Basic IT skills everybody should know

Page Fault in Non-Paged Area is a blue screen error usually happening with faulty drivers but it can come from different issues like faulty RAM. In this short article, we will cover usual ways on how to approach and solve this error.

Solving Page fault in Non-Paged Area

Rollback using system restore

Simple and easy solution, roll back to the previous system restore point where Windows was stable and working.

Fix Page Fault in Non-Paged Area using device manager

1. Press ⊞ WINDOWS + X to open the hidden menu
2. Click on device manager
3. Find a device with a question mark and right-click on it
4. Click on the rollback driver button

Fix via command prompt

1. Press ⊞ WINDOWS + X to open the hidden menu
2. Click on command prompt (admin)
3. Inside command prompt type in SFC / scannow and press ENTER
4. Wait for the process to be finished and then reboot the PC

Fix via DISM tool

1. Press ⊞ WINDOWS + X to open the hidden menu
2. Click on command prompt (admin)
3. Inside command prompt type in DISM /Online /Cleanup-image /Restorehealth and press ENTER
4. Wait for the process to be finished and then reboot the PC

Page fault in Non-Paged Area via a dedicated tool

Sometimes manual and provided solutions just simply cannot cut it because the issue is triggered also with something else and not just a single issue. Use DRIVERFIX to fix this specific issue with a single click.

New malware with extensive spyware capabilities steals data from infected Android devices and is designed to automatically trigger whenever new info is read to be exfiltrated. The spyware can only be installed as a 'System Update' app available via third-party Android app stores as it was never available on Google's Play Store. This drastically limits the number of devices it can infect, given that most experienced users will most likely avoid installing it in the first place. The malware also lacks a method to infect other Android devices on its own, adding to its limited spreading capabilities. However, when it comes to stealing your data, this remote access trojan (RAT) can collect and exfiltrate an extensive array of information to its command-and-control server. Zimperium researchers who spotted it observed it while "stealing data, messages, images and taking control of Android phones."

What happens when malicious software is installed

"Once in control, hackers can record audio and phone calls, take photos, review browser history, access WhatsApp messages, and more," they added. Zimperium said its extensive range of data theft capabilities includes:

• Stealing instant messenger messages;
• Stealing instant messenger database files (if the root is available);
• Inspecting the default browser's bookmarks and searches;
• Inspecting the bookmark and search history from Google Chrome, Mozilla Firefox, and Samsung Internet Browser;
• Searching for files with specific extensions (including .pdf, .doc, .docx, and .xls, .xlsx);
• Inspecting the clipboard data;
• Inspecting the content of the notifications;
• Recording audio;
• Recording phone calls;
• Periodically take pictures (either through the front or back cameras);
• Listing of the installed applications;
• Stealing images and videos;
• Monitoring the GPS location;
• Stealing SMS messages;
• Stealing phone contacts;
• Stealing call logs;
• Exfiltrating device information (e.g., installed applications, device name, storage stats).

How does it work?

Once installed on an Android device, the malware will send several pieces of info to its Firebase command-and-control (C2) server, including storage stats, the internet connection type, and the presence of various apps such as WhatsApp. The spyware harvests data directly if it has root access or will use Accessibility Services after tricking the victims into enabling the feature on the compromised device. It will also scan the external storage for any stored or cached data, harvest it, and deliver it to the C2 servers when the user connects to a Wi-Fi network. Unlike other malware designed to steal data, this one will get triggered using Android's contentObserver and Broadcast receivers only when some conditions are met, like the addition of a new contact, new text messages, or new apps being installed. "Commands received through the Firebase messaging service initiate actions such as recording of audio from the microphone and exfiltration of data such as SMS messages," Zimperium said. "The Firebase communication is only used to issue the commands, and a dedicated C&C server is used to collect the stolen data by using a POST request."

Camouflage

The malware will also display fake "Searching for the update.." system update notifications when it receives new commands from its masters to camouflage its malicious activity. The spyware also conceals its presence on infected Android devices by hiding the icon from the drawer/menu. To further evade detection, it will only steal thumbnails of videos and images it finds, thus reducing the victims' bandwidth consumption to avoid drawing their attention to the background data exfiltration activity. Unlike other malware that harvests data in bulk, this one will also make sure that it exfiltrates only the most recent data, collecting location data created and photos taken within the last few minutes. If you would like to read more helpful articles and tips about various software and hardware visit errortools.com daily.

In case you didn’t know, the new Windows 10 v1903 has brought tons of new features around Windows 10 Updates. One of these features is the ability to automatically adjust the Active Hours based on your computer activity. This feature is really useful as it tells the operating system when to install the Windows Updates. A lot of users use the Active Hours feature to ensure that the Windows Update won’t force them to restart their PCs to install the update. So if your computer is turned on, it won’t apply the update during the active hours you’ve specified. In addition, the active hours change for many users and they are not that strict. For instance, if you set the active hours between 10 am to 5 pm, Windows Update won’t be forcing you to restart your computer to install the updates at those times. Note that Windows Update allows enabling an option using where it can monitor the active hours in your computer and change it. To configure this setting, here’s what you have to do:

• Frist, go to Settings > Update & security > Windows Update.
• Next, take note of your current active hours and click on the “Change active hours” link.
• Then toggle the option that says, “Automatically adjust active hours for this device based on activity”. This will change the active hours and if you match it with the previous one, it should be different.

As you can see on the image given above, the earlier active hours were between 8:00 to 17:00 and were changed to 11:00 to 19:00. If you have been using this feature for a while you’ll find how useful and handy it is especially when you’re using your computer and don’t want any notifications like the prompts for Windows Updates to bother you while working.

Anytime when a new folder is created in Windows name "New Folder" is offered and set as the default name. If by any chance you would like to change this and set your own default name instead of the standard one, follow this guide. Please be aware that this guide will require you to change the registry of Windows, it is common practice to make a backup of your registry each time you want to manually change any values in it, just in case something goes wrong.

• In order to change the default new folder name first press ⊞ WINDOWS + R to open the run dialog, type in it RegEdit, and press ENTER
• In registry editor find the key:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer

• Select the NamingTemplates key. If it is not present, you’ll need to create one.
• Right-click the NamingTemplates key to add a String Value.
• Assign it the following name: RenameNameTemplate.
• Double-click on the RenameNameTemplate data value to open the Edit String dialog box.
• In the Value Data field enter the new text you want to appear when you create a new folder. You have to make sure you are not using any of the following characters: \ / ? : * " > < |
• Close the Registry Editor and Exit.
• Now, when you create a new folder, it will be named Whatever you chose instead of the New folder.

And that is all to it, you now have your own personal new folder naming template.

If by any chance you are working on a touchscreen PC, tablet, or any similar device and have no access to a hardware keyboard there is a way to place Touch Keyboard on your screen for easy typing, and you can enable icon on the taskbar for easy access.

Enabling the Touch Keyboard

1. Right-click on the Taskbar
2. Select Taskbar Settings
3. Go to Personalization > Taskbar
4. Click on Taskbar Corner Icons to expand it
5. Click on the switch next to Touch Keyboard to turn it ON
6. Close settings

The icon will immediately appear on the Taskbar in the lower right corner. Clicking the icon virtual keyboard will appear on the lower part of the screen. You can use this keyboard to type in applications the same as you were typing on hardware one. By taping on X in the upper right corner, you will hide the keyboard. Tap on the icon in Taskbar to bring it up again.

Hide the Taskbar icon

If you do not want to use Touch Keyboard anymore you can easily hide the icon:

1. Right-click on the Taskbar
2. Select Taskbar Settings
3. Go to Personalization > Taskbar
4. Click on Taskbar Corner Icons to expand it
5. Click on the switch next to Touch Keyboard to turn it OFF
6. Close settings

Windows Updates are important and though it is not recommended for any user to turn it off completely, there are just some remote cases where you might have to keep it off. Such are the cases when you want to use your Windows 10 computer just for gaming and you don’t want Windows Update to interrupt it because of some messy driver update. A lot of users have in fact want to disable Windows 10 updates completely. Although you can always use the built-in option to delay Windows Updates or make Windows 10 inform you before downloading the updates, however, there are instances when Windows 10 Update may enable itself even after you turn it off or delay it. To resolve this issue, read on. You may have to disable the Windows Update Medic Service if Windows Update just keeps on starting and turning itself back on even after turning it off in Windows 10 on top of turning off the Automatic Windows Update Service or wuauserv and setting a Guest Log on. To get started, refer to the instructions prepared below.

Option 1 – Change the Log on account of the Windows Update Service

It appears that one of the major upgrades in Windows 10 has made sure that Windows 10 enables back the Windows Update Service all on its own even if the service has been set to disable by the administrator. And that’s the important thing here, Windows 10 uses admin credentials in order to ensure that it can re-enable the Windows Update Service each time it is in a disabled state. So in this fix, you can prevent the Windows Update Service from changing the account credentials used to run it.

• Tap the Win + R keys to open the Run prompt with admin privileges.
• Then type “services.msc” and click OK or hit Enter to open Services.
• After that, locate the Windows Update Service from the list. Once you see it, double-click on it to open its Properties.
• From there, click the Stop button to stop the service.
• Next, go to the Log On tab and select the “Log on as ‘Guest” option which is the Guest account.
• Just leave the password blank and then click Apply to save the changes made.

Note: After you made the changes, every time the Windows 10 Update Service attempts to run, you might get an error message that states, “Windows could not start the Service” or “The account specified for this service is different from the account specified for other services running in the same process”. This is what makes this fix a lot better compared to other software or batch file to keep turning off the Windows Update Service. You did not exactly disable the service but you just changed the account used to run the Windows Update service and since there is a password, the service never really works. On the other hand, Windows Defender can’t be stopped using this trick as it will keep getting an update.

Option 2 – Try to disable the Windows Update Medic Service using the Windows Update Blocker

Aside from changing the Log on account of the Windows Update Service, there is also another way you can prevent the service from enabling itself after you disable it. This alternative you can use is the Windows Update Blocker. This is a new Windows Service that was introduced in the recent Windows 10 versions. You can use this service to disable the service.

This post will guide you in fixing high CPU, Memory, and Disk usage problems caused by NTOSKRNL.exe. NTOSKRNL stands for “NT Operating System Kernel. This file is a kernel image that is responsible for a lot of systems-based processes such as Hardware Virtualization, Process, and Memory. Aside from that, it is also the one that compresses the old pages of memory that reduces the overall amount of memory being used. If you notice that your computer is running slowly and you find that the NTOSKRNL.exe file is hogging your resources such as disk usage, CPU usage as well as memory usage, then read on as this post will guide you in fixing the problem caused by NTOSKRNL.exe. Make use of the options given below to resolve the issues caused by NTOSKRNL.exe. 1] Scan your computer for potential malware There might be a good chance that your computer might be infected with malware. And this malware might be associated with the NTOSKRNL.exe file and hence making it consume a lot of system resources. So, I would really recommend you to make sure that your Antivirus is up to date and then scan your computer with it specifically the C:/Windows/System32 folder because this is the location where the NTOSKRNL.exe file is located.

Option 1 – Put your computer in a Clean Boot State

The first thing you have to do is to put your computer in a Clean Boot State as this can help you in finding any incompatible programs that are causing the problem.

• Log onto your PC as an administrator.
• Type in MSConfig in the Start Search to open the System Configuration utility.
• From there, go to the General tab and click “Selective startup”.
• Clear the “Load Startup items” check box and make sure that the “Load System Services” and “Use Original boot configuration” options are checked.
• Next, click the Services tab and select the “Hide All Microsoft Services” check box.
• Click Disable all.
• Click on Apply/OK and restart your PC. (This will put your PC into a Clean Boot State. And configure Windows to use the usual startup, just simply undo the changes.)
• From there, start to isolate the problem by checking which one of the programs you installed recently is the root cause of the problem.

Once you’ve found any incompatible programs, you need to uninstall them. Refer to the steps below to do so.

• In the search box, type in “control” and then click on Control Panel (desktop app) among the search results.
• After that, select Programs and Features from the list which will give you a list of all the programs installed on your computer.
• From there, look for the concerned program and select it and then uninstall it.

Note: If you have downloaded the app from the Windows Store, you can simply right-click on it from the application list and then uninstall it.

Option 2 – Update or rollback drivers

If the first option didn’t work for you, then it’s time to either update or roll back the device drivers. It is most likely that after you updated your Windows computer that your driver also needs a refresh. On the other hand, if you have just updated your device drivers then you need to roll back the drivers to their previous versions. Whichever applies to you, refer to the steps below.

• Open the Devices Manager from the Win X Menu.
• Then locate the device drivers and right-click on them to open the Properties.
• After that, switch to the Driver tab and click on the Uninstall Device button.
• Follow the screen option to completely uninstall it.
• Finally, restart your computer. It will just reinstall the device drivers automatically.

Note: You can install a dedicated driver on your computer in case you have it or you could also look for it directly from the website of the manufacturer.

Option 3 – Try to run the DISM tool

If the first two options didn’t work, then running the Deployment Imaging and Servicing Management might. Using this built-in tool, you have various options such as the “/ScanHealth”, “/CheckHealth”, and “/RestoreHealth”.

• Open the Command Prompt with admin privileges.
• Then type in the following commands and make sure to hit Enter right after you type each one of them:
  • Dism /Online /Cleanup-Image /CheckHealth
  • Dism /Online /Cleanup-Image /ScanHealth
  • exe /Online /Cleanup-image /Restorehealth
• Do not close the window if the process takes a while as it will probably take a few minutes to finish.

Option 4 – Try to stop the Runtime Broker process

The RuntimeBroker.exe or the Runtime Broker process is the one that monitors access to Windows APIs to make sure that the apps do not violate the core security of Windows. This process usually leaves a very small footprint. However, there are times when it consumes more resources than it’s supposed to and does not release memory after the work is done that results in a memory leak. As a result, it affects NTOSKRNL.exe which is why you have to stop the Runtime Broker process. To do so, refer to these steps:

• Tap the Ctrl + Shift + Esc to open the Task Manager.
• After opening Task Manager, go to the Processes tab and look for the Runtime Broker process.
• Once you find it, check if it is using more than 15% of your memory. If it is, then you most likely have an issue with an app installed on your computer.
• Select the Runtime Broker process and right-click on it and then click on the End Task option to end its process.

Option 5 – Try to run the Performance Troubleshooter

• Tap the Win + R keys to open the Run dialog box.
• Type “msdt.exe /id PerformanceDiagnostic” in the field and hit Enter to open the Performance troubleshooter.
• Then click on Next to get started. Wait until the process is completed.

Option 6 – Try using the Windows Performance Toolkit

You can also use the Windows Performance Toolkit in finding the root cause of the problem. Just refer to the following steps to use this toolkit.

• Search for “cmd” in the Cortana Search box and click on Command Prompt from the search results to open it.
• Next, type in the command given below or copy and paste it and then hit Enter:

xperf -on latency -stackwalk profile -buffersize 1024 -MaxFile 256 -FileMode Circular && timeout -1 && xperf -d cpuusage.etl

• After executing the command, wait for at least 60 seconds and then check the logs of the Windows Performance toolkit which is stored in a file named cpuusage.etl in the folder located at C:/Windows/System32. From there, you should see a list of all the causes of the System Resources being hogged.

Microsoft has started building a unified store with Windows 8 and later with Windows 10 in order to make it easier for users to get safer and more modern applications for their Windows 10 devices. This unified store is called the Microsoft Store which is tied up with the Windows Update. The delivery for them both are quite similar which is why they also have some common errors as well as fixes for them. So in this post, you will be guided on how you can fix error 0x80246019 for both Microsoft Store and Windows Update in your Windows 10 computer. The error 0x80246019 might be caused by corrupted system files or missing ones or be due to some glitch in the component services and other possible causes but whatever the cause is, you can fix it with the help of the following fixes, make sure to follow each one of them carefully.

Option 1 – Reset Windows Update components

• Open Command Prompt with admin privileges.
• After that, type each one of the following commands and hit Enter after you key in one after the other.
  • net stop wuauserv
  • net stop cryptsvc
  • net stop bits
  • net stop msiserver

Note: The commands you entered will stop the Windows Update components such as Windows Update service, Cryptographic services, BITS, and MSI Installer.

• After disabling WU components, you need to rename both the SoftwareDistribution and Catroot2 folders. To do that, type each one of the following commands below, and don’t forget to hit Enter after you type one command after the other.
  • ren C:WindowsSoftwareDistribution SoftwareDistribution.old
  • ren C:WindowsSystem32catroot2 Catroot2.old
• Next, restart the services you’ve stopped by entering another series of commands. Don’t forget to hit Enter after you key in one command after the other.
  • net start wuauserv
  • net start cryptsvc
  • net start bits
  • net start msiserver
• Close Command Prompt and reboot your PC.

Option 2 – Toggle the Windows Insider Program settings

This option is only applicable to you if you are a part of the Windows Insider Program. If you are, then follow the steps below.

• First, you have to open Settings and go to the Update & Security section.
• From there select the Windows Insider Program.
• After that, select the “Stop Insider Preview builds” option and then restart your computer.
• Now open the Windows Insider Program again and check if it fixes error 0x80246019 or not.

Option 3 – Run the System File Checker Scan

System File Checker or SFC is a built-in command utility that helps in restoring corrupted files as well as missing files. It replaces bad and corrupted system files with good system files that might be the cause why you’re getting error 0x80246019. To run the SFC command, follow the steps given below.

• Tap Win + R to launch Run.
• Type in cmd in the field and tap Enter.
• After opening Command Prompt, type in sfc /scannow

The command will start a system scan which will take a few whiles before it finishes. Once it’s done, you could get the following results:

1. Windows Resource Protection did not find any integrity violations.
2. Windows Resource Protection found corrupt files and successfully repaired them.
3. Windows Resource Protection found corrupt files but was unable to fix some of them.

 Reboot your computer.

Option 4 – Run the DISM tool

You can also run the DISM Tool as it helps in repairing the Windows System Image as well as the Windows Component Store in Windows 10. Using this built-in tool, you have various options such as the “/ScanHealth”, “/CheckHealth”, and “/RestoreHealth” which could help in fixing error 0x80246019.

• Open the Command Prompt with admin privileges.
• Then type in the following commands and make sure to hit Enter right after you type each one of them:
  • Dism /Online /Cleanup-Image /CheckHealth
  • Dism /Online /Cleanup-Image /ScanHealth
  • exe /Online /Cleanup-image /Restorehealth
• Do not close the window if the process takes a while as it will probably take a few minutes to finish.

Option 5 – Try to reset the Microsoft Store cache

Just like browsers, Microsoft Store also caches as you view apps and games so it is most likely that the cache is no longer valid and must be removed. To do so, follow the steps below.

• Right-click on the start button and click on Command Prompt (administrator).
• Next, type in the command, “wsreset.exe” and tap Enter. Once you do, the command will clear the cache for the Windows Store app.
• Now restart your PC and afterward, try opening Microsoft Store again and then try to install your app or update your computer again.

Option 6 – Run the Windows Update Troubleshooter

You might also want to run the Windows Update Troubleshooter as it could also help in fixing error 0x80246019. To run it, go to Settings and then select Troubleshoot from the options. From there, click on Windows Update and then click the “Run the troubleshooter” button. After that, follow the next on-screen instructions and you should be good to go.

There are many times when you have to change the ownership of a folder or a file so that other users can use them as well or if you want to transfer files to them, or an old account has been removed and all the files need to be assigned to a new user. Windows 10 keeps all these files locked under the account by default which created a folder or file. So unless a user is an admin or if the file belongs to that particular user, other users won’t be able to access or edit the file. So if you want to change the ownership of a folder or a file, then you’ve come to the right place as this post will guide you on how exactly you can do that.

To get started, make sure to follow the instructions provided below carefully.

Step 1: First, you need to open File Explorer by tapping the Win + E keys. Once you’ve opened it, navigate to the folder or file that you want to change the ownership. Step 2: Right-click on the folder or file and click on Properties and then go to the Security tab. Step 3: From there, click on the Advanced button located at the bottom right part of the window to open the Advanced Security Settings of the folder or file. Step 4: As you can see, the current owner will be listed with the Change link available next to the “Owner” label. Now click on this link to open the Select User or Group window. Step 5: After that, click on the Advanced button once again and click on the “Find Now” button to see the list of all the users as well as groups that are available in the computer. Step 6: Then select the user you want to give ownership to and click on the OK button and then click the OK button once more to save the changes made. Step 7: This will take you back to the Advanced Security Settings window but this time, the owner will be changed to whoever user you’ve selected. But you’re not done yet as you still have to check two additional options to help you completely transfer the ownership of the sub-folders as well as the files. You have to check the checkbox of the following options:

• Replace owner on sub-containers and objects
• Replace all child permission entries with inheritable permission entries from the object.

Step 8: After that, you need to click the Apply and OK buttons to confirm and save the changes made. This will completely transfer the ownership of the file. However, there is still one last thing you have to do – you have to go back to the Advanced Security Settings window to remove the access of any other user on the folder or file. Once you’re there, remove the existing user to make sure that the only assigned user has the access to the folder or file.

Error Code C1900107 – What is it?

Error code C1900107 is associated with an issue with upgrading to Windows 10. If you are trying to upgrade your Windows 7, Windows 8, or Windows 8.1 to Windows 10, you might have trouble doing it and you might come across this error C1900107. The error prevents you from upgrading to Windows 10 no matter what you do. Common symptoms of this error:

• The update process continues for a long time and never ends.
• The update process ends suddenly and a message says “Failed: 1 update. Errors found: Code C1900107. Windows Update encountered an unknown error.”
• The update process fails after trying multiple times.

Solution

Error Causes

Following reasons may be responsible for this error:

• There is not enough space for Windows 10 files in the primary drive
• There is not enough space in System Reserved Partition
• Windows 10 files are faulty or corrupt

More Information and Manual Repair

Method 1:

Clean boot Windows 8 and Windows 8.1: Whenever you get some unexpected behavior on your Windows 8, the first thing you should do is try to resolve the issue by taking a diagnostic approach. Plenty of factors can be the cause for issues like slowdowns, BSODs, computer freezes, sudden reboots, etc. The best way to detect the problem is to perform a clean boot. Using a clean boot, you can find out if the Operating System is damaged by some third-party app or bad driver. You can exclude the influence of these factors and prevent them from loading. You should do 2 things before you proceed with the clean boot. First, check if any third-party application is causing the problem. If you disable all third-party apps from startup, it will help eliminate software conflicts.

• Press the Windows + R on the keyboard. The Run dialog box will pop up.
• Type MSConfig in the dialog box and click "OK".
• The System Configuration utility will appear on the screen.
• On the services tab of the System Configuration dialog box, tap or click to select the Hide all Microsoft services check box, and then tap or click Disable all.
• On the startup tab of the System Configuration dialog box, tap or click Open Task Manager.
• On the startup tab in Task Manager, for each startup item, select the item and then click Disable.
• On the startup tab of the System Configuration dialog box, tap or click OK, and then restart the computer.

Now, close MSConfig.

Method 2:

The second step is a Safe boot. Follow the steps below for a safe boot:

• Press Win + R shortcut keys on your keyboard. The Run dialog will appear on the screen. Type MSConfig and press Enter.
• The 'System Configuration' application will appear on the screen.
• Switch to the 'Boot' tab, select your Windows 8.1 entry and tick the 'Safe mode' checkbox.
• Reboot your PC to enter the Safe mode of Windows 8.1.
• After you finish troubleshooting in Safe Mode, run MSConfig again from Safe Mode and uncheck the checkbox from step 2.

Method 3:

For this method, you will need to find the $Windows.~BT Folder in your primary drive which is C:. This folder might contain corrupt files which are preventing you from installing Windows 10. The folder is hidden and we need to unhide it. Follow the steps below:

1. Open File Explorer or alternatively double click on This PC or My Computer.
2. Now from the top option click on View, The Check the Box that says Hidden items.
3. Now you will be able to see hidden files and folders. Navigate to C:$Windows.~BT and Rename the folder to something like $Windows.~BT1.
4. Now, try downloading Windows 10 again. The installation process should go through this time without any errors like code C1900107.

Method 4: If the above methods fail, try this method:

1. Go to C:\Windows\Software Distribution\Download. Now delete all the files from this download folder. Remember, do not delete the folder itself, and just delete the files.
2. Now, delete the $Windows.~BT Folder. This might ask you for administrator permission. Simply click yes.
3. Now try to install or upgrade to Windows 10. This method should work fine and there should be no error code C1900107.

If you do not possess the technical expertise required to accomplish this yourself or do not feel comfortable doing so, download and install a powerful automated tool to get the job done.