Windows Forum

Ask something
Discussion Locked

Spoolsv.exe

0 helpful
5 replies

by cricket4b

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Had a PC at work that recently had been compromised. Someone downloaded various programs after hours. In the process of clean up noticed a process running "spoolsv.exe". When I would stop process, and reboot it would come back, sometimes more than one entry.
Research showed it was located in C:\Windows folder, not system or system 32.
Virus related? Some sites said it was. Anyone see this?

5 replies

by lmon

The spooler service is responsible for managing spooled print/fax jobs.

Note: The spoolsv.exe file is located in the c:\windows\System32 folder. In other cases, spoolsv.exe is a virus, spyware, trojan or worm! Check this with Security Task Manager.

Virus with same name:
Backdoor.Ciadoor.B - Symantec Corporation
VBS.Masscal.Worm (vbs) - Symantec Corporation
Hacktool.Privshell - Symantec Corporation

Here is a link just in case remove any spaces:

http://www.neuber.com/taskmanager/process/spoolsv.exe.html
http://www.iamnotageek.com/a/122-p1.php

This discussion is closed to new replies.