Mac advantages over Windows PC

There are a lot of reasons to ban or block different websites in your Windows. From wanting to limit yourself from distraction to block certain sites for sake of kids not going into them. Whatever your reason might be, keep reading in order to find out how you can block any website inside Windows for all browsers. The technique I am going to share with you is universal and not tied to Windows versions, they will work in any Windows from XP onward. Also, the technique will block desired websites on any browser, already installed or even ones that will be installed after doing the trick. And we will also be looking at applications that can help you in this task if you do not wish to do it manually.

Block websites using dedicated software

A small free application called Focal Filter which can be found here: https://www.focalfilter.com/ is a software solution for your needs. It is a pretty straightforward and easy-to-understand application and not really much can be said here about it. You simply download and install it, set your websites, and you are done, the app does rest.

Blocking manually via host file

Another method besides mentioned one using the dedicating application is to manually set site addresses inside the Windows host file. The first thing, of course, is to open the host file, run a notepad with administrator privileges, go to file open, and navigate to c:\windows\system32\drivers\etc\hosts. Once the file is opened go all the way down and add: 127.0.0.1 SITENAME For example: 127.0.0.1 www.youtube.com or 127.0.0.1 www.facebook.com This way each time user on a PC tries to access a listed website computer will reroute it to the given address which is your PC's local address and asked website will not be able to load.

Error 451 - What is it?

This is a typical SMTP error code. SMTP is the abbreviation for Simple Mail Transfer Protocol. It is an internet standard for email transmission. In other words, SMTP is a text-based protocol in which the sender communicates with the mail receiver by issuing commands and receiving a response code. The SMTP error 451 is displayed in the following format:

‘451 Requested action aborted: local error in processing’

This error message indicates that the program cannot send more messages and the server has hit the limit. This is because some mail servers have limits. The sever stops the task of sending and receiving emails when this limit is achieved.

Solution

Error Causes

The causes of error 451 include:

• Server limit reached
• Email rejection due to a remote anti-spam filter
• Request denied by the server
• Viral infection

If you heavily rely on email communication with your business partners and colleagues, then it is advisable to immediately resolve this issue without any delays. Though this error is not fatal, you should repair it right away to avoid inconvenience. SMTP error code 451 can hamper your ability to communicate via email.

Further Information and Manual Repair

Here are some of the best, easy, and effective DIY methods that you can try to repair error code 451 on your PC.

Method 1

To fix this error, simply follow these steps:

• login to Linux SSH
• Open the file /etc/localdomains
• Nano/etc/localdomains and then add the domain name that is triggering email sending error
• Now reboot your PC

This will hopefully resolve the issue. Nonetheless, if the error code still persists, then try other methods given below.

Method 2 - Configure List Settings to change the server limit.

This can be done by accessing the List Settings then Outgoing Mail Server (SMTP) and then the Limit Feature. By accessing the limit feature, you can easily adjust the program to any limit of your choice. Configure the limit and save changes. Reboot PC to activate the changes made.

Method 3 - Scan and Remove Viruses.

This error code can also be triggered due to viral infection. If this is the cause, then simply download an anti-virus on your PC. Scan the entire system and remove all detected malicious programs like Trojans, malware, adware, viruses, and spyware. This will repair the error 451 on your system.

Method 4

If the error still persists, then contact your SMTP provider to check the situation and resolve it. There is a possibility the error is generated from the SMTP provider’s end.

Blizzard is one of the most beloved game company which brought some of the most and greatest titles in PC gaming. Blizzard has released its own launcher in which you can launch games, sadly sometimes launcher does not want to work and fails to connect. If this happens to you be sure to:

1. Reset your network devices to make sure your router hasn't become flooded with data.

   Power cycling your modem and router allows them to reset and re-establish a connection to your ISP. Follow these steps to completely power cycle the devices in your network connection:Note: If your modem has a battery backup, you will need to take the battery out or use the reset button on the modem.

   1. Shut down all computers connected to the modem/router.
   2. Power down and unplug the modem and the router if you're using one.
   3. Allow to sit for 60 seconds unplugged.
   4. Plug in and turn on the modem and router, and allow them to completely boot up until the front panel connection lights on the modem show a steady connection.
   5. Start the computer and allow it to completely boot up.

2. If you're using a wireless connection, optimize your internet connection to rule out a connection issue.

   If you're experiencing issues with your low-speed or wireless internet connection, follow the steps below to troubleshoot the problem.

   1. Try plugging your computer directly into your modem.
   2. Shut down other programs that access the internet, such as other games or download programs.
   3. Satellite, mobile phone, and WiMax internet connections are not stable connections and may cause further connection issues when playing Blizzard games. If possible, consider switching to a more stable connection.

3. Update your drivers and operating system to resolve any compatibility issues.

   Out-of-date drivers and operating systems can cause a variety of issues and are one of the first things to check when a game is having problems. The instructions below will help you check and update your drivers.

   • Even new computers can have out-of-date drivers and operating systems because updates are released routinely.
   • Some games and programs might run fine on a system with old drivers, but outdated drivers can still create technical issues with specific games or programs.
   • Check our supported video cards articles to make sure your hardware is compatible:
     • World of Warcraft
     • Hearthstone
     • StarCraft II
     • Diablo III
     • Heroes of the Storm
     • Overwatch

   Refer to the steps below to update drivers and software for your operating system.

4. Release and renew your IP and flush your DNS to resolve any network conflicts.

   1. While on the desktop, press Windows Key and type CMD.
   2. Right-click Command Prompt and select Run as administrator.
   3. Type ipconfig /release in the command prompt.
   4. Wait a few seconds for a reply that the IP address has been released.
   5. Type ipconfig /renew in the command prompt.
   6. Wait a few seconds for a reply that the IP address has been re-established.
   7. Type ipconfig /flushdns in the command prompt.
   8. Close the command prompt and attempt to make a connection.

5. Close all other applications to resolve software conflicts and free up resources.

   Before trying the steps below, close unnecessary programs and restart your computer. Identify Problematic Startup Items

   1. Press Ctrl+Shift+Esc to open the Task Manager.
   2. Click More Details.
   3. Select the Startup tab.
   4. Right-click on each item and select Disable.
   5. Restart the computer.

   If this resolves the issue, enable the startup application one at a time to determine which one is causing the problem. You will need to restart between each application you enable. Note: To re-enable startup applications, follow steps 1-4 and select Enable.

6. Delete the Battle.net Tools folder to automatically rebuild outdated or corrupt files.

   1. Close Blizzard processes.
      1. Press Ctrl + Shift + Esc to bring up the Task Manager.
      2. Click the Processes tab.
      3. Select all Agent, Blizzard Battle.net desktop app, and game processes, and click End Process.
   2. Navigate to the folder containing the Battle.net directory:
      1. Press Windows Key + R to open the Run dialogue.
      2. Type C:\ProgramData\ into the Open field and press Enter.
   3. Delete the Battle.net folder.
   4. Run Battle.net and update the game to see if the issue persists.

   If the error persists after you try these steps, another program may be causing the problem. Restart your computer and delete the Battle.net folder one more time.

   Note: The above steps may cause the Blizzard Battle.net desktop app to forget game install locations. If your games can’t be found, you will see Install on the Blizzard Battle.net desktop app game tab instead of Play. To find your installation, click Locate this game or run the game launcher.

Jp2klib.dll Error - What is it?

Jp2klib.dll is a type of Dynamic Link Library. This file is developed by Adobe Systems Inc and associated with CS2 (Creative Suite 2 Premium). Like all DLL files, this file also contains small programs that support programs developed by Adobe Systems on your PC. The function of Jp2klib.dll is to load and run programs. Jp2klib.dll error occurs when it fails to do so. It occurs during program startup. Jp2klib.dll error is displayed in several different formats depending on the cause of the error. Here are some common error messages that you may come across:

• "JP2KLib.dll not found."
• "Cannot find C:\WindowsSystem32\JP2KLib.dll."
• "Cannot start Creative Suite 2 Premium. A required component is missing: JP2KLib.dll. Please install Creative Suite 2 Premium again."
• "Cannot register JP2KLib.dll."
• "The file JP2KLib.dll is missing."
• "This application failed to start because JP2KLib.dll was not found. Re-installing the application may fix this problem."
• JP2KLib.dll Access Violation."

Solution

Error Causes

There are several causes for the Jp2klib.dll error code pop-up. These include:

• Hardware failure
• Jp2klib.dll file not properly registered
• Viral infection
• Deleted, missing, or corrupted Jp2klib.dll file
• Registry problems
• Another program overwrote the Jp2klib.dll file

The good news is that this is not a fatal error code like the blue screen of death errors. However, it is still advisable to resolve it right away to avoid inconvenience.  This error may limit your ability to access your desired program.

Further Information and Manual Repair

Follow these methods to resolve Jp2klib.dll error code on your PC in a few minutes without any professional assistance or technical know-how:

Method 1 - Re-register the Jp2klib.dll file

Sometimes Jp2klib.dll error may occur if the DLL file is not registered properly. In such a situation "JP2KLib.dll not registered" error message will pop on your computer screen. To resolve, all you need to do is register this file. Follow these steps to register the Jp2klib.dll file on your PC:

1. Go to the start menu, type the command in the search box. Don’t press enter yet.
2. First, hold CTRL-SHIFT and then press it. This action will prompt a permission dialog box. Click yes to proceed.
3. You will be asked to enter a command, here simply type regsvr32 /u JP2KLib.dll and then press enter.
4. This will first unregister the previous Jp2klib.dll file. Now type regsvr32 /i JP2KLib.dll and press enter to re-register the same file.
5. After this, close the command window and reboot your PC to activate changes.

Method 2 - Check the Recycle Bin and Restore the Jp2klib.dll file

If you come across this error message "JP2KLib.dll not found”, this indicates a missing Jp2klib.dll file. This usually happens if you recently uninstalled a program on your system which was also supported by the Jp2klib.dll file due to which the file was also deleted. But don’t worry! Check your recycle bin to retrieve the accidentally deleted file on your system. If you find it restore, but if you don’t then simply download it from a reliable DLL website.

Method 3 - Scan for Viruses

Install and run an antivirus to detect viruses. Viruses are malicious programs that damage and corrupt DLL files like the Jp2klib.dll file. Scan for all viruses on your PC and remove them to fix the problem.

Method 4 - Repair the Registry

If you don’t clean the registry often it becomes accumulated with obsolete files like bad and broken entries, cookies, and junk files. These files corrupt the registry and damage system and DLL files also stored in the same location. It then leads to such error message pop-ups. To resolve, download Restoro. This is an advanced PC Fixer deployed with a registry cleaner. It is easy to use and in just a few clicks can repair the Jp2klib.dll error on your PC. The registry cleaner scans and removes all obsolete files. It cleans the registry and repairs the damaged system and DLL files. Click here to download Total System Care and fix the Jp2klib.dll error.

System image backup error 0x807800A1 & 0x800423F3 appears when you are trying to create a system image backup and the operation fails to do so. If you’re faced with any of these error codes, try our recommended solutions in the order presented below and resolve the issue.

Check Volume Shadow Copy & Software Protection Services

To restart the Volume Shadow Copy Service (VSS) on Windows 10, do the following:

• Press ⊞ Windows + X to bring up the Windows menu.
• Click on command prompt (admin)
• In the command prompt window, type the commands below and hit Enter after each line:

net stop vss net start vss

Once the commands execute successfully, try the system image backup again. The operation should complete successfully. You need to also check if the Software Protection Service is disabled. If it is, then Start it and ensure that it is set to default which is Automatic (Delayed Started).

Create System Image using PowerShell

Command lines are less prone to errors provided the syntax is correct, unlike GUIs that can suffer a glitch every now and then. To create a system image with PowerShell do the following:

1. Open the Windows PowerShell as administrator. To create a System Image in Windows 10 using PowerShell, you will have to run the Wbadmin command.
2. Inside the Powershell window type, then press Enter: wbadmin start backup-backup target: E:-include: C:-quiet-allCritical E: is the target drive where you’re going to save the system image, and C: is the system root drive where Windows is currently installed
3. To extract the created system image, starting over from Windows 10 USB installation media, select advanced startup or open run and type: C: \ Windows \ System32 \ Shutdown.exe / r / o

Use third-party imaging software

If the previous two solutions have not managed to solve the issue there is always an option to use a third-party imaging solution. There are free open source and buying options offering various advantages each. Find out which one works best for you and use it.

As you know, NVIDIA is one of the topmost graphics cards used and it has been that way for several years already. And in those years, the company has managed to release the best cards on the market. However, there are still times when some things fail and don’t work as expected due to some NVIDIA driver issues. As of late, one of the issues users reported about NVIDIA drivers is that it keeps on crashing on a daily basis. It gets to the point where they aren’t able to play games anymore while some users experience lag and rendering issues. In addition, some users also reported that their computer display tends to freeze sometimes, and then things would seem to go back to normal but only for a short span of time as the crash seems to happen every 10 minutes. This can be extremely annoying as you won’t be able to use your computer properly. If you are one of these users, worry not for there are several ways you can try to resolve the problem in your Windows 10 computer. Make sure to carefully follow the options given below.

Option 1 – Try checking if the NVIDIA graphics card is enabled

Although the problem is quite massive, the fix could be as simple as enabling the NVIDIA graphics card if it turns out to be disabled. There might be some strange reason why your graphics card disables itself. Thus, the best and first option you can try is to check if the NVIDIA graphics card is enabled or not. To do so, follow these steps:

• Tap the Win + R keys to open the Run dialog box.
• Then type “devmgmt.msc” in the field and hit Enter to open the Device Manager.
• After opening the Device Manager, look for the Nvidia graphics card option among the list of device drivers. Once you found it, check if it is enabled or not. If it’s not enabled, you should see a gray arrow pointing downwards. Right-click on the card and select Enabled.
• Next, right-click on the graphics card once more and click on the Update Driver Software option and then click on the “Search automatically for updated driver software” option.

Option 2 – Try to choose Maximum Performance and disable Vsync

If the first option didn’t work out for you, then you might want to try turning off Vsync and adjust the performance to the maximum. Refer to these steps to disable Vsync and adjust performance to the maximum.

• The first thing you have to do is right-click on your desktop and select the NVIDIA Control Panel among the options.
• After opening the NVIDIA Control Panel, select Manage 3D Settings.
• After that, set Vsync to off, and then in the Power Management Mode, set it to Maximum Performance. That should fix the problem.

Option 3 – Try updating the drivers from the official site of NVIDIA

If both the first and second given options didn’t work, you can also try updating the drivers from the official NVIDIA website. And in case you don’t know the type of Nvidia graphics card that your computer is on, follow the steps below:

• Tap the Win + R keys to open the Run dialog box.
• Next type in “dxdiag” in the field and click OK or hit Enter to open the DirectX Diagnostic Tool.
• From there, you can see what type of Nvidia graphics card that your system is on.
• Take note of your graphics card information and then look for the best drivers for your operating system. Once you’ve downloaded and installed the file, restart your PC.

As you know, Windows Hello offers you quick access to computers since you can log in to your Windows devices three times faster compared to passwords with the help of the camera via Face recognition and fingerprint reader. This way, Windows Hello will recognize you right away. However, there are also times when you might encounter some problems when using Windows Hello. For one, if you are trying to add the PIN method to Windows Hello on your Windows 10 computer but you suddenly encountered an error code of 0x801c004d or if you are trying to use your existing pin and you encounter an error code of 0x80070490 along with an error message that says, “Not recognized”, then read on as this post will guide you on how you can fix both of these errors. Here is the complete content for both errors:

• “0x801c004d – Unable to enroll a device to use a PIN for login”
• “0x80070490 - Not recognized, Pin and fingerprint are no longer options for signing in”

If you got any of these two errors, there are several potential fixes you can check out to resolve them. You can try to check for any Windows Updates or create the PIN again or check the CNG Key Isolation Service. You could also try to reset the TPM or create a new User Account. For more information, follow the instructions provided below.

Option 1 – Try checking for any available Windows Updates

The first thing you can do is to check for any available Windows Updates. It is possible that your computer may be outdated and is the reason why you’re having troubles with Windows Hello. To check for Windows Updates, just go to Settings and from there, head over to the Update and Security section and click on Windows Updates located on the left pane, and then click on the Check for Updates option. Wait until the process of checking updates is completed and if it finds new updates, install it. After you install the new Windows Updates, check if you can now add the PIN on Windows Hello or not.

Option 2 – Try creating the PIN again

The next thing you can do is to create the PIN again by signing out and signing in again and then try creating the PIN once more. If this does not work, you can try restarting your computer and creating the PIN again. You could also try removing the PIN and then change it.

• Remove the PIN by going to Settings > Accounts > Sign-in options.
• From there, go to the PIN section and click on the Remove button.
• You will be asked to verify your account to proceed in removing the PIN, enter your credentials.
• Restart your computer and then set up a new PIN.
• Once you’re done, restart your computer and check if the error is gone now.

Option 3 – Try checking the CNG Key Isolation Service

The CNG Key Isolation Service is the one that stores and uses long-lived keys in a secure process complying with the common criteria requirements and it is possible that the error could be related to this service. This service is hosted in the LSA processes and provides key process isolation to private keys and associated cryptographic operations as required by the common criteria. Thus, you need to check this service to see if it’s the one that’s causing the error.

• Tap the Win + R keys to open the Run dialog box and type “services.msc” in the field and hit Enter to open the Windows Services Manager.
• Next, locate the “CNG Key Isolation Service” and once you find it, double click on it to open its Properties box.
• After opening its Properties, check its Startup type and select Manual. This is the default setting and if it is Disabled, then it’s no wonder why you’re getting errors with Windows Hello, thus, you need to enable it.
• Once done, restart your computer and check if you can now add the PIN to Windows Hello. If you still get the error, then you might want to try setting the CNG Key Isolation Service from Manual to Automatic and then click on the Start button and see if it fixes the error or not.

Option 4 – Try to reset the Trusted Platform Module or TPM

You might also want to try resetting the Trusted Platform Module or TPM to fix the error. You can do this by opening Windows PowerShell and then executing the “Clear-Tpm” command. After that, check if the error is now resolved.

Option 5 – Try to create a new User Account

You could also try to create a new User Account on your Windows 10 computer to fix the Windows Hello error. Once you have created a new local user or administrator account in Windows 10, check if you are now able to add the PIN from this newly created user account.

If you receive an error code of “0x80073afc” in Windows Defender after you boot your Windows 10 computer or when you try to manually run Windows Defender, then it could be that the Windows Defender files are corrupted. In such cases, this error could also occur if there is third-party security software that interferes with the smooth functioning of this Microsoft Security Client. If you are one of the users who are currently facing this issue, then here are some suggestions you can check out to resolve the Windows Defender error code 0x80073afc.

Option 1 – Try to check the status of all the Windows Defender-related services

• In the Cortana search box, type “services” and click on the Services icon to open the Services Manager. Alternatively, you can also tap the Win + R keys to launch the Run prompt and then type “msc” in the field and hit Enter to open the Services Manager
• After opening the Services Manager, look for the following services and make sure that their Startup type is set to their default values:
  • Windows Defender Advanced Threat Protection Service – Manual
  • Windows Defender Antivirus Network Inspection Service – Manual
  • Windows Defender Antivirus Service – Manual
  • Windows Defender Firewall Service – Automatic

• You can right-click on each one of the listed services and then select Start to start them.
• And if some of the services don’t have their default values, just double-click on the Services to change the Startup types and select the correct option from the drop-down menu of the Startup type under the Properties box.
• Next, set up the Startup type of these services to Automatic and then click on the Start button if the services are not running yet.
• Now click on the Apply and OK buttons to save the changes made and then see if it fixed the problem or not.

Option 2 – Try to re-register the concerned DLL files

You could also try to re-register some Dynamic Link Library or DLL files on your computer as this could also help in fixing the Windows Defender error.

• In the Start search, type “cmd” and from the search results that appear, right-click on Command Prompt and select the “Run as administrator” option from the context menu.
• After opening Command Prompt as admin, type the following commands one after the other:
  • regsvr32 dll
  • regsvr32 dll
  • regsvr32 dll
  • regsvr32 dll
• Once you’ve entered the commands given above, it will re-register the concerned DLL files in your system.
• Now restart your computer for the changes to take effect.

Option 3 – Try to use the Registry Editor

• Tap the Win + R keys to open the Run dialog box,
• Then type “Regedit” in the field and hit Enter to open the Registry Editor.
• Afterward, navigate to this registry path: ComputerHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options
• Next, look for the DWORDs named “MSASCui.exe”, “MpCmdRun.exe”, “MpUXSrv.exe” and “msconfig.exe”.
• If you can’t find these DWORDs, refer to the next given option below.
• Restart your computer.

Option 4 – Check the Environmental Values

• Type “View advanced system settings” in the Windows search box and select the appropriate result.
• This will open a new mini window. From there, go to the Advanced tab and click on the “Environment Variables…” button located at the bottom part of the window.
• Next, look for the “%ProgramData%” variable name and make sure that its value is set to C:/ProgramData.
• Then click OK to save the changes made.

Option 5 – Run the System File Checker Scan

System File Checker or SFC is a built-in command utility that helps in restoring corrupted files as well as missing files. It replaces bad and corrupted system files to good system files. To run the SFC command, follow the steps given below.

• Tap Win + R to launch Run.
• Type in cmd in the field and tap Enter.
• After opening Command Prompt, type in sfc /scannow

The command will start a system scan which will take a few whiles before it finishes. Once it’s done, you could get the following results:

1. Windows Resource Protection did not find any integrity violations.
2. Windows Resource Protection found corrupt files and successfully repaired them.
3. Windows Resource Protection found corrupt files but was unable to fix some of them.

• Restart your computer.

Option 6 – Perform a System Restore

Performing a System Restore on your computer can also help you fix the Windows Defender error. You can do this option either by booting into Safe Mode or in System Restore. If you are already in the Advanced Startup Options, just directly select System Restore and proceed with the next steps. And if you have just booted your PC into Safe Mode, refer to the steps below.

• Tap the Win + R keys to open the Run dialog box.
• After that, type in “sysdm.cpl” in the field and tap Enter.
• Next, go to the System Protection tab then click the System Restore button. This will open a new window where you have to select your preferred System Restore point.
• After that, follow the on-screen instructions to finish the process and then restart your computer and check if the problem is fixed or not.

If when hovering over the upgrade icon on the taskbar you get:

Your version of Windows 10 would reach the end of service soon, Click to download a newer version of Windows 10 to stay supported. or An unsupported version of Windows will no longer receive software updates from Windows Update. These updates include security updates that can help protect your PC from harmful viruses, spyware, and other malicious software which can steal your personal information. Windows Update also installs the latest software updates to improve the reliability of Windows—such as new drivers for your hardware.

and you are unable to perform updates then this guide is for you. There are several things you can do to fix this issue presented here, it is advisable to follow them in a way how they are presented for best performance and system safety.

1. Run setupdiag

   Download and run Setupdiag from the official MICROSOFT website. SetupDiag is a standalone diagnostic tool that can be used to obtain details about why a Windows 10 upgrade was unsuccessful. It works by examining Windows Setup log files to determine the root cause of a failure to update or upgrade the computer. Once the scan is completed, check the generated log files. The SetupDiagResults.log will be generated and saved in the same folder where you downloaded Setupdiag. Open SetupDiagResults.log using Notepad. You may need to take a look at these folders:
   • \Windows\Panther
   • \$Windows.~bt\sources\panther
   • \$Windows.~bt\Sources\Rollback
   • \Windows\Panther\NewOS
   If there are any issues or conditions that are blocking the upgrade, they will be listed here.

2. Edit TargetReleaseVersionInfo Registry key

   Press ⊞ WINDOWS + R to open the run dialog In run dialog type Regedit and press ENTER Locate: HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate Locate two DWORD files, if they do not exist, create them as: TargetReleaseVersion TargetReleaseVersionInfo Set the value of TargetReleaseVersion to 1 If you are stuck on Windows 10 1909 and want to upgrade to Windows 10 20H2 now, you need to set the value for TargetReleaseVersionInfo to 20H2 Reboot the computer

3. Use Windows 10 update assistant

   Visit Microsoft.com and hit the ‘Update now’ button visible on the page Download tool and run it Click on Update now to start the upgrade process

New malware with extensive spyware capabilities steals data from infected Android devices and is designed to automatically trigger whenever new info is read to be exfiltrated. The spyware can only be installed as a 'System Update' app available via third-party Android app stores as it was never available on Google's Play Store. This drastically limits the number of devices it can infect, given that most experienced users will most likely avoid installing it in the first place. The malware also lacks a method to infect other Android devices on its own, adding to its limited spreading capabilities. However, when it comes to stealing your data, this remote access trojan (RAT) can collect and exfiltrate an extensive array of information to its command-and-control server. Zimperium researchers who spotted it observed it while "stealing data, messages, images and taking control of Android phones."

What happens when malicious software is installed

"Once in control, hackers can record audio and phone calls, take photos, review browser history, access WhatsApp messages, and more," they added. Zimperium said its extensive range of data theft capabilities includes:

• Stealing instant messenger messages;
• Stealing instant messenger database files (if the root is available);
• Inspecting the default browser's bookmarks and searches;
• Inspecting the bookmark and search history from Google Chrome, Mozilla Firefox, and Samsung Internet Browser;
• Searching for files with specific extensions (including .pdf, .doc, .docx, and .xls, .xlsx);
• Inspecting the clipboard data;
• Inspecting the content of the notifications;
• Recording audio;
• Recording phone calls;
• Periodically take pictures (either through the front or back cameras);
• Listing of the installed applications;
• Stealing images and videos;
• Monitoring the GPS location;
• Stealing SMS messages;
• Stealing phone contacts;
• Stealing call logs;
• Exfiltrating device information (e.g., installed applications, device name, storage stats).

How does it work?

Once installed on an Android device, the malware will send several pieces of info to its Firebase command-and-control (C2) server, including storage stats, the internet connection type, and the presence of various apps such as WhatsApp. The spyware harvests data directly if it has root access or will use Accessibility Services after tricking the victims into enabling the feature on the compromised device. It will also scan the external storage for any stored or cached data, harvest it, and deliver it to the C2 servers when the user connects to a Wi-Fi network. Unlike other malware designed to steal data, this one will get triggered using Android's contentObserver and Broadcast receivers only when some conditions are met, like the addition of a new contact, new text messages, or new apps being installed. "Commands received through the Firebase messaging service initiate actions such as recording of audio from the microphone and exfiltration of data such as SMS messages," Zimperium said. "The Firebase communication is only used to issue the commands, and a dedicated C&C server is used to collect the stolen data by using a POST request."

Camouflage

The malware will also display fake "Searching for the update.." system update notifications when it receives new commands from its masters to camouflage its malicious activity. The spyware also conceals its presence on infected Android devices by hiding the icon from the drawer/menu. To further evade detection, it will only steal thumbnails of videos and images it finds, thus reducing the victims' bandwidth consumption to avoid drawing their attention to the background data exfiltration activity. Unlike other malware that harvests data in bulk, this one will also make sure that it exfiltrates only the most recent data, collecting location data created and photos taken within the last few minutes. If you would like to read more helpful articles and tips about various software and hardware visit errortools.com daily.