Check the ReinstallBackups folder and msiexec64.exe for any potential virus.
Check the ReinstallBackups folder and msiexec64.exe for any potential virus.
Hello everyone. I’m pretty sure my computer has been affected by something—probably due to family members who misuse it—that’s causing significant slowdowns. Essentially, as soon as I power on the PC, within minutes a CMD window pops up briefly and then disappears instantly, leaving just an icon. When I click the icon, the window reopens and displays a link: http://puu.sh/yM360/d83f9749f6.png. It seems like this file is downloading itself automatically. Right after the download finishes, I noticed msiexec64.exe launching; within seconds the system becomes very sluggish. This process runs in a folder named ReinstallBackups (with access denied) located at C:\Users\Franz\AppData\Local\ReinstallBackups. After adjusting the security settings, I gained access and saw that msiexec64.exe is accompanied by additional files, including DLLs. It’s not possible to close it through Task Manager, so restarting the PC and blocking its startup seems necessary. To test, I restarted the computer and cleared the folder immediately afterward. Still, the CMD window appears, and after a while the msiexec64.exe folder and process reappear unexpectedly. How can I resolve this issue? I’m really seeking your assistance. P.S.: When the PC enters the slowdown phase, restarting or shutting it down causes a BSOD.
It doesn't always stop harmful software from running. The outcome depends on the process involved. Safe mode turns off some non-Microsoft drivers and services, yet certain apps may still work. If those apps function, a threat could still activate. This isn't about avoiding it entirely, but it isn't perfect either.
The system may run smoothly, but performance is slow. I frequently close the command prompt, yet the download still proceeds.