advised removal procedure removed msconfig

trifftruff · Jan 4, 2008

Hi,

I had two files in the system32, named jkhlg.exe and .dll ( or something like this) I used the removal procedure with the programs you advised on this site AND IT SUCCEEDED.

BUT It really seems that combofix.exe removed my msconfig program because it cannot be found when I try to run it from the start->run 'msconfig'. It cannot either be found by searching on my computer. Unfortunatelly I accidentally ran combofix.exe again later (I clicked on the wrong icon) but it didn't ask me whether or not to do the procedure, like it asked first time, so I let it run, and it Overwrote the original logfile it created at the first time. Therefore I don't know now for sure if it deleted msconfig.
What should I do? msconfig is essential.
Thank you for your help!

TimW · Jan 4, 2008

In XP it should exist in these two locations:

C:\WINDOWS\pchealth\helpctr\binaries
C:\WINDOWS\system32\dllcache

Can you confirm that it is in these locations please?

If so, there are a few ways that might work to fix it:

(preferred option)
Go to Start Menu > Run and type regedit. Navigate to the following key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\

There should be a key (folder) called MSCONFIG.EXE which should contain single value called Default. Default should have C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe

.. or ..

(non-preferred option)
Copy one of the existing msconfig.exe files to the C:\WINDOWS\system32 folder.

If it doesn't run, it's possible that there is either some form of malicious software preventing you from running it or both of those files are corrupt. In the case of the latter, you can try extracting a new copy from the XP CD:

Put the XP CD in the drive and then go to Start Menu > Run and type CMD. At the command prompt, type:
EXPAND -R D:\I386\MSCONFIG.EX_ C:\WINDOWS\PCHEALTH\HELPCTR\BINARIES
(Assuming D: is the drive letter of your CD/DVD drive)

Otherwise:
Please follow the instructions in the below link and attach the requested logs when you finish these instructions.

READ & RUN ME FIRST. Malware Removal Guide

trifftruff · Jan 5, 2008

Yes, copying the original msconfig.exe from the cd solved the problem, thank you very much!

TimW · Jan 5, 2008

No problem....let us know if you need additional assistance.

Log in or Sign up

advised removal procedure removed msconfig

trifftruff Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

trifftruff Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member