Author Topic: Zone alarm detecting Spoolsv  (Read 6046 times)

0 Members and 1 Guest are viewing this topic.

Offline Mucky duck

  • Newbie
  • *
  • Posts: 3
Zone alarm detecting Spoolsv
« on: March 13, 2003, 12:06:59 AM »
Using Avast home, on XP-home.
When I try and use updater, Zone Alarm Alerts me to the prog spoolsv.exe that tries to access the internet.  I have no printer attached or setup to this pc.
So I block it, and the updater stops, with a Server unavailable message.
Does Avast use the Generic-host-process-svchost also?
Once I know I can ask Zone alarm for their recommendend settings for this prog.


Offline Vlk

  • Global Moderator
  • Serious Graphoman
  • **
  • Posts: 11665
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:Zone alarm detecting Spoolsv
« Reply #1 on: March 13, 2003, 09:34:00 AM »
Strange... as far as I know, avast! has absolutely nothing to do with the spooler.

Quote
Does Avast use the Generic-host-process-svchost also?

No. The process that avast uses to do the updates (i.e. connect [via standard HTTP] to our servers to do the update) is called 'avast.setup'. Many our users use firewalls (ZoneAlarm including) and creating an 'allow-rule' for this process is sufficient to make the updates work...

There must be some dependency between avast and the spoolsv on your machine. I can't see any reason for this, though - spoolsv is the print spooler, right?!  ???

Vlk
« Last Edit: March 13, 2003, 09:34:30 AM by Vlk »
If at first you don't succeed, then skydiving's not for you.

Offline Mucky duck

  • Newbie
  • *
  • Posts: 3
Re:Zone alarm detecting Spoolsv
« Reply #2 on: March 13, 2003, 10:17:56 PM »
So spoolsv is a mystery, I've told ZA to block it anyway, see what happens. I managed to print a small text doccy with it blocked, maybe its wearing a disguise (trojan?).

So what does it do - shall I rename it and see if something else stops working? Anyone any idea?
--------------     ----------
Yes, I get avast.setup when it updates, prog or iAVS.
Allowed by ZA when it asks me. Good.

Immediately after update, at the same time as the summary is displayed, I get the file setu000000ac.vpu
trying to access the internet (according to ZA). Is this the avast prog that displays our current version/update status?  I blocked it and everything looked ok, no error message etc.  Any idea?

Offline oudeman

  • Newbie
  • *
  • Posts: 5
Re:Zone alarm detecting Spoolsv
« Reply #3 on: March 20, 2003, 03:00:13 PM »
spoolserver is no mystery. see:

Black Viper's Windows XP Home and Professional Services Configurations:


http://www.blackviper.com/WinXP/servicecfg.htm


Offline Morc

  • Newbie
  • *
  • Posts: 2
Re:Zone alarm detecting Spoolsv
« Reply #4 on: March 28, 2003, 08:15:11 PM »
something spooky going on at Alwil... see my topic too...


Morc

Offline Mucky duck

  • Newbie
  • *
  • Posts: 3
Re:Zone alarm detecting Spoolsv
« Reply #5 on: March 31, 2003, 10:12:20 PM »
That's the spools bit sorted, thanks oudeman.

The plot thickens about setu000000ac.vpu?  Any idea anyone?