Diagnosing your PC/Preparing Automatic Repair

Valve has officially announced that Steam Deck will be compatible with Windows 11 despite TPM 2.0 Microsoft requirements. From the beginning, Deck was announced like a mini handheld PC device. Powered with new Steam OS 3.0 based on Linux. However, besides out-of-the-box OS it was also stated that Deck will be a personal device meaning that other PC-based operating systems could be installed on it and even run your typical applications in it. Since Microsoft announced Windows 11 hardware requirements, specifically the TPM 2.0 requirement many users voiced concern that Steam Deck will not be able to connect to Windows 11 TPM 2.0 is something that Microsoft requires for every internal and hardware component that is to connect on a Windows 11 device. This is to ensure that only trusted devices would be included in the array of a PC setup and avoid any problems like malicious hardware injecting software into a system. This would also minimize the compromise Windows would have, as unverified or untrusted devices connect to a Windows PC. However, Valve and AMD are ensuring us that Deck will not have any issue connecting to a PC running Windows 11 or even if you wish to transform Deck itself into a Device running Windows 11.

Users are reporting that randomly their screen will just go black for a second and come back. When this happens, it usually distorts any video currently on the screen; sometimes, they can resume working on the PC normally. However, when they view the event logs, they see the error message Display driver nvlddmkm stopped responding and has successfully recovered. In this article, we will address solutions to this issue and how to not have it again.

1. Remove Aura iCUE plugin (applies to only ASUS motherboards)

   Some PC users discovered that iCue adds an Aura plugin for ASUS MOBOs. That, combined with EVGA Precision X1, was causing the error it seems – this was determined when the screen would turn off and on when opening EVGA x1 software. In this case, the issue was resolved by removing the Aura iCUE plugins.

2. Change Power Management mode

   Right-click the battery icon on the notification area on the right of the Taskbar. Select Power Options. In the Power Options window, locate your current Power Plan. Select High performance, if that’s not your current power plan. Now, click on Change plan settings next to it. Now click on Change advanced power settings. Expand PCI Express section. Expand Link State Power Management. Now set power saving to Off for both On battery and Plugged in state. This would fix any issues caused by the low power of the video card. Click Apply > OK to save changes.

3. Update graphics driver

   Go into device manager Expand display adapter section Right-click on adapter Click on update driver Reboot

4. Rollback graphics driver

   Go into device manager Expand display adapter section Right-click on adapter Click on Roll back driver Reboot

5. Uninstall and reinstall graphics card driver

   Go into device manager Expand display adapter section Right-click on adapter Click on Uninstall device Reboot

6. Replace the graphics card

   If everything else failed, replace the graphic card

Windows and Devices chief Panos Panay has revealed new focus sessions feature that will be in Windows 11 on his Twitter account today. He himself is referring to it as a game-changer especially with Spotify integration.

So what is a focus session?

From the video clip provided on Twitter, we can see that focus session users will be able to choose a specific task from the previously made task list, choose songs that will play in the background while the task is active, and set a timer for the chosen task with breaks. Maybe the best comparison and explanation would be a desktop google calendar task with music, basically, that’s it. A neat and good organizer inside your Windows 11 operating system. I think that this is generally a good idea and for sure it will find its audience.

The previous Windows versions all came with Microsoft's browser Internet Explorer. A lot of users love it because not only that it is easy to use. It is also very fast. Users didn’t have to worry about compatibility because it is almost always compatible with its Windows Version. When they introduced Windows 10, they changed the name of the browser from Internet Explorer to Microsoft Edge. It is faster and more user-friendly compared to its predecessors. But after the Creator Update, some experienced receiving the inet_e_resource_not_found error code. In contrary to what everyone expects, you actually don’t have to uninstall and reinstall the Microsoft Edge App. What you can do is reset the browser in your Apps & Features Settings in your Microsoft Settings.

To reset the browser you can follow the steps below:

1. Click on the Windows icon and go to settings.
2. Click on Apps and this will bring you to the Apps & Features page. Look for Microsoft Edge from the list of Apps and click on it.
3. Choose Advance Option
4. Scroll down then Under Reset, click on repair or reset. When you repair it will fix the existing problem but the data that caused the problem may still be present and can still cause problems. If you click on reset, it will delete all the cache and cookies that are installed in your browser but it will save your Favorites as well as your bookmarks.

Another way to resolve this is by disabling the feature TCP Fast Open on Microsoft Edge. To disable this, go ahead and follow the steps below:

1. Open the Microsoft Edge browser.
2. Type in about: flags on the Address (URL) bar.
3. Under Networking, uncheck the Enable TCP Fast Open.
4. Close your Microsoft Edge browser and open a new one.

Flushing the DNS also worked for other Users. Sometimes, the error code the inet_e_resource_not_found is caused by a corrupted DNS cache. There are 2 ways to flush your DNS. The first option is to use the command prompt to run the command.

1. To access the Command prompt or CMD, you can search for it on Cortana or you can click on the Windows icon to access the Programs, scroll down to the Windows System folder and click on it.
2. A drop-down menu will show up, click on Command Prompt which is the first on the list.
3. Type in the code ipconfig /flushdns and press enter.
4. There will be a message that will show that says Windows IP configuration successfully flushed the DNS Resolver Cache
5. Exit the CMD by typing exit and press enter.

The easiest way to do this is to Press the keys Window + R on your keyboard. Type in ipconfig /flushdns in the search box and hit enter or click on OK. These are only some of the ways to resolve the inet_e_resource_not_found. There are other ways to further troubleshoot this issue such as reinstalling your Wifi Adapter Driver or adjusting the DNS Server Address. But most of the time, users are able to resolve the issue with the steps provided above.

A lot of users rely on keyboard shortcuts to carry out tasks on their PCs. One of the most common keyboard shortcuts used is the Ctrl + Shift + Esc which opens the Task Manager. As you can see, the Shift key is not just used to capitalize a text as it can also be used for other functions and plays an essential role in operating a computer. However, if you suddenly find it not working, read on as this post will help you fix the problem. If your Shift key is not working, there are several potential fixes you can check out to fix it. These are the different ways to get rid of the Shift key not working issue on Windows 10:

1. Physically clean the key and keyboard
2. Disable Sticky Keys.
3. Update, Reinstall, or Rollback Keyboard driver.
4. Test the keyboard on another system.
5. Check your connections
6. Run the Hardware troubleshooter
7. Troubleshoot in Clean Boot State.

Option 1 – Clean the keyboard keys physically

Your keyboard might not be working properly due to some dirt or other corrosion. Thus, you need to clean your keyboard, especially the Shift key. First, you need to shut down your computer and then unplug the keyboard if you are using a desktop computer and then prepare it for cleaning. After that, use a small cotton ear cleaning tool to get between the creases and clean them. You can dip it slightly in alcohol to make it more efficient in cleaning dust and dirt. And if you can, you have the option to pull apart the keyboard completely and then wipe away all the corrosion from the inside. Once you’re done, put the keyboard back together and then plug it back into your PC. Now turn your PC on and check if the Shift key is now working.

Option 2 – Try to disable the Sticky keys

Another thing you can try is to disable the Stick keys. How? Refer to these steps:

• Tap the Win + I keys to open the Settings app.
• After that, navigate to the Ease of Access section, and here, select Keyboard.
• Next, make sure that the option for Press one key at a time under the Sticky Keys is toggled off.

Option 3 – Reinstall, update or rollback your keyboard driver

Once you’ve determined that the problem is in the software part of the keyboard, it is now time to try to reinstall, update or roll back your keyboard drivers. To reinstall the driver for your keyboard, refer to these steps:

• From the WinX Menu, open the Device Manager.
• In the Device Manager, you should find your laptop’s keyboard under the “Keyboards” option. Right-click on it and select the “Uninstall” option.

Note: If you’re not quite certain about your laptop’s keyboard, you can uninstall all the keyboards if there’s more than one.

• After that, restart your PC and see if the keyboard driver is installing automatically. If not, open the Device Manager again and right-click on Keyboards, and select the option “Scan for hardware changes” to install it.

Once the keyboard driver is installed again, check if your keyboard is now working properly or not.

Option 4 – Try connecting the keyboard to a different USB port or another computer

The problem might have something to do with the USB port that’s currently in use by your keyboard. It could be that it’s not working so it makes sense to unplug it and attach it to another USB port. You can also clean the USB port on both ends to ensure that they are not affected by corrosion. In addition, you can also try connecting the keyboard to a different computer and see if the Shift key works there or not.

Option 5 – Try to check your connections

You can also try checking if the connection mode you are using for your keyboard is functioning properly. For instance, if you are using a Surface 2-in-device, you can clean the connection pins and see if it resolves the problem.

Option 6 – Run the Hardware and Devices Troubleshooters

• The first thing you need to do is click on Start and then on the gear-like icon to pull up the window for Settings.
• After opening Settings, look for the Update and Security option and select it.
• From there, go to the Troubleshoot option located on the left-hand side of the list.
• Next, select Hardware and Devices from the list and open the Troubleshooter and run it. Once it is doing its job, wait for it to complete the process and then restart the system.
• After the system restarts, check if the problem’s now fixed. If not, refer to the next option given below.

Option 7 – Put your PC in a Clean Boot State

You might also want to put your computer in a Clean Boot State to fix the problem with the Shift key. It could be that there is a third-party program that’s preventing the Shift key from functioning. To isolate this possibility, you need to put your computer in a Clean Boot State.

• Log onto your PC as an administrator.
• Type in MSConfig in the Start Search to open the System Configuration utility.
• From there, go to the General tab and click “Selective startup”.
• Clear the “Load Startup items” check box and make sure that the “Load System Services” and “Use Original boot configuration” options are checked.
• Next, click the Services tab and select the “Hide All Microsoft Services” check box.
• Click Disable all.
• Click on Apply/OK and restart your PC. (This will put your PC into a Clean Boot State. And configure Windows to use the usual startup, just simply undo the changes.)
• Now try to connect the external devices and check if the error is now gone.

As you already know, the Windows Sandbox is one of the new features in Windows 10. However, just like other new features, it also throws up errors and one of them is the error that states,

“Windows Sandbox failed to start, Error 0x80070057, The parameter is incorrect”.

This particular error in Windows Sandbox occurs due to its dependence on numerous components of Windows 10 that are related to Hyper-V and Virtualization mainly. To fix this error, there are several options you can check out. You can try to install any pending updates on your Windows 10 computer, as well as make sure that all the services related to Windows Sandbox are enabled.

Option 1 – Try to run the Windows Updates to install pending updates

The first thing you can do to resolve the “Windows Sandbox failed to start, Error 0x80070057” is to check Windows Updates in your computer and see if there are any pending Windows Updates you have to install. All you have to do is go to the Windows 10 Settings app and then go to the Windows Updates section and click on the “Check for updates” button to check if there are any pending updates that are needed to be installed. This could fix the Windows Sandbox error.

Option 2 – Ensure that all the supporting processes and services are running properly

If running Windows Sandbox as an administrator didn’t fix the error, you have to ensure that all related processes for Windows Sandbox are running properly. To do that, follow these steps:

• Tap the Win + R keys to launch the Run utility and type “services.msc” in the field and hit Enter to open the Windows Services Manager.
• Next, from the list of services, look for the following services in the given order:
  • Network Virtualization Service
  • Virtual Disk
  • Hyper – V Virtual Machine
  • Hyper – V Host Computer Service
  • Container Manager Services
• After you find the aforementioned services, make sure to check if they are enabled or not and then restart each one of them.
• Once done, try to open the Windows Sandbox again and see if the error is fixed or not.

What is Error 3?

This is a type of Google Chrome update error code. It indicates a failure to communicate with Google update. The error code is displayed in the following format:

‘Update server not available (error: 3)’

Solution

Error Causes

Error 3 may be triggered by several reasons. These include:

• You are running Vista/ 7 and you have configured Google Chrome to run as an administrator
• Google Update is not registered properly
• Registry issues

Further Information and Manual Repair

Here are some of the best and effective DIY methods to resolve error 3 on your PC without any professional help. You don’t need to be a technical whiz to try these methods.

Method 1

If the reason for the error cause is related to Google Chrome configured as administrator on your PC, then simply run it as a normal user. This is a common issue with Google Chrome auto-updating mechanism.

Method 2

If the problem still persists, then it is advisable to try re-installing Google Chrome. To do this, first, uninstall Google Chrome. Go to the start menu, control panel, and then program and features. Choose Add and Remove Programs and uninstall Google Chrome. To activate changes, reboot your system. Now reinstall Google Chrome by downloading it from Google Chrome’s official website.

Method 3

If error 3 is triggered because Google Chrome is not registered properly, then try this method to fix the issue.

1. First, verify that GoogleUpdate.exe exists in the location specified in the Windows Registry Editor. For this, go to the Start Menu and then type Regedit in the search bar.
2. Now click OK. The registry editor will appear. Now in the tree view on the left, navigate to the following directory:
3. HKEY_CLASSES_ROOTCLSID{2F0E2680-9FF5-43C0-B76E-114A56E93598}LocalServer32
4. Make sure the default value corresponds to the location of your GoogleUpdate.exe or GoogleUpdateOnDemand.exe file. Also, verify that these files are located in the given path.
5. For instance, if they are located in different locations, then right-click the default value and select Modify.
6. Enter the correct file path and use double quotation marks for example "C:\Documents and Settings%USERNAME%Local SettingsApplication DataGoogleUpdateGoogleUpdate.exe(or GoogleUpdateOnDemand.exe)"

Method 4

Error 3 may also pop up because of registry issues. These issues occur when the registry gets overloaded with obsolete and unnecessary files like cookies, internet history, bad entries, and junk files. In such an event, it is advisable to download Restoro This is a user-friendly and cutting-edge PC Fixer embedded with a registry cleaner. The registry cleaner removes all the obsolete files instantly and repairs the damaged registry thereby resolving all errors including error 3. Click here to download Restoro and resolve error 3.

A computer with no internet connection is like a mobile phone that can’t call nor text though you can still use it for other things. So if you are having problems with your computer’s internet connection, worry not as there are some basic things you can try before you go over the actual troubleshooting. Just make sure that you really have working internet. To verify it, try connecting your other devices. Aside from that, you must also make sure that your computer is connected properly over cable or connected to the router over the Wi-Fi. Once you have all these things covered, now’s the time to start troubleshooting the problem with the help of the instructions prepared below. To be more specific, this guide will walk you through what you can do when you encounter a particular internet connection problem where you get the Media State Media disconnected error message on your Windows 10 computer.

Before you troubleshoot the problem, you need to first check the internet connection status on your computer. To do that, follow these steps:

• Type in “cmd” in the Cortana search box.
• From the search results, right-click on Command Prompt and select “Run as administrator” from the context menu.
• After opening Command Prompt with administrator privileges, type in the ipconfig /all command and hit Enter.
• After you enter the command, you will see a list of all the connected media like the Ethernet, Wi-Fi along with its status, and more. From there, you need to check everything closely. I notice a message that says, “Media State . . . . . Media disconnected”, then your internet connection is indeed having issues.

Refer to the options below to fix the Media State Media disconnected error message on your Windows 10 PC.

Option 1 – Try resetting WINSOCK and IP Stack

• Type in “cmd” in the Cortana search box.
• From the search results, right-click on Command Prompt and select “Run as administrator” from the context menu.
• After opening Command Prompt, type in each one of the commands listed below
  • netsh winsock reset catalog – This command will reset the WINSOCK entries.
  • netsh int ipv4 reset reset.log – This command will reset the IPv4 TCP/IP stack.
  • netsh int ipv6 reset reset.log – This command will reset the IPv6 TCP/IP stack
• Once you’ve executed the commands listed above, restart your PC to successfully apply the changes made.

Option 2 – Check if your Network Adapter is disabled

If you’ve disabled the network adapters on your computer, then it’s most likely the reason why you’re getting the Media State Media disconnected error message. Thus, you need to enable it back.

• Open Settings and go to Network and Internet > Select Ethernet > Change adapter options.
• From there, right-click on the adapter and enable it.

Option 3 – Check the Wi-Fi Properties

Though this case is not common, Wi-Fi sharing has actually caused issues for some users. That’s why you need to check the Wi-Fi properties. Go to Network Connections and right-click on Wi-Fi and select Properties. From Properties, go to the Sharing tab and select the first option and click OK.

Option 4 – Try updating the Network driver

• Tap the Win + R keys to open the Run dialog box and then type in devmgmt.msc and tap Enter or click OK to open the Device Manager.
• Expand the section for the outdated device drivers.
• And then select the Network driver or any other outdated driver(s) and right-click on it/them.
• From the drop-down menu, select the Update Driver option and follow the on-screen instructions to install the latest version of the driver.
• Then also click on the option, “Search automatically for updated driver software.
• Restart your PC after the installation.

Note: If updating the Network driver didn’t work, you can go to the website of your PC manufacturer and look for the support section where you can download the drivers for your computer. You just need to take note of your PC’s correct model and model number so you can find the appropriate driver.

RelevantKnowledge is a potentially unwanted program. It is typically bundled by 3rd-party installers and download managers that include other potentially unwanted programs (PUPs). In most cases, the installer will present the user with an RK survey at the end of the setup in order to relate the user’s future behavior to various questions.

From the published: RelevantKnowledge is an online market research community consisting of over 2 million members worldwide, which provides insight into how its members interact with the Internet. In exchange for an agreement to have their Internet behavior monitored, computer users who join RelevantKnowledge are offered various value propositions, including the ability to download screensavers or other software offerings, entry into sweepstakes, and a host of other benefits.

Multiple anti-virus scanners have detected possible malware in RelevantKnowledge.

About Browser Hijackers

If you’ve ever downloaded software via the internet (shareware, freeware, etc,), it’s quite possible you’ve unintentionally installed unwanted programs on your PC. Potentially Unwanted Programs (PUP), also referred to as Potentially Unwanted Applications (PUA), are applications that you never wanted in the first place and often come bundled with freeware. Once installed, the majority of these applications can be tough to get rid of and become much more of an annoyance rather than a necessity. It is clear by its name – unwanted applications – but did not really constitute “malware” in the traditional sense. This is because, the majority of PUPs get into a computer not because they slip through the security holes, for instance, but because the users have got installed them themselves – 100 % unknowingly needless to say. A PUP might not be regarded as malicious or dangerous but nevertheless, it is a common reason for clunky OSs; some PUPs are a lot more aggressive by deliberately slowing down your PC.

The harm unwanted programs could do

PUPs come in various forms. Typically, they could be seen in adware bundlers that are known to use aggressive and misleading advertising. The majority of bundlers install many adware programs from a number of vendors, each of which features its own EULA policy. Safebytes Anti-Malware totally eradicates this threat and safeguards your computer against PUP or adware infection. Additionally, the majority of free programs nowadays come with a few unwanted add-ons; in most cases a web browser toolbar or browser modification such as a homepage hijacker. They can modify browser settings, change the default search engine, replace the default home page with their own websites, slow down internet speed, and also will damage your system as well. PUPs carry a dangerous bite if left unchecked. The most detrimental part of installing a PUP is the spyware, adware, and keystroke loggers that might hide inside. These are programs that don’t really do anything good for you; in addition to taking up space on your hard disk drive, they also slow down your PC, often modify settings without your authorization, the list of frustrating features goes on and on.

Tips on how to avoid getting a PUP

• When installing anything on your personal computer, always study the fine print, including the license agreement. Do not accept terms of use that are for bundled programs. • Use ONLY custom or manual install method – and never thoughtlessly click Next, Next, Next. • Use good antimalware software, such as Safebytes Anti-Malware which offers real-time protection against PUPs. • Think carefully before you download any kind of shareware or freeware. Turn off or get rid of toolbars and browser extensions you don’t actually need. • Always download applications from the original website. The majority of PUPs find their way onto your laptop or computer is via download portals, so steer clear of it entirely.

What To Do If You Cannot Install Safebytes Anti-Malware?

Viruses may cause a lot of damage to your personal computer. Some malware is meant to interfere with or block things that you want to do on your computer system. It may well not allow you to download anything from the net or stop you from accessing some or all websites, particularly the anti-malware sites. If you are reading this article now, you’ve probably realized that virus infection is the real cause of your blocked internet connectivity. So how to proceed if you need to download and install an anti-malware program like Safebytes? Although this kind of problem can be harder to get around, there are a few actions you can take.

Download the application in Safe Mode with Networking

In Safe Mode, you may change Windows settings, un-install or install some applications, and remove hard-to-delete viruses. If the malware is set to load automatically when the computer starts, shifting to this mode can prevent it from doing so. To start the computer into Safe Mode, press the “F8” key on your keyboard just before the Windows boot screen appears; Or right after normal Windows boot up, run MSCONFIG, look over “Safe Boot” under Boot tab, and then click Apply. As soon as you reboot into Safe Mode with Networking, you can download, install, and update anti-malware software from there. Right after installation, run the malware scanner to eliminate standard infections.

Use an alternate web browser to download antivirus software

Web-based viruses could be environment-specific, aiming for a specific internet browser or attacking specific versions of the browser. The most effective solution to overcome this problem is to go with a browser that is well known for its security measures. Firefox has built-in Phishing and Malware Protection to keep you secure online.

Install anti-malware on a USB drive

Another option is to save and operate an antivirus software tool entirely from a Flash drive. Do these simple actions to clean up your infected PC using a portable antivirus. 1) On a virus-free computer, download and install Safebytes Anti-Malware. 2) Insert the USB drive into the clean PC. 3) Double click on the downloaded file to open the installation wizard. 4) Select the drive letter of the flash drive as the location when the wizard asks you exactly where you would like to install the antivirus. Follow the directions to complete the installation process. 5) Transfer the thumb drive from the uninfected computer to the infected PC. 6) Double-click the Safebytes Anti-malware icon on the pen drive to run the application. 7) Simply click “Scan Now” to run a complete scan on the affected computer for malware.

Protect Your Computer & Privacy With SafeBytes Anti-Malware

Want to download the best anti-malware software program for your laptop? There are lots of applications on the market that comes in free and paid versions for Windows systems. A few are really worth your money, but many aren’t. You need to pick a tool that has got a good reputation and detects not only computer viruses but other types of malware also. Among few good applications, SafeBytes Anti-Malware is the highly recommended program for the security-conscious individual. SafeBytes antimalware is a highly effective and user-friendly protection tool that is suitable for end-users of all levels of IT literacy. After you have installed this application, SafeByte's sophisticated protection system will make sure that no viruses or malware can seep through your PC. SafeBytes has excellent features when compared to other anti-malware programs. Here are some popular features present in this tool: World-class AntiMalware Protection: Safebytes is made on the best virus engine within the industry. These engines will detect and remove threats even during the early stages of a malware outbreak. Real-time Active Protection: SafeBytes delivers complete and real-time security for your laptop or computer. They’re highly efficient in screening and getting rid of numerous threats because they’re constantly revised with the latest updates and safety measures. Internet Security: Through its unique safety score, SafeBytes informs you whether a site is safe or not to visit it. This will ensure that you’re always certain of your safety when browsing the net. Very Low CPU and Memory Usage: This program is not “heavy” on the computer’s resources, so you will not notice any overall performance difficulties when SafeBytes is operating in the background. 24/7 Online Technical Support: SafeBytes provides 24/7 technical support, automatic maintenance, and upgrades for the best user experience.

Technical Details and Manual Removal (Advanced Users)

If you wish to manually remove RelevantKnowledge without the use of an automated tool, it may be possible to do so by removing the program from the Windows Add/Remove Programs menu, or in cases of browser extensions, going to the browsers AddOn/Extension manager and removing it. You will likely also want to reset your browser. To ensure the complete removal, manually check your hard drive and registry for all of the following and remove or reset the values accordingly. Please note that this is for advanced users only and may be difficult, with incorrect file removal causing additional PC errors. In addition, some malware is capable of replicating or preventing deletion. Doing this in Safe Mode is advised.

The following files, folders, and registry entries are created or modified by RelevantKnowledge

New malware with extensive spyware capabilities steals data from infected Android devices and is designed to automatically trigger whenever new info is read to be exfiltrated. The spyware can only be installed as a 'System Update' app available via third-party Android app stores as it was never available on Google's Play Store. This drastically limits the number of devices it can infect, given that most experienced users will most likely avoid installing it in the first place. The malware also lacks a method to infect other Android devices on its own, adding to its limited spreading capabilities. However, when it comes to stealing your data, this remote access trojan (RAT) can collect and exfiltrate an extensive array of information to its command-and-control server. Zimperium researchers who spotted it observed it while "stealing data, messages, images and taking control of Android phones."

What happens when malicious software is installed

"Once in control, hackers can record audio and phone calls, take photos, review browser history, access WhatsApp messages, and more," they added. Zimperium said its extensive range of data theft capabilities includes:

• Stealing instant messenger messages;
• Stealing instant messenger database files (if the root is available);
• Inspecting the default browser's bookmarks and searches;
• Inspecting the bookmark and search history from Google Chrome, Mozilla Firefox, and Samsung Internet Browser;
• Searching for files with specific extensions (including .pdf, .doc, .docx, and .xls, .xlsx);
• Inspecting the clipboard data;
• Inspecting the content of the notifications;
• Recording audio;
• Recording phone calls;
• Periodically take pictures (either through the front or back cameras);
• Listing of the installed applications;
• Stealing images and videos;
• Monitoring the GPS location;
• Stealing SMS messages;
• Stealing phone contacts;
• Stealing call logs;
• Exfiltrating device information (e.g., installed applications, device name, storage stats).

How does it work?

Once installed on an Android device, the malware will send several pieces of info to its Firebase command-and-control (C2) server, including storage stats, the internet connection type, and the presence of various apps such as WhatsApp. The spyware harvests data directly if it has root access or will use Accessibility Services after tricking the victims into enabling the feature on the compromised device. It will also scan the external storage for any stored or cached data, harvest it, and deliver it to the C2 servers when the user connects to a Wi-Fi network. Unlike other malware designed to steal data, this one will get triggered using Android's contentObserver and Broadcast receivers only when some conditions are met, like the addition of a new contact, new text messages, or new apps being installed. "Commands received through the Firebase messaging service initiate actions such as recording of audio from the microphone and exfiltration of data such as SMS messages," Zimperium said. "The Firebase communication is only used to issue the commands, and a dedicated C&C server is used to collect the stolen data by using a POST request."

Camouflage

The malware will also display fake "Searching for the update.." system update notifications when it receives new commands from its masters to camouflage its malicious activity. The spyware also conceals its presence on infected Android devices by hiding the icon from the drawer/menu. To further evade detection, it will only steal thumbnails of videos and images it finds, thus reducing the victims' bandwidth consumption to avoid drawing their attention to the background data exfiltration activity. Unlike other malware that harvests data in bulk, this one will also make sure that it exfiltrates only the most recent data, collecting location data created and photos taken within the last few minutes. If you would like to read more helpful articles and tips about various software and hardware visit errortools.com daily.