winspool.exe?

[PCportinc]

winspool.exe
NAV says its a virus but I see there is winspool.drv
in windows/system.
It appears to have been removed from my system.
But I got an error which said files of type application
wont run.
so is it a virus or a system file?

 

[Old Boozer]

winspool.exe
NAV says its a virus but I see there is winspool.drv
in windows/system.
It appears to have been removed from my system.
But I got an error which said files of type application
wont run.
so is it a virus or a system file?

You can't run any files? Or just some won't run. Does the OS boot ok?

OB.

 

[Geese_Hunter]

winspool.exe
NAV says its a virus but I see there is winspool.drv
in windows/system.
It appears to have been removed from my system.
But I got an error which said files of type application
wont run.
so is it a virus or a system file?

In XP pro on my machine it's in windows/system, system32, &
system32/dllcache

version 5.1.2600.0 file size of 129kb so it is a Microsoft file system,
yours may be corrupt however.

 

[hbb2102]

WINSPOOL is the printer spooler. It is what creates the temporary files for
print jobs before they're sent to the local or network printer. Generally,
you use it when you select "Spool print jobs" in setting up your printer.

Is NAV really saying it's a virus? Or, is it saying something like "file
has changed" and is alerting you to a *possible* corruption of the system
file?

[See "Printers" folder & specific printer properties.]

 

[FromTheRafters]

winspool.exe
NAV says its a virus but I see there is winspool.drv
in windows/system.
It appears to have been removed from my system.
But I got an error which said files of type application
wont run.

This is an indication that the "exefile" key in the registry
has been used to autostart some sort of malware.

HKEY_LOCAL_MACHINE\Software\CLASSES\exefile\shell\open\command

Should have a value of:

"%1\" %*

....but probably has a value of:

[path]winspool.exe "%1\" %*

so is it a virus or a system file?

The one that the key value pointed to is not a system file,
but there may well be a system file by that name in another
location on your machine.

You can change regedit.exe to regedit.com and use that
registry editing tool to fix the value (if you dare - har har)

Always back up the registry before attempting repairs.