cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted

msiexec.exe malware in Windows 7

Jump to solution

Has anyone had this experience or know how to solve the problem?

Last night, I somehow picked up a malware version of msiexec.exe in a User folder.  I deleted it, but it reappears every time I boot.

 

When I boot the system, I get a User Account Control prompt saying msiexec.exe wants to make changes to my system.  I click No, of course, but the prompt keeps re-appearing and the rest of the screen is dimmed out, so I can't click on anything else or start the Task Manager.

I finally found that if I click on the "change notifications" button in the prompt (I don't think that's actually the name of the button, but it's something like that), that breaks me out of the prompt loop and I can access the rest of my desktop and use Task Manager to kill the process.

McAfee didn't detect any problem with the file.

1 Solution

Accepted Solutions
Highlighted

Re: msiexec.exe malware in Windows 7

Jump to solution

I submitted the file to WebImmune yesterday, and received a response this morning stating that file has been identified as a trojan, and providing the following link for detailed information: http://vil.nai.com/vil/content/v_526162.htm

View solution in original post

5 Replies
Highlighted

Re: msiexec.exe malware in Windows 7

Jump to solution

If it is an issue and I see several reports today it might be have a read here

http://www.removespywareguides.com/msiexec-exe-how-to-remove.html

Highlighted

Re: msiexec.exe malware in Windows 7

Jump to solution

Just a follow-up: I noticed that there was another malware file in my User folder in addition to msiexec.exe .  It was named something like 0.127673891314.exe (I don't recall the exact digits, but that was the general name format).  That was the name which showed up in Task Manager.  Anyway, once I deleted it and msiexec, the problem ended.

Highlighted

Re: msiexec.exe malware in Windows 7

Jump to solution

I submitted the file to WebImmune yesterday, and received a response this morning stating that file has been identified as a trojan, and providing the following link for detailed information: http://vil.nai.com/vil/content/v_526162.htm

View solution in original post

Re: msiexec.exe malware in Windows 7

Jump to solution

Here's how the msiexec.exe User Account Control notification looks like:

msiexec_exe_trojan.jpg

Image source: http://deletemalware.blogspot.com/2011/06/remove-msiexecexe-trojan-uninstall.html

Highlighted

Re: msiexec.exe malware in Windows 7

Jump to solution

Yes, thanks - that's exactly what I was getting.  And when I clicked "No", it just kept popping up over and over, preventing me from doing anything else on the computer.  I finally got out of it by clicking on "Change when these notifications appear" - I didn't actually change anything, but bringing up that screen allowed me to start Task Manager and kill the offending process, which had a name something like 0.1234567890.exe .

Message was edited by: albertl on 7/2/11 1:00:29 PM CDT

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community