General discussion

Locked

Spoolsv.exe

By cricket4b ·
Had a PC at work that recently had been compromised. Someone downloaded various programs after hours. In the process of clean up noticed a process running "spoolsv.exe". When I would stop process, and reboot it would come back, sometimes more than one entry.
Research showed it was located in C:\Windows folder, not system or system 32.
Virus related? Some sites said it was. Anyone see this?

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by LMon In reply to Spoolsv.exe

The spooler service is responsible for managing spooled print/fax jobs.


Note: The spoolsv.exe file is located in the c:\windows\System32 folder. In other cases, spoolsv.exe is a virus, spyware, trojan or worm! Check this with Security Task Manager.

Virus with same name:
Backdoor.Ciadoor.B - Symantec Corporation
VBS.Masscal.Worm (vbs) - Symantec Corporation
Hacktool.Privshell - Symantec Corporation

Here is a link just in case remove any spaces:

http://www.neuber.com/taskmanager/process/spoolsv.exe.html
http://www.iamnotageek.com/a/122-p1.php

Collapse -

by cricket4b In reply to

Thanks, wasn't sure if Security Task Manager was legit.

Collapse -

Here is some info about Spoolsv

by fileinspect In reply to

I suppose this material will help you - http://fileinspect.com/fileinfo/spoolsv-exe/

Collapse -

Here is some info about Spoolsv

by fileinspect In reply to

I suppose this material will help you - http://fileinspect.com/fileinfo/spoolsv-exe/

Collapse -

by cricket4b In reply to Spoolsv.exe

This question was closed by the author

Back to Windows Forum
5 total posts (Page 1 of 1)  

Related Discussions

Related Forums