ok, spoolsv broadcasting 1

[karmic]

Got a weird problem under windows xp. This system is on a 2003 network as of today but i'm not sure if it's related or not. The client has been complaining about slowness for about a week.

Spoolsv.exe is broadcasting like crazy, can't seem to figure out why. When I open the network properties it shows a broadcast of trillions of packets in just a few minutes. Received is very minimal.

Thought maybe a packet storm of some sort, unplug the network cable, broadcasting stops, plug it into a standalone hub, broadcast starts again.

Started closing down processes one by one, and closing spoolsv.exe stopped the broadcasting. restart the spooler in services and the broadcasting starts.

Checked all the usual spots for a typical virus to load, registry and what not, nothing unusual at all. Running norton antivirus corporate client, nothing found. Running the trend micro online scan as I type this but so far nothing. Internet works fine. Running netstat -an shows no internet connections.

Any ideas?

~ K.I.S.S - Don't make it any more complex than it has to be ~

 

[karmic]

ok, maybe it's not spoolsv. disabled the spooler and hit the net, then broadcasting lots again...

This is only happening on 3 toshiba laptops too, the rest of the network computers seem to be fine.

Too weird.

~ K.I.S.S - Don't make it any more complex than it has to be ~

 

[karmic]

problem solved, it was just a driver issue...

~ K.I.S.S - Don't make it any more complex than it has to be ~

 

[grecoale]

Karmic,

I have the same problem! I have a dell inspiron 8200 P4 1.7 with windows XP Prof. I recently made a format and reinstalled everything. I noticed the problem a couple of days ago trying to run a heavy program and my laptop hung. after a few times I openned the task manager and saw the same thing. spollsv.exe using 99% of my cpu!!! What is the solution?

Please let me know!

 

[MrDongle]

Karmic,

Hey, I just ran into the same problem on a clients pc. What kind of a driver issue was it and what was the procedure? My client is on a 4 system network running winXP Pro and only 1 of the workstations are affected. Any insight would be appreciated.

Thanks!

 

[karmic]

I just installed the latest driver from the manufacturer and the problem went away... Took me a while to realize that was the problem tho.

I automatically assumed that the system was hacked and uploading with that kind of outgoing traffic.

If you have a brand name machine, you may want to check the manufacturers site. if it's a clone, just install the latest driver for the card.

Good luck

~ K.I.S.S - Don't make it any more complex than it has to be ~

 

[MrDongle]

Thanks for the help and the quick reply =)

When I was checking into the drivers, I found that an old dot-matrix printer was still installed on the system but, wasn't turned on.

Just out of curiosity, I turned off spooling in the properties for that printer and whadd'ya know, spoolsv.exe stopped running, yay!

I guess someone sent a job to the wrong printer and that caused spoolsv to go on a broadcasting frenzy, heh.

Anyhow, thanks for the help!