Remove hidcon: from the entries.ini file, this is only for config.txt or 7zip sfx (its a command to hide the cmd console window) and yes you can skip the sfx and use the original installer with switches BTW if you use nLite you can use the [registry_addreg] section to add that registry entry [general] builddate=06/01/2011 description=MS Security Essentials 2.0.657.0 Addon title=MS Security Essentials 2.0.657.0 Addon version=2.0.657.0 website= [EditFile] I386\SVCPACK.INF,SetupHotfixesToRun,AddProgram [AddProgram] mseinstall /s /runwgacheck /o ; nLite only [registry_addreg] HKLM,"SOFTWARE\Microsoft\Microsoft Antimalware\Exclusions\Paths","%16422%\RealVNC\VNC4\*.*",,"0" If you dont use nLite here is your reg.exe cmdline corrected [AddProgram] reg add "HKLM\SOFTWARE\Microsoft\Microsoft Antimalware\Exclusions\Paths" /v "%PROGRAMFILES%\RealVNC\VNC4\*.*" /t REG_SZ /d "0" /f mseinstall /s /runwgacheck /o