How to Remove “rsmui.exe”

What is rsmui.exe?

rsmui.exe is a legitimate process file popularly known as Removable Storage UI Layer. It is associated with Windows Operating System, developed by Microsoft Corporation. It is located in C:\Windows\System32 by default.
Malware programmers write virus files with malicious scripts and save them as rsmui.exe with an intention to spread virus on the internet.

Affected Platforms: Windows OS

How to determine if your computer is infected with rsmui.exe malware?

Look out for these symptoms to check if your PC is infected with rsmui.exe malware:

  • Unstable internet connection
  • rsmui.exe occupies extra CPU space
  • PC processing speed slows down
  • Browser often redirects to irrelevant websites
  • Browser is bombarded with hordes of popup ads
  • Computer screen freezes repeatedly

Take the following steps to diagnose your PC for possible rsmui.exe malware attack:

Step 1: Simultaneously press CTRL+ALT+DEL keys to open Task Manager.

Step 2: If you notice the file located outside C:\Windows\System32, perform an antivirus scan to get rid of the malware.

How to remove rsmui.exe malware from system using Comodo Antivirus?

Step 1: Download our award-winning Free Antivirus

Step 2: Installation configuration frames will be displayed. Select the configuration you would like to apply.

Step 3: Select Customize Configuration option and arrange installers, configuration, and file location.

Step 4: Restart your PC after the installation gets over.

Step 5: Wait for Comodo Internet Security to update the antivirus.

Step 6: Proceed with the quick scan that automatically begins after the update.

Step 7: If threats are found during the scanning, you will be notified through an alert screen.

Step 8: Comodo Antivirus will remove rsmui.exe malware from your computer including all other malwares!

49

Malware Entries

First Seen: 05 June 2008 at 11:27 am
No. Company File Type SHA1 MD5 Malware
Name
Digitally
Signed
File
Version
Product
Version
Submitted
From
Malware Behavior
1 Microsoft Corporation Executable 6039a35f7026d043
14af8259d488424a
044d3d22
255e52ed443da199
df434e532571a411
Virus.Win32.
Virut.CE
No 5.1.2400.1 5.1.2400.1 United Kingdom N/A
2 N/A Executable a95c84a0411a7b62
ebd7c433a7d89734
fbf2a8ac
f029796b2a66d999
6244842afc7a21bf
Virus.Win32.
Virut.CE
No N/A N/A United States N/A
3 Microsoft Corporation Executable 112e6fe93a14e22b
596176ac05939fa1
7caacf0a
9d2c1fedf80efca6
5af7302a09b2d0fa
Virus.Win32.
Virut.CE
No 5.1.2400.1 5.1.2400.1 Indonesia N/A
4 Корпорация Майкрософт Executable 9ef30642851d21f8
c7e9912819b9af6b
33c22c78
b9d398e4fb3676eb
22bd0489f2329e8e
Virus.Win32.
Virut.CE
No 5.1.2400.1 5.1.2400.1 Russian Federation N/A
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
16

Safe Entries

First Seen: 03 June 2008 at 5:51 pm
No. Company File Type SHA1 MD5 Digitally
Signed
File
Version
Product
Version
Submitted
From
1 Microsoft Corporation Executable 5c500db9569df457
71cb3b55dd8da69a
b094d388
694b3beede3d5d7a
ab05154b0cab6c75
No 5.1.2400.1 5.1.2400.1 Chile
2 Microsoft Corporation Executable df219c2d7daffc03
e094b1405d609c6b
107de82d
8237813b35b76649
553be1050db9d931
No 5.2.3790.3
959
(srv03_sp2
_rtm.07021
6-1710)
5.2.3790.3
959
Internal Submission
3 N/A Executable cf5bf791e89ea61e
7739de93d7e51642
07e390e2
58ebcbc59a3e752a
34e8d0ff9f635b11
No N/A N/A Internal Submission
4 Microsoft Corporation Executable c9e2beb6aade405c
c93c848746bd0991
3d75d33b
c5aed2000e635508
4c4fbe5f7ba5d265
No 5.1.2400.1 5.1.2400.1 Internal Submission
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
 
Exclusive Offer
Get Free Endpoint Protection
Get Advanced
Endpoint
Protection

Award-Winning Security to Protect Your Clients from Cyber Attacks

Comodo Internet Security Pro

Antivirus Protection protection from hackers! Get the ultimate Antivirus solution to keep your PC clean and to remove viruses from a slow or infected PC. Improve the PC performance at home or use it on-the-go!

Get Comodo Internet Security Comodo Internet Security