Quote:
|
Originally Posted by soma
Does anyone know how to check if this process is a dangerous or not? My Zonealarm notified me of its attempt to access the internet and I denied it. This was particularly strange because I have no printer and fax and the spool.exe is supposed to be used for printers and fax machines. I've been Googling around and have found that this process can be a cover for a virus or trojan. How can I know for absolute sure whether or not this is a threat to my security?
Thanks and have a nice weekend TFPers  |
Kill the proccess and see if it restarts.
SpoolsV.exe is used by the system regardless of if there is a printer or not. The reasons are many, but among them are virtual printing. For example, doi you have acrobat installed? Then you needs this process running as it is used to turn your word file into a PDF. SpoolsV also monitors the parralell and usb ports constantly for a printer that has been connected.
Windows will restart the proccess, I don't know if a trojan would.
Windows often has 3-5 spollsV's running at once, and they are a needed program.
http://www.liutilities.com/products/...brary/spoolsv/
Also, run HiJack this and see where SpoolsV.exe is being called from. That is the only way to see if the proccess is windows based or a trojan.
(But for the love of god be carefull running it as you can delete some important files!)