Logo

Hive ransomware on Exchange servers

Hive ransomware has been targeting Microsoft exchange servers lately vulnerable to ProxyShell security issues in order to deploy various backdoors. Once the backdoor has been placed various attacks can be performed including but not limited to network reconnaissance, stealing admin accounts, taking valuable data, and even installing and deploying file-encrypting algorithms.

hive ransomware

ProxyShell wide abuse

ProxyShell is a set of three vulnerabilities in the Microsoft Exchange Server that allows remote code execution without authentication on vulnerable deployments. The flaw has been used in past by various ransomware like Conti, BlackByte, Babuk, Cuba, and LockFile.

Security vulnerabilities have been reported to be fully patched on May 2021 but how Hive was able to still be successful in exploiting PowerShell and infiltrating into the system there seems to be still some unpatched and open issues.

Hive

Hive has gone a long way since it was first observed in the wild back in June 2021, having a successful start that prompted the FBI to release a dedicated report on its tactics and indicators of compromise.

In October 2021, the Hive gang added Linux and FreeBSD variants, and in December it became one of the most active ransomware operations in attack frequency.

Last month, researchers at Sentinel Labs reported on a new payload-hiding obfuscation method employed by Hive, which indicates active development.

Do You Need Help with Your Device?

Our Team of Experts May Help
Troubleshoot.Tech Experts are There for You!
Replace damaged files
Restore performance
Free disk space
Remove Malware
Protects WEB browser
Remove Viruses
Stop PC freezing
GET HELP
Troubleshoot.Tech experts work with all versions of Microsoft Windows including Windows 11, with Android, Mac, and more.

Share this article:

You might also like

How to Turn On or Off Tailored Experiences
In this post, you will be guided on how you can turn on or turn off the Tailored Experiences feature in Windows 10 using three methods – via Settings, Registry Editor, and Group Policy Editor. The Tailored Experiences feature in Windows 10 helps Microsoft in delivering recommendations about Microsoft Products. The diagnostic data that comes with it allows Microsoft to know about its consumers’ experiences as well as collect feedback. To simply put it, tailored experiences are personalized tips, ads, and recommendations that enhance Microsoft products and services for consumer needs. And when you enable this feature, Windows will collect information from your browser, apps, features, and many more. After collecting information, it will offer contents that are tailored based on the data gathered on the lock screen of your computer, Windows tips, and other related functions. On the other hand, the diagnostic data is the one that allows Microsoft to get feedback from the customer. So if you’ve noticed some prompts when you use Windows that ask you about the experience, that’s actually a part of the diagnostic data. A lot of users find this feature useful. However, there are also skeptical ones that don’t share the same sentiments. If you are one of the skeptical ones, you actually have the option to turn this feature off if you do not want Microsoft to show ads, recommendations, and so on. It is also recommended that you enable the Diagnostic Data collection as you can choose to delete any collected data, as well as control the feedback frequency from Automatic to Once a day, or once a week, or to never. As mentioned, there are three methods you can choose from to either turn on or turn off Tailored Experiences. You can do it via Settings, Registry Editor, and the Group Policy Editor. To get started, follow the options provided below.

Option 1 – via Settings

To turn on or off Tailored Experiences using Settings, refer to these steps:
  • Go to Settings and here, click on Privacy.
  • Next, go to Diagnostic and Feedback.
  • From there, toggle off the control under the Tailored experiences option to turn it off or toggle it on, if you want to turn it on.

Option 2 – via Registry Editor

To turn on or off Tailored Experiences via Registry Editor, follow the steps below.
  • Tap the Win + R keys to open the Run dialog box and type “Regedit” in the field and then tap Enter to open the Registry Editor.
  • Next, navigate to this registry path: HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPrivacy
  • After that, look for the DWORD named “TailoredExperiencesWithDiagnosticDataEnabled” and change its value to 0 if you want to turn it off or 1 if you want to turn it on.

Option 3 – via Group Policy Editor

To turn on or off Tailored Experiences using the Group Policy Editor, here’s what you have to do:
  • Tap the Win + R keys to open the Run prompt and type “gpedit.msc” in the field and hit Enter to open the Group Policy Editor.
  • Next, navigate to this policy setting: User ConfigurationAdminstrative TemplatesWindows ComponentsCloud Content
  • Here, double click on the “Do not use diagnostic data for tailored experiences” option and select Enabled. Once you do that, you will see the following description:
“This policy setting lets you prevent Windows from using diagnostic data to provide tailored experiences to the user. If you enable this policy setting, Windows will not use diagnostic data from this device (this data may include browser, app, and feature usage, depending on the “diagnostic data” setting value) to customize the content shown on the lock screen, Windows tips, Microsoft consumer features, and other related features. If these features are enabled, users will still see recommendations, tips, and offers, but they may be less relevant. If you disable or do not configure this policy setting, Microsoft will use diagnostic data to provide personalized recommendations, tips, and offers to tailor Windows for the user’s needs and make it work better for them. This setting does not control Cortana tailored experiences, since there are separate policies to configure it.”
Read More
Problem running preinstall.cmd scripts
Setting up the Windows operating system in a computer can be quite a complicated task since there are a couple of things that take place in the background to ensure a full and protected setup of the operating system which includes a number of programs, scripts, and so on. They work together in the background to guarantee the integrity of the Windows operating system. However, there are times when this piece of code could also go wrong. As a result, you might encounter errors like the “There was a problem running preinstall.cmd scripts” error. “Preinstall.cmd” is a type of CMD file associated with Applications & Drivers developed by Gateway for the Windows OS. To fix the “There was a problem running preinstall.cmd scripts” error, there are several things you can try. You can try to download a new Windows installation image or create a new bootable drive as well as uninstall conflicting or incompatible programs. In addition, you can also run the Windows Update troubleshooter or reset Windows 10.

Option 1 – Try to download a new Windows installation image

Your first option to fix the “There was a problem running preinstall.cmd scripts” error is to download a new Windows installation image. You can get the official ISO files for the latest release of Windows 10. After you’ve downloaded the ISO files, you can use them to upgrade to the latest Windows 10 version.

Option 2 – Try creating a new bootable drive

  • Insert your USB drive into your PC.
  • Tap the Win + R keys to open the Run dialog box and type in “cmd” and tap Enter to open the Command Prompt. Alternatively, you can also search for “cmd” in the Cortana search box to open Command Prompt.
  • Once you’ve opened CMD, type in this command to open the DISPART utility – diskpart
  • After that, you should see a new black and white window that would say, “DISKPART>”.
  • Next, type in “list disk” in the command line and tap Enter to see the list of all the Storage devices as well as your hard disk connected to your PC. Here, you have to identify your disk’s number.
  • Type in this command where “X” is the disk number you have identified and then tap Enter – disk X
  • Type in this command and hit Enter to clear the table records and all the visible data on the drive – clean
  • Now you have to recreate a new primary partition of the drive so you’ll have to type in this command and tap Enter right after – create part pri
  • A new primary partition has been created so you have to select it by typing this command and tapping Enter – select part 1
  • Now you have to format it to make it visible to normal users by typing – format fs=ntfs quick
Note: If your platform supports the Unified Extensible Firmware Interface or UEFI, replace the “NTFS” with “FAT32” in the command on Step 10.
  • After that, type in this command and tap Enter after – active
  • Finally, type this command and hit Enter to exit the utility – exit
  • After you prepare the image for the operating system, save it to the root of your USB Storage device.

Option 3 – Try to uninstall conflicting programs

If you are using a computer made by Dell and got Windows 10 preinstalled in it, then you can try to uninstall the programs listed below and see if it fixes the problem.
  • Dell Encryption Management service
  • Dell Digital Library service

Option 4 – Run the Windows Update Troubleshooter

You might also want to run the built-in Windows Update Troubleshooter in Windows that could help you in resolving the “There was a problem running preinstall.cmd scripts” error. All you have to do is go to Settings > Update& security > Troubleshoot > Windows Update. From there, click on the Run the troubleshooter button and follow the next one-screen instructions that appear. After that, restart your computer and check if the error is now fixed or not by trying to install the update once again.

Option 5 – Run Microsoft’s online troubleshooter

Running Microsoft’s online troubleshooter might also help you fix the error. This online troubleshooter is known to help in fixing Windows Update errors, it scans your computer for issues that might be causing the problem and then fixes them automatically.

Option 6 – Try to reset Windows 10

  • Tap the Win key or click on the Start button located in the Taskbar.
  • Then click on the Power button at the bottom right portion of the screen.
  • Next, press and hold the Shift key on your keyboard and then click on Restart. This will restart your Pc into the Advanced Startup options.
Note: Once you have access to the Advanced Startup options, you have to go to the setting which allows you to Reset your Windows 10 PC. All you have to do is select Troubleshoot > Reset this PC to reach the following screen Afterward, select either the “Keep my files” option and then proceed to the next on-screen instructions that follow to reset your Windows 10 computer without losing your files.
Read More
Fix Invalid Product Key or Version mismatch
If you suddenly encounter Activation Error codes such as 0xC004E016, 0xC004F210, 0xC004F034, and 0xC004F00F on your Windows 10 computer, then they all point to the same issue – Invalid Product Key or Version mismatch. When you see any of the aforementioned error codes above, it indicates that you are either entering a wrong product key or you are using an incorrect ISO when installing it on your computer. In such cases, you may see either of the following error messages:
“You are running Windows 10 Pro, but you have a valid digital license for Windows 10 Home.” Or: “The specified product key is invalid or is unsupported by this version.”
If you got the error code 0xC004F00F then it means that you’ve entered a product key for the Enterprise edition of Windows to activate Windows 10 Pro or Windows 10 Home. It could be that you have a key from your work and you accidentally use it on your Home PC. If you got the error codes 0xC004E016, 0xC004F210, then it means that you have entered a product key that is meant for a different edition or version of Windows. On the other hand, if you got the error code 0xC004F034 instead, then it means that you have entered an invalid product key or a product key for a different Windows version. Whichever error codes you have, refer to the possible solutions given below to fix the Invalid Product Key or Version mismatch Activation Error in Windows 10.

Option 1 – Try running the Windows 10 Activation Troubleshooter

The first thing you can do to resolve this Activation error is to run the Windows 10 Activation Troubleshooter. To do so, follow these steps:
  • Go to Settings and then select Activation.
  • After that, click on the Windows Activation and then troubleshoot. This will help you address most of the commonly found activation issues in Windows devices.

Option 2 – Try purchasing a new license

There is an exception offered by Microsoft – if you are connected to a Microsoft account prior to the hardware change, then you can most certainly use the same license key to reactivate Windows 10 again. Microsoft calls this an “Exception path” which should be fixed easily by the Windows Activation Troubleshooter as pointed out earlier. However, if the Windows Activation Troubleshooter isn’t able to resolve the error you can try purchasing a new license. In such rate case, even if you do have a Microsoft account available on your Windows 10 computer, and if Windows was never activated, this solution will not work. And if you haven’t connected your Microsoft account with your Windows 10 computer prior to the major hardware change, then your only option left is to purchase a new license. For you to do that here are some steps you can follow.
  • To purchase a new Windows license, the first thing you have to do is click on the Start button > Settings > Update & Security.
  • From there, go to Activation and select the “Go to Microsoft Store” option.
  • After receiving your new license, you need to go back to Update & Security then go to Activation and select the “Change product key” option.
  • Now update your Windows 10 computer using the new key and it should automatically activate your computer.
  • Next, you have to create a Microsoft account or connect to your existing local account to your online account.
  • Once the system links the key and the account, you need not buy a new license in case something like this happens again.
Note: If you are an IT administrator, you need to keep in mind that there is a limit to the number of times you can reactivate Windows on your computer. Moreover, if you don’t see any option to reactivate the license, and it is a work computer, you need to contact your organization’s tech support.

Option 3 – Try activating Windows 10 via mobile phone

Activating Windows 10 can also be done using your phone. Just note that you have to call Microsoft to do so.
  • In the Start Search box, type in “Slui 4” and tap Enter.
  • Next, select your country and click on Next.
  • Keep the window open and call the toll-free number of the country you’re from.
  • Afterward, a confirmation ID should be given by the automated system which you must take a note of.
  • Finally, in the box on the window, type in the confirmation ID and click on the Activate button. That should do it.
Read More
Resume an Interrupted Download in Chrome
Where all have been there, we are downloading something and for any kind of reason chrome closes, internet breaks, etc. And our download is interrupted and gone forever, and we need to start again. You will be glad to hear that chrome has side a download manager which tracks each download you made and you can use this manager to resume interrupted downloads. Please note that some websites have certain scripts that will prevent you to resume interrupted downloads, in this case, using chrome's download manager will not work and you will have to start the download again. All of this being said, if your download has been interrupted, and went away, pin Chrome press CTRL + J to open download manager, find your interrupted download, and press the resume button. That's it, you have successfully resumed your download.
Read More
How to remove FindWide

FindWide is a browser add-on for Internet Explorer. This addon Hijacks your home page and internet search provider changing it to search.findwide.com. Alternate versions change the homepage to search.us.com.

This addon monitors your user activity while you are surfing the web. It collects user and browsing data, that it uses to better display targeted ads. While browsing with this addon enabled you will see additional ads, sponsored links, and even sometimes pop-up ads displaying throughout your browsing sessions.

Several anti-virus programs have marked this addon as a Browser Hijacker and is therefore not recommended to keep on your computer.

From the Author: Each search engine has its own method of searching and each will return different results. Findwide.com looks at all of them, decides which are most relevant to your search, eliminates duplicates, and reveals them to you. In the end, you get a list of results more complete than using any one search engine alone.

Help! Malware Blocking Antivirus Installation And Access To The Internet

Viruses could cause plenty of damage to your computer. Some malware is meant to restrict or block things that you wish to do on your personal computer. It may well not permit you to download anything from the net or it will stop you from accessing some or all websites, especially the anti-malware websites. If you’re reading this, you probably have got infected by a virus that prevents you from installing a computer security program like Safebytes Antimalware on your PC. Even though this kind of problem can be tougher to get around, there are some steps you can take.

Download the application in Safe Mode with Networking

If any virus is set to run automatically when Microsoft Windows starts, entering Safe Mode could block the attempt. Since only the bare minimum applications and services launch in safe mode, there are seldom any reasons for conflicts to take place. To launch your Windows XP, Vista, or 7 PCs in Safe Mode with Networking, follow the instructions below. 1) Press the F8 key continuously as soon as your computer boots, but before the big Windows logo comes up. This will bring up the Advanced Boot Options menu. 2) Choose Safe Mode with Networking using arrow keys and press ENTER. 3) When you are into this mode, you will have online access again. Now, utilize your browser to download and install Safebytes. 4) Following installation, do a full scan and let the software get rid of the threats it discovers.

Switch over to an alternate web browser

Certain malware might target vulnerabilities of a specific web browser that obstruct the downloading process. In the event you suspect that your Internet Explorer has been hijacked by malware or otherwise compromised by hackers, the best course of action is to switch over to an alternate internet browser such as Chrome, Firefox, or Safari to download your chosen computer security application – Safebytes Anti-Malware.

Install antivirus on a USB drive

Here’s another solution which is using portable USB anti-malware software that can scan your computer for malicious software without needing installation. Follow these steps to run the anti-malware on the affected computer system. 1) Download Safebytes Anti-Malware or MS Windows Defender Offline onto a clean computer. 2) Plug the Flash drive into the uninfected computer. 3) Double-click the exe file to open the installation wizard. 4) When asked, select the location of the pen drive as the place in which you want to put the software files. Follow the directions to complete the installation process. 5) Transfer the USB drive from the clean PC to the infected PC. 6) Double-click the anti-malware software EXE file on the thumb drive. 7) Press the “Scan” button to run a full computer scan and remove malware automatically.

Protect Your PC & Privacy With SafeBytes Anti-Malware

To help protect your computer or laptop from various internet-based threats, it is very important to install anti-malware software on your computer system. However, with countless numbers of antimalware companies in the marketplace, nowadays it is actually challenging to decide which one you should obtain for your laptop. A few are good ones, some are decent, while some are simply just fake anti-malware software that will harm your PC themselves! You must be careful not to choose the wrong product, especially if you buy a premium program. Among few good applications, SafeBytes Anti-Malware is the highly recommended program for security-conscious people. SafeBytes anti-malware is a trustworthy tool that not only protects your PC completely but is also very easy to use for people of all skill levels. With its cutting-edge technology, this application can help you eliminate multiples types of malware like computer viruses, trojans, PUPs, worms, ransomware, adware, and browser hijackers. SafeBytes anti-malware offers an array of advanced features which sets it apart from all others. The following are some typical features present in this computer software: Real-time Threat Response: Malware programs attempting to enter the system are discovered and stopped as and when detected by the SafeBytes active protection shields. This tool will always monitor your PC for any suspicious activity and updates itself continuously to keep current with the latest threats. Robust Anti-malware Protection: By using a critically acclaimed anti-malware engine, SafeBytes offers multilayered protection that is made to catch and eliminate threats that are concealed deep inside your computer. Web Filtering: Through its unique safety score, SafeBytes alerts you whether a website is safe or not to visit it. This will assure that you’re always certain of your safety when browsing the net. Lowest CPU/Memory Usage: SafeBytes is well-known for its low effect on computer resources and great detection rate of countless threats. It runs quietly and efficiently in the background so you are free to use your computer at full power all the time. Fantastic Technical Support: Support service is accessible 24 x 7 x 365 days via chat and email to answer your queries. To conclude, SafeBytes Anti-Malware is really great for securing your computer against all sorts of malware threats. Once you’ve installed SafeBytes Anti-Malware, you will no longer have to bother about malware or other security concerns. If you’re searching for a comprehensive antivirus program that’s still easy to use, SafeBytes Anti-Malware is just what you need!

Technical Details and Manual Removal (Advanced Users)

If you do not wish to use an automated tool and like to eliminate FindWide manually, you could possibly do so by going to the Windows Add/Remove Programs menu in the Control Panel and deleting the offending program; in cases of browser plug-ins, you can uninstall it by visiting the browser’s Add-on/Extension manager. You might also want to reset your home page and search engine providers and also clear your browser cache and cookies. Finally, examine your hard disk for all of the following and clean your Windows registry manually to remove leftover application entries following uninstalls. But bear in mind, this is often a complicated task and only computer professionals could perform it safely. In addition, some malware is capable of replicating or preventing removal. Carrying out this malware-removal process in Safe Mode is suggested.
Files: C:\Documents and Settings\%USERNAME%\Local Settings\Application Data\TNT2.0.0.1599\Autorun.inf C:\Documents and Settings\%USERNAME%\Local Settings\Application Data\TNT2.0.0.1599\crx.tar C:\Documents and Settings\%USERNAME%\Local Settings\Application Data\TNT2.0.0.1599\ffassist.1.dll C:\Documents and Settings\%USERNAME%\Local Settings\Application Data\TNT2.0.0.1599\GLOBALUNINSTALL.TNT C:\Documents and Settings\%USERNAME%\Local Settings\Application Data\TNT2.0.0.1599\hmac.1.dll C:\Documents and Settings\%USERNAME%\Local Settings\Application Data\TNT2.0.0.1599\iehpr.1.dll C:\Documents and Settings\%USERNAME%\Local Settings\Application Data\TNT2.0.0.1599\iestage2.1.dll C:\Documents and Settings\%USERNAME%\Local Settings\Application Data\TNT2.0.0.1599\IEToolbar.dll C:\Documents and Settings\%USERNAME%\Local Settings\Application Data\TNT2.0.0.1599\IEToolbar64.dll C:\Documents and Settings\%USERNAME%\Local Settings\Application Data\TNT2.0.0.1599\INSTALL.TNT
Read More
Some Steam tips and tricks for easy life
steamSteam has cemented itself as the largest digital game shop in the World. First, release all the way back on September 12th, 2003, it was meant to be a standalone software client aimed to deliver updates to Valve’s games. It was soon expanded to include titles from third parties. The greatest Steam expansion and its popularity started in 2004 with the release of Half-life 2. Steam allowed prepurchased editions to be downloaded before the official release of the game making it available for play the moment it was officially out. Very soon after Steam gained its popularity, Valve has opened doors to other developers and offered them to use Steam as means for a digital distribution platform. Today it hosts over 30000 different game titles, not including DLC or applications. And how soon Valve’s steam deck is coming out soon we would like to share some great tips and tricks about Steam itself for easy everyday gaming.

Steam guard account security

Security of any of your accounts should be something that you really take seriously. So as always use a strong password for Steam but if you want an extra layer of security for it, and you should, use the Steam built-in feature: Guard Account Security. In order to activate Security Guard go to Steam>Settings>Account>Manage Steam Guard Account Security. Once enabled you will be able to use the Steam mobile application for special code when opening Steam or your email address.

Use Steam beta feature

Once a Steam account is created by default you will download and install the client. In the client, you will have the latest features available but there are more Steam features than default ones, beta features that can offer some improved and new functionality, and do not worry, they are stable and bug-free. I have been in Steam beta for years and not even once have I had any issues with the client itself but I have always had the latest features that will come to regular users later. To enable beta participation to go to Steam>Settings>Account, open the drop-down Beta participation menu, and choose Steam Beta Update. Confirm on OK and restart the Steam client. You will now get all the latest features first.

Manage your library via Collections

The collection is a neat idea for organizing your large game library into different collections or sections easily expanded and contracted for easier navigation and organization. To add the game to a collection just right-click on it and select Add To>New Collection, make a name for a collection like action, RPG, or whatever rocks your boat, and you are done. Once the collection is created other games can be added to it simply just by dragging it into the desired collection.

Make shelves

Shelves are ways to see your collections in the larger areas of the Steam clients. By clicking Add Shelf>Choose a Shelf, you can now add your collection to a shelf on the larger part of the client as a horizontal scrolling container with your chosen games. There are also some predefined shelves like All Games, Recent friend activity, and more.

Hide Game from Library

By right-clicking on a game and selecting Manage>Hide This Game you will remove the game from the active view of your Steam library. Note that the game will still be owned and a part of your library, you will just not be able to see it. This is a great feature when for example you have some things that came as a part of the game pack you are not really interested in when you have 2 different versions of the same game as for example standard and deluxe edition or just by simply not wanting to have game visible in the library. You can find a hidden game by typing its name in the search box and from there you can unhide it.

Play game soundtracks inside Steam

Some games offer you to purchase their soundtracks if you like music from them and some even include OST with a regular purchase. Steam lets you play these soundtracks and even lets you import your own music library folder into it in order to play all of your music inside the client itself. It has even options to automatically stop music playing once the game is run and you can make playlists as well. Your purchased game soundtracks are automatically included, the rest you will need to add by pointing Steam to the folder where you keep music in.

Configure gamepad

Inside Steam, you can configure your gamepad’s general settings, big picture settings, desktop settings, etc. Steam embraced the idea that many OC users these days own and play with gamepads so it has implemented configuration options inside it. To configure your pad go to Steam>Settings>Controller.

Use big picture Steam mode

Big picture mode is Steam's idea of making Steam an entertainment center. Once it is activated it switches from the application into full-screen mode aimed at large TV screens or monitors. You can easily navigate through it via gamepad, mouse, keyboard, or other devices. You have access to the store, your game library, etc. Same as your typical steam app but a little different. You can easily activate it via View> Big Picture Mode and see for yourself is this something you prefer over a standard application layout.

Enable Steam Cloud

Steam Cloud is a great feature that uses cloud storage to save your game progress meaning that you can easily switch to another PC, install games there and continue where you have left off. Many games support this feature instead of keeping saves locally and it is a great feature worth turning it ON. To turn and use Steam Cloud service go to Steam>Settings>Cloud>Enable Steam Cloud Synchronization. Just remember to check does game you are playing supports this option.

Share your Games via Family sharing

Family sharing is a Steam feature allowing you to share your game library with up to 5 accounts on up to 10 different devices. This is a great way to let other members of your family or even close friends enjoy some games you have or vice versa. They will get as well their own save games so you can sleep safe knowing that your progress can not be changed or hindered. Family sharing can be turned ON by logging into PC Steam client where you would like to share your library and navigate to Steam>Settings>Family and then clicking on Authorize Library Sharing On This Computer.

Refund a game

Sometimes the game is not the same as advertised, sometimes it will not work on your PC, sometimes hardware specifications are too high making the game unplayable, etc. For whatever reason, you might have Steam offers you a full game price refund if you wish to do so, you only need to meet 2 criteria, the game must have been purchased within 2 weeks period, older purchases cannot be refunded, and your game playtime must not be over 2 hours of game time. If you fit into this category all you need to do in order to get the full money back is going to Help>Steam Support, pick a recent game from the eligible list, and ask for a refund.

Gift a game

As you can buy gifts for your friends or loved ones in real life, Valve made sure you can do it in digital as well. Gifting game via Steam is simple and straightforward. Choose a game you wish to gift, go to your shopping cart and instead of clicking Purchase for myself, click on Purchase As a Gift, from there you will be taken to your friend list to choose to whom you would like to gift a game along with the option to write a little note to the receiver like happy birthday, enjoy or whatever.

Stream games in Steam itself

Although Steam is not there yet in streaming as Twitch or Facebook gaming is, there is an option to stream your game sessions on it. Click on Steam>Settings>Broadcast to make all adjustments and start streaming. You can also watch streams from your friend list and Steam is now broadcasting popular streams directly to its client if you want to watch it.

Take a game screenshot

By pressing F12, you can take a screenshot from any game and save it inside your Steam cloud library. You can change of course this default screenshot key via Settings>In-Game and if you would like to see your screenshots you can always do it under View Screenshot Library on a game’s page. That’s it, our Steam tips and tricks for easy and good gaming life, I hope to see you soon on errortools.com for your daily articles, tips, and tricks.
Read More
How to Fix the Error 0X80070005

0X80070005 - What is it?

0x8007005 is a Windows Error Code. You may come across this error if you don’t have the appropriate permission to install a particular Windows update. It is prompted as ‘Access Denied’ error message. Solution

Restoro box imageError Causes

The error code 0x80070005 usually triggered because of 2 reasons:
  1. Some updates require administrative permissions to be installed
  2. Due to malware and viruses

Further Information and Manual Repair

If you face this error while installing Windows updates on your PC, it is advisable to fix it immediately. By taking timely actions, you can update your PC easily and in case if the cause of the error code 0x80070005 is malware or some virus, you can stop it from causing more and serious damage to your system.  Sometimes malware and viruses can lead to data loss. To avoid such damages here’s what you need to do:

Cause: Updates require administrative permission

Quick Fix: If the 0x8007005 error occurs on your system due to administrative permission issues, then the best way to fix this error right away is to log on as an administrator. If there are many user accounts on your PC, then to resolve this error, make sure you log on using the user account that has administrator permissions on the computer. Once you log on as an administrator, now try to install the updates again.

Cause: Malware and Viruses

Quick Fix: If the error 0x80070005 occurs because of malware infection, the best way to resolve this error would then be to open your antivirus software and run a scan to detect the malware. However, if you don’t have antivirus software installed on your system, then it is advisable to download the software immediately. Download antivirus software. To be on the safe side download Microsoft Safety Scanner. Click on the run when prompted. Once the scanner is installed on your PC create a shortcut to Safety Scanner on your computer desktop so that it is easily accessible. Now double click on the icon and click on the full scan tab to start scanning for malware and viruses on your system. After the scan is complete, you will see a list of viruses on your PC. Now remove them all by hitting the delete tab and then repair. Now try installing the updates again. By following these quick-fix techniques, you can easily resolve the error 0x80070005 on your system by yourself, without calling an IT professional.
Read More
Manually cleaning your PC registry
Manually cleaning your PC registry may be the worst or best thing you ever decide to do. Registry keys that lie around on your computer, unused, can cause your computer to lag. This can end up in your computer not being able to load the easiest of programs and being slow at loading anything, let alone something that would take up a decent amount of memory. If your computer has slowed to almost an absolute stop, it is most probably the registry’s fault and the only option then is to clean it. You can get programs to do this for you, but they can be riddled with inaccuracies and viruses that could harm your computer even more. This is why some people choose to manually edit their computer. However, this is not without its flaws.

Registry Keys

Registry keys tend to have really long names. These names will be full of numbers and hyphens and will most likely give you no indication of what they do. Even some computer experts find it hard to understand what every computer’s registry keys do. This can make it very hard to see which ones are causing the problem; and if you don’t know what’s causing the problem, then there is no way you will be able to fix it. Some registry keys will be completely menial in what they do but some could be vital to even allow Windows to work on your computer.

Manual Registry Repair

Registry keys can also cause huge problems if you manually delete the wrong one. A lot of registry cleaners have the option to revive a key that they have deleted on you, which means that fixing an error that they made would be easy enough to do. However, when you manually delete registry keys, it will be an awful lot harder to get them back to work again afterward. This can cause your computer many problems and if you delete even one wrong key it is possible your computer will not even start. With the horrid naming system they have as well, it makes it very hard to determine what is important and what is not, which means it is all too likely that you will delete something important. However, those are the risks you have to take when you are cleaning out your registry. A registry cleaner has the same likelihood of messing with your computer and deleting something wrong that you have, so it is the same either way however a registry cleaner will do it with less hassle. But, some people say that if you do it yourself, it’s more likely to be right; that is why they prefer to do it manually and that is alright.

Conclusion

So, if you are manually deleting your registry keys that are unused, you’ll have to use a program that comes with Windows known as ‘regedit.exe’ which is incredibly difficult to use but may just be worth the hassle in the end. So, you don’t really need to put up with a slow computer, but be careful when messing with your registry manually! To repair and resolve this and other PC-related issues Click Here to download Restoro.
Read More
Hive ransomware on Exchange servers

Hive ransomware has been targeting Microsoft exchange servers lately vulnerable to ProxyShell security issues in order to deploy various backdoors. Once the backdoor has been placed various attacks can be performed including but not limited to network reconnaissance, stealing admin accounts, taking valuable data, and even installing and deploying file-encrypting algorithms.

hive ransomware

ProxyShell wide abuse

ProxyShell is a set of three vulnerabilities in the Microsoft Exchange Server that allows remote code execution without authentication on vulnerable deployments. The flaw has been used in past by various ransomware like Conti, BlackByte, Babuk, Cuba, and LockFile.

Security vulnerabilities have been reported to be fully patched on May 2021 but how Hive was able to still be successful in exploiting PowerShell and infiltrating into the system there seems to be still some unpatched and open issues.

Hive

Hive has gone a long way since it was first observed in the wild back in June 2021, having a successful start that prompted the FBI to release a dedicated report on its tactics and indicators of compromise.

In October 2021, the Hive gang added Linux and FreeBSD variants, and in December it became one of the most active ransomware operations in attack frequency.

Last month, researchers at Sentinel Labs reported on a new payload-hiding obfuscation method employed by Hive, which indicates active development.

Read More
Fix Update and MS Store Error code 0x80070424
As you know, both the Windows Update and Windows Store are inter-dependable services in Windows 10 operating system. So when one of these services encounters an error like the “0x80070424, ERROR_SERVICE_DOES_NOT_EXIST”, the other service will most likely get this error as well. Note that this kind of error can occur to both the Windows Update Standalone Installer and to the Windows Update section in the Windows 10 Settings app. Some users also reported getting this error while trying to update Windows Defender as well. You can see the following error message in the Windows Update Standalone Installer:
“Installer encountered an error: 0x80070424, The specified service does not exist as an installed service.”
While you’ll see the following error message in the Windows Store:
“The were some problems installing updates, but we’ll try again later. If you keep seeing this and want to search the web or contact support for information, this may help: (0x80070424).”
To fix this error, you can try to re-register the Background Intelligent Transfer Service DLL file or run the Windows Update and Store apps troubleshooters. You can also reset the Windows Update-related folders or the Microsoft Store or fix the Windows Update files by using the DISM tool. On the other hand, you can also use the Registry Editor or check Windows Services. For more details regarding these potential fixes, refer to each one of the given options below.

Option 1 – Try to re-register the Background Intelligent Transfer Service DLL file

You may have to re-register the Background Intelligent Transfer Service DLL file using the regsvr32.exe before you can successfully install the program and fix ntdll.dll file crash error. The Regsvr32 tool is a command-line utility that can be used to register and un-register OLE controls as DLL and ActiveX (OCX) controls in the Windows operating system. Follow the steps below to use it.
  • Open Command Prompt as admin from the WinX menu.
  • Next, type the following commands in the elevated Command Prompt and hit Enter to execute the command. This will re-register the affected DLL file using the Windows operating system tool, regsvr32.exe.
    • regsvr32 Qmgr.dll /s
    • regsvr32 Qmgrprxy.dll /s
Note: Replace “[DLL file]” with the name of the DLL file that was pointed out in the error.
  • After you execute the given commands, you should see a message saying, “DllRegisterServer in vbscript.dll succeeded” if the Regsvr32 tool was able to run successfully.
  • Now restart your computer and check if the error is now fixed.

Option 2 – Try to run the Windows Store or the Windows Update Troubleshooters

The Windows 10 Store Apps Troubleshooter will help you in fixing the Error code 0x80070424. This is a great built-in tool from Microsoft that helps users fix any app installation issues. So this is worth a try to solve the problem. This built-in tool also helps you fix the Windows 10 Store if it isn’t working. To use the Windows Store Troubleshooter, follow the steps below.
  • Tap Win + I keys again to open the Windows Settings panel.
  • Go to Update & Security and then go to Troubleshoot.
  • On your right hand side, scroll down to find the Windows Store Apps and then click on Run the troubleshooter option and see if it fixes the problem.
Note: You can also try running the Windows Update troubleshooter to fix the error. You can run it under the Windows Update section of Update & Security.

Option 3 – Delete the files from Software Distribution Folder & Catroot2 folders

The downloaded Windows Updates are placed in a folder called “SoftwareDistribution”. The files downloaded in this folder are automatically deleted once the installation is completed. However, if the files are not clean up or if the installation is still pending, you can delete all the files in this folder after you pause the Windows Update service. For complete instructions, refer to these steps.
  • Open the WinX Menu.
  • From there, open Command Prompt as admin.
  • Then type in the following command – don’t forget to hit Enter right after typing each one of them.
net stop wuauserv net start cryptSvc net start bits net start msiserver
  • After entering these commands, it will stop the Windows Update Service, Background Intelligent Transfer Service (BITS), Cryptographic and the MSI Installer
  • Next, got to the C:WindowsSoftwareDistribution folder and get rid of all the folders and files there by tapping the Ctrl + A keys to select them all and then click on Delete. Note that if the files are in use, you won’t be able to delete them.
After resetting the SoftwareDistribution folder, you need to reset the Catroot2 folder to restart the services you just stopped. To do that, follow these steps:
  • Type each one of the following commands.
net start wuauserv net start cryptSvc net start bits net start msiserver
  • After that, exit Command Prompt and restart your computer and then try to run Windows Update once more.

Option 4 – Try to reset the Microsoft Store cache

Just like browsers, Microsoft Store also caches as you view apps and games so it is most likely that the cache is no longer valid and must be removed. To do so, follow the steps below.
  • Right click on the start button and click on Command Prompt (administrator).
  • Next, type in the command, “wsreset.exe” and tap Enter. Once you do, the command will clear the cache for the Windows Store app.
  • Now restart your PC and afterwards, try opening Microsoft Store again and then see if Error Code 0x80070424 is resolved or not.

Option 5 – Try to check the Windows Update or WU setting in the Registry

  • Tap the Win + R keys to open the Run utility and type “regedit” in the field and tap Enter to open the Registry Editor.
  • Next, go to this registry path: ComputerHKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsWindowsUpdate
  • Here, look for the DWORD named “DisableWindowsUpdateAccess” and double click on it and then set its value data to “0”.
  • Exit the Registry Editor once you’re done and restart your computer.

Option 6 – Try to check the status of some Windows Update Services

  • Tap the Win + R keys to open the Run dialog box.
  • Next, type “services.msc” in the field and hit Enter or click OK to open Services.
  • From the list of Services, look for the following services and make sure that their Startup type is as follows:
    • Windows Update Service – Manual (Triggered)
    • Background Intelligent Transfer Service – Manual
    • Workstation Service – Automatic
  • After that, check if the Service status of the listed services above are set to Running. If they’re not, click on the Start button to start these services and then check if you can now enable the Windows Update service or not.

Option 7 – Run the DISM tool

You can also run the Deployment Imaging and Servicing Management or DISM tool to fix the error code 0x80070424. Using this built-in tool, you have various options such as the “/ScanHealth”, “/CheckHealth”, and “/RestoreHealth”.
  • Open the Command Prompt with admin privileges.
  • Then type in the following commands and make sure to hit Enter right after you type each one of them:
    • Dism /Online /Cleanup-Image /CheckHealth
    • Dism /Online /Cleanup-Image /ScanHealth
    • exe /Online /Cleanup-image /Restorehealth
  • Do not close the window if the process takes a while as it will probably take a few minutes to finish.
  • Once it’s done, reboot your computer and check if it has fixed the error.
Read More
1 2 3 171
Logo
Copyright © 2023, ErrorTools. All Rights Reserved
Trademark: Microsoft Windows logos are registered trademarks of Microsoft. Disclaimer: ErrorTools.com is not affiliated with Microsoft, nor claims direct affiliation.
The information on this page is provided for information purposes only.
DMCA.com Protection Status