
Hive ransomware has been targeting Microsoft exchange servers lately vulnerable to ProxyShell security issues in order to deploy various backdoors. Once the backdoor has been placed various attacks can be performed including but not limited to network reconnaissance, stealing admin accounts, taking valuable data, and even installing and deploying file-encrypting algorithms.
ProxyShell is a set of three vulnerabilities in the Microsoft Exchange Server that allows remote code execution without authentication on vulnerable deployments. The flaw has been used in past by various ransomware like Conti, BlackByte, Babuk, Cuba, and LockFile.
Security vulnerabilities have been reported to be fully patched on May 2021 but how Hive was able to still be successful in exploiting PowerShell and infiltrating into the system there seems to be still some unpatched and open issues.
Hive has gone a long way since it was first observed in the wild back in June 2021, having a successful start that prompted the FBI to release a dedicated report on its tactics and indicators of compromise.
In October 2021, the Hive gang added Linux and FreeBSD variants, and in December it became one of the most active ransomware operations in attack frequency.
Last month, researchers at Sentinel Labs reported on a new payload-hiding obfuscation method employed by Hive, which indicates active development.
“An error occurred while checking for updates: Unable to connect to the Internet. If you use a firewall, please whitelist GoogleUpdate.exe. (error code 7: 0x80072EE7 — system level).”Whatever the cause of this error is, you need to use the options prepared below to fix it.
Control Panel/All Control Panel Items/Windows Defender Firewall/Allowed apps
Error code 10 is a type of Window Device Manager error code. This error code is generated when the Device Manager can’t start the hardware device or is experiencing device driver issues. It is displayed in the following format:
"This device cannot start. (Code 10)"
You can access complete details about error codes related to Device Manager such as code 10 through the Device Status area in the Device Properties.
By accessing Device Status, you can easily view the status of each device and learn about the specific device that could be causing the problem.
Error code 10 can be triggered due to several reasons. These include:
Device driver corruption can cause you great inconvenience and PC performance issues. The computer’s operating system relies heavily on device drivers to communicate with the hardware.
For example, the printer driver facilitates functioning of the printer. Similarly, the graphic card driver ensures proper video output on the monitor screen.
However, your PC hardware, such as printer or keyboard, may stop functioning properly if their device drivers become outdated or corrupt. Therefore to avoid inconvenience and to ensure your PC works properly, it is important to resolve the problem immediately without any delay.
To repair error code 10, you don’t have to be a technical whiz or hire a professional computer programmer. Here are some of the best and easy to perform DIY methods that can help you fix this device error in no time.
Sometimes temporary problems in Device Manager can also generate code 10 error. Therefore it is advisable to restart your PC. Rebooting your system might fix the error. Try it! If it does, great, however, if the error still persists, then try other methods listed below.
Go through the Device Status in the Device Properties to view the driver causing the problem. If any driver is tagged with a yellow exclamation point, it means that driver is the one causing problems. Once identified, uninstall that driver and then reinstall it. This will hopefully resolve the problem.
Whether the error code 10 is generated due to incompatible, corrupted, or outdated device drivers, simply update the device driver to resolve. To update the driver, go to the Device Manager, then click the driver tab in the device properties dialog box.
After that, click update driver. This will start the hardware update wizard. Then follow the instructions to update the driver on your PC. During this process, you may be prompted to provide the driver path.
If you don’t have it, then you will have to download the latest driver from the hardware vendor’s official website. This can be time-consuming and stressful.
Another alternative is to install DriverFIX. It is a user-friendly device driver management software with an intuitive interface.
Its intelligent algorithm is designed to detect all the problematic drivers in seconds. It automatically updates and accurately installs appropriate drivers and ensures your PC runs at its optimum level in no time.
Click here to download DriverFIX on your system to resolve error code 10.
powercfg –lastwakeOnce you enter the command given above, it will show you the last device that woke your PC up. After that, you need to type in the next command:
powercfg –devicequery wake_armedAfter entering the command, it will show you a list of all the devices that could wake your PC up. The goal in running these commands is to understand the reason what’s really causing your PC to turn on and see the reason is on the hardware level or not. Here are a couple of options you can try if your Windows 10 PC turns on by itself.
CHKDSK [volume [[path] filename]] [/F] [/V] [/R] [/X] [/C] [: size]]Note: In the command given above, “[/F]” will try to fix the system errors while “[/R]” will be the one to fix the bad sectors.