Reports have recently increased about a process in Microsoft Windows, called rcpnet.exe, believed to be located in C:\WINDOWS\system32\rpcnet.exe. This program is not considered to be a virus and has been reported to be the process of the service Remote Procedure Call by Absolute® Lojack software, protecting mobile devices, such as pads, laptops and smartphones from theft by different means. It is believed to be very difficult to remove since some claim that it can withstand factory resets or hard drive wipes.
Why Do People Consider Rcpnet Malware?
Most users may report rcpnet.exe as a virus, because of two main reasons. One of them is that they cannot remove it, since it may be located in MBR (Master Boot Record) which makes it impossible to delete ,even via software. Some even claimed to try removing it via /Root/LEGACY. However, they say that it restored itself right back after a reboot of the machine. Despite that, there might be a possibility to remove it if you installed it yourself.
The other reason that it is considered a virus is that it may sometimes pop up as malware if you scan your PC, reports claim. The only way to eliminate this is to add exceptions in your antivirus for the rcpnet.exe. Also, another symptom for believing it is a virus is that it is considered sometimes to run rcpnet.exe process that is not a part of Windows services, even though it may be located in the \system32\ folder.
Even though it is not considered a virus if a user would like to use no longer the services of Absolute LoJack, there are two ways of doing it, depending on how it is installed. If it came together with the device when you bought it, you should try to contact either Absolute®Sofware or your retailer. If you have installed it by yourself, it may be possible to uninstall it from the PC from Add&Remove.
To check if rcpnet is legitimate:
→Type ’run’ in the search engine of your Start Menu -> then type ‘MSConfig’ -> press Enter -> Go to the Services tab -> Tick where it says “Hide All Microsoft Services”
After that it is recommended to check all of the services and also see if there is Absolute Software Corp in the Manufacturer tab located next to the service that may be called Remote Procedure Call or RPC.
You should be careful for other similar processes since they may not always be legitimate and may pose risks to your computer. In case you do not have experience with identifying unfamiliar services in your computer or just don’t have the time, you may want to run a full system.
Spy Hunter scanner will only detect the threat. If you want the threat to be automatically removed, you need to purchase the full version of the anti-malware tool.Find Out More About SpyHunter Anti-Malware Tool / How to Uninstall SpyHunter