Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I noticed on one computer running XP SP2 that when I delete some exe files (Examples: spider.exe, spoolsv.exe) from c:\Windows\System32 folder, that they came back. I thought it is a virus. So, I checked on another computers. One of them have the same. Is this normal?

share|improve this question
What the hell did you do that for?! – Phoshi Nov 21 '09 at 11:20
up vote 12 down vote accepted

Those files are critical parts of Windows XP and it's trying to rescue itself with Windows File Protection.

share|improve this answer

For the well-being of your computer...

Avoid modifying manually the contents of C:\Windows

... unless you are very sure of what you are doing.

If you don't know, assume the files are Windows system files and leave them alone. Google a file name if you aren't sure.

share|improve this answer
The problem is that many people who mess things up there believe they know what they're doing. – Joey Jun 27 '10 at 11:21

System files are in many ways similar to the voltage switch on your PSU: They are not to be tinkered with.

share|improve this answer
Whys that? How does this help his problem? Could you elaborate? – Simon Sheehan Feb 12 '12 at 22:10
Kinokijuh's saying the same thing all the other good answers are saying, just in his own creative way Simon. – music2myear Feb 13 '12 at 16:01

Yeah, its normal! If you want to delete a file from system 32, use the unlocker application to do so! You can use an antivirus software to find out if a program is a virus or not, then use the delete feature in the antivirus software!

And don't make deductions for a virus based on your instincts! Usually viruses would be a hidden file!! If you find a suspicious file search for it on the net! And use some online scanners! Yeah its time consuming, but its worth it!

share|improve this answer

spoolsv.exe is (usually) a print spooling service. spider.exe is part of the e-mail scraper service. Both are part of Windows XP, and although I've not heard of it could I guess can be regenerated on start-up.

If however, the .exe files are something else, then yes, you should be worried.

Why did you delete them anyway? Did you have evidence of their being dubious?

Sources: spider.exe, spoolsv.exe.

These give other info like file sizes to help check authenticity.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.