Silverhazesurfer
Master of Logic
- Joined
- Oct 3, 2008
- Messages
- 1,068
- Reaction score
- 42
I have looked all over for a reason, but have yet to find one.
Print Spooler keeps failing. Service starts, fails, restarts. This happens 2x with the third causing permanent service shutdown.
Windows XP Pro SP3 on domain with print server.
I have:
Run AV and Malware scan. (this appeared to happen after a minor infection of the AV2011 scammer)
Killed and deleted malware files (only one exe with 2 infected files, not uncommonn with this infection)
Run CleanSPL from the 2003 resource kit (clean print spooler of erroneous or corrupted drivers)
Removed the machine from the domain and back.
checked event logs (not much in the way of details except that the service has stopped
verified that my print server works from other clients. (i know the printers work and are available on the network)
Tested with both domain and local admin accounts (both on and off the domain)
Cleared startup and associated startup files to prevent conflict.
There are no printers installed on the machine. Not even a PDF printer. I open printers and faxes and there is only add printer. Since the spooler doesn't start, I cannot add a printer, even if it is a locally connected printer.
Thus far, everything I find talks about "remove/reinstall printer" or some variation. Since I have network printers and a print server, this isn't something that is necessary. I have removed the PDF and the like printers, but this has not resolved the problem.
I have a feeling that it is malware that could be stopping the spooler, I just cannot locate it. Anyone hear of something like this or combination of symptoms?
I ran Hijack this to check, but there does not seem to be anything out of the ordinary, or at least that I couldn't explain.
Print Spooler keeps failing. Service starts, fails, restarts. This happens 2x with the third causing permanent service shutdown.
Windows XP Pro SP3 on domain with print server.
I have:
Run AV and Malware scan. (this appeared to happen after a minor infection of the AV2011 scammer)
Killed and deleted malware files (only one exe with 2 infected files, not uncommonn with this infection)
Run CleanSPL from the 2003 resource kit (clean print spooler of erroneous or corrupted drivers)
Removed the machine from the domain and back.
checked event logs (not much in the way of details except that the service has stopped
verified that my print server works from other clients. (i know the printers work and are available on the network)
Tested with both domain and local admin accounts (both on and off the domain)
Cleared startup and associated startup files to prevent conflict.
There are no printers installed on the machine. Not even a PDF printer. I open printers and faxes and there is only add printer. Since the spooler doesn't start, I cannot add a printer, even if it is a locally connected printer.
Thus far, everything I find talks about "remove/reinstall printer" or some variation. Since I have network printers and a print server, this isn't something that is necessary. I have removed the PDF and the like printers, but this has not resolved the problem.
I have a feeling that it is malware that could be stopping the spooler, I just cannot locate it. Anyone hear of something like this or combination of symptoms?
I ran Hijack this to check, but there does not seem to be anything out of the ordinary, or at least that I couldn't explain.