How to Start System Restore From the Command Prompt

This article explains how to start System Restore from the Command Prompt. The System Restore command is the same in all modern versions of Windows. The article also includes information on the dangers of fake rstrui.exe files.

How to Start System Restore From the Command Prompt

If all you can do is start in Safe Mode and access Command Prompt, you can start the System Restore utility by executing a simple command. Even if you're only looking for a quick way to start System Restore from the Run dialog box, this knowledge might come in handy.

It'll take you less than a minute to execute the System Restore command, and probably less than 30 minutes for the whole process to complete.

1. Open Command Prompt, if it's not already open.

   You're more than welcome to use another command line tool, like the Run box, to execute the System Restore command. In Windows 11/10/8, open Run from the Start menu or Power User Menu. In Windows 7 and Windows Vista, select the Start button. In Windows XP and earlier, choose Run from the Start menu.

2. Type the following command in the text box or Command Prompt window:
   

   rstrui.exe
   

   ...and then press Enter or choose the OK button, depending on where you executed the System Restore command from.

   At least in some versions of Windows, you don't need to add the .EXE suffix to the end of the command.

3. The System Restore wizard will open immediately. Follow the instructions on the screen to complete the System Restore.

Be Cautious of Fake rstrui.exe Files

As we already mentioned, the System Restore tool is called rstrui.exe. This tool is included with a Windows installation and is located in this folder:

C:\Windows\System32\rstrui.exe

If you find another file on your computer that's called rstrui.exe, it's more than likely a malicious program that's trying to trick you into thinking it's the System Restore utility provided by Windows. Such a scenario may take place if the computer has a virus.

Do not use any program that's pretending to be System Restore. Even if it looks like the real thing, it's probably going to demand that you pay to restore your files or prompt you with an offer to purchase something else in order to even open the program.

If you're digging around folders on your computer to find the System Restore program (which you shouldn't have to do), and end up seeing more than one rstrui.exe file, always use the one in the ​System32 location mentioned above.

Also take note of the filename. Fake System Restore programs might use slight misspellings to make you think they're the real thing. One example would be replacing the letter i with a lowercase L, like rstrul.exe, or adding/removing a letter (e.g., restrui.exe or rstri.exe).

Since there shouldn't be random files named rstrui.exe masquerading as the System Restore utility, it'd also be wise to make sure your antivirus software is updated. Also, see these free on-demand virus scanners if you're looking for a quick way to run a scan.