The .exe extension on a filename indicates an executable file. Executable files may, in some cases, harm your computer. Therefore, please read below to decide for yourself whether the MSConfig.exe on your computer is a Trojan that you should remove, or whether it is a file belonging to the Windows operating system or to a trusted application.
The process known as System Configuration Utility or 1:00-7:00 or VIRUS or uslotttery or X1iqfopNgnDUz6mjRTLC3fAVijUgsiiDBRYeC9W1nW1UK or Qk0t1E
belongs to software Microsoft Windows Operating System or Error or j7T6Hsr3 or WinRAR or BeatsByDreeS or plHi9lQ7nIzHQIZFdm5srMHn2qgRoSjaKrSxCKrvKIZ9q or Project1 or Application
by Microsoft (www.microsoft.com) or ZK or Na45P or ZrPSFscnEItc0mwvmOTQmalqAwXK962tg95RyQo2cjCW5 or BeatsByDreeS.
Description: The original MSConfig.exe from Microsoft is an important part of Windows, but often causes problems. The MSConfig.exe file is located in a subfolder of C:\Windows.
Known file sizes on Windows 10/8/7/XP are 169,984 bytes (41% of all occurrences), 158,208 bytes and 8 more variants.
The program has a visible window. The MSConfig.exe file is a Microsoft signed file. The MSConfig.exe file is a Windows core system file. MSConfig.exe is able to record keyboard and mouse inputs. Therefore the technical security rating is 0% dangerous, however you should also read the user reviews.
Recommended: Identify MSConfig.exe related errors
Is MSConfig.exe a virus? No, it is not. The true MSConfig.exe file is a safe Microsoft Windows system process, called "System Configuration Utility".
However, writers of malware programs, such as viruses, worms, and Trojans deliberately give their processes the same file name to escape detection. Viruses with the same file name are for instance WS.Reputation.1 or Trojan.Gen.2 (detected by Symantec), and TROJ_GEN.R0CBC0DFN13 or TROJ_SPNR.0AKL12 (detected by TrendMicro).
To ensure that no rogue MSConfig.exe is running on your PC, click here to run a Free Malware Scan.
How to recognize suspicious variants?
If MSConfig.exe is located in the C:\Windows\System32 folder, the security rating is 63% dangerous. The file size is 557,056 bytes (34% of all occurrences), 1,287,695 bytes and 12 more variants. The software starts upon Windows startup (see Registry key: MACHINE\Run, Run, MACHINE\RunServices, MACHINE\User Shell Folders, win.ini, Userinit). The file is not a Windows core file. There is no description of the program. It is an unknown file in the Windows folder. The program is not visible. MSConfig.exe is able to record keyboard and mouse inputs, hide itself and monitor applications.
If MSConfig.exe is located in a subfolder of the user's profile folder, the security rating is 45% dangerous. The file size is 102,912 bytes (20% of all occurrences), 464,384 bytes and 7 more variants. The program starts upon Windows startup (see Registry key: MACHINE\Run, Run, MACHINE\RunServices, MACHINE\User Shell Folders, win.ini, Userinit). MSConfig.exe is not a Windows core file. There is no description of the program. MSConfig.exe is able to manipulate other programs and record keyboard and mouse inputs.
If MSConfig.exe is located in a subfolder of "C:\Program Files", the security rating is 48% dangerous. The file size is 1,916,928 bytes (20% of all occurrences), 145,408 bytes, 6,230,016 bytes, 2,781,696 bytes or 433,664 bytes.
If MSConfig.exe is located in the C:\Windows folder, the security rating is 68% dangerous. The file size is 484,868 bytes (50% of all occurrences) or 26,624 bytes.
If MSConfig.exe is located in the Windows folder for temporary files, the security rating is 50% dangerous. The file size is 83,210 bytes.
If MSConfig.exe is located in a subfolder of Windows folder for temporary files, the security rating is 56% dangerous. The file size is 225,280 bytes.
If MSConfig.exe is located in a subfolder of C:\Windows\System32, the security rating is 90% dangerous. The file size is 28,874 bytes.
External information from Paul Collins:
There are different files with the same name:
Important: Some malware camouflages itself as MSConfig.exe, particularly when located in the C:\Windows or C:\Windows\System32 folder. Therefore, you should check the MSConfig.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.
A clean and tidy computer is the key requirement for avoiding problems with MSConfig. This means running a scan for malware, cleaning your hard drive using cleanmgr and sfc /scannow, uninstalling programs that you no longer need, checking for Autostart programs (using msconfig) and enabling Windows' Automatic Update. Always remember to perform periodic backups, or at least to set restore points.
Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.
To help you analyze the MSConfig.exe process on your computer, the following programs have proven to be helpful: Security Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. Malwarebytes Anti-Malware detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.