Msconfig won't run

[randy4053]

This problem is on my own office computer. Since it doesn't affect day-to-day operation I just come back to it once in a while. But I'm supposed to be the pro, and if a customer came to me with this problem, I'd be expected to solve it. The computer is running XP Pro SP3.

If I type 'msconfig' in the run box, it just goes away and nothing happens. If I enter it in a command prompt window, nothing happens. I have to enter the whole path - C:\WINDOWS\pchealth\helpctr\binaries\msconfig.exe. (Is that where it's supposed to be? That path is not in my PATH variable). If I navigate to the executable in Explorer and double click it, nothing happens.

It seems rather viral (I have known viruses to disable certain system utilities), but multiple scans come up clean, and I have no other symptoms.

Some time back, I downloaded a fresh executable from MS, and it made no difference. Maybe there's a DLL that it depends on that's corrupted? Maybe it relies on WBEM/WMI, and there's glitch in that subsystem?

Any thoughts/ideas would be welcome.

Thanks,
Randy

 

[dbdawn]

Does it open correctly in safe mode?

EDIT:

Also what happens if you copy and then rename msconfig and run the renamed exe. Does it still not run?

start-> run -> cmd

copy C:\WINDOWS\PCHealth\HelpCtr\Binaries\msconfig.exe c:\one.exe

c:\one.exe

 

[Xander]

Have you tried Autoruns in its stead? If it's viral, it may be blocking msconfig to prevent you from trying to deactivate it. Try something else that does the same job.

 

[randy4053]

Answers to a couple of questions:

No, it doesn't run in safe mode either.
I have tried copying msconfig to another filename - no change.

I had not tried Autoruns, but I just did, and it works.

So that provides the functionality I'm missing, but I'd still like to know what's going on.

Thanks,
Randy

 

[B Trevathan]

If msconfig runs when you enter C:\WINDOWS\pchealth\helpctr\binaries\msconfig.exe then it is not missing a DLL and malware is not blocking it, if you have malware blocking msconfig then it may be blocking other things also, try opening task manager, regedit, etc.

Right click on the msconfig file and copy it to the windows folder.

 

[randy4053]

Well, as I stated initially, it does not run when I enter the entire path. However, I have not spotted anything else that's broken. Regedit works, as does task manager, and every other administrative utility I have tried. Something else may be non-functional, but I haven't found it.

Another aspect - I have checked the event log, and no errors or warnings are generated when I try to start msconfig. Whatever that means...

Randy

 

[Alan22]

You mentioned that you ran multiple scans - I presume with antivirus & antimalware software. Did you also run scans by booting off a live cd or connecting the drive as a secondary in another computer?

This behavior certainly sounds like rootkit activity to me.

Have a look here: http://windowsxp.mvps.org/ToolsQuit.htm

 

[dbdawn]

Have you looked for a file named boot in the root of your system drive? You can open it with notepad, its a "prevent run" file placed there by malicious software. I have come across that one or twice.

Something else to try is adding it as a default value in the apps path in the registry.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths

and this as the value

C:\WINDOWS\PCHealth\HelpCtr\Binaries\msconfig.exe

standard disclaimer saying that messing with the registry can blow up your computer

 

[Methical]

Whats in your PATH system variable ?

 

[kisk]

Sounds like possible rootkit activity... have you scanned with gmer or rootrepeal?

I'd trash that PCHealth too!

 

[B Trevathan]

Well, as I stated initially, it does not run when I enter the entire path.

I thought you were saying it ran if you typed in the whole path.

If I type 'msconfig' in the run box, it just goes away and nothing happens. If I enter it in a command prompt window, nothing happens. I have to enter the whole path - C:\WINDOWS\pchealth\helpctr\binaries\msconfig.exe.

OK if it is not running at all check to see if it is a Image File Execution Option high jack, open regedit go to:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
​

look for a sub key for msconfig if you find one does it have a value something like "Debugger"="malware.exe"
if the Debugger value points to a file that has been deleted then you will have this problem too.

 

[NYJimbo]

google "cannot run msconfig" and see what applies to you.

there are about 20 fixes so its pointless to go one by one here.

sounds like a virus, but could also be something broken.

 

[randy4053]

Thanks for all the ideas!

Coupla answers: The PATH variable is C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\Support Tools\;C:\Program Files\Common Files\Acronis\SnapAPI\;C:\WINDOWS\system32\WindowsPowerShell\v1.0

As for a scan for rootkits, I'm pretty sure (but I'm over 50, so never 100% sure ) that I ran a scan with Avast a few weeks ago. It schedules a scan to run at reboot. I have not tried gmer or rootrepeal. Perhaps I will.

To B Trevathan - sorry about my misleading typo. I misstated the first time. I'll check out your register suggestion.

Finally - I have searched Google as suggested more than once. None of the hits ever lead me to a solution (obviously).

Thanks again,
Randy

 

[randy4053]

Back already...

The registry key referred to does not have a subkey for msconfig. Should it?

Second , forgot to ask kisk: what do you mean "trash the PChealth"? Is this a non-standard place for msconfig to reside?

Thanks,
Randy

 

[dbdawn]

Which registry key?

filler text

Back already...

The registry key referred to does not have a subkey for msconfig. Should it?

Second , forgot to ask kisk: what do you mean "trash the PChealth"? Is this a non-standard place for msconfig to reside?

Thanks,
Randy

 

[B Trevathan]

No the Image File Execution Options registry key should usually not have a sub key for msconfig, malware uses these keys to start their programs instead of the ones you type in.

------------------------

Did you try to see if the registry path is set correctly by going to:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\

find the sub key MSCONFIG.EXE then in the right pane, next to Default, it should show:

C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe

------------------------

I just found this program, you might want to try it. http://www.dependencywalker.com/
Its a portable program so you don't even have to install it, just download and unzip it, to use it, Open the program > Click File > Click Open > Find Msconfig > Click OK. Make a note of any errors or other red flagged entries. Some will be normal but it may give a clue as to what is happening.

------------------------

Also check for a registry key like this:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\” /v “DisableMSConfig”

------------------------

Do you have a windows XP pro CD with SP3 to do a system file check?
Do you have a CD of SP3 for XP so you can reinstall SP3?

 

[NYJimbo]

I think the real issue here is :

Do you get an error or warning when trying to run msconfig or does it seem to run for a second and stop.

Many replies here about registry fixes are valid if you get an error about something missing, but if you get a "flash" of something and then nothing it really starts to lean towards a resident bad guy intervening.

 

[RegEdit]

Viruses attack msconfig, taskmanager and other important tools.
Here's at least a temporary fix....
http://www.dougknox.com/xp/utils/xp_emerutils.htm