Service TrustedInstaller.EXE permanently active taking up to 50% CPU resources

Anonymous
2010-06-30T06:47:56+00:00

On my machine (Windows 7, 64 Bit) the TrustedInstaller.EXE is permanently active. The amount of used CPU changes permanently. 2 seconds 0 % then up to 50% (I have a dual core) for a second then down to 0.

Rebooting the machine did not help. Also a complete Virus scan was negative.

I have monitored the process with the Process Explorer tool. I can see that the process always access the same Registry key when it gets active. The key is

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-IIS-WebServer-AddOn-2-Package~31bf3856ad364e35~amd64~~0.0.0.

Windows for home | Previous Windows versions | Windows update

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2010-07-20T06:16:30+00:00

Hi Robear,

in the meantime I have found the process that was responsible for the trustedinstaller activities. It was the xenservice.exe that was installed together with the Citrix XenCenter on my machine. I have killed this process and suddenly the trustedinstaller.exe stopped its activities. So the problem is solved now because the XenCenter can work without this process and I will remove it from the auto

Thanks for your help.

Martin

Was this answer helpful?

200+ people found this answer helpful.
0 comments

93 additional answers

Sort by: Oldest
Most helpful Newest Oldest
  1. Anonymous
    2010-07-12T06:15:10+00:00

    KIS seems to be OK or the computer seems to be OK now (i.e., TrustedInstaller.EXE is no longer permanently active)?

    ~Robear Dyer (PA Bear) ~ MS MVP (IE, Mail, Security, Windows & Update Services) since 2002 ~ Disclaimer: MS MVPs neither represent nor work for Microsoft

    Was this answer helpful?

    0 comments
  2. Anonymous
    2010-07-13T06:21:52+00:00

    Sorry for my unclear answer. KIS seems to be working fine, but the problem with the trustedinstaller.exe is not solved. It is permanently active.

    Was this answer helpful?

    0 comments
  3. Anonymous
    2010-07-13T15:26:52+00:00

    There is a very good chance that you are seeing the effects of an ongoing hijackware infection!

    Was this answer helpful?

    0 comments
  4. Anonymous
    2010-07-16T07:22:56+00:00

    Hi Robear,

    all checks have been done but nothing suspicious was found. The seems seems not the be hijacked. There must be another reason for this strange behaviour.

    Martin

    Was this answer helpful?

    0 comments