What is smss.exe?

The genuine smss.exe file is a software component of Microsoft Windows by Microsoft.
Microsoft Windows is an operating system. Sessions Manager Subsystem is Windows process that creates environment variables. Smss.exe is a legitimate Windows process associated with the Sessions Manager Subsystem, and does not pose a threat to your PC.

Session Manager Subsystem is a component of the Microsoft Windows NT range of operating systems, and was first included with Windows NT 3.1. It is triggered as a startup process with the aforementioned operating systems and is designed to create environment variables, DOS device mappings and start the user and kernel modes of the Win32 subsystem. The program, when executed with the Smss.exe file, resides in the memory and runs in the Windows Task Manager.

The Microsoft Corporation is an American technology giant headquartered in Redmond, Washington that is renowned for its range of hardware and software products including Xbox consoles, Microsoft Windows range of operating systems and Surface tablets. Founded in 1975 by Bill Gates and Paul Allen, the company employs over 125,000 people worldwide, and earned a revenue of $89.95 billion in 2017.

SMSs stands for Sessions Manager Subsystem

The .exe extension on a filename indicates an executable file. Executable files may, in some cases, harm your computer. Therefore, please read below to decide for yourself whether the smss.exe on your computer is a Trojan that you should remove, or whether it is a file belonging to the Windows operating system or to a trusted application.

Click to Run a Free Scan for smss.exe related errors

Smss.exe file information

Windows Task Manager with smss — Smss.exe process in Windows Task Manager

The process known as Windows Session Manager or Windows NT Session Manager or ksysconfig or STAR or Build or The non-sucking service manager or Siennaget_ForeColor

belongs to software Microsoft Windows Operating System or Build or STAR or ToStringSite or NSSM 64-bit

by Microsoft (www.microsoft.com) or UnicodeEncodingConformanceCompareTo or www.STAR.com or Que's C++ Studio or Iain Patterson.

Description: The original smss.exe from Microsoft is an important part of Windows, but often causes problems. Smss.exe is located in the C:\Windows\System32 folder. Known file sizes on Windows 10/11/7 are 50,688 bytes (49% of all occurrences), 69,632 bytes and 7 more variants.
The smss.exe file is a Windows system file. The program is not visible. Smss.exe is a Microsoft signed file. Therefore the technical security rating is 4% dangerous, but you should also take into account the user reviews.

Recommended: Identify smss.exe related errors

Viruses with the same file name

Is smss.exe a virus? No, it is not. The true smss.exe file is a safe Microsoft Windows system process, called "Windows Session Manager". However, writers of malware programs, such as viruses, worms, and Trojans deliberately give their processes the same file name to escape detection. Viruses with the same file name are such as Gen:Trojan.Heur.AyWarDEy0Pjcy or Trojan.Generic.7377342 (detected by BitDefender), and Trojan.Gen (detected by Symantec).
To ensure that no rogue smss.exe is running on your PC, click here to run a Free Virus Scan.

How to recognize suspicious variants?

If smss.exe is located in a subfolder of "C:\Program Files", the security rating is 91% dangerous. The file size is 182,272 bytes (62% of all occurrences), 585,728 bytes and 13 more variants. There is no file information. Smss.exe is not a Windows system file. The program has no visible window. The process listens for or sends data on open ports to a LAN or the Internet.
If smss.exe is located in a subfolder of the user's profile folder, the security rating is 72% dangerous. The file size is 42,687 bytes (16% of all occurrences), 196,608 bytes and 13 more variants. Smss.exe is not a Windows core file. The program is loaded during the Windows boot process (see Registry key: Run, MACHINE\Run, User Shell Folders, TaskScheduler, Userinit, Winlogon\Shell, DEFAULT\Run). There is no file information. Smss.exe is able to connect to the Internet.
If smss.exe is located in the C:\Windows folder, the security rating is 72% dangerous. The file size is 296,960 bytes (28% of all occurrences), 233,472 bytes and 4 more variants.
If smss.exe is located in a subfolder of C:\Windows, the security rating is 76% dangerous. The file size is 441,856 bytes (16% of all occurrences), 125,440 bytes and 4 more variants.
If smss.exe is located in the user's profile folder, the security rating is 87% dangerous. The file size is 254,976 bytes (25% of all occurrences), 151 bytes, 223,744 bytes or 224,256 bytes.
If smss.exe is located in a subfolder of C:\, the security rating is 52% dangerous. The file size is 368,640 bytes (50% of all occurrences) or 2,958,848 bytes.
If smss.exe is located in the Windows folder for temporary files, the security rating is 74% dangerous. The file size is 171,008 bytes.

External information from Paul Collins:
There are different files with the same name:

"InteliSys" definitely not required. Advertisingvision adware - file is located in C:\Windows or C:\Winnt, and not in it's System32 subdirectory, as is the case with the legitimate Smss.exe system file which would normally NOT figure in Msconfig/Startup!
"SMSS" definitely not required. Added by the FLOOD.F TROJAN! Note - this is not the legitimate Smss.exe system file should normally NOT figure in Msconfig/Startup!

Important: Some malware disguises itself as smss.exe, particularly when not located in the C:\Windows\System32 folder. Therefore, you should check the smss.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.

Score

User Comments

if in c:\windows\system32 or c:\windows\syswow64 safe

Startup file, should be legit, howere if it is located somewhere else than C:\Windows\System32 it could be harmful
Anonymous

is a system start up file
Matt

When closing this, it gave me the warning that if I ended this process, my OS would shut down (Win7). After scanning it with 3 Antivirus, it seems safe
Devcon

Only shows up in Security Manager as a pop up only, not on list. On pop up, system freeze, unable to obtain add'l info. This happened 3 times, you know it's not good. Plus on my pop up it states si in the top upper portion of the pop up for smss.exe.
Sharon

Came up dangerous for "Dr web" with a occasional message that takes a few clicks to, rid off.I have located the file, scan it, and "no threats detected"
Adam

It's System File and also someone used its name for virus. Look its properties by clicking right properties. If it signed by Microsoft it isn't a virus. But if it isn't signed by Microsoft, it is a virus

If you're running x64 windows it will show as smss.exe*32 in the task manager and thats a virus the system process Does not have the *32 and btw you can open the file location if it leads to anywhere but the system32 file it's a virus
Salvatore

More comments can be found here:
(further information)

Summary: Average user rating of smss.exe: based on 322 votes with 9 user comments. 106 users think smss.exe is essential for Windows or an installed application. 19 users think it's probably harmless. 58 users think it's neither essential nor dangerous. 35 users suspect danger. 104 users think smss.exe is dangerous and recommend removing it. 32 users don't grade smss.exe ("not sure about it").

Best practices for resolving smss issues

A clean and tidy computer is the key requirement for avoiding problems with smss. This means running a scan for malware, cleaning your hard drive using 1cleanmgr and 2sfc /scannow, 3uninstalling programs that you no longer need, checking for Autostart programs (using 4msconfig) and enabling Windows' 5Automatic Update. Always remember to perform periodic backups, or at least to set restore points.

Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the 6resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or executing the 7DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.

To get your computer running as fast as it did on day one, you can 8reset your PC. Your personal files will remain intact, but any programs you installed will need to be reinstalled.

To help you analyze the smss.exe process on your computer, the following programs have proven to be helpful: ASecurity Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. A good Bantivirus software detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.

Other processes

msedge.exe hsmgr64.exe onedrive.exe smss.exe safemon.dll startmenuexperiencehost.exe comres.dll coieplg.dll nlssrv32.exe avg secure search_toolbar.dll starwindserviceae.exe [all]

	Do you have additional information?
What do you know about smss.exe:
How would you rate it:
Link for more info:
Your Name: