Logo

Malware in Popular CCleaner

On September 18th, 2017, Cisco’s Talos announced that CCleaner, a popular utility with billions of worldwide users, had been compromised by hackers, and was used to unwittingly distribute hidden malware in its installer. Later in the day, Piriform, the publisher of CCleaner, confirmed the problem.

Undetected by all but 1 major antivirus including CCleaner’s own parent company, this occurred for over a month and impacted over 2.7 million users. Users of CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 for 32-bit Windows are affected. These downloads were live on CCleaner’s official site from August 15th to September 12th, 2017. Anyone who downloaded the program during this time could be affected.

The company claims that while the hackers set up the backdoor and many users were impacted, that the perpetrators have been arrested and that the malware never successfully performed its full task and compromised user’s PCs or sent out their data; in the wake of recent security breaches such as Equifax, users are understandably worried. Given the severity of the threat of hacking and data theft, users should take action immediately if they have CCleaner.

Technical Details of CCleaner Malware Injection

First reported by Talos, the malware, which was hidden in the CCleaner installer without the publisher noticing (despite them being owned by Avast, a massive Anti-virus company), modified a core program DLL file to evade detection, and creates several registry keys. Not only were these files not flagged by any major Anti-Virus, but they were also even digitally signed by Piriform via their Symantec certificate, meaning your PC and security program would likely whitelist and trust the malicious installer. The malware gathers personal information on a user’s PC, including IP address and running programs, and sends it to a remote server. In our testing, the program sent data to IP 216.126.225.148.

Restore Your PC (If Possible)

As of the publication of this article, there have been no assurances given that updating or even uninstalling CCleaner will remove the malware is installed. The only action thus far has been shutting down the remote server where user data was being sent has been shut down by authorities. For this reason, it is best to remove the underlying malware separately, as its presence represents a serious security threat. Unfortunately, as this could have been installed as far back as August 15th, 2017, your System Restore points may not go back that far, or even if they do, restoring to such an outdated point may cause unintended problems with other programs you use and potentially lost files and data. Manually backing up files and doing a full format or clean Windows installation would likely be successful in fully removing the malware, but is extremely time-consuming and can be difficult for many PC users. Unfortunately, this makes a PC Restore or format an unattainable option for many.

Update CCleaner to the Latest Version

While CCleaner has told users to update to the latest version of the program. Prior to doing so, we recommend fully uninstall CCleaner, ensuring you check its program files folders and registry keys, manually deleting any remnants, and then re-downloading the latest version from the official site and reinstalling clean.

Do You Need Help with Your Device?

Our Team of Experts May Help
Troubleshoot.Tech Experts are There for You!
Replace damaged files
Restore performance
Free disk space
Remove Malware
Protects WEB browser
Remove Viruses
Stop PC freezing
GET HELP
Troubleshoot.Tech experts work with all versions of Microsoft Windows including Windows 11, with Android, Mac, and more.

Share this article:

You might also like

Fix Winload.efi file missing error
The Winload.efi file is an Extensible Firmware Interface or EFI file. EFI files are executable files for the firmware of the computers that are mainly based on UEFI and execute the tasks of loading the files to the bootloader of the computer. They are used for a specific set of tasks such as turning on the computer, installing Windows, restarting the computer or resetting it, and so on. This is why the Winload.efi file is a significant file so if it gets corrupted, lost, or damaged, it would be impossible for the Windows operating system to proceed. Here are some errors you can encounter that are related to the Winload.efi file:
  • efi is missing
  • efi cannot be found
  • efi is missing or contains errors
  • This program can’t start because winload.efi is missing from your computer
  • This application requires the file winload.efi, which was not found on this system.
  • There was a problem starting [path]winload.efi. The specified module could not be found.
In addition, the 0xc0000225 , 0xc00000e and 0xc0000001error codes are also associated with the Winload.efi file. Before you start troubleshooting the problem, you can try to perform System Restore first. This will help undo any changes you’ve made in your computer that might have triggered the Blue Screen error. To perform System Restore, here’s what you have to do:
  • First, press the Win + R keys to open the Run dialog box.
  • After that, type in “sysdm.cpl” in the field and tap Enter.
  • Next, go to the System Protection tab then click the System Restore button. This will open a new window where you have to select your preferred System Restore point.
  • After that, follow the on-screen instructions to finish the process and then restart your computer and check if the problem is fixed or not.
If System Restore didn’t help in fixing the Blue Screen error, now’s the time for you to resort to the troubleshooting tips provided below but before you get started, make sure that your create a System Restore point first.

Option 1 – Try rebuilding the Boot Configuration Data (BCD) and repairing MBR

  • Once you get to the Welcome Screen part, click on Next.
  • Afterwards, click on the Repair your computer option located on the bottom-left part of the window.
  • Then click on Troubleshoot.
  • Next, select the Advanced Options and then Command Prompt.
  • Once Command Prompt has been pulled up, the following commands to rebuild BCD files and repair MBR. Don’t forget to hit Enter right after you type each command.
    • bootrec /repairbcd
    • bootrec /osscan
    • bootrec /repairmbr
  • Once the command line is successful in finding out a Windows installation, hit Y to let it boot from the list which will successfully rebuild BCD.
  • Now type “exit” to close Command Prompt and then restart your computer to successfully apply the changes made.

Option 2 – Disable the Secure Boot in the BIOS

Disabling the Secure Boot in the BIOS settings is definitely recommended to resolve errors related to the Winload.efi file. To disable Secure Boot, here’s what you have to do:
  • First, boot your computer into Windows 10.
  • Next, go to Settings > Windows Update. From there, check if there is anything that you have to download and install if you see any available updates. Usually, OEMs send and update the list of trusted hardware, drivers, and operating systems for your computer.
  • After that, go to the BIOS of your computer.
  • Then go to Settings > Update & Security > Advanced Startup options. If you click on Restart Now, it will restart your computer and give you all the advanced options.
  • Next, select Troubleshoot > Advanced Options. As you can see, this screen offers you further options including System restore, Startup repair, Go back to the previous version, Command Prompt, System Image Recovery and UEFI Firmware Settings.
  • Select the UEFI Firmware Settings which will take you to the BIOS.
  • From there, go to Security > Boot > Authentication tab where you should see Secure Boot. Note that every OEM has its own way of implementing the options so it varies.
  • Next, set Secure Boot to Disabled and set Legacy Support to On or Enabled.
  • Save the changes made and exit. Afterward, your computer will reboot.

Option 3 – Run System File Checker scan

You might also try running the System File Checker or SFC scan to fix the error. System File Checker is a command utility built into your computer that helps restore corrupted files and missing files. Refer to the following steps to run it:
  • Hit the Win + R keys to launch Run.
  • Type in cmd in the field and tap Enter.
  • After opening Command Prompt, type in sfc /scannow
The command will start a system scan which will take a few whiles before it finishes. Once it’s done, you could get the following results:
  1. Windows Resource Protection did not find any integrity violations.
  2. Windows Resource Protection found corrupt files and successfully repaired them.
  3. Windows Resource Protection found corrupt files but was unable to fix some of them
  • Reboot your computer.

Option 4 – Disable the Early Launch Anti-Malware Protection

  • You need to restart your computer in the Start Menu first while holding down the Shift key on your keyboard.
  • After that, it will restart your computer to Startup Settings.
  • Now ensure that the 8th option is labeled as “Disable early launch anti-malware protection.
  • Then tap the F8 key since the aforementioned option above is listed at number 8. This should launch and load Windows on your PC with the Early Anti-malware protection disabled for that session only when you try to carry out the same task and then check if the error related to the Winload.efi file is now fixed.
Read More
Adobe Express review

Social media is here to stay it seems, from Facebook, Instagram, Twitter, etc each site has its users and its rules. Companies, bloggers, public figures, and people, in general, are using them on a daily basis and some are posting cool ads, nice graphics, videos, and many more in order to gain followers or just to share something that they think is worth.

adobe express

Making your post look good is somewhat essential if you plan on reaching a larger audience and Adobe's Express aims to fill that gap. It is the latest Adobe product that is purposely made for graphic and video creation for social media.

Adobe is well known in the world of professional design in all spheres like print, web, and motion, with this application, they want to take over social media design with Express. The direct competitor to Spark and canva, Express is filled with high-quality adobe templates and some great stuff found in photoshop like automatic background removal which gives it an edge over other applications.

The good thing about Express is that there is a completely free version and premium, like its competitors but with some benefits that clearly show that Adobe is determined to place its application on top of the game. The free plan includes:

  • Thousands of unique templates, design assets, and Adobe Fonts.
  • A limited collection of royalty-free Adobe Stock-free collection photos.
  • Basic editing and photo effects including remove background and animate.
  • Create on both web and mobile.
  • 2GB of storage.

For 10 USD per month of 100 USD prepaid annual fee, you get a premium plan that includes:

  • All premium templates and design assets.
  • The entire collection of over 160 million royalty-free Adobe Stock collection* photos.
  • Over 20,000 licensed Adobe Fonts, curved type, grids, and font pairs.
  • Premium features like refine cutout, resize, and graphic groups.
  • Plan, schedule, and publish social media content across multiple channels.
  • Add your branding, logo, colors, and fonts in one tap.
  • Convert & export to and from PDFs and other file types.
  • Create, manage, and share your templates and assets with Creative Cloud Libraries.
  • Create on both web and mobile.
  • 100GB of storage.

The application itself is incredibly easy to learn and to work with and literally, anyone can pick it up and start creating immediately. No matter are you just starting with social media or using Canva or Spark, give Express a go, make a free account and try it, I guarantee that you will find some features amazing, and its ease of use relaxing.

Read More
Fix 0xd00000e5, 0x8007139f, 0x80090030 PIN
The quickest and easiest way to log into your computer is when you use the PIN feature in Windows 10. Even though it is a bit slower compared to biometric logins such as Fingerprint and Iris scanning that comes under Windows Hello, the PIN feature is definitely less complicated. However, just like any other module of the software, it is also prone to some errors. In this post, you will be guided in fixing several PIN errors such as 0xd00000e5, 0x8007139f, and 0x8009003. These errors could be caused at different points in time like when you change or create a PIN or when you log into your computer. To fix the 0xd00000e5, 0x8007139f and 0x8009003 PIN errors, there are various solutions you can try. You may empty the contents of the NGC folder or remove and change the PIN or the password. You could also use the Group Policy Editor or reset the ACLs in the NGC folder as well as run built-in tools like System File Checker and the DISM tool.

Option 1 – Take ownership of the NGC folder and delete its contents

  • Boot your computer first into Safe Mode.
  • Next, you need to take ownership of the Ngc folder first and you can do that using Command Prompt.
  • Type “command prompt” in the Windows Search bar and then right-click on the relevant search result and select “Run as administrator”.
  • After that, if a User Account Control or UAC prompt appears, just click on Yes to proceed.
  • Next, type and enter this command: TAKEOWN /F C:WindowsServiceProfilesLocalServiceAppDataLocalMicrosoftNgc
  • Note that the <path> is the location of the folder or file in File Explorer.
  • Now type and enter this second command: ICACLS C:WindowsServiceProfilesLocalServiceAppDataLocalMicrosoftNgc /grant administrators:F
  • Finally, once the command has been executed, restart your computer.
  • Once your computer has restarted, delete all the contents in the Ngc folder and check if the error is now fixed.

Option 2 – Try to remove and change the PIN or password

The 0xd00000e5, 0x8007139f, and 0x8009003 PIN errors could be caused by some conflicting issues with the PIN or password you have set for the User Account of your computer. Thus, you have to remove or change the PIN or password to fix these PIN errors.
  • Remove the PIN by going to Settings > Accounts > Sign-in options.
  • From there, go to the PIN section and click on the Remove button.
  • You will be asked to verify your account to proceed in removing the PIN, enter your credentials.
  • Restart your computer and then set up a new PIN.
  • Once you’re done, restart your computer and check if the error is gone now.

Option 3 – Try to use the Group Policy Editor

  • Tap the Win + R keys to open the Run utility and type “gpedit.msc” in the field and tap Enter to open the Group Policy Editor.
  • Next, navigate to this policy setting: Computer Configuration > Administrative Templates > System > Logon
  • After that, double click on the “Turn on convenience PIN Sign-in” option located on the right-side panel.
  • Then set its radio button to Enabled. You will see the following description when you do so:
“This policy setting allows you to control whether a domain user can sign in using a convenience PIN. If you enable this policy setting, a domain user can set up and sign in with a convenience PIN. If you disable or don’t configure this policy setting, a domain user can’t set up and use a convenience PIN. Note: The user’s domain password will be cached in the system vault when using this feature. To configure Windows Hello for Business, use the Administrative Template policies under Windows Hello for Business.”
  • After setting the radio button to Enabled, it will turn on the Logins in your computer using the PIN.
  • Close the Group Policy Editor and restart your computer for the changes to take effect.

Option 4 – Try to reset the ACLs in the Ngc folder

  • Type “command prompt” in the Windows Search bar and then right-click on the relevant search result and select “Run as administrator”.
  • After opening Command Prompt with admin privileges, execute this command: C:/Windows/Service/Profiles/Local/Service/AppData/Local/MicrosoftNgc /T /Q /C /RESET
  • The command you entered will start checking for errors and fix them automatically.

Option 5 – Run the System File Checker scan and the DISM tool

System File Checker:

  • Tap Win + R to launch Run.
  • Type in cmd in the field and tap Enter.
  • After opening Command Prompt, type in sfc /scannow
The command will start a system scan which will take a few whiles before it finishes. Once it’s done, you could get the following results:
  1. Windows Resource Protection did not find any integrity violations.
  2. Windows Resource Protection found corrupt files and successfully repaired them.
  3. Windows Resource Protection found corrupt files but was unable to fix some of them.
  • Now restart your computer.

DISM tool:

  • Open Command Prompt.
  • Then type in the following commands and make sure to hit Enter right after you type each one of them:
    • Dism /Online /Cleanup-Image /CheckHealth
    • Dism /Online /Cleanup-Image /ScanHealth
    • Dism /Online /Cleanup-image /Restorehealth
  • After that, wait until the process is finished and do not close the window as the process will probably take a couple of minutes.
  • Once it’s done, restart your computer.
Read More
Parallels Desktop 17 brings Windows 11 to MAC
Parallels Desktop 17Parallels is an application developer for MAC OS mostly known for its PC virtualization software Parallels Desktop, a PC virtualization software running on Macs enabling running Windows and Linux with respective software on your MAC. With its latest Desktop 17 version, the software can run natively on both Intel-based and M1-based MACs. Thanks to this feature MAC users will be able to benefit from various speed improvements while running both Windows 10 or Windows 11 preview. On both Intel and M1 setups, Parallels resumes Windows and Linux up to 38% faster, provides an up to 25% bump in 2D graphics and a six-time increase in OpenGL graphics processing. M1-centric stats include 33% faster Windows start-up times, up to 28% faster DirectX 11 performance, and up to 20% better disk performance on Windows 10 Insider Preview. Parallels Desktop 17 delivers a set of fresh features including a new video driver that enhances video and game playback and boosts Windows UI responsiveness. An improved Coherence mode lets users run Windows apps within the Mac environment, cutting down on distracting changes in appearance during Windows sign-in, shut down, and software updates. Drag-and-drop operations are also improved, with support for text and graphics between Mac and Windows applications. This function works well with MAC OS Monterey's Quick Note feature, which can accept content from any Windows app. USB support, disk management, copy and paste unformatted text, and automatic virtual machine optimization also receive upgrades.
Read More
Ventoy software review

There is a lot of software on the market today, but from time to time we discover something extraordinary and unique worth sharing and today we have a threat for you. Ventoy is a tool that will help you with system reinstallations and system maintenance once and for all.

If you are a computer user that has multiple operating systems or you are installing and maintaining different hardware via different OS there is a high chance that you have multiple USB sticks with different operating systems on them.

Now the problem with that is that there are probably too many unlabeled sticks around or you do not have enough so you keep making system USBs depending on which one you might need.

ventoy

Ventoy solves all of these problems by letting you have as many operating systems images as your USB has capacity. The only thing you need to do is get the software here: https://www.ventoy.net/en/index.html and make a USB with it, then you can freely just copy your ISO images onto the USB and once it is inserted into the computer you will be given a menu to choose which one you would like to start with, simple as that.

Features

  • 100% open source (license)
  • Very simple to use (Get started)
  • Fast (limited only by the speed of copying the iso file)
  • Can be installed in USB/Local Disk/SSD/NVMe/SD Card
  • Directly boot from ISO/WIM/IMG/VHD(x)/EFI files, no extraction needed
  • Support to browse and boot ISO/WIM/IMG/VHD(x)/EFI files in local disk Notes
  • No need to be continuous in disk for ISO/WIM/IMG/VHD(x)/EFI files
  • Both MBR and GPT partition styles are supported
  • x86 Legacy BIOS, IA32 UEFI, x86_64 UEFI, ARM64 UEFI, MIPS64EL UEFI supported
  • IA32/x86_64 UEFI Secure Boot supported Notes
  • Linux Persistence supported Notes
  • Windows auto installation supported Notes
  • Linux auto installation supported Notes
  • Variables Expansion supported for Windows/Linux auto-installation script Notes
  • FAT32/exFAT/NTFS/UDF/XFS/Ext2(3)(4) supported for main partition
  • ISO files larger than 4GB supported
  • Menu alias, Menu tip message supported
  • Password protect supported
  • Native boot menu style for Legacy & UEFI
  • Most types of OS supported, 1000+ iso files tested
  • Linux vDisk(vhd/vdi/raw...) boot solution Notes
  • Not only boot but also complete the installation process
  • Menu dynamically switchable between ListView and TreeView mode Notes
  • "Ventoy Compatible" concept
  • Plugin Framework and GUI plugin configurator
  • Injection of files into runtime environment
  • Boot configuration file dynamically replacement
  • Highly customizable theme and menu style
  • USB drive write-protected support
  • USB normal use unaffected
  • Data nondestructive during a version upgrade
  • No need to update Ventoy when a new distro is released
Read More
T-Mobile Hack, 40 Million and more Impacted
T-MobileHacker group recently came up with claims that they have stolen data from 100 million T-Mobile customers. T-Mobile has responded with confirmation it has been compromised and that over 40 million records were stolen, among them are not just present customers, but anyone who has applied for T-Mobile service as well as past accounts.

What has been stolen?

Report from T-Mobile states that stolen records included first and last name, date of birth, social security number, driver’s license & ID information. The company said that it has “no indication that the data contained in the stolen files included any customer financial information, credit card information, debit or other payment information.” Not really a reassuring statement meaning that they really do not know, but even if the statement is true, already stolen information is as much if even not more damaging and devastating as payment information.

What T-Mobile is planning to do now?

It is stated that the hole used for the hack has been addressed and closed so no more data can be stolen. Considering people that had their personal information compromised, T-Mobile said it is planning to reach out to them and offer them two years of free identity protection through McAfee’s ID Theft Protection Service. Additionally, T-Mobile recommends postpaid customers change their PIN by going online into their T-Mobile account or calling T-Mobile customer service by dialing 611 on their phone. The company also recommends a feature called Account Takeover Protection that prevents unauthorized individuals from stealing a phone number and porting it out of T-Mobile. Finally, the company will publish a website “for one-stop information and solutions to help customers take steps to further protect themselves.”
Read More
How to Fix the Error Code 3

Error Code 3 - What is it?

Error code 3 is a type of PC windows error that can occur on any Windows version including Windows XP, Vista, Windows 7, or 8. This error code means that the system cannot find the path specified. The error 3 messages are displayed in the following format: “Error_ Path_Not_Found” or it may sometimes be displayed with the value 3 in this format:  (0x80070003: Error_Path_Not_Found)

Solution

Restoro box imageError Causes

The error code 3 indicates poor PC maintenance. It is a critical sign of an unstable system. The causes of this error code are:
  • Missing or broken system files
  • Registry issues
This error code poses serious system threats and should be resolved immediately before the damage is done. If you don’t address this error timely, your PC may be exposed to risks like system failure and crash. And this may lead to valuable data loss.

Further Information and Manual Repair

To resolve this error on your system, you don’t have to hire a technician or be technically sound yourself. What you simply need to do is clean the registry. Here are 2 ways to clean the registry:

1. Manually by Launching Registry Editor

First, launch the Windows registry editor by clicking the start button and selecting run. In the text box type, 'Regedit' and press enter and click OK. Before you make changes to the registry, make sure you create a backup of your existing registry. This is advisable because if you accidentally lose important data during the cleaning process you can also recover the lost data. Once you create a backup, now get started with the cleaning process. Expand HKEY_CURRENT_USER" key, then click on the software key and look for applications that you think could have corrupted the registry. Now delete them. After that, remove the unwanted start-up items, by accessing this link:  My Computer HKEY_LOCAL_MACHINE SOFTWARE Microsoft Windows Current Version. Now click on the run tab and delete invalid entries/ values. This process may be time-consuming and for some, it may be slightly technical to identify unwanted start-up items.

2. Download Restoro Registry Cleaner

Another way to clean and repair the registry is to download Restoro. This is an innovative and a highly-functional registry cleaner. It is embedded with an intuitive algorithm that detects all the registry issues instantly and removes them right away in just a few simple clicks. It removes all the unnecessary and obsolete files, repairs the registry, and fixes the damaged dll and system files. It has a user-friendly interface and simple navigation which makes it easy for all levels of users to work around it. This software is compatible with all Windows versions. Besides functioning as a registry cleaner, Restoro also functions as an antivirus and a system optimizer. It scans and removes all kinds of malicious software and simultaneously boosts the speed of your PC. Click here to download Restoro and resolve error 3 “Entry_Path_Not_Found” on your PC now!
Read More
What to do if Windows 10 Disk Management is not working
The Disk Management tool in Windows 10 is a built-in tool that contains a user interface used to manage disk partitions to administrators of the computer. There are lots of instances when you have to change the size of the hard disk partition or reduce the size and so on. This is where the Disk Management tool comes in. It’s useful as the command line interface can be quite confusing and risky for some users. However, there are cases when this tool stops working. A proof of this the reports submitted recently by some Windows 10 users. Based on the reports, the Disk Management does not load or respond. If you are having the same problem, read on as this post will give you some suggestions on what you can do to resolve the problem.

Option 1 – Try restarting the Disk Management Service

  • Tap the Win + R key combination to open the Run dialog box.
  • Then type “services.msc” in the field and hit Enter or click OK to open the Windows Services Manager.
  • Next, scroll down in the service list until you see the Virtual Disk Service. Double click on it to open and then select Automatic.
  • Click on Apply and OK to save the changes made.
  • If it hasn’t started yet, you can just click on the Start button to start the Service. The Virtual Disk service provides management services for disk, volumes, file systems as well as storage arrays.
  • Now save all the changes you’ve made and restart your computer. Then check if you can now use the Disk Management tool without any problem.

Option 2 – Try using the System File Checker scan

System File Checker or SFC is a built-in command utility that helps in restoring corrupted files as well as missing files. It replaces bad and corrupted system files with good system files that might be causing some issues with the Disk Management tool. To run the SFC command, follow the steps given below.
  • Boot your PC into Safe Mode.
  • Tap Win + R to launch Run.
  • Type in cmd in the field and tap Enter.
  • After opening Command Prompt, type in sfc /scannow
The command will start a system scan which will take a few whiles before it finishes. Once it’s done, you could get the following results:
  1. Windows Resource Protection did not find any integrity violations.
  2. Windows Resource Protection found corrupt files and successfully repaired them.
  3. Windows Resource Protection found corrupt files but was unable to fix some of them.

Option 3 – Try using the DISM tool

Aside from the System File Checker, the DISM tool can also help you resolve the issue with the Disk Management tool. It helps in restoring the health of your computer.
  • Open the Command Prompt as admin.
  • Then type in this command: Dism /Online /Cleanup-Image /RestoreHealth
  • Do not close the window if the process takes a while as it will probably take a few minutes to finish.

Option 4 – Try using Diskpart and Fsutil

If both the System File Checker and DISM tool didn’t work, you can use command-line tools like diskpart and fsutil. These command-line tools are powerful but you need to be careful especially if you’re not that familiar with using them. However, it’s recommended that you have somebody who knows if you’re really inexperienced with this kind of stuff.
Read More
MMC.exe has been blocked for your protection
When trying to run Computer Management, or when running mmc.exe or compmgmt.msc from a command prompt you get the error that the application has been blocked for your protection then keep reading in order to solve the issue. This is a permission issue where if a regular user tries to run such system tools will result in saying that it has been blocked. Along with this, you may have a Group Policy issue. This can be fixed, but you will need admin permission to achieve it. It’s because when they are run from the command prompt with elevated privileges, it works.
  1. Change Group Policy Settings

    If your account is an admin account, and you are still facing the issue, then change the group policy settings: Open Group Policy Settings by typing gpedit.msc in the run prompt followed by pressing ENTER Navigate to User Configuration > Administrative Templates > Windows Components > Microsoft Management Console > Restricted/Permitted snap-ins Locate Computer Management policy, and double click to open it Enable it, exit Group Policy. When Enabled: The snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. When Disabled: The snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that the policy is prohibiting the use of this snap-in.
  2. Temporarily disable UAC

    UAC is the user access control panel, and if you need to run the command right away, you can choose to disable it for some time. Click on the Start button, and then type UAC to find the User Account Control Settings. Click to open, and then slide down the notification setting at the bottom. It will temporarily allow launching the application as there is no check. However, make sure to switch to default once you are done.
Read More
How to Fix Remote Computer requires network level authentication Error in Windows 10
A couple of Windows 10 users have reported an error on domain-connected systems when they tried accessing their computer systems remotely. This occurs when the network level authentication or NLA is enabled on the computer. If you are one of these users, you better keep reading as this post will guide you on how you can fix this error. To resolve this issue, there are several workarounds you can try. You can either disable this option directly via properties or you can also modify some registry entries or sub-keys and restart the system. When you encounter this problem, an error message pops up that states:
“The remote computer that you are trying to connect to requires network level authentication (NLA), but your windows domain controller cannot be contacted to perform NLA. If you are an administrator on the remote computer, you can disable NLA by using the options on the Remote tab of the System Properties dialog box.”
Or you could also see this error message instead:
“The remote computer requires Network Level Authentication, which your computer does not support. For assistance, contact your system administrator or technical support.”
Before you proceed in troubleshooting the problem using the options provided below, you need to create a backup for your data or system restore point as well as make a copy of any registry entries you are going to modify.

Option 1 – Disable Network Level Authentication via Properties

The NLA is a useful tool that provides your computer with extra security and helps network administrators in controlling who can log into the system with just a click of a single box. However, there are times when it can become a disadvantage and could prevent you from accessing your system remotely. Thus, you need to disable it using Properties.
  • Tap the Win + R keys to open the Run dialog box.
  • After that, type in “sysdm.cpl” and tap Enter to open System Properties.
  • Next, go to the remote tab and uncheck the checkbox for the “Allow connections only from computers running Remote Desktop with Network Level Authentication (recommended)” option.
  • Now click the Apply button to save the changes made and exit System Properties and then try logging into the remote computer again and see if the problem is fixed or not.

Option 2 – Disable NLA via Registry Editor

Note that you can only use this option if the first one didn’t work for you. Take note that this option will require you to restart your PC completely which could mean some downtime if your computer is running a production server. So make sure to save all your work.
  • Tap the Win + R keys to open the Run dialog box and then type in “Regedit” in the field and tap Enter to open the Registry Editor.
  • From there, click on File > Connect Network Registry and input the details of the remote computer and then try to connect.
  • Navigate to the path below after you’re connected:
HKLM >SYSTEM > CurrentControlSet > Control >Terminal Server > WinStations > RDP-Tcp
  • After that, change the values given below to “0”
    • SecurityLayer
    • UserAuthentication
  • The navigate to PowerShell and execute this command – restart-computer

Option 3 – Disable NLA via PowerShell

PowerShell allows you to tap into the remote computer and once you’ve targeted the machine, you can execute the commands given below to disable NLA.
  • Tap the Win + S to open Search and then type in “PowerShell” in the field. Right-click on the related result and select the “Run as administrator” option.
  • After opening PowerShell, execute the command below:
  1. Once in the PowerShell, execute the following command:
$TargetMachine = “Target-Machine-Name” (Get-WmiObject -class “Win32_TSGeneralSetting” -Namespace rootcimv2terminalservices -ComputerName $TargetMachine -Filter “TerminalName=’RDP-tcp'”).SetUserAuthenticationRequired(0) Note: In the command given, the “Target-Machine-Name” is the name of the machine you are targeting.

Option 4 – Use the Group Policy Editor to disable NLA

Another option you can use to disable NLA is via the Group Policy Editor. This is ideal for you if you are blanket disabling. Just take note that the Group Policy Editor is a powerful tool and that if you make some mistakes by changing values you have no clue about, you can render your computer useless so make sure that you create a backup for all the values before you proceed.
  • Tap the Win + R keys to open the Run dialog box.
  • Then type in “gpedit.msc” and tap Enter to open the Group Policy Editor.
  • From there, go to this path – Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Security
  • After that, search for “Require user authentication for remote connections by using Network Level Authentication” and set it to disabled.
  • Now check if the error is fixed or not.
Read More
1 2 3 171
Logo
Copyright © 2023, ErrorTools. All Rights Reserved
Trademark: Microsoft Windows logos are registered trademarks of Microsoft. Disclaimer: ErrorTools.com is not affiliated with Microsoft, nor claims direct affiliation.
The information on this page is provided for information purposes only.
DMCA.com Protection Status