Solution to NSIs error in Windows 7 installation program

I just launched an x200 product yesterday. After the backup, I couldn't wait to change the portal and install the Windows 7 build 7000 test version.

Today, I want to install Kaspersky on it, but there was a problem during the installation. The pop-up box "NSIs error" was displayed, and Google immediately found the result, which was a little scary, therefore, analyze the cause by yourself.

Kaspersky's installation file is the previous kav7 -- Now kav9 is used, and I am still using kav7, outdated ~ It is a compressed file. I directly downloaded it from the sharing of the old machine to the x200 new machine, and decompress it with the decompression function provided by win7. Find the EXE file and click Install. Then the "NSIs error" dialog box is displayed. Well, will it be a problem during decompression in win7?

I will try it out. I will use winrardecompress on the old machine this time, put the installation file in the shared folder, download it to the local machine on x200, install it, and OK.

 

The above is my solution under extremely special circumstances. Below I will post my online search strategy to meet your urgent needs ~

Reference link: http://security.ctocio.com.cn/tips/111/8072611.shtml

Recently, a large number of users have reported that when installing or opening some programsNSIs ErrorThe error message is that the system has an error or is only the cause of the damage to the installation file of the program. However, if it is only the cause of the damage to the program installation file, it is impossible for the files downloaded every time to be damaged, and it is not the case for a program. What is the cause of a system error? After a large number of computer contacts with such failures, I finally understand what this situation is. The following uses two instances to make a detailed analysis of this situation.

  Example 1: infected  Installation File

The netizen said that he always encountered a NSIs error prompt. I want him to install a  security guard to scan it. He said that the device cannot be installed. This prompt also appears during installation. This is strange. So I reminded him to go to the official website to download a clean one for installation. He did it, but he said he still cannot install it. Is there such a magical thing? I don't believe it. I told him to send the file just now to me. After receiving the scan, There is no virus. So the installation, good guy. The same NSIs error prompt box will pop up immediately upon installation, and several viruses have been detected by the Phil alarm. As a result, these files were immediately infected with virus as soon as they were downloaded.

As a result, the attacker finds that there is a virus path avp.exe, and the file avp.exe is also under the C drive. Note: The process of the Alibaba software kabbaseline is also called avp.exe. Note the difference. The avp.exe path of the virus is located under the c: \, that is, the root directory of the C drive.

  Example 2: The avp.exe‑winsys.exe Virus File is displayed on the C drive.

The virus scanning and removal process with the error message "NSIs error" is similar. When you access the C drive, you can find that the C drive has two more virus files, avp.exeand +winsys.exe. However, this computer is infected with more virus files than the previous ones.

  Virus behavior analysis, in order

1--avp.exe after running, first run the application (EXPLORER. EXE)

2--modify its memory (iexplore.exe)

3--create a virus file by iexplore.exe: C: \ Program Files \ ver.txt

4--ver.txt: c: \ windows \ system32 \ wincom.exe

5--wincom.exeinstall the service principal driver (call services.exe)

6--wincom.exe: C: \ winsys.exe + c: \ winsys. inf + c: \ winsys. sys

7--wincom.exe run the application winsys.exe

8--winsys.exe copy the file to c: \ windows \ system32 \ drivers \ winsys. sys

9--call services.exe to install the service or driver winsys. sys

10 -- c: \ winsys.exe modify and delete the Registry to create

11--wincom.exe delete the file c: \ winsys.exe + winsys. inf + winsys. sys

12--iexplore.exe create the file c: \ ver.txt

Anti-Virus Method

Avp.exeand wincom.exe are killed, and the following files are deleted (if any ):

C: \ windows \ system32 \ wincom.exe
C: \ Program Files \ ver.txt
C: \ windows \ system32 \ drivers \ winsys. sys
C: \ winsys.exe
C: \ winsys. inf
C: \ winsys. sys
C: \ ver.txt
C: \ avp.exe

Then we can use anti-virus software for Comprehensive scanning.