What is the "CcmExec.exe" process on windows 7? Is the "CcmExec.exe" process a virus? Can I terminate the "CcmExec.exe" process?

"CcmExec.exe" process represents "Host Process for Microsoft Configuration Manager" program. "CcmExec.exe" is a process for "SMS Agent Host" service which provides change and configuration services for computer management systems. It actually acts as the agent for Systems Management Server to push out patches and keeps your software updated to your computer.

"CcmExec.exe" process is normally running under the parent process "services" as shown in the process tree below:

Boot
   wininit
      services
         CcmExec

On the Processes tab of "Task Manager", "CcmExec.exe" process may be listed as:

Image Name                 Memory   Description
--------------------   ----------   -----------
CcmExec.exe              46,612 K   Host Process for Microsoft Configuration Manager

Additional information about "CcmExec.exe" process:

Command line:
   C:\windows\CCM\CcmExec.exe

Programe file information:
   Name: CcmExec.exe
   Location: C:\windows\CCM\CcmExec.exe
   Description: Host Process for Microsoft Configuration Manager
   Version: 5.00.8239.1301 (hermbld.151020-1617)
   Size: 1773744 bytes
   Last modified: 10/4/2015 7:05:00 PM
   Company Name: Microsoft Corporation
   
Some data files used:
C:\Windows\System32
C:\Windows\winsxs\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294
C:\Windows\System32\en-US\msimsg.dll.mui
C:\Windows\CCM\ServiceData\Messaging\EndpointQueues\StateMessageManager\00000004.que
C:\Windows\System32\en-US\crypt32.dll.mui
C:\Windows\System32\en-US\KernelBase.dll.mui
C:\Windows\CCM\Logs\pwrmgmt.log
C:\Windows\CCM\Logs\CcmEvalTask.log
C:\Windows\CCM\Logs\CIStore.log

Some registry keys used:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER
HKU\.DEFAULT\Control Panel\International
HKLM\SOFTWARE\Microsoft\CCM\Logging
HKLM\SYSTEM\ControlSet001\Control\Nls\CustomLocale
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer

Some DLL libraries used:
C:\windows\SYSTEM32\ntdll.dll
C:\windows\system32\kernel32.dll
C:\windows\system32\KERNELBASE.dll
C:\windows\system32\ADVAPI32.dll
C:\windows\system32\msvcrt.dll
C:\windows\SYSTEM32\sechost.dll
C:\windows\system32\RPCRT4.dll
C:\windows\system32\USER32.dll
C:\windows\system32\GDI32.dll
C:\windows\system32\LPK.dll

"CcmExec.exe" process is not a virus. You can terminate "CcmExec.exe" process or stop the "SMS Agent Host" service if you don't want it to interrupt you working on the computer, because it uses lots of CPU resources when it runs. You can restart it later, when your computer is free to let it receive updates and patches form Microsoft.

 

⇒System Service Processes on Windows 7

⇒⇒Windows 7 Processes Tutorials