Information and startup locations can be examined on this page: verify all your files to make sure that they are legitimate, digitally signed and from the company Microsoft Corporation to which they should belong.
msascui.exe security and file info
Microsoft Forefront Client Security User Interface
- Microsoft Forefront Client Security
- Microsoft Corporation
 |
 |
 |
| Filetype : executable |
An executable file is a program that can be executed in your windows environment.
|
|
What is MSASCui.exe?
MSASCui.exe is part of the Windows Defender anti-spyware software. It is responsible for performing spyware scans providing the interface through which you can configure Windows Defender. Windows Defender is also installed as part of Windows Live OneCare. The following is a screenshot of Windows Defender running under Windows XP Service Pack 2:

This process is an nonessential system process and can safely be disabled. Note that disabling this process will disable your Windows Defender spyware protection. If you choose to disable this process, you should do so through the Windows Defender or Windows Live OneCare interface so as not to cause errors. The screenshot below illustrates how this process should appear in the task manager:

As you can see in the above screenshot, MSASCui.exe typically runs as the current user (in this case, Mike). A process with this name that is running as another user may be indicative of a malware infection.
Dangers of MSASCui
As this is a relatively common process in that it runs on any system with Windows Defender installed, it is possible for virus writers and spyware vendors to disguise their malware as the genuine one.
Some malicious files may have the same name but be stored somewhere other than in %ProgramFiles%\Windows Defender. Other malware may use a name that appears similar to it but with slight differences in spelling or with appended digits. While there are currently no known viruses, Trojans, or adware applications that disguise themselves as this process, you should look out for this file in an incorrect location or with a slightly different name.
There is typically no more than one instance of this running at a given time. The presence of multiple instances may be an indicator of a malware infection. If you do not use Windows Defender, the presence of this executable may indicate that your system is infected.
Common problems
- This process uses excessive CPU time
- There are a myriad possible causes for this problem. Try reinstalling Windows Defender and ensuring that it is up-to-date.
- If the problem continues, it is recommended that you uninstall or turn off Windows Defender.
- "Windows Defender encountered an error 0x80508018"
- This problem is known to occur in isolated cases. Try reinstalling Windows Defender.
|
|
|
|
|
|
| MD5 File security rating |
A MD5 hash is a unique fingerprint of a file.
Different files/versions can have the same filenames. The MD5 hash verifies that the legitimate file is not altered.
Runscanner (Freeware) can help you checking the file's MD5 hashes
| Msascui.exe files in Runscanner database |
 |
|
2 different item(s) in database |
 |
|
23 different item(s) in database |
|
 |
Green items are verified safe to use |
 |
Unrated items are not yet checked for safety. |
 |
Red items are not safe (typically virusses, spyware or other malware) |
 |
This file is digitally signed by it's publisher.
This means that the file is from the company claiming to created it, this does not mean by default that the file is safe
|
|
|
|
| General file info |
| Product name: |
Microsoft Forefront Client Security
|
| Description: |
Microsoft Forefront Client Security User Interface
|
| Company: |
Microsoft Corporation
|
| Fix MSASCUI.EXE errors: Free registry scan |
|
|
|
| Pacman startup database |
|
Related to Windows Defender Microsoft (anti-spyware) tool |
| info provided by sysinfo.org |
|
|
|
Automatic startup locations
 |
| |
 |
001 Running Processes |
| |
 |
002 Autorun registry entries local machine |
| |
 |
003 Autorun registry entries Current User |
| |
 |
004 All users startup startmenu |
| |
 |
005 Current user startup startmenu |
| |
 |
007 Roaming Start Menu\Programs\Startup |
| |
 |
073 %windir%\Tasks |
| |
 |
135 Current User Runonce (+ subkeys) |
User comments for this file
More system processes
|
|
| Filename / Process |
|
| Guid / CLSID |
|
| MD5 hash |
|
|
|
25 MD5 version(s) found
only top 10 displayed
|
|
|
| Check your autostart files
|
|
|
|