Microsoft Ramps Up "Fix it" Support Tool
CWmike writes "Microsoft has ramped up its new Windows support assistant 'Fix it for me' nearly three months after it quietly released the automatic repair and configuration tool. The upgrade adds a 'Fix it' button to some of the support documents that Microsoft posts to its Knowledge Base. The blog introducing the changes lists some of the Knowledge Base documents that boast the 'Fix it' button, including one that prevents users from connecting a USB storage device — useful in protecting against one of the infection vectors of the 'Downadup' worm. Have ideas for the tool? In a forum on the 'WinVistaClub' Web site, someone who said he was part of the 'Fix it' team at Microsoft encouraged users to send feedback on the feature to the group at fixit4me@microsoft.com."
What happens when the "fix it tool" itself breaks?
I have a bad feeling about this...
But Jim has already fixed it for me.
This seems rather exploitable, I wonder how long before we have viruses that hijack this application when an infected user tries to use it. They are better off with a good online knowledge base for common problems than some 'fix it for me' tool. Education is the key to solving the most common issues. I remember removing a number of viruses and spyware from this one ladies computer. She would then promptly go back and download the 'games' that gave her the viruses in the first place. Great for income, not so great when the customers accuses of you not fixing a problem the first time around. More times than not I feel like I should be working on the user instead of the PC. I guess all this goes back to the teach a man to fish analogy.
This seems like a great thing to try to hack. 5 bucks to the first one who gets the "Fix It" button to download and fire up an Ubuntu installer.
This guy's the limit!
Install Linux?
loyalty above all, save honor
ultimately they need to add a "Fuck It" button that, when pressed, formats the HD and installs Ubuntu
the 'Fix it' button, including one that prevents users from connecting a USB storage device -- useful in protecting against one of the infection vectors of the 'Downadup' worm.
Funny, something I just sent a co-worker fits this.
"Everything, from people to rocks, axiomatically has a basic nature to what it does, what it just tends to do and how. I find life is much simpler and more pleasant when I recognize what that is, and interact on it/he/she/they on it's own terms and in its own way. This G-D net-nanny [or, in TFA's case, "Fix It" disabling functionality] stuff is just another example of what screws up human existence: instead of facilitating things happening, it stands in the way and interferes in obtuse ways."
The problem isn't people attaching USB storage devices, it's that OS design flaws allow for malicious misuse. Of course, M$'s "Fix It" solution is to kill the messenger, not fix the "yeah I'll do anything you say" OS - and we all know what kind of annoyance, headaches, breakage and new infection vectors will follow as a result.
Can we get a "-1 Wrong" moderation option?
Beat me to it.
As soon as I saw the headline, I wondered how long it would take for some intrepid joker to hack the site...linking all of the 'Fix It' buttons to 'Wubi.exe'.
LOL!!! Hilarity then ensues!
The year of Linux on the Desktop, indeed...by hook or crook!!
I would have to celebrate this with a drunken ROFLCOPTER while wearing my Groucho Glasses, and making fart noises with my armpit!
Down With Slashdot BETA!!! I've been around the corner and seen the oliphant; you can only abuse me from your perspecti
A kbase entry with a "fix it" button for when my network card is not working.
The problem with her computer was between the chair and the keyboard. Anyway, to shorten the story, I asked her if she's ever Googled for answer to her problems or looked at the manual. Nope.
Folks like that who would actually benefit from something like that will never come across it because they don't even think of searching the net for a solution; let alone of actually reading the manual and following the trouble shooting guide in the back.
People like us, tech savy, will never trust a script like that from MS.
This is doomed to fail.
Can we get a "Don't break this for me" checkbox instead?
Actually, in all seriousness, it's possible for us to have this very technology on Linux: apturl.
Since .deb packages can contain scripts and configuration files and whatnot, it wouldn't be too hard to create .deb packages that fix common problems.
My blog
There's a meta fix for any broken Fit It tools available here.
Mongrel News all the news that fits and froths
I've always thought it was strange how KB articles can get to have some really complicated actions, yet they can't just give you a script to do what they're telling you to do. That would be really helpful.
Here's an example of something i saw the other day:
1. Insert the CD into the CD drive or DVD drive.
2. Click Start, and then click Run.
3. In the Open box, type cmd, and then click OK.
4. At the command prompt, type the following commands, pressing ENTER after each command:
expand CD-ROM Drive Letter:\i386\config.nt_ c:\windows\system32\config.nt
expand CD-ROM Drive Letter:\i386\autoexec.nt_ c:\windows\system32\autoexec.nt
expand CD-ROM Drive Letter:\i386\command.co_ c:\windows\system32\command.com
exit
5. Start or install the program. If the issue is resolved, do not complete the remaining steps. If the issue is not resolved, go to the next step.
6. Note: The Command.com file is not edited or created in the following process. Because of this, you may have to expand it from your Windows XP CD-ROM.
Start Notepad.
7. In Notepad, type the following entries:
dos=high, umb
device=%SYSTEMROOT%\system32\himem.sys
files=40
8. On the File menu, click Save As.
9. In the File Name box, type Config.nt, and then click Save. Close the Config.nt file.
10. On the File menu, click New.
11. In the new blank document, type the following entries:
@echo off
lh %SYSTEMROOT%\system32\mscdexnt.exe
lh %SYSTEMROOT%\system32\redir
lh %SYSTEMROOT%\system32\dosx
SET BLASTER=A220 I5 D1 P330 T3
12. On the File menu, click Save As.
13. In the File Name box, type Autoexec.nt, and then click Save. Close the Autoexec.nt file.
14. Start Windows Explorer. Locate the Config.nt file, right-click the Config.nt file, and then click Copy.
15. Right-click the %SYSTEMROOT%\System32 folder, and then click Paste.
16. Locate the Autoexec.nt file, right-click the Autoexec.nt file, and then click Copy.
17. Right-click the %SYSTEMROOT%\System32 folder, and then click Paste.
18. Locate the Command.com file, right-click the expanded Command.com file, and then click Copy.
19. Right-click the %SYSTEMROOT%\System32 folder, and then click Paste. Restart your computer.
If the issue continues to occur, copy the Autoexec.nt and Config.nt files from the Repair folder in Windows to the System folder. To do so, follow these steps:
1. Click Start, click Run, type c:\windows\repair, and then click OK.
2. Right-click Autoexec.nt, and then click Copy.
3. Click Start, click Run, type c:\windows\system32, and then click OK.
4. Right-click anywhere in that folder, and then click Paste.
5. Right-click the Autoexec.nt file that you just copied, and then click Properties.
6. Click to select Read-Only, and then click OK.
7. Repeat steps 1 through 6 to copy the Config.nt file.
Note You must enable Read-Only permissions or the files will be removed after you restart Windows.
They can't just give me a script to run? It's simple for me to do all that, but time consuming and annoying.
-Taylor
Worldwide Military budgets: $2100 billion. Worldwide Space Exploration budgets: $38 billion. Really, world? Really?
I will give 100 dollars to the guy who does this.
We should do some kind of campaign or contest for this.
So this will fix stuff for me? I dont really think this will work to well.
cmd:fixitforme.exe -get -girlfriend
By reading this you agree to give me (Noxn) 1 dollar.
Step 1: FIX!
Step 2: IT!
Step 3: FIX IT!
I thought that was how an OS is supposed to be.
You can bet MS will get flamed whenever they prevent my OS from doing whatever I want.
Here they get flamed for listening to me.
Well, maybe there wouldn't be so much boasting if it had written 'Why the hell was I broken in the first place?' on it instead....
It's just scripted patches with e.g. included modified files, but included within an MSI.
I don't see why this cannot be deployed as patches/hotfixes instead of just calling it "FIX IT" scripts.
I find this amusing. My guess is that Microsoft had so many "IT Professionals" reporting that the fixes in KB articles failed due to UAC blocking them, thus this fix it is coming to town, popping up a window asking for administration privileges.
Way back in the day, when Pournelle was still posting on BIX and writing in Byte, he recommended Norton Windoctor. For a while, (before, like all Norton products, it was ruined by bloat), it automagically fixed Win95/98 and even some XP installations quite well.
Worth trying if you're trying to fix one of those old installations and don't really want to re-install.
If they can put in a "fix it" button, why cant they just put the fucking thing into the software, and make it fix its self, or better yet, not get broken? Its understandable a third party comes up with this sort of thing, because they dont have access to the windows core, but microsoft does, so they should just freaking fix the problems. I think its the same for their antivirus program.
This is just what we need, having the power of downloading and executing arbitrary code with a single click will finally put Linux on par with Internet Explorer!
you just open up the browser and put in your question. then search between vulnerability reports and archived mailing lists.
or posting on some forum and wait for your question to be answered.
wait, that doesn't seem better...
including one that prevents users from connecting a USB storage device
OK, I've read the blog, still can't find the UBS autorun fix. Considering that it is well knows that just turning off Autorun in XP doesn't really work, it very well might be nice to have this fix. Anyone know where the "fix it" link to this is?
I'm an American. I love this country and the freedoms that we used to have.
That their tools can detect some things you might not think to look for. I've used the "Check for solutions online," thing before. Usually it doesn't get anything, meaning no answer found. Sometimes, it gets generic info that I already knew. Like it'll say "Your graphics driver caused the crash," which is evident from the STOP 0xA in nv4_disp.dll. No real fix, but that could be useful to someone less knowledgeable. I happen to know the files for the graphics driver, and what a STOP 0xA error is, most users probably don't.
However occasionally, it has been real useful. For example I was trying to install a Sound Blaster X-Fi. I'd launch it's installation CD, and it would crash. Had no idea what was going on. I decided "Ok smart guy, go ahead and check." It responded that Quicktime was the problem. Fine, I'll play ball, I uninstall Quicktime. Sure as shit, installer runs fine. Not something I ever would have though to check.
So while I certainly won't be running an automated fix script, I do applaud them in trying to increase their ability to check system errors. While I know everyone on Slashdot likes to give MS shit about being the source of all problems, that's really not the case. 3rd party software causes plenty of trouble.
Vista is bloody awful to fix. My parents new hp laptop (12 months old) has seen three vista reinstalls, Good knows what foo bars Vista boot process.
There users, Installing software is not something they do, they use firefox, ie is disabled (as much as it can be)
I can believe that ms shipped that pile of ****.
For example, there is no legitimate reason for AutoRun to work on any device other than an optical disk (and even then, the rationale is debatable given the crap Sony pulled with the rootkit). Change the default to make AutoRun only work for optical disks.
Or that stupid "hide extensions for known file types" which just makes it harder to tell the difference between porn.jpg (harmless pornography) and porn.jpg.exe (malware pretending to be harmless pornography)
Also, lets disable the stuff in Outlook and Outlook Express (and other mail clients) that allows code to run just by reading an email. Better yet, introduce "show only text, not HTML" options ala SeaMonkey and others and encourage users to use those options. HTML email is only used for SPAM and other nasty stuff.
See this link for a description of the program, as well as a link to all automated articles:
http://support.microsoft.com/fixit
The article you are after is here:
http://support.microsoft.com/kb/823732
Thanks. This does indeed seem to be what the /. summary was talking about, but I was hoping for a fix-it that just corrects the autorun problems in XP, which would prevent many of the viruses that are transmitted by USB flash drives and other autorun things automatically starting and infecting you before you can even inspect them. I guess I have to admit that if you completely muck things up so that a USB storage device can't be used at all that this might also "fix" the Microsoft created problem, at least in Microsoft's mind, but it turns out to not really be the fix-it that I was hoping for.
I'm an American. I love this country and the freedoms that we used to have.
Is http://fixitfailblog.org
I would rather download a nice little utility, but Microsoft seems to want to take this direction. Now that's progress!
You may find it easier to follow the steps if you burn down your house first.
What?
No, then you click on the "Fix Everything" link, which fires Steve Ballmer.
A lot of windows software (not MS software specifically) have fixit instructions on their web page to take care of problems - a lot of these are lists of things I wouldn't want my mom trying without my standing over her shoulder. "Start by downloading and opening this registry editing tool...."
Symantec is god of this phenomena, and tried to give the MAC community a "uninstaller" for their antivirus software (don't even get me started) that was something like 119 terminal commands to type. (no, I am not kidding, lots of kill and rm -rf) It didn't remove it all either, but ignoring that, they finally released an uninstaller tool which was a bash script that just did what they told you to type. There's a serious mentality issue that has to be overcome and that "fix it" button is a step in the right direction.
It's one thing to tell someone how to fix the problem, (and in a way that the user may be completely incapable of doing on their own) and quite another to give them a one click solution.
Though you can't avoid that fostering the opposite issue, users willing to click any button that promises to "fix" things for them. Windows AV 2009 anyone? In the end the only real fix is education.
I work for the Department of Redundancy Department.
I'd like the tool to be able to fix the problem with Microsoft Vista backup. If you have a nonstandard boot loader (such as grub) and multiple partitions, the backup utility in won't detect any devices to back up to... have to rely on third party tools.
This is long overdue. Seriously. They need to identify the problems and FIX IT!.
FirstAidKit
I never tried this one personally though. Last time I fried my MBR I recovered it "by hand".
Colorless green Cthulhu waits dreaming furiously.
Well GNU/Linux doesn't really have the same malware problems and so the issues I have are normally of a more benign nature, like not knowing the syntax or options for a program, which a quick read of wiki will usually fix.
I should also recommend you try IRC as you will get a much faster response, luckily I know many long-time GNU/Linux users by IRC and can ask them personally.
But yeah, troubleshooting is never a fun process.
Fix It For Me is a stopgap measure. Disabling USB storage devices while Windows is running is a start in the right direction, but I'm looking forward to Fix It 2010 - Ultimate Edition , which sends an E-Mail to a qualified system administrator requesting that Linux be installed on the machine and then promptly performs a HARD shutdown.
Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
Microsoft announced that the MSCE exam course can now be completed in less than half an hour!
If you think someone isn't free to have a different definition of "freedom" you may be a tyrant.
I have noticed a trend in Microsoft development, and would like to propose a new term to describe what they do: "Rubik's Cube Tools".
The idea is as follows: There is a certain sense of pride that one feels when "solving" a Rubik's Cube. However, closer consideration will reveal that a "solved" Rubik's Cube is really just at the break-even point of having undone the damage caused since taking it out of the box.
Along similar lines, I would say that the majority of "features" in Microsoft products really just exist to undo the damage done by Microsoft products: I'm quite certain that there is a good deal of clever programming that goes into a tool to de-fragment a hard drive, but perhaps it would be better if the operating system didn't fragment the drive in the first place? The ability to fix a problem of your own causing isn't called "genius", it's called "breaking even, but late".
Mark
Ctrl + Alt + Linux?
Your company decided to use cheaper labor in China rather than hire US citizens, and you're complaining the Chinese are not conducting their business in a MORAL fashion? LOL: while composing this post, the ad is from the BSA. Maybe that's your answer.
Except that apturl only allows you to install packages that are already in your repositories. You'd need to tell someone to add the malicious repository to your sources.list file first. And even then, if they don't add a GPG key to authenticate, APT will tell them that the package they are trying to install is not authenticated.
Jim'll Fix it!
unfortunately irc wasnt very helpful either, I don't know if it's the whole community or just the places I've been in.
irc channels I've tried that werent very helpful were:
#gentoo #samba #debian
the norm was either repeat the question more than twice, and then typing in caps to see if anyone could answer it.
you are right tho, sometimes it's just trying to find out how to make a program work.
A good trick is to say "Linux sucks 'cause it can't do X, I'm going back to Windows it does it much better" and see if people will try to disprove you. Might get a quicker response but could be kicked for trolling :P
I click a button on Bill's homepage, and my registry gets changed?
Uhmmmmm.... no.
Everyone who uses this feature is practically applying for membership in a bot-net. Not from MS, but if you're the type of person who would not only spread your computer's legs wide open (i.e. allow someone other than you to change the system) but apply the KY jelly yourself (i.e. do the former over the Internet), you're gonna get fucked. Deservedly.