How to Remove “ssonsvr.exe”

What is ssonsvr.exe?

ssonsvr.exe is a legitimate process file popularly known as Citrix Pass-through Authentication. It belongs to Citrix ICA Client and developed by Citrix Systems. It is located in C:\Program Files by default. Malware programmers create files with virus scripts and name them after ssonsvr.exe with an intention to spread virus on the internet.

 
Affected Platform: Windows OS
 

How to check if your computer is infected with ssonsvr.exe malware?


Keep an eye for the following symptoms to see if your PC is infected with ssonsvr.exe malware:
  • Internet connection fluctuates
  • ssonsvr.exe takes too much CPU space
  • PC slows down significantly
  • Browser automatically redirects to some irrelevant websites
  • Unsolicited ads and popups starts appearing
  • Screen freezes constantly
If your PC is infected with ssonsvr.exe malware, it will invite other malwares to cause more damage to your computer. Take the following steps to diagnose your PC for possible ssonsvr.exe malware attack:
 
Step 1: Simultaneously press CTRL+ALT+DEL keys to open Task Manager.
 
Step 2: If you notice the file located outside C:\Program Files, then you should run an antivirus scan to get rid of the malware.
 
How to remove the ssonsvr.exe file from system using Comodo Antivirus?
 
Step 1: Download the award-winning Free Internet Security.
 
Step 2: Installation configuration frames will be displayed. Select the configuration you would like to apply.
 
Step 3: Select Customize Configuration option and arrange installers, configuration, and file location.
 
Step 4: Restart your PC.
 
Step 5: It will take some time for the Comodo Internet Security to update the antivirus.
 
Step 6: Proceed with a quick scan that automatically begins after the update.
 
Step 7: If threats are found during the scanning, you will be prompted with an alert screen.
 
Step 8: Comodo Antivirus will remove the ssonsvr.exe virus from your computer including all other malwares!
3

Malware Entries

First Seen: 20 October 2010 at 1:35 pm
No. Company File Type SHA1 MD5 Malware
Name
Digitally
Signed
File
Version
Product
Version
Submitted
From
Malware Behavior
1 N/A Executable 7fc3821fe5c528f5
54536fcb49e13c56
af681aa1
d54640d6ed2455b9
02145aa7e12653ad
Worm.Win32.V
asor.~d1
No N/A N/A Ukraine N/A
2 Citrix Systems, Inc. Executable 964c1ad08d64125f
66884f12282909ca
1b787f25
afcf02bcb1c8c466
84b0a7b9a61929d8
Virus.Win32.
Sality.gen
No 9.200.4437
6
9.200 India N/A
3 N/A Executable f37c2c4191b1e3f6
abab10d7f3b265ee
929e09e6
f5795cd04272edde
06cd9b852e61876a
Virus.Win32.
Sality.gen
No N/A N/A Greece N/A
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
38

Safe Entries

First Seen: 07 September 2008 at 9:04 am
No. Company File Type SHA1 MD5 Digitally
Signed
File
Version
Product
Version
Submitted
From
1 Citrix Systems, Inc. Executable d52d189ec7f30b56
cd2a1da058b7be55
4e227b6b
06e1fe75ed44c15d
34831e909043e51a
No 9.230.5021
1
9.230 Italy
2 Citrix Systems, Inc. Executable 195a2621131d526b
582ad8bb34bfa70e
b499ba70
9388e298ac0ba3b6
a0784a9be3919515
Yes 10.100.558
36
10.100 Internal Submission
3 Citrix Systems, Inc. Executable cb112ee287b49750
c3c7f65440103534
185dd4fc
93e829c6c4e23c6a
b7c5f28b3cbdfd00
No 9.200.4437
6
9.200 Internal Submission
4 Citrix Systems, Inc. Executable 195a2621131d526b
582ad8bb34bfa70e
b499ba70
9388e298ac0ba3b6
a0784a9be3919515
Yes 10.100.558
36
10.100 10.224.1.117/32
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
 

Comodo Internet Security Pro

Free Antivirus protection from hackers! Get the ultimate Antivirus solution to keep your PC clean and to remove viruses from a slow or infected PC. Improve the PC performance at home or use it on-the-go!

Get Comodo Internet Security Comodo Internet Security
Exclusive Offer
Get Free Endpoint Protection
Get Advanced
Endpoint
Protection

Award-Winning Security to Protect Your Clients from Cyber Attacks