firewall

firewall
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
firewall Roger11 11-10-2005
|--> Re: firewall Roger Abell [MV...11-12-2005
Posted by =?Utf-8?B?Um9nZXIxMQ==?= on November 10, 2005, 10:32 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I am rinning windows2000 and I have a net defense firewall installed. I also
run Bellsouth messenger. Recently I installed a lexmark/usb/printer/scanner.
When I give permission for the firewall to allow the spoolsv.exe to have
access, it disables my messenger. This also disables my firewall to the point
that I have to reinstall. can I block this exe. file from having access and
also what is the purpose of this file?I would appreciate any posssible
solution.

Posted by siljaline on November 11, 2005, 1:40 am
If you were  Registered and logged in, you could reply and use other advanced thread options
"Roger11" wrote:
>I am rinning windows2000 and I have a net defense firewall installed. I also
> run Bellsouth messenger. Recently I installed a lexmark/usb/printer/scanner.
> When I give permission for the firewall to allow the spoolsv.exe to have
> access, it disables my messenger. This also disables my firewall to the point
> that I have to reinstall. can I block this exe. file from having access and
> also what is the purpose of this file?I would appreciate any posssible
> solution.

While I'm concerned as to what the differences are between Bell's Messenger
and MSN Messenger, we'll leave that be for the moment.
The executable file for your printer - scanner, *should* be a legit file.
Your saying that your firewall is being asked by the file to access the Internet.
That should definitely not be happening or be allowed to happen.

Please browse this URL to see what this file can be modified by a virus, Spyware
etc - in the context that it will, hijacked, invade your PC and cause such a
problem.
http://castlecops.com/modules.php?name=StartupList&query=spoolsv

A fix and "canned" reply follows:
<paste>
Download and run HijackThis;
(http://aumha.org/downloads/hijackthis.zip)
Read this Tutorial *before* first use;
(http://www.bleepingcomputer.com/forums/index.php?showtutorial=42)
Once done > run HijackThis > save a scan log and post it to /any/ of the
following (expert) forums for analysis.
*Note, registration is required prior to posting a log.
- Not listed in any particular order -
(http://aumha.net/viewforum.php?f=30)
(http://www.bleepingcomputer.com/forums/forum22.html)
(http://www.dslreports.com/forum/security)
(http://castlecops.com/forum67.html)
(http://www.cybertechhelp.com/forums/forumdisplay.php?f=25)
(http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html)
(http://gladiator-antivirus.com/forum/index.php?showforum=170)
(http://forum.iamnotageek.com/f-130.html)
(http://forums.maddoktor2.com/index.php?showforum=17)
(http://www.spywarewarrior.com/viewforum.php?f=5)
(http://forums.spywareinfo.com/index.php?showforum=18)
(http://forums.techguy.org/f54-s.html)
(http://forums.tomcoyote.org/index.php?showforum=27)
(http://forums.subratam.org/index.php?showforum=7)
(http://www.5starsupport.com/ipboard/index.php?showforum=18)
</paste>

Please post back, to this thread, the URL where you posted your
HijackThis log for us to follow-up.

Good luck.

Silj

--
siljaline

MS - MVP Windows (IE/OE) & Security, AH-VSOP
_________________________________________
Security Tools Updates
http://aumha.net/viewforum.php?f=31

Reply to group, as return address
is invalid that we may all benefit.



Posted by Roger Abell [MVP] on November 12, 2005, 11:03 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Well, I have a totally different response on part of this.

x:\WINDOWS\system32\spoolsv.exe
is the Print Spooler service.

If you do not use the local printer as an available resource
for other machines on your network, then there is no need
for your allowing this in the firewall. It is just trying to listen
so that the print part of "file and printer sharing" can happen.


>I am rinning windows2000 and I have a net defense firewall installed. I
>also
> run Bellsouth messenger. Recently I installed a
> lexmark/usb/printer/scanner.
> When I give permission for the firewall to allow the spoolsv.exe to have
> access, it disables my messenger. This also disables my firewall to the
> point
> that I have to reinstall. can I block this exe. file from having access
> and
> also what is the purpose of this file?I would appreciate any posssible
> solution.



Posted by charlie R on November 13, 2005, 11:22 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

> I am rinning windows2000 and I have a net defense firewall
installed. I also
> run Bellsouth messenger. Recently I installed a
lexmark/usb/printer/scanner.
> When I give permission for the firewall to allow the spoolsv.exe to
have
> access, it disables my messenger. This also disables my firewall to
the point
> that I have to reinstall. can I block this exe. file from having
access and
> also what is the purpose of this file?I would appreciate any
posssible
> solution.

I have a Lexmark Z25 that has several files that ask permission to
access the internet every time I use the printer. I blocked them in
my ZoneAlarmPro Firewall, and put a stop to that. If I knew how to
disable File and Printer Sharing, I certainly would. Can't find a
setting for it in the interface. Spoolsv.exe still asks once in a
while. Persistent. I took it off the startup menu in Msconfig so it
wouldn't try all day long. Good printer otherwise.

charlie R


Similar ThreadsPosted
MS Firewall work with other firewall? August 2, 2006, 6:16 pm
Firewall exceptions - "No firewall is on" March 1, 2007, 11:56 pm
firewall June 25, 2005, 11:26 pm
firewall June 28, 2005, 3:07 pm
Firewall July 28, 2005, 11:38 am
xp firewall help August 1, 2005, 8:15 pm
NIS or XP firewall August 11, 2005, 5:37 am
Firewall October 1, 2005, 10:17 am
firewall December 15, 2005, 1:55 pm
Firewall January 21, 2006, 11:45 pm

The site map in XML format XML site map

Contact Us | Privacy Policy