[filename.info logo]
[cn smss.exe][de smss.exe][es smss.exe][fr smss.exe][gb smss.exe][it smss.exe][jp smss.exe][kr smss.exe][nl smss.exe][pt smss.exe][ru smss.exe][us smss.exe]
 

smss.exe (5.1.2600.1106)

Contained in software

Name:Windows XP Home Edition, Deutsch
License:commercial
Information link:http://www.microsoft.com/windowsxp/

File details

Filepath:C:\WINDOWS\system32 \ smss.exe
Filedate:2002-08-29 14:00:00
Version:5.1.2600.1106
Filesize:45.568 bytes

Checksum and file hashes

CRC32:2C652F5A
MD5:C9B2 D338 081F 3419 7A80 CBB5 4FDF 6A8D
SHA1:249A 8EC1 A62B CE7E 3174 4257 FBBD 5C2E EE1B 4D63

Version resource information

CompanyName:Microsoft Corporation
FileDescription:Windows NT Session Manager
FileOS:Windows NT, Windows 2000, Windows XP, Windows 2003
FileType:Application
FileVersion:5.1.2600.1106
InternalName:smss.exe
LegalCopyright:© Microsoft Corporation. All rights reserved.
OriginalFilename:smss.exe
ProductName:Microsoft® Windows® Operating System
ProductVersion:5.1.2600.1106

smss.exe was found in the following malware reports:

W32.Dalbug.Worm

Technical details
...and executes these files: %windir%Smss.exe %windir%Csrss.exe...
...This is a non-malicious joke program that is executed by Smss.exe and Csrss.exe once they are running....
...NOTE: The files Smss.exe and Csrss.exe have the same file names as two system files that reside in the %windir%System32...
...ones in the System32 folder. During execution, the Smss.exe and Csrss.exe files keep the service running, and checking every three seconds to...
...following registry values: Smss.exe       %windir%smss.exe...
...process if it is activated. Smss.exe and Csrss.exe also try to create the these registry values, however if they detect...
...(instead of creating them). Finally, Smss.exe and Csrss.exe will also copy the worm to the following files:...
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.dalbug.worm.html

Adware.DreamAd

Technical details
...File names: SMSS.exe When Adware.DreamAd is executed,...
...Copies itself to the %Windir%SMSS.exe folder. Note: %Windir% is a variable....
..."Debug" = "SMSS.exe" to the registry key:...
Removal instructions
..."Debug" = "SMSS.exe" Exit the Registry Editor....
Source: http://securityresponse.symantec.com/avcenter/venc/data/adware.dreamad.html

W32.Resdoc

About W32.Resdoc
...periodically attempts to copy itself to drive A. It also copies itself as %windir%Smss.exe. NOTE: %windir% is a variable....
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.resdoc.html

Adware.Advision

Technical details
...File names: Smss.exe When this adware component...
Source: http://securityresponse.symantec.com/avcenter/venc/data/adware.advision.html

Backdoor.Zombam

Technical details
...Scan32.exe Smss.exe Spider.exe...
Source: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.zombam.html

Backdoor.IRC.Flood.F

Technical details
...AntiVirus will not detect it. Smss.exe: This is an IRC client that...
...Adds the value: "SMSS" = "C:Winntsystem32CatRootsmss.exe"...
Removal instructions
...right pane, delete the value: SMSS Exit the Registry Editor....
Source: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.flood.f.html

Backdoor.IRC.Aladinz.F

Technical details
...to hide the mIRC client). SMSS.exe: A mIRC client....
..."<path to lsass.exe>" "smss" = "<path to smss.exe>"...
Removal instructions
...Scroll through the list and look for LSASS and SMSS. If you find one or both of...
..."lsass" "smss" Exit the Registry Editor....
Source: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.aladinz.f.html

Backdoor.IRC.Aladinz.O

Technical details
...qfile.dll smss.exe Soundsystem.gfx (detected...
..."UninstallString"=""%System%wbemmofgoodcom1staticsmss.exe" -uninstall" in the registry key:...
Removal instructions
..."UninstallString"=""%System%wbemmofgoodcom1staticsmss.exe" -uninstall" back to:...
Source: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.aladinz.o.html

Backdoor.Zombam.B

Technical details
...Scan32.exe Smss.exe Spider.exe...
......
Source: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.zombam.b.html



Valid HTML 4.01!