Antivirus Program Pastel

Good day Everyone,

I found some information on my Antivirus program that says that I have Suspected Trojans on my Server and then I went to have a look and found that following says it is a Virus.

C:\Windows\Installer\1d045c46.msi\(Embedded CAB)\pastel_payroll___malawi.msi\(Embedded CAB)\_0101D72CE16AC359763E583AA9B52A47\xl/vbaProject.bin

C:\Windows\Installer\1d045c46.msi\(Embedded CAB)\pastel_payroll___swaziland.m\(Embedded CAB)\_865670AFAC8AB2F78B871A45BC31F470\xl/vbaProject.bin

C:\Windows\Installer\1d045c46.msi\(Embedded CAB)\pastel_payroll___swaziland.m\(Embedded CAB)\_18001316AB303BA37D18130948E695C4\xl/vbaProject.bin

There is also so a C:\ProgramData\Sage Installations that my Anti Virus picks up that there is Trojans in regarding the SAGE MSI files 

Is there any information regarding this? Can I delete this files or is Windows using them? 

Thank you. 

  • 0

    Good Morning Jacobus

    Thank you for your post 

    Kindly advise which anti-virus you are currently running , because we have identify McAfee as the one anti-virus that blocks or quarantine Microsoft Installers even though they are not Trojans or harmful software. 

    Our developers would appreciate any information related to the anti-virus, version, OS system that your are running and would advise that you don't delete any of the files..

    Kind Regards

    Siphiwe .

  • 0 in reply to Siphiwe

    I am using team viewer endpoint protection on Windows Server 2019 and Windows 10 Pro on these two OS versions it picks up all the Trojans or harmful software from SAGE Pastel. It is only the SAGE .msi Installation files that says it is  harmful software it did not block or quarantine the files but I deleted the C:\ProgramData\Sage Installations .msi files.

    malawi.msi

    swaziland.msi

    Endpoint Protection