spoolsv.exe

Discussion in 'malware problems & news' started by letsgetrockedbaby, Oct 13, 2005.

Thread Status:
Not open for further replies.
  1. letsgetrockedbaby

    letsgetrockedbaby Registered Member

    Joined:
    Oct 11, 2005
    Posts:
    2
    Hi Guys,

    Just wondering what is this spoolsv.exe, I know it is used for handling the printing process to your local printers.

    Also I know that spoolsv.exe is also a process which is registered as the Backdoor.Ciadoor.B Trojan.

    Please let me know how do I identify the one which is installed in my system.

    Thanks!!!
     
  2. snowbound

    snowbound Retired Moderator

    Joined:
    Feb 18, 2003
    Posts:
    8,723
    Location:
    The Big Smoke
    Hello and welcome to the forums.

    Here is a quote from the link below,

    14. spoolsv.exe is the Microsoft print spooler service, which stores pending print jobs on your PC until they can be sent to the designated printer for output.

    CAUTION: Numerous viruses run using the spoolsv.exe image name, so preserve only that version that resides inside the C:\Windows\System32 folder (you can even end this process, too—you just won't be able to print unless you manually restart the Printer Spooler service or reboot your machine).


    http://www.pcmag.com/article2/0,1895,1819159,00.asp

    Thats where spoolsv.exe resides on my system and their is only one instance of it running so i'm not worried about it. ;) :D


    snowbound
     
  3. letsgetrockedbaby

    letsgetrockedbaby Registered Member

    Joined:
    Oct 11, 2005
    Posts:
    2
    Thanks -)

    one more thing I would like to tell you guys is that my friend who works in a software company had this probelm of all the Windows accounts getting locked out due to some virus, hes not sure of what the problem is & still wondering what had happened.

    I'll appreciate if anyone of you had this sorta experience in your company. I would like to hear from you guyz.

    Thanks!!!
     
Thread Status:
Not open for further replies.