Legitimate Microsoft Executable files and Malware

exe files Executable (exe) files are used in Microsoft operating systems to run routines and applications, and enable the stable, secure running of your computer. However as they can run without any user intervention these files are an ideal way for hackers to infect your computer with a virus or malware program, as they can run malicious programs without your knowledge. Some malware programs disguise themselves as legitimate exe files to make them even harder to identify, and the only way you can tell them apart is to look at where they are in your directory.

Legitimate files that run key routines are saved in the subfolder “C:\Program Files”, and a good anti-malware program will scan your computer and identify if any duplicate files have been saved in other subfolders. For example the fssm32 process (filename fssm32.exe) is located in “C:\Program Files”, and part of the F-Secure Anti-Virus Client Security program, which monitors and makes adjustments to applications on your computer. However malware programs can also disguise themselves under this name, and in this case the fake files can appear in other subfolders such as “C:\Windows” or “C:\Windows\System32” folders.

Another systems file that is vulnerable to exploitation by hackers is groovemonitor.exe. This file is a multi user resource which is part of Microsoft Office 2007, and is used to track groove behaviour and create error reports that are send back to Microsoft central. This exe file is saved into “C:\Program Files”, but like the fssm32.exe malware, the filename can also be used to camouflage malicious files in other subfolders such as “C:\Windows\ Folders”.

It is important to note that this groovemonitor file will not uninstall automatically if you uninstall Office 2007, and will continue to load up and run when you start up your computer. You will need to manually delete this from your system by accessing your Control Panel and then selecting ‘Add/Remove programs’. Check through the list until you see the groovemonitor application, and then click on ‘Remove Program’. Sometimes this file can prove difficult to remove, and in this case you will need to use the ‘msconfig’ function by going to the ‘Start Menu’ and clicking on ‘Run’. Then type in ‘msconfig’ and press enter. In the ‘Startup Table’ uncheck anything that relates to groovemonitor and then reboot your system.

Popularity: 38% [?]