PC Pitstop is the undisputed leader in PC diagnostics. Our running process library is culled from our database of over 100 million PC diagnostics and scans.

Tip from the PitCrew

Every process running on your computer takes up CPU cycles and valuable memory. For optimal PC performance and resource utilization, you should be aware of every process on your computer. PC Pitstop designed this process library to help you know which processes are worthwhile and others that slow system performance.

Furthermore, perhaps the quickest and most straight forward method to detect malware is through a running process analysis.

Process Library

  

spools.exe (Trojan-Downloader.Win32.Agent)

This program has not been seen on any systems tested at PC Pitstop in the past week.


PC Pitstop Analysis

spools.exe - Harmful trojan horse program. May cause system errors to pop up, listing the file spools.exe in the dialog. Remove immediately.


Recommendation

CA AntiVirus

spools.exe is a VIRUS. Stop all work until the virus is removed or you run the risk of spreading the virus to other people. Worse yet, the virus may be doing harm to your computer and your information.

spools.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends CA Antivirus in these types of situations.



Identification

In addition to the file name, spools.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

File name contains:\system32\drivers\

To view version information with Windows Explorer, right-click the file and click Properties, Version.


MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called spools.exe, we have detected more than 20 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
spools.exe> 20
#MD5Size
10xb3ca9b2013df2d329d52d6f244ae543239578 bytes
20x645bb3a7956c7b7f19c3e95c9bd1b70835380 bytes
30x5c897bf590f9286efa92afc3cedb0c8652970 bytes
40xf8a6b246e3e54ab69ea1f89dc945942539785 bytes
50x7184a4d0323967cca49d37675bc9de4628036 bytes
60x08e385be8469d37ac6179dcc81e4501f33437 bytes
70xca830c9cb09792dc5f04d64f92f6f64c39832 bytes
80x7dea7578363f0c0fdd4e1f1317c0aac239832 bytes
90xc386dae9f8a8877e2e556c4dc4f1ee1d84518 bytes
100x2f67168aaa8d4b797170ccd430773d7352632 bytes
110xdd7f3b82184f4dad9f21ae1111cb5ecf39785 bytes
120x0ce47d12d3bd6fef86ba54e0daa9e55a30578 bytes
130x60a6bbc3acbbcb9dbd82700d9c280da147189 bytes
140xbc91eb459c40b87720ef288390f55c9b52633 bytes
150x11b2211c0c11bf21eea173d5e03aaa8a14526 bytes
160xb24045b8990d6df1c5e568d9905bf8c945976 bytes
170x8d2626a8355de307f6f60e6764b30d6a13824 bytes
180xe5731c225c44bccc3e8fcaaa5fdddcb512288 bytes
190xdd0dbd2c13a839256e5ac1c985703fcf8704 bytes
200x457f9b25fa54ac838f936d304373f34f13312 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. This program has not been seen on any systems tested at PC Pitstop in the past week.


Vendor or Distributor's Web Site

http://forums.anandtech.com/messageview.aspx?catid=32&threadid=2174636

Important note: A file name alone may not be enough for positive identification. PC Pitstop's Overdrive tests and spyware scan use information such as the company name, product name, or install directory. If you are unable to identify a file, ask about it in our forums after running our full tests.