PC Pitstop is the undisputed leader in PC diagnostics. Our running process library is culled from our database of over 100 million PC diagnostics and scans.

Tip from the PitCrew

Every process running on your computer takes up CPU cycles and valuable memory. For optimal PC performance and resource utilization, you should be aware of every process on your computer. PC Pitstop designed this process library to help you know which processes are worthwhile and others that slow system performance.

Furthermore, perhaps the quickest and most straight forward method to detect malware is through a running process analysis.

Process Library

  

Click here to run our free scan and see if your computer's processes are safe.


More than one possible match was found; all matches are listed below in order of their prevalence. This only tells you what the file and the correct action might be.

To understand which possibility is actually running on your own system, perform an Overdrive test and then look at the Software|Processes tab.

You may find more information on this process by visiting Process Detail Pages.


Match #1

smss.exe (Session Manager SubSystem )

Percentage of recently scanned PC's with this process running: 30.72%
Average CPU use for this program: 0%
Average RAM for this program: 0 MB


PC Pitstop Analysis

SMSS.EXE - The session manager subsystem is responsible for starting the user session. *CHECK THE PATH* \Windows\system32\smss.exe is the legitimate file.


Recommendation

Win Patrol

smss.exe is an essential part of Windows and required for Windows to work properly. It should never be disabled.

PC Pitstop recommends WinPatrol Plus for monitoring all of the background activity on your PC. WinPatrol Plus provides a easy to understand descriptions of over 15,000 processes and programs.



Identification

In addition to the file name, smss.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor contains:Microsoft
Product contains:Microsoft

To view version information with Windows Explorer, right-click the file and click Properties, Version.


MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called smss.exe, we have detected more than 20 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
smss.exe> 20
#MD5Size
10x0ee59e180ea2fec3125ff934562d5c0618944 bytes
20xf6cc7263ba84949eba2e6f718d75ec4151712 bytes
30x5f816c1f539266d2d4c78694239da0b550688 bytes
40xbd7fb0957c716f1a60333aee04de217850688 bytes
50x4a3baa168ad14f39e599772e8e020a6c50688 bytes
60xed12d92a7b26e99e3a5bf4b043f7314e45568 bytes
70xd9ab90b6547481c93e40af206d10f90f50688 bytes
80x6701ddaf68bede6bbeea9d514d73a35b64000 bytes
90x50f869c638e7892699734816d423236f50688 bytes
100x47aa35c22def2b265449b7ccdf4251ae50688 bytes
110x94a7f93ec216d25bddfec6044878459750688 bytes
120xa6a6e04496e41962384acdd9d026f20c50688 bytes
130x2bd9c20af61f90905d3f1997a5bb5f9a50688 bytes
140xf07c69367770a1c129a22f9158afaa2b45840 bytes
150x381dd3291f3af0c1f1e2a7f42dd21b6150688 bytes
160x697e132d09d06a4d201aaa3fec6c760a50688 bytes
170x0958e61bf4f184029ae528b589cff17650688 bytes
180x41d366e0bf5c4fe6c3c47f99b5db879e50688 bytes
190xbddac60bdebbf51e71b2b65ebf80ed9045568 bytes
200xdeea6e1dbf7b2576a967d778c47a5ded50688 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. smss.exe (Session Manager SubSystem ) has been seen on 30.72% of systems tested at PC Pitstop. As a point of comparison, it is rare for a particular malicious program (virus or spyware) to be seen on more than one or two percent of all systems tested. The average RAM memory usage for this process was 0 MB. The average CPU load for this program was 0%.


Vendor or Distributor's Web Site

http://www.microsoft.com/

Detailed Description and/or Removal Instructions

http://www.hardavenue.com/a/Smss.exe.php


Match #2

smss.exe (Dalbug/Ladex worm)

Percentage of recently scanned PC's with this process running: 0.01%
Average CPU use for this program: 0%
Average RAM for this program: 0 MB


PC Pitstop Analysis

SMSS.exe - The smss.exe which is from Microsoft is located at c:\windows\system32\smss.exe . There are several viruses that disguise themselves as smss.exe to hide from detection. Adware.Advision - Symantec Corporation Adware.DreamAd - Symantec Corporation Backdoor.IRC.Aladinz.O - Symantec Corporation Backdoor.IRC.Flood.F - Symantec Corporation W32.Dalbug.Worm - Symantec Corporation W32.Resdoc - Symantec Corporation


Recommendation

CA AntiVirus

smss.exe is a VIRUS. Stop all work until the virus is removed or you run the risk of spreading the virus to other people. Worse yet, the virus may be doing harm to your computer and your information.

smss.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends CA Antivirus in these types of situations.



Identification

In addition to the file name, smss.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor contains:?
Product is not specified
File name contains:\win

To view version information with Windows Explorer, right-click the file and click Properties, Version.


MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called smss.exe, we have detected more than 20 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
smss.exe> 20
#MD5Size
10xf8875f29c07882b3b269e8da3d57551a11081 bytes
20xd208a2b34ee5aeec596282c15c9e45de700416 bytes
30xa1394e9ddfcbba195024f653bfdbc87f18494 bytes
40xf35afe7efff0b91a533c975898db57eb3428352 bytes
50x11b0132343f91101567d8a3dba552bb03428352 bytes
60x0fe90564a1a8cf864fcdb6c711de729c15143 bytes
70x82b0b65357a6951cdf40b7a95d6f233311776 bytes
80xd8e587f794437fddb693b5fc5e2e704a49152 bytes
90x166225f066aed62a24b1361fea85b85428672 bytes
100x73f7bcc441d7164d4673a054eb5d7cf498816 bytes
110x0167f5214218f8c6e0f5cf3d45ae2e27349046 bytes
120x1f00a3628132c1ec5bac0183dc55d417363671 bytes
130x19f4cffb5e48b4846bce8644026f7869303104 bytes
140x585400336d87c620a503ba192171357890884 bytes
150x20c4c8ee1d77fbf04eaa92ad5bfde6f23428352 bytes
160x3594660baf1513e72fc89bd743595133105337 bytes
170x65798d3e6d25f978fcc8521d34af3cf1221184 bytes
180xcc5c672cfa1366e1af148d2107f1ab6e1663488 bytes
190xffcda7ce4741e6a14d36482e09a9b56d89088 bytes
200xe5304f1976d68249d07e477c1be53a9e3428352 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. smss.exe (Dalbug/Ladex worm) has been seen on 0.01% of systems tested at PC Pitstop. As a point of comparison, it is rare for a particular malicious program (virus or spyware) to be seen on more than one or two percent of all systems tested. The average RAM memory usage for this process was 0 MB. The average CPU load for this program was 0%.


Detailed Description and/or Removal Instructions

http://securityresponse.symantec.com/avcenter/venc/data/w32.dalbug.worm.html

Important note: A file name alone may not be enough for positive identification. PC Pitstop's Overdrive tests and spyware scan use information such as the company name, product name, or install directory. If you are unable to identify a file, ask about it in our forums after running our full tests.