Welcome to the PC Pitstop Process Library. We have an extensive list of the most common processes currently running on PCs. Use this library to inspect the safety of your running processes on a regular basis.

Click here to run our free scan and see if your computer's processes are safe. To find out how to make your computer faster, try running our Free PC Matic Scan.

Search For Processes

Process Name

  

Unknown Unknown
Safe Safe
User Optional User Optional
Unwanted Unwanted
Spyware / Adware Spyware / Adware
Virus Virus


More than one possible match was found; all matches are listed below in order of their prevalence. This only tells you what the file and the correct action might be.

To understand which possibility is actually running on your own system, perform an Overdrive test and then look at the Software|Processes tab.

You may find more information on this process by visiting Process Detail Pages.


Match #1



spoolsv.exe (Print spooler)

Percentage of recently scanned PC's with this process running: 32.92%
Average CPU use for this program: 0%
Average RAM for this program: 5 MB


In addition to the file name, spoolsv.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor contains:Microsoft
Product contains:Windows
File name contains:\system32\

To view version information with Windows Explorer, right-click the file and click Properties, Version.


Vendor or Distributor's Web Site

http://support.microsoft.com/default.aspx?scid=kb;EN-US;q314876



Win Patrol

spoolsv.exe is the Print spooler for Windows 2000/XP. Leave this service running unless you never do any printing. If spoolsv.exe is not running, the Add Printer function will not work properly and no printers will be available.

spoolsv.exe  is required by third-party software or hardware and should not disabled.

PC Pitstop recommends WinPatrol Plus for monitoring all of the background activity on your PC. WinPatrol Plus provides an easy to understand descriptions of over 15,000 processes and programs.


MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called spoolsv.exe, we have detected more than 10 different MD5 hashes. Click on a hash to research the hash in Google.

Program Name MD5 Count
spoolsv.exe> 10
MD5 Hashes
# MD5 Size
1 0xad3d9d191aea7b5445fe1d82ffbb4788 56 KB
2 0xfacfb75ecc070103619fa044e0b210d3 46 KB
3 0x1c97a84d6940a56eae099ec61bb15e43 56 KB
4 0x8c4629915454de274e5e415360588866 55 KB
5 0x3dd9e31f36863665a4ec59fcd96901df 229 KB
MD5 Hashes
# MD5 Size
6 0xd31d094b0944867ddf32cfd2bfc72132 51200 bytes
7 0xd8e5194c9693a9147f08b87e1a6d2cc8 94720 bytes
8 0x92677c2329b8ccd0ca1307ce0b90b09e 45328 bytes
9 0x07763dfe5ea3c14946d4052c56ba377d 57856 bytes
10 0xbbeba855260ac789fed1e110327ab376 121616 bytes

Match #2



spoolsv.exe (Possible Virus ** Read **)

This program has not been seen on any systems tested at PC Pitstop in the past week.


The file name alone identifies this program.



Detailed Description and/or Removal Instructions

http://search.ca.com/search/ca?style=en&search_button=Search&qt=spoolsv.exe&col=


PC Pitstop PC Matic

spoolsv.exe is a file name that some malwares use, look into Site URL.
spoolsv.exe is the Print spooler for Windows 2000/XP. Leave this service running unless you never do any printing. If spoolsv.exe is not running, the Add Printer function will not work properly and no printers will be available.
However USUALLY spoolsv.exe has in Vendor field "Microsoft" just like Product has "windows", was detected that this file has no vendor or product information which makes it just suspicious.
Was found a virus/trojan with the same name, run a virus scan to be sure that is not the case.

spoolsv.exe is a VIRUS. Stop all work until the virus is removed or you run the risk of spreading the virus to other people. Worse yet, the virus may be doing harm to your computer and your information.

spoolsv.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends PC Matic in these types of situations.


MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called spoolsv.exe, we have detected more than 10 different MD5 hashes. Click on a hash to research the hash in Google.

Program Name MD5 Count
spoolsv.exe> 10
MD5 Hashes
# MD5 Size
1 0xfa1536c397ed6e65ec1b5b30dfa7a86d 67 KB
2 0x344b6196ffea97b99cb6f45009201d40 337 KB
3 0x902767a520affa75da6ba637e6841202 55 KB
4 0xc665a55e56966c44171d9c8900fbb529 46 KB
5 0x141ca8d0cff160b6f472d6b3605a6572 337 KB
MD5 Hashes
# MD5 Size
6 0x48ad40d34282e624147070ef67a5e557 336896 bytes
7 0x9d2d0e0a940a3166dca7cb651d13c12d 35401 bytes
8 0xff3a38bb093e617adc220a48cda45ff6 81920 bytes
9 0xb4ca137dcb9b82a588124a1ea16c543c 81920 bytes
10 0x68ccbd4b806a24a04492b55c863a670b 336896 bytes

Match #3



spoolsv.exe (Win32.Rbot.WO)

This program has not been seen on any systems tested at PC Pitstop in the past week.


In addition to the file name, spoolsv.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor is not specified
Product contains:mIRC

To view version information with Windows Explorer, right-click the file and click Properties, Version.


Vendor or Distributor's Web Site

http://search.ca.com/search/ca?charset=utf-8&qt=spoolsv.exe&rq=0&la=en&oq=spoolsv.exe&Submit=Search


Detailed Description and/or Removal Instructions

http://www.ca.com/securityadvisor/virusinfo/virus.aspx?id=44554


PC Pitstop PC Matic

spoolsv.exe, when associated with the product name of mIRC, may likely be part of the Win32.Rbot.WO virus. According to CA:

"Win32.Rbot.WO is an IRC controlled backdoor (or "bot") that can be used to gain unauthorized access to a victim's machine. It can also exhibit worm-like functionality by exploiting weak passwords on administrative shares and by exploiting many different software vulnerabilities, as well as backdoors created by other malware. There are many variants of Rbot, and more are discovered regularly. Rbot is highly configurable, and is being very actively developed, however the core functionality is quite consistent between variants."

spoolsv.exe is a VIRUS. Stop all work until the virus is removed or you run the risk of spreading the virus to other people. Worse yet, the virus may be doing harm to your computer and your information.

spoolsv.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends PC Matic in these types of situations.


MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called spoolsv.exe, we have detected 1 different MD5 hashes. Click on a hash to research the hash in Google.

Program Name MD5 Count
spoolsv.exe1
MD5 Hashes
# MD5 Size
1 0xb766003f431cad186bd115f5761592d1 1748 KB


Try a free diagnostic now

PC Pitstop is the undisputed leader in PC diagnostics. Our running process library is culled from our database of over 100 million PC diagnostics and scans.

To find the latest driver for your computer we recommend running our Free Driver Scan.

Find out how to make your computer faster by running our Free Performance Scan.

Tips from the PitCrew

Tips from the Pit Crew

Every process running on your computer takes up CPU cycles and valuable memory. For optimal PC performance and resource utilization, you should be aware of every process on your computer. PC Pitstop designed this process library to help you know which processes are worthwhile and others that slow system performance.

Get more tips
Subscribe to TechTalk

Important Note

A file name alone may not be enough for positive identification. PC Pitstop's Overdrive tests and spyware scan use information such as the company name, product name, or install directory.

If you are unable to identify a file, ask about it in our forums after running our full tests.