Logo

Hive ransomware on Exchange servers

Hive ransomware has been targeting Microsoft exchange servers lately vulnerable to ProxyShell security issues in order to deploy various backdoors. Once the backdoor has been placed various attacks can be performed including but not limited to network reconnaissance, stealing admin accounts, taking valuable data, and even installing and deploying file-encrypting algorithms.

hive ransomware

ProxyShell wide abuse

ProxyShell is a set of three vulnerabilities in the Microsoft Exchange Server that allows remote code execution without authentication on vulnerable deployments. The flaw has been used in past by various ransomware like Conti, BlackByte, Babuk, Cuba, and LockFile.

Security vulnerabilities have been reported to be fully patched on May 2021 but how Hive was able to still be successful in exploiting PowerShell and infiltrating into the system there seems to be still some unpatched and open issues.

Hive

Hive has gone a long way since it was first observed in the wild back in June 2021, having a successful start that prompted the FBI to release a dedicated report on its tactics and indicators of compromise.

In October 2021, the Hive gang added Linux and FreeBSD variants, and in December it became one of the most active ransomware operations in attack frequency.

Last month, researchers at Sentinel Labs reported on a new payload-hiding obfuscation method employed by Hive, which indicates active development.

Do You Need Help with Your Device?

Our Team of Experts May Help
Troubleshoot.Tech Experts are There for You!
Replace damaged files
Restore performance
Free disk space
Remove Malware
Protects WEB browser
Remove Viruses
Stop PC freezing
GET HELP
Troubleshoot.Tech experts work with all versions of Microsoft Windows including Windows 11, with Android, Mac, and more.

Share this article:

You might also like

How to switch to Dark mode in Windows 11
Dark modeWindows 11 is coming soon, from its typical view and color scheme, Windows 11 will natively support dark mode. The dark mode is very popular in many applications today, some large companies like Adobe, Autodesk, and many more have already adopted a dark color scheme for their software so it is logical for others to follow and Microsoft is aboard for it. The dark mode itself has its benefits, for people who work on computer for longer period of time dark mode inside applications will throw less white and blue light on their eyes making workhours easier and pleasant on them. As a person who does indeed spend a lot of time in front of the screen, I would advise you to switch to dark mode regardless of the time that you spend with a computer, your eyes will be grateful.

Switching to Dark mode in Windows 11

  1. Open Windows 11 Settings by pressing ⊞ WINDOWS + I
  2. Click on Personalization on the left sidebar
  3. On the right side click on Color
  4. In color options click on the drop-down menu right next to Choose your color
  5. Select Dark
Your choice will be applied right away and you can safely close settings.
Read More
Fix Microsoft Word Stopped Working in Windows
Microsoft office has set itself as one of the most used and best suites for business use and MS Word as the most widely used word processor. But how even best are not immune to some small bugs and unexpected behaviors so is not Word. Word has stopped working is probably know to a wide audience of its users, I think I could safely say that each Word user has experienced this error at least once, luckily the error is not anything to worry about since it is an easily fixable issue.

Try automated solutions

There are some fully automated solutions that could fix any PC issues, some are available in free versions. If you prefer to do things manually however keep on reading and follow the instructions below.

Manual FIXES:

  1. Update MS Word

    Make sure that you are running the latest build of Word in order to eliminate all bugs and to have a smooth running experience. Go to File > Account > Product Information > Update Options and click Enable Update and then select Update Now.
  2. Check the file

    Corrupted files can cause this crash and this error, try opening another text file inside the Word to eliminate file corruption.
  3. Run Word in safe mode and disable add-ins

    Did you know that MS Word has a safe mode like Windows? In this safe mode, Word will boot up just the application without any add-ins installed and in this environment, you can start one add-in by one to see which one is causing the issue. Press ⊞ WINDOWS + R to open the run dialog Inside run dialog type in winword /safe followed by ENTER to run Word in safe mode If MS Word works fine in Safe mode, disable all COM Add-ins (while being in safe mode) and restart Word. Re-enable the add-ins one at a time to identify the problematic one. Click on File and then on Options Click on Add-Ins from the options list Select COM Add-ins from the drop-down menu and click on Go Uncheck all the add-ins and click OK to confirm Close the Dialog Box and MS Word. Now try running MS Word normally and see if it works Repeat steps to enable the add-ins, one at a time, and check which add-in is causing this error
  4. Repair Word installation

    Press ⊞ WINDOWS + R to open the run dialog In run dialog type in control panel and press ENTER Inside Control Panel click on Programs and Features Locate and click on Microsoft Office to select it Once selected click on change located on top of the application list Once Office Windows loads click on Repair Wait for the process to finish
  5. Reinstall MS office

    If all the previous solutions failed next step would be to completely uninstall MS Office and install it again once the old one has been completely removed from the system. Go to the control panel as explained in the previous step and select Office Instead of Change this time click on uninstall and follow on-screen instructions Once uninstall is finished, install a new copy of MS Office.
Read More
Diablo 3 lost connection to the game server
Diablo has changed how action RPG games are made and has placed homework for many developers. Diablo 3 is 3rd continuation in the series and to the joy of many players worldwide it has brought some interesting things in the genre like teaming up with other friends to slay demon hordes together introducing much needed multiplayer element. Sadly sometimes we get the error that Diablo 3 can not connect or that the connection to the game server has been lost. Keep reading and try provided solutions as they are presented to fix this issue and continue gaming.
Read More
MS will release single office apps in MS Store
It seems that Microsoft is going to offer subscription and sales of individual office applications in the Windows Store. The office package will still be available as a package but for the first time, we will get single applications as standalone ones available for purchase. ms officeThis is a very interesting decision by Microsoft and I fully support it, this time users will be able to pay less and to choose only applications that they need instead of paying for the whole package and not using it.
Read More
An Easy Guide to Fixing Error D3dx9_43.dll on Your PC

D3dx9_43.dll Error - What is it?

D3dx9_43.dll is a type of Dynamic Link Library containing small programs. This file is associated with Microsoft DirectX software. It is used and utilized by most Windows-based games and DirectX advanced graphic programs. The error D3dx9_43.dll pops on your computer screen when there is some issue when running or loading Microsoft DirectX programs. This error is often displayed in any one of the following formats:
  • “D3dx9_43.DLL Not Found"
  • "D3dx9_43.dll not found. Reinstalling might help fix this."
  • "The file d3dx9_43.dll is missing"
  • "File d3dx9_43.dll not found"
The good news is that this error code is not fatal. This means it will not result in system crashes, failure, or data loss. But it may hamper your ability to access, run and load Windows-based games associated with DirectX therefore to avoid the inconvenience it is advisable to repair it immediately.

Solution

Restoro box imageError Causes

D3dx9_43.dll error code can occur due to several reasons. These include but are not limited to:
  • Missing or corrupt D3dx9_43.dll file
  • Outdated drivers
  • Corrupt registry
  • Viral infection

Further Information and Manual Repair

To fix the D3dx9_43.dll error on your PC, try the manual easy to do methods illustrated below. To perform these methods to repair the issue, you don’t need to be a technical whiz. These are simple methods and easy to perform.

Method 1 - Check Your Recycle Bin or Download D3dx9_43.dll File

If you just recently uninstalled a program from your PC, then there is a possibility that the D3dx9_43.dll file got accidentally deleted during the process. This happens because DLL is a shared file. The program you uninstalled might be running with the same file. In case of accidental deletion of the D3dx9_43.dll file, it is advisable to check your recycle bin to repair the issue. Simply go to the recycle bin and look for the deleted file; if you locate it simply reinstall. However, if you are unable to find it, then if you have access to an internet connection, simply download the D3dx9_43.dll file from a reliable DLL website.

Method 2 - Update Drivers

If the error code occurs due to outdated drivers, then it is recommended to update drivers on your system. For example, the D3dx9_43.dll file error indicates an outdated video card driver since this file is linked to video game software. Therefore, simply update the drivers for your video card. Drivers can be updated in Windows by using a driver update wizard from within Device Manager. The wizard will walk you through the entire driver update process, making the updating task a lot simple and hassle-free.

Method 3 - Install an Antivirus

In case of malware infection, it is advisable to install a powerful antivirus. Simply run it to scan your entire PC for viruses. Then remove them to resolve the issue.

Method 4 - Clean and Repair the Registry

D3dx9_43.dll error may also pop up due to registry corruption. This happens when the registry loads with unnecessary and obsolete files like cookies, junk files, internet history, and bad registry entries. These files take up all the space and damage the registry. It also results in DLL file corruption and disk fragmentation. To resolve this it is important to clean the registry and repair it. A quick way to perform registry clean-up is to download Restoro. This is an advanced PC Fixer embedded with a powerful registry cleaner. It scans for all registry-related errors instantly, removes them, cleans the registry, and repairs the damaged files. Click here to download Restoro on your PC and resolve error D3dx9_43.dll today!
Read More
Fix Unable to terminate the process Error in Windows 10
There are times when you may find it hard to kill a particular process in the Windows Task Manager and every time you try to do so, you will only get an error message saying, “Unable to terminate the process, The operation could not be completed, Access is denied”. If you are one of the users who is constantly getting this error, read on as this post will provide you with a couple of options you can try to resolve the problem. Refer to the given instructions below if you are unable to terminate a process in the Task Manager but before you proceed you need to restart your PC and then try killing the process again, if you’re still not able to do it, you need to follow the options laid out below.

Option 1 – Try using Taskkill

  • Open the Command Prompt as admin from the WinX Menu.
  • After opening Command Prompt, type in the following command and tap Enter to execute it:
taskkill /IM "processname" /T /F processname – it is the name of the process which you can see on the Details tab of the Windows Task Manager. /IM – it is the one that specifies the image name of the process, which follows, that is to be terminated. /T – it is the one that kills not just the main process but also the child process. /F – it is the one that terminates the process forcefully.

Option 2 – Try using the WMIC

  • Open Command Prompt as admin from the WinX Menu.
  • From the Command Prompt window that opens, type in the following command and hit Enter to execute it:
wmic process where name='processname.exe' delete
Note: In the given command, you need to replace “processname.exe” with the name of the particular process you want to terminate which is found in the Details tab of the Windows Task Manager.

Option 3 – Try using PowerShell

  • The first thing you have to do is open an elevated PowerShell prompt.
  • From there, type in the following command and hit Enter to execute it:
kill -id pid
Note: In the given command above, “pid” is the Process ID number of the process you want to terminate. And for you to identify this number, you need to open the Details tab of the Windows Task Manager once again and take note of the number against the process you want to get rid of. Alternatively, you can also run the following command in the PowerShell prompt that you’ve pulled up to get the process ID number:
Get-Process
For example, “5364” is the process ID number for the DimScreen.exe process which is the process you want to terminate. In order for you to kill this process, you need to type in this command:
kill -id 5364
Read More
Windows PC advantages over Apple Mac

In the last article, we have covered various advantages of Apple hardware over Windows PC, however, PC has their own strengths and advantages over MACs as well. Join us as we explore why would you choose Windows PC over MAC.

Windows PC

Hardware customization

If you like to customize and build your own hardware and customize your existing computer then MACs are out of the picture, on other hand, computers based on Windows operating system are much more flexible in terms of customization.

While Apple hardware is locked and only allows small changes to it, computers running on Windows are free and open to various upgrades and modifications so if you like to play with hardware Windows is your platform.

Gaming

There are games on MAC true but their numbers can not compare to games available for the Windows platform. On top of that, most latest and best gaming hardware is not even available on Apple platforms so if you plan to game in high resolutions and play the latest games there really is no option other than Windows.

Windows Platforms also has multiple emulators that you can use to play games from other older platforms and Microsoft since it owns Xbox has some great plans for both PC and Xbox gaming.

Software back compatibility

Since the introduction of the new MAC OS X, apple really lost a lot of application back compatibility, and a lot of old legacy software can not be run on modern Apple computers. Windows on the other hand have always tried and succeeded in keeping maximum compatibility with older and legacy software.

Also on the Windows platform, there is a lot of community support for old and legacy software so even if it is not officially supported it is backed up by the community.

Software variability

In terms of where can you find the most different software, you need to look no further than the Windows platform. How Windows itself has great backward compatibility and a lot of developers are using it to create new software thanks to Visual Studio and .NET Windows has cemented itself as a platform with the most available software.

The popularity of Windows as the home operating system and as a gaming platform has made it quite interesting in eyes of various developers and tons of small applications are made daily for it. Windows 11 has also brought native android support to it and that has just expanded its already impressive catalog of applications.

Freedom of choice

Overall Windows PC is most appealing for users that like to be able to choose everything, from hardware components to software they would like to use. No other platform will give you larger freedom of choice and better personalization options.

Read More
How to Fix PFN_LIST_CORRUPT Error on Windows
If you suddenly encounter PFN_LIST_CORRUPT Blue Screen of Death error while using your computer then it means that the Page Frame Number or PFN list is corrupted. Page Frame Number is an indexing number used by the hard drive to find out the location of every single file on the physical disk. This kind of Blue Screen error is usually caused by a driver that’s passing a bad memory descriptor list and it can either be temporary or permanent. And so to fix this particular BSOD error, read on as this post contains a couple of suggestions that could help. Keep in mind that when you get a Blue Screen error like PFN_LIST_CORRUPT, the power connection to your PC must not be interrupted and so if you are using a laptop, it’s best if you connect it to a power source. On the other hand, if creating a dump from 0% to 100% takes up more than 5-10 minutes, then you have to force shut down your computer by pressing and holding the Power Key for 10 seconds or at least until the CPU lights turn off. After you do that, proceed to the troubleshooting tips prepared below.

Option 1 – Run the Blue Screen Troubleshooter

The Blue Screen troubleshooter is a built-in tool in Windows 10 that helps users in fixing BSOD errors like PFN_LIST_CORRUPT. It can be found on the Settings Troubleshooters page. To use it, refer to these steps:
  • Tap the Win + I keys to open the Settings panel.
  • Then go to Update & Security > Troubleshoot.
  • From there, look for the option called “Blue Screen” on your right-hand side and then click the “Run the troubleshooter” button to run the Blue Screen Troubleshooter and then follow the next on-screen options. Note that you might have to boot your PC into Safe Mode.

Option 2 – Run a System File Checker scan

You can also try to run a System File Checker or SFC scan in order to scan your computer for corrupted files that might be the cause behind the PFN_LIST_CORRUPT error. Once it finds any corrupted system files, it will automatically fix them. To run System File Checker, here’s what you have to do:
  • Tap Win + R to launch Run.
  • Type in cmd in the field and tap Enter.
  • After opening Command Prompt, type in sfc /scannow
The command will start a system scan which will take a few whiles before it finishes. Once it’s done, you could get the following results:
  1. Windows Resource Protection did not find any integrity violations.
  2. Windows Resource Protection found corrupt files and successfully repaired them.
  3. Windows Resource Protection found corrupt files but was unable to fix some of them.
  • Restart your computer after the scan is completed.

Option 3 – Check for any hard disk errors

  • On your desktop, right-click on the “This PC” or computer icon and then select Manage to open the Disk Management. Here you get to check your drive’s health.
  • Next, click on Disk Management on the left side panel.
  • From there, check the state of your drives. If it shows that all your partitions are healthy then it means all is good and that the problem may have something to do with some physical issues with your hard drive.
You might also want to run the CHKDSK utility to help you fix any issues with your hard disk. If your hard drive has issues with integrity, the update will really fail as the system will think that it’s not healthy and that’s where the CHKDSK utility comes in. The CHKDSK utility repairs hard drive errors that might be causing the problem.
  • Open Command Prompt with admin privileges.
  • After opening Command Prompt, execute the following command and hit Enter:
chkdsk /f /r
  • Wait for the process to be completed and then restart your computer.

Option 4 – Update the Device drivers

Updating the Device drivers can also help you fix the PFN_LIST_CORRUPT Blue Screen error. To do so, follow the steps below.
  • Tap the Win + R keys to launch Run.
  • Type in devmgmt.msc into the box and tap Enter or click OK to open the Device Manager.
  • After that, a list of device drivers will be displayed. If you see a red or yellow sign that shows up against the driver, right-click on the driver and select “Update Driver Software”.
  • Select the “Search automatically for updated driver software” option and then follow the instructions to complete the process.
  • Restart your PC and then check if the Blue Screen error is now fixed or not.

Option 5 – Disable OneDrive

The PFN_LIST_CORRUPT error might also be caused by OneDrive. Thus, you have to try disabling this program to resolve the problem.
  • Tap the Ctrl + Shift + Esc keys to open the Task Manager.
  • Once the Task Manager is open, click on More Details located at the bottom left portion of the window.
  • Then go to the Startup tab and select Microsoft OneDrive and then click Disable.
Read More
Videos folder missing from File Explorer
As you know, the Videos folder can be found under “This PC” by default on your Windows 10 computer. However, as per the reports of some users, there are a few occasions where it somehow gets replaced by the Documents folder. In other words, the Videos folders are replaced by a duplicated copy of the Documents folder. Out of the two Documents folder, one Document folder will contain all the usual files and subfolders while the second one is empty. Although when you click the Documents icon on your Desktop (if you have a shortcut), it will still take you to the right Documents folder. To fix this particular issue and get the Videos folder back in the File Explorer, here are some potential fixes that should help.

Option 1 – Run System Restore

The first thing you can try to do to resolve the problem is to run System Restore. This can help you go back to the previous state of your computer before the issue with the Videos and Documents folder.
  • Tap the Win + R keys to open the Run dialog box.
  • After that, type in “sysdm.cpl” in the field and tap Enter.
  • Next, go to the System Protection tab then click the System Restore button. This will open a new window where you have to select your preferred System Restore point.
  • After that, follow the on-screen instructions to finish the process and then restart your computer and check if the problem is fixed or not.

Option 2 – Try to restore Defaults

The next thing you can do is to restore Defaults. How? Refer to these steps:
  • Open File Explorer and then right-click on any of the two Documents folders.
  • After that, select the Properties option from the context menu and switch to the Location tab and click on Find target.
  • Next, copy the address and paste it in the field above the “Find target” option, and then click the “Restore Default” button.

Option 3 – Try to change the Registry Path

  • Tap the Win + R keys to open the Run dialog box.
  • Then type “Regedit” in the field and tap Enter to open the Registry Editor.
  • Next, navigate to this registry path: HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerUser Shell Folders
  • After that, edit the path for {35286A68-3C57-41A1-BBB1-0EAE73d76C95} under the “User Shell Folders” key to match the path shown for My Videos: %USERPROFILE%Videos.
  • Once you’re done, open the folder under “This PC” that has the Documents icon and tap Shift + right-click in the folder background, and then select the “Open PowerShell window here” option to fix the naming of the Documents folder. The path should read: “C:users<UserName>Documents.
  • Next, execute this command: ri desktop.ini –force
  • The command you entered will delete the files and folders and so when added for Documents, it will get rid of the empty Documents folder.
  • Now all you that’s left to do is to find where the target location is going to be for both folders and check if anyone foes to the user name location.
  • Then delete the one which goes to the incorrect location.
Read More
Fix Windows Update Error 0x80072EE2
If you got an error code of 0x80072EE2 while trying to download a Windows 10 update then it could be that something is blocking the Windows Update service on your Windows 10 PC and is preventing it from connecting to the Microsoft server. In addition, the error code 0x80072EE2 also indicates “ERROR_INTERNET_TIMEOUT” and together with this message, you might also see a message as Windows Update encountered an unknown error or you might also find it hard to search for new updates. So in this post, you will be guided on how you can fix the Windows Update error code 0x80072EE2. Make sure to follow the steps below carefully.

Option 1 – Restart your computer and try installing the Updates again

You can restart your computer and then try installing the updates once again. There are instances when a simple restart resolves Windows Update errors. Aside from that, it would also be better if you make sure that your internet connection is working and that it’s stable. And so after you restart your computer, check for updates once again and see if you’re still getting the error or not.

Option 2 – Run the Windows Update Troubleshooter

Running the built-in Windows Update troubleshooter is one of the things you can first check out as it is known to automatically resolve any Windows Update errors like error code 0x80072EE2. To run it, go to Settings and then select Troubleshoot from the options. From there, click on Windows Update and then click the “Run the troubleshooter” button. After that, follow the next on-screen instructions and you should be good to go.

Option 3 – Try to disable your antivirus program

Disabling the antivirus program or any security software installed in your computer is always a good idea you can try when the Windows Update process does not go smoothly. So before you try updating your computer again, make sure to disable the antivirus or security program and once the Windows Update is done, don’t forget to enable the antivirus program back again.

Option 4 – Try to restart the Background Intelligent Transfer Service

The Background Intelligent Transfer Service or BITS is a part of the Windows Update service and is the one that manages the background download of Windows Update, as well as scans for new updates and so on. And if Windows Update is experiencing some problems, you can try restarting BITS but make sure that you have admin privileges to do so.
  • Tap the Win + R keys to open the Run dialog box.
  • Next, type “services.msc” in the field and hit Enter to open Windows Services.
  • From the list of Services, look for the Background Intelligent Transfer Service and double-click on it to open Properties.
  • After that, you need to set the Startup type to “Automatic (Delayed Start) and click on Apply.
  • Now click the Stop button to stop BITS and then click the Start button to restart the service.
  • Click OK to save the changes made and then restart your PC.

Option 5 – Try installing the updates in a Clean Boot State

It could be that some third-party application is the one that’s causing the problem so it’s best if you put your computer in a Clean Boot state. During this state, you can start the system with a minimum number of drivers and startup programs that will surely help you in isolating the root cause of the issue.
  • Log onto your PC as an administrator.
  • Type in MSConfig in the Start Search to open the System Configuration utility.
  • From there, go to the General tab and click “Selective startup”.
  • Clear the “Load Startup items” check box and make sure that the “Load System Services” and “Use Original boot configuration” options are checked.
  • Next, click the Services tab and select the “Hide All Microsoft Services” check box.
  • Click Disable all.
  • Click on Apply/OK and restart your PC. (This will put your PC into a Clean Boot State. And configure Windows to use the usual startup, just simply undo the changes.)
  • After that, try to install the Windows app again.
Note: If you are able to install the app without any trouble at all then it means that the error is caused by some third-party application on your computer. You need to look for the culprit and uninstall it once you found it.

Option 6 – Run Microsoft’s online troubleshooter

Running Microsoft’s online troubleshooter might also help you fix the Windows update error code 0x80072EE2. This online troubleshooter is known to help in fixing Windows Update errors, it scans your computer for issues that might be causing the problem and then fixes them automatically.
Read More
1 2 3 171
Logo
Copyright © 2023, ErrorTools. All Rights Reserved
Trademark: Microsoft Windows logos are registered trademarks of Microsoft. Disclaimer: ErrorTools.com is not affiliated with Microsoft, nor claims direct affiliation.
The information on this page is provided for information purposes only.
DMCA.com Protection Status