There are many processes that run behind the scenes in Windows operating systems. One of these processes that may look suspicious is the SMSS.exe. This is an execution file with the full name Session Management Subsystem.

The Session Manager Subsystem is responsible for starting a session. When this process begins, the system thread is responsible for a number of specific tasks including launching the Winlogon, specific Win32 processes, and among other items, setting the system variables.

Many computer users first notice the SMSS.exe process when a system shuts down abnormally. For instance, when a Winlogon ends normally, this process usually has no problem fulfilling its tasks. However, when a system shuts down abnormally or unexpectedly, the SMSS.exe causes a “hang,” which is when the system stops responding.

The SMSS.exe as Malware – Trojan Version

It should be noted that the SMSS.exe file is always located in the C:WindowsSystem32 folder. If there is an smss.exe in another folder, it is probably malware (either a virus, spyware, trojan, or worm). Many malware programs try to look like legitimate computer processes and the smss.exe trojan is one of them.

Many times malware in the form of smss.exe is a Trojan called Flood.F. Flood.F is considered a serious security risk. Like most Trojans, Flood.F can steal or reveal sensitive data or documents. Many computers that a Trojan horse infiltrates are subject to their user’s personal and financial information being stolen and used for credit card fraud or identity theft.

There are quite a few ways to remove Trojans. For instance, the smss.exe Flood.F Trojan can be removed with many commercial applications such as MacAfee and Norton or other free applications found on the web.