First look in %systemroot%\system32\dllcache for spoolsv.exe. If it's not
infected, overwrite the one in system32 with this one. Otherwise, the
Windows CD has a compressed spoolsv.ex_ file. You can use the 'expand'
utility in system32 to expand it from spoolsv.ex_ to spoolsv.exe (type
expand /? in a command window for usage). Then overwrite the infected
spoolsv.exe with this one.
--
Felix Maxa
Microsoft Printing, Imaging and Fax Team
This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send email directly to this alias. This alias is for newsgroup
purposes only.
