Configure Windows 10 to create Dump Files on Blue Screen of Death

DLL files, also known as Dynamic Link Libraries are external parts of applications that run on Windows as well as other operating systems. Almost all applications are not complete in themselves and store code in different files. In this post, we will be discussing one DLL file called ntdll.dll. It is described as “NT Layer DLL” which means that it contains some Kernel functions that help in the normal functioning of the Windows operating system. It is created by Windows in the System32 folder when the OS gets installed. This file can serve different programs simultaneously by providing them with different Kernel functions which support the programs’ performance. However, if you encounter the ntdll.dll file error on your Windows 10 computer, read on as this post will guide you in fixing the problem.

Option 1 – Try to re-register the ntdll.dll file

You may have to re-register the ntdll.dll file using the regsvr32.exe before you can successfully install the program and fix ntdll.dll file crash error. The Regsvr32 tool is a command-line utility that can be used to register and un-register the OLE controls like DLL and ActiveX (OCX) control in the Windows operating system. Follow the steps below to use it.

• Open Command Prompt as admin from the WinX menu.
• Next, type the following commands in the elevated Command Prompt and hit Enter to execute the command. This will re-register the affected DLL file using the Windows operating system tool, regsvr32.exe.
  • exe /u ntdll.dll
  • exe ntdll.dll
• You should see a message saying, “DllRegisterServer in vbscript.dll succeeded” if the Regsvr32 tool was able to run successfully. After that, try to install the program again and see if it now works.

Option 2 – Disable problematic Internet Explorer add-ons

There are instances when some add-ons in the Internet Explorer browser can cause the ntdll.dll file crash error. Thus, you need to disable some add-ons in Internet Explorer and then check if it fixes the problem.

Option 3 – Try running the DISM tool

You might want to repair potentially corrupted files in your system as having them could also trigger the ntdll.dll file crash error. To repair these corrupted system files, you can run the DISM commands:

• Tap the Win + X keys and click on the “Command Prompt (Admin)” option.
• After that, input each one of the commands listed below sequentially to execute them:
  • Dism /Online /Cleanup-Image /CheckHealth
  • Dism /Online /Cleanup-Image /ScanHealth
  • Dism /Online /Cleanup-Image /RestoreHealth

• Once you’ve executed the commands given above, restart your computer and check if the DCOM error is now fixed.

Option 4 – Try to run the Program Compatibility Troubleshooter

You might also want to run the Program Compatibility Troubleshooter. This built-in troubleshooter is available in the Windows Update & Security section. From there, select Troubleshoot. This will find a list of programs for you and since you have already downloaded the driver files, just click on Not Listed located at the top of the program list. After that, browse and select the driver files and then let the program do its job.

Option 5 – Try to replace the DLL file with a trusted source

• First, you need to get the new DLL file from another computer with preferably the same file version number.
• After that, you need to boot your PC into Safe Mode and navigate to the paths listed below and then replace the file using a USB drive or other external storage devices.
  • x86: This PC > C:WindowsSystem32
  • x64: This PC > C:WindowsSysWOW64
• Next, type “cmd” in the Cortana search box and right-click on Command Prompt, and select “Run as administrator” to open it with administrator privileges.
• Now type the “regsvr32 ntdll.dll” command and hit Enter.
• Restart your PC and check if the error is now fixed.

Option 6 – Try scanning your computer using Windows Defender

The ntdll.dll file crash error might also be infected with malware or virus and to eliminate it, you have to scan your computer using security programs like Windows Defender.

• Tap the Win + I keys to open Update & Security.
• Then click on the Windows Security option and open Windows Defender Security Center.
• Next, click on Virus & threat protection > Run a new advanced scan.
• Now make sure that Full Scan is selected from the menu and then click the Scan Now button to get started.

As you know, networks that are domain-based are common in organizations and companies. These domain-based networks require multiple computers to be controlled through a single node known as a server. And the one that sets certain policies and restrictions on every system that is joined to the domain is the server administrator. So if you want to add your computer to a domain, you need to have the following information available:

• The domain name
• A user account name that’s registered in the active directory associated with the server
• Windows Enterprise, Pro, or education version

In this post, you will be guided on how you can join or remove a domain. To get started, follow the given instructions below.

Option 1 – Joining a domain

• First, you need to connect your computer to the network associated with the server since your computer and the server have to be on the same network.
• Next, click the Start button and then click on the gear-like icon for Settings to open it.
• After that, navigate to this path: Accounts > Access work or school.
• Then click on Connect. This will open a new dialog box and from there, select the “Join this device to a local Active Directory domain” option.
• Afterward, you will be asked to enter the username and password of your domain account.
• Now select your Account type and when you proceed, you have to restart your computer. Your domain account should now be created.

Option 2 – Removing a domain

• You need to open the Windows 10 Settings app.
• And from there, go to this path: Accounts > Access work and school.
• Next, select the account you want to remove from the domain and then click on Disconnect.
• A prompt will then appear that says, “Are you sure you want to remove this account? This will remove your access to resources like email, apps, network, and all content associated with it. Your organization might also remove some data stored on this device”. Just click on Yes.
• This will give you a Disconnect from the organization prompt.
• Now click on Disconnect and select Restart now to restart your computer. This will complete the removal process of the domain.

Error 12031 - What is it?

Error 12031 indicates that the connection with the server has been reset or is not properly connected. In other words, it signifies that the File Transfer Protocol which is the standard network protocol that is used to transfer files from one host to another over the internet is either reset or not working properly. For example, if you are using a wireless adapter, then you may experience this error code when the adapter loses its association with the access point. The error code is often displayed in the following format:

• "ERROR_INTERNET_CONNECTION_RESET"
• "Cannot Connect to the FTP Server"

Solution

Error Causes

Though the error 12031 is largely caused by poor internet connection and failure to obtain files from the FTP server, however, sometimes the error may be caused by invalid registry entries and outdated drivers. Furthermore, it may also be a Firewall issue.

Further Information and Manual Repair

To resolve this issue on your system, we have listed down the best and easy DIY solutions. These solutions are simple to perform and do not require any kind of technical expertise or knowledge. Just follow the steps and you will be able to resolve it in a couple of minutes.

Solution 1: Disable Firewall

If you are unable to connect to the server and you encounter the error code 12031 on your system, then to resolve this issue, disable the Firewall on your PC.

Solution 2: Reset IE (Internet Explorer) Settings

This error is typically experienced by IE7 users.  If you can’t access some websites in Internet Explorer and you come across a 12031 error code, then try resetting your IE settings. To do this, open Internet Explorer, click on tools, and then click on Internet Options. Now go to the advanced tab and select Use Passive FTP. After checking the box, exit and then try accessing those sites that were not accessible before. If after modifying IE settings you are able to access the sites without any error message display, then this means the error is resolved. Nonetheless, if the error still persists, then the error could be generated due to invalid registry entries.

Solution3: Download and Run Restoro

To remove invalid registry entries from your system and resolve the 12031 error immediately, it is advisable to download and run Restoro. This is a new, cutting-edge, and multi-functional PC repair tool integrated with multiple utilities like a powerful registry cleaner, an antivirus, and a system optimizer. The registry cleaning utility scans your PC for all registry errors. It wipes out unnecessary files, bad and invalid registry entries, repairs damaged files, and restores the registry thereby resolving the 12031 error on your PC. This error tool has a user-friendly interface and simple navigations. It is easy to use and compatible with all Windows versions. In addition to this, you can also use it to scan for malicious software and remove malware. It also functions as a system optimizer and boosts your computer’s speed dramatically. Click here to download Restoro on your PC and resolve error 12031 right away!

Hive ransomware has been targeting Microsoft exchange servers lately vulnerable to ProxyShell security issues in order to deploy various backdoors. Once the backdoor has been placed various attacks can be performed including but not limited to network reconnaissance, stealing admin accounts, taking valuable data, and even installing and deploying file-encrypting algorithms.

ProxyShell wide abuse

ProxyShell is a set of three vulnerabilities in the Microsoft Exchange Server that allows remote code execution without authentication on vulnerable deployments. The flaw has been used in past by various ransomware like Conti, BlackByte, Babuk, Cuba, and LockFile.

Security vulnerabilities have been reported to be fully patched on May 2021 but how Hive was able to still be successful in exploiting PowerShell and infiltrating into the system there seems to be still some unpatched and open issues.

Hive

Hive has gone a long way since it was first observed in the wild back in June 2021, having a successful start that prompted the FBI to release a dedicated report on its tactics and indicators of compromise.

In October 2021, the Hive gang added Linux and FreeBSD variants, and in December it became one of the most active ransomware operations in attack frequency.

Last month, researchers at Sentinel Labs reported on a new payload-hiding obfuscation method employed by Hive, which indicates active development.

External hard drives have become essentials as they store data. However, they are also prone to issues and one of them is the “The device is not ready”. You could encounter this error when you try to access your connected hard drive. This error won’t allow you to access the contents of your hard drive so unless you fix it, you won’t be able to access any of the files on your hard drive. One of the most likely causes of this error is a hardware defect. Aside from that, it could also be due to loose connections, obsolete device drivers, as well as compatibility issues between the operating system and the hard drive. Before you start troubleshooting the problem, you need to determine if you were able to access your hard drive before you encountered the error or not. If not, you need to check the compatibility of the device with your operating system as it could be the reason why you’re getting the error. There are several potential fixes you can check out to fix this error. You can try to check the hardware connections, run the built-in Hardware and Devices troubleshooter, as well as the USB troubleshooter. You could also run the CHKDSK utility or update the drivers of the device or the USB drivers.

Option 1 – Try checking the hardware connections

The first thing you have to do before you further troubleshoot the problem is to check the hardware connections of your computer and see if there are damaged ones, just like with USB ports, it would also affect the overall connectivity of the device with the computer. So if you notice some irregularities in the connecting cable physically, you might have to buy another one and replace it and then see if it fixes the problem or not.

Option 2 – Run the Hardware and Devices Troubleshooters

• The first thing you need to do is click on Start and then on the gear-like icon to pull up the window for Settings.
• After opening Settings, look for the Update and Security option and select it.
• From there, go to the Troubleshoot option located on the left-hand side of the list.
• Next, select Hardware and Devices from the list and open the Troubleshooter and run it. Once it is doing its job, wait for it to complete the process and then restart the system.
• After the system restarts, check if the problem’s now fixed. If not, refer to the next option given below.

Note: You could also try to run the USB troubleshooter as it could also resolve the problem.

Option 3 – Run the CHKDSK utility

As you know, the CHKDSK utility can help you in identifying the bad sectors in a drive and fix them automatically. Thus, you can run it to fix the “The device is not ready” error when you connect your USB drive to your computer.

• Open Command Prompt with admin privileges.
• Next, type and enter this command to execute it: chkdsk /f <drive>
• Now, wait until the process is completed and exit Command Prompt.
• Restart your computer and try connecting the USB drive again and see if the error is fixed.

Option 4 – Try to update the drivers of the device

Although you can always update the device drivers using the Device Manager, you might want to try downloading the latest set of drivers directly from the manufacturer’s website. Once you’ve downloaded them, install them right away and then correct the external hard drive.

Option 5 – Update or reinstall the Universal Serial Bus Controller driver

If updating the drivers of the device did not fix the “The device is not ready” error, you can try to update or reinstall the Universal Serial Bus Controller drivers instead of using the Device Manager. Refer to the following steps:

• First, click the Start button and type “device manager”.
• Then click on the “Device Manager” from the search results to open it.
• From there, look for the “Universal Serial Bus controllers” option and then right-click on each one of the USB drivers and select the Update Driver from the menu.

Note: If it is a regular USB drive, then it will be listed as a USB Mass Storage Device but if you have a USB 3.0 device, then look for a USB 3.0 Extensible Host Controller.

• Restart your PC and then click the “Search automatically for updated driver software” option.

Note: If updating the USB Controller drivers didn’t work, you can try to reinstall them instead.

Option 6 – Restart your computer in a Clean Boot State

If the first three given options didn’t work and you still see the error when you connect external devices, you can try putting your computer in a Clean Boot State and then try connecting them again.

• Log onto your PC as an administrator.
• Type in MSConfig in the Start Search to open the System Configuration utility.
• From there, go to the General tab and click “Selective startup”.
• Clear the “Load Startup items” check box and make sure that the “Load System Services” and “Use Original boot configuration” options are checked.
• Next, click the Services tab and select the “Hide All Microsoft Services” check box.
• Click Disable all.
• Click on Apply/OK and restart your PC. (This will put your PC into a Clean Boot State. And configure Windows to use the usual startup, just simply undo the changes.)
• Now try to connect the external devices and check if the error is now gone.

If you suddenly encounter PFN_LIST_CORRUPT Blue Screen of Death error while using your computer then it means that the Page Frame Number or PFN list is corrupted. Page Frame Number is an indexing number used by the hard drive to find out the location of every single file on the physical disk. This kind of Blue Screen error is usually caused by a driver that’s passing a bad memory descriptor list and it can either be temporary or permanent. And so to fix this particular BSOD error, read on as this post contains a couple of suggestions that could help. Keep in mind that when you get a Blue Screen error like PFN_LIST_CORRUPT, the power connection to your PC must not be interrupted and so if you are using a laptop, it’s best if you connect it to a power source. On the other hand, if creating a dump from 0% to 100% takes up more than 5-10 minutes, then you have to force shut down your computer by pressing and holding the Power Key for 10 seconds or at least until the CPU lights turn off. After you do that, proceed to the troubleshooting tips prepared below.

Option 1 – Run the Blue Screen Troubleshooter

The Blue Screen troubleshooter is a built-in tool in Windows 10 that helps users in fixing BSOD errors like PFN_LIST_CORRUPT. It can be found on the Settings Troubleshooters page. To use it, refer to these steps:

• Tap the Win + I keys to open the Settings panel.
• Then go to Update & Security > Troubleshoot.
• From there, look for the option called “Blue Screen” on your right-hand side and then click the “Run the troubleshooter” button to run the Blue Screen Troubleshooter and then follow the next on-screen options. Note that you might have to boot your PC into Safe Mode.

Option 2 – Run a System File Checker scan

You can also try to run a System File Checker or SFC scan in order to scan your computer for corrupted files that might be the cause behind the PFN_LIST_CORRUPT error. Once it finds any corrupted system files, it will automatically fix them. To run System File Checker, here’s what you have to do:

• Tap Win + R to launch Run.
• Type in cmd in the field and tap Enter.
• After opening Command Prompt, type in sfc /scannow

The command will start a system scan which will take a few whiles before it finishes. Once it’s done, you could get the following results:

1. Windows Resource Protection did not find any integrity violations.
2. Windows Resource Protection found corrupt files and successfully repaired them.
3. Windows Resource Protection found corrupt files but was unable to fix some of them.

• Restart your computer after the scan is completed.

Option 3 – Check for any hard disk errors

• On your desktop, right-click on the “This PC” or computer icon and then select Manage to open the Disk Management. Here you get to check your drive’s health.
• Next, click on Disk Management on the left side panel.
• From there, check the state of your drives. If it shows that all your partitions are healthy then it means all is good and that the problem may have something to do with some physical issues with your hard drive.

You might also want to run the CHKDSK utility to help you fix any issues with your hard disk. If your hard drive has issues with integrity, the update will really fail as the system will think that it’s not healthy and that’s where the CHKDSK utility comes in. The CHKDSK utility repairs hard drive errors that might be causing the problem.

• Open Command Prompt with admin privileges.
• After opening Command Prompt, execute the following command and hit Enter:

chkdsk /f /r

• Wait for the process to be completed and then restart your computer.

Option 4 – Update the Device drivers

Updating the Device drivers can also help you fix the PFN_LIST_CORRUPT Blue Screen error. To do so, follow the steps below.

• Tap the Win + R keys to launch Run.
• Type in devmgmt.msc into the box and tap Enter or click OK to open the Device Manager.
• After that, a list of device drivers will be displayed. If you see a red or yellow sign that shows up against the driver, right-click on the driver and select “Update Driver Software”.
• Select the “Search automatically for updated driver software” option and then follow the instructions to complete the process.
• Restart your PC and then check if the Blue Screen error is now fixed or not.

Option 5 – Disable OneDrive

The PFN_LIST_CORRUPT error might also be caused by OneDrive. Thus, you have to try disabling this program to resolve the problem.

• Tap the Ctrl + Shift + Esc keys to open the Task Manager.
• Once the Task Manager is open, click on More Details located at the bottom left portion of the window.
• Then go to the Startup tab and select Microsoft OneDrive and then click Disable.

As you know, one of the most useful web browsers all over the globe is Google Chrome. However, it is not without flaws as you could encounter errors while using it. One of these errors is the ERR_UNSAFE_PORT error. This kind of error is caused by the data being accessed using a port that isn’t recommended. When you encounter this kind of error in Chrome, you will see the following error message on your screen:

“The webpage is not available, The webpage at <Address> might be temporarily down or it may have moved permanently to a new address. Error code: ERR_UNSAFE_PORT”

In this post, you will be guided on how you can fix the ERR_UNSAFE_PORT error in Google Chrome on your Windows 10 computer. You can try to set allowed ports or reset or reinstall Google Chrome. For more details, refer to the given options below.

Option 1 – Try to set allowed ports

• To get started, open Google Chrome.
• After that, go to the Shortcut tab and type the following after the whole address in the field named Target: --explicitly-allowed-ports=xxx
• It should look like this “C:/Documents and Settings/User/Local Settings/Application Data/Google/Chrome/Applicationchrome.exe --explicitly-allowed-ports=6666”.
• Now click on Apply and click OK to save the changes made.

Option 2 – Reset Chrome

Resetting Chrome can also help you fix the error. This means that you will be restoring its default settings, disabling all the extensions, add-ons, and themes. Aside from that, the content settings will be reset as well and the cookies, cache, and site data will also be deleted. To reset Chrome, here’s what you have to do:

• Open Google Chrome, then tap the Alt + F keys.
• After that, click on Settings.
• Next, scroll down until you see the Advanced option, once you see it, click on it.
• After clicking the Advanced option, go to the “Restore and clean up option and click on the “Restore settings to their original defaults” option to reset Google Chrome.
• Now restart Google Chrome

Option 3 – Try to clean reinstall Chrome

There are instances when programs leave files behind after you’ve uninstalled them and the same thing can happen to Chrome so before you reinstall Chrome, you have to make sure that you have deleted the User Data folder. To do so, refer to the following steps:

• Hit the Win + R keys to open the Run dialog box.
• Next, type “%USERPROFILE%AppDataLocalGoogleChromeUser Data” in the field and hit Enter to open the User Data folder.
• From there, rename the default folder and name it something else, e.g. “Default.old”.
• After that, install Google Chrome again and check if the issue is now fixed.

Mswrd632.wpc - What is it?

Mswrd632.wpc is a Microsoft Office Word error message.  This error message is often displayed in the following format:

‘Word cannot start the converter mswrd632.wpc’

The error message mswrd632.wpc may pop up when computer users try to open certain MS Word documents using the .doc extension.

Solution

Error Causes

Error Mswrd632.wpc may be triggered due to several reasons. Some of the common reasons for the mswrd632.wpc error code include:

• Issues with Microsoft Word application
• MSwrd632.wpc file corrupted
• Changes in the registry configuration settings
• Issues with security updates

Sometimes when you attempt to access the Word file of the older version of the MS Word application after new security updates, you may experience this error code. This happens because the new security features that you have installed in the updated version blocks old files from being accessed.

Further Information and Manual Repair

If you can’t access important MS Word files on your PC, due to the error Mswrd632.wpc, then don’t you worry! The good news is that it is easy to fix and repair. By following a few simple methods, you can easily resolve this issue and access your MS Word files. Try the methods listed below to repair error Mswrd632.wpc on your system:

Method 1: Copy the MSwrd632.wpc file From Another Computer

The error may also occur if the MSwrd632.wpc file is corrupted. In such as situation, copy the MSwrd632.wpc file on your PC from another computer. You can usually find this file in the following path C:\Program Files\Common Files\Microsoft SharedTextConv. However, please note this method is not secure and may make your PC vulnerable to a possible security hack. Do it when your PC is not connected to the internet.

Method 2: Unregister the Text Converter

This issue can also be resolved by unregistering the converter. Here is a step-by-step guide to unregister the converter.

• First, go to the start menu and select RUN.
• Type REGEDIT and press the OK button.
• Next, what you have to do is find and click on registry subkeys. Here are the keys that you have to click on

HKEY_LOCAL_MACHINESOFTWAREMicrosoftSharedToolsText ConvertersImportMSWord6.wpc (Windows 32 bit OS) HKEY_LOCAL_MACHINESOFTWAREWow6432NodeMicrosoftSharedToolsText ConvertersImportMSWord6.wpc (Windows 64 bit OS)

• Choose the key according to your Windows bit operating system. After that, click on the Edit menu, select the Delete option and click ‘Yes’ to activate changes.

This change will effectively unregister the text converter and disable it for third-party applications and for Microsoft Office enabling you to access your desired MS Word files easily.

Method 3 - Download Restoro to Resolve Registry issues

If the error is related to the registry, then the best and most efficient way to fix it is to download Restoro. This is a powerful registry cleaner and a PC Fixer deployed with a user-friendly interface and compatible with all Windows versions. It scans and removes all registry errors and repairs the registry in seconds. Click here and download Restoro to resolve the MSwrd632.wpc error now!

The Event Viewer in the Windows operating system is used to troubleshoot any computer issues. It is one of the most useful tools that keep logs of both security and system events. It also monitors for both software and hardware problems in the computer. This tool is the only one with amazing features that maintain logs about everything that’s going on in the computer system. It keeps track of all the information to the point where going over them will take a lot of time. Luckily, the Event Viewer tool now allows users to create custom views where you can set the filters and sort the data recorded to limit the information details to only what you’re interested in seeing. For instance, if you want to troubleshoot with one hard drive, you can just create a special custom view to display only the hard drive warnings in the security logs. This will save you hassle and time. Take note that the logs in the Event Viewer are divided into two main categories namely the Window logs and the Application and Services logs. You can just set the filter to the logs by their event id, specific date, and many other events when you have to troubleshoot some problem in your computer. So if you are trying to troubleshoot a problem in your Windows 10 computer and you’re checking the Event Viewer, read on as this post will guide you in creating custom event views in the Event Viewer. To get started, refer to the instructions given below. Step 1: Go to the Start menu and in the search box, type “event viewer” and then click on Event Viewer from the search results to open it. Step 2: After opening Event Viewer, click on Custom Views located in the left pane of the window. Step 3: Next, click on the Administrative events under the Custom View to create special log views. Step 4: Then on the right side of the window, click on Create Custom View to open the Create Custom View window. Step 5: There is a logged drop-down list under Filter. From there, you have the option to choose an appropriate predefined time or use a custom time range for your Custom log views. Step 6: After that, select an appropriate event level for your custom view. You have fine entry-level options to choose from such as critical event level, error, warning, information and verbose.

• Critical – select this if you want to see the events that require your immediate attention in the custom view.
• Error – select this if you want your Event Viewer to display the events that are less critical but hints at the problems.
• Warning – select this event-level if you want to see the event with the potential problem but may not bound to happen.
• Verbose – select this if you want to see detailed information about all the events.

Step 7: After you’ve selected the event level, you now have to select how you want the events to be filtered. They can either be filtered By the log or By the source.

• By the log – you can select two options called Windows log and, Application and Service logs. The Windows logs allow you to filter the logs created during events like setup, security, applications, and system events. While the Application and Service logs filter the log created by the installed applications in your system.
• By the source – select this if you want your Custom View to search for information in event sources. It allows you to view events in detail for various applications and devices.

Note: You have the option to further customize the event logs with more filters like Event IDs, task category, keywords, User, and Computer. Using these additional filters, you can choose to filter the events in the special views by specifying event id numbers in the Event IDs, entering predefined Windows words in the Keyword, specify the user accounts in the User field, as well as choose the system from the server to maintain logs in the Computer field. Step 8: Once you’re done customizing the log filter, click on OK to apply the changes made. Step 9: After that, a Save Filter should be displayed in the Custom View window. Just enter the Custom View name and select the Event Viewer folder where you want to save the Custom view. The folder name should be Custom View by default. And if you want, you can also create your own folder if you want your custom views to be visible to all the system users. Step 10: Next, check all the Users box located in the lower corner of the window and then click the OK button after you’re done. You should now see the customized filter you just created on the left side of the window. Just click on it to check your filtered events in the center of the Event Viewer window. And for you to save the custom view logs, simply right-click on the Custom views you created and then click on Save All Events in the Custom View As from the drop-down menu. Then put a name on the file and select the appropriate location where you want to save the logs and click on the Save button. Note that the log file is saved with the “.EVTX” file extension and when you double click on it, it will open the file in the Event Viewer.

The third time is charm saying goes but not when we are talking about Microsoft. Print spooler is again in focus, in a bad way. This is the third print spooler vulnerability to emerge in just five weeks. While a critical flaw was originally identified and patched in June, a similar flaw came to light shortly after and was subsequently patched (with mixed success). Microsoft is once again advising its customers to disable Windows print spooler after a new vulnerability that allows hackers to execute malicious code on machines has emerged. While a patch fixing the flaw will be released in due course, the most effective workaround currently on the table is to stop and disable the print spooler service entirely.

"An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights."

Stop this service right away or you are risking a potential attack.

1. Press ⊞ WINDOWS + X to open the hidden menu
2. Click on Power Shell (admin)
3. In Power Shell type in the following command to check if spool service is running: Get-Service -Name Spooler followed by ENTER
4. If spooler service is running type in the next command to stop it: Stop-Service -Name Spooler –Force and press ENTER
5. Then follow with this command to disable it at startup: Set-Service -Name Spooler -StartupType Disabled followed with ENTER

That’s it, we hope a patch will come soon for all the people that are using network printing and indeed need this service running in order to do work.