Tom's Guide | Tom's Hardware | Tom's Games
 |
 |
 |
i am running xp pro. i discovered i had a w32.hllw.gaobot virus on my pc in the system32 folder. norton saw it but couldn't remove it. even the removal tool failed to find it after. the next few days my pc would shut down at random intervals with following message:
shutdown initiated by nt authority\system. windows must now restart because the remote procedure call service (rpc) terminated unexpectedly.
i have formatted my machine, installed zone alarm, and now when i went online, spoolsv.exe tried to access the i/net. i allowed it, not knowing what it was. it is meant to be a printer spooling app... hmm, why would it try to access the i/net?
what do i do?
No, it's a core windows executable, possibly something to do with printing but I could be wrong.
Whatever, leave it alone.
0 
Goto
http://answersthatwork.com/
for a short write-up on spoolsv.exe (and many more)
Good luck
V...
0
sounds like you have/had the Blaster worm. I had that last year and i got error messages like the one below every time i connected to the internet.
check out this link for information/removal: http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html
0
vml620:
Don't know where you made this association, Symantec site makes no mention of Blaster affecting spoolsv.exe.
A bit of a Red Herring then....and all computers should be free of fish !
0
Listen to the vm1620 guy, he's exactly correct..... what kinel is confusing here is that your pc crash problem(the NT Authority crap) IS a result,most likely, of being infected with the BLASTER virus, its happened to me 2 or 3 times as has millions that have yet to install a particular xp hotfix off of Microsofts site whereas your firewall program wanting permission for spoolsv.exe to access the internet is merely a function of the printer service in xp (spoolsv) needing to be able to access any file online that you may want to print later on during that session.Spoolsv can be changed to manual from automatic in the services screen (look in administrator tools)if you do not have a printer hooked up,then it wont start up every time you boot.... so just go to where vm1620 said to remove the blaster, then install the update and your all set.
0  |
 |
 |
This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |
