My virus scanner nuked my TrustedInstaller.exe file for some reason, and it’s not even available in backup form under c:\windows\winsys directories, looks like it killed them, too! I’m running Windows Vista 32-bit Home Premium. After reading on this for hours, I noticed a few users here had helped somebody in the past with this by uploading a replacement version of TrustedInstaller.exe for the same OS/version, but unfortunately it was a few years back and the link is now dead. Just need the 32-bit version, I found a 64-bit version but can’t find the 32…
I’m wondering if somebody here could help me with this? I just need a new copy of the file to replace the old with, and would LOVE to avoid completely reformatting and reinstalling Vista… I don’t have a Vista CD, it’s just a recovery partition so I’d have to go from scratch. No restore points saved (I disable as viruses like to hang out in them, but looks like it shot me in the foot here).
Well the trustedinstaller.exe file should be in the chest right ?
There have been a few detections on trustedinstaller.exe in the past, but they were corrected, so I don’t know why it is back.
There is no rush to nuke anything as it is possible to resolve with out reformat and reinstall from scratch. This if I’m right just means you cant install some things ?
You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here the URL in the Address bar of the VT results page. You can’t do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below.
Create a folder called Suspect in the [b]C:[/b] drive. Now exclude that folder in the File System Shield, Expert Settings, Exclusions, Add, type (or copy and paste) C:\Suspect*
That will stop the File System Shield scanning any file you put in that folder.
If only GData and avast detect it - GData uses avast as one of its two scanners so counts as 1 detection and almost certainly an FP.
Send the sample to avast as a False Positive:
Open the chest and right click on the file and select 'Submit to virus lab...' complete the form and submit, the file will be uploaded during the next update.
- In the meantime (if you accept the risk), add the full path to the file to the exclusions lists (see Note below):
[b]File System Shield, Expert Settings, Exclusions, Add[/b] and
[b]avast Settings, Exclusions[/b]
Restore it to its original location, periodically check it (scan it in the chest), there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected then you can also remove it from the File System Shield and avast Settings, exclusions lists.
Note: When using the Browse button it only goes down to folder level accept that. Now open the entry in the exclusions and change the \* to \file_name.exe where file_name.exe is the file you want to exclude.
####
Edit: I don't have trustedinstaller.exe on my XP Pro system, I do on my win7 system and that has been scanned by avast and no problems (I don't have Vista so can't check).
Interestingly there are tons of hits on google on that file and many are problems and people wanting to know how to remove it.