Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Print Spooler causing a lot of hard drive activity

Posted on 2009-06-30
7
1,020 Views
Last Modified: 2013-12-07
Some time in early June my computer started to slow down. The boot up would take a long time because of a lot of hard drive activity. While using the computer it would pause for more than 5 minutes because of a lot of hard drive activity. Also when I go in to Control Panel / Printers it took a long time to list the printers. I traced it to the Print Spooler. When it is disabled, Windows starts up normally and the computer doesn't pause.

I used Process Monitor, Autoruns and Process Explorer from Sysinternals.com to find out that SPOOLSV.EXE was the cause.

I uninstalled both my printers and deleted the drives from Server Properties in Control Panel / Printers. The only printers left are "Microsoft office Document Image Writer" and "Intuit Printer"

During the time that there is a lot of disk activity(computer is unresponsive) Process Monitor shows that SPOOLSV.EXE is accessing the following 2 folders A LOT:
c:\windows\system32\spool\printers
c:\$Directory.

I have Norton Internet Security 2009 installed and there are no threats detected. I used Autoruns to check for programs that should not be starting up.

On June 4 and 10 some Vista and MS Office patches were installed. I uninstalled the Vista patches.

Vista Home Premium
Pentium dual core
2gigs ram
88gigs free on HD
0
Comment
Question by:LeonGarfield
  • 4
  • 3
7 Comments
 
LVL 5

Accepted Solution

by:
Ahmed Ezzat AbuRaya earned 500 total points
ID: 24782600
Is it unresponsive due to disk activity or to cpu hog?
I would try disabling the spool service, then deleting all files in (C:\WINDOWS\system32\spool\PRINTERS) .. (should end with *.spl /*.shd) and rerun the service again. And see what happens.
0
 
LVL 5

Expert Comment

by:Ahmed Ezzat AbuRaya
ID: 24782637
Also I'd make sure there's no stuck printing job in the (Microsoft office Document Image Writer) ..

Tell me if there's a progress :)
0
 

Author Comment

by:LeonGarfield
ID: 24782728
Just a lot of disk activity. It is not a CPU hog.

I will check the C:\WINDOWS\system32\spool\PRINTERS folder and let you know what I find.
0
Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

 

Author Comment

by:LeonGarfield
ID: 24828497
hello Zo2FoL,

you are on the right track. The PRINTERS folder does contain files. It took me some time to figure out how to gain access to the folder. It seems that there are many hundred thousand files in there. Windows has been apply the modified security to the folder for the past day and it is still doing it. Once I gain access to all the files it will take some time to delete them. I will let you know how things are going.

The next question to this problem is why there are soooooooo many spool files in the PRINTERS folder? I didn't print that much. Also, the short directory listing I have seen shows that the file sizes are all ZERO.
0
 
LVL 5

Expert Comment

by:Ahmed Ezzat AbuRaya
ID: 24828798
well, files are created in this folder whenever there is a print job. They should be automatically deleted, but for some reason they are not in your case. (maybe there are open handles to these files.. e.g. Antivirus program? or something..)

As a workaround you can make a .bat file that is run at schedule, with these simple lines:

[@echo off
del C:\WINDOWS\system32\spool\PRINTERS\*.shd
del C:\WINDOWS\system32\spool\PRINTERS\*.spl]

This is exactly like manually deleting the files, but It saves you time and effort.

I assume you have no problem deleting the files :)

Let me know what happens :)
0
 

Author Comment

by:LeonGarfield
ID: 24833554
There were over 500,000 files in the folder. They were all dated July 16 or July 17. I tried to get a proper count on the number of files but the directory listing using the command prompt started to get corrupted well in to the listing. It will take some time to delete them. I will then run a chkdsk to correct any problems and return to the PRINTERS folder to see if I need to delete more.

I will keep you up-to-date.
0
 

Author Comment

by:LeonGarfield
ID: 24862325
Thank you for your solution Zo3FoL. I removed all the *.spl files from the PRINTERS folder and the problem is solved.

0

Featured Post

Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

First of all what is the DMCA? The DMCA is a set of laws first enacted in 1998. The Act was modified on 2000, and again on 2001, 2004, and 2007. Its goal was to update the Copyright act of 1973 for the digital age. In a world with MP3 playing cap…
Not everyone is tied to the Microsoft Office suite these days, as more free cloud-based solutions are entering the market. You might be used to creating presentations in PowerPoint, but did you know Google offers Slides  (https://www.google.com/slid…
Viewers will learn the basics of making and using Impulse Kits in Ableton Live. Load new Impulse into an empty MIDI track: Fill the 8 empty sample slots with drum samples: Adjust parameters to tailor each sound as desired: Proceed to create be…
Viewers will learn how to create and use Simpler instruments in Ableton Live. Load new Simpler into an empty MIDI track: Select a sample and drop it into sample window in Simpler: If sample is not pitched at C3, adjust tuning with Transpose para…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question