Jump to content

MM_john

Members
  • Posts

    3
  • Joined

  • Last visited

Everything posted by MM_john

  1. I was about to do that, and I noticed there's a new version with 'big changes'. Anybody have experience with it? Didnt want to be the guinnea pig. I considered downloading the previous version, but what if there was a bug that was fixed with the new version? So I ran MS Check Update Readiness Status instead. Less powerful. But also less dangerous. My other issue with Tweaking.com AIO Repair is that I wish it had a diagnostic pass, and reported what it was going to change. Instead of turning it on and making all the changes. Then it would be nice to pick and choose the repairs individually. There's some interaction with the changes so I know that's sorta hard. @thisisu thanks for the attenion.
  2. [i postedt this originally on http://www.bleepingcomputer.com/forums/t/593266/junkware-removal-tool-jrt-crashes] I have a thinkpad which had malware that I am assuming was cleaned. The PC has Avast Internet Security, and SuperAntispyware (both paid) running when windows starts. It also has MalwareBytes Antimalware (paid) running daily scans but not real time. All of these are now clean. I have not run another root kit detector, altho MBAM's anti-rootkit was enabled. I downloaded from BleepingComputer AdwCleaner and it found and cleaned things. I downloaded from BleepingComputer Junkware Removal Tool (JRT) and it did not find anything but crashed in the middle. It just stopped, no error message, no log, no .txt file. The final message in the cmd window was "Checking registry" which had been there for 2-5 minutes. Watching in process explorer, it was forking reg.exe and GREP.DAT processes repeatedly. And a pair of those was the last thing it forked. I suspect this PC has damage from malware. For example, HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders was empty This meant that, eg, the %AppData% environment variable had no value and programs were creating %AppData% folders in their current working directories all over the file system. I repopulated that registry key, and things improved. But there might still be other damage. But the only symptom now is JRT problems. A couple notes: The username contains the '&' (ampersand) character, say, "alice&bob". So if you do eg echo %userprofile% in cmd it results in two commands, delimited by the ampersand, and the error "bob is not recognized as a internal or external command...". Of course if you put qoutes around the "%userprofile%" it's fine. One other interesting phenomena is that the initial screen of jrt says click the [x] to exit, but when i do that, nothing happens. And typing Ctrl-C at the very first "press any key to continue..." prompt does not interrupt the batch script, just causes jrt to continue executing. JRT's first step (that it reports) is creating restore point, if i typed Ctrl-C as the 'any key' to get jrt started, then typing Ctrl-C at this point does provide the "Terminate batch job?" prompt. But if i typed another key, then Ctrl-C is ignored during creating restore point, and only works in later steps. Also jrt is printing several "The system cannot find the path specififed." error messages between "press any key" and "creating restore point." The jrt.exe I was using was 7.6.4 09.28.2015:1 sha1: e353aee99d919ca1b5f00f81de3d57c769438ce2
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.