MOM.exe process is not a virus? How does the MOM.exe process shut down?

What is the MOM.exe process?

When you open the Windows Computer Task Manager you may find that there is a MOM.exe process running, but it is not a system process, and only the computer with the AMD graphics card has this process. So if there's a process in the system, don't worry, because it's usually safe.

This article will refer to the origins of the MOM.exe process, its functions, and how to identify some of the methods that are similar to viruses, hoping to help you understand what MOM.exe is.

MOM.exe process is not a virus

The MOM.exe process is a process associated with the video card setup, which is clearly not a system process, but is generally safe.

Mom.exe is part of the AMD (ATI) Catalyst
The MOM.exe process program file is part of the functional setup program defined by the amd® company (formerly ATI, after AMD acquired) for its computer graphics products, which was called ATI Catalyst control Center (ATI Catalyst) during the ATI period, The video card products released after the AMD acquisition are known as AMD Catalyst control Center. Start this program the taskbar will appear with a small icon:

The MOM.exe function enables the Catalyst program (a control window set for the video card process, as shown in the following image) to implement various graphics performance process settings, such as screen resolution, rotation display, and animation. This program will be installed together as you install drivers for the AMD (or ATI) graphics card for your computer.

MOM.exe itself is not a graphics driver, we can terminate it in Task Manager, or prohibit it from starting automatically with a power-on startup, which does not cause problems with your graphics driver. If you need to set the video card for performance or image output, you can enter Mom.exe or click the following position to start it in the run.

Location: C:\Program Files\ati technologies\ati.ace\core-static

There may also be changes in the directories of different computers with graphics versions, system versions, and installation locations. In addition, when the MOM.exe process is started, a CCC.exe process associated with its function is also activated, both of which are important contributing parts of the catalyst, and the small icon in the taskbar on the screenshot is CCC.exe. In addition, MOM.exe's normal work also relies on the Microsoft®.net framework program, if your computer does not have the. NET Framework installed or the error of this program can cause MOM.exe application errors to run. (Extension: What is the process of svchost.exe?) ）

virus status in MOM.exe

If not, it should be a Trojan horse.
Trojan/mom
Trojan/mom

Virus Length: 25600 bytes
Virus type: Trojan Horse
Hazard Level: *
Impact Platform: win9x/2000/xp/nt/me/2003
Trojan/mom for Trojan horse program, loading itself to the system startup items easy to run as the system starts.
Dissemination process and characteristics:
1. Create the following files:

%windir%mom.exe

2. Modify the Registration form:

/In the registry: hkey_local_machine\software\microsoft\windowscurrentversion\runservices
Add key value: "MOM" =%windir%mom.exe
/In the registry: Hkey_current_user\software\microsoft\windowscurrentversion\run
Add the key value; "MOM" =%windir%mom.exe

This allows the virus to execute automatically when Windows starts.