• Valid program

    RSTRUI.EXE Information

    This is a valid program that is required to run at startup.

    This program is required to run on startup in order to benefit from its functionality or so that the program will work. The following information is a brief description of what is known about this file. If you require further assistance for this file, feel free to ask about in the forums.

  • Name
    *Restore
  • Filename
    rstrui.exe
  • Command
    %system%\restore\rstrui.exe -i
  • Description
    This is the legitimate file required for System Restore to work properly.  If you tell the computer to do a System Restore, it will appear in the RunOnce area.  Once the system is restored or the restore has been attempted, it will automatically remove itself from startup.

    Depending on the computer, rstrui.exe may instead be found here: %system% with the following command: %system%\rstrui.exe /runonce
  • File Location
    %system%\restore\rstrui.exe
  • Startup Type
    This startup entry is started automatically from a Run, RunOnce, RunServices, or RunServicesOnce entry in the registry.
  • HijackThis Category
    O4 Entry
  • Note
    %System% is a variable that refers to the Windows System folder. By default this is C:\Windows\System for Windows 95/98/ME, C:\Winnt\System32 for Windows NT/2000, or C:\Windows\System32 for Windows XP/Vista/7.
  • This entry has been requested 11,856 times.

Disclaimer

It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. BleepingComputer.com will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Search Startups

Login

Remember Me
Sign in anonymously