PC Pitstop is the undisputed leader in PC diagnostics. Our running process library is culled from our database of over 100 million PC diagnostics and scans.

Tip from the PitCrew

Each and every process running on your computer takes up CPU cycles and valuable memory. For optimal PC performance and resource utilization, you should be aware of every process on your computer. PC Pitstop designed this process library to help you know which processes are worthwhile and others that slow system performance.

Furthermore, perhaps the quickest and most straight forward method to detect malware is through a running process analysis.

Process Library

  

More than one possible match was found; all matches are listed below.

Match #1

smss.exe (Dalbug/Ladex worm)


PC Pitstop Analysis

SMSS.exe - The smss.exe which is from Microsoft is located at c:\windows\system32\smss.exe . There are several viruses that disguise themselves as smss.exe to hide from detection. Adware.Advision - Symantec Corporation Adware.DreamAd - Symantec Corporation Backdoor.IRC.Aladinz.O - Symantec Corporation Backdoor.IRC.Flood.F - Symantec Corporation W32.Dalbug.Worm - Symantec Corporation W32.Resdoc - Symantec Corporation


Recommendation

CA AntiVirus

smss.exe is a VIRUS. Stop all work until the virus is removed or you run the risk of spreading the virus to other people. Worse yet, the virus may be doing harm to your computer and your information.

smss.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends CA Antivirus in these types of situations.


Identification

In addition to the file name, smss.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor contains:?
Product is not specified
File name contains:\win

To view version information with Windows Explorer, right-click the file and click Properties, Version.


PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. smss.exe (Dalbug/Ladex worm) has been seen on 0.02% of systems tested at PC Pitstop. As a point of comparison, it is rare for a particular malicious program (virus or spyware) to be seen on more than one or two percent of all systems tested.

PCs running this program did not have a high average CPU load during testing, which indicates it does not consume a great deal of CPU time on most systems.


Detailed Description and/or Removal Instructions

http://securityresponse.symantec.com/avcenter/venc/data/w32.dalbug.worm.html

Match #2

smss.exe (Session Manager SubSystem )


PC Pitstop Analysis

SMSS.EXE - The session manager subsystem is responsible for starting the user session. *CHECK THE PATH* \Windows\system32\smss.exe is the legitimate file.


Recommendation

CA AntiVirus

smss.exe is an essential part of Windows and required for Windows to work properly. It should never be disabled.

smss.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends CA Antivirus in these types of situations.


Identification

In addition to the file name, smss.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor contains:Microsoft
Product contains:Microsoft

To view version information with Windows Explorer, right-click the file and click Properties, Version.


PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. smss.exe (Session Manager SubSystem ) has been seen on 61.90% of systems tested at PC Pitstop. As a point of comparison, it is rare for a particular malicious program (virus or spyware) to be seen on more than one or two percent of all systems tested.

PCs running this program did not have a high average CPU load during testing, which indicates it does not consume a great deal of CPU time on most systems.


Vendor or Distributor's Web Site

http://www.microsoft.com/

Detailed Description and/or Removal Instructions

http://www.hardavenue.com/a/Smss.exe.php

Important note: A file name alone may not be enough for positive identification. PC Pitstop's full tests and spyware scan use information such as the company name, product name, or install directory. If you are unable to identify a file, ask about it in our forums after running our full tests.