[filename.info logo]
[cn spoolsv.exe][de spoolsv.exe][es spoolsv.exe][fr spoolsv.exe][gb spoolsv.exe][it spoolsv.exe][jp spoolsv.exe][kr spoolsv.exe][nl spoolsv.exe][pt spoolsv.exe][ru spoolsv.exe][us spoolsv.exe]
 

spoolsv.exe (5.1.2600.0)

Contained in software

Name:Windows XP Home Edition, Deutsch
License:commercial
Information link:http://www.microsoft.com/windowsxp/

File details

Filepath:C:\WINDOWS\system32 \ spoolsv.exe
Filedate:2002-08-29 14:00:00
Version:5.1.2600.0
Filesize:51.200 bytes

Checksum and file hashes

CRC32:D7967D7A
MD5:9B62 7E6D A0EA 47A3 A664 F69D 9548 31D7
SHA1:1EDA A7F7 6884 62F8 CB41 5283 630C D237 67F0 6A5D

Version resource information

CompanyName:Microsoft Corporation
FileDescription:Spooler SubSystem App
FileOS:Windows NT, Windows 2000, Windows XP, Windows 2003
FileType:Application
FileVersion:5.1.2600.0
InternalName:spoolsv.exe
LegalCopyright:© Microsoft Corporation. All rights reserved.
OriginalFilename:spoolsv.exe
ProductName:Microsoft® Windows® Operating System
ProductVersion:5.1.2600.0

spoolsv.exe was found in the following malware reports:

Backdoor.Ciadoor.B

Technical details
...Copies itself as %Windir%Spoolsv.exe, with attributes set to hidden....
..."Print Spooler" = %Windir%Spoolsv.exe to the following registry...
...section of the Win.ini file: load=%Windir%Spoolsv.exe run=%Windir%Spoolsv.exe...
...shell=Explorer.exe %Windir%Spoolsv.exe Opens a port and listens for...
Removal instructions
..."Print Spooler"="%windir%spoolsv.exe" Navigate to the key:...
..."Print Spooler"="%windir%spoolsv.exe" Navigate to the key:...
..."Print Spooler"="%windir%spoolsv.exe" Exit the Registry Editor....
...look for a line similar to: run = %windir%spoolsv.exe If the line exists, remove...
...shell = Explorer.exe %windir%spoolsv.exe If this line exists, delete...
Source: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.ciadoor.b.html

VBS.Masscal.Worm

Technical details
...Restore.exe.vbs Spoolsv.exe.vbs Note: %Temp% is the default...
Source: http://securityresponse.symantec.com/avcenter/venc/data/vbs.masscal.worm.html

Hacktool.Privshell

Technical details
...The common usage would be to replace the Spoolsv.exe file in the System directory with the hacktool program....
Source: http://securityresponse.symantec.com/avcenter/venc/data/hacktool.privshell.html

Backdoor.IRC.Zcrew.B

Technical details
...Sec.bat Spoolsv.exe- a Serv-U FTP server, packed with UPX...
Source: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.zcrew.b.html

W32.HLLW.Antinny.G

Technical details
...Svchost.exe Spoolsv.exe Explorer.exe...
......
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.antinny.g.html

Navigation

Browse files

• by name




Valid HTML 4.01!
Copyright © 2004 by Tegtmeier Internet Solutions Colocation: NetGate