What is ssonsvr.exe?
ssonsvr.exe is a legitimate process file popularly known as Citrix Pass-through Authentication. It belongs to Citrix ICA Client and developed by Citrix Systems. It is located in C:\Program Files by default. Malware programmers create files with virus scripts and name them after ssonsvr.exe with an intention to spread virus on the internet.
Affected Platform: Windows OS
How to check if your computer is infected with ssonsvr.exe malware?
Keep an eye for the following symptoms to see if your PC is infected with ssonsvr.exe malware:
- Internet connection fluctuates
- ssonsvr.exe takes too much CPU space
- PC slows down significantly
- Browser automatically redirects to some irrelevant websites
- Unsolicited ads and popups starts appearing
- Screen freezes constantly
Step 1: Simultaneously press CTRL+ALT+DEL keys to open Task Manager.
Step 2: If you notice the file located outside C:\Program Files, then you should run an antivirus scan to get rid of the malware.
How to remove the ssonsvr.exe file from system using Comodo Antivirus?
Step 1: Download the award-winning Free Internet Security.
Step 2: Installation configuration frames will be displayed. Select the configuration you would like to apply.
Step 3: Select Customize Configuration option and arrange installers, configuration, and file location.
Step 4: Restart your PC.
Step 5: It will take some time for the Comodo Internet Security to update the antivirus.
Step 6: Proceed with a quick scan that automatically begins after the update.
Step 7: If threats are found during the scanning, you will be prompted with an alert screen.
Step 8: Comodo Antivirus will remove the ssonsvr.exe virus from your computer including all other malwares!
First Seen: 20 October 2010 at 1:35 pm
| No. | Company | File Type | SHA1 | MD5 | Malware Name |
Digitally Signed |
File Version |
Product Version |
Submitted From |
Malware Behavior |
|---|---|---|---|---|---|---|---|---|---|---|
| 1 | N/A | Executable | 7fc3821fe5c528f5 54536fcb49e13c56 af681aa1 |
d54640d6ed2455b9 02145aa7e12653ad |
Worm.Win32.V asor.~d1 |
No | N/A | N/A |  Ukraine |
N/A |
| 2 | Citrix Systems, Inc. | Executable | 964c1ad08d64125f 66884f12282909ca 1b787f25 |
afcf02bcb1c8c466 84b0a7b9a61929d8 |
Virus.Win32. Sality.gen |
No | 9.200.4437 6 |
9.200 |  India |
N/A |
| 3 | N/A | Executable | f37c2c4191b1e3f6 abab10d7f3b265ee 929e09e6 |
f5795cd04272edde 06cd9b852e61876a |
Virus.Win32. Sality.gen |
No | N/A | N/A |  Greece |
N/A |
Display 4 items per page
- 4 items per page
- 8 items per page
- 16 items per page
- 32 items per page
First Seen: 07 September 2008 at 9:04 am
| No. | Company | File Type | SHA1 | MD5 | Digitally Signed |
File Version |
Product Version |
Submitted From |
|---|---|---|---|---|---|---|---|---|
| 1 | Citrix Systems, Inc. | Executable | d52d189ec7f30b56 cd2a1da058b7be55 4e227b6b |
06e1fe75ed44c15d 34831e909043e51a |
No | 9.230.5021 1 |
9.230 |  Italy |
| 2 | Citrix Systems, Inc. | Executable | cb112ee287b49750 c3c7f65440103534 185dd4fc |
93e829c6c4e23c6a b7c5f28b3cbdfd00 |
No | 9.200.4437 6 |
9.200 |  Internal Submission |
| 3 | Citrix Systems, Inc. | Executable | f95ded20f5c9fb9d d56af6d44e35d0dd 66e1dee3 |
05110bde2f03629e d377282470c547d0 |
Yes | 22.12.0.9 | 22.12.0 |  United States |
| 4 | Cloud Software Group, Inc. | Executable | 5e7364574cb0a0a6 26a52867ed204fc3 9362928e |
7cea1dde4aa26d25 5784983d5a14de44 |
Yes | 23.2.0.9 | 23.2.0 | United States |
Netherlands
Belgium
France
Canada
United Kingdom
Australia
