msiexec.exe is infected by virus, how to fix it ?

Question

_{Sunday, May 7, 2017 2:51 PM}

Hi,

Malwarebytes has blocked msiexec.exe from contacting malicious websites several times. My PC has been infected by several viruses that I managed to (hopefully) eradicate (I ran Malwarebytes, Bitdefender and Windows Defender scans in parallel).

None of the AV's indicated any infection in msiexec.exe, yet it tries to make connections with those malicious websites.

Question, how can I re-install a fresh and clean version of msiexec.exe to replace the one I have ?

I have the latest version of windows 10. The windows installer version is V 5.0.14393.0

All replies (2)

_{Monday, May 8, 2017 4:31 AM}

Hi,

"msiexec.exe" is a module used in installation process.
If none of antivirus software indicates any infection in it, you can stop Malwarebytes temporarily and continue to install or update.
___________

Ashidacchi

_{Wednesday, May 10, 2017 9:43 AM}

Hi, 

Agree with Ashidacchi. 

Also, if you would like to try to replace this file, you can try steps here: please replace with msiexec.exe in following command steps:

1. Take administrative ownership of the corrupted system file. To do this, at an elevated command prompt, copy and then paste (or type) the following command, and then press ENTER: takeown /f Path_And_File_Name Note The Path_And_File_Name placeholder represents the path and the file name of the corrupted file. For example, type takeown /f C:\windows\system32\jscript.dll. 
    
2. Grant administrators full access to the corrupted system file. To do this, copy and paste (or type) the following command, and then press ENTER: icacls Path_And_File_Name /GRANT ADMINISTRATORS:F Note The Path_And_File_Name placeholder represents the path and the file name of the corrupted file. For example, type icacls C:\windows\system32\jscript.dll /grant administrators:F.
    
3. Replace the corrupted system file with a known good copy of the file. To do this, copy and paste (or type) the following command, and then press ENTER: Copy Source_File Destination Note The Source_File placeholder represents the path and file name of the known good copy of the file on your computer, and the Destination placeholder represents the path and file name of the corrupted file. For example, type copy E:\temp\jscript.dll C:\windows\system32\jscript.dll.

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].