Hive ransomware on Exchange servers

Hive ransomware has been targeting Microsoft exchange servers lately vulnerable to ProxyShell security issues in order to deploy various backdoors. Once the backdoor has been placed various attacks can be performed including but not limited to network reconnaissance, stealing admin accounts, taking valuable data, and even installing and deploying file-encrypting algorithms.

hive ransomware

ProxyShell wide abuse

ProxyShell is a set of three vulnerabilities in the Microsoft Exchange Server that allows remote code execution without authentication on vulnerable deployments. The flaw has been used in past by various ransomware like Conti, BlackByte, Babuk, Cuba, and LockFile.

Security vulnerabilities have been reported to be fully patched on May 2021 but how Hive was able to still be successful in exploiting PowerShell and infiltrating into the system there seems to be still some unpatched and open issues.

Hive

Hive has gone a long way since it was first observed in the wild back in June 2021, having a successful start that prompted the FBI to release a dedicated report on its tactics and indicators of compromise.

In October 2021, the Hive gang added Linux and FreeBSD variants, and in December it became one of the most active ransomware operations in attack frequency.

Last month, researchers at Sentinel Labs reported on a new payload-hiding obfuscation method employed by Hive, which indicates active development.

Do You Need Help with Your Device?

Our Team of Experts May Help
Troubleshoot.Tech Experts are There for You!
Replace damaged files
Restore performance
Free disk space
Remove Malware
Protects WEB browser
Remove Viruses
Stop PC freezing
GET HELP
Troubleshoot.Tech experts work with all versions of Microsoft Windows including Windows 11, with Android, Mac, and more.

Share this article:

You might also like

GoDaddy data breach compromised 1.2M accounts
A very serious data breach has happened to the unfortunate GoDaddy hosting service placing a little over 1.2 million accounts affected. Security breaches sadly are not a rare occurrence but this time it is a little different. GoDaddy breachEach time when the company is breached data is stolen and that places the company in a bad light usually because its user database has been compromised and people are concerned about their data being misused. This is very rational fear and concern but this time things are a little bit different than usual, why is that, you might ask? Well, as before mentioned GoDaddy is a hosting company and the vector of attack was aimed at the part where it is hosting WordPress. Attackers were able to get their hands on the sFTP credentials of customers on that server meaning that all of the websites are also been relieved of their user base as well. This potentially means that there is a high chance that all of the hosted web site's content is also compromised, meaning that your data could also be compromised even if you were not a GoDaddy customer, all you needed to do is to be a member of any site hosted on their platform. GoDaddy has reset WordPress passwords and private keys, so it’s already taken the steps required to stock the attacker from exploiting anything with the passwords obtained. The company is in the process of generating new SSL certificates for customers. Bad thing is that the attack used a compromised password to get into systems all the way back around September 6th, 2021, the breach was discovered on November 17th, 2021, which is more than a 2-month active time where the attacker could harvest tons of data. The outcome of this attack will be seen in the upcoming time, until then be safe, and Just in case change your passwords.
Read More
NoteHomepage removal guide

NoteHomepage (by MyWay) is a browser extension that may be bundled with other free software that you download off of the Internet, or delivered via other advertising means. When installed NoteHomepage will set the homepage and search engine for your web browser to http://search.myway.com. While installing this extension will gather information from your browsing sessions, including website visits, clicked links, and sometimes even private information, that it later sends back to display unwanted ads into your browser. Several anti-virus scanners have marked this extension as a Browser Hijacker and are therefore not recommended to keep on your computer. It is considered potentially unwanted, and many users wish to remove it, so it is flagged for optional deletion.

About Browser Hijackers

Browser hijacking is a form of unwanted software program, usually a web browser add-on or extension, which then causes modifications in the web browser’s settings. Browser hijacker malware is developed for many different reasons. Generally, browser hijacking is utilized for earning advertising revenue from forced advert mouse clicks and site visits. Even though it might seem harmless, these tools are designed by malicious individuals who always look to take full advantage of you, so that they can earn money from your naivety and distraction. Some browser hijackers are programmed to make certain modifications beyond the browsers, like altering entries on the system registry and letting other malware further damage your machine.

Find out how to identify a browser hijack

Below are some signs and symptoms that suggest your browser has been hijacked: the home page of your browser is changed unexpectedly; your browser is constantly being redirected to adult websites; the default search engine is changed; you are getting browser toolbars you have never noticed before; never-ending pop-up advertisements show up and/or your web browser popup blocker is disabled; your web browser gets sluggish, buggy, crashes regularly; Inability to navigate to certain websites, particularly anti-malware and also other security software websites.

So how exactly does a browser hijacker infect a computer?

Browser hijackers might use drive-by downloads or file-sharing networks or an e-mail attachment in order to reach a targeted PC. They could also come from add-on programs, also called browser helper objects (BHO), web browser plug-ins, or toolbars. Browser hijackers sneak into your computer in addition to free software application downloads also that you unknowingly install alongside the original. A good example of some infamous browser hijackers includes Babylon, Anyprotect, Conduit, SweetPage, DefaultTab, Delta Search, and RocketTab, however, the names are regularly changing. Browser hijackers will affect the user’s web surfing experience severely, track the websites frequented by users and steal personal information, cause difficulty in connecting to the web, and eventually create stability problems, causing software programs and systems to crash.

Learn how to remove browser hijackers

Some hijackers can be removed by just uninstalling the corresponding freeware or add-ons through the Add or Remove Programs in the Windows control panel. But, many browser hijackers are difficult to get rid of manually. No matter how much you try to get rid of it, it might keep returning again and again. Additionally, manual removals demand in-depth system knowledge and thus can be a very difficult job for novices. Industry experts always suggest users remove any malicious software including browser hijacker with an automatic malware removal tool, which is easier, safer, and quicker than the manual removal method. Employ a PC optimizer along with your anti-malware software to solve various registry issues, remove computer vulnerabilities, and boost your computer performance.

Download the software in Safe Mode with Networking

If the malware is set to run immediately when Windows starts, stepping into safe mode may block the attempt. Just minimal required applications and services are loaded whenever you start your laptop or computer in Safe Mode. To launch your Windows XP, Vista, or 7 PCs in Safe Mode with Networking, follow the instructions below. 1) At power on, hit the F8 key before the Windows splash screen begins to load. This would invoke the “Advanced Boot Options” menu. 2) Select Safe Mode with Networking with arrow keys and press ENTER. 3) As soon as this mode loads, you should have an internet connection. Now, get the malware removal software you want by utilizing the web browser. To install the program, follow the directions in the installation wizard. 4) Immediately after installation, run a full scan and let the software remove the threats it discovers.

Switch over to an alternate browser

Some viruses may target vulnerabilities of a particular web browser that obstruct the downloading process. If you’re not able to download the anti-virus software program using Internet Explorer, this means malware is targeting IE’s vulnerabilities. Here, you need to switch to a different internet browser such as Firefox or Chrome to download the antivirus program.

Run anti-virus from a pen drive

To successfully get rid of the malware, you have to approach the problem of installing anti-malware software on the affected computer system from a different perspective. Adopt these measures to run the anti-virus on the affected computer system. 1) Download the anti-malware software on a virus-free computer. 2) Plug the USB drive into the clean computer. 3) Double click on the downloaded file to open the installation wizard. 4) Select flash drive as the location when the wizard asks you exactly where you wish to install the application. Follow the on-screen instructions to finish the installation process. 5) Remove the flash drive. Now you can utilize this portable anti-malware on the affected computer. 6) Double-click the anti-malware software EXE file on the USB drive. 7) Press the “Scan” button to run a full computer scan and remove viruses automatically.

Technical Details and Manual Removal (Advanced Users)

To eliminate NoteHomepage manually, navigate to the Add or Remove programs list in the Windows Control Panel and select the program you want to get rid of. For web browser plug-ins, go to your web browser’s Addon/Extension manager and choose the add-on you want to disable or remove. You might also want to reset your home page and search providers, as well as clear your web browser cache and cookies. Finally, check your hard disk for all of the following and clean your Windows registry manually to remove leftover application entries after uninstalls. Please be aware that this is for professional users only and could be challenging, with incorrect file removal resulting in additional PC errors. In addition to that, certain malware is capable of replicating or preventing deletion. You’re advised to do this procedure in Windows Safe Mode.
Files: C:\Users\%USERNAME%\AppData\Local\Google\Chrome\User Data\Default\Extensions\lamecoaceiheggdhlnjnmciaonfdamlg.600.11.14900_0 C:\Users\%USERNAME%\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lamecoaceiheggdhlnjnmciaonfdamlg C:\Users\%USERNAME%\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\lamecoaceiheggdhlnjnmciaonfdamlg C:\Users\%USERNAME%\AppData\Local\NoteHomepageTooltab C:\Users\%USERNAME%\AppData\Roaming\Mozilla\Firefox\Profiles\profile\extensions\_jvMembers_@free.notehomepage.com C:\Users\%USERNAME%\AppData\Roaming\Mozilla\Firefox\Profiles\profile\extensions\_jvMembers_@free.notehomepage.com\chrome C:\Users\%USERNAME%\AppData\Roaming\Mozilla\Firefox\Profiles\profile\extensions\_jvMembers_@free.notehomepage.com\META-INF C:\Users\%USERNAME%\AppData\Roaming\Mozilla\Firefox\Profiles\profile\notehomepage_j Registry: HKLM\SOFTWARE\Classes\AppID\NoteHomepage Toolbar.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions HKEY_CURRENT_USER\Software\Opera Software\Explorer\Main\Start Page Redirect=http://random.com HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NoteHomepage HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon Shell = %AppData%\IDP.ARES.Generic.exe HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Random HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Random. HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\NoteHomepageTooltab Uninstall Internet Explorer HKEY_CURRENT_USER\Software\NoteHomepage
Read More
Fix Windows Update Error 0x800F0922
A lot of users connect to the internet are using VPN on their Windows 10 computers which means that their regions could be different from the actual region of their Windows 10 computers. Thus, if you are facing some issues in updating your computer in this kind of environment, specifically the Windows Update error 0x800F0922, you need to follow the tips given in this guide to help you resolve the issue. When you encounter this kind of Windows Update error, you might see either of the following error messages on your screen:
“Windows could not search for updates, Code 0x800F0922 Windows Update encountered an unknown error” Or: “Windows failed to install the update with error 0x800F0922”
This issue might be caused by two possible reasons such as:
  1. VPN issues
  2. Not enough space on the System Reserved partition
To resolve the problem, here are some tips that might help:

Option 1 – Try disabling the VPN

As mentioned, if you are using VPN, this could be the reason why you’re getting the Windows Update error 0x800F0922 so the most obvious thing to do is for you to turn off the VPN and try to run the Windows Update once more. And if you use a VPN software that works using their software, you can just completely exit or log-off from its account. On the other hand, if you are using a built-in Windows 10 VPN, you can simply turn it off or delete all the settings you have created there. Although it’s understandable that you might have to use a VPN connection to connect to the work network, you really have to disable it at least until the Windows Update is no longer stuck in the error 0x800F0922. It would be best if you do this when you are not working.

Option 2 – Try to free up space in the System Reserved partition

The System Reserved partition is a part of the hard disk created when Windows is first installed on it. It is where the Boot Configuration Database, Boot Manager Code, Windows Recovery Environment, and the reserves space for the startup files are stored. And as mentioned early on, the error might be due to some insufficient space in the System Reserved partition so the next thing you can do is to increase the space in this partition. Note that it is a complex process so you need to make sure that you have made backups to all your data on the computer. So if ever something goes out of hand, at least you have copies of your important files in case you aren’t able to boot into the system at all.
Read More
Fix 0xc00d36cb error in Windows 10
0xc00d36cb error shows up when you are trying to play a video or movie using the default player in Windows. This error can occur due to a glitch in the media player or corrupted system files. in this guide, we will show you how to tackle this issue and fix it.
  1. Run the video playback troubleshooter

    • Click on Start and select Settings.
    • Go to Update and Security.
    • Scroll down and open the Troubleshoot tab.
    • Scroll down and select the Video Playback option.
    • Click the Run the Troubleshooter button.
    • The troubleshooter will perform an initial scan and offer a few options.
    • Select Continue with this troubleshooter.
    • The troubleshooter will scan the system again for driver and codec issues.
    • Follow on-screen instructions and apply recommended fixes.
  2. Reset the Movies and TV app

    • Click on Start and select Settings.
    • Go to Apps and open the Apps and features tab.
    • Scroll down to Movies and TV.
    • Select Movies and TV.
    • Click Advanced options.
    • Scroll down and click on the Reset button.
  3. Create a new user account

    • Click on Start and select Settings.
    • Open Accounts.
    • Open the Family & other users tab.
    • Scroll down to Other users and click the Add someone else to this PC button.
    • In the Microsoft account window, type your email address.
    • If you don’t want to enter an email address and establish a local account, click on I don’t have this person’s sign-in information option instead.
    • Next, select Add a user without a Microsoft account (for a local account).
      • Else, enter your Microsoft account login details.
    • Enter a user name and password for your new account. Also, select a security question and add an answer to it.
    • Once the new profile is ready, log out of your current account.
  4. Check for permission issues

    • Right-click on the problematic file and select Properties.
    • Open the Security tab.
    • Click the Advanced button.
    • In the Advanced Security Setting window, click the Change link.
    • In the Select User or Group window, enter Everyone in the text box.
    • Click the Check Names button.
    • Click OK and Apply to save the changes.
    • Close all the Properties windows.
    • Try playing the file or modifying the properties and check for any improvements.
Read More
Complete Ethernet cable guide

In today's modern world many households have internet access, most of the connection nowadays is done via Wi-Fi or wireless but there is a high probability that you have also a few devices connected via cable. There are of course many disadvantages and advantages between cable connection and wireless connection.

lan network cables

The main advantages of a hard cable connection are of course faster speed and stability compared to Wi-Fi. But if we look into the cables themselves there is also a big difference between them. Not all cables are the same and quality as well as speed vary a lot between them. Choosing the right cable is essential in order to make a maximum of your internet and we have some great tips and explanations of what cables do so you can make the right choice and enjoy your full internet potential.

Not all cables are the same

Cheap cables and expensive ones are not the same no matter what everyone tells you. The old proverb you get what you pay is true and more expensive cables will be made from better materials and will have a higher transfer rate.

Quality network cables are separated into different categories with proper markings and when buying one you should always look for these markings on the cables themselves, do not buy cables that do not have markings since they will often provide lower transfer rates or will not be shielded from outside influences resulting in packet drops and instability in a network.

Categories and what they mean are:

  • Cat-5 with a maximum speed of 100Mbps, typically unshielded.
  • Cat-5e with a maximum speed of 1Gbps, available in both shielded and unshielded varieties.
  • Cat-6 with a maximum speed of 10Gbps for runs under 55 meters (around 180ft), available in both shielded and unshielded varieties.
  • Cat-6a with a maximum speed of 10Gbps, shielded.
  • Cat-7 uses a proprietary GG45 connector rather than the standard RJ-45 connector seen on other cables for speeds of 10Gbps, shielded.
  • Cat-8 with a maximum speed of 25Gbps (Cat-8.1) or 40Gbps (Cat-8.2) at a distance of around 30 meters (around 100ft), shielded.

Unless stated, these standards are typically rated at their quoted speeds for a run of around 100 meters (around 330 ft) and use a standard RJ-45 Ethernet connector. Each generation of cable is designed to be compatible with the generations that came before it, so it’s possible (for example) to use a Cat-6a cable with a router that only supports speeds of 1Gbps.

Shielded cables

When purchasing higher quality cable you might not be able to choose if you have shielding or not since some standards like Cat-6a, Cat-7, and Cat-8 are always shielded. But if you do not have the need for these and you are satisfied with Cat-5e for example you can choose.

Shielded cables are a little more expensive but they will provide you with a coating that will eliminate interference from outside waves making cables more reliable. Of course, if the cable will go through a room that does not have many radio waves or some other interferences then buying a shielded cable is a waste of money.

Cable platings

Usually, there are two types of connector platings on connectors, silver, and gold, and people usually think that gold is much better but there are major differences between silver and gold platings and truth to be told there is no better one, both are different and should be considered depending on your need.

Silver plating will provide you with faster speed since its conductivity is larger than gold, but gold is slower on the oxidation front so its life span is longer. On the other hand, if your cables are always connecting and disconnecting gold will be first to be scrubbed off from the surface since the gold coating is much thinner.

Overall if you would only connect cable once and have slower internet than cable capacity gold is the way to go, in another case if you would use the cable as always connecting and switching and your internet plan is the same as cable transfer capacity you might want to go with silver one.

Cable material quality

Network cables are made from copper, your standard conduction material but even here there are differences in quality and therefore the chance of pocket losses over it. More quality less loss and more stable connection and this will depend on the purity of copper that is used in the cable itself. More purity in copper, more stability, simple as that.

Conclusion

So as you can see, there are a lot of different things that will influence your pick of proper network cable but the overall best advice is to get one that will fit well into your needs and setup. pair it up with your router and your internet plan since just simply buying something that you can not use is really a waste of money.

Read More
Repair Error Code 0x80070715 in 3 Simple Steps

What is Error Code 0x80070715?

Seeing obscure error codes like 0x80070715 on the screen again and again can be annoying simply because you have no idea why it keeps popping up? What does it mean? Well, for beginners you don’t have to decode it, we’ll make it simple for you. This error code indicates missing .dll files in the system or a corrupt registry. Due to this, you get locked from accessing and running applications on your system.

Solution

Restoro box imageError Causes

This error occurs largely because of two reasons:
  1. Disk damage due to cluttered registry
  2. The system gets infected by malware or a virus(es)
The error code 0x80070715 creates hurdles in the functioning of the applications. If this error is not repaired immediately it can result in serious damages like system crash and failure.

Further Information and Manual Repair

Many people pay hundreds of dollars to technicians to resolve this issue on their systems. Is it worth it? Not exactly!

How about we tell you a time and a money-saving way to fix the error code 0x80070715 on your PC?

The best way to resolve this issue on your system in seconds and also for free is to install Restoro. This is an advanced, powerful, and multi-functional system repair and a PC optimizer tool. It is smoothly integrated with numerous performance-driven utilities like registry cleaner, privacy error detector (anti-virus), Active X and Class error, and system stability detector. With this helper, you can resolve not only the error code 0x80070715 but also other types of PC-related errors. Whether the cause of the error code 0x80070715 on your PC is malware or cluttering cluttered disk, Restoro can be used to resolve them all. Its powerful and intuitive registry cleaner scans the registry and repairs it successfully. It removes junk files, internet history, temporary internet files, invalid entries, and also the files from the uninstalled programs still saved in the system’s registry. It wipes out all the clutter on your hard disk and cleans it in seconds freeing up plenty of space. It repairs the registry resolving the error 0x80070715 quickly. Nonetheless, if the error 0x80070715 is triggered due to viral infection or malware it removes them too. By downloading unknown files, accessing malicious websites, and opening phishing emails viruses can enter your PC. You may not be aware of these until error code 0x80070715 pops on your screen. It is wise to remove viruses right away because these give hackers access to your system which often results in data breaches and exposes users to system security threats. Restoro also works as a powerful antivirus. All malware, spyware, and viruses affecting your PC are scanned with the help of the advanced built-in privacy error detector utility. This utility embedded in the system detects viruses and malware in your system and removes them from your system successfully. Restoro is an easy-to-use repair tool. It has a simple layout and a user-friendly interface. It is easy to navigate through the repair tool, scan for errors and repair them without any hassle. Users of all levels, novice and experienced can use this tool with ease. You don’t need to be technically sound to work around this tool. Here's how to Install and run Restoro PC Fixer: In addition to this, you can run it on any Windows version. It is compatible with practically all versions. No matter what the cause for error code 0x80070715 maybe, you don’t need to get into the nitty-gritty of it and find a specific tool to resolve the issue. All you have to do is install this multi-functional Restoro on your system. Here are the 3 simple steps that you need to follow for successful repair:
  1. Click here to install Restoro.
  2. Scan your PC
  3. Press the Repair Tab to fix the issue right away
To ensure your PC is error-free, registry clean and your system runs at its optimum speed, scan your PC with Restoro regularly.
Read More
Fix VIDEO_DXGKRNL_FATAL_ERROR (0x00000113)
A lot of Windows 10 users have reported recently that their computers are frequently crashing with a Blue Screen error with an error code “VIDEO_DXGKRNL_FATAL_ERROR”. This kind of Stop error appears not so often and its bug check value of 0x00000113 is an indication that there is some violation in the Microsoft DirectX graphics kernel subsystem. This error also occurs when there is a corrupted driver that interferes with the GPU’s normal functionality. According to some security experts, this kind of error is reported to only occur in Windows 10 PCs. Users started getting this error right after a large Windows Update. The cause of this error might have something to do with a violation in the DirectX graphics kernel subsystem where there could be a bad DirectX install or some corrupted Dynamic Link Library or DLL. Aside from that, the error might also be caused by the Nvidia driver which might have crashed or it could also be that there is an intermittent power supply. Moreover, an outdated BIOS as well as a third-party security program might be the ones behind this Blue Screen error. Whichever the case may be, you need to fix the VIDEO_DXGKRNL_FATAL_ERROR BSOD error by following the instructions given below carefully.

Option 1 – Try checking if the NVIDIA graphics card is enabled and update it as well

Although the problem is quite massive, the fix could be as simple as enabling the NVIDIA graphics card if it turns out to be disabled. There might be some strange reason why your graphics card disables itself. Thus, the best and first option you can try is to check if the NVIDIA graphics card is enabled or not. To do so, follow these steps:
  • Tap the Win + R keys to open the Run dialog box.
  • Then type “devmgmt.msc” in the field and hit Enter to open the Device Manager.
  • After opening the Device Manager, look for the Nvidia graphics card option among the list of device drivers. Once you found it, check if it is enabled or not. If it’s not enabled, you should see a gray arrow pointing downwards. Right-click on the card and select Enabled.
  • Next, right-click on the graphics card once more and click on the Update Driver Software option and then click on the “Search automatically for updated driver software” option.

Option 2 – Update or uninstall third-party security program

As mentioned, the VIDEO_DXGKRNL_FATAL_ERROR Blue Screen error might be caused by a third-party security program that’s installed on your computer. So you have to either update it or uninstall it to resolve the issue.

Option 3 – Check the power supply for any inconsistency

The Blue Screen error might also be caused by an intermittent power supply. If there is any intermittent changes between the main supply and the battery power, it might lead to bad contact on your supply to the charger and thus, causes the VIDEO_DXGKRNL_FATAL_ERROR Stop error to appear. So to check if this scenario is applicable to you, you have to monitor your computer for any frequent changes between the power supply and the battery power. If you see that the supply is displaying power On and Off, see if the same goes when the power supply is disconnected. However, if it does not occur, you might have to purchase a new power adapter cable and replace the one that you have right now.

Option 4 – Reinstall the Graphics card drivers

  • Tap Win + R to open Run then type “devmgmt.msc” in the field and hit Enter to open the Device Manager.
  • From there, look for the Display adapters and uninstall each one of the graphics card drivers by right-clicking on them and selecting the Uninstall device option.
  • After uninstalling the graphics card drivers, close the Device Manager and tap Win + R to open Run once again.
  • After that, type “appwiz.cpl” in the field and hit Enter to open Programs & Features in the Control Panel.
  • Next, look for any program that’s related to your GPU manufacturers like Nvidia, AMD, or Intel. Right-click on any GPU-related entry and click on Uninstall to uninstall them and then follow the next on-screen instructions that appear afterward.
  • Now restart your computer.
  • Once your computer has restarted, go to the GPU manufacturer’s website and download the latest driver version for your graphics card model and then install it.
  • Restart your computer once again. That should fix the problem.

Option 5 – Try checking if there are any BIOS updates available for your PC

Updating the BIOS may help you resolve the BSOD error. You can just go to the OEM’s website as they offer utility software that can download BIOS firmware and update it without any problem. BIOS updates usually offer enhancements and fixes to some issues like this one.

Option 6 – Perform a System Restore

Performing a System Restore on your computer can also help you fix the VIDEO_DXGKRNL_FATAL_ERROR Blue Screen of Death error. You can do this option either by booting into Safe Mode or in System Restore. If you are already in the Advanced Startup Options, just directly select System Restore and proceed with the next steps. And if you have just booted your PC into Safe Mode, refer to the steps below.
  • Tap the Win + R keys to open the Run dialog box.
  • After that, type in “sysdm.cpl” in the field and tap Enter.
  • Next, go to the System Protection tab then click the System Restore button. This will open a new window where you have to select your preferred System Restore point.
  • After that, follow the on-screen instructions to finish the process and then restart your computer and check if the problem is fixed or not.
Read More
Fix Error Code 0x80090016 for PIN and MS Store
If you encounter Error Code 0x80090016 while trying to create a PIN or when you are using Microsoft Store, then you’ve come to the right place as this post will guide you in how you can fix this problem. Recently some users reported that they were unable to sign in or set up the Windows 10 Login PIN. Note that the potential fixes for this issue are totally different in both scenarios. Here’s the error message you get when you encounter the PIN related error:
“Something went wrong, We weren’t able to set up your PIN. Sometimes it helps to try again or you can skip for now and do this later.”
On the other hand, here’s the error message you get for the Microsoft Store-related error:
“Try that again, Something happened on our end and we couldn’t sign you in.”
Here are some potential fixes you can try to fix the Error Code 0x80090016 in the Microsoft Store:

Option 1 – Try to sync the Date and Time

The first thing you can try is to sync the Date and Time of your computer as the wrong Date and Time settings are one of the most common causes of connection problems like the Error Code 0x80090016. This is because of the incompatibility between the SSL Certificate validation date and the System Clock. Thus, you have to sync your System Clock. Refer to the steps below to do so.
  • Start by tapping the Win + I keys to open the Windows Settings.
  • Next, go to Time & Language > Date & time.
  • From there, turn the toggle on for the “Set time automatically and Set time zone automatically” option on the right-side panel.
  • After that, click on Region & language located on the left side panel and make sure that the Country or region on the right-side panel is set to the country you live in.
  • Now close the Settings app and restart your computer and see if it fixes the problem or not.

Option 2 – Try to re-register the Microsoft Store app via PowerShell

  • Tap the Win + X key combination or right-click on the Start button and click on the Windows PowerShell (Admin) option.
  • If a User Account Control or UAC prompt appears, just click on Yes to proceed and open the Windows PowerShell window.
  • Next, type in or copy-paste the following command to re-register the Microsoft Store app and tap Enter:
powershell -ExecutionPolicy Unrestricted Add-AppxPackage -DisableDevelopmentMode -Register $Env:SystemRootWinStoreAppxManifest.xml
  • Wait for the process to be completed and then restart your computer.

Option 3 – Try to reset the Microsoft Store cache

Just like browsers, Microsoft Store also caches as you view apps and games so it is most likely that the cache is no longer valid and must be removed. To do so, follow the steps below.
  • Right-click on the start button and click on Command Prompt (administrator).
  • Next, type in the command, “exe” and tap Enter. Once you do, the command will clear the cache for the Windows Store app.
  • Now restart your PC and afterward, try opening Microsoft Store again and then see if Error Code 0x80090016 is resolved or not.

Option 4 – Try to run the Windows Store Troubleshooter

The Windows 10 Store Apps Troubleshooter will help you in fixing the Error Code 0x80090016. This is a great built-in tool from Microsoft that helps users fix any app installation issues. So this is worth a try to solve the problem. This built-in tool also helps you fix the Windows 10 Store if it isn’t working. To use the Windows Store Troubleshooter, follow the steps below.
  • Tap Win + I keys again to open the Windows Settings panel.
  • Go to Update & Security and then go to Troubleshoot.
  • On your right-hand side, scroll down to find the Windows Store Apps and then click on Run the troubleshooter option and see if it fixes the problem.
On the other hand, you can use the options below if you encounter Error Code 0x80090016 while setting up your PIN.

Option 5 – Try to manage the NGC Folder

  • You need to boot your computer into Safe Mode first.
  • Next, delete all the contents of the NGC folder and you can do that by taking ownership of the folder first. To do so, refer to these sub-steps:
    • First, locate the concerned folder and right-click on it then select Properties.
    • Next, click on the Edit button in the Properties window and click OK to confirm if you got a User Account Control elevation request.
    • After that, select user/group from the permission windows or click on the Add button to add another user or group. It would be best if you add “Everyone” to give permission.
    • Then check “Full Control” under the “Allow” column to assign full access rights control permissions.
    • Now edit the permission to Full Control for “Everyone”.
    • Click OK to save the changes made and then exit.
  • After you take ownership of the folder, you can now delete all of its contents.
  • Once you’re done, restart your computer and see if the problem is fixed.

Option 6 – Try to use the Group Policy Editor

  • Tap the Win + R keys to open the Run dialog box
  • Then type “gpedit.msc” in the field and hit Enter or click OK to open the Group Policy Editor.
  • Next, navigate to this setting: Computer Configuration > Administrative Templates > System > Logon
  • After that, double click on “Turn on convenience PIN Sign-in” and set its radio button to Enable. This policy setting has the following description:
“This policy setting allows you to control whether a domain user can sign in using a convenience PIN. If you enable this policy setting, a domain user can set up and sign in with a convenience PIN. If you disable or don’t configure this policy setting, a domain user can’t set up and use a convenience PIN. Note: The user’s domain password will be cached in the system vault when using this feature. To configure Windows Hello for Business, use the Administrative Template policies under Windows Hello for Business.”
  • After you set the radio button to Enable, it will turn on the Logins using the PIN. Note that setting the radio button to Disabled or Not Configured will turn off the Logins using the PIN.
  • Now exit the Group Policy Editor and restart your PC so that the changes can take effect.
Read More
CD/DVD icon is not showing in File Explorer
In the past, CDs, DVDs, and floppy drivers used to be the primary sources of external storage for many users – that is until the USB storage devices took over. These days, a lot of devices no longer have a built-in CD or DVD writer or reader as it contributes to the thickness of the device. On the other hand, there are still various devices that still come with a built-in CD or DVD writer or reader. However, recently, users who still use CD or DVD on their devices reported a problem where the CD or DVD icon is not visible in the File Explorer as well as in “This PC” or the My Computer page. The cause of this issue is still unknown at the time of writing, but there are still some potential fixes you can try to fix it. You can try to update or roll back the device drivers or apply some tweaks in the Registry Editor. For more details, refer to the given options below.

Option 1 – Try to update or rollback device drivers

The first thing you can try to fix the missing CD or DVD icon is to either update or roll back the device drivers. It is most likely that after you updated your Windows computer that your driver also needs a refresh. On the other hand, if you have just updated your device drivers then you need to roll back the drivers to their previous versions. Whichever applies to you, refer to the steps below.
  • Open the Devices Manager from the Win X Menu.
  • Then locate the device drivers and right-click on them to open the Properties. Note that the concerned drivers will be listed under the DVD/CD-ROM drives section as well as the IDE/ATAPI Controllers section.
  • From there, look for the following drivers:
    • ATA Channel 0.
    • ATA Channel 1.
    • Standard Dual Channel PCI IDE Controller.
  • Now, right-click on each one of the listed drivers and update them all. You could also try to roll them back to their previous versions.
Note: You can also directly download the relevant drivers of your computer from the manufacturers’ website. So if you have an SSD, the issue might be due to an old storage driver.

Option 2 – Try to use the Registry Editor

  • Tap the Win + R keys to open the Run dialog box and type “Regedit” in the field and then tap Enter to open the Registry Editor.
  • Next, navigate to this registry key: HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlClass{4D36E965-E325-11CE-BFC1-08002BE10318}
  • After that, look for the DWORD values named “UpperFilters” and “LowerFilters”.
  • Right-click on each one of these DWORD values and select Delete.
  • Now restart your computer and see if it fixes the problem.

Option 3 – Try creating a new Registry entry

There is another option you can try in the Windows Registry to fix the missing icon of the CD/DVD. You can try adding a new entry. How? Refer to these steps:
  • Tap the Win ­+ R keys to open the Run dialog box and type “Regedit” in the field and hit Enter to open the Registry Editor.
  • After that, navigate to this registry path: HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesatapi
  • From there, right-click on “ATAPI” and select New > Key.
  • After that, name it is “Controller0” and right-click on the sub-key and then select New > DWORD (32-bit) Value.
  • Now name it as “EnumDevice1” and double click on it and then set its value data to “1”.
  • Click OK and restart your computer to apply the changes made successfully.
Read More
Fix NTOSKRNL.exe high CPU, Memory & Disk usage
This post will guide you in fixing high CPU, Memory, and Disk usage problems caused by NTOSKRNL.exe. NTOSKRNL stands for “NT Operating System Kernel. This file is a kernel image that is responsible for a lot of systems-based processes such as Hardware Virtualization, Process, and Memory. Aside from that, it is also the one that compresses the old pages of memory that reduces the overall amount of memory being used. If you notice that your computer is running slowly and you find that the NTOSKRNL.exe file is hogging your resources such as disk usage, CPU usage as well as memory usage, then read on as this post will guide you in fixing the problem caused by NTOSKRNL.exe. Make use of the options given below to resolve the issues caused by NTOSKRNL.exe. 1] Scan your computer for potential malware There might be a good chance that your computer might be infected with malware. And this malware might be associated with the NTOSKRNL.exe file and hence making it consume a lot of system resources. So, I would really recommend you to make sure that your Antivirus is up to date and then scan your computer with it specifically the C:/Windows/System32 folder because this is the location where the NTOSKRNL.exe file is located.

Option 1 – Put your computer in a Clean Boot State

The first thing you have to do is to put your computer in a Clean Boot State as this can help you in finding any incompatible programs that are causing the problem.
  • Log onto your PC as an administrator.
  • Type in MSConfig in the Start Search to open the System Configuration utility.
  • From there, go to the General tab and click “Selective startup”.
  • Clear the “Load Startup items” check box and make sure that the “Load System Services” and “Use Original boot configuration” options are checked.
  • Next, click the Services tab and select the “Hide All Microsoft Services” check box.
  • Click Disable all.
  • Click on Apply/OK and restart your PC. (This will put your PC into a Clean Boot State. And configure Windows to use the usual startup, just simply undo the changes.)
  • From there, start to isolate the problem by checking which one of the programs you installed recently is the root cause of the problem.
Once you’ve found any incompatible programs, you need to uninstall them. Refer to the steps below to do so.
  • In the search box, type in “control” and then click on Control Panel (desktop app) among the search results.
  • After that, select Programs and Features from the list which will give you a list of all the programs installed on your computer.
  • From there, look for the concerned program and select it and then uninstall it.
Note: If you have downloaded the app from the Windows Store, you can simply right-click on it from the application list and then uninstall it.

Option 2 – Update or rollback drivers

If the first option didn’t work for you, then it’s time to either update or roll back the device drivers. It is most likely that after you updated your Windows computer that your driver also needs a refresh. On the other hand, if you have just updated your device drivers then you need to roll back the drivers to their previous versions. Whichever applies to you, refer to the steps below.
  • Open the Devices Manager from the Win X Menu.
  • Then locate the device drivers and right-click on them to open the Properties.
  • After that, switch to the Driver tab and click on the Uninstall Device button.
  • Follow the screen option to completely uninstall it.
  • Finally, restart your computer. It will just reinstall the device drivers automatically.
Note: You can install a dedicated driver on your computer in case you have it or you could also look for it directly from the website of the manufacturer.

Option 3 – Try to run the DISM tool

If the first two options didn’t work, then running the Deployment Imaging and Servicing Management might. Using this built-in tool, you have various options such as the “/ScanHealth”, “/CheckHealth”, and “/RestoreHealth”.
  • Open the Command Prompt with admin privileges.
  • Then type in the following commands and make sure to hit Enter right after you type each one of them:
    • Dism /Online /Cleanup-Image /CheckHealth
    • Dism /Online /Cleanup-Image /ScanHealth
    • exe /Online /Cleanup-image /Restorehealth
  • Do not close the window if the process takes a while as it will probably take a few minutes to finish.

Option 4 – Try to stop the Runtime Broker process

The RuntimeBroker.exe or the Runtime Broker process is the one that monitors access to Windows APIs to make sure that the apps do not violate the core security of Windows. This process usually leaves a very small footprint. However, there are times when it consumes more resources than it’s supposed to and does not release memory after the work is done that results in a memory leak. As a result, it affects NTOSKRNL.exe which is why you have to stop the Runtime Broker process. To do so, refer to these steps:
  • Tap the Ctrl + Shift + Esc to open the Task Manager.
  • After opening Task Manager, go to the Processes tab and look for the Runtime Broker process.
  • Once you find it, check if it is using more than 15% of your memory. If it is, then you most likely have an issue with an app installed on your computer.
  • Select the Runtime Broker process and right-click on it and then click on the End Task option to end its process.

Option 5 – Try to run the Performance Troubleshooter

  • Tap the Win + R keys to open the Run dialog box.
  • Type “msdt.exe /id PerformanceDiagnostic” in the field and hit Enter to open the Performance troubleshooter.
  • Then click on Next to get started. Wait until the process is completed.

Option 6 – Try using the Windows Performance Toolkit

You can also use the Windows Performance Toolkit in finding the root cause of the problem. Just refer to the following steps to use this toolkit.
  • Search for “cmd” in the Cortana Search box and click on Command Prompt from the search results to open it.
  • Next, type in the command given below or copy and paste it and then hit Enter:
xperf -on latency -stackwalk profile -buffersize 1024 -MaxFile 256 -FileMode Circular && timeout -1 && xperf -d cpuusage.etl
  • After executing the command, wait for at least 60 seconds and then check the logs of the Windows Performance toolkit which is stored in a file named cpuusage.etl in the folder located at C:/Windows/System32. From there, you should see a list of all the causes of the System Resources being hogged.
Read More
1 2 3 171
Logo
Copyright © 2023, ErrorTools. All Rights Reserved
Trademark: Microsoft Windows logos are registered trademarks of Microsoft. Disclaimer: ErrorTools.com is not affiliated with Microsoft, nor claims direct affiliation.
The information on this page is provided for information purposes only.
DMCA.com Protection Status