Quantcast

Spoolsv.exe...probably a virus

Created by IzzyGraze on June 11, 2012, 5:26 p.m.
  • Hey guys, if there's another website that would be better for virus help please let me know but for the meantime this is it.

    I've been getting an "interactive services detection" error every week or couple of weeks for the last few months. When I click to expand it it seems "spoolsv.exe" is the culprit.

    I've looked up spoolsv.exe and it seems like this error pops up when you have printer problems, it has stuff inqueue and it won't work or something.

    Anyways, I don't have a printer hooked up to my computer. I've also disabled and removed all printer software that I could find. I'm still getting this error.

    I've searched my computer with microsoft security essential and Malwarebytes. Both say my computer is fine.

    When I restart my computer the error stops popping up for a few days or maybe longer but it keeps on coming back.

    I have 2 spoolsv.exe files. One in "C:\Windows\System32\en-US" and one in "C:\Windows\winsxs\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7601.17514_none_3471a890d8284f57".

    I am running windows 7.

    Any ideas? Is it a virus? How can I get the pop up to stop coming up?

  • Spoolsv.exe will run despite not having a printer installed.

    To test for a virus, I would say download Kaspersky Removal Tool. I like to run that with MS Security Essentials and Malwarebytes.

    I would say repair install windows or system restore otherwise. Probably nothing to worry about.

  • You could try looking for left over printer drivers that don't show up in Add/Remove Programs:

    • Control Panel > System and Security > Administrative Tools > Print Management
    • Print Servers > computer name > Drivers
    • click on any drivers listed in the center pane and delete them if they're no longer required

    You could try running the System File Checker.

    You could try disabling the print spooler service.

    • Start > Run > services.msc
    • scroll down to Print Spooler > right-click > Properties
    • Startup type: Disabled > Apply > OK > reboot

    You can always set it back to Automatic if you need to.

  • Thanks folks. I went into administrative tools and couldn't find "print management". I've run the system file checker before and it came back fine. I just disabled the spooler and downloaded Kaspersky Removal Tool. Hopefully that all does the trick.

  • Also try this in a command line.... printui /s /t2

    See if you have printers on there you don't need and remove the drivers. That might also help

  • Another way to open Print Management is:

    • Start > Run > printmanagement.msc
  • "windows can't find printmanagement.msc. Make sure you typed the name correctly, and try again." Hopefully that's not a problem.

  • @IzzyGraze:

    If you are running windows 7 just type print management in search all programs and files. It will pop up that way.

  • According to a Microsoft employee in this thread Print Management is only available in Pro or higher versions of Windows 7. The same employee suggested using the same command line command GTFShadow mentioned above instead.

    Sorry, I didn't realize that was the case.


  • @Bane: Neither did I. Thanks for that tid bit of info tho! Learn something new everyday