Spoolsv.exe ?

sp0om

n00b
Joined
Jun 5, 2004
Messages
61
Yesterday, I reformatted my hard drive and fresh installed Windows XP. Today, I turned on my computer and ZoneAlarm asked me if I want to let: spoolsv.exe access the internet. Not recognizing the .exe, I looked it up on Google to find that it is used both as a legitimate printer/fax manager, and as a exploitable backdoor in Windows. Has anyone dealt with this before? Is there any way to know if it is a threat or not? (I do some financial related things online and absolutely need a secure PC running.)

Thanks! :) :) :)
 
SpoolSV.exe is the Windows printing subsystem spooler. It wants to access the network for printer sharing. If your system is up to date on patches you should be fine allowing it access.
 
Goofball,

By patches, do you mean running Windows update? (By the way, this happened on my computer when it didn't have SP2 on it)
 
Yes, I mean Windows Update. Go ahead and load SP2, then load the 4-5 patches that have been released since it was. Also consider loading and using FireFox or something other than Internet Explorer if you do a lot of web surfing. This should help avoid Spyware and the like.
 
If you aren't printing to a networked printer then deny it. There is no use having an extra program access to the internet if it isn't needed.
 
Back
Top