New User? Need help? Click here to register for free! Registering removes the advertisements.

Computer Cops
image image image image image image image image
Donations
If you found this site helpful, please donate to help keep it online
Don't want to use PayPal? Try our physical address
image
Prime Choice
· Head Lines
· Advisories (All)
· Dnld of the Week!
· CCSP News Ltrs
· Find a Cure!
· Ian T's (AR 24)
· Marcia's (CO8)
· Bill G's (CO12)
· Paul's (AR 5)
· Robin's (AR 2)
· Ian T's Archive
· Marcia's Archive
· Bill G's Archive
· Paul's Archive
· Robin's Archive
image
Security Central
· Home
· Wireless
· Bookmarks
· CLSID
· Columbia
· Community
· Downloads
· Encyclopedia
· Feedback (send)
· Forums
· Gallery
· Giveaways
· HijackThis
· Journal
· Members List
· My Downloads
· PremChat
· Premium
· Private Messages
· Proxomitron
· Quizz
· RegChat
· Reviews
· Google Search
· Sections
· Software
· Statistics
· Stories Archive
· Submit News
· Surveys
· Top
· Topics
· Web Links
· Your Account
image
CCSP Toolkit
· Email Virus Scan
· UDP Port Scanner
· TCP Port Scanner
· Trojan TCP Scan
· Reveal Your IP
· Algorithms
· Whois
· nmap port scanner
· IPs Banned [?]
image
Survey
How much can you give to keep Computer Cops online?
$10 up to $25 per year?
$25 up to $50 per year?
$10 up to $25 per month?
$25 up to $50 per month?
More than $50 per year?
More than $50 per month?
One time only?
Other (please comment)



Results
Polls

Votes: 1211
Comments: 21
image
Translate
English German French
Italian Portuguese Spanish
Chinese Greek Russian
image
 Forum FAQForum FAQ   SearchSearch   UsergroupsUsergroups   ProfileProfile   Login to check your private messagesLogin to check your private messages   LoginLogin   Your Favorite ForumsFavForums 

Zone Alarm catches spoolsv.exe

 
Post new topic   Reply to topic       All -> FavForums -> Zone Alarm
View previous topic :: View next topic  
Author Message
JayD

Cadet
Cadet



Joined: Apr 26, 2004
Posts: 6
Location: Canada
PostPosted: Mon Apr 26, 2004 4:46 pm    Post subject: Zone Alarm catches spoolsv.exe
Reply with quote
Is spoolsv a trojan? I know it's for printing but why would it want to access the internet? I know I have some trojans I can't detect with norton/trend housecall/ad-aware and this was the first out of the ordinary thing I encountered.

All help would be greatly appreciated.
Back to top
View users profile Send private message
parputt

Forums Admin
Forums Admin
Premium Member
Premium Member


Joined: Mar 08, 2002
Posts: 1129
Location: USA
PostPosted: Mon Apr 26, 2004 5:20 pm    Post subject:
Reply with quote
No it is not a Trojan and it is not trying to connect to the internet it is trying to connect to the Network. If you are print sharing give it access to the trusted zone. Other than that it needs no access what so ever.
_________________
"Never argue with an idiot. They will only bring you down to their level and beat you with experience".
Back to top
View users profile Send private message
JayD

Cadet
Cadet



Joined: Apr 26, 2004
Posts: 6
Location: Canada
PostPosted: Tue Apr 27, 2004 11:23 pm    Post subject:
Reply with quote
Smile Yeah, I know that's not the probem now, and I've found the virus and eliminated it. Thank you for taking the time to answer my post. Cheers.
Back to top
View users profile Send private message
Bluespire

Cadet
Cadet



Joined: May 12, 2004
Posts: 1
Location: USA
PostPosted: Wed May 12, 2004 8:32 pm    Post subject: is spoolsv a trojan?
Reply with quote
is spoolsv a trojan?

Hey guys ,,,take a look at this site ....
http://www.sophos.com/virusinfo/analyse...birda.html


it seems it does is a trojan, beside i've read some articles which show it's not.

please,,,anybody give us the truth!!!
Back to top
View users profile Send private message
parputt

Forums Admin
Forums Admin
Premium Member
Premium Member


Joined: Mar 08, 2002
Posts: 1129
Location: USA
PostPosted: Wed May 12, 2004 9:51 pm    Post subject:
Reply with quote
spoolsv is NOT a trojan. It is a legitimate Windows process. It is used for networking printers.

Many trojans will use existing Windows processes to entrench themselves and hide behind a seemingly benign process. Yes spoolsv can be used by a trojan, but unless you get infected spoolsv is harmless.

Same think with svhost.exe. Normally it is harmless, but some trojans use the process to carry out their activity.

Get it?
_________________
"Never argue with an idiot. They will only bring you down to their level and beat you with experience".
Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Zone Alarm All times are GMT - 5 Hours
Page 1 of 1

 
 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB 2.0.8a © 2001 phpBB Group

Version 2.0.6 of PHP-Nuke Port by Tom Nitzschner © 2002 www.toms-home.com
Version 2.2 by Paul Laudanski © 2003-2004 Computer Cops
Home · Topics · Submit News · Top 10
This entire site, Cops Themes, and Computer Cops are © 2002 - 2004 Computer Cops, LLC. All rights reserved.
You can syndicate our news using the file RSS 0.91, ultramode.txt, or RSS 1.0.
Acceptable Use Policy. Use signifies your agreement.
Engine Copyright © 2002 by PHP-Nuke, GNU/GPL Licensed. ICRA Member.
Paul Laudanski, Member of Computer Cops, LLC
Server Load: 1232 pages served in previous 5 minutes. Page Rendered: 0.377 seconds.