[SOLVED] msconfig missing

[Kanzu5665]

So I downloaded ComboFix and followed the instructions as posted on here:

http://www.bleepingcomputer.com/comb...o-use-combofix

All went well. However, after I ran it, I realized that it deleted msconfig.exe. It also deleted other various things. Is this normal? Also, why did it delete that?

(I have the log. If you want me to post it, please say so.)

[tetonbob]

Hello -

First of all, ComboFix is not a tool which should be used in an unsupervised environment, and it says so in the disclaimer you had to see before it ran. It also is mentioned in the very user's guide you've linked to.

Using ComboFix

If you need help with malware removal, then please create a topic at one of the forums listed later in the guide and ask for help. As many forums will request a ComboFix log only if they feel it is necessary, you should not run ComboFix until you are asked to by a helper. Please note that each forum has different policies, so please be sure to read any pinned topics and rules for the particular forum about how you should go about receiving help.

Second, we have certain protocols for posting about malware removal assistance here. See this topic:

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help

In that topic, you'll again see that the author of ComboFix does NOT want his tool run without someone seeing diagnostic logs before it gets run.

Third, what makes you think msconfig.exe was deleted?

Yes, post the log, it's located at C:\Combofix.txt

[Kanzu5665]

I didn't think ComboFix would delete non-malicious files. If worse comes to worse, I can always system restore.

[tetonbob]

Why do you have C:\Windows\Windows on that machine? Is this some sort of failed parallel install? We can restore that folder, but I need some more information first.

Please go to Start > Run and copy/paste the following, then press Enter:

C:\QooBox\ComboFix-quarantined-files.txt

Post the contents of the logfile which will open.

If Windows is functioning properly, you may wish to reconsider restoring that folder.

If you're receiving a message that Windows cannot find msconfig, let me know, because we can fix that.

[Kanzu5665]

Sorry I can't paste the log; it's about 1.5 million characters. -_- (Apparently, the .txt file is also too big for me to upload.) Therefore, I put it into a .zip folder.

Here's what happens when I put msconfig in Run.

[tetonbob]

As I said, we can fix the missing msconfig, but I need for you to answer the questions above also....the deleted folder appears to be from a failed parallel install, and if Windows is functioning properly for you, may well not be needed. It got deleted because %windir%\Windows is a malware location.

Open notepad and copy/paste the text in the quotebox below into it:

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MSCONFIG.EXE" /ve /t REG_SZ /d %systemroot%\pchealth\helpctr\Binaries\MSCONFIG.EXE /f

Save this as fix.bat Choose to "Save type as - All Files"
It should look like this:
Double click on fix.bat & allow it to run

Try msconfig again, and let me know.

[Kanzu5665]

Thanks, msconfig is working.

I don't know why it's C:\Windows\Windows. I did reinstall Windows after my hard drive crashed, but will that affect it?

Also, what about all the other things that ComboFix deleted? Should I be worried about that too?

[tetonbob]

I'm not in front of the machine. If you machine is working fine without that folder in place, I'd say we can leave it deleted. They seem to be superfluous files in a non-standard directory.

It's your call. I'll be happy to help you restore it, but I don't think it's needed.

[Kanzu5665]

It's fine. Thanks for all your help. :)