Please Help! SPOOLSV.EXE Memory Leak?

[Rob]

Hi

I have a new Hp 2.4 Gig HP computer with Win XP Pro
running. It has 512 MB ram. The Only software running or
loaded on the system other than those supplied by windows
is a SCADA data package called LookOut from National
Instruments. I have recently added a HP Business Deskjet
1100D printer to the system. This system controls a city
freshwater system (I.E. controls pumps to keep the
elevated tank full and monitors numerous system
functions). It runs 24 hours a day 365 days a year. Since
adding the printer I am getting virtual memory is low
errors after about a weeks operation. The SCADA software
prints it logs every night at 12:00PM and thats is all the
printing that takes place. I have found that there seeems
to be a memory leak of some sort because the SPOOLSV.EXE
process is using approx 454MB of memory (After they get
the Low Virtual Memory Error) and seems to just keep
increasing by approx 3 or 4 KB every 5 seconds or so?
until the system is rebooted. There are no print errors in
the log files or any data sitting in the printer folder
waiting to print. I have checked HP's web site for a newer
driver and they are still suppling the same original
version 1.00.000. I looked through their newsgroups and no
one is complaining about this problem. I am not sure if it
is the printer driver or something else but do to the job
this computer is doing I need to resolve this problem ASAP
a lockup could cause the city water tank to run dry! Any
suggestions on what to try to fix this or prove what
software or driver is causing the issue would me greatly
appreciated.

Thanks
Rob

 

[kim]

I have found that there seeems
to be a memory leak of some sort because the SPOOLSV.EXE
process is using approx 454MB of memory (After they get
the Low Virtual Memory Error) and seems to just keep
increasing by approx 3 or 4 KB every 5 seconds or so?
until the system is rebooted.

The backdoor trojan Troj/Graybird-A copies itself to the Windows system
folder with the filename spoolsv.exe. See here for details.
http://www.sophos.com/virusinfo/analyses/trojgraybirda.html
Run an up to date virus scan.