What is spoolsv.exe?

[Jim Wood]

Every time I boot my computer, Zone Alarm tells me that an
application called spoolsv.exe tries desperately to access
the internet. I have 'forbidden' this, but still wonder
what the heck spoolsv.exe is, and why it wants out. The
only "spool"-related thing I can locate is the printer
spooler, which ought never need Internet access. Anyone
know what's going on here?

 

[Bryan Martin]

Page 18 of
http://download.zonelabs.com/bin/media/pdf/zaclient51_user_manual.pdf

Few programs or processes actually require server permission in order to
function
properly. Some processes, however, are used by Microsoft Windows to carry
out
legitimate functions. Some of the more common ones you may see in alerts
are:
?? lsass.exe
?? spoolsv.exe
?? svchost.exe
?? services.exe
?? winlogon.exe
If you do not recognize the program or process that is asking for server
permission,
search the Microsoft Support Web site (http://support.microsoft.com/) for
information on the process to determine what it is and what it's used for.
Be aware that
many legitimate Windows processes, including those listed above, have the
potential to
be used by hackers to disguise worms and viruses, or to provide backdoor
access to your
system for Trojan horses. If you were not performing a function (such as
browsing files,
logging onto a network, or downloading files) when the alert appeared, then
the safest
approach is to deny server permission. At any time, you can assign
permissions to

Bryan Martin
(e-mail address removed)

 

[Paul Smith]

Every time I boot my computer, Zone Alarm tells me that an
application called spoolsv.exe tries desperately to access
the internet. I have 'forbidden' this, but still wonder
what the heck spoolsv.exe is, and why it wants out. The
only "spool"-related thing I can locate is the printer
spooler, which ought never need Internet access. Anyone
know what's going on here?

It's the Fax and Printer spooler.

I think it accesses the network to make sure it can (if needed) install
print drivers over the network.

I think the only IP address it will connect to on the internet will be your
ISPs DNS servers just so it can check the names.

--
Paul Smith,
Yeovil, UK.
http://windows.dasmirnov.net/ Windows XP Resource Site.


*Replace nospam with smirnov to reply by e-mail*

 

[Thanks Bryan]

Many thanks, Bryan. I'll use your references to learn more
about this. I'm always suspicious of a fresh bootup
seeking Internet access right off the bat.

 

[Jone Doe]

Every time I boot my computer, Zone Alarm tells me that an
application called spoolsv.exe tries desperately to access
the internet. I have 'forbidden' this, but still wonder
what the heck spoolsv.exe is, and why it wants out. The
only "spool"-related thing I can locate is the printer
spooler, which ought never need Internet access. Anyone
know what's going on here?

Hint. Do you have a fax program? If so, let it access as it needs to. If
not, keep on forbidding, but you will never get a fax if you do.

 

[Alex Nichol]

Every time I boot my computer, Zone Alarm tells me that an
application called spoolsv.exe tries desperately to access
the internet. I have 'forbidden' this, but still wonder
what the heck spoolsv.exe is, and why it wants out. The
only "spool"-related thing I can locate is the printer
spooler, which ought never need Internet access.

It would get involved in file and print sharing across a network; but
you would not expect to use that on the Internet. What I would do is in
Network Connections, right click the connection you use for the Internet
take Properties, and uncheck File and Print sharing. I think you will
find the request does not come up.

BTW if you are saying No every time, and all seems well, you can first
check the 'Always' box before clicking on No. If something *should*
later complain, you can change it back in ZA's Program Control- Programs
page

 

[Al Smith]

Every time I boot my computer, Zone Alarm tells me that an

It would get involved in file and print sharing across a network; but
you would not expect to use that on the Internet. What I would do is in
Network Connections, right click the connection you use for the Internet
take Properties, and uncheck File and Print sharing. I think you will
find the request does not come up.

I get this happening also. File and Print Sharing is unchecked.
Even so, "spoolsv.exe" tries to connect to the Internet. It's
blocked in ZoneAlarm. I tried turning it off and setting it to
"manual" but WindowsXP was unable to recognize that I even had a
printer connected to my computer with it off, and it did not start
up when Word tried to send a print job to the printer. So I had to
turn the damn thing back to "automatic". Why a print spooler would
want to connect to the Internet is a mystery to me. And before you
say it's a virus, it's located in my System32 folder, where it
should be, and I've run up-to-date virus scans of my computer. If
you Google it, you'll see that others have noticed this behavior.

 

[Bob I]

If you go to Control Panel, Folder Options, View, is the first box
checked? Uncheck that and see if the attempts stop.