What is rstrui.exe? Should I remove it?
rstrui.exe – legitimate file that belongs to Windows OS
rstrui.exe is an executable that is a part of Windows operating system. The file is responsible for System Restore feature which allows reverting computer’s state to the specific point in time. Therefore, this file is necessary for “traveling back” in computer’s time and recovering the system from various issues.
Originally, the rstrui.exe file is located in the C:\Windows\System32 subfolder. However, if you find it in a different location, it might be a problem. Sometimes malware can use the name of the legitimate Windows processes in order to bypass computer’s security. Thus, finding this file in another directory might be the sign of malware attack.
However, infiltration of malware is followed by other odd activities, such as crashing computer, inability to open programs or files, receiving Windows errors and so on. In this case, we highly recommend scanning the system with RestoroIntego or another anti-malware software and remove rstrui.exe from the system.
In other cases, rstrui.exe removal is not recommended. As we have already mentioned, this file is a critical component of the operating system. Thus, elimination of the legit file may lead to computer-related problems and inability to use System Restore feature.
However, there are many people on the Internet who report about the rstrui.exe error. They claim that they see such alert when they try to create a manual restore point in System Restore:
Rstrui has caused an error in RSTRUI.EXE.
Rstrui will now close.
If you continue to experience problems, try restarting your computer.
However, this problem can be fixed. This error message is not related to the computer infection. It’s a system problem that can be solved quite easily by following the steps given in the third part of this file description.
The installation of the executable
The original rstrui.exe file arrives together with Windows operating system. Therefore, you should not worry about its appearance. However, if you suspect that your machine might be infected and found a malicious variant of the file, you should be aware of the possible ways how it may have sneaked into the system in order to avoid similar problems in the future:
- illegal/fake software downloads or updates;
- clicking on malware-laden ads;
- usage of questionable file-sharing websites or P2P networks;
- opening a malicious email attachment.
These are the main methods how so-called rstrui.exe virus may have been installed on the system. However, before terminating the file, you have to check it with security software to avoid accidental removal of the legit entry.
Fix rstrui.exe error
According to Microsoft, you can remove rstrui.exe error by using these steps:
- Make sure that your system date is set correctly by using the Date/Time tool in the Control Panel.
- Click Start, point to Settings and then click System.
- Click the Performance tab.
- Click File System.
- Click the Troubleshooting tab.
- Select the Disable System Restore check box.
- Click OK, click Close, and then restart your computer when prompted.
After your computer restarts, follow steps 2 through 6 and clear the Disable System Restore check box. Restart your computer when prompted. Additionally, you can use the System File Checker to repair missing or corrupted system files, install available computer drivers or software updates, and repair Windows registry to solve the error.
However, if you think that this file belongs to particular malware, you have to scan the system with RestoroIntego or other reputable malware removal software. If your chosen security software identifies this executable as malicious, you will be suggested to perform the automatic rstrui.exe removal.