How to Fix a Windows PC Crash Dump

Error Code 0x80073afc - What is it?

Error code 0x80073afc deals with an antivirus program first built into Windows 8/8.1 This error occurs when Windows Defender, the built-in anti-virus software in Windows 8/8.1 and higher, does not start automatically and users attempt to manually start the program. During the initialization period of the program start-up, something goes wrong and users get a 0x80073afc Error message. The error message states there was a problem with the initialization of the program. Windows Defender provides protection of your computer and it is advised by the Microsoft Corporation that you ensure it starts up automatically on every start-up.

Solution

Further Information and Manual Repair

Users have found several manual repairs that have fixed the problem without needing to contact technicians for extra help. While the methods below should solve your problem easily, if this is the first time you have encountered the issue you may want to do a simple restart. This has fixed the problem for some users and is the easiest first troubleshooting move. If it doesn’t work move on to the methods listed below, which are easily completed without extra help.

Before trying any of these methods, please make sure that you are logged into a profile that is listed as the administrator of the computer of his administrative powers enabled. If this is not the case you will not be able to complete the following methods. Please log out and log back in on the administrator profile.

Method 1:

First, check to see if you have a third-party anti-virus program installed on your computer. Some users believe that the built-in Windows Defender program is not powerful enough to handle the safety of their computer so they usually download a third-party program. However, that program may have caused a conflict with Windows Defender and may not allow it to open. If you do have a third-party program installed, try uninstalling it then manually starting Windows Defender.

Method 2:

If method one does not work, you may be infected by malware or a virus that has tampered with the settings on your computer and will not allow Windows Defender to start automatically or manually.

First, open Run by holding the “Win” key and pressing the “R” key. Then type “Regedit”. The program will ask for permission to follow through with this action. Click on “Yes” and the Open Registry Editor will open.

Find the HKEY_LOCAL_MACHINESoftwareMicrosoftWindows NTCurrentVersionImage File Execution Option and check to see if there are any files similar to MSASCui.exe or MpCmdRun.exe. If there are any file entries that resemble that, you will want to right-click on them before selecting the “Delete” option. If you do not see any entries that match, this is not the issue with your Windows Defender and you will want to try another method.

The Registry on your computer is very important. It helps tell your computer what programs are safe to run, what programs should be run, and what programs should not be run. If it is tampered with by a virus or Malware, multiple system operations can be affected.

However, if you did find similar file names, and you deleted them, try to start Windows Defender manually. If it does not work again, move on to the next method. 

Method 3:

If the first two methods do not work for your issue, and you are still receiving error code 0x80073afc when attempting to start Windows Defender, this step should solve the problem if you have Restore Point installed on your computer, which you most likely do.

For this method, we will be restoring your computer to a previous Restore Point. First, just like in method two, hold the “Win” key and press the “R” key. This will open run. Next type “Rstrui.exe” and click “ok”. After some time, you will see System Restore Windows. Click “Next” and select the restore point that you would like to go back to. After your computer has restored to the point you selected, check to ensure that Windows Defender has started correctly.

If the above methods aren't able to rectify the issue, you might have to download and install a powerful automated tool to get the job done.

As you know, the Win + X menu, which is the shortcut context menu, is a useful way to launch several utilizes in Windows such as Power Options, Windows PowerShell, Event Viewer, Device Manager, and so on. However, there are times when you might experience difficulty in identifying the required utility. This is actually a part of the Windows 10 shell that goes out of scope in the customization of Windows 10. However, there is an easy trick you can use to do that. So in this post, you will be guided on how you can rename the options in the Win + X menu in Windows 10. In case you don’t know, the context menu is divided into three groups. Microsoft has categorized the bottom-most part as Group 1, while the middle part is categorized as Group 2 and the first part as Group 3. To rename these options, you need to use File Explorer and follow the instructions laid out below. Step 1: First, tap the Win + E keys to open File Explorer. Step 2: Next, navigate to this path: %LocalAppdata%MicrosoftWindowsWinX Step 3: From there, you should see three folders as Group 1, Group 2, and Group 3. Open the appropriate folder of your choice. Step 4: After that, right-click on the shortcut option you want to rename and then select Properties. Step 5: Next, navigate to the Shortcut tab under the Properties window. Step 6: Now in the text field of Comment, enter the new name of the option you selected. Step 7: Click on the Apply and OK buttons to save the changes made. Note: You can now either Sign back in or sign out of your Windows 10 User Account to see the result of the changes you’ve made. You could also restart the process of File Explorer via Task Manager. This will close the File Explorer as well as the shell components and then only launch the shell components again. In addition, you can check the Win + X menu to see the customized name that you’ve just set for a particular option. As you can see, even though it does not add anything extra, it is still a lot better in knowing how you can customize it.

Coming in October for insiders and in November for all in the update, Microsoft has prepared a series of updates which they call an "additional set of experiences"

These updates are looked upon by Panos Panay, a vice executive president at Microsoft & chief product officer for Windows and devices as sort of makeup tests. They will consist of new additions with the biggest one being a tabbed version of File Explorer.

File Explorer received a UI makeover in the last update but the tabbed interface was missing which was expected by many users so it will come in following the next update.

The rest of the features that we will receive are an updated Photos application, Suggested Actions in the Windows Shell, Overflow menu for the taskbar, and improved Nearby Share.

The tabbed File Explorer interface is essentially File Explorer’s version of Sets, the tabbed window interface that Microsoft tested out several years ago. In testing, the tabbed interface proved handy for moving and copying files, and we’d expect the same once the feature formally goes live. The difference between Sets and the tabbed File Explorer interface is Sets allowed for multiple applications to be clustered together via tabs.

Photos app will include a “new photos-managing experience that brings a gorgeous gallery, simplifying browsing, finding, management and consumption of your collection of photos.” It will allow “easy backup to OneDrive” and a “delightful Memories experience.”

As for other features, nothing specifically was said except giving just some tips on what will they bring, it is obvious that File Explorer and the photos app were the main focus for MS in this upcoming update.

Error Code 0x80070570 - What is it?

Error Code 0x80070570 is a common Windows 10 error code that generally is seen by users who are attempting to install a new version of the operating system. While it is most often associated with Windows 10, variations on this same error code have been present in previous versions of the operating system, going all the way back to Windows 7.

Common symptoms include:

• Inability to run through the installation process to completion when attempting to install a new version of the operating system
• Error message regarding corrupt or missing files

While it is frustrating to encounter an error like Error Code 0x80070570 as you try to install a new operating system version on your device, there are several methods that can be used to try to resolve the issue. If you do not feel like you have the skill or knowledge necessary to successfully apply the steps below, be sure to get in touch with a trusted computer repair technician that is competent in the repair of Windows 10 errors.

Solution

Error Causes

In some cases, Error Code 0x80070570 arises erroneously when the system isn’t able to find a particular file that it needs. Other times, it happens when there is a conflict with the antivirus software that you are running and the installation software. Finally, there may be a faulty source of RAM in your computer that needs to be removed before the installation can be completed.

Regardless of what you believe to be the cause behind the error code, there are at least two different methods that you can use to try to resolve Error Code 0x80070570 on your device. The first is fairly simple and easy to follow, while the second requires a little bit more knowledge of your hardware in order to complete it successfully.

Further Information and Manual Repair

There are two common ways that users can attempt to get around Error Code 0x80070570 on their devices. Each requires a little more skill and technical knowledge than the last. If you don’t feel like you have the skill, time, or ability to invest in the methods below, be sure to get in touch with a Windows repair technician who can help you to complete the necessary steps in the right ways.

Here are the best ways to attempt to resolve Error Code 0x80070570 on your Windows device:

Method One:  Reattempt Installation

In some cases, when Error Code 0x80070570 appears on your computer, you can simply click on the OK button and then go back to the screen immediately proceeding where your installation has left off, choosing to restart the process of installation. For some users, repeating this method at least four times has allowed them to bypass the error without undertaking more serious and time-consuming methods to resolve the issue at hand.

Method Two:  Check Your Various Sources of RAM

If you have more than one source of RAM in your computer, first remove one of the sources, then re-attempt installation. If you are still encountering Error Code 0x80070570 after removing one of the sources, continue to remove each until you are down to a single source, then trade that last source for one of the ones that have been pulled.

If you have a bad source of RAM, this can help you to figure out which input is causing the error to appear and to address the problem appropriately. Once you have determined which specific source is causing the problem, you can reboot your computer and attempt to run the installation process one more time.

If your RAM sources are not specifically causing the issue, you may still need to run diagnostics tests on your hardware to identify the source of the problem at hand.

Method Three: Use An Automated Tool

If you wish to always have at your disposal a utility tool to fix these Windows 10 and other related issues when they do arise, download and install a powerful automated tool.

For a while now, Microsoft has been working hard to add various built-in troubleshooters in Windows 10. In fact, there is a troubleshooter for almost every standard or common error in Windows 10. And now with the newly released Windows 10 v1903, Microsoft has added the Recommended Troubleshooting which allows Windows 10 to automatically fix a lot of critical issues on your computer, and in this post, you will be guided on how you can turn on or off the Recommended Troubleshooting in Windows 10. The Microsoft Diagnostic & Feedback data only provides two settings – Basic and Full. So if you want to turn off the Recommended Troubleshooting for some reason, the only way to do so is to stop it from collecting complete data from your PC. And to turn it on or off, you can choose to switch between them. To do that, navigate to Settings > Privacy > Diagnostics & feedback and from there, select Basic under the Diagnostic Data section. After that, go back to Settings and go to Update & security > Troubleshoot. Once you’re there, you should see a warning message saying, “Share Full Diagnostic data to get additional troubleshooting recommendations”. Based on the message, Microsoft will only offer the recommended troubleshooting based on the Full Diagnostic data which it collects from your computer. On the other hand, if you know how to navigate and use the Windows Registry, then you can enable or disable the Recommended Troubleshooting via Registry Editor but before you proceed, make sure that you create a System Restore point. Once that’s covered, follow these steps:

• Tap the Win + R keys to open the Run dialog box and type “regedit” in the field and tap Enter to open the Registry Editor.
• Next, navigate to this registry path: HKEY_LOCAL_MACHINESOFTWAREMicrosoft
• From there, look for the key named “WindowsMigration”. If you can’t find it, just right-click on the left pane and create a new key and then name it “WindowsMigration”.
• After that, create a DWORD “UserPreference” and double click on it to set its value to “0” if you want to turn it off or “1” if you want to turn it on.
• Exit the Registry Editor and restart your computer to apply the changes made.

Note: The Recommended Troubleshooting functionality can look into the error logs sent back to the Microsoft team and use an algorithm to set up a solution for you and they’re nothing but Diagnostics and Feedback data that Windows collects and sends back to Microsoft. Moreover, the recommendations are only visible if you are connected to the internet, else it will show the same message.

If you are a kid or in your teenage years you maybe will be not familiar with Commodore 64 but we are welcoming you anyway to go with us on this journey through time and find out about one of the most influential and beloved home computer of all time.

History of Commodore

Firstly shown to the world in January of 1982, at the Consumer Electronics Show, C64 caught attention right away with its low price of only $595. Although it had some issues like limited functionality in some fields and a non-wide range of use by 1984 its price dropped below $200 and it cemented itself as an affordable home computer for the middle class. In as same year Apple has released their Apple II computer with far superior capabilities, commodore 64 remains a middle-class favorite due to its price. Also, the company has decided to distribute its homemade computer via some other means including not only just electronics stores specialized in that kind of equipment but in general shops and big department stores, through toy stores and book shops as well as through specialized dealers. This has given C64 a more competitive edge and mixed with the affordable price it soon became a staple of home computing. With sales booming and the early reliability issues with the hardware addressed, software for the C64 began to grow in size and ambition during 1984. This growth shifted to the primary focus of most US game developers. The two holdouts were Sierra, who largely skipped over the C64 in favor of Apple and PC compatible machines, and Broderbund, who was heavily invested in educational software and developed primarily around the Apple II. In the North American market, the disk format had become nearly universal while cassette and cartridge-based software all but disappeared. So most US-developed games by this point grew large enough to require multi-loading. At a mid-1984 conference of game developers and experts at Origins Game Fair, Dan Bunten, Sid Meier, and a representative of Avalon Hill said that they were developing games for the C64 first as the most promising market. By 1985, games were an estimated 60 to 70% of Commodore 64 software. Over 35% of SSI's 1986 sales were for the C64, ten points higher than for the Apple II. Everything was great for Commodore but the industry was moving forward and by the year 1988, PC compatible computers were stated to be the largest and fastest-growing home entertainment systems pushing C64 on to second place. Also, Nintendo’s gaming system has started to take hold in the world with amazing 7 million systems sold in 1988 only. By the year 1991, many developers exited the gaming market for Commodore 64 home computer system and its popularity started to fall due to lack of software and not so many hardware changes. Commodore announced that the C64 would be finally discontinued in 1995. However, only one month later in April 1994, the company filed for bankruptcy. When Commodore went bankrupt, all production on their inventory, including the C64, was discontinued, thus ending the C64's 11 and a half year production.

Legendary titles

The history of Commodore 64 is interesting ones and I believe that it has done much for computers in general, yes it ran 11 years and that seems like a small-time, but remember that it was 11 years of C64 alone, there were other computers released by the company but none except arguably AMIGA 500 has not reached that much popularity as Commodore 64. That being said the system has left some of the great titles in its catalog that are great to be played even today and have been classic games on other platforms, even on PC itself. That being said I am giving you the top 100 games for Commodore 64:

1. Zak McKracken and the Alien Mindbenders
2. Pirates!
3. Maniac Mansion
4. IK+
5. Bubble Booble
6. Turrican II: The Final Fight
7. Last Ninja 2
8. Space Rogue
9. Ultima IV: Quest of the Avatar
10. Archon: The Light and the Dark
11. Turrican
12. Wasteland
13. Defender of the Crown
14. Elite
15. Ultima V: Warriors of Destiny
16. Laser Squad
17. Prince of Persia
18. Impossible Mission
19. U.L.E.
20. Pool of Radiance
21. Bruce Lee
22. Paradroid
23. Project Stealth Fighter
24. Curse of the Azure Bonds
25. Ultima III: Exodus
26. Legacy of the Ancients
27. Winter Games
28. Leaderboard Golf
29. Supremacy
30. Airborne Ranger
31. Exile
32. Last Ninja, The
33. World Class Leader Board
34. MicroProse Soccer
35. Project Firestart
36. Boulder Dash
37. Summer Games 2
38. Great Giana Sisters, The
39. Neuromancer
40. Mad Doctor
41. Mail Order Monsters
42. Zork I: The Great Underground Empire
43. Buck Rogers: Countdown to Doomsday
44. Katakis
45. Bard's Tale, The: Tales of the Unknown
46. WIzball
47. Times of Lore
48. Emlyn Hughes International Soccer
49. Ultimate Wizard
50. Alternate Reality: The Dungeon
51. World Games
52. Leaderboard Executive
53. California Games
54. Samurai Warrior: The Battles of Usagi Yojimbo
55. Summer Games
56. Creatures 2: Torture Trouble
57. Gunship
58. Space Taxi
59. International Karate
60. Silent Service
61. Bard's Tale III, The: Thief of Fate
62. Seven Cities of Gold
63. Armalyte
64. Raid on Bungeling Bay
65. Alter Ego: Male Version
66. Enforcer: Fullmetal Megablaster
67. Detective Game, The
68. Creatures
69. Skate or Die!
70. Heart of Africa
71. E.R.O. - Helicopter Emergency Rescue Operation
72. Way of the Exploding Fist, The
73. Stunt Car Racer
74. Wizard of Wor
75. Bard's Tale II, The: The Destiny Knight
76. Mayhem in Monsterland
77. Train, The: Escape to Normandy
78. Jumpman
79. Champions of Krynn
80. Pitstop II
81. Barry McGuigan World Championship Boxing
82. Montezuma's Revenge
83. Boulder Dash II: Rockford's Revenge
84. Spy vs Spy
85. Mercenary: Escape from Targ
86. Midnight Resistance
87. Lords of Midnight
88. Lode Runner
89. Castles of Doctor Creep, The
90. Boulder Dash Construction Kit
91. Buggy Boy
92. Racing Destruction Set
93. Dino Eggs
94. Realm of Impossibility
95. Rainbow Islands
96. Beach-Head II: The Dictator Strikes Back
97. Barbarian: The Ultimate Warrior
98. Grand Prix Circuit
99. Head Over Heels
100. Sentinel, The

Commodore 64 emulator and game ROMs

Commodore 64 might be in the past but its legacy still lives on even today through emulators and ROMs for emulators. You can even purchase one in working condition if you want and relive the full experience as it once was. If you are not keen on spending money for reliving and checking games or software of C64 here are some links to help you to at least experience part of it completely free. Commodore 64 Emulator C64 Game ROMs

Conclusion

It is without a doubt that the C64 home system has made a great mark on home computers echoing even today and I am very grateful that I have been part of it as a kid. Sometimes today I will still spin some old classic via emulator just for nostalgia and enjoy its simplicity. Thank you for reading the article and I hope to see you soon again.

Error Code 40 – What is it?

Error Code 40 is a device driver error that users encounter on any Windows 2000 and later operating systems. It occurs when the peripheral device that you connect to your PC cannot be accessed due to a change in the system registry.

This is due to the presence of invalid sub-keys of the device driver in the system registry. It is a common error that users come across and appears on your PC with either of the following messages:

“Information in the registry entry for this driver is invalid”

OR

"Windows cannot access this hardware because its service key information in the registry is missing or recorded incorrectly. (Code 40)"

Solution

Error Causes

As mentioned above, the error code is triggered when the device driver’s invalid sub-keys appear in the registry, effectively changing it. This happens when the windows system files get damaged due to the following factors:

• An incomplete program uninstallation
• An incomplete program installation
• Hardware is not removed properly
• System recovery from viruses
• An improper system shut down

Factors such as incomplete installations or uninstallations or an improper system shut down can cause files to become damaged that threaten the health of your computer.

Removing viruses from the computer is also another factor as it removes the entries in the Windows system files which contain the viruses including spyware or malware

Further Information and Manual Repair

Fixing Error Code 40 is similar to fixing other device manager error codes. Here are a few methods you can try.

Method 1 – Use System Restore

You can use system restore to eliminate the problem. Here is how you can use it:

• Log in using an Administrator account
• Click ‘Start’ button and select All Programs > Accessories > System Tools > System Restore
• Click ‘Restore my computer to an earlier time’ and click ‘Next’
• Select the last Windows restore point from the ‘On this list, click a restore point’ list, and click ‘Next’
• Click ‘Next’ on the confirmation window to proceed
• Restart your PC after restoration is complete

By restoring the system via a last saved system checkpoint, you can obtain undamaged Windows system registry files that can help avert the error code.

Method 2 – Manually uninstall then reinstall the device driver

If using system restore also does not work in removing the error code, you may have to resort to manually uninstalling and then reinstalling the device driver causing the problem.

This would be necessary since the remaining incomplete files due to a partial removal or installation of programs is what contributes to the error code. By uninstall and reinstalling the device driver program, it would lead to the completion of the files.

You can do this by firstly logging in as Administrator and open Device Manager. Select the device that is causing the problem and double click it and make sure that the peripheral is connected properly to the PC. Upon opening, click on the ‘Driver’ tab and then select ‘Update Driver’.

Make sure to refer to the system documentation that you received with your PC or computer to check for the motherboard details and driver specifics.

Method 3 – Use software to automatically download the driver

Manually uninstalling and reinstalling the driver will do the trick, however, it may be time-consuming especially when you would have to resort to your hardware user manual.

Therefore, using a program such as DriverFIX can save you a lot of time and frustration in having your device work properly on your computer.

DriverFIX, with its user-friendly approach to help you fix your PC issues, comes with an integrated database that detects which drivers you need to reconfigure within just a few seconds and downloads it automatically.

It further ensures that your drivers are installed in their entirety leaving no room for any incomplete files to remain that create Error Code 40.

It also has the added advantage of being able to backup and restores your files should there be the slightest possibility of system file damage.

Thus, registry damage can be averted by letting the software roll back the system files to an earlier healthy checkpoint. Driver Assist is the answer to fixing your PC error codes accurately and quickly.

Click here to download DriverFIX to fix Error Code 40 quickly and effectively!

As you know, the Windows 10 Action Center has a stack of all the notifications that come from different applications on your computer. So each time an app displays notifications, it will be displayed for about 5 seconds and then it disappears right away. Although the allotted time for the notifications to be displayed is quite enough to catch your attention and help you get a glance at the message, there are times when you might miss it and you hoped it could’ve been displayed a lot longer. So in this post, you will be guided on how you can increase or decrease the display time of the notification in Windows 10. The best way you can view the missed notification is to click on the Action Center. From there, you will see all the notifications that are grouped by the applications. This means that if you have a lot of notifications, it would be hard for you to find what you are looking for. Thus, in such cases, the best way you can do is to increase the display time for which notification to stay on the screen.

To get started, refer to the instructions given below.

Step 1: Tap the Win + I keys to open Settings. Step 2: Next, navigate to Home > Ease of Access > Display. Step 3: After that, scroll down to the end until you see the dropdown to change the notifications where you should see the “Show notifications for”. Step 4: Then you can change the time from the default 5 seconds to 7, 15, 30, and so on. Step 5: Once done, the display time of the notifications should stay longer but keep in mind that you must choose the length wisely so if you have notifications from a lot of apps, then the screen will also be filled with multiple notification cards.

If you got the Microsoft Store error code 0x80072F30 while trying to open Microsoft Store, then it indicates that the Store fails to connect to the internet or is not able to launch successfully for some reason. It could be that the Windows Update Service has stopped or the Windows Store cache might be corrupted or it could just be due to a poor internet connection. Whichever the cause is, you have to fix this error so that you can use Microsoft Store again and you won’t be getting the following error message every time you open the app:

“Check your connection, Microsoft Store needs to be online, It looks like you are not, error code 0x80072f30.”

The error code 0x80072F30 is related to the Windows Store which prevents it from opening properly. To resolve this problem, you can try fixing the problem with the help of the options given below. Follow each one of them carefully.

Option 1 – Check your internet connection

The first and most obvious thing you can do is to check your internet connection. This may only be a basic tip but it sure works like a charm in most cases. And if you have another internet connection available, you can also try connecting to that and see if you can pull up Microsoft Store or not. 1] Change your internet connection: A basic tip, but sometimes works like a charm. You may want to check if your internet connection has an issue, or you can also try opening a website and see if you can open it and if possible try connecting to a different internet connection and see if the Microsoft Store opens for you. We also suggest you try changing your DNS and see if it helps.

Option 2 – Check the date and time as well as the time zone of your PC

A lot of services and apps rely on the Date, Time, and Time Zone of your PC which is why if they are not configured correctly, a request from the client machine will be rejected from the server and the same thing happens with the Microsoft Store.

• First, go to Settings > Time and Language.
• From there, check if it is set to Automatic or not – if it is, switch the toggle button off to set the Time and Time zone manually.
• Then select the right time zone manually.
• On the other hand, if the Time and Time zone is set manually, you have to switch the toggle button on to set Time and Time zone automatically.
• Restart your PC and afterward try opening Microsoft Store again and check if the problem’s fixed or not.

Option 3 – Run the Network Adapter Troubleshooter

Since Windows 10 is packed with various troubleshooters – one of which is the Network Adapter Troubleshooter – you can use it to troubleshoot the problem. To use it, follow these steps:

• Open the Search bar on your computer and type in “troubleshoot” to open the Troubleshoot settings.
• Next, scroll down and select the “Network Adapter” option from the right pane.
• Then click on the Run Troubleshooter” button.
• After that, your computer will check for any possible errors and will pinpoint the root cause of the problem if possible.

Option 4 – Try to reset the Microsoft Store cache

Just like browsers, Microsoft Store also caches as you view apps and games so it is most likely that the cache is no longer valid and must be removed. To do so, follow the steps below.

• Right-click on the start button and click on Command Prompt (administrator).
• Next, type in the command, “exe” and tap Enter. Once you do, the command will clear the cache for the Windows Store app.
• Now restart your PC and afterward, try opening Microsoft Store again.

Option 5 – Check the Windows Update Service status

You might also want to check the status of the Windows Update Service since the proper functioning of this app depends on the Windows Update Service. It could be that there is some issue with the service which is why you’re getting the error code 0x80072F30 while trying to open Microsoft Store.

• Tap the Win + R keys to open the Run dialog box.
• Then type “services.msc” in the field and hit Enter to open Services.
• Next, look for Windows Update Service from the list of available services in Windows.
• Once you see it, check if its status is STOP or Pause and then change the status to Automatic.

Hive ransomware has been targeting Microsoft exchange servers lately vulnerable to ProxyShell security issues in order to deploy various backdoors. Once the backdoor has been placed various attacks can be performed including but not limited to network reconnaissance, stealing admin accounts, taking valuable data, and even installing and deploying file-encrypting algorithms.

ProxyShell wide abuse

ProxyShell is a set of three vulnerabilities in the Microsoft Exchange Server that allows remote code execution without authentication on vulnerable deployments. The flaw has been used in past by various ransomware like Conti, BlackByte, Babuk, Cuba, and LockFile.

Security vulnerabilities have been reported to be fully patched on May 2021 but how Hive was able to still be successful in exploiting PowerShell and infiltrating into the system there seems to be still some unpatched and open issues.

Hive

Hive has gone a long way since it was first observed in the wild back in June 2021, having a successful start that prompted the FBI to release a dedicated report on its tactics and indicators of compromise.

In October 2021, the Hive gang added Linux and FreeBSD variants, and in December it became one of the most active ransomware operations in attack frequency.

Last month, researchers at Sentinel Labs reported on a new payload-hiding obfuscation method employed by Hive, which indicates active development.