Solved

Print Spooler causing a lot of hard drive activity

Posted on 2009-06-30
7
979 Views
Last Modified: 2013-12-07
Some time in early June my computer started to slow down. The boot up would take a long time because of a lot of hard drive activity. While using the computer it would pause for more than 5 minutes because of a lot of hard drive activity. Also when I go in to Control Panel / Printers it took a long time to list the printers. I traced it to the Print Spooler. When it is disabled, Windows starts up normally and the computer doesn't pause.

I used Process Monitor, Autoruns and Process Explorer from Sysinternals.com to find out that SPOOLSV.EXE was the cause.

I uninstalled both my printers and deleted the drives from Server Properties in Control Panel / Printers. The only printers left are "Microsoft office Document Image Writer" and "Intuit Printer"

During the time that there is a lot of disk activity(computer is unresponsive) Process Monitor shows that SPOOLSV.EXE is accessing the following 2 folders A LOT:
c:\windows\system32\spool\printers
c:\$Directory.

I have Norton Internet Security 2009 installed and there are no threats detected. I used Autoruns to check for programs that should not be starting up.

On June 4 and 10 some Vista and MS Office patches were installed. I uninstalled the Vista patches.

Vista Home Premium
Pentium dual core
2gigs ram
88gigs free on HD
0
Comment
Question by:LeonGarfield
  • 4
  • 3
7 Comments
 
LVL 5

Accepted Solution

by:
Ahmed Ezzat AbuRaya earned 500 total points
Comment Utility
Is it unresponsive due to disk activity or to cpu hog?
I would try disabling the spool service, then deleting all files in (C:\WINDOWS\system32\spool\PRINTERS) .. (should end with *.spl /*.shd) and rerun the service again. And see what happens.
0
 
LVL 5

Expert Comment

by:Ahmed Ezzat AbuRaya
Comment Utility
Also I'd make sure there's no stuck printing job in the (Microsoft office Document Image Writer) ..

Tell me if there's a progress :)
0
 

Author Comment

by:LeonGarfield
Comment Utility
Just a lot of disk activity. It is not a CPU hog.

I will check the C:\WINDOWS\system32\spool\PRINTERS folder and let you know what I find.
0
Give your grad a cloud of their own!

With up to 8TB of storage, give your favorite graduate their own personal cloud to centralize all their photos, videos and music in one safe place. They can save, sync and share all their stuff, and automatic photo backup helps free up space on their smartphone and tablet.

 

Author Comment

by:LeonGarfield
Comment Utility
hello Zo2FoL,

you are on the right track. The PRINTERS folder does contain files. It took me some time to figure out how to gain access to the folder. It seems that there are many hundred thousand files in there. Windows has been apply the modified security to the folder for the past day and it is still doing it. Once I gain access to all the files it will take some time to delete them. I will let you know how things are going.

The next question to this problem is why there are soooooooo many spool files in the PRINTERS folder? I didn't print that much. Also, the short directory listing I have seen shows that the file sizes are all ZERO.
0
 
LVL 5

Expert Comment

by:Ahmed Ezzat AbuRaya
Comment Utility
well, files are created in this folder whenever there is a print job. They should be automatically deleted, but for some reason they are not in your case. (maybe there are open handles to these files.. e.g. Antivirus program? or something..)

As a workaround you can make a .bat file that is run at schedule, with these simple lines:

[@echo off
del C:\WINDOWS\system32\spool\PRINTERS\*.shd
del C:\WINDOWS\system32\spool\PRINTERS\*.spl]

This is exactly like manually deleting the files, but It saves you time and effort.

I assume you have no problem deleting the files :)

Let me know what happens :)
0
 

Author Comment

by:LeonGarfield
Comment Utility
There were over 500,000 files in the folder. They were all dated July 16 or July 17. I tried to get a proper count on the number of files but the directory listing using the command prompt started to get corrupted well in to the listing. It will take some time to delete them. I will then run a chkdsk to correct any problems and return to the PRINTERS folder to see if I need to delete more.

I will keep you up-to-date.
0
 

Author Comment

by:LeonGarfield
Comment Utility
Thank you for your solution Zo3FoL. I removed all the *.spl files from the PRINTERS folder and the problem is solved.

0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

First of all what is the DMCA? The DMCA is a set of laws first enacted in 1998. The Act was modified on 2000, and again on 2001, 2004, and 2007. Its goal was to update the Copyright act of 1973 for the digital age. In a world with MP3 playing cap…
Not everyone is tied to the Microsoft Office suite these days, as more free cloud-based solutions are entering the market. You might be used to creating presentations in PowerPoint, but did you know Google offers Slides  (https://www.google.com/slid…
Viewers will learn how to include realistic velocity sensitivity to their Sampler instruments. Set the Vol<Vel parameter in the Filter/Global tab to your desired setting: Gather samples of hits of various intensity, and drag/drop into Velocity zon…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now