Service TrustedInstaller.EXE permanently active taking up to 50% CPU resources

Anonymous
2010-06-30T06:47:56+00:00

On my machine (Windows 7, 64 Bit) the TrustedInstaller.EXE is permanently active. The amount of used CPU changes permanently. 2 seconds 0 % then up to 50% (I have a dual core) for a second then down to 0.

Rebooting the machine did not help. Also a complete Virus scan was negative.

I have monitored the process with the Process Explorer tool. I can see that the process always access the same Registry key when it gets active. The key is

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-IIS-WebServer-AddOn-2-Package~31bf3856ad364e35~amd64~~0.0.0.

Windows for home | Previous Windows versions | Windows update

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2010-07-20T06:16:30+00:00

Hi Robear,

in the meantime I have found the process that was responsible for the trustedinstaller activities. It was the xenservice.exe that was installed together with the Citrix XenCenter on my machine. I have killed this process and suddenly the trustedinstaller.exe stopped its activities. So the problem is solved now because the XenCenter can work without this process and I will remove it from the auto

Thanks for your help.

Martin

Was this answer helpful?

200+ people found this answer helpful.
0 comments

93 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2010-10-29T06:24:26+00:00

    Thanks for your follow-up.

    I was just checking your thread in SpywareHammer forum:  http://spywarehammer.com/simplemachinesforum/index.php?topic=8314.0

    From your HJT log:

       O23 - Service: Citrix Tools for Virtual Machines Service (xensvc) - Citrix - C:\Program Files (x86)\Citrix\XenTools\xenservice.exe

    Did you DISABLE this Service or change it to MANUAL Startup?

    Did you consult Citrix Support about this? Is your installed versions of XenTools supported in Win7?

    Was this answer helpful?

    0 comments
  2. Anonymous
    2010-10-29T02:34:08+00:00

    Just discovered this when I put a CPU monitoring gadget on my desktop. Very annoying as it also causes the CPU to heat up almost 10C from idle.

    What on earth is MS doing to require 50% of the processing power of a 2.4Ghz quad core processor? Seriously, I can't imagine why checking for updates requires so much processing. I haven't seen anything like that on my Ubuntu box.

    Was this answer helpful?

    0 comments
  3. Anonymous
    2010-07-16T07:22:56+00:00

    Hi Robear,

    all checks have been done but nothing suspicious was found. The seems seems not the be hijacked. There must be another reason for this strange behaviour.

    Martin

    Was this answer helpful?

    0 comments
  4. Anonymous
    2010-07-13T15:26:52+00:00

    There is a very good chance that you are seeing the effects of an ongoing hijackware infection!

    Was this answer helpful?

    0 comments