What is rstrui.exe? Should I remove it?

by Julie Splinters - -

rstrui.exe – legitimate file that belongs to Windows OS

rstrui.exe is an executable that is a part of Windows operating system. The file is responsible for System Restore feature which allows reverting computer’s state to the specific point in time. Therefore, this file is necessary for “traveling back” in computer’s time and recovering the system from various issues.

Originally, the rstrui.exe file is located in the C:\Windows\System32 subfolder. However, if you find it in a different location, it might be a problem. Sometimes malware can use the name of the legitimate Windows processes in order to bypass computer’s security. Thus, finding this file in another directory might be the sign of malware attack.

However, infiltration of malware is followed by other odd activities, such as crashing computer, inability to open programs or files, receiving Windows errors and so on. In this case, we highly recommend scanning the system with Reimage or another anti-malware software and remove rstrui.exe from the system.

In other cases, rstrui.exe removal is not recommended. As we have already mentioned, this file is a critical component of the operating system. Thus, elimination of the legit file may lead to computer-related problems and inability to use System Restore feature.

However, there are many people on the Internet who report about the rstrui.exe error. They claim that they see such alert when they try to create a manual restore point in System Restore:

Rstrui has caused an error in RSTRUI.EXE.
Rstrui will now close.
If you continue to experience problems, try restarting your computer.

However, this problem can be fixed. This error message is not related to the computer infection. It’s a system problem that can be solved quite easily by following the steps given in the third part of this file description.

The installation of the executable

The original rstrui.exe file arrives together with Windows operating system. Therefore, you should not worry about its appearance. However, if you suspect that your machine might be infected and found a malicious variant of the file, you should be aware of the possible ways how it may have sneaked into the system in order to avoid similar problems in the future:

  • illegal/fake software downloads or updates;
  • clicking on malware-laden ads;
  • usage of questionable file-sharing websites or P2P networks;
  • opening a malicious email attachment.

These are the main methods how so-called rstrui.exe virus may have been installed on the system. However, before terminating the file, you have to check it with security software to avoid accidental removal of the legit entry.

Fix rstrui.exe error

According to Microsoft, you can remove rstrui.exe error by using these steps:

  1. Make sure that your system date is set correctly by using the Date/Time tool in the Control Panel.
  2. Click Start, point to Settings and then click System.
  3. Click the Performance tab.
  4. Click File System.
  5. Click the Troubleshooting tab.
  6. Select the Disable System Restore check box.
  7. Click OK, click Close, and then restart your computer when prompted.

After your computer restarts, follow steps 2 through 6 and clear the Disable System Restore check box. Restart your computer when prompted. Additionally, you can use the System File Checker to repair missing or corrupted system files, install available computer drivers or software updates, and repair Windows registry to solve the error.

However, if you think that this file belongs to particular malware, you have to scan the system with Reimage or other reputable malware removal software. If your chosen security software identifies this executable as malicious, you will be suggested to perform the automatic rstrui.exe removal.

verdict - status of the file:
diagnosis required
Advice: If your computer seems sluggish, or you are suffering from unwanted advertisements and redirects to unknown websites, we highly recommend you to scan it with reputable anti-spyware program. Do some FREE scan tests and check the system for unwanted applications that might be responsible for these problems.
We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software you agree to our privacy policy and agreement of use.
do it now!
Problem diagnosis program Happiness
Problem diagnosis program Happiness
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is a recommended tool to scan your system for possible threats and crappy software. The trial version of the product will find harmful applications in your system.
More information about this program can be found in Reimage review.
Press mentions on Reimage

About the author

Julie Splinters - Malware removal specialist

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Julie Splinters
About the company Esolutions

Removal guides in other languages