What is smss.exe?
The .exe extension on a filename indicates an executable file. Executable files may, in some cases, harm your computer. Therefore, please read below to decide for yourself whether the smss.exe on your computer is a Trojan that you should remove, or whether it is a file belonging to the Windows operating system or to a trusted application.
Smss.exe file information
The process known as Windows NT Session Manager or Windows Session Manager or File Loader or Session Manager Subsystem or Freeware Promotion or (xpclient.010817-11489) or Live Update (version 64 bit) or MPEG Movie
belongs to software Microsoft Windows Operating System or Loader or @DVVAR (version p0dmen@) or LMOY or Card Adapter or Live Update (version 64 bit) or Sistema operativo Microsoft Windows or Windows Media Format (version 11 runtime)
by Microsoft (www.microsoft.com) or Black Internet or LMOY or Microsoft Windows Operation System or PROMO Software or Symt64bit or 12,326 KB or MnBVfy.
Description: The original smss.exe from Microsoft is an important part of Windows, but often causes problems. The file smss.exe is located in the C:\Windows\System32 folder.
Known file sizes on Windows 10/8/7/XP are 50,688 bytes (84% of all occurrences), 45,568 bytes and 10 more variants.
It is a Windows system file. The program has no visible window. The file is a trustworthy file from Microsoft.
Therefore the technical security rating is 5% dangerous, however you should also read the user reviews.
Recommended: Identify smss.exe related errors
Viruses with the same file name
Is smss.exe a virus? No, it is not. The true smss.exe file is a safe Microsoft Windows system process, called "Windows NT Session Manager".
However, writers of malware programs, such as viruses, worms, and Trojans deliberately give their processes the same file name to escape detection. Viruses with the same file name are e.g. Trojan-Spy.Win32.Agent.baow or Trojan.Win32.Agent.cgz (detected by Kaspersky), and Trojan.Generic.4922277 (detected by F-Secure).
To ensure that no rogue smss.exe is running on your PC, click here to run a Free Malware Scan.
How to recognize suspicious variants?
If smss.exe is located in a subfolder of C:\Windows, the security rating is 46% dangerous. The file size is 43,008 bytes (5% of all occurrences), 29,184 bytes and 92 more variants. The file is not a Windows core file. There is no file information. The program is loaded during the Windows boot process (see Registry key: MACHINE\Run, Run, DEFAULT\Run, Winlogon\Shell, Userinit, win.ini, MACHINE\RunServices, User Shell Folders, exefile, MACHINE\User Shell Folders, RunOnce).
If smss.exe is located in the C:\Windows folder, the security rating is 78% dangerous. The file size is 34,816 bytes (14% of all occurrences), 9,216 bytes and 55 more variants. Smss.exe is not a Windows system file. The program is not visible. It is an unknown file in the Windows folder. The software starts when Windows starts (see Registry key: MACHINE\Run, Run, DEFAULT\Run, Winlogon\Shell, Userinit, win.ini, MACHINE\RunServices, User Shell Folders, exefile, MACHINE\User Shell Folders, RunOnce). The program uses ports to connect to or from a LAN or the Internet. The application has no file description. Smss.exe is able to monitor applications, hide itself, manipulate other programs and record keyboard and mouse inputs.
If smss.exe is located in a subfolder of "C:\Program Files", the security rating is 60% dangerous. The file size is 185,026 bytes (20% of all occurrences), 122,913 bytes and 32 more variants.
If smss.exe is located in a subfolder of C:\Windows\System32\drivers, the security rating is 74% dangerous. The file size is 86,016 bytes (45% of all occurrences), 13,312 bytes, 244,868 bytes, 232,675 bytes or 144,721 bytes.
If smss.exe is located in a subfolder of the user's profile folder, the security rating is 56% dangerous. The file size is 42,065 bytes (7% of all occurrences), 196,608 bytes and 29 more variants.
If smss.exe is located in a subfolder of C:\Windows\System32, the security rating is 74% dangerous. The file size is 39,435 bytes (11% of all occurrences), 8,192 bytes and 23 more variants.
If smss.exe is located in the C:\Windows\System32\drivers folder, the security rating is 62% dangerous. The file size is 94,208 bytes (18% of all occurrences), 5,120 bytes and 9 more variants.
If smss.exe is located in a subfolder of C:\, the security rating is 64% dangerous. The file size is 276,480 bytes (12% of all occurrences), 81,408 bytes and 6 more variants.
If smss.exe is located in a subfolder of "C:\Program Files\Common Files", the security rating is 58% dangerous. The file size is 21,530 bytes (25% of all occurrences), 71,168 bytes, 21,538 bytes or 13,650 bytes.
If smss.exe is located in C:\, the security rating is 66% dangerous. The file size is 184,320 bytes (25% of all occurrences), 130,690 bytes, 110,592 bytes or 454,656 bytes.
If smss.exe is located in the "C:\Program Files\Common Files" folder, the security rating is 72% dangerous. The file size is 167,568 bytes (33% of all occurrences), 130,690 bytes or 112,008 bytes.
If smss.exe is located in the user's "Documents" folder, the security rating is 74% dangerous. The file size is 425,984 bytes.
If smss.exe is located in a subfolder of Windows folder for temporary files, the security rating is 42% dangerous. The file size is 240,128 bytes (50% of all occurrences) or 217,600 bytes.
If smss.exe is located in the "C:\Program Files" folder, the security rating is 71% dangerous. The file size is 112,099 bytes (50% of all occurrences) or 11,776 bytes.
If smss.exe is located in the user's profile folder, the security rating is 100% dangerous. The file size is 254,976 bytes.
If smss.exe is located in the Windows folder for temporary files, the security rating is 74% dangerous. The file size is 171,008 bytes.
External information from Paul Collins:
There are different files with the same name:
- "InteliSys" definitely not required. Advertisingvision adware - file is located in C:\Windows or C:\Winnt, and not in it's System32 subdirectory, as is the case with the legitimate Smss.exe system file which would normally NOT figure in Msconfig/Startup!
- "SMSS" definitely not required. Added by the FLOOD.F TROJAN! Note - this is not the legitimate Smss.exe system file should normally NOT figure in Msconfig/Startup!
Important: Some malware disguises itself as smss.exe, particularly when not located in the C:\Windows\System32 folder. Therefore, you should check the smss.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.
Best practices for resolving smss issues
A clean and tidy computer is the key requirement for avoiding problems with smss. This means running a scan for malware, cleaning your hard drive using cleanmgr and sfc /scannow, uninstalling programs that you no longer need, checking for Autostart programs (using msconfig) and enabling Windows' Automatic Update. Always remember to perform periodic backups, or at least to set restore points.
Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.
To help you analyze the smss.exe process on your computer, the following programs have proven to be helpful: Security Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. Malwarebytes Anti-Malware detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.
Other processes
mspmspsv.exe spoolsv.exe realsched.exe smss.exe mdm.exe srvany.exe wdfmgr.exe nvsvc32.exe tfswshx.dll services.exe alg.exe [all]
Score
User Comments
Matt
Devcon
Sharon
Adam
Salvatore
QuaSter
(further information)
Summary: Average user rating of smss.exe: based on 319 votes with 9 reviews. 103 users think smss.exe is essential for Windows or an installed application. 19 users think it's probably harmless. 58 users think it's neither essential nor dangerous. 35 users suspect danger. 104 users think smss.exe is dangerous and recommend removing it. 32 users don't grade smss.exe ("not sure about it").