spool32 virus?

[andyw007]

Hi All.

I'm a 'newy' so I will try to keep it understandable.

I've run a Start-up list program due to my performance speeds are in the 45% area.
These lines show up which I suspect are viruses, despite a virus update from AVG 6 in the last two hours ..

c:\windows\system\kernel32.dll
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\SYSTEM\MSGSRV32.EXE

C:\WINDOWS\SYSTEM\SPOOL32.EXE

The last one gives it as one that can be removed from the Panda site but I could not find a reference to it

I would be grateful if anyone could help

One little thing, I have Spy S&D plus ZA firewalls but how can I be as near to 100% that I have no unwanted diallers on my system by looking in, is it, Registry ? A friend just found one after having a £180 addition to their phone bill which they new nothing about until it was too late.

My thanks in advance
Andy

 

[SESaskDFC]

Howdy Andy:

The following explanations are courtesy of a web search on varios sites. NONE of the files you have givenm are virii and are, in fact, required Windows files.

Kernel32.dll is the 32-bit dynamic link library found in the Windows operating system kernel. It handles memory management, input/output operations, and interrupts. When Windows boots up, kernel32.dll is loaded into a protected memory space so other applications do not take that space over.

PStoreS.exe

(Microsoft) Protected Storage Server (under Win9x/ME) or Protected Storage Service (under WinNT/2000/XP). Protected Storage, in the shape of PSTORES, was introduced with Internet Explorer 4. It is invoked by Microsoft Internet programs such as Outlook Express and Internet Explorer, to securely store a variety of secure and confidential data into the registry, such as Outlook Express passwords, SSL certificates, auto-complete fields (usernames and passwords to enter websites, etc...) and web forms data.

Recommendation :
Under Windows 9x/ME, PSTORES will only run as and when required – leave it alone. Under Windows NT4/2000/XP, however, it is a service that is started automatically as Windows starts. As far as we have been able to verify, PSTORES is required to be able to run Outlook Express. Therefore, under Windows NT4/2000/XP, if you do not use Outlook Express and do not use Internet Explorer, or do not use the auto-complete features of Internet Explorer, nor make us of SSL Certificates, then you can go into Services and set this service to a Manual start.

Msgsrv32.exe

(Microsoft)
The Windows 32-bit Message Server. This essential program normally never appears in the Task List unless it has "hung"; it otherwise runs invisibly in the background performing a variety of essential services, a significant majority of which being to do with on-screen messages and notifications.

Recommendation :
As mentioned above this program only ever appears in the Task List if it has "hung". When that happens you will see "Not responding" next to it. Simply highlight it, and do an End Task on it (you may need to wait 5-10 seconds after the first "End Task" and re-do it). If MSGSRV32 hangs often, you will need to investigate.

Spool32.exe

(Microsoft) Spooler Sub System Process for Windows 95/98/ME. SPOOL32 is a hidden task, a task that does not show up when you press Ctrl+Alt+Del, but which will show up in Starter or any Task Process viewer, such as Task Info 2002 or WinTasks. SPOOL32 manages the spooling of print jobs. Spooling allows the computer's processor to quickly process a print job by temporarily storing it on the hard disk before sending it to the printer. This allows the processor to return control to the program from which you are printing at a much faster rate than if the program were to process the entire print job and then send it directly to the printer. Note that SPOOL32 will only spool print jobs if you configured your printer to spool print jobs.

Recommendation :
Essential – this task auto-loads at boot-up – leave it alone. If you experience SPOOL32 errors, your problem is not with SPOOL32 but with something else on your PC, quite often the printer drivers.

Murray

 

[andyw007]

Hi Murray

Wow .. that is fast !! I posted this quiery with another forum 5 day's ago and still no response. Looks like I have found the experts right here.

You indeed have my thanks and keep up the excellent work

Best wishes

Andy

 

[SESaskDFC]

Andy:

Not a problem.. glad we could help.

Murray