Printer not activated, error code 30

Hello and welcome everyone, today we will be talking about dreaded keyloggers, why they are dangerous, and how to know if you might have one in your system. Keylogger is a malicious application placed in your system and hidden with only one goal in mind, to get information about what are you typing and by that means for a person who infected you to get information about your credit card information or other sensitive data. They can be introduced into your systems in various ways and often can not be detected easily. Modern antivirus applications have ways of detecting them and removing but this tutorial aims to teach you how to spot them all by yourself since new keyloggers are produced daily and sometimes relying on antivirus alone is not enough. Unlike viruses and trojans, keyloggers are not heavy on system resources and you will not feel slow down on your computer if you have one which makes them harder to sport with regular work. Some of them can be even tracking you on the website and not even be physically present on your computer. Generally, we could categorize keylogger into 4 categories:

1. Web browser-based keylogger. Some websites would have CSS scripts, input web forms, or so-called man in the middle keylogger. Lucky for us even Windows defenders with the latest update can detect this type of keylogger and successfully deal with it and how keylogger itself is not present on our system we are safe.
2. General spyware keylogger. This keylogger is present in your system, usually, it infected it via email attachment, social media download, torrent download, some malicious so-called fixer application, etc. Most antivirus applications and windows defenders can detect these types as well and remove them successfully.
3. Kernel-level keylogger. This keylogger is a more dangerous type they tend to operate underneath Windows as a rootkit and can go undetected by antivirus and windows defenders.
4. Hypervisor-based keylogger. This is the most dangerous keylogger, they use virtualization techniques to hide and mask themselves as a replica of the operating system and they scan all keystrokes by the user. These are very rare keyloggers but they do exist.

If you suspect that you have a keylogger or just want to check your system for precaution reasons follow these tips and guides and luckily you will solve your issue in no time and your data will be safe.

1. Use Task Manager to find suspicious entries.

   Task manager is a great application implemented in Windows that is constantly monitoring and showing all services, applications, and processes currently running on your system and thus a great tool to monitor your system if you know how to use it. First, open task manager by pressing CTRL + SHIFT + ESC Then take a good look into it, try to find suspicious names, probably duplicate of running application, something like Windows logon application, or keylog or anything similar which seems out of ordinary. If you manage to find a suspicious running application right-click on it and close it. Also while you are in task manager jump into the startup tab and check to see are there some unusual applications starting with your Windows, if you find anything, disable it right away. This is the most simple and quickest way to get some information right away if you suspect to have some simpler keylogger in your system.

2. Use the command prompt to monitor your network.

   In order to check connections to your computer and find potential suspicious ones start the command prompt in administrator mode, press ⊞ Win + X, and choose command prompt (administrator). type in netstat -b and press ENTER. All website and application connections to your computer are now visible. ignore svchost, edge browser, windows store, etc ad check the IP of the remaining ones using the internet.

3. Use keystroke encryption.

   Install encrypting software and even if you have a keylogger, the application will encrypt each stroke and all that attacker will get is gibberish

Please remember to always download files from trusted sources, do not open unknown emails, and do not share your information publicly. Take common protection steps in order to protect yourself in the digital world.

Recently, a number of users reported an error while trying to update their computers. This particular Windows Update error has an error code of 0x80073701. If you are one of the users who encounter this error, then read on as this post will guide you on how exactly you can fix it. Here’s the exact context of the error:

“Updates failed. There were problems installing some updates, but we’ll try again later. 2019-07 Cumulative Update for Windows 10 Version 1903 for x86-based Systems (KB4507453) – Error 0x80073701”

The Windows Update Error 0x80073701 also comes with a code “ERROR_SXS_ASSEMBLY_MISSING” which indicates that some system files are missing on your computer that caused the update installation failure error. Although this Windows Update error does not cause any severe issues, it is still being reported in the section of Windows Update where it is marked as “Update failed”. There are several potential solutions you can check out to resolve this error. You can try to run the DISM tool or the SFC or System File Checker scan. You could also try to run the Windows Update troubleshooter. For more information, make sure to follow the options given below.

Option 1 – Restart your computer and try installing the Updates again

Restarting your computer can also help in fixing the Windows Update failed to install error 0x80073701. There are cases where the issue resolves on its own as it could just be some simple network or PC error.

Option 2 – Try to run the DISM tool

Running the DISM Tool helps in repairing the Windows System Image as well as the Windows Component Store in Windows 10. Using this built-in tool, you have various options such as the “/ScanHealth”, “/CheckHealth”, and “/RestoreHealth”.

• Open the Command Prompt as admin.
• Then type in this command: exe /Online /Cleanup-image /Restorehealth
• Do not close the window if the process takes a while as it will probably take a few minutes to finish.

After you run this tool, a log file is created at C:WindowsLogsCBSCBS.log. On the other hand, if the Windows Update client is already broken, you will be prompted to use a running Windows installation as the repair source or use a Windows side-by-side folder from a network share, as the source of the files. Although the chances of this happening is less, if it turns out to be the case, you need to run an advanced command in the DISM tool to repair a broken Windows Update. Just repeat the process above but use the following command instead:

DISM.exe /Online /Cleanup-Image /RestoreHealth /Source:C:RepairSourceWindows /LimitAccess

Option 3 – Try to run the System File Checker

System File Checker or SFC is a built-in command utility that helps in restoring corrupted files as well as missing files. It replaces bad and corrupted system files to good system files that might be causing the error 0x80073701. To run the SFC command, follow the steps given below.

• Tap Win + R to launch Run.
• Type in cmd in the field and tap Enter.
• After opening Command Prompt, type in sfc /scannow
• The command will start a system scan which will take a few whiles before it finishes. Once it’s done, you could get the following results:

1. Windows Resource Protection did not find any integrity violations.
2. Windows Resource Protection found corrupt files and successfully repaired them.
3. Windows Resource Protection found corrupt files but was unable to fix some of them.

• Restart your computer.

Option 4 – Try running the Windows Update Troubleshooter

Running the built-in Windows Update troubleshooter could also help you resolve the Windows Update error 0x80073701. To run it, go to Settings and then select Troubleshoot from the options. From there, click on Windows Update and then click the “Run the troubleshooter” button. After that, follow the next on-screen instructions and you should be good to go.

What is Error 2200?

Error 2200 is an error code that you are likely to experience if you have Dell Photo All in One Printer 926. Dell Photo Printer 926 is an inkjet multifunction device. It offers features like print, copy, scan, and fax.

Error 2200 may stop you from scanning and printing documents on your Dell Photo All in One Printer 926.

Solution

Error Causes

Error 2200 may occur due to several reasons. However, the most common causes include:

• Registry issues
• Broken or missing system files
• Corrupted driver
• Malware

Further Information and Manual Repair

To resolve error 2200 on your system try the methods listed below. These DIY methods are easy and effective and can repair this error in no time. These solutions require zero technical expertise and knowledge.

This means if you are not technically sound or you are not a computer programmer, you can try these solutions and repair error 2200 on your system easily.

Method 1

When the underlying cause of error 2200 is related to a corrupted driver then follow these steps to resolve the issue. Go to the Start menu, click Control Panel, Performance and Maintenance tab, System and Device Manager.

Navigate the device, click properties, driver, and then uninstall. Now reboot your PC to activate changes.  Now download the latest version of the Dell Photo All in One Printer 926 drivers from a reliable website and save install it on your PC.

Method 2

Malware can also damage and corrupt drivers and system files. If the reason for error 2200 on your PC is malware then download a powerful antivirus and scan your entire PC. Remove all malware and viruses infecting your system to resolve the error.

Method 3

The Windows registry is that part of the computer that stores much of the information and settings for software programs, operating system configurations, and hardware devices.

It also saves unnecessary and obsolete files like junk files, cookies, internet history, bad registry entries, and invalid files. If these files are not removed from the registry frequently, they accumulate in the registry and corrupt it thereby triggering different error codes.

These files damage the registry and other important system files.

To repair the registry and error codes triggered due to registry issues, it is suggested you download Restoro. This is a cutting-edge and user-friendly PC Fixer deployed with a powerful and intuitive registry cleaner.

The registry cleaner scans your entire PC, removes all the bad entries and obsolete files. It cleans the registry, repairs the damaged and corrupt system files thereby resolving registry issues instantly.

Click here to download Restoro and repair error 2200.

Method 4: Locate and Install the Driver As was pointed out, you might need to reinstall the printer driver again. Using DriverFIX, you’ll be able to automatically update your computer system and install the drivers your computer needs to operate smoothly.

Google Docs has cemented itself as a great free alternative to Microsoft Office Word. Most of the time people just share links to google Docs among themselves but sometimes you need to save and download files.

Luckily Google docs let you download easily files in various formats including PDF as well. In this short tutorial we will explain how can you download your Google document as a PDF file.

Saving Google Docs as a PDF

Open the Google document inside the browser and click on the File drop-down menu. In the file drop-down menu go to Download and choose PDF document. Next, choose the location where you would like your file to be saved and click on SAVE.

And that's all that needs to be done. Also, you can edit PDF files as well in google docs if you need to.

Error 404 - What is it?

Error 404 is a HTTP status code. You may come across the error code 404 while browsing online. The message indicates the web page you are trying to log on to couldn’t be found on the server. This error code is frequently customized by individual websites. Most of the time it is displayed by:

• “404 Error"
• "404 Not Found"
• "Error 404"
• "404 File or Directory Not Found"
• "HTTP 404 Not Found”
• "The requested URL [URL] was not found on this server."
• "HTTP 404"
• "404 Page Not Found"
• “Error 404 Not Found"

The error message 404 can occur in any browser including Firefox, Internet Explorer and Google Chrome. It can also occur is any operating system. In addition to this, the error 404 may also occur during Windows updates.

Solution

Error Causes

Technically, the error 404 is a client-side error that implies you couldn’t access the desired web page because either you typed the wrong URL or either the page has been removed from the website. Other causes of this error code include:

• Junk files in the browser
• Junk registry entries
• Browser cache issues
• DNS server problems

Further Information and Manual Repair

If the error code does not occur due to web page removal from the owner of the website, then this means there is some other underlying issue from the error code 404. To avoid inconvenience and to access the website, it is advisable to resolve the error right away. To help you resolve the error 404 on your PC, we have listed some of the best and easy DIY solutions. Try these methods to fix the issue on your system:

Method 1

Press F5 to retry accessing the web page. F5 is the refresh/reload button. If the error is temporary this will resolve the issue immediately.

Method 2

Check the URL - ‘The error 404 not found’ may also appear because the URL was typed wrong. Search for the page on the popular search engines. Insert the correct URL for the web page you want to access. This will most likely fix the error.

Method 3

Clear your browser’s cache – For this, simply go to the history and clear up your browser’s cookies.

Method 4

Change the DNS Servers - If the entire website you want to access is giving you error 404 and if the site is available to others on different servers then you might want to try changing your DNS server. 404 errors are not particularly common unless your ISP or government filters or censors websites.

Method 5

Remove Junk files and Junk registry entries - Another way to resolve the error is to clean the registry. The underlying cause of the error could be accumulation of the junk, invalid and bad registry entries. You can remove them manually, but that process will require technical expertise and will be quite time-consuming. Nonetheless, the easy and efficient way to clean up the registry is to download Restoro. This is an advanced, highly functional and next-generation Registry Cleaner.

Why Use Restoro?

• It is deployed with a cutting-edge and intuitive algorithm that detects, scans, and removes all the registry issues on your entire PC in seconds.
• This registry cleaner wipes out all bad entries and junk files saved on the disk immediately, fixes the damaged and corrupt files, and restores the registry back to normal.
• Besides functioning as a registry cleaner, this software is also integrated with several other utilities such as an antivirus that removes all kinds of malicious software from your system, a system optimizer for optimum PC functioning, and Active X controls and Class ID scanner.
• It is safe to download, user-friendly and efficient. This error tool is compatible with all Windows versions.

To resolve error 404 on your PC, click here to download Restoro today!

Dxgkrnl.sys is a file related to the Microsoft DirectX driver – a suite of technologies developed by Microsoft to provide hardware acceleration for heavy multimedia applications like 3D games as well as HD videos. However, there are times when you encounter Blue Screen errors for this system file which is quite a lot. So when you encounter a Blue Screen error that’s related to this file, then it could be that the dxgkrnl.sys file is infected with some virus or malware and this might go unnoticed since antivirus programs regard dxgkrnl.sys as a system file. Here are some Blue Screen errors related to the dxgkrnl.sys file:

• SYSTEM_SERVICE_EXCEPTION .
• BAD_POOL_HEADER
• STOP 0x0000000A: IRQL_NOT_LESS_OR_EQUAL.
• STOP 0x0000001E:

KMODE_EXCEPTION_NOT_HANDLED

• STOP 0x00000050:

PAGE_FAULT_IN_NONPAGED_AREA

To fix the dxgkrnl.sys Blue Screen error, here are some suggestions you have to check out.

Option 1 – Try running the DirectX Diagnostic Tool

Since the dxgkrnl.sys error has something to do with the DirectX Graphics APIs, you can run the DirectX Diagnostic tool to resolve the problem.

Option 2 – Try updating or re-installing DirectX

If the DirectX Diagnostic tool didn’t work, you can try to update or reinstall DirectX instead. This can help in fixing the problem because when you reinstall or update DirectX, it will replace the incompatible or corrupted components of DirectX from your computer.

Option 3 – Try to run the DISM commands

You might want to repair potentially corrupted files in your system as having them could also trigger the dxgkrnl.sys Blue Screen error. To repair these corrupted system files, you can run the DISM commands:

• Tap the Win + X keys and click on the “Command Prompt (Admin)” option.
• After that, input each one of the commands listed below sequentially to execute them:
  • Dism /Online /Cleanup-Image /CheckHealth
  • Dism /Online /Cleanup-Image /ScanHealth
  • Dism /Online /Cleanup-Image /RestoreHealth

• Once you’ve executed the commands given above, restart your computer and check if the dxgkrnl.sys Blue Screen error is now fixed.

Option 4 – Try updating or reinstalling your Graphics drivers

Updating or reinstalling the Graphics drivers in your computer can also help in resolving compatibility issues between the operating system and the driver that also cause this kind of BSOD error.

• First, boot your computer into Safe Mode.
• After that, tap the Win + R keys to launch Run.
• Type in devmgmt.msc into the box and tap Enter or click OK to open the Device Manager.
• After that, a list of device drivers will be displayed. From there, look for the Display Adapters and click on them.
• After that, right-click on each entry under the Display Adapters and select the “Uninstall Device” option from the menu.
• Now restart your computer.
• After restarting your computer, go to the Settings app and Check for Updates in the Windows Update section.

Note: You also have the option to go directly to the website of your graphics card manufacturers like NVIDIA, Intel, or AMD and go to the section called Drivers then check if there’s a new available update – if there is, download and install it.

Option 5 – Try to run the Blue Screen Troubleshooter

As you know, the Blue Screen troubleshooter is a built-in tool in Windows 10 that helps users in fixing BSOD errors like dxgkrnl.sys. It can be found on the Settings Troubleshooters page. To use it, refer to these steps:

• Tap the Win + I keys to open the Settings panel.
• Then go to Update & Security > Troubleshoot.
• From there, look for the option called “Blue Screen” on your right-hand side and then click the “Run the troubleshooter” button to run the Blue Screen Troubleshooter and then follow the next on-screen options. Note that you might have to boot your PC into Safe Mode.

Option 6 – Try disabling the SLI Technology in NVIDIA Control Panel

In case you don’t know, there is a technology called SLI that comes with the NVIDIA graphics cards. With the help of this technology, the usage of various GPUs is allowed on a computer and hence helps in triggering the Alternate Frame Rendering and boosts the Graphics Performance directly. This is why this option to disable the SLI technology is suitable in fixing the problem if you are using an NVIDIA Graphics card.

• Search for NVIDIA Control Panel in the Cortana Search box and then click on the related search result or you can also right-click on the NIVIA icon located in the system tray and then select the NVIDIA Control Panel to open it.
• After that, navigate to the 3D settings section.
• Then select the “Set SLI Configuration” option and click on the “Do Not Use SLI Technology” option.
• Now click on Apply located at the bottom-right corner of the window to save the changes made.
• Restart your computer.

Option 7 – Try turning off NVIDIA Surround

Note that this option is only applicable if your computer is using the NVIDIA Graphics card.

• In the Cortana Search box, search for NVIDIA Control Panel and click on the related search result.
• After opening the NVIDIA Control Panel, go to 3D Settings > Configure Surround, PhysX.
• Now uncheck the “Span displays with Surround” option and then click on the Apply and OK buttons to save the changes made.
• Restart your computer.

If the Diagnostic Data level in your Windows 10 computer is configured manually to the non-default security setting of zero and you’ve encountered an error code of 0xc0000005, read on as this post will guide you in fixing the problem with the Remote Access Connection Manager Service. In relation to error 0xc0000005, you might also encounter an error in the Application section of Windows Logs in the Event Viewer, along with the Event ID 1000 which would most likely have a reference of “svchost.exe_RasMan” and “rasman.dll”. Before you troubleshoot the problem, keep in mind that the Remote Access Connection Manager or RasMan service is the one that manages dial-up and VPN connections from the computer to the internet as well as other remote networks. Each time you connect, the Services dials the connection or sends out a request for a VPN connection. However, the error 0xc0000005, only occurs when a VPN profile is configured as “Always On VPN or “AOVPN” connection with or without a device tunnel. There are several options you can check out to resolve this error, you can try to install the KB Update 4505903 or fix it via Group Policy. You could also try to enable Telemetry from the Settings app or enable it via Registry Editor. For more information, make sure to check out the provided options below.

Option 1 – Try installing the KB Update 4505903

The first thing you can do to fix the problem is to make sure that you’ve already installed the KB Update 4505903 in your computer. If not, then you have to go to Settings > Update & Security > Windows Update and from there select the Check for updates link. You need to get the standalone package if you are using the Microsoft Update Catalog to update your computer and for that, you have to the website of the Microsoft Update Catalog. On the other hand, if you are using the Windows Server Update Services or WSUS, then you can just manually import the KB Update 4505903 into WSUS.

Option 2 – Try to enable Telemetry in the Group Policy and run the RASMAN service

The next thing you can do to fix the problem is to enable Telemetry via Group Policy and then run the RASMAN service. To do that, follow these steps:

• Tap the Win + R keys to open the Run dialog box and type “gpedit.msc” in the field and hit Enter to open the Group Policy Editor.
• Next, navigate to Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > Allow Telemetry.
• After that, open the policy and select one of the security levels like Basic, Enhanced, and Full.
• Then click on the Apply and OK buttons to save the changes made and close the Group Policy Editor.
• Once one, open the Run dialog box again and type “services.msc” in the field, and hit Enter to open the Windows Services Manager.
• From there, look for the Remote Access Connection Manager Service and restart it. And then check if it resolved the problem or not...

Option 3 – Try enabling Telemetry via Settings

• Tap the Win + I keys to open the Settings app.
• Next, go to Privacy > Diagnostics and Feedback and select Basic or Enhanced under the Diagnostic data.
• After that, tap the Win + R keys to launch Run and type “services.msc” in the field, and hit Enter to open the Services Manager.
• From there, look for the Remote Access Connection Manager Service and restart it.

Option 4 – Try to enable Telemetry via Registry Editor

• Launch the Run utility and type “regedit” in the field and tap Enter to open the Registry Editor.
• Then navigate to this path: HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsDataCollection
• From this path, look for “AllowTelemetry” and double click on it.
• Now enter the values, 1, 2, 3 for Basic, Enhanced, Full, respectively.
• If you can’t find AllowTelemetry, then just create a DWORD (32-bit) and name it “AllowTelemetry” and edit its value.
• Once done, exit the Registry Editor and restart the Remote Access Connection Manager Service from the Services Manager.

Code 0xC1900200, 0x20008, What is it?

Error Code 0xC1900200, 0x20008 (Code 0xC1900202 – 0x20008)  is an error that occurs when you attempt to upgrade to Microsoft Windows 10, but the minimum requirements have not been met by your computer. You will therefore be unable to upgrade to Microsoft Windows 10 until your computer is updated or upgraded to meet those requirements. Common symptoms include:

• When attempting to upgrade a dialog box with Code 0xC1900200 – 0x20008 (Code 0xC1900202 – 0x20008) is displayed.
• Your computer is unable to begin the Microsoft Windows 10 upgrade process.

Solution

Error Causes

Error Code 0xC1900200 – 0x20008 (Code 0xC1900202 – 0x20008)  occurs when you are unable to begin the Microsoft Windows 10 upgrade because your computer does not meet the minimum requirements to run Microsoft Windows 10.

• You are unable to begin the upgrade because your computer does not meet the required system or hardware specifications.
• You are not running the correct version of Microsoft Windows to be able to begin the upgrade.
• You are not running the latest updated version of Microsoft Windows 7 SP1 or Microsoft Windows 8.1. Error Code 0xC1900200 – 0x20008 (Code 0xC1900202 – 0x20008) as stated, simply means your computer does not meet the requirements to update and does not indicate a permanent problem or inability to continue to use your computer. This error only means that you will not be able to upgrade to Microsoft Windows 10 until your computer is made to meet these requirements.

Further Information and Manual Repair

There are several solutions that the user can complete at home that should fix the problem resulting in a manifestation of Error Code 0xC1900200 – 0x20008 (Code 0xC1900202 – 0x20008). Below are several options that should resolve this error.

Method 1:

Verify what version of Microsoft Windows you are currently running, older, outdated, or no longer supported versions of Microsoft Windows are not able to upgrade to Microsoft Windows 10. If you are not running one of the following versions you will have to update before being able to upgrade.

• The most current version of Microsoft Windows 7 SP1
• The most current version of Microsoft Windows 8.1

Method 2:

Your computer's system specifications do not meet the requirements to be able to upgrade to and run Microsoft Windows 10. To check your system specifications do the following.

• Click on the start button in the bottom left corner, then locate the control panel on the menu, click on it to open.

• Once it opens, locate system and security on the menu and click to open, click on system and this will show you your amount of RAM and processor speed.

• Find device manager on the left-hand side click this then select display adapter, and it will show you your current video card.

• Click on the start button again, then click on the computer in the menu, this will show you your hard drive size, and available space.

If you have the option available you can simply run the get Microsoft Windows 10 app to check compatibility. Once you have your system specs make sure they meet or exceed the following.

• 1 GHz or higher processor or SoC
• 1 gig of RAM for 32 bit and 2 gigs of RAM for 64 bit
• 16 GB available hard drive space for 32 bit, 20 GB for 64 bit
• Minimum of DirectX9 that has 1.0 WDDM
• At least an 800x600 display

If your computer does not meet these minimum requirements, upgrade the components necessary to meet them. If you do not possess the technical expertise required to accomplish this yourself or do not feel comfortable doing so, download and install a powerful automated tool to get the job done.

Method 3:

Your computer might not meet the aforementioned requirements to make an upgrade because of insufficient hard drive space or resources. Learn how to create space on your computer.

Method 4:

Many people hold on to and use the same computer for a very long time. It is possible that your computer cannot be upgraded to meet the requirements, or that the cost to do so would be so high that a new computer would be cheaper. If that is the case, your only option may be to replace your computer.

In case you don’t know, Windows 10 supports installation and use of a number of removable devices which includes plug and plays mouse, keyboard, and other USB-based devices. But this could actually pose a threat to the integrity of a computer system and thus, some organizations pose a restriction in using these kinds of devices. the restriction on these devices is also useful especially if you keep on leaving your computer idle and someone tries to mess it up by plugging in a removable device. In such situations, the restriction will defend the user against data theft. Thus, in this post, you will be guided on how you can prevent the installation of removable devices on your Windows 10 computer. There are two options that can help you in preventing the installation of any removable devices on your computer – you can either try to use the Registry Editor or use the Group Policy Editor instead. Follow whichever option you want to use the instructions given below but before you start, don’t forget to create a System Restore Point first.

Option 1 – Prevent installation of Removable Devices via Registry Editor

• Tap the Win + R keys to open the Run dialog box and type “Regedit” in the field and hit Enter to open the Registry Editor.
• Next, navigate to this registry path: HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsDeviceInstallRestrictions
• From there, look for a DWORD named “DenyRemovableDevices” and set its value to “0”. On the other hand, if you can’t find this DWORD, just simply create it and set its value to 0.
• Once done, exit the Registry Editor and reboot your PC to apply the changes made.

Option 2 – Prevent installation of Removable Devices via Group Policy Editor

Keep in mind that the Group Policy Editor is not available in the Home Edition of the Windows operating systems. Thus, if you are using one, just stick to the first option, otherwise, proceed to the following steps.

• Tap the Win + R keys to open the Run utility and type “gpedit.msc” and click OK or tap Enter to open the Group Policy Editor.
• After that, go to this policy setting: Computer ConfigurationAdministrative TemplatesSystemDevice InstallationDevice Installation Restrictions
• Next, look for the “Prevent installation of removable devices” entry and once you find it, set it as “Enabled”. From this window, you should see the following description of this policy setting:

“This policy setting allows you to prevent Windows from installing removable devices. A device is considered removable when the driver for the device to which it is connected indicates that the device is removable. For example, a Universal Serial Bus (USB) device is reported to be removable by the drivers for the USB hub to which the device is connected. This policy setting takes precedence over any other policy setting that allows Windows to install a device. If you enable this policy setting, Windows is prevented from installing removable devices and existing removable devices cannot have their drivers updated. If you enable this policy setting on a remote desktop server, the policy setting affects redirection of removable devices from a remote desktop client to the remote desktop server. If you disable or do not configure this policy setting, Windows can install and update device drivers for removable devices as allowed or prevented by other policy settings.”

• Then click the Apply and OK buttons to save the changes made.
• Now restart your computer to save the changes made. This should prevent the installation of any removable devices in your Windows 10 computer.

Hive ransomware has been targeting Microsoft exchange servers lately vulnerable to ProxyShell security issues in order to deploy various backdoors. Once the backdoor has been placed various attacks can be performed including but not limited to network reconnaissance, stealing admin accounts, taking valuable data, and even installing and deploying file-encrypting algorithms.

ProxyShell wide abuse

ProxyShell is a set of three vulnerabilities in the Microsoft Exchange Server that allows remote code execution without authentication on vulnerable deployments. The flaw has been used in past by various ransomware like Conti, BlackByte, Babuk, Cuba, and LockFile.

Security vulnerabilities have been reported to be fully patched on May 2021 but how Hive was able to still be successful in exploiting PowerShell and infiltrating into the system there seems to be still some unpatched and open issues.

Hive

Hive has gone a long way since it was first observed in the wild back in June 2021, having a successful start that prompted the FBI to release a dedicated report on its tactics and indicators of compromise.

In October 2021, the Hive gang added Linux and FreeBSD variants, and in December it became one of the most active ransomware operations in attack frequency.

Last month, researchers at Sentinel Labs reported on a new payload-hiding obfuscation method employed by Hive, which indicates active development.