CPU-Auslastung 99% bei Prozess "System"

File name:
spoolsv.exe
Submission date:
2010-10-11 19:38:28 (UTC)
Current status:
finished
Result:
0 /41 (0.0%)

Antivirus  	Version  	Last Update  	Result
AntiVir 	7.10.12.184 	2010.10.11 	-
Antiy-AVL 	2.0.3.7 	2010.10.11 	-
Authentium 	5.2.0.5 	2010.10.11 	-
Avast 	4.8.1351.0 	2010.10.11 	-
Avast5 	5.0.594.0 	2010.10.11 	-
AVG 	9.0.0.851 	2010.10.11 	-
BitDefender 	7.2 	2010.10.11 	-
CAT-QuickHeal 	11.00 	2010.10.11 	-
ClamAV 	0.96.2.0-git 	2010.10.11 	-
Comodo 	6356 	2010.10.11 	-
DrWeb 	5.0.2.03300 	2010.10.11 	-
Emsisoft 	5.0.0.50 	2010.10.11 	-
eSafe 	7.0.17.0 	2010.10.11 	-
eTrust-Vet 	36.1.7905 	2010.10.11 	-
F-Prot 	4.6.2.117 	2010.10.11 	-
F-Secure 	9.0.15370.0 	2010.10.11 	-
Fortinet 	4.2.249.0 	2010.10.11 	-
GData 	21 	2010.10.11 	-
Ikarus 	T3.1.1.90.0 	2010.10.11 	-
Jiangmin 	13.0.900 	2010.10.11 	-
K7AntiVirus 	9.65.2724 	2010.10.11 	-
Kaspersky 	7.0.0.125 	2010.10.11 	-
McAfee 	5.400.0.1158 	2010.10.11 	-
McAfee-GW-Edition 	2010.1C 	2010.10.11 	-
Microsoft 	1.6201 	2010.10.11 	-
NOD32 	5521 	2010.10.11 	-
Norman 	6.06.07 	2010.10.11 	-
nProtect 	2010-10-11.01 	2010.10.11 	-
Panda 	10.0.2.7 	2010.10.11 	-
PCTools 	7.0.3.5 	2010.10.11 	-
Prevx 	3.0 	2010.10.11 	-
Rising 	22.69.00.01 	2010.10.11 	-
Sophos 	4.58.0 	2010.10.11 	-
Sunbelt 	7038 	2010.10.11 	-
SUPERAntiSpyware 	4.40.0.1006 	2010.10.11 	-
Symantec 	20101.2.0.161 	2010.10.11 	-
TheHacker 	6.7.0.1.054 	2010.10.10 	-
TrendMicro 	9.120.0.1004 	2010.10.11 	-
TrendMicro-HouseCall 	9.120.0.1004 	2010.10.11 	-
ViRobot 	2010.10.4.4074 	2010.10.11 	-
VirusBuster 	12.67.13.0 	2010.10.11 	-


Additional information
Show all
MD5   : 60784f891563fb1b767f70117fc2428f
SHA1  : e6e904b84332191d44de729deb7bfed9bcef2ce9
SHA256: e0b07f08e60ffbad36c2e58180f4b2a16dca47716044cbe0213df7b74d742f1f
ssdeep: 768:ioE4mVpn/hQUbwaf8MNy6knSRDuPMV2FzFlzV3D+JMUQkwvDLkCUJigo:inn/jbwaVc6knS
NIbVlkHCFgo
File size : 58880 bytes
First seen: 2010-09-14 18:05:45
Last seen : 2010-10-11 19:38:28
Magic: PE32 executable for MS Windows (GUI) Intel 80386 32-bit
TrID:
Win32 Executable MS Visual C++ (generic) (75.0%)
Win32 Executable Generic (16.9%)
Generic Win/DOS Executable (3.9%)
DOS Executable Generic (3.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
sigcheck:
publisher....: Microsoft Corporation
copyright....: (c) Microsoft Corporation. All rights reserved.
product......: Microsoft_ Windows_ Operating System
description..: Spooler SubSystem App
original name: spoolsv.exe
internal name: spoolsv.exe
file version.: 5.1.2600.6024 (xpsp_sp3_gdr.100817-1626)
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned
PEiD: -
PEInfo: PE structure information

[[ basic data ]]
entrypointaddress: 0x463B
timedatestamp....: 0x4C6A8BD1 (Tue Aug 17 13:17:05 2010)
machinetype......: 0x14C (Intel I386)

[[ 3 section(s) ]]
name, viradd, virsiz, rawdsiz, ntropy, md5
.text, 0x1000, 0xBE44, 0xC000, 5.94, fb8e2b74b1ed27f9776070bfaf512921
.data, 0xD000, 0x13B4, 0x1400, 2.23, a058f24120fe94e91092e48b3909e9f9
.rsrc, 0xF000, 0xC78, 0xE00, 6.19, e05210f2747d04cbe5cfb1fb2a66eddd

[[ 6 import(s) ]]
advapi32.dll: RegisterServiceCtrlHandlerExW, OpenThreadToken, CheckTokenMembership, StartServiceCtrlDispatcherW, SetServiceStatus, RegQueryValueExW, AllocateAndInitializeSid, FreeSid, InitializeSecurityDescriptor, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, GetLengthSid, InitializeAcl, AddAccessAllowedAce, AddAccessDeniedAce, GetAce, SetSecurityDescriptorDacl, GetSecurityDescriptorLength, MakeSelfRelativeSD, RegDisablePredefinedCache, RegOpenKeyExW, RegCloseKey
gdi32.dll: bMakePathNameW, GdiInitSpool, GdiGetSpoolMessage
kernel32.dll: GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetTickCount, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetModuleHandleA, QueryPerformanceCounter, GetModuleHandleW, GetCurrentProcess, GetSystemDirectoryW, FreeLibrary, InterlockedExchange, InitializeCriticalSection, ExitThread, CloseHandle, WaitForSingleObject, CreateEventW, CreateThread, ExitProcess, Sleep, OpenEventW, GetLastError, LoadLibraryA, LocalFree, LocalAlloc, SetEvent, LeaveCriticalSection, EnterCriticalSection, SetLastError, GetCurrentThread, CreateFileW, CompareStringW, OpenProcess, InterlockedIncrement, RaiseException, InterlockedDecrement, GetProcAddress
msvcrt.dll: _XcptFilter, _c_exit, __initenv, __getmainargs, _initterm, __setusermatherr, _adjust_fdiv, __p__commode, __p__fmode, __set_app_type, _controlfp, _exit, _except_handler3, wcsrchr, _stricmp, _wcsnicmp, wcslen, wcschr
ntdll.dll: RtlValidRelativeSecurityDescriptor
rpcrt4.dll: RpcServerRegisterIf2, I_RpcBindingInqTransportType, I_RpcBindingIsClientLocal, I_RpcSessionStrictContextHandle, RpcRaiseException, RpcImpersonateClient, RpcRevertToSelf, NdrServerCall2, RpcServerUseProtseqEpA, I_RpcSsDontSerializeContext, RpcMgmtSetServerStackSize, RpcServerListen

[[ 12 export(s) ]]
YDriverUnloadComplete, YEndDocPrinter, YFlushPrinter, YGetPrinter, YGetPrinterDriver2, YGetPrinterDriverDirectory, YReadPrinter, YSeekPrinter, YSetJob, YSetPort, YSplReadPrinter, YWritePrinter
ExifTool:
file metadata
CharacterSet: Unicode
CodeSize: 49152
CompanyName: Microsoft Corporation
EntryPoint: 0x463b
FileDescription: Spooler SubSystem App
FileFlagsMask: 0x003f
FileOS: Windows NT 32-bit
FileSize: 58 kB
FileSubtype: 0
FileType: Win32 EXE
FileVersion: 5.1.2600.6024 (xpsp_sp3_gdr.100817-1626)
FileVersionNumber: 5.1.2600.6024
ImageVersion: 5.1
InitializedDataSize: 8704
InternalName: spoolsv.exe
LanguageCode: English (U.S.)
LegalCopyright: Microsoft Corporation. All rights reserved.
LinkerVersion: 7.1
MIMEType: application/octet-stream
MachineType: Intel 386 or later, and compatibles
OSVersion: 5.1
ObjectFileType: Executable application
OriginalFilename: spoolsv.exe
PEType: PE32
ProductName: Microsoft Windows Operating System
ProductVersion: 5.1.2600.6024
ProductVersionNumber: 5.1.2600.6024
Subsystem: Windows GUI
SubsystemVersion: 4.0
TimeStamp: 2010:08:17 15:17:05+02:00
UninitializedDataSize: 0
Symantec reputation:Suspicious.Insight