Microsoft Ramps Up "Fix it" Support Tool
CWmike writes "Microsoft has ramped up its new Windows support assistant 'Fix it for me' nearly three months after it quietly released the automatic repair and configuration tool. The upgrade adds a 'Fix it' button to some of the support documents that Microsoft posts to its Knowledge Base. The blog introducing the changes lists some of the Knowledge Base documents that boast the 'Fix it' button, including one that prevents users from connecting a USB storage device — useful in protecting against one of the infection vectors of the 'Downadup' worm. Have ideas for the tool? In a forum on the 'WinVistaClub' Web site, someone who said he was part of the 'Fix it' team at Microsoft encouraged users to send feedback on the feature to the group at fixit4me@microsoft.com."
What happens when the "fix it tool" itself breaks?
I have a bad feeling about this...
But Jim has already fixed it for me.
This seems rather exploitable, I wonder how long before we have viruses that hijack this application when an infected user tries to use it. They are better off with a good online knowledge base for common problems than some 'fix it for me' tool. Education is the key to solving the most common issues. I remember removing a number of viruses and spyware from this one ladies computer. She would then promptly go back and download the 'games' that gave her the viruses in the first place. Great for income, not so great when the customers accuses of you not fixing a problem the first time around. More times than not I feel like I should be working on the user instead of the PC. I guess all this goes back to the teach a man to fish analogy.
This seems like a great thing to try to hack. 5 bucks to the first one who gets the "Fix It" button to download and fire up an Ubuntu installer.
This guy's the limit!
Install Linux?
loyalty above all, save honor
ultimately they need to add a "Fuck It" button that, when pressed, formats the HD and installs Ubuntu
the 'Fix it' button, including one that prevents users from connecting a USB storage device -- useful in protecting against one of the infection vectors of the 'Downadup' worm.
Funny, something I just sent a co-worker fits this.
"Everything, from people to rocks, axiomatically has a basic nature to what it does, what it just tends to do and how. I find life is much simpler and more pleasant when I recognize what that is, and interact on it/he/she/they on it's own terms and in its own way. This G-D net-nanny [or, in TFA's case, "Fix It" disabling functionality] stuff is just another example of what screws up human existence: instead of facilitating things happening, it stands in the way and interferes in obtuse ways."
The problem isn't people attaching USB storage devices, it's that OS design flaws allow for malicious misuse. Of course, M$'s "Fix It" solution is to kill the messenger, not fix the "yeah I'll do anything you say" OS - and we all know what kind of annoyance, headaches, breakage and new infection vectors will follow as a result.
Can we get a "-1 Wrong" moderation option?
Beat me to it.
As soon as I saw the headline, I wondered how long it would take for some intrepid joker to hack the site...linking all of the 'Fix It' buttons to 'Wubi.exe'.
LOL!!! Hilarity then ensues!
The year of Linux on the Desktop, indeed...by hook or crook!!
I would have to celebrate this with a drunken ROFLCOPTER while wearing my Groucho Glasses, and making fart noises with my armpit!
Down With Slashdot BETA!!! I've been around the corner and seen the oliphant; you can only abuse me from your perspecti
A kbase entry with a "fix it" button for when my network card is not working.
The problem with her computer was between the chair and the keyboard. Anyway, to shorten the story, I asked her if she's ever Googled for answer to her problems or looked at the manual. Nope.
Folks like that who would actually benefit from something like that will never come across it because they don't even think of searching the net for a solution; let alone of actually reading the manual and following the trouble shooting guide in the back.
People like us, tech savy, will never trust a script like that from MS.
This is doomed to fail.
Can we get a "Don't break this for me" checkbox instead?
Actually, in all seriousness, it's possible for us to have this very technology on Linux: apturl.
Since .deb packages can contain scripts and configuration files and whatnot, it wouldn't be too hard to create .deb packages that fix common problems.
My blog
There's a meta fix for any broken Fit It tools available here.
Mongrel News all the news that fits and froths
I've always thought it was strange how KB articles can get to have some really complicated actions, yet they can't just give you a script to do what they're telling you to do. That would be really helpful.
Here's an example of something i saw the other day:
1. Insert the CD into the CD drive or DVD drive.
2. Click Start, and then click Run.
3. In the Open box, type cmd, and then click OK.
4. At the command prompt, type the following commands, pressing ENTER after each command:
expand CD-ROM Drive Letter:\i386\config.nt_ c:\windows\system32\config.nt
expand CD-ROM Drive Letter:\i386\autoexec.nt_ c:\windows\system32\autoexec.nt
expand CD-ROM Drive Letter:\i386\command.co_ c:\windows\system32\command.com
exit
5. Start or install the program. If the issue is resolved, do not complete the remaining steps. If the issue is not resolved, go to the next step.
6. Note: The Command.com file is not edited or created in the following process. Because of this, you may have to expand it from your Windows XP CD-ROM.
Start Notepad.
7. In Notepad, type the following entries:
dos=high, umb
device=%SYSTEMROOT%\system32\himem.sys
files=40
8. On the File menu, click Save As.
9. In the File Name box, type Config.nt, and then click Save. Close the Config.nt file.
10. On the File menu, click New.
11. In the new blank document, type the following entries:
@echo off
lh %SYSTEMROOT%\system32\mscdexnt.exe
lh %SYSTEMROOT%\system32\redir
lh %SYSTEMROOT%\system32\dosx
SET BLASTER=A220 I5 D1 P330 T3
12. On the File menu, click Save As.
13. In the File Name box, type Autoexec.nt, and then click Save. Close the Autoexec.nt file.
14. Start Windows Explorer. Locate the Config.nt file, right-click the Config.nt file, and then click Copy.
15. Right-click the %SYSTEMROOT%\System32 folder, and then click Paste.
16. Locate the Autoexec.nt file, right-click the Autoexec.nt file, and then click Copy.
17. Right-click the %SYSTEMROOT%\System32 folder, and then click Paste.
18. Locate the Command.com file, right-click the expanded Command.com file, and then click Copy.
19. Right-click the %SYSTEMROOT%\System32 folder, and then click Paste. Restart your computer.
If the issue continues to occur, copy the Autoexec.nt and Config.nt files from the Repair folder in Windows to the System folder. To do so, follow these steps:
1. Click Start, click Run, type c:\windows\repair, and then click OK.
2. Right-click Autoexec.nt, and then click Copy.
3. Click Start, click Run, type c:\windows\system32, and then click OK.
4. Right-click anywhere in that folder, and then click Paste.
5. Right-click the Autoexec.nt file that you just copied, and then click Properties.
6. Click to select Read-Only, and then click OK.
7. Repeat steps 1 through 6 to copy the Config.nt file.
Note You must enable Read-Only permissions or the files will be removed after you restart Windows.
They can't just give me a script to run? It's simple for me to do all that, but time consuming and annoying.
-Taylor
Worldwide Military budgets: $2100 billion. Worldwide Space Exploration budgets: $38 billion. Really, world? Really?
I will give 100 dollars to the guy who does this.
We should do some kind of campaign or contest for this.
So this will fix stuff for me? I dont really think this will work to well.
cmd:fixitforme.exe -get -girlfriend
By reading this you agree to give me (Noxn) 1 dollar.
It's just scripted patches with e.g. included modified files, but included within an MSI.
I don't see why this cannot be deployed as patches/hotfixes instead of just calling it "FIX IT" scripts.
I find this amusing. My guess is that Microsoft had so many "IT Professionals" reporting that the fixes in KB articles failed due to UAC blocking them, thus this fix it is coming to town, popping up a window asking for administration privileges.
Way back in the day, when Pournelle was still posting on BIX and writing in Byte, he recommended Norton Windoctor. For a while, (before, like all Norton products, it was ruined by bloat), it automagically fixed Win95/98 and even some XP installations quite well.
Worth trying if you're trying to fix one of those old installations and don't really want to re-install.
This is just what we need, having the power of downloading and executing arbitrary code with a single click will finally put Linux on par with Internet Explorer!
you just open up the browser and put in your question. then search between vulnerability reports and archived mailing lists.
or posting on some forum and wait for your question to be answered.
wait, that doesn't seem better...
including one that prevents users from connecting a USB storage device
OK, I've read the blog, still can't find the UBS autorun fix. Considering that it is well knows that just turning off Autorun in XP doesn't really work, it very well might be nice to have this fix. Anyone know where the "fix it" link to this is?
I'm an American. I love this country and the freedoms that we used to have.
That their tools can detect some things you might not think to look for. I've used the "Check for solutions online," thing before. Usually it doesn't get anything, meaning no answer found. Sometimes, it gets generic info that I already knew. Like it'll say "Your graphics driver caused the crash," which is evident from the STOP 0xA in nv4_disp.dll. No real fix, but that could be useful to someone less knowledgeable. I happen to know the files for the graphics driver, and what a STOP 0xA error is, most users probably don't.
However occasionally, it has been real useful. For example I was trying to install a Sound Blaster X-Fi. I'd launch it's installation CD, and it would crash. Had no idea what was going on. I decided "Ok smart guy, go ahead and check." It responded that Quicktime was the problem. Fine, I'll play ball, I uninstall Quicktime. Sure as shit, installer runs fine. Not something I ever would have though to check.
So while I certainly won't be running an automated fix script, I do applaud them in trying to increase their ability to check system errors. While I know everyone on Slashdot likes to give MS shit about being the source of all problems, that's really not the case. 3rd party software causes plenty of trouble.
For example, there is no legitimate reason for AutoRun to work on any device other than an optical disk (and even then, the rationale is debatable given the crap Sony pulled with the rootkit). Change the default to make AutoRun only work for optical disks.
Or that stupid "hide extensions for known file types" which just makes it harder to tell the difference between porn.jpg (harmless pornography) and porn.jpg.exe (malware pretending to be harmless pornography)
Also, lets disable the stuff in Outlook and Outlook Express (and other mail clients) that allows code to run just by reading an email. Better yet, introduce "show only text, not HTML" options ala SeaMonkey and others and encourage users to use those options. HTML email is only used for SPAM and other nasty stuff.
The problem isn't that you can do what you want with your OS. The problem is that there are so many holes in its security that programs that you don't even know exist and are communicating with your system can do what they want as well.
It's better to vote for what you want and not get it than to vote for what you don't want and get it.
- E. Debs
Thanks. This does indeed seem to be what the /. summary was talking about, but I was hoping for a fix-it that just corrects the autorun problems in XP, which would prevent many of the viruses that are transmitted by USB flash drives and other autorun things automatically starting and infecting you before you can even inspect them. I guess I have to admit that if you completely muck things up so that a USB storage device can't be used at all that this might also "fix" the Microsoft created problem, at least in Microsoft's mind, but it turns out to not really be the fix-it that I was hoping for.
I'm an American. I love this country and the freedoms that we used to have.
I would rather download a nice little utility, but Microsoft seems to want to take this direction. Now that's progress!
You may find it easier to follow the steps if you burn down your house first.
What?
A lot of windows software (not MS software specifically) have fixit instructions on their web page to take care of problems - a lot of these are lists of things I wouldn't want my mom trying without my standing over her shoulder. "Start by downloading and opening this registry editing tool...."
Symantec is god of this phenomena, and tried to give the MAC community a "uninstaller" for their antivirus software (don't even get me started) that was something like 119 terminal commands to type. (no, I am not kidding, lots of kill and rm -rf) It didn't remove it all either, but ignoring that, they finally released an uninstaller tool which was a bash script that just did what they told you to type. There's a serious mentality issue that has to be overcome and that "fix it" button is a step in the right direction.
It's one thing to tell someone how to fix the problem, (and in a way that the user may be completely incapable of doing on their own) and quite another to give them a one click solution.
Though you can't avoid that fostering the opposite issue, users willing to click any button that promises to "fix" things for them. Windows AV 2009 anyone? In the end the only real fix is education.
I work for the Department of Redundancy Department.
I'd like the tool to be able to fix the problem with Microsoft Vista backup. If you have a nonstandard boot loader (such as grub) and multiple partitions, the backup utility in won't detect any devices to back up to... have to rely on third party tools.
This is long overdue. Seriously. They need to identify the problems and FIX IT!.
FirstAidKit
I never tried this one personally though. Last time I fried my MBR I recovered it "by hand".
Colorless green Cthulhu waits dreaming furiously.
Microsoft announced that the MSCE exam course can now be completed in less than half an hour!
If you think someone isn't free to have a different definition of "freedom" you may be a tyrant.
Ctrl + Alt + Linux?
Your company decided to use cheaper labor in China rather than hire US citizens, and you're complaining the Chinese are not conducting their business in a MORAL fashion? LOL: while composing this post, the ad is from the BSA. Maybe that's your answer.
. ... from a cannon. into the sun.
Except that apturl only allows you to install packages that are already in your repositories. You'd need to tell someone to add the malicious repository to your sources.list file first. And even then, if they don't add a GPG key to authenticate, APT will tell them that the package they are trying to install is not authenticated.
Jim'll Fix it!
unfortunately irc wasnt very helpful either, I don't know if it's the whole community or just the places I've been in.
irc channels I've tried that werent very helpful were:
#gentoo #samba #debian
the norm was either repeat the question more than twice, and then typing in caps to see if anyone could answer it.
you are right tho, sometimes it's just trying to find out how to make a program work.