What is "Andrea ADI Filters Service" ? (Windows 7 64-bit)

[wfejnieh2]

What is, "Andrea ADI Filters Service" and what Startup Type should I assaign the Service (Local) on a dc7900 Convertible

MiniTower running Windows 7 Ultimate 64-bit and Internet Explorer 11 as the Default Browser - can anyone help?

Thank You!  Jeff

[Paul_Tikkanen]

Hi, Jeff

Please see this link for an explanation of the service.

The recommended setting is to disable if you don't use a microphone.

http://www.bleepingcomputer.com/startups/aeadisrv.exe-26094.html

Happy Holidays!

Paul

[wfejnieh2]

Thanks, Paul.  I did "google" it and came up with a bunch of opinions ..... But, I didn't know quite where I picked it up and

thought this was the best place to start looking!  I appreciate the 'kick-back' and hope you're doing well!       

Kind Regards, Jeff

[Paul_Tikkanen]

You're very welcome, Jeff.

[wfejnieh2]

Paul (if you're still there!)  I've had 'something' that has popped-up in my Services List.  It's "Remote Proceedure Call Net"-

(RPCNET, or RPCNETP) which pops up after booting.  It's an '.exe' file and it's Started.  When I try Rt clicking on it

(Properties), it doesn't show a 'Path', e.g., C:\Windows\...  I was thinking it had a "Trigger" starting it automatically on

BOOT.  It once revealed a 'Path' of C:\ProgramData\RpcNet (or rpcnetp) as an '.exe' file that I didn't have permission to

expand or open.  I think I got rid of it by going into the registry and deleting all of the ' rpcnet' and 'rpcnetp' links and gave

myself some extended 'Privaleges' while there (smile).  I was up until 2:00am last night and I've worked on it most of the

day.  This 'problem' is showing up on my dc5800mt running Windows 7 Ultimate 64-bit (like on my dc7900CMT is

running) but the dc7900 doesn't have the problem.  I know I haven't given you much to work with, but I wasn't taking

notes but "I was on a roll", so-to-speak, solving the problem.  Thanks Again,  Jeff

[Paul_Tikkanen]

Hi, Jeff:

This is what I could find on that application...I could not find anything about the 'Net" part.

General info:

http://technet.microsoft.com/en-us/library/cc787851(v=WS.10).aspx

How to stop it.

http://computerstepbystep.com/remote_procedure_call_(rpc)_service.html

Best Regards,

Paul

[wfejnieh2]

I did find one 'promising' link:    http://answers.microsoft.com/en-us/windows/forum/windows_vista-security/rpcnetpexe/4e03a1f0-d444--40...

That's all of the link I could copy(?) - but they (Mick Murphy - Microsoft Partner) recommended downloading a free program:  http://www.malwarebytes.org/mbam.php

I followed his (pretty) detailed instructions and I had some luck.  I had a trojan and a worm plus two registry errors.  My dc7900CMT was  infected as well - with the same results.  I still had to dig everywhere I could looking for:  rpcnet, rpcnetp, rpcid.  Those were the troublesome files (along with their respected extensions).  I'm online with the dc7900.  When I thought I had found everything; I ran Disk Cleanup.  Then created a new restore point.  Ran Disk Cleanup again, deleting any other restore points.  And finally (with a, hopeful clean slate) ran a Restore - System Image on my backup hard drive.  I've been 'off the air' performing these tasks (on both the dc7900 and the dc5800) and am running that malware program recommended by the microsoft rep.  I'll also take a good look at what you found and will update you (probably tomorrow) of my results.  I was up until 2:30 last night - this stuff gets the adrenaline flowing and I hate to shut her down! (smile).  Thanks alot, Paul for all the help you've offered.  I really like having a guy like you on my team!  Kind Regards, Jeff

[wfejnieh2]

Here's the link to that 'microsoft.com' page dealing with the "rpcnetp" issue:

http://answers.microsoft.com/en-us/windows/forum/windows_vista-security/rpcnetpexe/4e03a1f0-d444-40e...

I just logged on to the other computer I have (running XP & clean) - a "copy and paste".  the link appears to be incomplete (for some reason.....)

Jeff

 The Link does  work!

[wfejnieh2 · Accepted solution]

Paul; I received an email from the 'HP Community' prompting me to accept the answer as solution! So, I will! (smile)
Kindest Regards, and Merry Christmas! Jeff

[Paul_Tikkanen]

Merry Christmas, Jeff, and a very Happy New Year to you as well!

Best Regards,

Paul