"spoolsv.exe" Process on Windows 8

Q

What is the "spoolsv.exe" process on windows 8? Is the "spoolsv.exe" process a virus? Can I terminate the "spoolsv.exe" process?

✍: FYIcenter.com

A

"spoolsv.exe" process represents "Spooler SubSystem App" program, created by the "Print Spooler" service.

"spoolsv.exe" process is normally running under the parent process "Boot" as shown in the process tree below:

Boot
   spoolsv

On the Processes tab of "Task Manager", "spoolsv.exe" process may be listed as:

Image Name                 Memory   Description
--------------------   ----------   -----------
spoolsv.exe               8,792 K   Spooler SubSystem App

Additional information about "spoolsv.exe" process:

Command line:
   C:\Windows\System32\spoolsv.exe

Programe file information:
   Name: spoolsv.exe
   Location: C:\Windows\System32\spoolsv.exe
   Description: Spooler SubSystem App
   Version: 6.2.9200.16384 (win8_rtm.120725-1247)
   Size: 769024 bytes
   Last modified: 7/25/2012 11:08:47 PM
   Company Name: Microsoft Corporation
   
Some data files used:
C:\Windows\System32

Some registry keys used:
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\Image File Execution Options
HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
HKU\.DEFAULT\Control Panel\International
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids
HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9
HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\Print\Printers
HKLM\SYSTEM\ControlSet001\Control\Print
HKLM\SYSTEM\ControlSet001\Control\Print\Monitors\Local Port

Some DLL libraries used:
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\system32\KERNEL32.DLL
C:\Windows\system32\KERNELBASE.dll
C:\Windows\system32\USER32.dll
C:\Windows\system32\msvcrt.dll
C:\Windows\SYSTEM32\sechost.dll
C:\Windows\system32\RPCRT4.dll
C:\Windows\System32\DNSAPI.dll
C:\Windows\SYSTEM32\powrprof.dll
C:\Windows\system32\GDI32.dll

"spoolsv.exe" process is not a virus. But you can terminate "spoolsv.exe" process, if you are not using any printers.

 

"IntelCpHeciSvc.exe" Process on Windows 8

"msdtc.exe" Process on Windows 8

System Service Processes on Windows 8

⇑⇑ Windows 8 Processes Tutorials

2016-12-30, 304👍, 0💬