Msconfig problem

[Albert Gerber]

I went to open *msconfig.exe* only to find that it won't open. I have one
copy of the exe in the system32 folder that is marked 59 KB. There is
another copy in Windows\pchealth\helpctr\Binaries that is marked 155 KB.
plus another one in Windows\ServicePackFiles\386\ which is also 155 KB.
When I use the Run ->msconfig or double click on the *exe* in Windows
explorer, on any of them, there is about five seconds hard drive activity
then nothing more happens. I went to Doug Knox's emergency utility download
http://www.dougknox.com/xp/utils/xp_emerutils.htm and while both regedit and
program manager will run still no help getting Msconfig opened. The O/S is
XP Pro with SP2 installed. This is a new one to me. Google hasn't been much
help so far.
Thanks in advance

Li'l Al

 

[Malke]

I went to open *msconfig.exe* only to find that it won't open. I have
one copy of the exe in the system32 folder that is marked 59 KB. There
is
another copy in Windows\pchealth\helpctr\Binaries that is marked 155
KB.
plus another one in Windows\ServicePackFiles\386\ which is also 155
KB. When I use the Run ->msconfig or double click on the *exe* in
Windows explorer, on any of them, there is about five seconds hard
drive activity
then nothing more happens. I went to Doug Knox's emergency utility
download http://www.dougknox.com/xp/utils/xp_emerutils.htm and while
both regedit and program manager will run still no help getting
Msconfig opened. The O/S is XP Pro with SP2 installed. This is a new
one to me. Google hasn't been much help so far.
Thanks in advance

Since this behavior is usually indicative of virus infection, what is
the malware/virus status of the machine? If you think it is clean, what
programs (and versions) did you use to determine this?

Be sure the machine is clean:
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Malke

 

[Albert Gerber]

Since this behavior is usually indicative of virus infection, what is
the malware/virus status of the machine? If you think it is clean, what
programs (and versions) did you use to determine this?

Be sure the machine is clean:
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Malke

Malke,

Thanks for answering. I used Ad-Aware SE Personal, build 106r1 first to
check for malware along with Spybot-S&D 1.4, latest update Aug 11, 2006. For
virus control, I use eTrust EZ Antivirus with the latest update. I'm behind
a router with ZoneAlarm and XP's forewall. As you say, this is a lengthy
process. I will run this in safe mode in my tomorrow as I had no success in
standard mode.
Thanks again,
Li'l Al

 

[Rick \Nutcase\ Rogers]

Hi Albert,

Delete the one in the system32 folder, it's probably a virus. If it won't
delete, then it's an active virus (and the machine's not as clean as you
might think). It doesn't belong there anyways, and is likely the one being
triggered when you try to run it from the prompt. Double click the one in
the binaries folder. If it doesn't open, then you are definitely infected
and the virus is unquestionably active. Often times detection and clean up
needs to be done in safe mode or even from bootable media outside of the
operating system. The machine may read clean when scanned in normal mode,
but that is because the bug or bugs are active and masking themselves from
detection - this is quite common.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Windows help - www.rickrogers.org

 

[Albert Gerber]

Back again, Malke.

I printed the pages from your web site and ran the whole process in safe
mode. Nothing showed up. I ran it from my thumb drive which was an
interesting experience. To answer Ricks post, I deleted all instances of
*msconfig* which was not a problem. I noticed that I ended up with instances
of Msconfig.exe with numbers and letters (35E4DAE9.pf ) in the
Windows\prefetch folder, the results of trying to open the exe, which showed
up when I first found the problem and again after replacing the exe file
from the emergency files on Doug Knox's web site. If I understand what I"m
reading the virus that does in the msconfig file also does in the program
manager and regedit. They are working fine.

Li'l Al