Endpoint Protection

I think there is some malware in my pc which stops print spooler again and again. what to do?

Make sure its not a false positive from SEP IPS..Run sysinternal autoruns and check what else is hooked to print spooler.

Hi Bijay,

If you have been recently infected by a virus and your print spooler service often restarts/fails. one point that the printer drivers are corrupted/defective. Clean-up your printer drivers.

1. Open the Printers (Printers and Faxes on Windows XP) folder
2. delete all of the printers
3. click File, Server Properties

I have checked all those .but as soon as i start print spooler from services.msc printer starts working for some time.

If you have NTP installed try disabling it. If its still blocking have you tried scanning your system with MBAM or something ..have you found any suspicius files ?

Hi

I have the same issue. Recently some of my clients receive this error and number of them is increasing:



When I check Services, I find that Description of Print Spooler service has been changed:





Clients alos lose their printers and I have to add them again.

I ran Autoruns but couldn't find any suspicious process. the only processes tha are not verified are:

TomcatStartup ProxyStop3 (Not verified) Hewlett-Packard c:\program files\hewlett-packard\toolbox2.0\hpbpsttp.exe

ISUSScheduler InstallShield Update Service Scheduler (Not verified) Macrovision Corporation c:\program files\common files\installshield\updateservice\issch.exe

ISUSPM Startup InstallShield Update Service Update Manager (Not verified) Macrovision Corporation c:\program files\common files\installshield\updateservice\isuspm.exe

Hi,

Please run the tool autoruns and try to check the spooler with it.

Aniket