Hi,
I have just installed Service Pack 1 (final) for Windows 7 and Sophos considers the replacement of rpcss.dll as suspicious and quarantines the pending file operation.
Sophos Anti-Virus version 9.5.4 VDL4.59G
HIPS rules 4.1.2
HIPS configuration 1.0.4
Detection data 4.59G
Suspicious file Sus/Encpk-MV C:\Windows\winsxs\Temp\PendingRenames\9d9a59e4afcecb01738500000c0fd003.x86_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7601.17514_none_6bd245e79c221747_rpcss.dll_fd3e269b Blocked NT AUTHORITY\SYSTEM
This thread was automatically locked due to age.
