RIVET logoRIVET

Home / Process library / spoolsv.exe

What is spoolsv.exe?

spoolsv.exe is Print Spooler. Queues documents for printers, including PDF and OneNote virtual printers.

Namespoolsv.exe
Full namePrint Spooler
PublisherMicrosoft Windows
Normal locationC:\Windows\System32
Safe to end?Depends It depends on whether you use Print Spooler.
If you end itNothing can print until it restarts.

How to check it's the real spoolsv.exe

  1. Open Task Manager (Ctrl+Shift+Esc) and go to Details.
  2. Right-click spoolsv.exe and choose Open file location. It should open C:\Windows\System32.
  3. Right-click the file, choose Properties, then Digital Signatures. The signer should be Microsoft Windows.

A file called spoolsv.exe somewhere else, or without that signature, is worth scanning with Microsoft Defender.

What RIVET shows

RIVET's process list shows spoolsv.exe with this explanation, the verdict above, and a signature check, so you can see at a glance whether it is the genuine Windows file. Ending a process can't be undone, and RIVET warns you before it ends anything Windows needs.

Get RIVET freeAll processes and services

Questions

Is spoolsv.exe a virus?

The genuine spoolsv.exe is part of Windows, signed by Microsoft Windows, and runs from C:\Windows\System32. Malware sometimes copies the name, so check the location and signature as shown above.

Can I end spoolsv.exe?

It depends on whether you use Print Spooler. Nothing can print until it restarts.

Source: https://learn.microsoft.com/en-us/windows-server/security/windows-services/security-guidelines-for-disabling-system-services-in-windows-server

Last updated 29 October 2026