Interesting
: earlier this afternoon, the firewall notified that spoolsv.exe wanted to have access to the Internet. While allowing it, I came to wonder why it actually wanted to do that. Or actually, since when it wanted to go online.
A search (using my homebrewn fandro) for the executable showed (and revealed) something interesting: it was actually last modified a couple of days ago. Bell ringing yet? No? Now it should.
Next question is: why would a spooler (think printing) want to access the Internet?