Is this a virus?

I'm a little bit confused if this is a virus. I googled the trusted installer, and it says that it is a program which enables my OS to get updates from Microsoft. But why is there a virus? Should I delete it?

Why do you need to need to use a third-party program to gain updates from Microsoft? I thought that was the entire point of Windows Update?

What is the program or installer you are using?

x BlueRobot said:

Why do you need to need to use a third-party program to gain updates from Microsoft? I thought that was the entire point of Windows Update?

What is the program or installer you are using?

No, I didn't install any third party program. I found the Trusted Installer in my C:/Temp I don't know where it came from. Moreover, I got this information from the web Service TrustedInstaller.EXE permanently active taking up to 50% - Microsoft Community that is why I'm hesitating to remove the virus, thinking that I won't get any updates if I delete the Trusted Installer

cottonball said:

Yatchiie,

On avast!, use: Move to chest
Click: Apply

Now, please download RogueKiller:
Tlcharger RogueKiller (Site Officiel)

When you get to the website, go to where it says:
(Download link) Lien de téléchargement:
Select the version for your system: 64-bit
Click the dark-blue button with x64 to download.
Save to the Desktop.

Close all windows and browsers.

Right-click and select: Run as Administrator

At the program console, wait for the prescan to finish. (Under Status, it says: Prescan finished.)

Press: SCAN


When done, a report opens on the Desktop: RKreport.txt
Please provide the RKreport.txt (Mode: Scan) in your reply.


Also download TDSSKiller.zip:
http://www.bleepingcomputer.com/download/tdsskiller/
Right-click the program and select: Extract to tdsskiller\

A TDSSKiller folder is found on your Desktop.
Open the folder, and double-click the TDSSKiller application.

When TDSSKiller opens, click on: Change Parameters
Under Additional Options, place a check in the box next to: Detect TDLFS File System
Click: OK

Press: Start Scan

If a suspicious object is detected, the default action is Skip, leave it as is, and click on: Continue
If malicious objects are found, they show in the Scan results.
Ensure Cure (the default) is selected, then click: Continue > Reboot now, to finish the cleaning process.
(Note: If Cure is not available, select Skip, >>Do not select: Delete<<)

When done, the tool outputs its log to the disk with the Windows Operating System, normally C:\

Logs have a name like:
C:\TDSSKiller.X.X.X_11.04.2013_15.31.43_log.txt

Please post the TDSSKiller log in your reply.

I just finished doing all the instructions you posted and attached the log files. BTW, thank you for posting a vivid instruction :)

cottonball said:

Please run RogueKiller once again:

Close all windows and browsers
Right-click RogueKiller and select 'Run as Administrator'

Wait until the Prescan finishes

Press: Scan

When done, on the right, click: Delete

Wait until the Status box shows: Deleting Finished

Click on Report and provide the content of the new Rkreport (Mode: Remove) in your reply.


Now, please run avast! once again, and tell us what it shows.

Here's the result. Yay, no more virus :)

cottonball said:

Please download Temp File Cleaner (TFC):
http://oldtimer.geekstogo.com/TFC.exe

Save to your Desktop.

• Save any work in progress!! TFC closes open applications and removes unsaved work!! Close all windows.
• Double-click TFC.exe to run the program.
• If prompted, click "Yes" to reboot.

Also download Security Check

http://screen317.spywareinfoforum.org/SecurityCheck.exe
Save to the Desktop.

Double-click SecurityCheck.exe and follow the onscreen instructions (on the black screen)

When done, a Notepad document opens automatically: checkup.txt

Please post the contents of checkup.txt in your reply.

Here :)