This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Windows Defender has detected the msiexec.exe in SYSWOW64 folder as a virus. I followed the procedure to remove it from the computer, but because it's gone, the computer cannot complete installation process anymore. I submitted it to Microsoft Security Intelligence, thinking that it might have nabbed a valid software by mistake, and the analysis says that it actually is a malware.
I rescanned my computer over and over, and it all came out clean except for this.
Suppose it's a legitimate Windows service that got infected by virus, what should I do? If I remove it, it would make the installer malfunction.
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
The System File Checker (sfc /scannow) command should be able to restore the file.
Alternatively, the latest version of msiexec.exe (x86), version 5.0.22621.1 for Windows 11 22H2, can be downloaded from this Microsoft link.
Right-click on the link and choose "Save link as" in your browser.
Name the file msiexec.exe.
Copy it to Windows\Syswow64.
Why do 64-bit DLLs go to System32 and 32-bit DLLs to SysWoW64 on 64-bit Windows?
Oh wow, so the numbers are actually reversed. That's so weird.
On a Windows x64 system:
SysWOW64 should contain the 32-bit modules.
System32 stores the 64-bit modules.
Since it's in the SYSWOW64 folder, should it be the 64bit one?
I can't tell the difference between syswow64 and system32
