If you'd just like ZA to stop asking about it, ensure there are red X's in
the middle column under both,
> 'Allow connect' and 'Allow server'. By just stopping a program from
connecting to the Internet, you will not
> harm the OS. I did a search for rpcxx.exe and found nothing at both
www.dogpile.com  and
> http://www.google.com/advanced_search . hth
>
> Al Thompson

Sorry, I mispelled the name of the program. It is RPCSS. I also did the X's
and then thought about it and removed them so it will ask when it tries
again.

From: David Gillett

>1.  Something you or some program did caused your PC to look for
>neighbors on the local network to talk to.  If you only have the one
>machine, then blocking this is fine, but if you actually have a LAN
>then you might possibly want to be able to do this.
>
>2.  Some "script kiddy" out on the Internet may have "scanned" your
>address, looking for unprotected machines that accept RPC
>connections.  Some of the individual services that connect using the
>RPC mechanism have had security vulnerabilities, and Zone Alarm may
>be reacting to an attempt to connect with and exploit such a service.
>
>  (Ideally, a firewall alert message should include the port numbers
>and IP address(es) involved, allowing us to tell the difference
>between the two scenarios and potentially, in the latter case,
>complain to someone's ISP about inappropriate net behaviour....)
>
>Dave Gillett

I did block it with Zone Alarm and then after reading this, I changed it
back to "ask" so I can maybe get the details of what it is asking for. I
reacted by blocking it and only remember it asking to allow as a server.
I am in a single computer setup but I am connected by a VPN to my employers
mainframe system. They are running Computer Associates's Unicenter TNG and
sdprimer.exe everytime I connect with the VPN so I am sure they are doing
some snooping. I have been approached about internet activity with a list of
all the sites I had been to so I know that is going on. This may be part of
that.

               The NOSPIN Group Promotions is now offering
              Mandrake Linux or Red Hat Linux CD sets along
         with our NOSPIN Power Linux CD...  at a great price!!!
             http://freepctech.com/goodies/promotions.shtml