Msiexec.exe

Factual Questions
21

For what it’s worth, I did a search for the file on my computer, also Win7, (but Chrome and Webroot AV) and came up with this.
Windows ® Installer. V 5.0.7600.16385

msiexec /Option <Required Parameter> [Optional Parameter]

Install Options
</package | /i> <Product.msi>
Installs or configures a product
/a <Product.msi>
Administrative install - Installs a product on the network
/j<u|m> <Product.msi> [/t <Transform List>] [/g <Language ID>]
Advertises a product - m to all users, u to current user
</uninstall | /x> <Product.msi | ProductCode>
Uninstalls the product
Display Options
/quiet
Quiet mode, no user interaction
/passive
Unattended mode - progress bar only
/q[n|b|r|f]
Sets user interface level
n - No UI
b - Basic UI
r - Reduced UI
f - Full UI (default)
/help
Help information
Restart Options
/norestart
Do not restart after the installation is complete
/promptrestart
Prompts the user for restart if necessary
/forcerestart
Always restart the computer after installation
Logging Options
/l[i|w|e|a|r|u|c|m|o|p|v|x|+|!|*] <LogFile>
i - Status messages
w - Nonfatal warnings
e - All error messages
a - Start up of actions
r - Action-specific records
u - User requests
c - Initial UI parameters
m - Out-of-memory or fatal exit information
o - Out-of-disk-space messages
p - Terminal properties
v - Verbose output
x - Extra debugging information
+ - Append to existing log file
! - Flush each line to the log
* - Log all information, except for v and x options
/log <LogFile>
Equivalent of /l* <LogFile>
Update Options
/update <Update1.msp>[;Update2.msp]
Applies update(s)
/uninstall <PatchCodeGuid>[;Update2.msp] /package <Product.msi | ProductCode>
Remove update(s) for a product
Repair Options
/f[p|e|c|m|s|o|d|a|u|v] <Product.msi | ProductCode>
Repairs a product
p - only if file is missing
o - if file is missing or an older version is installed (default)
e - if file is missing or an equal or older version is installed
d - if file is missing or a different version is installed
c - if file is missing or checksum does not match the calculated value
a - forces all files to be reinstalled
u - all required user-specific registry entries (default)
m - all required computer-specific registry entries (default)
s - all existing shortcuts (default)
v - runs from source and recaches local package
Setting Public Properties
[PROPERTY=PropertyValue]

Consult the Windows ® Installer SDK for additional documentation on the
command line syntax.

Copyright © Microsoft Corporation. All rights reserved.
Portions of this software are based in part on the work of the Independent JPEG Group.

22

I don’t let them auto-install. I choose when to install them, and I usually do it when I’m prompted to.

23

Malwarebytes finding over a thousand issues is a big red flag. It’s typical for it to find 8 to 12, just due to tracking cookies and relatively harmless stuff. A thousand? I’ve never seen that in several years of fixing malware for a living.

Advice: download and install CCleaner from here: Thanks for downloading CCleaner. Run both the temp file cleaner and the registry cleaner. You may need to run the registry cleaner a few times in succession. You can also look at what runs on startup and disable suspicious things.

24

CCleaner is a good tool, but I found it to be a bit aggressive when deleting registry items. So always back up your registry FIRST before using it.

25

I’ve had this happen the last few days, and MalwareBytes stopped it completely, even the free version. I just made sure to Remove the infected files at the end of the process.

26

This is happening to me today. I have downloaded free MalWareBytes to see if it works.

27

It seems to have worked, at least so far! Thanks for the answers found in this thread.

28

Fortunately, it automatically offers that option.

What I did was run it on a clean installation of Windows, and then disabled options until it showed me it wouldn’t delete anything. On XP, I shut off “Missing Shared DLLs” and “Unused File Extensions.”

29

It came back. :frowning: I ran the Malware program again. Let’s hope it stays dead this time.