Le dossier smss.exe est contenu dans le logiciel suivant
Windows XP Home Edition, DeutschPlus d'information
Version: 5.1.2600.1106 Date de dossier: 2002-08-29 14:00:00 Volume de fichier: 45.568 bytes Chemin de dossier: C:\WINDOWS\system32\smss.exe Montrez les détails smss.exe
Windows XP Home Edition, DeutschPlus d'information
Version: 5.1.2600.1106 Date de dossier: 2002-08-29 14:00:00 Volume de fichier: 508.928 bytes Chemin de dossier: C:\WINDOWS\I386\SYSTEM32\smss.exe Montrez les détails smss.exe
smss.exe a été trouvé dans les rapports suivants:
W32.Dalbug.Worm
Détails techniques ...and executes these files: %windir%Smss.exe %windir%Csrss.exe... ...This is a non-malicious joke program that is executed by Smss.exe and Csrss.exe once they are running.... ...NOTE: The files Smss.exe and Csrss.exe have the same file names as two system files that reside in the %windir%System32... ...ones in the System32 folder. During execution, the Smss.exe and Csrss.exe files keep the service running, and checking every three seconds to... ...following registry values: Smss.exe %windir%smss.exe... ...process if it is activated. Smss.exe and Csrss.exe also try to create the these registry values, however if they detect... ...(instead of creating them). Finally, Smss.exe and Csrss.exe will also copy the worm to the following files:... Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.dalbug.worm.html
Adware.DreamAd
Détails techniques ...File names: SMSS.exe When Adware.DreamAd is executed,... ...Copies itself to the %Windir%SMSS.exe folder. Note: %Windir% is a variable.... ..."Debug" = "SMSS.exe" to the registry key:... Instructions de déplacement ..."Debug" = "SMSS.exe" Exit the Registry Editor.... Source: http://securityresponse.symantec.com/avcenter/venc/data/adware.dreamad.html
Détails techniques ...AntiVirus will not detect it. Smss.exe: This is an IRC client that... ...Adds the value: "SMSS" = "C:Winntsystem32CatRootsmss.exe"... Instructions de déplacement ...right pane, delete the value: SMSS Exit the Registry Editor.... Source: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.flood.f.html
Backdoor.IRC.Aladinz.F
Détails techniques ...to hide the mIRC client). SMSS.exe: A mIRC client.... ..."<path to lsass.exe>" "smss" = "<path to smss.exe>"... Instructions de déplacement ...Scroll through the list and look for LSASS and SMSS. If you find one or both of... ..."lsass" "smss" Exit the Registry Editor.... Source: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.aladinz.f.html
Backdoor.IRC.Aladinz.O
Détails techniques ...qfile.dll smss.exe Soundsystem.gfx (detected... ..."UninstallString"=""%System%wbemmofgoodcom1staticsmss.exe" -uninstall" in the registry key:... Instructions de déplacement ..."UninstallString"=""%System%wbemmofgoodcom1staticsmss.exe" -uninstall" back to:... Source: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.aladinz.o.html