spoolsv.exe

this file is establishing a UDP session on the internet. I have scanned with 3 anti virus programs and they can not find a problem. This is a print spooler. Why is it communicating over the internet

thanks
charlie

Hi charlie,

Can you say and/or post what ip addresses and port numbers it’s trying to connect to?

And also there are known attacks on this service which include rootkits, have you tried GMER to scan for rootkit behavior?

www.gmer.net

depending on your situation, if you use a printer or not

maybe this
1)click “start”
2) go to “run”
3)type in “services.msc”
4)you can disable it or set it to “manual” <—If you have a priniter, put it in manual :slight_smile: