Hive ransomware on Exchange servers

Hive ransomware has been targeting Microsoft exchange servers lately vulnerable to ProxyShell security issues in order to deploy various backdoors. Once the backdoor has been placed various attacks can be performed including but not limited to network reconnaissance, stealing admin accounts, taking valuable data, and even installing and deploying file-encrypting algorithms.

hive ransomware

ProxyShell wide abuse

ProxyShell is a set of three vulnerabilities in the Microsoft Exchange Server that allows remote code execution without authentication on vulnerable deployments. The flaw has been used in past by various ransomware like Conti, BlackByte, Babuk, Cuba, and LockFile.

Security vulnerabilities have been reported to be fully patched on May 2021 but how Hive was able to still be successful in exploiting PowerShell and infiltrating into the system there seems to be still some unpatched and open issues.

Hive

Hive has gone a long way since it was first observed in the wild back in June 2021, having a successful start that prompted the FBI to release a dedicated report on its tactics and indicators of compromise.

In October 2021, the Hive gang added Linux and FreeBSD variants, and in December it became one of the most active ransomware operations in attack frequency.

Last month, researchers at Sentinel Labs reported on a new payload-hiding obfuscation method employed by Hive, which indicates active development.

Do You Need Help with Your Device?

Our Team of Experts May Help
Troubleshoot.Tech Experts are There for You!
Replace damaged files
Restore performance
Free disk space
Remove Malware
Protects WEB browser
Remove Viruses
Stop PC freezing
GET HELP
Troubleshoot.Tech experts work with all versions of Microsoft Windows including Windows 11, with Android, Mac, and more.

Share this article:

You might also like

Show more/less details when copying/moving
When we initiate the copy or move files command we get a dialog that shows us the progress of the current operation, under that bar we can click on the little arrow to expand the bar into so-called more details view where we get more information like which file is being copied, more detailed graph, etc. Windows will remember the last option we had and next time when we start the same process it will open the last view. But what if we want to only have one view always open as default, even if we change it? Let's say that we always want to have a detailed view opened always as our default even if we switch to a minimal one? Well with some tweaks in the registry of Windows we can. Note that this guide will require changing things in the registry of Windows itself, it is always smart and recommended to make a safe backup of your registry, just in case.

FOR ALWAYS SHOW MORE DETAILS FOLLOW THIS GUIDE:

open notepad and paste the following code inside: Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\OperationStatusManager] "EnthusiastMode"=dword:00000001 Go to File > Save as... and once the file save dialog opens choose at the bottom all files under file type. Save the file with extension .REG naming it whatever you want. Right-click on file and choose Merge, confirm with YES and you are done, now each time when you start copy or move operation details view will be open.

FOR ALWAYS SHOW FEWER DETAILS FOLLOW THIS GUIDE:

open notepad and paste the following code inside: Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\OperationStatusManager] "EnthusiastMode"=dword:00000000 Go to File > Save as... and once the file save dialog opens choose at the bottom all files under file type. Save the file with extension .REG naming it whatever you want. Right-click on file and choose Merge, confirm with YES and you are done, now each time when you start copy or move operation minimal details view will be open.
Read More
Rise of video-making AI

Recently Meta has gone viral that it is working on an AI video-making algorithm named Make a Video. AI will like in picture making AI take text input and produce a video from it.

Now, a new player enters the AI video battlefield, its name is GOOGLE!

google ai

The Google research project Imagen Video is also text to video generator similar to Meta's Make a Video with one little difference. unlike Meta's offering which includes only sign-up, Google is withholding access for now under the veil of safeguarding issues.

Google has been in the Ai space before with their Imagen, a DALL-E style generator capable of photorealistic picture generation based on text prompts. The new Google tool works in a similar way but with better functions. Ai can generate a diverse range of high-fidelity videos across different aesthetic styles and with a deep understanding of 3D models thus creating high-definition, 24-frames-per-second videos.

"With the help of progressive distillation, Imagen Video can generate high-quality videos using just eight diffusion steps per sub-model. This speeds up video generation time substantially, by a factor of ~18x,”

Jonathan Ho, author of the research paper

Despite filtering for “undesirable content”, the team admits “there is a risk that Imagen has encoded harmful stereotypes and representations”. So, until the AI - and its users - can be trusted, Google refuses to release Imagen Video without additional safeguards in place.

Read More
Headphones are not visible in playback devices
If you connected headphones to your Windows 10 computer to listen to audio but when you check it in the playback devices, you’re not able to find it, read on as this post will guide you in what you can do to figure out what exactly caused this kind of problem and how you can resolve it. This kind of issue could simply be with the headphone itself or the headphone port or your operating system. So if it turns out that the problem is with the hardware, you might have to replace the components. However, it is recommended that you troubleshoot the problem first before doing that. The most basic thing you can do is to try changing the headphone port, although this can be quite difficult since most computers don’t have any extra port for headphones if your computer has one, then give it a go. If it still didn’t work, follow each one of the options provided below.

Option 1 – Try to run the Playing Audio troubleshooter

Since the Windows 10 operating system has the Playing Audio Troubleshooter, you can use this troubleshooter to try and fix the problem with the “No Audio Output Device is installed” error. You can access this tool in the Control Panel or in the Taskbar Search and even on the Troubleshooters page of Windows 10. Run this troubleshooter and see if it can fix the issue or not.

Option 2 – Try to update the Audio driver

If the error has something to do with software, chances are it might be related to the audio driver – it could be that the newest version of your Windows 10 does not work well with the old version of the driver. This is why you have to update your audio driver to the newest available version.
  • Tap the Win + R keys to open the Run dialog box and then type in MSC and tap Enter or click OK to open the Device Manager.
  • Expand the section of the Audio inputs and outputs.
  • And then from the drop-down menu, select the Update Driver option and follow the on-screen instructions to install the latest version of the driver.
  • Then also click on the option, “Search automatically for updated driver software.
  • Restart your PC after the installation.
Note: If updating the Audio driver didn’t work, you can go to the website of your PC manufacturer and look for the support section where you can download the drivers for your computer. You just need to take note of your PC’s correct model and model number so you can find the appropriate driver.

Option 3 – Try enabling the headphones from the playback devices

  • Tap the Win + R keys to open the Run dialog box and type the “CPL” command.
  • Tap Enter to open the Playback devices.
  • Next, right-click on any open space section and check the boxes for the “Show Disconnected Devices” and “Show Disabled Devices” options.
  • After that, this should help in displaying the headphones in the section of Playback devices.
  • And if they are disabled, you can just right-click them to have them enabled.
Read More
Fix 0x00000016 Blue Screen Error
If you are a gamer, you might have encountered either the CID HANDLE CREATION or VIDEO TDR ERROR errors with an error code of 0x00000016 as you play a game. These kinds of Stop errors have something to do with the Graphics card driver. It could be that your Graphics card driver needs to be updated or it may be corrupted. Whichever the case is, you can try fixing this error using the given solutions below but before you proceed, make sure to create a System Restore Point first so that you can easily roll back to the previous state of your computer in case something does not go as expected.

Option 1 – Try checking if your graphics card is enabled and update it as well

Although the problem is quite massive, the fix could be as simple as enabling the graphics card if it turns out to be disabled. There might be some strange reason why your graphics card disables itself. Thus, the best and first option you can try is to check if the graphics card is enabled or not. To do so, follow these steps:
  • Tap the Win + R keys to open the Run dialog box.
  • Then type “devmgmt.msc” in the field and hit Enter to open the Device Manager.
  • After opening the Device Manager, look for your graphics card option among the list of device drivers. Once you found it, check if it is enabled or not. If it’s not enabled, you should see a gray arrow pointing downwards. Right-click on the card and select Enabled.
  • Next, right-click on the graphics card once more and click on the Update Driver Software option and then click on the “Search automatically for updated driver software” option.

Option 2 – Reinstall the Graphics card drivers

  • Tap Win + R to open Run then type “devmgmt.msc” in the field and hit Enter to open the Device Manager.
  • From there, look for the Display adapters and uninstall each one of the graphics card drivers by right-clicking on them and selecting the Uninstall device option.
  • After uninstalling the graphics card drivers, close the Device Manager and tap Win + R to open Run once again.
  • After that, type “appwiz.cpl” in the field and hit Enter to open Programs & Features in the Control Panel.
  • Next, look for any program that’s related to your GPU manufacturers like Nvidia, AMD, or Intel. Right-click on any GPU-related entry and click on Uninstall to uninstall them and then follow the next on-screen instructions that appear afterward.
  • Now restart your computer.
  • Once your computer has restarted, go to the GPU manufacturer’s website and download the latest driver version for your graphics card model and then install it.
  • Restart your computer once again. That should fix the problem.

Option 3 – Try reinstalling the game

If updating and reinstalling your Graphics card driver didn’t help, then you can try to reinstall the game where you’re getting the CID HANDLE CREATION or VIDEO TDR ERRORS.

Option 4 – Uninstall the programs you installed recently

Chances are, some programs that you just installed might be the one that’s causing the BSOD error. Thus, you need to uninstall the program to resolve the problem.
  • In the search box, type in “control” and then click on Control Panel (desktop app) among the search results.
  • After that, select Programs and Features from the list which will give you a list of all the programs installed on your computer.
  • From there, look for the concerned program and select it and then uninstall it.
Note: If you have downloaded the app from the Windows Store, you can simply right-click on it from the application list and then uninstall it. In addition, you might also want to check the hardware components of your computer that might not support the operating system itself. You can disconnect all the external devices like USB drives, scanners, printers, etc., and then reboot your PC. After that, add the devices again one after the other and check if the BSOD error is now fixed or not.

Option 5 – Try disabling your monitor’s Sleep functionality

There are times when the Sleep functionality of your monitor can also cause BSOD errors like CID HANDLE CREATION or VIDEO TDR errors. There are also times when the graphics card is running in the background and the display goes to sleep and then it’s turned back on but you encounter this kind of Blue Screen error. This is why you can try to disable your computer monitor’s Sleep mode.

Option 6 – Run the Blue Screen Troubleshooter

The Blue Screen troubleshooter is a built-in tool in Windows 10 that helps users in fixing BSOD errors like CID HANDLE CREATION or VIDEO TDR errors. It can be found on the Settings Troubleshooters page. To use it, refer to these steps:
  • Tap the Win + I keys to open the Settings panel.
  • Then go to Update & Security > Troubleshoot.
  • From there, look for the option called “Blue Screen” on your right-hand side and then click the “Run the troubleshooter” button to run the Blue Screen Troubleshooter and then follow the next on-screen options. Note that you might have to boot your PC into Safe Mode.

Option 7 – Try to run the Chkdsk utility

Running the CHKDSK utility might also help you resolve the CID HANDLE CREATION or VIDEO TDR errors. If your hard drive has issues with integrity, the update will really fail as the system will think that it’s not healthy and that’s where the CHKDSK utility comes in. The CHKDSK utility repairs hard drive errors that might be causing the problem.
  • Open Command Prompt with admin privileges.
  • After opening Command Prompt, execute the following command and hit Enter:
chkdsk /f /r
  • Wait for the process to be completed and then restart your computer.
Read More
Simple Manual to Fix Corrupted PST Files Quick

Just what is a PST File?

PST file is the acronym for Private Storage Table. It is a proprietary file structure utilized in the ms-outlook program shop and to preserve attachments as well as e-mails, notifications, scheduled calendar events, and even more. This structure can also be called a Personal Folder File. The storage limit or the size varies today with respect to the Outlook version you've got installed. The PST file size limit depends on the edition you have installed. Outlook 2002 and earlier versions have a memory limitation of 2GB while later versions such as Outlook 2013 have up to 50GB memory limit.

Error Causes

You will be amazed to discover there is not a single cause behind this problem. The File can be damaged due to a number of reasons including:
  • Virus infection
  • Incorrect file system recovery
  • Data storage device failure
  • Storage size limit exceeds
  • Sometimes due to power failure when accessing the PST files
Once this File becomes corrupted and broken, it places you in danger of losing your important e-mails and attachments. Moreover, this stops you from getting or sending e-mails to and from your own associates. And in case you would like to add new contacts, you are greatly hindered. It reduces your productivity. For individuals relying completely on the Outlook program for communicating via e-mails and maintaining a track of important dates that they have set reminders for and scheduled in their calendars, the PST file problem is a nightmare. It decreases productiveness and performance.

Further Information and Manual Repair

To regain the damaged File without removing old e-mails Install a PST File Repair Tool. The latter one is probably the best way to resolve this issue without compromising on your old important emails and contacts. There are a number of repair resources out there. Each device provides a distinct degree of characteristics and performance. We urge you to use Stellar Phoenix Outlook PST Repair Tool. Not only does this repair tool aid work out PST file error that is damaged, but it also helps with data recovery. With this particular tool, it is possible to recover even the erased files you've removed from your Outlook Installation before the PST file got corrupted. Wait there is more! It is also possible to raise the memory limit by installing this repair tool on your computer. What this means is in the event the PST file corruption's cause was associated with the storage size limit, it is easily worked out. With an increase in memory, you can keep your older emails and continue storing new mail from associates. To begin, Click here to Download Install Stellar Phoenix Outlook PST Repair on your personal computer and run it to restore the PST files.
Read More
Error 0x00000024 – A Quick Fix

What is Error 0x00000024?

Error 0x00000024 can be seen when you start up and a screen comes up asking which mode you would startup in. Regardless of the mode you select, it leads up to the Windows screen with the loading bar and your computer crashes from there onwards. When you press F8 in order to select the “Disable Automatic Restart On System Failure” option, that is when this error shows up:
ST0P 0X00000024 (x00190203, 0x82700550, 0xc000012, 0x00000000)
Due to this error, both Safe and Normal modes become inaccessible.

Solution

Restoro box imageError Causes

If you’re having this error then it is the indication of an issue with the file NTFS.sys. Further, there might also be problems with the IRP (Interrupt Request Packet) or the disk may have been corrupted. There are multiple other causes of this error, including heavy fragmentation of your hard drive or problems caused by your antivirus software.

Further Information and Manual Repair

First and foremost, you are suggested to run Chkdsk. In order to do this, you have to enter your BIOS and select CDROM as your primary booting device. Now follow the below-mentioned steps:
  1. Insert your Windows XP installation CD into the CDROM and reboot your PC.
  2. Press any key to proceed with the boot from CD when you are prompted to do so.
  3. When the Windows XP setup menu shows up, hit the “R” key to proceed with repairing Windows.
  4. If there is only one Windows installed on your computer then hit the “1” key and proceed by pressing enter. If there are more than two Windows then hit the number which is associated (according to the screen you are viewing) to the Windows you want to repair. Usually, this is C:/Windows and associated with “1” but if that is not the case then you should simply press the number that corresponds with the windows you want to repair and proceed.
  5. Now, you will see a screen that prompts you to enter your administrator password. Most people don’t have an admin password and in that case, you should simply hit enter and you’d be good to go. If you do have an administrator password, however, then you should type it in, hit enter, and proceed.
  6. When the DOS prompt shows up, type in chkdsk/f and hit return.
If you see no improvement in solving Error 0x00000024, and the problem keeps persisting, then you should start over. But this time you should type sfc/scannow instead of chkdsk/f and hit return. There are a few other complex methods that you can try as well but this is the most recommended procedure as it is easier, quicker, and most likely to fix the error.
Read More
HTTP Error 500 – Edge Installation or Update
If you are trying to install or update Microsoft Edge on your Windows 10 computer but ended up getting HTTP Error 500 or Error 0x8004xxxx or 0x8007xxxx, then you’ve come to the right place as this post will help you sort this problem out. The aforementioned errors when either installing or updating the Edge browser occur due to a Network issue. There is actually a range of error codes that are associated with the network connection issue. These error codes include Error 500 or 0x80010108, 0x80040801, 0x80042193, 0x80042194, 0x800421F4, 0x800421F6, 0x800421F7, 0x800421F8, 0x80072742, 0x80072EE2, 0x80072EE7, 0x80072EFD, and 0x80072EFE. To fix them, there are several options you can try. You can try to run the Network Adapter troubleshooter or update or reset the Network Adapter as well as check and the proxy configuration.

Option 1- Try updating the Network Adapter Driver

Follow the steps below to update your Network Adapter Driver:
  • Tap the Win + R keys to launch the Run window and then type in the “MSC” command and hit Enter to open the Device Manager window.
  • From there, expand the list of all the network drives and update each one of them.
Note: If updating the network drivers didn’t help in fixing the problem, you can also try to uninstall the very same drivers and restart your Windows 10 PC. After that, the system itself will reinstall the drivers you just uninstalled. Alternatively, you can also download and install the drivers from the manufacturer’s website directly.

Option 2 – Run the Network Adapter troubleshooter

To run the Network Troubleshooter, refer to these steps:
  • Open the Search bar on your computer and type in “troubleshoot” to open the Troubleshoot settings.
  • Next, scroll down and select the “Network Adapter” option from the right pane.
  • Then click on the Run Troubleshooter” button.
  • After that, your computer will check for any possible errors and will pinpoint the root cause of the problem if possible.
  • Restart your computer.

Option 3 – Try to reset the Network Adapter

You can also try to perform a Network Reset to resolve the problem. This will reset the entire network configuration including your IP address. To perform Network Reset, follow these steps:
  • Tap the Win + I keys to open Settings.
  • From there, go to the Network and Internet section.
  • Next, scroll down and look for “Network Reset” under the status pane.
  • After that, click on Network Reset and then on Reset now to start resetting the network configuration. Once done, check if it is able to fix the error or not.

Option 4 – Try to fix the Proxy Settings

  • In the Cortana search box, search for Internet Explorer and then click on the related search result.
  • After that, tap the Win + T keys on your keyboard and click on Internet Options.
  • Next, navigate to the Connections tab and click on LAN Settings.
  • Then click on the Advanced button and delete all the entries in the list generated in the Exceptions section. And if the Advanced button is disabled because the “Use a proxy server for your LAN (These settings will not apply to dial-up or VPN connections)” option is disabled then you are good to go. Now proceed to the next step.
  • Tap the Win + X keys or right-click on the Start button and select Command Prompt (Admin) or you could also search for “cmd” in the Cortana search box and right-click on Command Prompt from the search results and select the “Run as administrator” option.
  • If a User Account Control appears, click on Yes to proceed. After that, type each one of the commands listed below, and don’t forget to hit Enter after you type each one of them.
    • netsh winhttp reset proxy
    • net stop wuauserv
    • net start wuauserv
  • Now restart your computer and check if the problem is fixed or not by installing or updating Microsoft Edge again.
Read More
What to do if Cortana Search Box turned white
A lot of Windows 10 users prefer the black theme on their computers and when you see anything but black it can get quite annoying. Such as is the case of the Taskbar which, as you know, is usually dark, however, when you take a look at the Cortana search bar, instead of seeing black, you’ll see that it has turned white. To fix this issue, read on as we will provide you some options you can try to set the Cortana search bar back to black. Before you proceed, take note that the options provided below will change all white search boxes to black and that one of these options needs administrative privileges.

Option 1 – Try changing the default App mode

As you know, Windows 10 has two modes, namely the Light and the Dark. Thus, you can switch to the Dark mode so that your Cortana search bar will be black as well. However, remember that it will completely change everything into dark mode so there will be no more Light mode elsewhere.
  • First, you need to click on the Start button and then click on the cog icon to open the Windows 10 Settings.
  • Next, from the Settings Menu, select Personalization and then select Colours from the left pane.
  • Then scroll down until you see the “Choose your default app mode” option and select “Dark”.
After you apply the changes, it will change the Cortana search bar into black instantly. Aside from that, you will also see the User Interface changing into dark mode.

Option 2 – Try changing the Registry value

If you are well-versed in editing registry keys, then you need to try this option. But before you go over the steps below, make sure that you create a System Restore point first so that if anything goes wrong, you can always go back to how it was before the changes were applied.
  • Tap the Win + R keys to open the Run prompt.
  • Then in the field, type in “regedit” and hit Enter to open the Registry Editor. If a User Account Control prompt appears, just click Yes.
  • Now that you’ve opened the Registry Editor, navigate to the following key:
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionSearchFlightingWhiteSearchBox
  • After that, double-click on the “Value” key located on the right pane and set the value to “0” instead of “1” and then click Ok to save the changes made. You should now see a black or grey text box color instead of white.

Option 3 – Try changing the Region

In some forums, a lot of users stated that changing the Region also worked out for them in changing the white Cortana search bar to white. Thus, you need to change the region settings of your computer temporarily. To do so, follow the steps below.
  • Type in “Regional Settings” in the box and then click it as soon as it appears from the search results.
  • Next, make sure to select a region where Cortana is not available.
  • Then select apply to that region. After that, it will change the Cortana search bar color to black.
  • Now sign out and sign back in and revert to the original settings. But the changes you made earlier in Cortana will still remain.
Read More
Enable Touch Keyboard in Windows 11
Touch KeyboardIf by any chance you are working on a touchscreen PC, tablet, or any similar device and have no access to a hardware keyboard there is a way to place Touch Keyboard on your screen for easy typing, and you can enable icon on the taskbar for easy access.

Enabling the Touch Keyboard

  1. Right-click on the Taskbar
  2. Select Taskbar Settings
  3. Go to Personalization > Taskbar
  4. Click on Taskbar Corner Icons to expand it
  5. Click on the switch next to Touch Keyboard to turn it ON
  6. Close settings
The icon will immediately appear on the Taskbar in the lower right corner. Clicking the icon virtual keyboard will appear on the lower part of the screen. You can use this keyboard to type in applications the same as you were typing on hardware one. By taping on X in the upper right corner, you will hide the keyboard. Tap on the icon in Taskbar to bring it up again.

Hide the Taskbar icon

If you do not want to use Touch Keyboard anymore you can easily hide the icon:
  1. Right-click on the Taskbar
  2. Select Taskbar Settings
  3. Go to Personalization > Taskbar
  4. Click on Taskbar Corner Icons to expand it
  5. Click on the switch next to Touch Keyboard to turn it OFF
  6. Close settings
Read More
Fix Printer driver issue in Windows
The printer can stop working for many various reasons, some of them are however tied to the printer driver itself. In this guide, we will address issues and provide you with advice on how to get your printer back in working order in no time. All of that being said let us fix your Printer driver issue.
  1. Check to see if the printer is plugged and that it has toner or colors and paper in the tray

    The simplest solutions are the best ones, and most of the time simplest issues are overlooked. To eliminate any basic issues check the printer cable does it has paper in the tray and check the status of toner or colors in it.
  2. Check if Windows troubleshooter will resolve the issue

    Bring up settings and choose devices, under devices click on printers and scanners. On the far right top, you have a link to start the troubleshooter, click on it. Windows built-in tools could resolve issues and fix them for you. If by any chance Windows is not able to find or resolve issues move to the next step.
  3. Check if the Device Manager is reporting an error and update the driver

    If the hardware is functioning properly then the issue might be in Windows not detecting device or driver malfunction. In any case, the Device Manager will be the one who will report this problem. In order to check to see if the driver is properly working press ⊞ WINDOWS + X to open the hidden start menu. keyboard with windows and x marked Once it opens, click on Device Manager to open it, If you have a driver device error inside Windows, you should see it immediately when entering the Device Manager, it will have a yellow exclamation mark beside it. Right-click on it and choose update driver.
  4. Reinstall driver

    If driver update failed or you already have the latest drivers, reinstalling them could fix the issue since drivers might have corrupted during installation of some update or application. Follow steps from point 3 to get to the driver in Device Manager, then right-click on it but instead of update choose to uninstall. Reboot Windows once the driver is uninstalled and Windows will install a new one automatically. If you do not want to update drivers automatically install the latest driver for your device, then reboot.
  5. Check Windows update

    Check to see if the latest Windows update is installed, update your Windows if needed
  6. Fix driver issue with DRIVERFIX

    If everything else fails, get DRIVERFIX, a premium solution for your PC issues, and fix driver errors.
Read More
1 2 3 171
Logo
Copyright © 2023, ErrorTools. All Rights Reserved
Trademark: Microsoft Windows logos are registered trademarks of Microsoft. Disclaimer: ErrorTools.com is not affiliated with Microsoft, nor claims direct affiliation.
The information on this page is provided for information purposes only.
DMCA.com Protection Status