Search the web
Sign In
New User? Sign Up
dejavu-l
? Already a member? Sign in to Yahoo!

Yahoo! Groups Tips

Did you know...
Hear how Yahoo! Groups has changed the lives of others. Take me there.

Best of Y! Groups

   Check them out and nominate your group.
Having problems with message search? Fill out this form to ensure your group is one of the first to be migrated to the new message search system.

Messages

  Messages Help
Advanced
smss.exe (OT, but kind of originated here)   Message List  
Reply | Forward Message #70783 of 98572 |
Apparently following the recent discussion on conversion options for
MultiTerm files (see thread "Advice re. Trados terminology database"), I
received a private message from "Adriana Lesova" saying "I had a
hard time finding this, but finally a freind [sic] sent it to me. Maybe
it can help you too" with an attachment containing a zipped exe file
named "multiterm_converter.exe".

Somehow I found the message a little 'unusual', not least because I
can't find any evidence of a list member called Adriana Lesova.

Nevertheless, curiosity got the better of me and (having scanned
"multiterm_converter.exe" with AVG, which didn't find anything
suspicious) I executed the file, resulting in a warning from ZoneAlarm
about smss.exe trying to access my trusted zone, which I denied.

Despite this, smss.exe appeared to 'crank up' in the background,
consuming about 20% of CPU resources and causing my laptop fan to run
continuously.

Being uncomfortable with the situation I rebooted the laptop, resulting
resulting in a warning from ZoneAlarm about smss.exe trying to access
the Internet, which I denied.

Despite this, smss.exe 'cranked up' again in the background with the
same effect as before, although it appears to have calmed down now.

I haven't yet followed all the 1.2 million Google hits (!) for
"smss.exe", but something unusual was clearly going on, and I would be
grateful for any comments.

Regards

Herbert Eppel
--
www.HETranslation.co.uk




Tue Aug 1, 2006 11:15 am

hetranslations
Offline Offline
Send Email Send Email

Forward
Message #70783 of 98572 |
Expand Messages Author Sort by Date

Apparently following the recent discussion on conversion options for MultiTerm files (see thread "Advice re. Trados terminology database"), I received a...
Herbert Eppel
hetranslations
Offline Send Email
Aug 1, 2006
11:15 am

Hi Herbert, According to this link http://www.pcreview.co.uk/startup/smss.exe.php it looks like it's a trojan.... Regards, Paul >Apparently following the...
Paul Clarke
pauldclarke2002
Offline Send Email
Aug 1, 2006
11:34 am

... ...
Rob Laumen
kezza_2002_flex
Offline Send Email
Aug 1, 2006
11:41 am

Herbert, smss.exe, residing in windows/system32 is the session manager of Windows- this we need. But if you find an smss.exe somewhere else on your HD, that is...
judy ann
jasliste
Offline Send Email
Aug 1, 2006
12:06 pm

... Thanks, Judy, Paul and Rob. I appear to have no less than 4 different versions of smss.exe on my system - see smss.png at ...
Herbert Eppel
hetranslations
Offline Send Email
Aug 1, 2006
12:53 pm

I am pleased to report that the situation (described in my original message below) has been resolved. At the time when the problem occurred I had the trial...
Herbert Eppel
hetranslations
Offline Send Email
Aug 4, 2006
6:55 am

... [JAS] Herbert, I was really amazed that you even considered opening that file. At least you only had one virus- I was at a customers office this morning, ...
judy ann
jasliste
Offline Send Email
Aug 4, 2006
11:32 am

... Hi Judy Ann, in hindsight I'm amazed too :-) I'm normally very careful, and as far as I can remember this was my first virus *ever* ! I dare say it's the...
Herbert Eppel
hetranslations
Offline Send Email
Aug 4, 2006
12:26 pm

Dear Herbert, I use VMware for this sort of experiments (although Virtual PC should work too). With both of these tools you can keep a backup copy of your ...
Lorenzo Benito
ampi_001
Offline Send Email
Aug 16, 2006
1:23 pm

... Hi Lorenzo, thanks for the advice. Regards Herbert Eppel -- www.HETranslation.co.uk...
Herbert Eppel
hetranslations
Offline Send Email
Aug 16, 2006
2:37 pm

... Adriana Lesova is (or was) a member of the SDLX Trados list, to which you also suscribed when looking for information about Trados. She sent some queer...
Jorge GorĂ­n
jorgegorin
Offline Send Email
Aug 4, 2006
1:12 pm

... Let me check that. Karin...
Karin Adamczyk
kadamczyk_inge
Offline Send Email
Aug 4, 2006
1:38 pm

... Hmm, I see I removed her on August 1, but I don't remember why. Looking deeper. Jeez, memory is really going! Karin...
Karin Adamczyk
kadamczyk_inge
Offline Send Email
Aug 4, 2006
1:43 pm

... She joined July 27, her comment was *I am a new SDLX user* so it sounded valid. She posted some messages about Microsoft glossaries that sounded innocent ...
Karin Adamczyk
kadamczyk_inge
Offline Send Email
Aug 4, 2006
1:46 pm

... Hi Jorge, thanks for the reminder - I thought the name rang a bell somehow, and I had indeed seen the messages she sent to the SDLX list on 27 July. Her...
Herbert Eppel
hetranslations
Offline Send Email
Aug 4, 2006
1:51 pm

I seem to remember that you said the file was actually entitled "Multiterm" something or other? In that case, that implies a rather more serious, deliberate...
Alison Penfold
ddaremoto
Offline Send Email
Aug 4, 2006
1:24 pm

... Indeed - the file name was multiterm_converter.exe I kept it as evidence if you want to have a look O:-) ... Adriana Lesova's original message and the...
Herbert Eppel
hetranslations
Offline Send Email
Aug 8, 2006
3:13 pm

I wouldn't necessary blame the elusive Adriana Lesova. A lot of viruses get sent out with "spoofed" sender addresses. In other words, the adress in the From...
Karin Montin
jckm2
Offline Send Email
Aug 8, 2006
3:47 pm

... Yes, I'm aware of that, but in this case the message definitely came from Adriana Lesova and was intended for me. I know this because AL actually replied...
Herbert Eppel
hetranslations
Offline Send Email
Aug 8, 2006
3:55 pm

Oh, I hadn't realized that. Very curious. Maybe she can't use her keyboard to write back to you. Karin M...
Karin Montin
jckm2
Offline Send Email
Aug 8, 2006
4:06 pm

... Now this does no longer sound like a malicious sender A.L., but like an unwarned victim A.L., and after she told you about her whereabouts you still fell...
Leo te Braake
leo_tebraake
Offline Send Email
Aug 8, 2006
4:21 pm

... Hi Leo, did you ever see "A Fish Called Wanda"? Regards Herbert Eppel -- www.HETranslation.co.uk...
Herbert Eppel
hetranslations
Offline Send Email
Aug 8, 2006
4:37 pm

... Of course, but it's been long ago. Right now I don't see a connection... -- Leo te Braake Dutchem Technological services&translations DE>NL + EN>NL ...
Leo te Braake
leo_tebraake
Offline Send Email
Aug 8, 2006
4:52 pm

... Never mind... Anyway, I have no hesitation in admitting that I was naive (although your earlier analysis was factually incorrect in several respects), but ...
Herbert Eppel
hetranslations
Offline Send Email
Aug 8, 2006
5:06 pm

There is no smss.exe on my computer and this *may* be because my internet-connected puter is on W98 SE. Remember that MS invited hackers to crack MS's upcoming...
Hennie Duits
hennieduits024
Offline Send Email
Aug 9, 2006
2:30 am

Dear all, would someone be so kind as to convert a Trados TM into a tab-delimited .txt file for me. I've just received a Trados project and would like to ...
Martin Robinshaw
m.robinshaw@...
Send Email
Aug 9, 2006
8:44 am

... This bothers me because I have an smss.exe running too. I know it is supposed to be a system file, but seeing it there is not encouraging :( FWIW, I have...
Karin Adamczyk
kadamczyk_inge
Offline Send Email
Aug 8, 2006
4:06 pm

Well, it's obviously a concerted attempt to attack at least those users of DV3, if not all DV users, then, isn't it? :-) Alison ... From:...
Alison Penfold
ddaremoto
Offline Send Email
Aug 8, 2006
3:21 pm

... You mean a relatively sophisticted attempt to make the dinosaurs extinct!? =-O Oh well, whoever did this will have to try harder next time 8-) Regards ...
Herbert Eppel
hetranslations
Offline Send Email
Aug 8, 2006
3:37 pm

Hennie, I can't remember whether you're on the Help list, and whether you've seen my message about Word 2007, but I agree with you in so many respects! Of...
Alison Penfold
ddaremoto
Offline Send Email
Aug 9, 2006
8:39 am
Advanced

Copyright © 2009 Yahoo! Inc. All rights reserved.
Privacy Policy - Terms of Service - Guidelines - Help