TrustedInstaller File Location

Karen Midkiff 6 Reputation points
2021-10-20T16:31:40.87+00:00

Writing to confirm proper location of TrustedInstaller -- which has control of the entire system. Using Windows 10 Pro 4-bit. Runs continuously; cannot be shut down even by deleting process tree. Appears to be running as a keystroke logger.

Saw article online that says proper location is C:Windows\servicing, which TrustedInstaller.exe is located

While there is a copy of the file in this location on my machine, the active file TextInputHost.exe (when I click on it and request location from the Task Manager is c:\Windows\SystemApps\MicrosoftWindows.Client.CBS.cw5n1h2txyewy\InputApp

This address is hidden if I just click in through Explorer

Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,747 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Limitless Technology 39,336 Reputation points
    2021-10-21T09:35:57.683+00:00

    Hello,

    TrustedInstaller.exe is located at C:\Windows\servicing\ and its normal startup of this service is set at Manual, and it runs under the Local System Account. It has no dependencies.

    At times you may find that TrustedInstaller.exe has been corrupted, and you may bet an error message to that effect. In such a case running the System File Checker may help. But sometimes even the Windows Resource Protection service, which runs the system file checker is affected. In such a case if you try to run sfc /scannow, you may get the error message – Windows Resource Protection could not start the repair service.
    In such a case you may have to Reset Windows 10.

    What happens if you delete TrustedInstaller?
    If you change TrustedInstaller settings, you put your system at risk and your system may not function properly. It’s not suggested to remove it. However, if you still want to disable it, you can try to disable User Account Control (UAC) which uses the Trusted Installer account.

    It is highly recommended not to delete TrustedInstaller from your computer as long as you want to continue getting the same options and features in the future. Answering the question, yes, you can delete TrustedInstaller.exe, but it will come with some consequences that might damage the system you are using.

    You can disable TrustedInstaller or Windows Modules Installer using the Services, which is included in your Windows 11/10 computer. For that, open the Services panel and double-click on the Windows Modules Installer setting. Choose the Disabled option from the Startup type drop-down list and click the OK button. It will disable the TrustedInstaller service on your computer.

    --If the reply is helpful, please Upvote and Accept as answer--

    1 person found this answer helpful.
  2. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    Comments have been turned off. Learn more