[filename.info logo]
[cn smss.exe][de smss.exe][es smss.exe][fr smss.exe][gb smss.exe][it smss.exe][jp smss.exe][kr smss.exe][nl smss.exe][pt smss.exe][ru smss.exe][us smss.exe]
 

smss.exe 概観

ファイルsmss.exe は次のソフトウェアで含まれている

smss.exe は次のレポートで見つけられた:

W32.Dalbug.Worm

技術的詳細
...and executes these files: %windir%Smss.exe %windir%Csrss.exe...
...This is a non-malicious joke program that is executed by Smss.exe and Csrss.exe once they are running....
...NOTE: The files Smss.exe and Csrss.exe have the same file names as two system files that reside in the %windir%System32...
...ones in the System32 folder. During execution, the Smss.exe and Csrss.exe files keep the service running, and checking every three seconds to...
...following registry values: Smss.exe       %windir%smss.exe...
...process if it is activated. Smss.exe and Csrss.exe also try to create the these registry values, however if they detect...
...(instead of creating them). Finally, Smss.exe and Csrss.exe will also copy the worm to the following files:...
源: http://securityresponse.symantec.com/avcenter/venc/data/w32.dalbug.worm.html

Adware.DreamAd

技術的詳細
...File names: SMSS.exe When Adware.DreamAd is executed,...
...Copies itself to the %Windir%SMSS.exe folder. Note: %Windir% is a variable....
..."Debug" = "SMSS.exe" to the registry key:...
取り外しの指示
..."Debug" = "SMSS.exe" Exit the Registry Editor....
源: http://securityresponse.symantec.com/avcenter/venc/data/adware.dreamad.html

W32.Resdoc

W32.Resdoc について
...periodically attempts to copy itself to drive A. It also copies itself as %windir%Smss.exe. NOTE: %windir% is a variable....
源: http://securityresponse.symantec.com/avcenter/venc/data/w32.resdoc.html

Adware.Advision

技術的詳細
...File names: Smss.exe When this adware component...
源: http://securityresponse.symantec.com/avcenter/venc/data/adware.advision.html

Backdoor.Zombam

技術的詳細
...Scan32.exe Smss.exe Spider.exe...
源: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.zombam.html

Backdoor.IRC.Flood.F

技術的詳細
...AntiVirus will not detect it. Smss.exe: This is an IRC client that...
...Adds the value: "SMSS" = "C:Winntsystem32CatRootsmss.exe"...
取り外しの指示
...right pane, delete the value: SMSS Exit the Registry Editor....
源: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.flood.f.html

Backdoor.IRC.Aladinz.F

技術的詳細
...to hide the mIRC client). SMSS.exe: A mIRC client....
..."<path to lsass.exe>" "smss" = "<path to smss.exe>"...
取り外しの指示
...Scroll through the list and look for LSASS and SMSS. If you find one or both of...
..."lsass" "smss" Exit the Registry Editor....
源: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.aladinz.f.html

Backdoor.IRC.Aladinz.O

技術的詳細
...qfile.dll smss.exe Soundsystem.gfx (detected...
..."UninstallString"=""%System%wbemmofgoodcom1staticsmss.exe" -uninstall" in the registry key:...
取り外しの指示
..."UninstallString"=""%System%wbemmofgoodcom1staticsmss.exe" -uninstall" back to:...
源: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.aladinz.o.html

Backdoor.Zombam.B

技術的詳細
...Scan32.exe Smss.exe Spider.exe...
......
源: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.zombam.b.html



Valid HTML 4.01!