hi y'all my norton says i have i virus w32.spybot.worm in my msconfig.exe file. i cant repair, quarrentine, or delete this. HOW can i get rid of or fix this ??? i have searched the knowledge base and have no luck with a solution. i have a "gohst" image and i can re-gohst if thats what it will take. thanks wojo

Boot into safe mode and click Start > Run > type command and click OK. Type the following and hit enter after each. cd\ cd \windows copy regedit.exe regedit.com start regedit.com Click the + next to the following keys. HKEY_CURRENT_USER Software Microsoft Windows Current Version Scroll down and right click on the RunOnce folder and click delete. Scroll up and click the - next to HKEY_CURRENT_USER. Click the + next to the following keys. HKEY_LOCAL_MACHINE Software Microsoft Windows Current Version Scroll down and click on the Run folder. In the right hand window, right click on MSCONFIG32.EXE and click delete. Close regedit. Find MSCONFIG32.exe and delete it. Reboot to Windows. Then go to http://www.dougknox.com. In the left pane click on 'WinXP fixes'. Then in the main window click on 'File association fixes'. Download and run the Exe file association fix.

Tom41, I have the same problem. I followed your directions, but when it says to delete RunOnce, the only file is "Run" and not "RunOnce." Should I just delete "Run" instead? Under HKey Local Machine, I right clicked on MSCONFIG32.exe to delete it. You say to close regedit, find MSConfig32.exe and delete it. How do I do that? Thank you so much

Reen, No, do not delete the Run folder. Close regedit and click Start > Find (or Search if using XP) and type in msconfig32.exe and click find now. When the search finds it, right click on the entry and choose delete. empty the recycle bin. Or you can just navigate to C:\Windows\System and find the file and delete it. Make sure you can view hidden files and folders.

ok hold-up.... check if u can open msconfig, regedit from Start>RUN if it closes as soon as u open it or ctrl+alt+delete is not working u might have the new virus/hack patch called webdav.exe and dcom.exe.... it would be on load on boot so u wont be able to delete it.... check ur startup folder if those things are there and quarantine and delete it frum that folder....create a new user with admin status to access ur msconfig and take out the check mark on them..... am not quite sure if this is the same prob ur having but it sounds like it... it's the new virus er sumwhat a hack patch...

I have the same issue on my pc, did the fix work for you guys?

I tried the removal instructions from symantec and what you listed above and I am still getting messages from Norton that I have virus w32.spybot.worm. It is in c\windows\system 32\msconfig35.exe. I cannot repair it or delete it. What are my options?