EXE files are executable files that are used to install and run programs on your computer. These files are one of the most useful types of files as the operating system is dependent on these files to run different programs.

However, many malicious programs are known to camouflage themselves as genuine EXE files and cause harm to your system. Additionally, there are many EXE files that are known as Trojans.

In this article, we will take a look at three sinister EXE files, smss.exe, winivstr.exe and d.exe, understand how they affect your computer and ways to get rid of them.

Smss.exe – The genuine smss.exe file is a safe file that is responsible for handling user sessions on your PC. However, the W32.Dalbug.Worm is known to spread itself on Microsoft IIS and Windows 2000/NT/XP computers by adding a malicious smss.exe file to the system. The main job of this smss.exe file is to ensure that services of W32.Dalbug.Worm are running by checking it every 3 seconds.

Winivstr.exe – Winivstr.exe is a malware program. This program is hard to detect and most computer users are unaware of its presence. One indication that your PC is infected with this harmful program is when you receive a pop up message informing you that your system is infected and prompts you to download an up-to-date antispyware utility program. This in fact is a trick to fool innocent computer users into downloading the antispyware tool which only increases the infection, causing more harm to your system.

D.exe file – D.exe is a known Trojan that gains entry into your PC through an email attachment. The d.exe Trojan is used by WormMytobGH and Trojan.Dropper-AZT malware programs and it not only adversely affects your system, but is also a threat to security. The d.exe Trojan steals your personal information and sends it to an external source for malicious use.

How to check if your PC is infected with malicious programs

You can follow the steps listed below to determine if your system is infected with any of the above malicious programs:

1. Press Ctrl + Alt + Del to open the Windows Task Manager window.
2. Select the Processes tab and then click on the Image Name column to sort the different processes alphabetically.
3. Go through the list and see if you can locate the smss.exe, winivstr.exe or d.exe processes running on your PC.

Methods to deal with malicious programs, such as smss.exe, winivstr.exe and d.exe

You may perform the following tasks to get rid of malicious programs and also prevent harmful programs from gaining entry into your system:

1. Implement a Firewall to block unwanted incoming internet traffic.
2. Disable the network shares that you no longer use.
3. Update your antivirus and antispyware tools with the latest definitions and schedule regular full system scans to keep your PC free from malware programs.
4. Update your operating system, device drivers and applications with the latest service packs and security releases.
5. Avoid opening attachments that come with unsolicited emails.

Often, malicious programs such as the ones listed above deliberately attempt to corrupt your system registry by filling it with unwanted and obsolete entries, which in turn lead to various system errors. To prevent these errors and improve your computer’s performance, it is imperative that you regularly scan your system registry using a robust registry cleaning tool.