Is this a virus?

jonbauer85 · 11 Dec 2019

Hello!

I have an unsual problem since getting my new laptop.
So, last week i bought a Lenovo Legion y570, i5 with 16 gb ram and a 500 gb ssd. It came with no OS, so i installed a copy of Windows 10 Pro build 1903 on it.
The problem manifests as it follows: occasionally, when installing some programs, it won't allow me to do so, stating that the .exe needs elevation. I am running an administrator account.
Furthermore, I explored security settings of the SSD, and it says that the owner of it is "TrustedInstall". Could that be the problem? I have changed ownership of the SSD to my username, then did the same with permissions, but i still get the "this executable needs elevation".

Being that i lost patience with it, I wiped the SSD and installed another copy of Windows 10, from a different source. I get the same "error".
What can I do?

swarfega · 11 Dec 2019

Hello and welcome.

TrustedInstall is what the OS uses to install programs so thats ok.

Where did you get your copy of Windows from?

You can also run sfc /scannow in an elevated cmd prompt to test for system integrity.

jimbo45 · 11 Dec 2019

Hi there

@jonbauer85

I wouldn't trust that source if this sort of thing happens

I hope you didn't get it from one of these types of places :

Is this a virus?-screenshot_20191211_093302.png

I'd download a new version from UUPDUMP (100% legit and used regularly by lots of people on these forums) and then enter valid product key / or via update from W7/W8/W8.1 use key from one of those OS'es.

Here's UUPDUMP link. (BTW for HOME editions you will have to get another source but for PRO this is the one to use).

UUP dump

download the script, extract and run it -- iso will be created - now clean install,

Cheers
jimbo

FreeBooter · 11 Dec 2019

With the built-in UAC elevation component, members of the local Administrators group can easily perform an administrative task by providing approval.

With UAC enabled, Windows 10 prompts for consent or prompts for credentials of a valid local administrator account before starting a program or task that requires a full administrator access token. This prompt ensures that no malicious software can be silently installed.

The consent prompt is presented when a user attempts to perform a task that requires a user's administrative access token. The following is an example of the UAC consent prompt and credential prompt.

jonbauer85 · 11 Dec 2019

swarfega said:

Hello and welcome.

TrustedInstall is what the OS uses to install programs so thats ok.

Where did you get your copy of Windows from?

You can also run sfc /scannow in an elevated cmd prompt to test for system integrity.

Hello, and thanks!
At the company where I work, we have some USBs with windows 10 pro, and we install them using digital lincese key (DLA). It's already activated, it doesn't prompt me for a key.
That's all I know about this windows kit.

jimbo45 said:

Hi there

@jonbauer85

I wouldn't trust that source if this sort of thing happens

I hope you didn't get it from one of these types of places :

I'd download a new version from UUPDUMP (100% legit and used regularly by lots of people on these forums) and then enter valid product key / or via update from W7/W8/W8.1 use key from one of those OS'es.

Here's UUPDUMP link. (BTW for HOME editions you will have to get another source but for PRO this is the one to use).

UUP dump

download the script, extract and run it -- iso will be created - now clean install,

Cheers
jimbo

Thank you, jimbo! I don't know where the kit is coming from, but i will try your solution too!

FreeBooter said:

With the built-in UAC elevation component, members of the local Administrators group can easily perform an administrative task by providing approval.

With UAC enabled, Windows 10 prompts for consent or prompts for credentials of a valid local administrator account before starting a program or task that requires a full administrator access token. This prompt ensures that no malicious software can be silently installed.

The consent prompt is presented when a user attempts to perform a task that requires a user's administrative access token. The following is an example of the UAC consent prompt and credential prompt.

I did a clean install, we don't have a company group or something, there is no network administrator. Everyone just installs it on their computer and logs in with his microsoft account.

My basic question is: where is this coming from? I've been using windows for 20 years and this is the first time i ever saw this.

Compumind · 11 Dec 2019

@jonbauer85 -

Welcome to Windows Ten Forums!

Please read...

TrustedInstaller is a genuine Windows process.

It runs under Windows Module Installer service, which is responsible for protecting unauthorized changes being made to .exe, .sys, .dll and other important files. For that reason, users cannot delete or modify certain files, even with Administrator's rights.

Nevertheless, TrustedInstaller, or TrustedInstaller.exe, is often abused by cybercriminals due to its functionality. It can be hijacked, replaced, or corrupted by malware, which can render the computer vulnerable to other severe infections and also compromise its operation by slowing down and crashing installed software. Besides, information tracking by recording keystrokes^[or taking screenshots is likely as well.

In other cases, users are facing an issue with the process, as it prevents them from opening regular files, such as pictures or video clips. While it can also be malware's doing, it can be a simple bug. TrustedInstaller's permission to modify files may be acquired by gaining ownership of them. If you are having any type of problems with the file (like a high CPU usage), it is crucial to make sure it is not affected by a computer virus.

It *must* be scanned if you have any doubts.

Use Malwarebyte's (MBAM) Free and manually scan it with your AV. If the two agree that it is OK, proceed.