Logo

Hive ransomware on Exchange servers

Hive ransomware has been targeting Microsoft exchange servers lately vulnerable to ProxyShell security issues in order to deploy various backdoors. Once the backdoor has been placed various attacks can be performed including but not limited to network reconnaissance, stealing admin accounts, taking valuable data, and even installing and deploying file-encrypting algorithms.

hive ransomware

ProxyShell wide abuse

ProxyShell is a set of three vulnerabilities in the Microsoft Exchange Server that allows remote code execution without authentication on vulnerable deployments. The flaw has been used in past by various ransomware like Conti, BlackByte, Babuk, Cuba, and LockFile.

Security vulnerabilities have been reported to be fully patched on May 2021 but how Hive was able to still be successful in exploiting PowerShell and infiltrating into the system there seems to be still some unpatched and open issues.

Hive

Hive has gone a long way since it was first observed in the wild back in June 2021, having a successful start that prompted the FBI to release a dedicated report on its tactics and indicators of compromise.

In October 2021, the Hive gang added Linux and FreeBSD variants, and in December it became one of the most active ransomware operations in attack frequency.

Last month, researchers at Sentinel Labs reported on a new payload-hiding obfuscation method employed by Hive, which indicates active development.

Do You Need Help with Your Device?

Our Team of Experts May Help
Troubleshoot.Tech Experts are There for You!
Replace damaged files
Restore performance
Free disk space
Remove Malware
Protects WEB browser
Remove Viruses
Stop PC freezing
GET HELP
Troubleshoot.Tech experts work with all versions of Microsoft Windows including Windows 11, with Android, Mac, and more.

Share this article:

You might also like

Fix Windows Update Error Code 0x8024402c
Connecting to Microsoft’s Windows Update servers does not always go smoothly since you could run into a number of errors. One of these errors is the error code 0x8024402c. You can see this error code when you check for Windows Updates. This kind of Windows Update error occurs when the proxy or the firewall settings are incorrectly configured. As a result, the client’s connection to the Windows Update servers fails. There are two things you can do to resolve error code 0x8024402c. First, you can try to fix the Proxy Settings. Second, you can set up Automatically Detect the connection settings. In addition, you can also try to perform System Restore as it could also help in fixing the problem. Performing System Restore might help you in fixing the error code 0x8024402C. Refer to the steps below to use System Restore.
  • Tap the Win + R keys to open the Run dialog box.
  • After that, type in “sysdm.cpl” in the field and tap Enter.
  • Next, go to the System Protection tab then click the System Restore button. This will open a new window where you have to select your preferred System Restore point.
  • After that, follow the on-screen instructions to finish the process and then restart your computer and check if the problem is fixed or not.
If performing System Restore didn’t help in fixing the problem, then try the two given options below.

Option 1 – Try fixing the Proxy Settings

  • In the Cortana search box, search for Internet Explorer and then click on the related search result.
  • After that, tap the Win + T keys on your keyboard and click on Internet Options.
  • Next, navigate to the Connections tab and click on LAN Settings.
  • Then click on the Advanced button and delete all the entries in the list generated in the Exceptions section. And if the Advanced button is disabled because the “Use a proxy server for your LAN (These settings will not apply to dial-up or VPN connections)” option is disabled then you are good to go. Now proceed to the next step.
  • Tap the Win + X keys or right-click on the Start button and select Command Prompt (Admin) or you could also search for “cmd” in the Cortana search box and right-click on Command Prompt from the search results and select the “Run as administrator” option.
  • If a User Account Control appears, click on Yes to proceed. After that, type each one of the commands listed below, and don’t forget to hit Enter after you type each one of them.
    • netsh winhttp reset proxy
    • net stop wuauserv
    • net start wuauserv
  • Now restart your computer and check if the problem is fixed or not by checking for Windows Updates again.

Option 2 – Try setting up Automatically Detect the connection settings

  • Type in “internet options” in the Cortana search box and then click on the related search result.
  • After that, navigate to the Connections tab.
  • Next, click on the LAN Settings button located under the Local Area Network (LAN) settings section.
  • Then uncheck the “Use a proxy server for your LAN (These settings will not apply to dial-up or VPN connections)” option under the Proxy Server section and click OK.
  • Now restart your computer to apply the changes made successfully.
Read More
Fix cannot open IPv4 Properties in Windows 10
Many Windows 10 users often change the IP addresses of their computers’ network adapter in order to connect to the internet or network they belong to in times when there is no automatic connection for their computers. In most cases, access to modifying this setting is restricted for some odd reason even if you are an administrator. So if you are one of the users whose Windows 10 VPN IPv4 Properties are not working, this post can help you remedy that so that you can open and edit the IPv4 Properties on your Windows 10 PC. The common way to change IP settings is by going to Settings > Network and then to Internet > Change adapter options > Select Network adapter > right click and open Properties. From there, you can select TCP/IP 4 and modify it. If you aren’t able to do this, refer to the instructions laid out below to troubleshoot the problem in accessing the IPv4 Properties.

Option 1 – Try using PowerShell to manually set the IPv4 properties

As you are not able to set it using the interface, you can do so using PowerShell instead. Note that this option will only work for you if you run PowerShell with administrator privileges. After opening PowerShell, according to many users, you have to run the this command – set-DnsClientServerAddress -InterfaceAlias “Ethernet” -ServerAddresses xxx.xx.xxx.xxx,x.x.x.x,xxx.xx.xxx.xxx,x.x.x.x Usually, Ethernet is the name of your network adapter which is set by default. If you want to see the actual name of your network adapter, you can just type this command and tap Enter after doing so – Get-NetAdapter -physical | where status -eq 'up' After entering the given command, you will see a list of active Ethernet adapter in your computer as you can see on the image above. Note that the 4 sets of X like the one on the image below should match with the sequence:

Option 2 – Try editing the rasphone.pbk files

The rasphone.pbk files stores property for the connections and since you are not able to access the IPv4 properties, it is most likely that it has been disabled here. The good thing is that you can open these files and edit them using Notepad. Refer to the steps below to do so.
  • Open the Windows Explorer and then enable the show hidden files option.
  • After that, look for the files at this location – C:Users <username>AppDataRoamingMicrosoftNetworkConnectionsPbk_hiddenPbkrasphone.pbk
  • Then right-click on it and select the “Open with” option and choose the Notepad app.
  • After opening the file, look for “IpPrioritizeRemote” from the long list.
  • Once you found it, set its value from “1” to “0”.
  • After that, look for “IPInterfaceMetric” and set its value to “1” and tap Ctrl + S to save the changes you’ve made, and then exit and try accessing the IPv4 properties again. It should work, but if you’re still unable to access it, try the next option below.

Option 3 – Enable the Split Tunneling if you use VPN

All data goes back and forth when you are using a VPN service on your computer. And since you are using VPN, it could be that it disables the IPv4 interface. If that’s the case, you need to stay connected with both the local network and VPN and to do so, you have to enable Split Tunneling. How? Follow these steps:
  • Open PowerShell with administrator privileges.
  • Next, type in “Get-VpnConnection” and tap Enter. After doing so, it will give you the exact name of your VPN.
  • After that, type in “Set-VpnConnection -Name “yourVPNName” -SplitTunneling $True” and tap Enter. Once you enter the command, it will free your IPv5 settings so that you can change it to connect with your local network if you prefer it to.
Read More
VirtualBox displays Black screen
If VirtualBox suddenly displays a black screen without any text or mouse cursor when you are trying to boot a guest operating system, then read on as this post will guide you in fixing such an issue. This black screen occurs when Windows 10 failed to provide a specific setting that VirtualBox requires. Consequently, you will not be able to install or use any guest operating system in VirtualBox even if your PC has virtualization support, the best thing you can do now is to fix this black screen issue. There are two ways you can fix this black screen in VirtualBox, you can either try to disable Hyber-V or disable 3D Acceleration. For more details, refer to each one of the given options below.

Option 1 – Try to disable Hyper-V

Hyper-V is a built-in virtualization tool available in Windows that helps users in creating a virtual machine as well as install a guest operating system without using any third-party tool like VMware, VirtualBox, and many more. However, the problem with this virtualization tool is that some systems cannot run it and VirtualBox simultaneously which is most likely why the screen abruptly turns into black. Thus, you have to disable Hyper-V to resolve the problem. How? Refer to these steps:
  • In the Start Search, type “Turn Windows features on or off” and then click on it from the results.
  • Once you’ve opened the Windows Features window, remove the checkmark from the Hyper-V box.
  • Click the OK button and then restart your computer.
  • Now try to use VirtualBox again and see if the problem is fixed.

Option 2 – Try to disable 3D Acceleration

The guest operating system will use the host computer’s GPU to render 3D graphics if you enable the 3D Acceleration for the virtual machine. To simply put it, it will enhance the graphics of the virtual machine and will let you use 3D graphics. Although it may seem nice, it can actually cause the black screen to appear as well so you might have to disable it to isolate the problem. In fact, a lot of operating systems have failed to use the 3D Acceleration for the guest operating system because of this black screen issue. To disable it, follow these steps:
  • Open VirtualBox on your computer and select the virtual machine.
  • Next, click on the Settings button and go to the Display section.
  • After that, look for a checkbox named “Enable 3D Acceleration” located on your right-hand side and then uncheck it.
  • Save the changes you’ve made and reboot your PC and see if you can now run the virtual machine without any problem.
Read More
How to know if you have keylogger in Windows
Hello and welcome everyone, today we will be talking about dreaded keyloggers, why they are dangerous, and how to know if you might have one in your system. Keylogger is a malicious application placed in your system and hidden with only one goal in mind, to get information about what are you typing and by that means for a person who infected you to get information about your credit card information or other sensitive data. They can be introduced into your systems in various ways and often can not be detected easily. Modern antivirus applications have ways of detecting them and removing but this tutorial aims to teach you how to spot them all by yourself since new keyloggers are produced daily and sometimes relying on antivirus alone is not enough. Unlike viruses and trojans, keyloggers are not heavy on system resources and you will not feel slow down on your computer if you have one which makes them harder to sport with regular work. Some of them can be even tracking you on the website and not even be physically present on your computer. Generally, we could categorize keylogger into 4 categories:
  1. Web browser-based keylogger. Some websites would have CSS scripts, input web forms, or so-called man in the middle keylogger. Lucky for us even Windows defenders with the latest update can detect this type of keylogger and successfully deal with it and how keylogger itself is not present on our system we are safe.
  2. General spyware keylogger. This keylogger is present in your system, usually, it infected it via email attachment, social media download, torrent download, some malicious so-called fixer application, etc. Most antivirus applications and windows defenders can detect these types as well and remove them successfully.
  3. Kernel-level keylogger. This keylogger is a more dangerous type they tend to operate underneath Windows as a rootkit and can go undetected by antivirus and windows defenders.
  4. Hypervisor-based keylogger. This is the most dangerous keylogger, they use virtualization techniques to hide and mask themselves as a replica of the operating system and they scan all keystrokes by the user. These are very rare keyloggers but they do exist.
If you suspect that you have a keylogger or just want to check your system for precaution reasons follow these tips and guides and luckily you will solve your issue in no time and your data will be safe.
  1. Use Task Manager to find suspicious entries.

    Task manager is a great application implemented in Windows that is constantly monitoring and showing all services, applications, and processes currently running on your system and thus a great tool to monitor your system if you know how to use it. First, open task manager by pressing CTRL + SHIFT + ESC Then take a good look into it, try to find suspicious names, probably duplicate of running application, something like Windows logon application, or keylog or anything similar which seems out of ordinary. If you manage to find a suspicious running application right-click on it and close it. Also while you are in task manager jump into the startup tab and check to see are there some unusual applications starting with your Windows, if you find anything, disable it right away. This is the most simple and quickest way to get some information right away if you suspect to have some simpler keylogger in your system.
  2. Use the command prompt to monitor your network.

    In order to check connections to your computer and find potential suspicious ones start the command prompt in administrator mode, press ⊞ Win + X, and choose command prompt (administrator). type in netstat -b and press ENTER. All website and application connections to your computer are now visible. ignore svchost, edge browser, windows store, etc ad check the IP of the remaining ones using the internet.
  3. Use keystroke encryption.

    Install encrypting software and even if you have a keylogger, the application will encrypt each stroke and all that attacker will get is gibberish
Please remember to always download files from trusted sources, do not open unknown emails, and do not share your information publicly. Take common protection steps in order to protect yourself in the digital world.
Read More
How to Fix Windows 10 Error Code 0xc004fc03

Error Code 0xc004fc03 – What is it?

Error code 0xc004fc03 occurs when Windows users fail to activate their Windows operating system due to a networking problem. The error code’s common symptoms include the following:

  • Inability to activate Windows 10 operating system
  • Message box with error code 0xc004fc03

Solution

Restoro box imageError Causes

Error code 0xc004fc03 in Windows 10 usually occurs due to issues related to a Windows user’s network. Your computer may be having problems connecting to the Internet or your firewall may be blocking or interrupting your device’s ability to activate Windows 10. In some cases, users may simply need to wait a day or two to reattempt to activate their system using a valid product key, as there may be an issue with the Windows activation servers.  Failure to promptly fix this error code might result in other Windows 10 error messages, such as error code 0xc004f034.

Further Information and Manual Repair

To rectify the error code, Windows 10 users will need to perform manual repair procedures that fix the underlying problems causing error code 0xc004fc03. These procedures may include reconnecting to one’s network, checking your firewall settings, or activating your Windows operating system via phone. The manual repair methods are simple and do not require technical knowledge of the Windows operating system. If your attempts at manually repairing this error code fail, however, you may need to try a few other procedures.

Method One: Verify Internet Connection

To check your Internet connection, you’ll need to access the Network & Internet tab in Windows 10. Follow the instructions below to access this tab and fix Internet connectivity issues if they are preventing you from activating Windows on your machine.

  • Step one: Click the Start button and select Settings
  • Step two: Select Network & Internet
  • Step three: Click the Status section of the Network & Internet tab

If your status shows that you are not connected to a network, you will need to fix your connection. Simply use the Network Troubleshooter to troubleshoot your connection. You will be able to activate your copy of Windows once your connectivity issues are resolved.

If, however, the problem persists and error code 0xc004fc03 occurs during the activation process, this simply means that the existence of the error code is not due to connectivity or networking problems. In such a case, move to the next manual repair method listed below and follow the exact instructions given.

Method Two: Check Firewall Settings

Windows Firewall protects your PC from hackers, worms, and other malicious programs. However, in some cases, it may result in error codes like error code 0xc004fc03. If your firewall is interfering with the Windows 10 activation, you’ll be able to rectify the problem by simply adjusting your settings. Follow the steps below to check – and adjust if necessary – your Windows Firewall settings.

  • Step one: Click search bar and type firewall
  • Step two: Select Windows Firewall
  • Step three: Select Turn Windows Firewall on or off

In some cases, Windows users may not be able to adjust settings within the Windows Firewall tab, as your firewall settings may be controlled by a third party antivirus software. If this is the case, open the antivirus software and turn off the firewall if the software does not prevent you from making such changes to its settings.

Note, however, that you will need to readjust the settings as soon as you activate your version of Windows 10. This is due to the fact that turning off your firewall settings permanently may lead to exposure to worms and other malicious programs.

Method Three: Activate Windows by Phone

Activation of Windows via phone is another option for individuals experiencing error code 0xc004fc03. The activate by phone option in the Update & Security tab will be available once you fail to activate Windows 10. To complete this manual repair method, follow the steps below.

  • Step one: Select Settings
  • Step two: Click Update & security
  • Step three: Select Activate by phone
  • Step four: Follow the instructions provided thereafter.

This is one of the most effective ways to fix error code 0xc004fc03. If the issue persists, however, you can proceed to the last resort.

Method Four: Download an Automated Tool

If you wish to always have at your disposal a utility tool to fix these Windows 8 and other related issues when they do arise, download and install a powerful automated tool.

Read More
How to always run the app in admin mode in W11
Each time you open an application inside your Windows 11 operating system, it is opened with standard privileges. Now, please note that your account privileges and application privileges are two different things, you might be the administrator of the system but when you open the app, it still opens with standard privilege. admin privilegesMost of the time running applications with typical settings is fine but from time to time we might have some applications that will require running with administrator privilege in order to work properly. In this case, it is very easy to do it, you just right-click and choose run as administrator. Although a very easy solution, it can be quite annoying if running the app is on a daily basis or even more times per day. If this is the case then right-clicking and choosing to run as administrator can be a daunting task, sometimes you can even forget to run it like this in heat of work and some unforeseen consequences might occur. Luckily there is an easy hack so you can open the chosen application each time as an administrator with a simple double click each time.

Setting application to run as administrator always

  1. Locate application executable file
  2. Right-click on in and choose properties
  3. Click on the Compatibility tab
  4. Check the box next to Run this Program as an Administrator
  5. Click on Apply
  6. Click on OK
From now on each time you open an application normally with a double click, it will be opened as administrator privileges.
Read More
Lock folder with password in Windows 10
Hello and welcome everyone. In today's article, you will learn how to lock folder and content in it. Please be aware of few things:
  1. The method is shown here works, but you need to be careful and follow step by step or you will damage your files permanently,
  2. If you forget your password, you can not access your files anymore
  3. Your files altho protected can still show up in recent files of some applications
All of that being said, let us start with locking the local folder on the computer with the password. Go to the folder where you have files that you would like to hide and lock with a password. Enter the folder and create the new text file inside it. Skip the name for now and go inside it. Copy and paste the following code inside the file:
cls @ECHO OFF title Folder Locker if EXIST "Control Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}" goto UNLOCK if NOT EXIST Locker goto MDLOCKER :CONFIRM echo Are you sure u want to Lock the folder(Y/N) set/p "cho=>" if %cho%==Y goto LOCK if %cho%==y goto LOCK if %cho%==n goto END if %cho%==N goto END echo Invalid choice. goto CONFIRM :LOCK ren Locker "Control Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}" attrib +h +s "Control Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}" echo Folder locked goto End :UNLOCK echo Enter password to Unlock folder set/p "pass=>" if NOT %pass%==Your-Password-Here goto FAIL attrib -h -s "Control Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}" ren "Control Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}" Locker echo Folder Unlocked successfully goto End :FAIL echo Invalid password goto end :MDLOCKER md Locker echo Locker created successfully goto End :End
Now locate this line of code in the document: if NOT %pass%==Your-Password-Here goto FAIL and replace Your-Password-Here with your password. !!! Write down somewhere your password, if you lose it you will lock the folder even for you !!! Save the file as FolderLocker.bat and double-click on it to execute it. If everything was done correctly, a new folder with the name: Locker Move files that you want to hide and protect inside that folder. Double click again on FolderLocker.bat The command prompt will appear with the question do you want to lock the folder, press Y, and press ENTER. The command prompt will close and the Locker folder will disappear. In order to unhide and access the folder, you will need to double click on FolderLocker.bat again but this time command prompt with ENTER your password will appear. Type in your chosen password and the folder is back. If you wish to hide and lock it again just double click on FolderLocker.bat again, confirm with Y and it is hidden again.
Read More
Disabling the Recently Opened Files in Windows
The Windows 10 operating system comes with a user-friendly interface as well as better security features compared to its previous versions. One of these new features is the “Recently Opened Files” feature which displays all the files you’ve opened recently in File Explorer. Although it might seem useful, some users see this as a privacy concern especially if there are other users that use the same computer. If you are one of these users, read on as this post will guide you on how you can disable the “Recently Opened Files” feature in Windows 10. There are three ways you can disable the “Recently Opened Files” feature. You can manually clear the recent files, or disable the feature via Control Panel. You can also do it using the Group Policy Editor.

Option 1 – Manually clear the recent files

The first thing you can do is to clear the recent files manually. Since the information about the recently opened files is stored in the form of cached data, you can locate this data and delete it manually, from time to time. To do that, follow these steps:
  • Tap the Win + R keys to open the Run utility and copy this address in the field: %AppData%MicrosoftWindowsRecent
  • Next, tap the Ctrl + A keys to select all the items and then tap the Shift + Delete keys simultaneously.
  • After that, a prompt will appear where you have to click on Yes. This will delete all the recently opened files in the File Explorer the next time you open it.

Option 2 – Disable the feature via Control Panel

The next option you can try to disable the feature is via Control Panel. Refer to these steps to do so:
  • First, click on the Start Menu button and select the Settings icon.
  • After that, click on Personalization and then on Start located on the left pane.
  • Next, scroll down until you see the “Show recently opened items” in Jump Lists on the Start or the Taskbar and click on it and then toggle it off.

Option 3 – Disable the feature using the Group Policy Editor

If you are using the Windows 10 Pro version, then you have access to edit the functions in the Group Policy. The Group Policy function has the option that can disable all the default services of Windows 10. Note that in this step, you will permanently disable the “Recently Opened Files” feature. So before you proceed, make sure that you really want to disable this feature permanently and not in the meantime.
  • Tap the Win + R keys to open the Run dialog box and type “gpedit.msc” in the field and click OK or tap Enter to open the Group Policy Editor.
  • Next, on the left side pane, click on the “User Configuration” option and then click the “Administrative Templates” option.
  • After that, select the “Start Menu and Taskbar” option and select the “Don’t keep the history of recently opened documents” option in the right pane.
  • Now double click on this option and check the “Enabled” option and then click on Apply and OK buttons to save the changes made.
Read More
Steam beta introduces no rollback game updates
The latest steam beta update has introduced code that will prevent downloading and installing previous game versions via the steam client. steamFor many people that are playing online games, this is not such a big deal since they always must have the latest version in order to play their games but for other ones, this has arrived as a bit of a problem. Many people preferred older game versions since often updates can change certain mechanics inside the game making it different as an experience or introduce some elements that not everyone likes. So far, people could use the steamDB site to find depo of the game versions you would like to play and download it but if this beta code goes live that will not be an option anymore. Now, playing old games without updates could also be used for nostalgic reasons and these people have also been cut off with this update. It is important to point that update is still in beta client only but users have already started to voice their opinions asking Valve not to place it live. In the end, it will all depend on Valve’s decision will they listen to their customers or decide to push updates on live service.
Read More
Not enough storage is available to process...
Each time you execute a command on your computer, it takes into account a number of files and space for the code in the background for the command to be executed. Thus, executing the command is not that easy which is why you could encounter some errors along the way due to various limitations or poor allocation of memory, and so on. One of the errors you might encounter when executing a command on Windows 10 and Windows Server is the “Not enough storage is available to process this command”. There are several potential fixes you can check out to fix this error. To fix this error, you can try to delete the temporary files in your computer, run the DISM tool or apply some registry tweaks. For more details, refer to each one of the given options below.

Option 1 – Try to delete the temporary files

The error could be caused by some temporary or junk files in your computer and so you need to clear them up to fix the problem. You can achieve that using the Storage Sense feature.
  • Open Setting > System > Storage from the WinX Menu.
  • From there, you will see a list of all the local and connected storage devices along with the details on the free space. Make sure that Storage Sense is on.
  • Next, find a link that says “Free Up Space” and click it to open.
  • After that, a screen which is the built-in program in Windows 10 will appear and will scan your computer for the following junk files so you can free up disk space:
    • Windows Upgrade Log Files
    • System created Windows Error Reporting Files
    • Thumbnails
    • Temporary Internet Files
    • Previous Windows Installation Files
    • Delivery Optimisation Files
    • DirectX Shader Cache
  • Choose the files you want to get rid of and then click on the remove files option. Note that you’ll have an idea of the total size as you select any of the junk files listed above.
  • Now go to the “Free Up Space Now” section and click the Clean now button. This will get rid of all the temporary or junk files in your computer and should hopefully fix Error 1310.

Option 2 – Run the DISM tool

You can also run the DISM Tool as it could also help in fixing the “Not enough storage is available to process this command” error in Windows 10. Using this built-in tool, you have various options such as the “/ScanHealth”, “/CheckHealth”, and “/RestoreHealth” that could help in fixing error 0x80246019.
  • You can run the DISM tool via Advanced Startup Options or you could boot your computer into a Clean Boot State and then select Command Prompt.
  • Open the Command Prompt with admin privileges.
  • Then type in the following commands and make sure to hit Enter right after you type each one of them:
    • Dism /Online /Cleanup-Image /CheckHealth
    • Dism /Online /Cleanup-Image /ScanHealth
    • exe /Online /Cleanup-image /Restorehealth
  • Do not close the window if the process takes a while as it will probably take a few minutes to finish. Once it’s done, restart your computer and try again. If it didn’t work, you can try to use the “/StartComponentCleanup” parameter: Dism /Online /Cleanup-Image /StartComponentCleanup

Option 3 – Try to use the Registry Editor

The memory range allocated for the tasks and commands to be executed is associated with the IRPStackSize DWORD. Thus, to fix the error, you need to extend the range by applying some registry tweak. Before you proceed, make sure that you create a System Restore point first. Once you’re done, follow these steps:
  • Tap the Win + R keys to open the Run dialog box and type “Regedit” in the field and tap Enter to open the Registry Editor.
  • Next, navigate to this registry key: ComputerHKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesLanmanServerParameters
  • From there, look for the DWORD named “IRPStackSize” and right-click on it. If you can’t find this DWORD, just right-click on any empty space and select New > DWORD (32-bit) Value.
  • Input “IRPStackSize” as the DWORD name and double click on it and set its Value data to be greater than its default value. Note that the maximum value allowed is “0xc” and the range starts from “0x1”.
  • Now click on OK and exit the Registry Editor and then restart your computer and see if the error is fixed.
Read More
1 2 3 171
Logo
Copyright © 2023, ErrorTools. All Rights Reserved
Trademark: Microsoft Windows logos are registered trademarks of Microsoft. Disclaimer: ErrorTools.com is not affiliated with Microsoft, nor claims direct affiliation.
The information on this page is provided for information purposes only.
DMCA.com Protection Status