View original (French)

Virus spoolsv.exe

Solved
Salaün -  
Hello,
I have an active process named spoolsv.exe that is using 99% of my machine's resources. If I end it, it restarts immediately even after system boot.
I think it might be a "trojan" type virus.
I have Norton Antivirus 2005 which does not seem to detect it even after a scan.
What should I do to get rid of it?
Thank you in advance for your help.Configuration: XP HOME

26 answers

  1. Halala
    "spoolsv.exe est un exécutable système de Microsoft Windows qui gère le processus d'impression vers vos imprimantes locales. Note : spoolsv.exe est également un processus qui est enregistré comme le cheval de Troie Backdoor.Ciadoor.B. Ce cheval de Troie permet aux attaquants d'accéder à votre ordinateur, volant des mots de passe et des données personnelles. C'est un risque de sécurité enregistré et il doit être supprimé immédiatement."
    Bien, en français, spoolsv.exe s'occupe de l'impression, mais est aussi connu comme le cheval de Troie Backdoor.Ciadoor.B.
    Un bon antivirus ou un scan en ligne permettrait je pense de trancher...( j'ai dit un BON antivirus...nan, j'déconne, j'ai aussi Norton...lolll)
    Le fichier spoolsv.exe est normalement localisé dans c:\windows\System32, s'il est ailleurs, ça doit mettre la puce à l'oreille...
    41
    1. salaün
      Thank you,
      But where can I find an online antivirus that allows for cleanup?
      I just tried the one from "informatruc" but it crashes right at the start of the download!
      You were right, the spoolsv file is located in places other than system32, but even when deleting them, it remains active!
      Thank you for your help... this horse is annoying!
      0
    2. Salaün
      I'm getting back to you after trying 3 online antivirus and 3 others downloaded, nothing works, it doesn't detect anything.
      I found some information on another forum suggesting the possibility of a backdoor, but I ran Tauscan and got no results!
      Moreover, the scans of the various antivirus sometimes take 10 hours considering that spoolsv.exe uses 99% of the CPU!
      Could deleting the process damage XP?
      You were right, the file is located in 4 different places, but if I delete them all and the process remains active nonetheless?
      Should I just reinstall?
      0
    3. JiCé
      @SalaünTo try: => Disable the print spooler service

      Start > Control Panel > Administrative Tools > Services:
      Select 'Print Spooler' and right-click
      Choose 'Properties'
      In the window General tab, check that:
      Startup type = Disabled
      0
    4. bernie61
      @Salaünhi
      if it's still not working, check the spooler permission in your firewall
      see you later
      0
    5. frank
      @SalaünRevising the REGEDIT, search for spoolsv.exe and delete the entry to solve the problem, but also delete the spoolsv.exe file located in windows/system32
      bye
      0