spoolsv.exe是甚麼?
 

它經常會跑出來..然後我在處理程序那邊看到它會占cpu常常都是98或99...
整個系統會慢到受不了...可是關掉它之後..又會三不五時跑出來..
試過用kav pro 5.0.20掃毒也完全沒有病毒..
請問這是甚麼問題呢?

他位於哪個資料夾??
通常這種檔案如果不是在作業系統資料夾內,就砍了~~

http://search.symantec.com/custom/us/query.html
http://securityresponse.symantec.com...ciadoor.b.html

Spoolsv.exe
When Backdoor.IRC.Zcrew.B is executed, it performs the following actions:
Drops the following files in the C:\WINNT\system32\wbem\repository\fs\macromed folder:

Spoolsv.exe- a Serv-U FTP server, packed with UPX



The following instructions pertain to all current and recent Symantec antivirus products, including the Symantec AntiVirus and Norton AntiVirus product lines.Disable System Restore (Windows Me/XP).
Update the virus definitions.
Do one of the following:
Windows 95/98/Me: Restart the computer in Safe mode.
Windows NT/2000/XP: End the Trojan process.
Run a full system scan and delete all the files detected as Backdoor.IRC.Zcrew.B or IRC Trojan. Delete the folder C:\WINNT\system32\wbem\repository\fs\macromed.
Reverse the changes that the Trojan made to the registry.

抱歉..英文不好..看不懂英文網站...><
您的意思是說它是在C:\WINNT\system32\wbem\repository\fs\macromed 這個資料夾內?
把它砍掉就沒事了嗎?
因為我也沒有安裝serv-u阿...

請看看我的經驗:
http://www.slime2.com.tw/forums/show...hlight=spoolsv
希望對你有幫助

謝謝您的幫忙..但是...我根本沒有安裝印表機阿...=.=

http://leoboard.cpatch.org/cgi-bin/t...ic=1148&show=0
懷疑你中病毒了~
上面有人跟你一樣情形

謝謝您!!
我照您的連結進去..
也用W32.HLLW.Lovgate@mm 移除工具 掃過了..並沒有發現病毒.....
所以應該是甚麼問題呢?