100% CPU usage at Spoolsv.exe

[Oscah]

Hey

I'm having this problem with the system process Spoolsv.exe. It's basicly eating all my CPU power and the computer is performing very slow.

I don't know what's causing this, or what spoolsv.exe is good for, but if I kill the process, the system seems to be good for a couple of minutes then my computer either freezes or I get a bluescreen.

If I leave the computer on without killing the process the CPU usage stops by itself - but only after a couple of hours - And the system is pretty stable  :-?

___
*System*

MSI K87 Neo2 Motherboard
AMD Athlon 64 3000+ CPU
GeForce 6600 GT graphicscard
1,00 GB RAM
Win XP pro SP2
___

[pcdoc4christ]

Oscah:

Spoolsv.exe is either the Microsoft Printer Spooler Service (which is good) or the Iambigbrother spyware (which is bad) or the Backdoor.Ciadoor.B Trojan (which is worse)

More info is at this site: http://www.processlibrary.com/directory/files/Spoolsv/index.php

And here: http://www.symantec.com/avcenter/venc/data/backdoor.ciadoor.b.html

Let us know if you need more help.

Doc

[Oscah]

I've run a full system scan with Norton Antivirus, Nod32, Spybot Search&Destroy and Microsoft Antispyware. Some adwares were found but the spoolsv.exe procces is still eating the CPU power  :-/

[Dilbert]

Please carry out the procedures in this post and post a logfile. Zip the logfile instead of posting it if possible.

[Oscah]

Um, the link seems to have changed. I come to a topic about Popups and Pinball. But thanks for the help so far by the way.

[Dilbert]

You're right. You see, there was a virus removal post, but the author of the post (Backdated, a virus-removal expert) decided that the post's contents were out of date. However, I have attempted to re-construct the list. I made a thread here:

http://www.computerhope.com/cgi-bin/yabb/YaBB.cgi?num=1144089645

And it will not be a broken link anytime soon. You were instructed in his post to download these and a few more, run them all, and scan for any viruses with them. Use HijackThis last, and post the logfile it creates. Zip the logfile if possible.

"Yep. Today's a download day."

Good catch. And as per your PM: I am not offended by questions. Ask as many as you need.

Dilbert

[Oscah]

Alright - I made this Hijackthis log after that I ran hundreds of scans etc

http://www.deletionquality.net/thelog.zip

Thanks!

[Dilbert]

Do not follow any links mentioned.

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://magicball.net/
You have two of the above. Fix one of them.

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program\MSN Messenger\MsnMsgr.Exe" /background
Not needed. You can always sign on to Messenger yourself, no hassle. Fix.

O4 - HKCU\..\Run: [AIM] C:\Program\AIM\aim.exe -cnetwait.odl
Not needed. Fix.

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - "C:\Program\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\Program\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: talkto - {828030A1-22C1-4009-854F-8E305202313F} - "C:\Program\MSNMES~1\msgrapp.dll" (file missing)
Fix.

That's a start, anyway...

O16 - DPF: {56393399-041A-4650-94C7-13DFCB1F4665} (PSFormX Control) - http://home3.ca.com/PestPatrol/uniblue/pestscan/pestscan.cab
Do you recognize PestPatrol? If not, get rid of it as well.

[Fed]

Do you have a printer connected to this computer?
If not, turn off the Print Spooler in Services or turn it to manual.

[Oscah]

I've fixed all the errors and I'm down to 250 mb ram memory when I start up my computer. The spoolsv.exe problem is still remaining though :/

And yes - I do have a printer connected.

[Fed]

Try it with the print spooler turned off.
Start>Settings>Control Panel>Admin Tools>Services>Print Spooler... Stop the service & set to disabled.

[Oscah]

Ouch. My computer froze only after a couple of minutes Windows started... Better switch it back on.

[Fed]

What happens in safe mode?

[Oscah]

Spoolsv.exe doesn't start in Safe mode so I have no problems there

[Fed]

Any problems showing in your Device Manager?
A fresh install of your printer from scratch wouldn't hurt I guess.