Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - ChrisE

Pages: [1]
1
Hey there,

I am posting this in case it may help others with this particular issue in the future.

I was working on someones computer who has what so far appears to be some permission issues on their computer, with various programs they try to run bringing up messages related to not being able to access their folders or registry settings (Office programs giving 'could not create the work file.  Check the temp environment variable' etc..).

So I had tried to run the Pro edition of Windows Repair All In One and got the 'Invalid Picture' message in normal windows, booted into safe mode to test and got the same message.  I did some googling and found different VB threads, and also some threads here about it, that generally boiled down to the computer is in bad shape, and probably best to do a repair install.

I did try a sfc /scannow that was recommended but it found no issues on this one, another tool I was using specifically gave me an error about it not being able to make its file in the user\appdata\local\temp directory, so I set about manually checking permissions on appdata, local and temp to see if there was anything unusual there and there did not appear to be.

When I went to manually open temp, it gave the 'you don't have permissions to access this folder, click continue to allow' type message, after doing that it loaded temp and the files in it, and after that the other tool was able to run (the one that had me start looking at the permissions on the path up to temp).

After this I tried Windows Repair again and it did run (Office ones still had the same issue), so the 'Invalid Picture' issue was resolved, so I was able to move on to checking a prescan, permission repairs and whatnot.

I don't know how helpful this may be to help track it down either for Shane or others that may have this particular message in the future, but I figured I would post it in case it may help anyone.

Edit: forgot to put in the Windows system, which is Windows 7 Home Premium 64bit.

2
Just one more thought on the virus removal tab if I may, having a link you can update is good, it still be would be good to at least have a couple programs still listed in addition to it (such as malware bytes and possibly another not so potentially dangerous one).

I just think this for the fact that there will be (and I have helped a good number) of people who are not online or able to get online at the time when they run the program, maybe they are working with someone helping them, or maybe they were looking up a program to help them on another computer and transferred it over, or maybe they just went into safe mode w/o networking after getting it.

Those are my thoughts anyhow, changing it to just a link which needs an active connection I could see as causing issues both from people that can't get online or might skip the stage if it's just a link (the original worry about users not realizing or thinking virus scans should be done before running repairs)

3
I have a couple things that have me wonder a little about that list, specifically that Spybot S&D is not listed in the malware section at all, and Malware Bytes while not a dedicated rootkit remover true, is not listed under rootkit removal.

Edit: Although it does have a different sites Spybot Portable version of it under portables.

Yes it's not dedicated to it, and it is not fool proof but it definately does detect and remove a good number of rootkit's in addition to the other general malware.

That said and just to add my two cents to what's been said already, I have personally found the fact that Windows Repair AIO is made just the way it is (though I can definately agree with having ComboFix, and to a much lesser extent TDSSKiller not on the stage 1 page for general use purposes) to be a great boon.

I work on a number of issues ranging from internet troubleshooting to various computer repair issues & virus removal, some locally but a large part remotely.  I've used Windows Repair AIO on a good number of them, having a tool that can deal with both standard software issues as well as more malware related ones is very handy.

Of course on the other side of the coin I can also see where coming from just recommending a general user to use the tool that could be problematic at times.

Pages: [1]