Windows installer unicode что это

Windows Installer — Unicode by Microsoft

This is a Windows system installed file with Windows File Protection (WFP) enabled.

Warning 6 antivirus scanners has detected malware in various versions of msiexec.exe.

Overview

There are 56 versions of msiexec.exe in the wild, the latest version being 5.0.9600.16384 (winblue_rtm.130821-1623). It is started as a Windows Service called ‘Instalator Windows’ with the name ‘msiserver’ and described as “Adds, modifies, and removes applications provided as a Windows Installer or APPX package (*.msi, *.msp, *.appx). If this service is disabled, any services that explicitly depend on it will fail to start.”. . A job within the Windows Task Scheduler is added to execute this process of a specific schedule during installation of the program. It is integrated as a plugin to Internet Explorer as a Browser Helper Object, often without any obvious user interface, and will load for each instance of IE. The average file size is about 89.38 KB. The programs Fallout 3, Dead Space™ and Unify Enterprise have been observed as installing specific variations of msiexec.exe. During the process’s lifecycle, the typical CPU resource utilization is less than 0.01%, the average private memory consumption is about 10.94 MB with the maximum memory reaching around 17.16 MB. Addionally, typically read and write I/O disk operations is about 4.28 MB per minute for reads and 3.91 MB per minute for writes.

What is msiexec.exe?

Microsoft Windows Installer is an installation and configuration service provided with Windows. The installer service enables customers to provide better corporate deployment and provides a standard format for component management. The installer also enables the advertisement of applications and features according to the operating system.

Programs installed in

(Note, the programs listed below are for all versions of Windows Installer — Unicode.)

Behaviors

(Note, the behaviors below are for all versions of msiexec.exe, select a unique version for details.)

Services

Runs under ‘SYSTEM\CurrentControlSet\Services’ as a shared service by the Service Host (svchost.exe)

• ‘MSIServer’ (Windows Installer)

Windows firewall allowed programs

Exceptions allow programs to access to the Internet through an outbound connections

• Firewall exception for ‘C:\WINXP\system32\msiexec.exe’
• Firewall exception for ‘C:\WINDOWS.0\system32\msiexec.exe’
• Firewall exception for ‘C:\WINDOWS\system32\msiexec.exe’

Scheduled tasks

• The job ‘{50696451-B3AA-4784-981E-F04E2AA3B1B9}’ runs on registration in the path ‘\{50696451-B3AA-4784-981E-F04E2AA3B1B9}’
• The task ‘{D318DBBF-4502-4870-A65D-9A9A1C96DB0A}’ runs on registration in the path ‘\{D318DBBF-4502-4870-A65D-9A9A1C96DB0A}’
• Entry path ‘\{5A701793-8CE3-4E27-8C20-821C0BC4326D}’

Internet Explorer Browser Helper Object

Located in the registry at ‘SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects’

• BHO CLSID: {127AD70F-B2B7-4f6a-ACD9-C7B1FE48C8C0}

Malware detections

Based on 40+ industry antivirus scanners, 6 of them detected the following malware.

All file variations of msiexec.exe

Distribution by Windows OS

Distribution by country

United States installs about 39.80% of Windows Installer — Unicode.

Distribution by PC manufacturer

Драйвер доступен для следующих операционных систем: