Spooler subsystem apps

[viv]

Please can anyone tell me why does Spooler SubSystem App
need internet access. I am using zone alarm & it has
blocked this from going out on may occassions.
Thanks

 

[PA Bear]

You may have a Trojan:
http://www.sophos.com/virusinfo/analyses/w32sdbotjz.html

1. Check in at Windows Update.

2. Download and run Stinger (http://vil.nai.com/vil/stinger/); then...

3. Update your virus definitions, enable Show Hidden Files
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2002092715262339)
and then run a full system scan in Safe Mode
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406)
with nothing else running in background. Note the files identified and
removed then find the corresponding page for the file at your AV maker's
online support pages (e.g.,
http://securityresponse.symantec.com/avcenter/venc/data/adware.winfavorites.html)
and follow all Removal steps.

WinXP Only (WinME similar): If this scan finds anything, create a new
Restore Point then Disk Cleanup > More options > Delete all but the most
recent Restore Point.
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.aumha.org

Protect Your PC
http://www.microsoft.com/security/protect

 

[Guest]

Thanks but I always DL latest ID files from Sophos I have
scanned using Sophos and as suggested using stinger. No
virus's were found. I also have Adaware prog which found
nothing that would cause the spooler to needed access.

-----Original Message-----
You may have a Trojan:
http://www.sophos.com/virusinfo/analyses/w32sdbotjz.html

1. Check in at Windows Update.

2. Download and run Stinger

(http://vil.nai.com/vil/stinger/); then...

 

[PA Bear]

A 'normal' scan won't help. It must be done after enabling Show Hidden Files
and in Safe Mode.