Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

What is SMSS.exe

Posted on 2006-07-07
8
Medium Priority
?
743 Views
Last Modified: 2012-08-13

My system has
                                  Location
SMSS.exe                   c:\WINNT\system32
smss.exe                    C:\WINNT\$NtServicePackUninstall$
smss.exe                    C:\WINNT\ServicePackFiles\i386

Is SMSS.exe is a virus? If so, how to remove it.
0
Comment
Question by:Mateen
  • 6
  • 2
8 Comments
 
LVL 5

Accepted Solution

by:
bastibartel earned 2000 total points
ID: 17057912
Hi Mateen,

http://www.liutilities.com/products/wintaskspro/processlibrary/smss/

Description:
smss.exe is a process which is a part of the Microsoft Windows Operating System. It is called the Session Manager SubSystem and is responsible for handling sessions on your system. This program is important for the stable and secure running of your computer and should not be terminated.



Cheers!
0
 
LVL 5

Expert Comment

by:bastibartel
ID: 17057932
Mateen,

..continued ;-)

Note:
smss.exe could also be a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. It could also be a registered security risk and should be removed immediately.

Determining whether this process is a virus or a legitimate Windows process depends on the directory location it executes or runs from in WinTasks.

My Comment (bastibartel)
The windows service is in C:\Windows\System32
0
 

Author Comment

by:Mateen
ID: 17058004
Hi
bastibartel

Is there any difference between SMSS.exe and smss.exe

<<Determining whether this process is a virus or a legitimate Windows process depends on the directory location it executes or runs from in WinTasks.>>

Could not understand this line.
0
Important Lessons on Recovering from Petya

In their most recent webinar, Skyport Systems explores ways to isolate and protect critical databases to keep the core of your company safe from harm.

 
LVL 5

Expert Comment

by:bastibartel
ID: 17058013
No,  Windows OS  does not distinguish upper and lower case filenames
Sebastian
0
 
LVL 5

Expert Comment

by:bastibartel
ID: 17058038
Sry,

If SMSS.exe is in  C:/Window/System32/SMSS.exe
it is the correct Microsoft Windows file

on Windows 2000 it could be also in
C:/WINNT/System32/SMSS.exe

If it is somewhere else (seach for it on your Harddrive)
It is probably a virus.

Was that more undertandable ?
Sebastian


0
 

Author Comment

by:Mateen
ID: 17058089
<<If it is somewhere else (seach for it on your Harddrive)>>

I have searched and stated in my question.

If it is ok, alright, otherwsie , do please post back.
0
 
LVL 5

Expert Comment

by:bastibartel
ID: 17058108
You are right, I missed that - it's all good then.
0
 
LVL 5

Expert Comment

by:bastibartel
ID: 17058165
To be 100% certain, do the following:

1. check the creation date of  c:\WINNT\system32\SMSS.exe  
    (it should be exactly as old as many other files in that folder)

2. compare the exact file size (Properties) of SMSS.exe in both
    C:\WINNT\system32\SMSS.exe
    C:\WINNT\ServicePackFiles\i386
    (they should be identical)

Cheers,
Sebastian
0

Featured Post

[Webinar] Cloud and Mobile-First Strategy

Maybe you’ve fully adopted the cloud since the beginning. Or maybe you started with on-prem resources but are pursuing a “cloud and mobile first” strategy. Getting to that end state has its challenges. Discover how to build out a 100% cloud and mobile IT strategy in this webinar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Transferring FSMO roles is done when an admin wants to split roles between certain Domain Controllers or the Domain Controller holding the Roles has been forcefully demoted using dcpromo / forceremoval
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an anti-spam), the admin…
This lesson discusses how to use a Mainform + Subforms in Microsoft Access to find and enter data for payments on orders. The sample data comes from a custom shop that builds and sells movable storage structures that are delivered to your property. …

886 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question