{"id":702,"date":"2005-08-12T22:07:34","date_gmt":"2005-08-13T01:07:34","guid":{"rendered":"http:\/\/www.hoogervorst.ca\/arthur\/?p=702"},"modified":"2005-08-12T22:07:34","modified_gmt":"2005-08-13T01:07:34","slug":"spoolsvexe","status":"publish","type":"post","link":"http:\/\/www.hoogervorst.ca\/arthur\/?p=702","title":{"rendered":"Spoolsv.exe"},"content":{"rendered":"<p><span class=\"dropcap\">I<\/span>nteresting<a href=\".\/wp-content\/spoolsv.jpg\"><img src='.\/wp-content\/thumb-spoolsv.jpg' alt='Spooler' style=\"float:right;margin:5px;\" \/><\/a>: earlier this afternoon, the firewall notified that <em>spoolsv.exe<\/em> wanted to have access to the Internet. While allowing it, I came to wonder why it actually wanted to do that. Or actually, since when it wanted to go online.\n<\/p>\n<p>A search (using my homebrewn <a href=\"http:\/\/www.hoogervorst.ca\/arthur\/?page_id=166\">fandro<\/a>) for the executable showed (and revealed) something interesting: it was actually last modified a couple of days ago. Bell ringing yet? No? <a href=\"http:\/\/www.microsoft.com\/technet\/security\/bulletin\/ms05-043.mspx\">Now it should<\/a>.\n<\/p>\n<p>Next question is: why would a spooler (think printing) want to access the Internet?<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Interesting: earlier this afternoon, the firewall notified that spoolsv.exe wanted to have access to the Internet. While allowing it, I came to wonder why it actually wanted to do that. Or actually, since when it wanted to go online. A &hellip; <a href=\"http:\/\/www.hoogervorst.ca\/arthur\/?p=702\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[2],"tags":[],"_links":{"self":[{"href":"http:\/\/www.hoogervorst.ca\/arthur\/index.php?rest_route=\/wp\/v2\/posts\/702"}],"collection":[{"href":"http:\/\/www.hoogervorst.ca\/arthur\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.hoogervorst.ca\/arthur\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.hoogervorst.ca\/arthur\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/www.hoogervorst.ca\/arthur\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=702"}],"version-history":[{"count":0,"href":"http:\/\/www.hoogervorst.ca\/arthur\/index.php?rest_route=\/wp\/v2\/posts\/702\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.hoogervorst.ca\/arthur\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=702"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.hoogervorst.ca\/arthur\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=702"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.hoogervorst.ca\/arthur\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=702"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}