Microsoft disables the MSIX ms-appinstaller protocol handler to help stop the spread of malware

2 min. read

Published onFebruary 7, 2022

published onFebruary 7, 2022

Share this article

Read our disclosure page to find out how can you help Windows Report sustain the editorial teamRead more

Microsoftrecently announcedthat it has disabled the MSIX ms-appinstaller protocol handler to help stop the spread of viruses and other common threats that target Windows users. The change mainly impacts developers who might list MSIX files on their websites and addresses aWindows vulnerabilityfirst raised by Microsoft in December of 2021.

For those unfamiliar, the MSIX ms-appinstaller protocol handler is a Windows feature that was intended to allow users to install a Windows app without having to download an entire MSIX package. It was in use by many developers so that folks could install an app directly from a web server, but those with bad intent were also using the feature to their advantage. As an example, Microsoftindicatedthe AppX installer was being spoofed to inject malware like Emotet, Trickbot, and Bazaloader.

Microsoft is actively working to address the issue, and the first part of that involves disabling the feature. For a bigger solution down the line, Microsoft is looking into creating a Group Policy so that IT admins can re-enable the protocol and control the usage of it within their organization.

As a workaround in the meantime, users will need to first download these kinds of MSIX apps to their device, and then install the package with App Installer. The one caveat to this, though, is that the download size for packages might be increased. Microsoft also recommends that developers update the link to an application by removing ‘ms-appinstaller:?source=’ so that the MSIX package or App Installer file will be downloaded to an end user’s machine.

Radu Tyrsina

Radu Tyrsina has been a Windows fan ever since he got his first PC, a Pentium III (a monster at that time).

For most of the kids of his age, the Internet was an amazing way to play and communicate with others, but he was deeply impressed by the flow of information and how easily you can find anything on the web.

Prior to founding Windows Report, this particular curiosity about digital content enabled him to grow a number of sites that helped hundreds of millions reach faster the answer they’re looking for.

User forum

0 messages

Sort by:LatestOldestMost Votes

Comment*

Name*

Email*

Commenting as.Not you?

Save information for future comments

Comment

Radu Tyrsina

With KB5043178 to Release Preview Channel, Microsoft advises Windows 11 users to plug in when the battery is low#

Copilot in Outlook will generate personalized themes for you to customize the app#

Microsoft will raise the price of its 365 Suite to include AI capabilities#

Death Stranding Director’s Cut is now Xbox X|S at a huge discount#

Outlook will let users create custom account icons so they can tell their accounts apart easier#

Microsoft disables the MSIX ms-appinstaller protocol handler to help stop the spread of malware#

With KB5043178 to Release Preview Channel, Microsoft advises Windows 11 users to plug in when the battery is low

Copilot in Outlook will generate personalized themes for you to customize the app

Microsoft will raise the price of its 365 Suite to include AI capabilities

Death Stranding Director’s Cut is now Xbox X|S at a huge discount

Outlook will let users create custom account icons so they can tell their accounts apart easier

Microsoft disables the MSIX ms-appinstaller protocol handler to help stop the spread of malware