What Is Windows Modules Installer? Is It Safe to Disable at Startup?
Windows Modules Installer is a core Windows service used for updates and optional features. It is safe when genuine and should not be disabled.
- Verdict
- Keep runningIt is a core Windows component that installs, modifies and removes updates and optional system features.
- File name
- trustedinstaller.exe
- Publisher
- Microsoft Corporation
- Platforms
- Windows
- Reviewed
What Is Windows Modules Installer?
Windows Modules Installer is a built-in Windows service that handles installing, changing and removing Windows updates and optional components. Its executable is trustedinstaller.exe, and the service is commonly associated with TrustedInstaller.
Windows uses it when applying cumulative updates, enabling or removing optional features, and servicing protected system files. You may also notice related activity from the Windows Update service or the Component-Based Servicing stack while it runs.
Is It Safe?
Yes, if it is the genuine Microsoft file. trustedinstaller.exe is a normal part of Windows and must stay available for updates and system maintenance.
Because malware can use system-looking names, check the file location if you are unsure. The real file should be in C:\Windows\servicing\TrustedInstaller.exe. In Task Manager, you can right-click the process, open its file location, and check its Properties for a Microsoft digital signature.
If you find a similarly named file in another folder, or it has no valid Microsoft signature, treat that as suspicious and investigate it.
Should I Disable It at Startup?
No. This is not a normal startup app you manage from the Startup folder or Run keys. It is a protected Windows service that starts when Windows needs it.
Disabling it can break Windows Update, optional feature installs, repairs and some servicing tasks. On many systems, Windows also blocks or resists changes to it because it is critical.
If you are seeing it in a process list, that does not mean it is a startup item you should turn off. Leave it enabled.
Why Is It Using High CPU or Memory?
High CPU, disk or memory use usually means Windows is installing updates, cleaning up old update components, or enabling or removing a feature. This can happen after Patch Tuesday, after a major update, or after running repair tools.
In most cases, the best fix is to let it finish and restart the PC if Windows asks. If usage stays high for a long time, check Windows Update for a stuck update, make sure the PC has enough free disk space, and look for repeated update failures in Windows Update history.
Avoid force-ending the process unless you are troubleshooting a clear hang and understand the risk. Interrupting servicing can leave updates half-applied.
How to Disable or Remove It
You generally should not disable or remove Windows Modules Installer. It is part of Windows.
If your goal is to reduce update-related activity, use Windows Update settings to choose when updates install, pause updates temporarily if your edition supports it, or schedule restarts for a better time. If the service seems broken, use supported repair steps such as System File Checker and DISM rather than trying to remove TrustedInstaller.
Where Kudu Helps
Kudu can help you confirm that this is not a startup app you should disable. In Startup Manager, you can review actual startup entries and ignore core Windows servicing components that do not belong there.
If trustedinstaller.exe seems suspicious, Kudu's Malware Scanner can help check for persistence tricks and suspicious files. If Windows servicing is failing, Kudu's Disk Repair guides you through SFC and DISM, and Performance Monitor can show whether CPU, memory or disk use is coming from TrustedInstaller or another process.
Frequently asked questions
- Is TrustedInstaller a virus?
- No, the real TrustedInstaller is a legitimate Microsoft component. Investigate it only if the file is outside `C:\\Windows\\servicing\\TrustedInstaller.exe` or lacks a valid Microsoft signature.
- Why does Windows Modules Installer use so much disk or CPU?
- Usually because Windows is installing updates or servicing system components. This is often temporary and should drop after the update finishes and the PC restarts.
- Can I end TrustedInstaller in Task Manager?
- You usually should not. Force-ending it can interrupt Windows servicing and may cause update or repair problems.

See every app that starts with your computer
Kudu’s Startup Manager lists Run keys, Startup folder entries, scheduled tasks, Launch Agents, and XDG autostart items in one place. On Windows it also shows each item’s boot time impact.
Download Kudu Free →