I think / hope I am getting a false positive reported on msiexec.exe - I am running a full scan as I type this. How do I verify it is a false positive and that I should let that program execute?
Shortly after powerup of the PC I have received the notice that msiexec.exe is attempting to create a text file and I take Norton's recommended action to Stop this script. Microsoft Update ran and downloaded updates when I shutdown twice earlier this week. I am assuming / hoping Norton is giving a false positive and that the msiexec.exe execution is associated with those installs and they are really Microsoft. Running updates from Microsoft have in the past never triggered a notice from Norton.
How do I verify that I should let that file execute (or not)? Norton AV does not report the file path (only the filename) in the warning popup. I looked in Task Manager and there are three instances of that file listed in Processes - and again I don't know where those files are on the disk. A file of that name is in windows32 directory and the properties for that instance report it was created and last modified years ago - so I assume that instance is Ok!
My virus definitions are up to date (6/9/2010) that is three days ago. I have never had Norton report a virus detection before.
I am running Norton Anti-Virus 2005. I plan to upgrade to Norton Internet Security 2010 this week because my subscription is about to expire.