Search filename

 
Home page
Download
File information
Helper forums

Database statistics
Total:  617,551
Whitelist:  174,970

Top process list
svchost.exe
iexplore.exe
csrss.exe
rundll32.exe
lsass.exe
alg.exe
wuauclt.exe
ccapp.exe
explorer.exe
ctfmon.exe
spoolsv.exe
services.exe
smss.exe
jusched.exe
winlogon.exe
mdm.exe
rthdcpl.exe
hkcmd.exe
msascui.exe
alcxmntr.exe

Msascui.exe

MSASCui.exe - Microsoft Forefront Client Security - Microsoft Corporation
Run a Free Scan for MSASCUI.EXE related errors

Msascui.exe file description

Msascui.exe with description MSASCui.exe is a process file from company Microsoft Corporation belonging to product Microsoft Forefront Client Security.
In total there are 9 launchpoints for this file including "Running processes".
There are 15 different variations of the file in our database and the file is digitally signed from Microsoft Corporation - Microsoft Time-Stamp Service
We do not recommend removing digitally signed files from Microsoft Corporation

What is MSASCui.exe?
MSASCui.exe is part of the Windows Defender anti-spyware software. It is responsible for performing spyware scans providing the interface through which you can configure Windows Defender. Windows Defender is also installed as part of Windows Live OneCare. The following is a screenshot of Windows Defender running under Windows XP Service Pack 2:



This process is an nonessential system process and can safely be disabled. Note that disabling this process will disable your Windows Defender spyware protection. If you choose to disable this process, you should do so through the Windows Defender or Windows Live OneCare interface so as not to cause errors. The screenshot below illustrates how this process should appear in the task manager:



As you can see in the above screenshot, MSASCui.exe typically runs as the current user (in this case, Mike). A process with this name that is running as another user may be indicative of a malware infection.

Dangers of MSASCui
As this is a relatively common process in that it runs on any system with Windows Defender installed, it is possible for virus writers and spyware vendors to disguise their malware as the genuine one.

Some malicious files may have the same name but be stored somewhere other than in %ProgramFiles%\Windows Defender. Other malware may use a name that appears similar to it but with slight differences in spelling or with appended digits. While there are currently no known viruses, Trojans, or adware applications that disguise themselves as this process, you should look out for this file in an incorrect location or with a slightly different name.

There is typically no more than one instance of this running at a given time. The presence of multiple instances may be an indicator of a malware infection. If you do not use Windows Defender, the presence of this executable may indicate that your system is infected.

Common problems
  • This process uses excessive CPU time
    • There are a myriad possible causes for this problem. Try reinstalling Windows Defender and ensuring that it is up-to-date.
    • If the problem continues, it is recommended that you uninstall or turn off Windows Defender.
  • "Windows Defender encountered an error 0x80508018"
    • This problem is known to occur in isolated cases. Try reinstalling Windows Defender.

Automatic startup locations

001 Running Processes
002 Autorun registry entries local machine
003 Autorun registry entries Current User
004 All users startup startmenu
005 Current user startup startmenu
007 Roaming Start Menu\Programs\Startup
073 %windir%\Tasks
135 Current User Runonce (+ subkeys)
166 HKCU Policies\Explorer\Run

File versions in our database

  Company  Version  Size 
Microsoft Corporation  1.1.1051.0  1420560 
Microsoft Corporation  1.5.1937.0  1037200 
Microsoft Corporation  1.5.1941.0  1037200 
Microsoft Corporation  1.5.1955.0  1036848 
Microsoft Corporation  1.5.1958.0  1036848 
Microsoft Corporation  1.5.1972.0  1033600 
Microsoft Corporation  1.5.1973.0  1033584 
Microsoft Corporation  1.1.1600.0  1008312 
Microsoft Corporation  1.1.1600.0  1008184 
Microsoft Corporation  1.1.1505.0  1006264 
Microsoft Corporation  1.1.1505.0  1004136 
Microsoft Corporation  1.1.1593.0  944408 
Microsoft Corporation  1.1.1593.0  940312 
Microsoft Corporation  1.1.1593.0  928024 
Microsoft Corporation  1.1.1592.0  866584 

Digital signatures found for this file

  Signer of certificate  Issuer of certificate 
Microsoft Corporation  Microsoft Time-Stamp Service
Microsoft Corporation  Microsoft Timestamping Service
Microsoft Corporation  VeriSign Time Stamping Services Signer
Microsoft Windows  Microsoft Time-Stamp Service
Microsoft Windows  Microsoft Timestamping Service
Microsoft Windows  VeriSign Time Stamping Services Signer

MD5 security rating in our database

7 files (Not yet rated and not signed)
29 files (Safe and digitally signed)
Some versions of this filename have not yet been checked for safety.
Fix msascui.exe application error:  Run a free registry scan
Warning: Some malware might rename itself to msascui.exe. Always make sure that your file is from a verified publisher.
User comments for Msascui.exe
There are no comments yet.


Please add your comments if you have more information about this file.


File rating :

Are you human? How much is 2+24:


Browse files by letter
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
More system processes
msasp32.exe msasvc.exe msauc.exe
msav.exe msavcore.exe msavpw0.dll
msavsc.exe msaw.exe msb.exe
msbb.exe msbcs.exe msbe.dll