Should You Install Software Using .EXE or .MSI ?

Поделиться
HTML-код
  • Опубликовано: 26 ноя 2024

Комментарии • 1 тыс.

  • @darranrowe174
    @darranrowe174 2 года назад +751

    I have to point out that Windows Installer (.msi) files aren't safer than executable installers.
    Windows installer files can define custom actions. These custom actions allow executing executable files or loading dynamic libraries to execute code.
    Currently, the safest Windows installation technology is the appx/msix packaging stuff because this doesn't allow custom actions.

    • @Z3rgatul
      @Z3rgatul 2 года назад +66

      But msix/appx can still install exe with virus

    • @Mitsou44
      @Mitsou44 2 года назад +4

      Thanx for thr comment. I just wondered if msi files are maybe safer. Turns out it's not.

    • @darranrowe174
      @darranrowe174 2 года назад +64

      @@Z3rgatul Yup, that is always a problem.
      There are other protections in place to limit this, but remember that "current safest" doesn't mean completely free of risk.

    • @llothar68
      @llothar68 2 года назад +3

      But you need custom actions for a lot of things. Registering global services for example. And appx is too restricted, you can't used it for example if you have a native webbrowser extension component.

    • @llothar68
      @llothar68 2 года назад +7

      @@Z3rgatul No. appx runs in a sandbox. Don't use virus if the app itself is the virus. Then this terminology does not make sense.

  • @MonochromeWench
    @MonochromeWench 2 года назад +900

    Many exe insatallers are just the Msi wrapped in an exe that extracts the msi and runs windows installer. This is largely a holdover from old versions of Windows, the exe wrapper will install an updated version of the Windows Installer if needed before installing the msi. Modern versions of Windows already have the latest installer version (kept updated by Windows update) so they don't need manual updates. In these cases the msi is a better choice cause it is typically a smaller download (in the age of dialup this was a big advantage). Exe installers are most likely offered these days just for people unsure about MSI files even though they have been around for more than 20 years

    • @VreyIsGrey
      @VreyIsGrey 2 года назад +8

      Yeah MSI's are just better in every way.

    • @babatundebabatunde4946
      @babatundebabatunde4946 2 года назад +1

      The internet exe u the reason msi

    • @babatundebabatunde4946
      @babatundebabatunde4946 2 года назад

      I play the whole series on the

    • @Semmelein
      @Semmelein 2 года назад

      Thanks! I also wanted to point that out. 👍

    • @llothar68
      @llothar68 2 года назад +2

      There are still a few things hard to do with MSI installer.

  • @NikitaKaramov
    @NikitaKaramov 2 года назад +666

    The best profit of this standardization comes from the fact, that MSI installers (especially in minimal/quiet mode) are physically unable to show ads or in any other way annoy me during the installation (or even worse, during the uninstallation). Just msiexec /q and done; such a relief!

    • @I.____.....__...__
      @I.____.....__...__ 2 года назад +42

      EXE installers can also include a quiet-mode, but that requires the installer vendor to specifically support it, as Nikita said, it's a standard feature of the MSI format. That's part of why it's used to install patches and such as part of custom OS installations like with nLite.

    • @kfftfuftur
      @kfftfuftur 2 года назад +20

      Well they might as well include ads in the installed program . . .

    • @tacokoneko
      @tacokoneko 2 года назад +6

      I guess it makes me realize that Linux actually has over a hundred installer formats, and that's why there are so many distributions, that is a very fragmented ecosystem

    • @meta7517
      @meta7517 2 года назад +10

      They actually could include ads, because you can have custom actions in an MSI, which is just code that will be executed at a fixed point of installation.
      This is also the reason, why it is definitely possible, that a MSI can be a virus in itself.
      Although, both is very uncommon.

    • @HenryTitor
      @HenryTitor 2 года назад +2

      @@tacokoneko theres like 3 formats total and they are just zip files in different names. And the only difference between them are the philosophy of where the files should be in folder location, so a different format most of the time doesnt even affects the software just the config file location and if the binary is available if you have local network at home

  • @jorjorwell123
    @jorjorwell123 2 года назад +698

    msi files are amazing when you’re deploying to a fleet of computers + installation flags are there as well

    • @I.____.....__...__
      @I.____.....__...__ 2 года назад +12

      That's why they're used for custom OS installations like with nLite.

    • @tyreselongbottom6170
      @tyreselongbottom6170 2 года назад +1

      @@I.____.....__...__ False.

    • @frostech3149
      @frostech3149 2 года назад +38

      @@tyreselongbottom6170 care to elaborate?

    • @107bande
      @107bande 2 года назад +4

      @@tyreselongbottom6170 so you say it ist wrong but dont say what IS right 🤦🤦

    • @ImHeadshotSniper
      @ImHeadshotSniper 2 года назад

      @@107bande True.

  • @IZeoClass
    @IZeoClass 2 года назад +370

    The "Person Break Computer" video was top notch. Loved it while ThioJoe was explaining in a reasonable way his stuff.

    • @KatyaAbc575
      @KatyaAbc575 2 года назад +10

      Videos of people breaking their computer hardware always hurt my heart quite alot. I dont know why.

    • @Sir_Ninonino
      @Sir_Ninonino 2 года назад +8

      @@KatyaAbc575 I feel you, hardware gore not nice :(

    • @Cyba_IT
      @Cyba_IT 2 года назад +9

      Certainly have to have a good range of acting abilities if you're a stock video actor.

    • @pjp_renaissance
      @pjp_renaissance 2 года назад +9

      @@KatyaAbc575 take a deep breath and feel better knowing that laptop was an empty chasis. The lightness of it and amount for flex would seem to indicate it at least

    • @darktrexcz
      @darktrexcz 2 года назад +2

      I was laughing my ass off when that stock video came on.

  • @IKEELUFIRST
    @IKEELUFIRST 2 года назад +135

    This channel has come such a long way-I remember his early videos being computer prank videos, and here he is explaining different installer properties 😂 we’ve matured together ThioJoe

    • @LoFi3
      @LoFi3 2 года назад +6

      It’s one reason why I don’t watch his videos cause I just see him as the tech prankster. I remember his video about taping batteries to your Ethernet cable to make it faster.

    • @uxdecipher1724
      @uxdecipher1724 2 года назад +2

      @@LoFi3 or how to download RAM LOL

    • @mellenooijen243
      @mellenooijen243 2 года назад

      @@LoFi3 Exactly, I sometimes refrain from watching a video because I still take everything he says with a grain of salt, but his recent videos have certainly improved in quality and educational value!

    • @wojtekpolska1013
      @wojtekpolska1013 2 года назад +5

      @@mellenooijen243 he gave up on the tech jokes a long time ago now

    • @darktrexcz
      @darktrexcz 2 года назад +1

      yeah i was shocked when he actually started making educational videos instead of pranking people. made me actually subscribe and hit bell, cuz he usually has rather interesting things i didnt know as a topic now.

  • @DexieTheSheep
    @DexieTheSheep 2 года назад +175

    I love seeing an MSI as a setup file, since it basically guarantees that I won't have to worry about any clunky custom-made non-native UIs that usually lag and aren't able to be dragged around n stuff. MSI files always install in one uniform way that feels comfortable because it fits in with the rest of the OS.
    Edit: Read the replies for more info, pretty cool stuff

    • @RationalFunction
      @RationalFunction 2 года назад +1

      Yep.

    • @serpent77
      @serpent77 2 года назад +34

      This is not necessarily the case. MSI allows for custom UI dialogs, and even a complete replacement of the UI engine by embedding the resources to run it within the MSI. Microsoft has been doing this for years with Office, SQL, Visual Studio, etc.

    • @DexieTheSheep
      @DexieTheSheep 2 года назад +13

      @@serpent77 Interesting. Never seen those before. Still, though, for the majority of MSI installers it shows that native-looking dialog box, so... :P

    • @toby9999
      @toby9999 2 года назад +10

      @@DexieTheSheep I develop Windows MSI installers. You can basically put anything in them. Call custom DLLs with custom UIs, custom C++ coded features in embedded DLL's etc. I guess conditional on the Installer development software being used and how it's all packaged.

    • @getsideways7257
      @getsideways7257 2 года назад +12

      @@toby9999 Please don't give people ideas :)

  • @windowsfan95
    @windowsfan95 2 года назад +92

    One application that is a very good example of having a difference in the exe and the msi is Zoom. The exe only installs for the currently logged on user, while the msi installs the application for all users. So if you are going install zoom on a computer that has several user or are connected to a domain you will have use the msi, otherwise only the one installing the program will be able to use it.

    • @RDCST
      @RDCST 2 года назад

      If the non installer user create a shortcut to the installed exe can launch the app too?

    • @RaymondHng
      @RaymondHng 2 года назад +4

      @@RDCST An MSI package will install the software on *C:\Program Files* or *C:\Program Files (x86)* which is accessible by all users. An EXE program may install the software only in *C:\Users\[user name]* especially if the user does not not have administrative rights on the computer. The *C:\Users\[user name]* folder is accessible only to the user. A different user will have a different *C:\Users\[user name]* folder.

    • @zqzj
      @zqzj 2 года назад +4

      @@RaymondHng incorrect. Run an exe with elevated privileges and it will install for all users.

    • @JohanNyberg77
      @JohanNyberg77 2 года назад +8

      @@zqzj incorrect, if you run a EXE as a privilege process it still depends on how the EXE file is designed to behave. If it's designed to only install in the user profile then it will always do so no matter what privilege you give it.
      The same goes with MSI files, they can be designed to either install with user privilege or system privilege (i.e. UAC asking you to give permission for higher privilege).
      And as someone said earlier most EXE installers are just wrapped MSI files.

  • @erlendse
    @erlendse 2 года назад +58

    Two more points:
    MSI is managed, I have had cases where trying to start a program actually starts repairs; then finally starts it (Seen somewhere in the XP - 7 era)
    MSI have some install "on demand" feature, but I have not looked more into it.

    • @micro2743
      @micro2743 2 года назад +2

      But then windows has to keep a copy of the .msi file on your computer somewhere to install the "on demand" feature, unless the .msi is on a network drive this is going to take up even more space on your local machine.

    • @soundspark
      @soundspark 6 месяцев назад

      I've had that happen in Windows 11; that functionality is still there.

  • @FoxyDrew
    @FoxyDrew Год назад +15

    This guys fire at turning an answer to a simple question, into an EXACTLY 10 minute video, lol.

    • @le_travie7724
      @le_travie7724 6 месяцев назад +1

      answered in first 2 or 3 mins. The rest is additional information

  • @Royan1900
    @Royan1900 2 года назад +82

    Didn't even know about this, interesting topic, I'll be choosing MSI when given the choice, thanks!

  • @TheBuckalicious1
    @TheBuckalicious1 2 года назад +17

    MSI files also allow for the use of MST (Microsoft Transform) files. MST files allow for configuration of different deployments of of the MSI. Examples include specifying different installation directories, adding files to be included/copied in the install, and specifying installation information required at installation, such as User Name, Organization Name, and/or software key.

    • @syscruncher
      @syscruncher 6 месяцев назад +1

      Transforms don’t get nearly as much love as they deserve.
      Nothing like cracking open an msi using orca and tinkering to your heart’s content.
      Also great for those deployments where different business units will get different installs of the same software…just attach an mst for each.

  • @MarkWhich
    @MarkWhich 2 года назад +34

    Sometimes you can get a choice between EXE, MSI, or ZIP, which you have extract it yourself to a folder of your own choice (Self-install), safest option, you not executing anything, until you run the actual program of course, and hopefully you obtained that program data through a trusted source. Always use a sandbox when in doubt also.

    • @CrossUnity
      @CrossUnity 2 года назад +1

      MSIX packaging is saffer and easier to install

    • @destiny_02
      @destiny_02 6 месяцев назад

      gets zip bombed

  • @RationalFunction
    @RationalFunction 2 года назад +73

    Another advantage for regular users AND enterprises is that MSIs are ALWAYS consistent with windows ui and ux. EXEs might contain crap GUIs

    • @serpent77
      @serpent77 2 года назад +17

      MSI can embed alternate UIs that are still odd, or outright crap.

    • @mazessj
      @mazessj 2 года назад +2

      Never underestimate the ability of a developer to f something up, even something as standardized as MSI. There's still a lot one can mess up. So, yes, it is possible to have a crappy UX/UI in an MSI, particularly when Custom Actions are involved, and especially when you have somebody inexperienced developing the package.

    • @dexterhaxxor
      @dexterhaxxor 2 года назад +1

      A lot of MSI files are made to just run an EXE which installs it.

    • @RationalFunction
      @RationalFunction 2 года назад

      @@dexterhaxxor other way round bud

    • @dexterhaxxor
      @dexterhaxxor 2 года назад +2

      @@RationalFunction Nope, go check out Inno Setup’s documentation

  • @bufordmaddogtannen
    @bufordmaddogtannen 2 года назад +24

    The msi installer doesn't necessarily create an uninstall script. Most of the time a copy of the msi installer is copied in the system often sucking space (think about 500MB for vmware workstation and a few hundreds MB for assorted drivers and utilities).
    If you delete those, you will not be able to uninstall or even upgrade a piece of software as windows will look for a previous installer.

    • @Hudee1985
      @Hudee1985 2 года назад +7

      And this is probably the biggest downside of MSI. It copies itself mostly to ":/Windows/Installer" folder. On my PC currently LibreOffice's "junk file" is the largest in this folder, with it's 300MB.

    • @bufordmaddogtannen
      @bufordmaddogtannen 2 года назад +5

      @@Hudee1985 the sad fact is that the majority of the software could be distributed in a zip file.
      I have a folder called "programs" that contains several subfolders, each one is a program that was copied over from c:\program files sometimes ago (I have software that is 10+ years old in there). This software works fine with the existing libraries, so whenever I reinstall Windows, or I buy a new PC, all I have to do is to just copy the folder over and call it a day.
      There are also other offenders like Dropbox that waste 900MB at the first install, as they store the currently installed version, and two copies of the same installer.

    • @at_oussama
      @at_oussama 2 года назад

      This is true.
      also safe to mention that viruses sometimes can attack MSI files, especially on the Windows Restore folder (MSI advantage is that they always create restoration points in case something goes wrong) so viruses take advantage of that and stick themselves to the MSI files backed up to the C drive for uninstalling

  • @Decommissioned
    @Decommissioned 2 года назад +17

    Your videos are really informative, thank you!

  • @mattu104
    @mattu104 6 месяцев назад +8

    I feel that .msi instead of standing for "Microsoft (MS) Installer (I)" it should be "Microsoft (M) Software (S) Installer (I)" because it makes more sense.

  • @SilverAura
    @SilverAura 2 года назад +9

    9:35 I can tell you that as someone who thought they were pretty well caught up on their tech... you humbled the hell out of me. This is actually really incredible info to know for those outside of it. Best part is you had me thinking from the title to the end.

  • @dura2k
    @dura2k 2 года назад +10

    The problem with msi installer is often, that you *need* that specific msi file to uninstall (even for upgrading) the program.
    One of the best examples is LibreOffice - If you don't want the huge installer file always sitting there, you can't uninstall or even upgrade the program!
    (And there are multiple examples as malware in a msi)

    • @zqzj
      @zqzj 2 года назад +1

      Exactly why I avoid MSI installers like the plague.

    • @mazessj
      @mazessj 2 года назад

      It needs the MSI file to know how to uninstall. It's by design. Shame on any vendors or users who don't preserve a cached copy of the MSI after installing. At least don't delete anything from the Windows\Installer folder.

    • @emironurlular
      @emironurlular 2 года назад +1

      This. I need to delete the installer file sometimes (especially if it's big) to save some space on my SSD. I deleted some of the MSI files and when I try to uninstall the programs, I get an error stating that MSI file couldn't be found. So I had to delete the program files manually, which was not the best idea I think

    • @mazessj
      @mazessj 2 года назад

      @@emironurlular Without the MSI, Windows doesn't have what it needs to uninstall the program. Consider getting a bigger drive instead of deleting. If not possible, then at least store a copy of the MSI on a backup drive (e.g. a thumb drive) dedicated to offloading system drive files so you can point to it if Windows Installer prompts for it.

    • @cmyk8964
      @cmyk8964 Год назад

      @@mazessj Would be even better if installing an MSI caused Windows to keep a secret copy of the MSI in case the user needs to uninstall.

  • @baddealrage
    @baddealrage 2 года назад +10

    Package deployment is art.. EXE,MSI,APPX,MSIX 100% depend if you can manage and fullfill this install silently. I tend to prefert msi for apps that support patches (msp) and tranforms (msp), so there is less downtime during maintenances.
    As enduser msi is fine since since you will probably upgrade the app often. As enterprise, depend of the app and insall features needed per app. I have seen broken installers as .exe and also broken .msi and trust me msi ones are hard to troubleshoot.

    • @patboy24
      @patboy24 6 месяцев назад

      so for enterprise which one do you prefer between exe and msi?

    • @baddealrage
      @baddealrage 6 месяцев назад

      @@patboy24 I select the one that offer me the most management options for the particular app. Most of the time is MSI. Depend of the app.

  • @JV-pu8kx
    @JV-pu8kx 2 года назад +10

    The "downloader installers?" Despise them with a passion! Now, I get that they are making sure that every time the installer is run the latest version of the software is installed. However, when I download software, I expect to download software! It's like buying a car and only getting the body! The rest of it comes later! What if I did not want the latest version? What if I'm trying to resurrect an antique, that the latest will not run on?
    I also despise the self-deleting installers, as well.

  • @ProjectPhysX
    @ProjectPhysX 2 года назад +9

    Thanks for educating me!
    If possible, I prefer standalone executables most. They are selfcontained and don't need any installation directory. Makes it easy to move programs around different hard drives or computers.

    • @mazessj
      @mazessj 2 года назад +1

      These are referred to as "portable apps" and it's up to the developer to design the program to be capable of this. I wish more programs were designed to be portable.

    • @dnkmmr69420
      @dnkmmr69420 6 месяцев назад

      I like those as well except on linux, they are app images.

  • @HellDuke-
    @HellDuke- Год назад +4

    It's also very common for .exe files to actually just contain the .msi itself along with extra stuff and it is just a self extracting installer.

  • @KrystalDal
    @KrystalDal 2 года назад +2

    after browsing through so many channels. Yours is by far the best. The explaining thod is so great and detailed even complex stuff is

  • @DanielPlayz1234-c1d
    @DanielPlayz1234-c1d 7 месяцев назад +618

    My PC is made by msi 💀💀

    • @KerimcanYagci
      @KerimcanYagci 6 месяцев назад +159

      Smartest person on earth

    • @cryfry2
      @cryfry2 6 месяцев назад +52

      MSI or .msi? Lol

    • @1612akshat
      @1612akshat 6 месяцев назад +72

      You should probably stick to .msi files otherwise you'll break your system!

    • @Neto.nxr4ed
      @Neto.nxr4ed 6 месяцев назад +6

      ​@@1612akshat
      Have you even seen the video? 💀

    • @chapeloflights
      @chapeloflights 6 месяцев назад +46

      ​@@Neto.nxr4ed whooshed right over your head 💨

  • @jonnyrose1288
    @jonnyrose1288 Год назад +1

    Thank you for this. Im in a program that briefly talked about MSI and EXE but I was a bit lost as I felt they were not covering a lot. this helped me better understand it. thanks!

  • @srd65
    @srd65 2 года назад +6

    thought it stood for "micro-star international" for a second

    • @BabyDino14
      @BabyDino14 7 месяцев назад +1

      same but msi files aren’t companies though

  • @bakkominator4308
    @bakkominator4308 2 года назад +1

    It’s so grate actually getting useful tech knowledge from RUclips. I’m tired of all that super interesting stuff that I’ll never get to use in the real world.

  • @kristoffseisler2163
    @kristoffseisler2163 2 года назад +41

    You should totally install master sonic install (MSI) because its so much faster than excrement everlasting (EXE) installation

  • @bsforyt727
    @bsforyt727 2 года назад +2

    5:35 Thiojoe: MSI Malware is very rare
    Meanwhile, Magniber, STRRAT, Adwind, Ghostrat, Younglotus, and Farfli Rat: It's our time to shine.

  • @serpent77
    @serpent77 2 года назад +7

    Just an FYI, often times an EXE installer is just a wrapper, called a boot strapper, containing the MSI. Often times the benefit to doing this is to install pre-requisite installations (like a specific .NET version) that the MSI format doesn't directly allow for.
    SOURCE: a guy who has to make these installers from time-to-time.

  • @ImHeadshotSniper
    @ImHeadshotSniper 2 года назад +1

    one thing i always consider before clicking on one of Thios videos is, "Will this help make my ethernet speeds 10x faster for free?", and the answer is yes. always yes.

  • @EwanMarshall
    @EwanMarshall 2 года назад +11

    MSI has technically been replaced by appx/msix now, but those block some actions making the install safer but not as flexible as an MSI is. MSI is not safer than an executable as it does allow arbitraty code to run in the instalation.

  • @onhazrat
    @onhazrat Год назад +2

    🎯 Key Takeaways for quick navigation:
    00:00 📦 Windows software installations can use either .exe or .msi files.
    00:50 🧩 .exe files are executables, while .msi files are Microsoft installers with standardized installation instructions.
    02:41 🏡 For personal use, .exe or .msi doesn't make a significant difference, but .msi is recommended for enterprise or IT administrators.
    04:33 🔄 .msi files automatically create uninstall scripts for easier program removal.
    05:54 🦠 .msi files are less likely to contain viruses compared to .exe files.
    07:17 🔄 If given the choice, it's advisable to use .msi files for installation, especially for enterprise purposes.
    09:40 📥 Finding .msi versions might require specific searches or visiting enterprise-focused pages for certain software.
    Made with HARPA AI

  • @VictorGamerLOL
    @VictorGamerLOL 2 года назад +13

    Exe has one giant advantage tho. On the same computer, only 1 msi can install at a time. However, you can install as many exes as you want at the same time.

    • @dorktales254
      @dorktales254 2 года назад

      Most installers check for a previous installation

    • @CaptainApathetic
      @CaptainApathetic 2 года назад

      Windows restricting installation to 1 at a time is the dumbest shit. What use does this shit have? Ig it doesn't help windows is designed the asinine way of not being able to access files in use by other programs.

    • @serpent77
      @serpent77 2 года назад

      EXE can use things like semaphore to restrict multiple installations as well. MSI restricts multiple installations at once because it is technically a state machine that examines your computer, determines how to get to the installed state. Then makes it happen. If multiple installs occur at the same time you run the risk of changing the state one install is depending on by a second install.

    • @mazessj
      @mazessj 2 года назад

      It's mainly to avoid conflicts and collisions. In theory, maybe Microsoft could have developed an engine that could manage transactions from multiple packages running simultaneously, but they'd have to do away with certain things like Custom Actions and anything that could circumvent conflict management.

    • @mazessj
      @mazessj 2 года назад

      And being able to run multiple EXE installers at the same time is not necessarily a good thing because there's no conflict management. Granted, you might be installing two completely unrelated things, but Windows has no way to know that.

  • @MenoLi-u4z
    @MenoLi-u4z 2 года назад +1

    great video! im super amazed of this quality of videos being your first one, keep going and youll make it far! :D

  • @mihiguy
    @mihiguy 2 года назад +17

    For the record, Metasploit has an option to wrap a payload into a MSI file so that it is executed as "postinstall script" when the MSI is installed. This helps bypass some security products that look closely at EXE files but only loosely at MSI files. So while most viruses nowadays are not distributed as MSI (and lot of them not as EXE either), they do exist.

    • @GoldenretriverYT
      @GoldenretriverYT 2 года назад +1

      Yeah I think its kinda stupid to say its unlikely a virus. Its just as likely to be a virus, the installed app could also be a virus, and you can probably automatically start it after installation

    • @zqzj
      @zqzj 2 года назад

      Lol what security products are you using??

  • @metinhesenov
    @metinhesenov 2 года назад +2

    Uninstalling an app that installed by msi is sooo convenient that it is alone a reason for me to use it. You can directly uninstall it from windows search/start menu but for exe, you have to uninstall it from control panel, and it usually gives the error as the app is still running. Even you thought you killed every process from task manager you still can't uninstall it...

  • @makhauser42
    @makhauser42 2 года назад +5

    A lot of .exe installers have the installation parameters included, and you can either use the favorite search engine, or try with something like installer.exe /? from the command line. Sometimes non-standard switches are included in help. Usually, developers try to keep it similar to MSI packages, so the /q might actually work.
    Fun (terms and conditions apply) fact: Firefox MSI installer, when distributed through the Endpoint Manager (Intune), is not detected as installed by default, but works flawlessly if you create the .intunewin package (specific package that can consist all the required files, if you need more like the config files or something else) with the same install logic. When you install the .msi application, it gets the unique code, where the information is written about the developer and the version/build, so it's easy to detect the vulnerable outdated version of the application. And is also easy to get rid of the outdated JRE, just push the msiexec /x with the product code followed by /qn - and live happily after.
    Yeah, for the regular use is indeed better to use .msi if there is a choice.
    P.S. Kudos to Mark Russinovich for PSTools, what a Man!

    • @bniedermann
      @bniedermann 2 года назад +1

      The Firefox MSI Installer is just the EXE Installer wrapped in a MSI file. I recommend using the EXE.

    • @makhauser42
      @makhauser42 2 года назад

      @@bniedermann, it still works fine with the MSI in the Intune package, but is probably a good idea to test with the exe-file, too. In general, I am lazy, and when you package the MSI, Microsoft is very kind to put the (un)install comnands automatically, so you don't have to. In the end, it works, and is the final goal.

    • @mazessj
      @mazessj 2 года назад +1

      I could also argue that a number of EXE installers do not include standard command line parameters or documentation of said parameters or support for any parameters at all. These are the types of installers we dread in IT Endpoint Management.
      MSI is at least very consistent and supports silent installation nearly every time (as long as the developer doesn't defy standards compliance).

    • @makhauser42
      @makhauser42 2 года назад

      @@mazessj, indeed. There are "standard", not that much, not at all, and there is Java. Fucking Java

  • @I.____.....__...__
    @I.____.....__...__ 2 года назад +2

    MSI files are basically just glorified CAB files, they're basically just ZIP files with some built-in instructions on where to extract the files, add some stuff to the registry, install services, make shortcuts, and such. The biggest benefit to MSI over EXE is that you can extract the contents of the installer and run it like a "portable" program a lot easier with an MSI than an with EXE. With an MSI, you can either directly extract it, or can do a "network install" with the /A switch which merely extracts the contents but doesn't add registry entries or services, make shortcuts, etc. With an EXE file, it might be possible to extract it if it's a ZIP, RAR, 7Z SFX (self-extracting executable), or you might need a tool or 7-zip plugin if it's a Wise, Inno, Installshield, NSIS, etc. file. (Note, in either case, simply extracting the contents instead of installing does work for most programs, but some do _require_ being installed because they need services or registry-entries or whatever in order to run, they _can't_ be run portable.)

    • @stevenlace7902
      @stevenlace7902 2 года назад

      Yes, registry enties and PATH updates. The script in the msi can also create / delete folders. And execute programs that are part of the payload. The program was needed to accomplish tasks the installation script was unable to perform.

  • @chiyolate
    @chiyolate 2 года назад +3

    I'm glad that my motherboard is an MSI, not EXE.

  • @puerlatinophilus3037
    @puerlatinophilus3037 6 месяцев назад +1

    1:28 Wrong/misleading/requires correction. One can still execute code using so-called Custom Actions. They call a .dll file that the developer embeds, which contains an entry point to their code and passes parameters about the installation. This can be necessary for manipulating .config files based on install flags and parameters.
    Source: I use it at work.

  • @cursorguy
    @cursorguy 2 года назад +13

    I’m assuming some people use .msi files for malware purposes since when you try to run a .msi file Windows (or maybe Firefox, I haven’t tried on any other browser) will give you a warning about the possibility of it containing a virus. No matter where you download it from

    • @just.nobody
      @just.nobody 2 года назад +1

      Isn't it the other way around?

    • @cursorguy
      @cursorguy 2 года назад +2

      @@just.nobody not for me

    • @just.nobody
      @just.nobody 2 года назад +1

      @@cursorguy Since I was a kid I've always seen exe files giving potential virus warnings. I've only seen few .msi files with those warnings.

    • @cursorguy
      @cursorguy 2 года назад +1

      @@just.nobody must be a Firefox only thing then

    • @muizzsiddique
      @muizzsiddique 2 года назад +1

      If you *run* anything after downloading Windows will give you a warning.

  • @dampfwatze
    @dampfwatze Год назад +1

    5:34 It is actually possible to run an exe from an msi as part of the installation process. I used this once to automatically uninstall an old version of a software, that wasn't compatible with the new installer system. So if someone wants to distribute a virus via a msi, this is possible.

  • @toughtntman37doesanimations
    @toughtntman37doesanimations 2 года назад +4

    .MSI files don't uninstall programs, rather they _de_-install them.

  • @felipef1nn40
    @felipef1nn40 2 года назад +2

    I rarely see MSI, only seen in chrome desktop remote... But it makes more sense to choose MSI if possible...

  • @irishbruse
    @irishbruse 2 года назад +6

    Using Chocolatey makes all this so much easier 1 command and im up and running with the software installed

    • @SillyLittleMe
      @SillyLittleMe 2 года назад +1

      Is chocolatey better than winget? Ik that it was better during the early days, but is that still the case?

    • @irishbruse
      @irishbruse 2 года назад

      @@TollyH winget cant install ziped software yet only exe/msi so there is alot of sofware that it doesnt support thats why im still on chocolatey plus it doesnt require the microsoft store installed which is another plus as im using windows ltsc so it keeps windows even less bloated

    • @SillyLittleMe
      @SillyLittleMe 2 года назад

      @@TollyH Oh ok. I had always wondered about using Chocolatey but still stuck with winget from beta days since it is quite sufficient for my needs till now

  • @jogelogy
    @jogelogy 5 месяцев назад

    the advantage of MSI over and EXE format is that you can scrutinize its content without having to install it. you can check on the database instructions, and even dump the embedded media. on the context of which one is safe, it basically depends on who and how they are crafted. in terms of manageability on the installed components, again this would depend on how the program structure is designed. many software products use EXE installer so they can package multiple MSIs into one package; and many EXE installers basically are just a bootstrap to run msiexec to install the embedded MSI file/s.

  • @kenlnetherland
    @kenlnetherland 2 года назад +4

    MSI files can contain what is called a "custom action", which is likely an executable. So either way, there is a risk of viruses. Best to check the Digital Signature of both. Right click.. properties.. digital signature.

    • @soundspark
      @soundspark 6 месяцев назад

      Take the same precautions with MSI as you do with EXE.

    • @hydradragonantivirus
      @hydradragonantivirus 4 месяца назад

      Even if valid signature can have malware.

    • @Laveda-Jones
      @Laveda-Jones 4 месяца назад

      @@hydradragonantivirus Agreed, but I'll explain it this way. My company produces desktop software. I purchased a digital signature. Then I had to go through an extensive process, providing all my company information and legal documents, then they verified my own personal background, having to provide a driver's license, birth certificate, social security number, background check, credit check, etc. I had to take several different photos of myself holding up all of the information. The company is based out of my home so I had to take pictures of that, with me in the picture. They sent a letter to my address with a code that I had to provide back to them. They needed a footprint of my software to produce the hash and certificate to embed in my own software to prevent tampering. Is it 100% foolproof?, no. I could very well include malware in the code I wrote, of course. But it is traceable directly to me. I have to do this every year when the certificate expires.

    • @Laveda-Jones
      @Laveda-Jones 4 месяца назад

      Not why this is showing under my employees login.. but is kenlnetherland responding back.

  • @billloomis3907
    @billloomis3907 2 года назад +2

    Always wondered, now I know! Thanks for the great explanation and video

  • @Michaelmaertzdorf
    @Michaelmaertzdorf 2 года назад +3

    I'm missing:
    - MSIX
    - APPX
    - APPXBundle

    • @ckpioo
      @ckpioo 4 месяца назад

      appx is just an offline installer for windows store apps, msix is just the same as msi but it provides developers with better tools for configuration, etc and appxbundle contains multiple appx files that's all

  • @AhmedNSane
    @AhmedNSane 2 года назад +1

    What I always do to download Chrome is add *?standalone=1* to the URL before clicking the download button on the download page, and then I get the standalone EXE installer.

  • @pyp2205
    @pyp2205 2 года назад +13

    Ahh yes the .msi installer and .exe installer. Before I recently upgraded to Windows 11 (my computer did meet more than the minimum requirements for Windows 11, so I waited for my computer to get the upgrade), I had trouble installing programs through MSI files on Windows 10. I would get something like "MSI Server is not responding". I would keep on clicking on retry, and I pretty much have to wait hours for some software to update or install. Now at least on Windows 11, I've seen a ton of improvements in terms of performance.
    In fact I decided to upgrade to windows 11, because of how slow windows 10 is now. Now it's as fast as my Ubuntu installation (I sometimes get tired of using Windows, so I sometimes boot into Ubuntu whenever I need to do some programming or whenever I just don't want to use Windows for a few days).

    • @quicksilverb12
      @quicksilverb12 2 года назад +1

      Ubuntu fast when ??? xDDD

    • @pyp2205
      @pyp2205 2 года назад +1

      @@quicksilverb12 Have you even tried Ubuntu? Because it looks like you didn't.

    • @quicksilverb12
      @quicksilverb12 2 года назад

      @@pyp2205 there's much much much much faster and more reliable distros than Ubuntu 😂

    • @airshaped
      @airshaped 2 года назад +1

      @@pyp2205 tbf ubuntu is definitely on the heavier side as for a linux distro

    • @pyp2205
      @pyp2205 2 года назад

      @@quicksilverb12 Well from my experience Ubuntu is fast, maybe you haven't even noticed it. Anyway I'm kind of planning on switching to another Linux distro. Because some other ones that I tried like Arch Linux, and I honestly didn't really like it. I'm planning on switching to a Red Hat based system like Fedora Workstation. Which I know you might mention that Red Hat Linux based systems only allow open source software. And a lot of stuff I use are open source. So I don't mind that, and I know you can change it to allow proprietary software.

  • @Nonsking2215
    @Nonsking2215 2 года назад +2

    Thio joe is the only RUclips Computer Nerd that I actually find entertaining..... Don't judge me😐

    • @_SJ
      @_SJ 2 года назад

  • @dopa_explainz0080
    @dopa_explainz0080 2 года назад +8

    should i install a virus in .exe or .msi?

    • @techmatt97
      @techmatt97 2 года назад

      😂

    • @hulksmash8159
      @hulksmash8159 2 года назад +3

      Both, if possible.

    • @techmatt97
      @techmatt97 2 года назад

      Too funny 🤣

    • @pyp2205
      @pyp2205 2 года назад +1

      Well if you WannaCry, then do either one of them I guess. But don't blame us if your computer gets destroyed.

    • @dopa_explainz0080
      @dopa_explainz0080 2 года назад

      @@pyp2205 I am a microsoft fan so I would do the latter

  • @cheplays2482
    @cheplays2482 2 года назад +1

    I always wondered the difference and then always put it behind me. Tha k you for looking into this!

  • @fragalot
    @fragalot 2 года назад +13

    funny enough, most software "installing" for Linux opening the file and coping everything into a folder. I never understood why windows had to make this so overly complex. Even Macs are dead simple. Because for some reason Windows wants files in diffrent places from a software install, rather than just all in one location.

    • @ferchuu9
      @ferchuu9 2 года назад +5

      what? it's absolutely the other way around, in linux we have program data being installed to /usr/bin, /usr/share/applications, /usr/share/icons, /usr/share/locale, /usr/share/man, /usr/share/, /etc, /usr/lib .... meanwhile windows programs tend to be all contained in c:\program files\ (mostly)

    • @fragalot
      @fragalot 2 года назад +2

      @@ferchuu9 but you don't run an installer in linux. You literally just open a container file, copy it over, and that's it. Windows has filers going all over the place plus changes to the registry.

    • @JdeBP
      @JdeBP 2 года назад +3

      You've clearly never looked at Debian package installation files. (-:

    • @RationalFunction
      @RationalFunction 2 года назад

      @@JdeBP I use endeavouros (arch) btw

    • @RationalFunction
      @RationalFunction 2 года назад

      @@ferchuu9 bruh stop spreading fud, things like /usr/share/man are obv man pages lol

  • @MrMase370
    @MrMase370 2 года назад +2

    A very good explanation there Thio, its just a shame that quite often devlopers and providers of the software do not give the required information of silent install switches or permissions their applications need, often defaulting to oh just have the user be an administrator. That advice is wrong on so many levels these days and from an enterprise perspective. The other worrying trend in particular with .exe files is to get around the administrative permissions in some cases they have started installing the application to %appdata% of the user profile which effectively makes the application unmanageable on shared devices etc.

    • @mazessj
      @mazessj 2 года назад

      Even Microsoft is guilty of this. Look at Teams and OneDrive -- both per-user installers, meaning each user profile gets a copy. 😝 Enterprises have been complaining for years.

  • @ruler255
    @ruler255 2 года назад +3

    this guys eyes are so intense

    • @jadinosaurus
      @jadinosaurus 5 месяцев назад

      interesting observation

  • @oiboi42096
    @oiboi42096 2 года назад

    You are/were not alone! I pray you found what has worked for you!

  • @Richard_GIS
    @Richard_GIS 2 года назад +3

    Thats the reason to use iobit uninstaller (install monitor) which tracks down what it installed (exe or msi) and removes it also fully - works like a charm. Also macOS has big problems there in the install world, when you do not install it via store, then you have to remeber that you installed this programm this way and you have to uninstall it with an uninstall script from the program itself. I really don't understand why they do not have a container for each app and so it can be removed without traces (windows s had this approach kind a as it allowed only store apps)

  • @GYTCommnts
    @GYTCommnts 2 года назад +1

    Man, I've always wanted to know this and forgot to investigate. Thank you! 💪

  • @RawSiafu
    @RawSiafu 2 года назад +25

    ".MSI file is not going to be a virus"? Then you say it is possible to install a virus through the .msi file. You are basically saying that if you want users to install a virus. bundle it inside an MSI file because you are assuring them that it is safe... That is a reason to put a virus in .msi over .exe. False sense of security. Microsoft Edge is a good example. Its a virus. Just try to get rid of it...

    • @jurissss
      @jurissss 7 месяцев назад

      eh? MS edge is a virus? Please explain lmfao

    • @vengirgirem
      @vengirgirem 7 месяцев назад +2

      I am proud to declare that I actually managed to completely get rid of Microsoft Edge!

    • @RawSiafu
      @RawSiafu 7 месяцев назад +1

      @@vengirgirem one year later and also now European Commission’s Digital Markets Act is in effect. So Microsoft now "allows" users to remove edge.

    • @vengirgirem
      @vengirgirem 7 месяцев назад

      @@RawSiafu didn't know that. Makes sense now considering I tried to do the same two years ago and failed miserably

    • @Mininukefromfallout
      @Mininukefromfallout 7 месяцев назад

      ​@@vengirgiremHOW

  • @connorspruit6002
    @connorspruit6002 2 года назад +1

    as a linux user it is mandatory for me to inform you that almost all linux apps (packages) can be installed without any sort of risk because they are verified before hand and distributed though an app store (package manager such as pacman) and they downloaded files are once again veriefed on you own computer to make sure you got the prommised file and it didn't get intercepted or moddified

  • @JustPyroYT
    @JustPyroYT 2 года назад +145

    actually I've never heard about msi files 😂

    • @yorl418
      @yorl418 2 года назад +14

      Even with minecraft ? 😢

    • @marco_evertus
      @marco_evertus 2 года назад +43

      Old school windows users are all to familiar with msi files 😂

    • @pyp2205
      @pyp2205 2 года назад +11

      @@yorl418 Yeah the old Minecraft Launcher does use MSI.

    • @lordpuff
      @lordpuff 2 года назад +1

      Bro 💀💀💀

    • @server123
      @server123 2 года назад

      @@lordpuff XD

  • @lyfandeth
    @lyfandeth 2 года назад

    In all the years and all the docs...never knew this. Thank you Joe!

  • @EmuEmuchu
    @EmuEmuchu 2 года назад +3

    I always thought MSI is an installer I was right XD

    • @pyp2205
      @pyp2205 2 года назад

      Yeah same, I would be like "I'm assuming that's an installer file?".

  • @soundspark
    @soundspark 6 месяцев назад

    The manageability of MSI is that on an Active Directory domain you can just drop a .msi into a Group Policy Object and all computers subject to that GPO will auto-install on boot.

  • @MegaSunspark
    @MegaSunspark 6 месяцев назад +3

    Good explanation of exe and msi files, thanks! ... but can you please stop using these stock video clips, which are not really beneficial to your explanations? They're not even funny. One is more ridiculous than the next. Ok, Thanks, have a nice day!

  • @dexterhaxxor
    @dexterhaxxor 2 года назад

    Do note that MSI isn't guaranteed to not be a virus. Apart from the classic "installer" tasks, they can define custom tasks which run bundled executables or scripts. In fact, software like Inno Setup uses this to create MSI packages, which just wrap the actual installer EXE but that allow compatibility like you mentioned. General software rules apply and you should never install software from untrusted sources.

  • @comrade_rahul_1
    @comrade_rahul_1 2 года назад +2

    You cleared one of my confusion. Thanks🐥😃

  • @procta2343
    @procta2343 2 года назад +1

    we played with Msi using active directory years ago, where you attach the MSI file to a users account, the user logs on and it installs the program, user logs off and the program is uninstalled, basically the program follows the user to what ever machine they log on to. Been years since i have played with it all now sadly.

  • @sandwichqueen
    @sandwichqueen 6 месяцев назад

    We used to play Minecraft on school computers as a kid by using the exe rather than the msi. They blocked installing programs, but didn't block running programs. It was some good memories

  • @re.liable
    @re.liable 2 года назад

    I used to be prejudiced against MSI files. Thanks for letting me know better

  • @avi12
    @avi12 2 года назад +2

    4:39 I'm using a desktop app that takes care of uninstalling any app that I tell it, as well as any leftover files, Revo Uninstaller Pro

    • @Juliodax
      @Juliodax 2 года назад

      Revo uninstaller is excellent

  • @maurymorris5932
    @maurymorris5932 2 года назад +2

    6:31 When you setup huge object with all variable types in NodeJS and the console.log prints "undefined"

  • @hulksmash8159
    @hulksmash8159 2 года назад +1

    Gonna add that stock video to my stock video collection.

  • @brucethen
    @brucethen 2 года назад

    Many years ago there was an installer "package" that was used by many programs ( particularly games), the main problem with it was that it was quite old code (16 bit) and was still being used for 32 bit games. The problem occurred with a 64bit windows, while the game would run fine, the installer wouldn't so you couldn't play it.

  • @mikewilliams345
    @mikewilliams345 6 месяцев назад

    If you can't find an .msi, if you install the .exe, you can usually find the .msi for it in C:\Windows\Installer. Usually if you dig into the details tab of the properties you can figure out what it is. Going off the top of my mind but here's how I usually find it:
    $msis = Get-ChildItem -Path "C:\Windows\Installer" -include *.msi | Foreach-Object { Get-AppLockerFileInformation $_ }
    $msis | Where-Object { $_.Publisher -like "*Firefox*" } | Select-Object -ExpandProperty FullName
    Replace firefox with whatever, may need a tweak or two.

  • @SuprousOxide
    @SuprousOxide 2 года назад +1

    An MSI is a set of files and instructions. Those instructions often include running some of the files it installed, so it absolutely could be used to deliver a virus.

  • @anshumanmishraw
    @anshumanmishraw 2 года назад +2

    Yaas! that's the topic which I want too,
    Love My dear Windows.

  • @at_oussama
    @at_oussama 2 года назад +1

    MSI is also great for creating ready to use Windows installation discs, with preinstalled software. but on the regular, i prefer EXE files since you can use the custom UI to setup preferences and many other things rather (for example choose to only install the Antivirus Protection part in a security suite, because the rest are always just bundled crap that slows down the computer)

  • @mascal0047
    @mascal0047 2 года назад

    I've actually never seen an MSI file, or knew about it this blew my mind...

  • @Bishop1091
    @Bishop1091 2 года назад +1

    As someone that works in a computer store the .msi are better and faster if you are going to install a program a few times a day. Keep everything on network drive and run a batch to auto install everything. Saving a minute per pc/laptop really ads up in the end of the day.

  • @ththrshpnd
    @ththrshpnd 2 года назад

    I don't recall installing any .msi files ever, now that I think about it. Not at school, home, work, nowhere.

  • @techmatt97
    @techmatt97 2 года назад +2

    Your back, great job man

    • @J_Titor
      @J_Titor 2 года назад +5

      What about his back?

    • @loganfong2911
      @loganfong2911 2 года назад

      @@J_Titor It does a great job.

  • @thepokemontrainer6894
    @thepokemontrainer6894 2 года назад

    Best soft soft Introduction Ever!!

  • @Megalomon
    @Megalomon Год назад

    I usually prefer msi files for two reasons as a end user: Msi versions are usually able to be installed offline, and msi installer usually dont pack in ad-installers like toolbars or random PDF Apps.

  • @codyaimes4354
    @codyaimes4354 Год назад

    Thank Thio, you make computer information easy to understand.

  • @chrispychreme02
    @chrispychreme02 2 года назад

    I’ve actually wondered about this recently! Good to know.

  • @meowxgamingstuff
    @meowxgamingstuff 2 года назад

    My favorite IT teacher since 2009

  • @peterdobson3435
    @peterdobson3435 2 года назад +1

    Nice and clear explanation. Thank you.

  • @pcworldegypt
    @pcworldegypt 2 года назад

    Man, you're rocks! Thank You for your course !!

  • @daves1646
    @daves1646 2 года назад

    ThioJoe - great edu!! I learned a lot, and APPRECIATE IT!!

  • @JdeBP
    @JdeBP 2 года назад

    A .msi file is "just a set of instructions" we hear at 05:53. I wonder how many people immediately thought "Well, so too is an .exe file. That's not the difference."

  • @Xnoob545
    @Xnoob545 2 года назад +2

    Useful, I'll keep this in mind. Thanks.

  • @fragalot
    @fragalot 2 года назад

    The main thing about an .msi file is it SELF can not execute a virus, where as any exe file can contain a virus, or BE INFECTED by a virus, and .msi file cannot be infected. It can theoretically contain a virus of the files it's copying out olf the .msi file but since it's not executing code, no virus would be active in memory.

  • @glmchn
    @glmchn 2 года назад

    Excellent round up, I wish you made this video 10y ago when I started my career and was so confused about those sh*t x)

  • @sc0pe103
    @sc0pe103 2 года назад

    This isn't really a question about "should", as each program is built with different purposes. MSI's are typically for installer programs which then copy the main executable programs to the appropriate places, as selected by the user.

  • @populigaudeamus6299
    @populigaudeamus6299 2 года назад +1

    ThioJoe gets me so moist. I always ruin a chair every time I watch your vids 😏🤭