PDA

View Full Version : should i allow the Spoolsv.exe to access the internet?


Tom772
June 22nd, 2005, 01:18 PM
Hello,

I have checked that this is not a virus, and i know it is part of windows, but i dont know whether i should let this have full access to the internet. I would
really like some help - sorry if i have posted this in the wrong part of the forum.

Once again thank you for any help,

Keep up the good work guys & girls,

T

snowbound
June 22nd, 2005, 01:42 PM
I have Spoolsv.exe blocked from calling out in my Zone Alarm firewall with no problems at all.

A little more info here,

http://snakefoot.fateback.com/tweak/winnt/service/pqr.html


snowbound

beetlejuice69
June 22nd, 2005, 02:13 PM
Spoolsv.exe is just for your printer and doesn`t need internet access.

checkmate1
June 23rd, 2005, 07:12 PM
Not to scare you but spoolsv.exe is used by some malware to attempt to disguise itself. I would do some scans with you AV/AT/AS just to be safe.

bigc73542
June 23rd, 2005, 07:22 PM
It is my printer and I have it blocked as well.

Tom772
June 24th, 2005, 02:56 PM
thanks for helpin me out was unsure where it needed internet access - excellent help - so much respect for this forum:)

T

Tom772
June 24th, 2005, 03:05 PM
-{ Quote: "thanks for helpin me out was unsure where it needed internet access - excellent help - so much respect for this forum:)

T" }-hey again - just wondered what this process is COM Surrogate(C:\Windows\System32\dllhost.exe - file size 5kb) is - currently blocked from the internet - pls any ides. (Running XP Pro sp2)

Thanks for help,

T(cant keep the good guys down!)

snowbound
June 24th, 2005, 03:14 PM
-{ Quote: "hey again - just wondered what this process is COM Surrogate(C:\Windows\System32\dllhost.exe - file size 5kb) is " }-

I think it is this,

Process name: DCOM DLL host process

http://www.neuber.com/taskmanager/process/dllhost.exe.html


snowbound

Tom772
June 26th, 2005, 05:02 PM
-{ Quote: "I think it is this,

Process name: DCOM DLL host process

http://www.neuber.com/taskmanager/process/dllhost.exe.html


snowbound" }-Thanks for your help - :)

snowbound
June 26th, 2005, 06:46 PM
Your quite welcome. :)



snowbound

cityman
August 19th, 2005, 09:04 PM
i found it in several places. the windows uninstall packs, system 32 service packs, system32- dllcache, software distribution and sp2qfe.

i did a kaspersky av and ewido scan on all the files and it was clean. but i will not allow spoolsv.exe access to the internet.

what i wonder is why would micosoft want it to have access to the internet in the first place???

thanks