Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 749
  • Last Modified:

What is SMSS.exe


My system has
                                  Location
SMSS.exe                   c:\WINNT\system32
smss.exe                    C:\WINNT\$NtServicePackUninstall$
smss.exe                    C:\WINNT\ServicePackFiles\i386

Is SMSS.exe is a virus? If so, how to remove it.
0
Mateen
Asked:
Mateen
  • 6
  • 2
1 Solution
 
bastibartelCommented:
Hi Mateen,

http://www.liutilities.com/products/wintaskspro/processlibrary/smss/

Description:
smss.exe is a process which is a part of the Microsoft Windows Operating System. It is called the Session Manager SubSystem and is responsible for handling sessions on your system. This program is important for the stable and secure running of your computer and should not be terminated.



Cheers!
0
 
bastibartelCommented:
Mateen,

..continued ;-)

Note:
smss.exe could also be a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. It could also be a registered security risk and should be removed immediately.

Determining whether this process is a virus or a legitimate Windows process depends on the directory location it executes or runs from in WinTasks.

My Comment (bastibartel)
The windows service is in C:\Windows\System32
0
 
MateenAuthor Commented:
Hi
bastibartel

Is there any difference between SMSS.exe and smss.exe

<<Determining whether this process is a virus or a legitimate Windows process depends on the directory location it executes or runs from in WinTasks.>>

Could not understand this line.
0
Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

 
bastibartelCommented:
No,  Windows OS  does not distinguish upper and lower case filenames
Sebastian
0
 
bastibartelCommented:
Sry,

If SMSS.exe is in  C:/Window/System32/SMSS.exe
it is the correct Microsoft Windows file

on Windows 2000 it could be also in
C:/WINNT/System32/SMSS.exe

If it is somewhere else (seach for it on your Harddrive)
It is probably a virus.

Was that more undertandable ?
Sebastian


0
 
MateenAuthor Commented:
<<If it is somewhere else (seach for it on your Harddrive)>>

I have searched and stated in my question.

If it is ok, alright, otherwsie , do please post back.
0
 
bastibartelCommented:
You are right, I missed that - it's all good then.
0
 
bastibartelCommented:
To be 100% certain, do the following:

1. check the creation date of  c:\WINNT\system32\SMSS.exe  
    (it should be exactly as old as many other files in that folder)

2. compare the exact file size (Properties) of SMSS.exe in both
    C:\WINNT\system32\SMSS.exe
    C:\WINNT\ServicePackFiles\i386
    (they should be identical)

Cheers,
Sebastian
0

Featured Post

Become an Android App Developer

Ready to kick start your career in 2018? Learn how to build an Android app in January’s Course of the Month and open the door to new opportunities.

  • 6
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now