Spools.exe is a network-aware worm W32.Kassbot.A. Spools.exe opens a back door through IRC. Spools.exe tries to terminate antiviral programs installed on a user computer. Spools.exe monitors user Internet activity and private information. It sends stolen data to a hacker site. Related files: %System%\spools.exe %System%\xee32.dll %System%\xbccd.log Adds the value: "Spools Service Controller" = "%System%\spools.exe" to the Windows startup registry keys. More info: http://securityresponse.symantec.com/avc... Removal: Kill spools.exe process and remove spools.exe from Windows startup using antivirus (also check How To Remove section)Startup Optimizer.
Home
