Office 2021 release date set for October 5th

Microsoft-Office-2021-1024x425Microsoft office has two major packages, an online one, and an offline version. The online version of the course is Office 365 that requires a monthly subscription and it is always regularly updated and maintained. Another version is more of a typical old school application, install it and use it, no constant internet connection is required and no monthly subscription is required, buy once and use it.

The last version of buying it once and use it was Office 2019 and after two years we are going to receive a new version soon. Microsoft has set its release date for October 5th of this year and as always it will feature the current latest version of office applications and one-time purchase.

The new office will support dark mode and other improvements tied to the new Windows 11 and some specific features tied to Office itself.

Do You Need Help with Your Device?

Our Team of Experts May Help
Troubleshoot.Tech Experts are There for You!
Replace damaged files
Restore performance
Free disk space
Remove Malware
Protects WEB browser
Remove Viruses
Stop PC freezing
GET HELP
Troubleshoot.Tech experts work with all versions of Microsoft Windows including Windows 11, with Android, Mac, and more.

Share this article:

You might also like

A Guide to Quick Fixing the Error Mscomctl.ocx

What is Mscomctl.ocx?

Mscomctl.ocx is a Microsoft library Windows Common Controls file. The Mscomctl.ocx error occurs when this file is either lost or gets corrupt. The error is displayed on the screen when the user tries to run a program that is dependent on this file. It appears as:

“Component 'MSCOMCTL.OCX' or one of its dependencies not correctly registered: a file is missing or invalid”

Solution

Download Available to Completely Repair the Error Mscomctl.ocx

Restoro box imageError Causes

Installing and then uninstalling a large number of applications on the Windows operating system often corrupts or unregisters the Mscomctl.ocx library. This message will continue to appear on the screen until you re-register the library file again on your system.

Further Information and Manual Repair

You don’t need to have the sound technical knowledge or call a professional to resolve Mscomctl.ocx error on your PC. The Mscomctl.ocx error is easy to repair and can be fixed in a couple of minutes. Here are 2 solutions to repair the Mscomctl ocx error code on your system:

Cause: Error occurs because the Mscomctl ocx file is unregistered

Solution:

  1. Go to the start menu and type ‘Mscomctl.oxc and press enter
  2. Copy the ‘Mscomctl.ocx’ file and paste it in "C:WindowsSystem32" folder
  3. Now click the start menu again and type ‘CMD’ in the search box. This will open your computer's command prompt.
  4. Once this opens, type either of the following commands and then press enter. If you have a 64-bit operating system, then type: Regsvr32 "C:WindowsSysWOW64MSCOMCTL.OCX” and if you have 32-bit operating system, then you should type ‘Regsvr32 "C:WindowsSystem32MSCOMCTL.OCX"
By doing this, you will be able to register the Mscomctl.ocx file on your PC and then you will no longer receive Mscomctl.ocx error code.

Cause: Error code occurs because the Mscomctl.ocx file is missing

Solution:

  1. First search for MScomctl ocx on your local drive to see if it is missing.
  2. If the file is missing, then download the MScomctl.exe file from a reliable website.
  3. Now extract the file to your C:WINDOWSsystem32 directory
  4. Then click start and run.
  5. Now type ‘REGSVR32 MSCOMCTL.OCX’ and press enter
Please note to implement any of the two solutions stated above, you will need administrator rights. If you have the administrator rights then only can you make the above registry changes. Therefore to make the following changes you will have to access the PC using the Administrator account. Simply follow the instructions given above to repair this error code problem right away!
Read More
Fix An internal error has occurred 0x80070716
If you see the following error message in the File History tab of the File Recovery utility of the Windows Backup module in your Windows 10 computer, read on as this post will guide you in fixing it with the help of two potential fixes.
“An internal error has occurred: The specified resource name cannot be found in the image file. (0x90070716).”
You can also encounter this error when you run the System Image Backup function. As mentioned, you can resolve this error using two potential fixes namely checking the status of the Windows Backup Service and checking the settings in the Windows Registry. For more details, refer to the instructions provided below but before you proceed, it would be better if you create a System Restore point first.

Option 1 – Try checking the status of the Windows Backup Service

  • First, you need to tap the Win + R keys on your keyboard to open the Run dialog box.
  • Next, type “services.msc” in the field and click OK or tap Enter to open the Windows Services Manager.
  • After that, you will see a list of services and from there, look for the Windows Backup Service and double click on it to open its Properties.
  • Then check if its Startup type is set to Disabled. If it is, then change it to “Manual”. Note that this service is essential as it provides backup and restores capabilities.
  • Now click on the Apply and OK buttons to save the changes made and then restart your computer. Check if the error is now gone.

Option 2 – Try checking the Registry setting of Windows Backup

  • Tap the Win + R keys to open the Run dialog box.
  • Then type “Regedit” in the field and tap Enter to open the Registry Editor.
  • After opening the Registry Editor, navigate to this registry key: HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionWindowsBackup
  • From there, look for DWORDs named “ValidConfig” and “ValidSystemImageBackup” located in the right-side panel.
  • Once you found them, delete them or set both of their values to “0” and make sure that the base is Hexadecimal and click OK.
  • Now exit the Registry Editor and restart your computer to apply the changes made.
Read More
Display driver nvlddmkm stopped responding
Users are reporting that randomly their screen will just go black for a second and come back. When this happens, it usually distorts any video currently on the screen; sometimes, they can resume working on the PC normally. However, when they view the event logs, they see the error message Display driver nvlddmkm stopped responding and has successfully recovered. In this article, we will address solutions to this issue and how to not have it again.
  1. Remove Aura iCUE plugin (applies to only ASUS motherboards)

    Some PC users discovered that iCue adds an Aura plugin for ASUS MOBOs. That, combined with EVGA Precision X1, was causing the error it seems – this was determined when the screen would turn off and on when opening EVGA x1 software. In this case, the issue was resolved by removing the Aura iCUE plugins.
  2. Change Power Management mode

    Right-click the battery icon on the notification area on the right of the Taskbar. Select Power Options. In the Power Options window, locate your current Power Plan. Select High performance, if that’s not your current power plan. Now, click on Change plan settings next to it. Now click on Change advanced power settings. Expand PCI Express section. Expand Link State Power Management. Now set power saving to Off for both On battery and Plugged in state. This would fix any issues caused by the low power of the video card. Click Apply > OK to save changes.
  3. Update graphics driver

    Go into device manager Expand display adapter section Right-click on adapter Click on update driver Reboot
  4. Rollback graphics driver

    Go into device manager Expand display adapter section Right-click on adapter Click on Roll back driver Reboot
  5. Uninstall and reinstall graphics card driver

    Go into device manager Expand display adapter section Right-click on adapter Click on Uninstall device Reboot
  6. Replace the graphics card

    If everything else failed, replace the graphic card
Read More
Windows is stuck in Airplane Mode
As of late, a number of users reported experiencing a problem where their Windows 10 computers get stuck on Airplane mode for some unknown reason. According to the affected users, they were unable to turn off the Airplane mode which means that their computers are also not able to connect to the internet. One of the possible reasons why this kind of issue occurs is that there could be a bug with the airplane mode or it could also be the doing of faulty network drivers or physical switch that’s turned on, and so on. If you are one of the few users who experience the same issue, then read on as this post will guide you on what to do if your Windows 10 computer gets stuck on Airplane mode. There are a couple of suggestions you can check out to resolve the problem. You can try to check the status of the Radio Management service, flush the DNS cache or you could turn off the airplane mode via system settings. You could also update the network drivers or turn off the physical switch for airplane mode or make some adjustments in the Windows Registry. For more details, refer to each one of the suggestions provided below.

Option 1 – Try to check the Radio Management Service status

  • First, tap the Win + R keys to open the Run dialog box and type “services.msc” in the field, and hit Enter to open the Windows Services Manager.
  • Next, look for the Radio Management service and select Properties.
  • From there, change its Startup type to Disabled and click on the Apply and OK buttons to save the changes made.
  • Once done, restart your computer and check if you can now turn off the airplane mode.

Option 2 – Flush the DNS cache

You could also try to flush the DNS cache to fix the “ERR_ICAN_NAME_COLLISION” error. All you have to do is open Command Prompt as an administrator and then execute each one of the following commands sequentially to flush the DNS cache:
  • ipconfig/release
  • ipconfig/renew
  • ipconfig/flushdns

Option 3 – Try turning off the airplane mode via System settings

If flushing the DNS cache did not help in fixing the problem, then you might want to turn off airplane mode via system settings.
  • In the Windows Search bar, type “airplane mode”.
  • From the search results that appear, click on Airplane mode.
  • After that, a window will appear where you have to turn off the toggle button for Airplane mode.

Option 4 – Try to update, rollback or reinstall the Network adapter drivers

The next thing you can do to resolve the problem is to update the Network Adapter drivers by following these steps:
  • Tap the Win + R keys to launch the Run window and then type in the “devmgmt.msc” command and hit Enter to open the Device Manager window.
  • Under the Device Manager, you will see a list of drivers. From there, look for the Network Adapters and expand them.
  • Look for the Broadcom Network Adapter and right-click on it, as well as other network adapters that have an exclamation icon, and update them all.
  • Restart your PC and see if it helped in fixing the problem.
Note: If updating the network drivers didn’t help in fixing the problem, you can also try to roll back the very same drivers from their previous versions and restart your Windows 10 PC. After that, the system itself will reinstall the drivers you just uninstalled. Alternatively, you can also download and install the drivers from the manufacturer’s website directly. To reinstall the network adapter drivers, refer to these steps:
  • Open the Devices Manager from the Win X Menu.
  • Then locate the device drivers and right-click on them to open the Properties.
  • After that, switch to the Driver tab and click on the Uninstall Device button.
  • Follow the screen option to completely uninstall it.
  • Finally, restart your computer. It will just reinstall the device drivers automatically.

Option 5 – Try to turn off the physical switch for Airplane mode

If your computer has a physical switch to turn on or off the airplane mode, then you might want to check that switch if you have one. Chances are, it could be the reason why you’re unable to turn off Airplane mode on your computer.

Option 6 – Try to make some adjustments in the Registry

  • Tap the Win + R keys to launch the Run utility.
  • Then type “Regedit” in the field and hit Enter to open the Registry Editor.
  • Next, navigate to this registry path: HKEY_LOCAL_MACHINESystemCurrentControlSetControlClass
  • From there, edit the registry value of “RadioEnable” to “1”.
  • Exit the Registry Editor once done, and restart your computer.
Read More
Windows 10 Update and Shutdown/Restart is not working
Update and Shutdown/Restart is not working. As you have probably noticed, every time a new update is released and is downloaded on your Windows 10 computer, the operating system replaces the Restart and Shut down button with “Update and Restart” as well as “Update and Shut down”. This is most likely done so that you won’t miss the update. However, some users noticed that there are times when these buttons still continue to display the same message even if they’ve already performed the required operations such as shutting down or restarting their PCs. Cases like this happen when an update wasn’t installed properly or has failed which is why your computer keeps on prompting you to Update and Shutdown every time. To fix this dilemma, follow the options laid out below.

Option 1 – Try restarting the File Explorer

Restarting the File Explorer can definitely help you fix lots of issues especially when there is some issue with the user interface including this one.
  • On the right side of the Taskbar, right-click on any open spot.
  • Then click on Task Manager.
  • Next, scroll down until you see Windows Explorer.
  • After that, right-click on it and select Restart.
  • If you are able to kill its process, you have to tap the Win + R keys to open the Run dialog box and type “explorer.exe” in the field, and hit Enter to launch the Windows Explorer.

Option 2 – Try running the Windows Update Troubleshooter

As you know, Windows 10 has various auto-repair built-in tools to help users fix small issues which used to get fixed manually. And in this case, you will need the Windows Update Troubleshooter to fix the issue.
  • Go to Settings and click on Update and Security.
  • From there, click Troubleshoot and click on Windows Update and then click the “Run the troubleshooter” option.
  • After that, it will try to detect and automatically fix common issues in the Windows Updates which can be resolved by Windows itself. Note that the process may take several minutes before it completes so you need to wait until it’s done. Once it’s done, in case you have some pending update that wasn’t realized by the system early on, it will apply the fix right away and restart the Windows Update service.

Option 3 – Try setting the Power button to Shut down

In case the first two options didn’t work out, you can try changing what the power button does. To do that, refer to these steps:
  • Go to Control Panel > Power Options.
  • From there, select the “Choose what the power buttons do” option from the left side.
  • Then set the Power button setting the “When I press the power button” option to “Shut down”. After that, it will shut your computer down without installing the updates but obviously, this is only a temporary fix.

Option 4 – Turn off your PC instantly without updating it

  • Tap the Win + R keys to open the Run dialog box.
  • Type in “shutdown -s -f -t 0” in the field and hit Enter if you really want to turn off your computer without any delay.
  • You could also tap the Ctrl + Alt + Del keys and select Shut down from the bottom right menu.
Just like the third option, this is also only a temporary fix.

Option 5 – Try running the Windows Module Installer

The Windows Module Installer is a built-in service in Windows 10 that allows you to fix the stuck Windows Updates in your computer. To use it, follow these steps:
  • In the Cortana search box, type in “cmd” and from the search results that appear, right-click on Command Prompt and select the “Run as administrator” option from the context menu.
  • Once you’ve opened Command Prompt as admin, type the SC config trustedinstaller start=auto command and tap Enter.
  • After the command is executed, you will see the “[SC] ChangeServiceConfig SUCCESS” message displayed on the Command Prompt console.
  • Now exit Command Prompt and then check if the buttons are now back to normal.

Option 6 – Put your PC in a Clean Boot State

  • Log onto your PC as an administrator.
  • Type in MSConfig in the Start Search to open the System Configuration utility.
  • From there, go to the General tab and click “Selective startup”.
  • Clear the “Load Startup items” checkbox and make sure that the “Load System Services” and “Use Original boot configuration” options are checked.
  • Next, click the Services tab and select the “Hide All Microsoft Services” check box.
  • Click Disable all.
  • Click on Apply/OK and restart your PC. (This will put your PC into a Clean Boot State. And configure Windows to use the usual startup, just simply undo the changes.)
After putting your PC in a Clean Boot State, try creating a system restore point and see if the problem still occurs. Clean Boot troubleshooting is designed to help you isolate the problem. For you to execute a clean boot troubleshooting, you must do a couple of actions (the steps are given above) and then restart your PC after every action. You might have to disable one third-party app after the other to really isolate the issue. And once you’ve narrowed down the problem, you can either disable the third-party app that’s causing the problem or remove it. Note that you must switch your PC back into the Normal Startup mode after you’re done troubleshooting the problem. Here’s how you can do it:
  • From the “Start” menu, go to System Configuration.
  • After that, switch to the General tab and click the option for “Normal Startup”.
  • Next, go to the Services tab and clear the checkbox for “Hide all Microsoft services”.
  • Then find and click “Enable all” and if prompted, you have to confirm.
  • Afterward, go to the Task Manager and enable all the Startup programs and confirm the action.
  • Restart your PC when prompted.
Read More
Fix False Notifications in Action Center
There is a central location in Windows 10 that allows users to view all the notifications from its Action Center. Aside from viewing notifications, users can also manage them and take necessary actions in just one single place. Notifications in Windows 10 look similar to a message icon but can be at variance in function. However, recently, a number of users reported that even though they receive notifications about new actions but when opening them, they see nothing. In other words, the notification is false, and to fix this, read on as this post will provide you a couple of workarounds. The Windows 10 Notifications and Action Center notification messages might show a mismatch. For instance, Windows 10 may say that you have some notifications but when you open Action Center, you find it empty and there are actually no notifications there. Take the case of the following screenshot, the Windows 10 Notification says that there are 6 new notifications available for viewing but the Action Center says otherwise. Before you troubleshoot the problem, you might want to run System Restore especially if you’ve made some changes in your computer prior to this issue which might have messed with the Windows 10 Notifications and Action Center. To perform System Restore, refer to these steps:
  • First, press the Win + R keys to open the Run dialog box.
  • After that, type in “sysdm.cpl” in the field and tap Enter.
  • Next, go to the System Protection tab then click the System Restore button. This will open a new window where you have to select your preferred System Restore point.
  • After that, follow the on-screen instructions to finish the process and then restart your computer and check if the problem is fixed or not.
If the problem wasn’t fixed and you’re still getting false notifications, you might want to troubleshoot the problem further using the options given below.

Option 1 – via Windows PowerShell

  • In the Start search, type “PowerShell” in the field and hit Enter to pull up the Windows PowerShell window.
  • Next, copy and paste this command and hit Enter to execute it: Get-AppxPackage | % { Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)AppxManifest.xml” -verbose }
  • After that, reboot your computer and check if the false notifications are now gone.

Option 2 – Try renaming the Usrclass.dat file

DAT errors like the ones that are associated with the Usrclass.dat file, most likely occur during computer startup, program startup, or while you try to use a specific function in your program. Even so, it can easily be fixed. How? Refer to the given steps below.
  • Tap the Win + R keys to open the Run dialog box.
  • Then type %localappdata%MicrosoftWindows and hit Enter to get to the location of the UsrClass.dat file.
  • After that, look for a file named UsrClass.dat and once you’ve found it, right-click on it and select the Rename option.
  • Now rename the file to UsrClass.old.dat and then restart your computer and see if the problem is now fixed or not.
Read More
Schedule restart update on Windows 11
windows 11 schedule updateWhen Windows 11 update is available but you do not wish to restart right away because you are in the middle of using a computer, you can schedule a restart for up to 7 days. It is very easy and we will show you how to do it.
  1. Press ⊞ WINDOWS + I to open settings
  2. Click on Windows Update
  3. At the top, under the Restart required to click on Schedule the Restart
  4. Click the switch under Schedule a Time to turn it ON
  5. Use the Pick a Time and Pick a Day menu to set time and day when you want to update
  6. Go back to one screen and visually confirm that the date is set
  7. Close the settings
The scheduled restart will be confirmed in a message on the Windows Update page.
Read More
Fix Origin code 10.0 Error in Windows 10
Gaming on the computer has become one of the most used past-time activities among people of all ages. And since we are still in pandemic it has only risen as activity. People can acquire a lot of games at various discounts on various platforms and enjoy them at the leisure of their home. Among many game platforms and stores, Electronic art's Origin is one of the bigger ones, and having some titles that could not be found anywhere else coupled with the ability to have access to almost the whole game catalog with one monthly subscription make it one of the most used clients. Sadly as with every piece of software Origin's client is not perfect by any means and it can behave strangely from time to time. Hello everyone and welcome to errortools.com, today we will fix Origin error code 10 which oddly enough can appear out of nowhere and can even appear on the very end of installation for the chosen game. If you have managed to come by this error you are in luck to be here because we have a couple of fixes for it. I know that you might be excited to play the game so let's go and do some fixing

Check Server status

Before diving into technicality and before we start deleting files and fixing things you should check the Server status. This seems maybe like something you should not do but if the server has experienced some kind of downtime or it is in maintenance Origin will throw this error in the client. Unexpected situations can cause various server issues all of a sudden and the first thing is to check are servers online and working. There are various ways to check server status from official origin website to Electronic arts twitter channel to Reddit and many more online server status websites. If it turns out that the server is to be blamed for this error then sit back and wait for EA to resolve the issue, there is not much you can do anyway.

Delete OriginThinSetupInternal.exe

  • After some research, it has come to light that originthinsetupinternal.exe can cause this specific error. The best solution is to delete the file and then run Origin as administrator so the file is remade new.
  • First, make sure that Origin is fully closed, check the taskbar and if it lurks there right-click on it and click on quit
  • Run file explorer and go into the folder where Origin is installed, by default it is C:\Program Files (x86)\Origin
  • Locate OriginThinSetupInternal.exe and delete it
  • Then locate origin.exe and right-click on it and then click on Run as administrator

Reinstall Origin client

If the previous solution has not solved the issue then Origin might have some corrupted files inside it. It is known that the Origin client can produce some bad files if the installation has been forcefully canceled. The best thing is to reinstall the completely whole client.
  • Press ⊞ WINDOWS + R to open the run dialog
  • Inside run dialog type in Control panel and press ENTER
  • In the control panel locate programs and features group and double click on it
  • Locate Origin, click to select it, and on top click on uninstall
  • After uninstall process is completed start file explorer and go to the folder where Origin was installed, by default it is C:\Program Files (x86). Locate the Origin folder and delete it.
  • Go to the official origin website and download the new client installation.
  • After the download is finished double click on it and follow onscreen instructions.

Disable antivirus

If every solution so far has not been able to remove error then obviously something else is interfering with the origin client and installation functioning. Altho not advisable, turn OFF your security suite including both firewall and antivirus and try installing the game again. There is the possibility that the origin client or some game file has been marked as false positive by security software thus preventing it from executing properly.
Read More
Backup and Restore pinned Taskbar Items
Pinned Windows 10 Taskbar Items. One of the most used interfaces in the Windows environment is the Taskbar. It is where users like to pin their most-used programs as well as shortcuts with extra privileges and automated tasks. In fact, it’s a lot better than the Start Menu. So if any Windows Update messes up with your computer, or if you’ve just switched to a different computer, setting up the Taskbar with the very same set of programs you used to have is definitely not an easy task. But worry not as this post will guide you on how you can backup and restore the items on your Taskbar either manually or automatically.

Manual Backup:

  • Tap the Win + R keys to open the Run prompt.
  • Then type “%AppData%MicrosoftInternet ExplorerQuick LaunchUser PinnedTaskBar” in the field and hit Enter to open the folder where you can see all the shortcuts or pinned items in the Taskbar.
  • After that, copy all the files in the folder and paste them somewhere else as a backup. For instance, E:\Pinned Items Backuppinnedshortcuts.
  • Next, tap the Win + R keys to open the Run prompt once more, and then type “Regedit” in the field and hit Enter to open the Registry Editor. When the User Account Control dialog box appears, click Yes.
  • After opening the Registry Editor, navigate to this key – HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerTaskband
  • Then right-click on the Taskbar folder and select Export.
  • Now save the file with the .reg extension to another location like the E:\Pinned Items Backup folder and then name it.
  • Close the Registry Editor.

Manual Restore:

Make sure to copy all the files to one of the drives if you are using another computer and then refer to the following steps.
  • Tap the Win + R keys to open the Run prompt.
  • Then type “%AppData%MicrosoftInternet ExplorerQuick LaunchUser PinnedTaskBar” in the field and hit Enter to open the same folder where you just copied all the shortcuts. Make sure to keep it open.
  • Then open the backup folder where you saved all the pinned items and copy all the files there.
  • Next, go to the Taskbar folder (%AppData%MicrosoftInternet ExplorerQuick LaunchUser PinnedTaskBar) and then paste your files in there. If you encounter a problem while doing so, just replace it with your own set of files.
  • After that, go to E:\Pinned Items Backuppinnedshortcuts and then double click on tb-pinned-items.reg. If a User Account Control prompt appears, click Yes. This will add the registry file into the main registry hub. You will also get a dialog box that will confirm that data has been added to the registry successfully. Click OK.
  • You should now see the items on the Taskbar. You have to restart Windows Explorer. To do so, end its process in the Task Manager.

Automatic Backup:

Backing up and restoring the pinned Taskbar items in your Windows 10 computer can be done automatically as well. But before you get started on the process, you need to understand what’s going on behind the hood first. First, you need to create two bat files and name them “Backup Pinned Taskbar Items” and “Restore Pinned Taskbar Items”. After you have that covered, refer to the following steps:
  • Open the Notepad app and paste the following details and save it as “Backup Pinned Taskbar Items.bat.
REG EXPORT HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerTaskband “E:\Pinned Items Backuptb-pinned-items.reg” xcopy “%AppData%MicrosoftInternet ExplorerQuick LaunchUser PinnedTaskBar” “E:\Pinned Items Backuppinnedshortcuts” /E /C /H /R /K /Y
  • After that, run the newly created bat file with admin privileges.

Automatic Restore:

  • Open the Notepad app and paste the following details and save it as “Restore Pinned Taskbar Items.bat”.
REGEDIT /S “E:Pinned Items Backuptb-pinned-items.reg” xcopy “E:Pinned Items Backuppinnedshortcuts” “%AppData%MicrosoftInternet ExplorerQuick LaunchUser PinnedTaskBar” /E /C /H /R /K /Y
  • After that, run the bat file with admin privileges.
Note: Just so you know, there is a drawback to this process as we’ve noticed that any pinned apps that were downloaded from the Windows Store don’t appear in these places and any items downloaded and installed separately from the internet and then pinned.
Read More
Android malware spies while posing as a Update
New malware with extensive spyware capabilities steals data from infected Android devices and is designed to automatically trigger whenever new info is read to be exfiltrated. The spyware can only be installed as a 'System Update' app available via third-party Android app stores as it was never available on Google's Play Store. This drastically limits the number of devices it can infect, given that most experienced users will most likely avoid installing it in the first place. The malware also lacks a method to infect other Android devices on its own, adding to its limited spreading capabilities. However, when it comes to stealing your data, this remote access trojan (RAT) can collect and exfiltrate an extensive array of information to its command-and-control server. Zimperium researchers who spotted it observed it while "stealing data, messages, images and taking control of Android phones."

What happens when malicious software is installed

"Once in control, hackers can record audio and phone calls, take photos, review browser history, access WhatsApp messages, and more," they added. Zimperium said its extensive range of data theft capabilities includes:
  • Stealing instant messenger messages;
  • Stealing instant messenger database files (if the root is available);
  • Inspecting the default browser's bookmarks and searches;
  • Inspecting the bookmark and search history from Google Chrome, Mozilla Firefox, and Samsung Internet Browser;
  • Searching for files with specific extensions (including .pdf, .doc, .docx, and .xls, .xlsx);
  • Inspecting the clipboard data;
  • Inspecting the content of the notifications;
  • Recording audio;
  • Recording phone calls;
  • Periodically take pictures (either through the front or back cameras);
  • Listing of the installed applications;
  • Stealing images and videos;
  • Monitoring the GPS location;
  • Stealing SMS messages;
  • Stealing phone contacts;
  • Stealing call logs;
  • Exfiltrating device information (e.g., installed applications, device name, storage stats).

How does it work?

Once installed on an Android device, the malware will send several pieces of info to its Firebase command-and-control (C2) server, including storage stats, the internet connection type, and the presence of various apps such as WhatsApp. The spyware harvests data directly if it has root access or will use Accessibility Services after tricking the victims into enabling the feature on the compromised device. It will also scan the external storage for any stored or cached data, harvest it, and deliver it to the C2 servers when the user connects to a Wi-Fi network. Unlike other malware designed to steal data, this one will get triggered using Android's contentObserver and Broadcast receivers only when some conditions are met, like the addition of a new contact, new text messages, or new apps being installed. "Commands received through the Firebase messaging service initiate actions such as recording of audio from the microphone and exfiltration of data such as SMS messages," Zimperium said. "The Firebase communication is only used to issue the commands, and a dedicated C&C server is used to collect the stolen data by using a POST request."

Camouflage

The malware will also display fake "Searching for the update.." system update notifications when it receives new commands from its masters to camouflage its malicious activity. The spyware also conceals its presence on infected Android devices by hiding the icon from the drawer/menu. To further evade detection, it will only steal thumbnails of videos and images it finds, thus reducing the victims' bandwidth consumption to avoid drawing their attention to the background data exfiltration activity. Unlike other malware that harvests data in bulk, this one will also make sure that it exfiltrates only the most recent data, collecting location data created and photos taken within the last few minutes. If you would like to read more helpful articles and tips about various software and hardware visit errortools.com daily.
Read More
1 2 3 171
Logo
Copyright © 2023, ErrorTools. All Rights Reserved
Trademark: Microsoft Windows logos are registered trademarks of Microsoft. Disclaimer: ErrorTools.com is not affiliated with Microsoft, nor claims direct affiliation.
The information on this page is provided for information purposes only.
DMCA.com Protection Status