With an overwhelming number of incidents reported in the United Kingdom, it is safe to say that smss.exe must have originated from there. When disguised, it is a Trojan; a deadly executable file. In the majority of its occurrences it has turned out to be a serious security threat to the computer.
Also referred to as Session Manager Subsystem, smss.exe should ideally be part of the Windows operating system. As the name suggests it is tasked with not only starting, but also managing user sessions in the computer system. It does this by creating paging files, facilitating the appropriate variables as well as setting up the Windows Logon Manager. It also provides the DOS commands of the various devices installed on the computer. Given such a role it is essential if you are maintaining stability and keep the computer secure. As such it is bound to occupy some space on the computer as well as some central processing unit time that should be within the normal range. However if all the space is occupied by the smss then the computer is infected. In its absence, the computer would not only fail to start but when removed mid operationally, the system is not likely to boot.
Because of the vital nature of smss.exe, virus developers have pounced upon it to disguise the malware they develop as the genuine smss. It is in such instances that this file becomes a security threat to the computer. One can recognize its status as a threat when it is run as anything rather than a system file. Furthermore, if there is file or program that is stored anywhere other than in System roots\system32, one should have enough reason to suspect it. In addition to these tactics it may also be spelled slightly differently or a few letters deleted or added so as to confuse the user. Another pointer, that smss may seriously compromise the security of one’s computer is when one notes more than one window running the same system on the desktop.
The best reaction to the suspicion that the computer is under attack by smss.exe is to run a scan of the entire system in order to isolate the threat. Once any of the Trojans associated to it are identified as being existent, they should be carefully isolated and eliminated. If smss is the problem then one will have to delete it in which case they will have to reinstall the operating system afterwards.
How To Remove smss.exe Process