Disable Windows insider in Windows 10

Toolbar.Dll is one of the most destructive software you will encounter on your Personal Computer. For every report out there you read about threats to your Windows PC, a significant number speak about Toolbar.Dll. Technically, this is non-essential to the functioning of your computer yet poses great dangers to your computer's security. It can cause massive destruction if not properly resolved.

Solution

Error Causes

As suggested below, the sources of Toolbar.Dll are many and broad: a) Misconfigured System: Nothing causes this malfunction on your own Computer a lot more than having a misconfigured system. You ought to anticipate this malfunction and repair the situation before it gets worse. Especially if you have Toolbar.Dll files on your computer. More often than not the situation can only get worse. b) Broken Windows OS File: the 2nd trigger of Toolbar.Dll, and that is linked to the primary aforementioned one, is a broken Windows OS file. Fix it as soon as you realize its existence. c) Installation Issues: If you poorly install Windows on your PC, you generate a loophole by which Toolbar.Dll malfunction might appear. You essentially provide a massive possibility to the Toolbar.dll error to affect your Computer, if you neglect to finish an install or uninstall procedure. d) Removing Programs and Hardware Incorrectly: When you decide to remove programs and hardware, you need to exercise caution. Should you be rash with this specific procedure, you raise the odds of striking the Toolbar.Dll malfunction on your Personal Computer. e) Incorrect Shut-Down: unless you want to strike this malfunction, ensure that you shut down your Computer procedurally. Regardless of what hurry you might be in, always power down your computer correctly.

Further Information and Manual Repair

In the event you strike the Toolbar.Dll malfunction on your Personal Computer, you shouldn't get frightened. But, prior to starting considering of ways that to fix this malfunction, you should look for the signs, to be able to recognize it. The malfunction exists in your Computer in circumstances where software programs can't load properly. The situation might be repaired in numerous methods, as revealed below:

• Switch on your computer, and log in as the superuser/admin. Next, select All Programs, subsequently go to Accessories. Under Accessories, choose System Tools. Click on System Restore from the menu.
• A fresh window will appear. In the new window, find the choice designated "Restore My Pc To An Earlier Time", before you click next.
• Search for the newest System Restore update from "On This List, Click a Restore Point" before you click Next once more.
• Pick Next when a verification window appears on the screen. After the complete procedure is done, reboot the pc and the Toolbar.Dll malfunction will soon be no further.

Each of the measures suggested previously, are for advanced pc users. You must obtain the very best software on the web to eliminate this malfunction, in case you are a non-techie. Alternately, contact a tech to help fixing the problem.

Thorconnwndclass error is an Outlook error that has recently reared its head. Known to create several problems in the proper functioning of the Outlook application, this error is essentially a constituent of the Norton Antivirus Crash Guard Symantec component. That’s why those using the Norton Antivirus program are most likely to encounter this error.

Solution

Error Causes

When the Thorconnwndclass error occurs, the Outlook closes unexpectedly, users encounter problems while sending or receiving emails and, performance of Outlook is degraded and this happens because issues arise while accessing the PST file. Because of this damaged PST file, stored data is unavailable for access. Other factors that trigger the Thorconnwndclass error are listed below.

• Corrupt or damaged Outlook Add-ins
• Corrupt or damaged Outlook bar
• Unfinished Outlook installation
• Faulty settings
• Thorconnwndclass Norton is being used with Outlook

Regardless of the underlying factors that lead up to the occurrence of this error, it's of paramount importance that workarounds are implemented to ensure desired performance of Outlook in the long run.

Further Information and Manual Repair

While there are several ways to rectify this error, some of the most common ones are listed below as follows.

• The most effective solution is the PST file repair tools available online. These tools use a complex algorithm and thoroughly scan the PST file and repair it as needed. This resolves the Thorconnwndclass error that one encounters in Outlook. Usually such software have an easy to use interface and can easily be used, without the need for the user to have a strong technical background. Another advantage of using these software available online is that they not only repair the file, but they often play a pivotal role in retrieving inaccessible or lost data.

Some other tips for manually resolving this problem are listed below as follows.

• First and foremost, disable your Norton Antivirus program if it’s installed on your system. Now, open the Outlook application in Safe Mode. Since this problem may also be triggered by damaged or corrupt Outlook add-ins, it is strongly advised that you disable or uninstall them. Now, you will come across some .dat files. Rename them by changing the existing .dat files to new .dat.
• Another useful approach is to employ the Inbox Repair tool offered by Outlook.
• Finally, one can also use the scanpst.exe file to fix any problem or error that resides within the  Outlook application.

What is this particular error?

One common issue when trying to upgrade to Windows 10 from Windows 7 or 8 is incompatible software. Any installed software or app that isn’t compatible with Windows 10 will prevent you from continuing with the set-up. Normally, you’ll get an error message “What needs your attention” and it will ask you to uninstall a list of apps manually. Unfortunately, some users reported that they couldn’t find the app it asks to uninstall. In some cases, users said they’ve already uninstalled the app but it still won’t start the Windows 10 Setup.

Solution

Error Causes

This type of issue normally occurs because of the following:

• Incompatible software/apps
• Corrupted software/apps
• Incomplete uninstallation

Further Information and Manual Repair

Here are some steps you can take whenever you encounter this error.

Note: Before taking any steps, make sure that you’re highly equipped to do so. Some steps might affect the system and even do more damage to your computer. You might also want to consider using an automated tool instead.

Method 1 – Perform a clean boot, then retry upgrading

A clean boot is normally done to start Windows using the least set of drivers and startup programs available. By doing this, it eliminates possible software issues that happen when installing or uninstalling a program in Windows 10.

Before performing a clean boot, make sure to take note of the following:

• You need administrative privileges in order to perform this action.
• When doing this, your computer might lose temporarily functionality. However, it will return after start-up.
• It is highly advisable to not use the System Configuration to change advanced boot options.

Here are the steps to perform a clean boot.

• Step 1 – Go to Start and search for msconfig
• Step 2 – Go to System Configuration
• Step 3 – Under Services tab, click on the “Hide all Microsoft services” checkbox. Then, choose to Disable all
• Step 4 – Go to the System Configuration’s Startup tab. Then, click on “Open Task Manager”
• Step 5 – In the Task Manager dialog box, you will see a Startup tab. Choose items that you want to disable and then click the Disable button
• Step 6 – Close the Task Manager dialog box.
• Step 7 – Go back to the Startup tab of the System Configuration box. Click “Ok” then proceed with restarting.

Method 2 – Manually uninstall programs from the Program Files folders

Instead of using the “add or remove programs” feature in Windows, you might need to manually install the program directly from the C drive. To do this, follow the steps below:

• Step 1 – Go to the C drive, and look for the Program Files folders. For 32-bit users, you can find it at C:\Program Files. If you’re using the 64-bit version of Windows, go to C:\Program Files (x86) folder.
• Step 2 – Find the “uninstall” application file
• Step 3 – Right-click, and run the file as administrator. Wait for the uninstallation to finish. In some software, you need to restart your system before the uninstallation will take effect.

Note: In some cases, you may also need to search for files related to the program. You can use the search bar under Drive C to do this. Delete those files as well.

Method 3 – Create a new user account

Before upgrading to Windows 10, create a new user account. Make sure it has administrative privileges. From there, run the upgrade.

Method 4 – Use third-party uninstaller services

If you still can’t run Windows 10 Setup after the above methods, you might need to rely on a third-party service. Microsoft recommends Revouninstaller that can help you.

Before using this software, reinstall the application or utility that Windows 10 wants you to install. Then, use Revouninstaller to delete the program completely.

Method 5 – Disable third-party antivirus software

Some users who experienced this issue reported that it was solved after disabling or completely uninstalling the anti-virus software installed in their system.

Method 6 – Use a trusted automated tool

If after trying the above methods, the problem still persists, it might be best to use a trusted automated tool to fix the issue.

If you got an error message saying, “Folder Redirection Failed, Failed to build the list of regular subfolders, Access is Denied” after you configured a new Group Policy Object or GPO which redirects User folders to a new network share or when you click on Reset default location under the Windows File Explorer or Folder Options, then you’ve come to the right place as this post will show you how to resolve this kind of error on your Windows 10 computer. Follow the given options below carefully to fix the “Folder Redirection Failed” error.

Option 1 – Take Ownership of the folder

If you are not able to access the folder could be one of the reasons why you’re getting the “Folder Redirection Failed” error and so you need to take ownership of the folder to resolve the problem. Before you proceed, make sure that your account is an admin account.

• First, locate the concerned folder and right-click on it then select Properties.
• Next, click on the Edit button in the Properties window and click OK to confirm if you got a User Account Control elevation request.
• After that, select user/group from the permission windows or click on the Add button to add another user or group. It would be best if you add “Everyone” to give permission.
• Then check “Full Control” under the “Allow” column to assign full access rights control permissions.
• Now edit the permission to Full Control for “Everyone”.
• Click OK to save the changes made and then exit.

Option 2 – Try to add Authenticated Users or Domain Computers

Make sure that the Folder Redirection group policy removal option is set to “Redirect the folder back to the user profile location when the policy is removed” when using the Folder Redirection. After that, you have to add Authenticated Users group with the “Read” permissions on the Group Policy Objects or GPOs. And if the Domain computers are part of the group of “Authenticated Users”. Note that by default, the “Authenticated Users” have these permissions on any new Group Policy Objects or GPOs. Once again, you have to add just “Read” permissions and not “Apply Group Policy” for “Authenticated Users”. Furthermore, to fix the “Failed to build the list of regular subfolders” errors, here are some options that could help.

Option a – Try to clear disk space

You might have to check if your disk is running out of space because if it is, then it will fail to create a list abruptly. And so you need to free up some disk space. You can either check on the files manually especially if you tend to keep your files at random places in your disk drive.

Option b – Find the Target route

You need to find the target route of the folder and then restore it if you are getting the “Failed to build the list of regular subdirectories” when you try to relocate the folder to the original location.

Option c – Try to change Ownership/Reset Defaults for all the User folders

If the “Failed to build the list of regular subdirectories” error pops up when you are trying to move a large number of files from one location to another, then you need to change the ownership of the folders as pointed out earlier.

Following a two-year investigation by the California Department of Fair Employment and Housing, the state has filed a lawsuit against Activision Blizzard for fostering a "frat boy" culture in which female employees are allegedly subjected to unequal pay and sexual harassment. As reported by Bloomberg, Activision Blizzard is being accused by the state of California of discriminating against female employees at nearly all levels of employment, including in regards to compensation, promotion, assignments, and termination. The state alleges Activision Blizzard’s leadership has failed to address any of these outstanding issues or prevent them from occurring within the workplace. You can read the full details of the lawsuit here. The suit, filed Tuesday in the Los Angeles Superior Court, says Activision Blizzard, which is made up of about 20 percent women, assigns women, and women of color, to "lower paid and lower opportunity levels" with lower starting pay for similar work as their male counterparts. The documents also accuse Activision Blizzard of fostering a "pervasive 'frat boy' workplace culture in the office. Male employees are said to drink "copious amounts of alcohol" as they make their way through cubicles and "often engage in inappropriate behavior toward female employees." Male employees are said to come to work hungover, play video games during work "while delegating their responsibilities to female employees, engage in banter about their sexual encounters, talk openly about female bodies, and joke about rape." The lawsuit also cites one particular incident where a female employee, who was already subjected to intense sexual harassment at the company, committed suicide during a work trip with a male supervisor who allegedly brought inappropriate, sexual items with him on the trip. The lawsuit is asking for an injunction that will force Activision Blizzard to comply with workplace protections, as well as deliver unpaid wages, pay adjustments, back pay, and lost wages and benefits for female employees.

An Activision Blizzard spokesperson sent the following statement in response to the allegations:

We value diversity and strive to foster a workplace that offers inclusivity for everyone. There is no place in our company or industry, or any industry, for sexual misconduct or harassment of any kind. We take every allegation seriously and investigate all claims. In cases related to misconduct, the action was taken to address the issue. The DFEH includes distorted, and in many cases false, descriptions of Blizzard’s past. We have been extremely cooperative with the DFEH throughout their investigation, including providing them with extensive data and ample documentation, but they refused to inform us what issues they perceived. They were required by law to adequately investigate and to have good faith discussions with us to better understand and to resolve any claims or concerns before going to litigation, but they failed to do so. Instead, they rushed to file an inaccurate complaint, as we will demonstrate in court. We are sickened by the reprehensible conduct of the DFEH to drag into the complaint the tragic suicide of an employee whose passing has no bearing whatsoever on this case and with no regard for her grieving family. While we find this behavior to be disgraceful and unprofessional, it is, unfortunately, an example of how they have conducted themselves throughout the course of their investigation. It is this type of irresponsible behavior from unaccountable State bureaucrats that are driving many of the State’s best businesses out of California. The picture the DFEH paints is not the Blizzard workplace of today. Over the past several years and continuing since the initial investigation started, we’ve made significant changes to address company culture and reflect more diversity within our leadership teams. We’ve updated our Code of Conduct to emphasize a strict non-retaliation focus, amplified internal programs and channels for employees to report violations, including the “ASK List” with a confidential integrity hotline, and introduced an Employee Relations team dedicated to investigating employee concerns. We have strengthened our commitment to diversity, equity, and inclusion and combined our Employee Networks at a global level, to provide additional support. Employees must also undergo regular anti-harassment training and have done so for many years. We put tremendous effort into creating fair and rewarding compensation packages and policies that reflect our culture and business, and we strive to pay all employees fairly for equal or substantially similar work. We take a variety of proactive steps to ensure that pay is driven by non-discriminatory factors. For example, we reward and compensate employees based on their performance, and we conduct extensive anti-discrimination training including for those who are part of the compensation process. We are confident in our ability to demonstrate our practices as an equal opportunity employer that fosters a supportive, diverse, and inclusive workplace for our people, and we are committed to continuing this effort in the years to come. It is a shame that the DFEH did not want to engage with us on what they thought they were seeing in their investigation.

Conclusion

We will see how things work out, but I am not too optimistic for Activision Blizzard, truth to be told these reports are really bringing up some disturbing news on the sunlight. I just hope that all responsible will be brought to justice.

What is Error Code 37?

Error Code 37 is a Device Manager Error Code that you may come across when you are unable to use an installed hardware device on your PC. It will pop up on your screen with the following display:

“Windows cannot initialize the device driver for this hardware. (Code 37)”

If you receive the above message, it means that your operating system was unable to acknowledge the drivers for a particular peripheral device.

Solution

Error Causes

Error Code 37 mainly occurs due to device driver corruption. However, there are other factors that can trigger this error code, some of which are the following:

• Missing device drivers
• Out-of-date device drivers
• Presence of malware or spyware in the system
• The particular device is not compatible with your PC

Device driver corruption or other data corruption is not uncommon and part of everyday PC use.

From an installation gone wrong to an unexpected shutdown, commonly generated data errors are considered the main culprit behind error codes.

Further Information and Manual Repair

Just like most PC error codes, Error Code 37 isn’t that difficult to get rid of. There are many DIY methods you can try to have your PC running smoothly in no time. Here are a few methods to resolve this issue:

Method 1: Restart your PC

It is possible that the display of the error code is merely due to a temporary issue with your peripheral device and not anything serious.

Therefore, the quickest and easiest method to solve the error code 37 is to simply restart your PC.

Method 2: Scan for Viruses

If restarting does not do the trick, a quick scan for viruses and removing them is another simple method you can follow to fix your PC.

Since the error code is due to corruption of data, viruses such as malware or spyware create error in your PC’s registry and eliminating them can help restore some of the corrupt data, which also speeds up your PC.

Method 3: Undo recent changes

A possible explanation for the error code may be the recent changes in your Device Manager or due to the peripheral device installation. You can thus undo the changes by either:

• Remove or change settings of the installed peripheral device
• Roll back the version of the driver to the one before the update.
• Use System Restore to reverse the changes made in the Device Manager

Method 4: Manually uninstall and reinstall the drivers

If the above stated methods do not help in speeding up your PC and is still giving you an error code, you may want to manually uninstall and reinstall the corrupt or missing drivers. Here are the following steps:

• Double-check if the installed external device is properly connected and working smoothly
• Open Device Manager and double click on the device that is causing problems
• When it opens, click on the ‘Driver’ tab and click ‘Update Driver’

Method 5: Use DriverFIX

However, updating the missing or corrupt drivers can be time consuming and may also require having a hardware documentation ready that contains specific details about the driver that you should download.

To avoid this time-consuming process, you can use DriverFIX software.

DriverFIX will help you to download the required driver without you having to waste your precious time and effort looking it up in a user manual. This latest software technology is embedded with its own database that tracks the missing or corrupt driver according to your PC’s motherboard version and specific details.

It is user-friendly, which means that it will relieve you from the frustration of such PC error codes appearing from time to time and enable your PC to work efficiently in no time.

Click here to download DriverFIX to resolve Device Manager error code 37 today!

Can graphic cards wear out over a longer period of time? Recent studies and experience from crypto miners say no but they can die due to different reasons like improper use, low cleaning habits, factory mistakes, etc. Many gamers and people who use GPU intense applications tend to think that some glitches and hiccups in the software are a sign that graphic card is dying out and that it is time to be replaced. Altho this could be true in many cases these kinds of behavior are mostly due to old drivers and software issues. Older cards can produce these kinds of results due to their old age and new software is often more demanding than these cards can handle. So in order to diagnose and be sure that your GPU is indeed dying out lookout for these signs.

The Main Signs of a Dying GPU:

The Computer Crashes and Won’t Reboot

If your computer shutdown while working in the graphic application or while playing the game and the monitor loses signal there is a high chance the graphic card is soon going to be gone. Some motherboards have hardware detection failure and can signal immediate fail. If when turning your computer ON you are greeted with a blue screen with the message that the signal can not be found or you do not have picture at all it is most likely that GPU has failed.

Graphic Glitches While Playing Games

If you are playing the game and all of sudden you get off-color pixels, screen flickering, strange graphic behaviors, random artifacts, or similar and that keeps repeating in multiple games it is likely that GPU days are coming to an end.

Abnormal Fan Noise or Performance

Fans are an essential part of cooling the GPU and over time if they are intensively used they could wear out and need replacing. If however you have not noticed and have not replaced the fans card can sustain overheating damage. Many cards have cooling fans that are designed to spin at a higher RPM only when the GPU is under load. It prevents bearings in the fans from dying prematurely, so don’t worry if one of your fans is inactive while you are browsing the web. However, when you play games that utilize software that your card isn’t built to support, the bearings in the fans wear out faster. Once the fans stop working under load, the graphics card can quickly die.

How to Diagnose a Dying Graphics Card

Presented next are essential steps in order to recognize a dying graphic card.

Check Motherboard Error Codes

Many motherboards today completely shut down a component that is no longer working. If your graphics card has died completely, this may be one of the easiest ways to tell. If your motherboard doesn’t have display codes, you can try testing the card in a new system.

• Open the computer case: Use your screwdriver to remove screws on the side panel and gently slide it back.
• Locate the error code display on your motherboard: If you have a motherboard with error codes, they should appear near an outer corner.
• Try to reboot your computer: Record each error number you see after you boot your computer.
• Consult the motherboard manufacturer manual for error codes: Open the manual and locate the list for your error codes. If the code matches a graphics processing unit error, your video card could have died.

Check Hardware for Damage or Debris

A graphics card that has damage or debris on the physical parts might quickly overheat and kill the card.

• Remove the screws holding the GPU in place: There are typically one or two screws holding the card to a bracket on the case.
• Unhook the power cords from the GPU and pull the release tab: Remove the power cords from your GPU by pushing in their tabs and gently rocking them out. Once you remove each cord, gently push or pull up on the release tab near the motherboard.
• Inspect the GPU for damage/debris: Check the card for any dirt or debris buildup and clean it out with a Q-tip. You can replace broken fan pieces from the manufacturer.

Test Your GPU Under Load

Download GPU stress-testing and heat-monitoring software.

• With the card installed, run a stress test.
• As you are running the stress test, run heat-monitoring software: With the stress test running, check your heat-monitoring software for GPU overheating. Any reading over 80 degrees Celsius is too hot.
• Check device manager for outdated drivers: If your GPU is clean, but still running too hot, your software drivers are not installed correctly. To check, type in “device manager” at the bottom of your desktop and click on Device Manager. Find your display adapter and right-click on it to see if it’s working. If your drivers are not working correctly, it is indicated here usually. However, the driver may appear to be functioning even if it says otherwise in the properties.

Keep your graphic card drivers updated

When you don’t have the right driver installed, graphics cards can quickly burn up, and their cooling components may fail faster. That’s why you should always keep drivers updated for each new game you install or play. Older games may also release new software patches, so your GPU drivers should be updated accordingly.

The Clear Linux Project creates an operating system and software stack that offers highly optimized performance, security, versatility, and manageability. Clearly optimized for Intel CPUs and based on GNOME it will offer you incredible speeds if you are on Intel CPU. The big news, though, is that Clear Linux sports the shiny new Gnome 40. This is a fresher Gnome than you'll find even on Ubuntu's more experimental 21.04 release. The only big names that let you test drive Gnome 40 are Fedora and Arch Linux.

Packages only when you need them

Installation of packages is used by Swupd, a Clear Linux* package management tool. It is easy to use and pretty straightforward.

• "bundle-list" for showing what's installed
• "bundle-info" for details on installed bundles (such as owned files via the "‑‑files" flag)
• "search" for repository searching
• "bundle-add" for installation
• "bundle-remove" for uninstallation

The only problem here is the packages themselves. Clean Linux* has been imagined as a developer distro focusing mostly on well-development tolls. In intel’s words: “A Linux OS built for Linux developers”, so some things will be left out. Strangely enough some things as FFmpeg which if you want to have and blast some youtube videos while you work will have to complete manually by yourself.

Clear Linux* modular philosophy

Everything in Clear Linux* is based on a modular philosophy approach. There is no /etc/fstab file, the /boot directory is totally empty. Every partition to be mounted is enabled as a systemd "mount unit." Intel reaping the benefits of systemd's modular philosophy, where everything is a unit. If you know your way around systemd, intermediate-level configuration tasks should be straightforward. Any advanced configuration likely demands deep systemd knowledge.

Clear Linux* performance

As stated earlier this is Intel’s distro, optimized for Intel hardware meaning that Intel as the developer has every possible tool at its disposal to make use of hardware to its maximum potential and it shows. Distro almost leaves other ones two times in speed performance. So if you are looking for a distribution that will deliver you speed and it is aimed for developer Clear Linux* is for you.

Conclusion

Clear Linux* is a really interesting distro and seeing how Intel is adding new software packages on its official website it might have a bright future. But as always, be the judge for yourself and see if it can fit your needs. Go get it at: https://clearlinux.org/

Cache files are temporary files that have been created by various applications and services when used.  As temporary files, they are safe to be removed and deleted from the system since the application or service will create new ones when needed but sadly will not remove old ones, this task is left to OS itself. Automatic Windows cleanups can mostly take care of these things but for top-notch performance clearing cache manually is a far better option. We will here explore various cache temporary files, where they are, and how to clean them. Sit back and let’s do some cleaning!

Clear cache using Disk Cleanup

1. Open Start menu and search Disk Cleanup
2. Click on it in search results
3. Click on the drives drop-down menu and select the drive where is Windows 11 installed
4. In the Files to Delete section enable all boxes and click on OK
5. Click on delete Files to confirm

Clear Microsoft store cache

1. Press ⊞ WINDOWS + R to open the run dialog
2. Type in WSReset.exe and press ENTER
3. Black blank windows will appear, wait for the window to close itself and you are done

Clearing location cache

1. Press ⊞ WINDOWS + I to open location history
2. Select Privacy & Security
3. In the App Permissions section click on Location
4. On-Location page click on Clear

Clear and flush DNS

1. Press Start and search for Windows Terminal
2. Click on Terminal in search results
3. Type in: ipconfig /flushdns and press ENTER

And that is that!

New malware with extensive spyware capabilities steals data from infected Android devices and is designed to automatically trigger whenever new info is read to be exfiltrated. The spyware can only be installed as a 'System Update' app available via third-party Android app stores as it was never available on Google's Play Store. This drastically limits the number of devices it can infect, given that most experienced users will most likely avoid installing it in the first place. The malware also lacks a method to infect other Android devices on its own, adding to its limited spreading capabilities. However, when it comes to stealing your data, this remote access trojan (RAT) can collect and exfiltrate an extensive array of information to its command-and-control server. Zimperium researchers who spotted it observed it while "stealing data, messages, images and taking control of Android phones."

What happens when malicious software is installed

"Once in control, hackers can record audio and phone calls, take photos, review browser history, access WhatsApp messages, and more," they added. Zimperium said its extensive range of data theft capabilities includes:

• Stealing instant messenger messages;
• Stealing instant messenger database files (if the root is available);
• Inspecting the default browser's bookmarks and searches;
• Inspecting the bookmark and search history from Google Chrome, Mozilla Firefox, and Samsung Internet Browser;
• Searching for files with specific extensions (including .pdf, .doc, .docx, and .xls, .xlsx);
• Inspecting the clipboard data;
• Inspecting the content of the notifications;
• Recording audio;
• Recording phone calls;
• Periodically take pictures (either through the front or back cameras);
• Listing of the installed applications;
• Stealing images and videos;
• Monitoring the GPS location;
• Stealing SMS messages;
• Stealing phone contacts;
• Stealing call logs;
• Exfiltrating device information (e.g., installed applications, device name, storage stats).

How does it work?

Once installed on an Android device, the malware will send several pieces of info to its Firebase command-and-control (C2) server, including storage stats, the internet connection type, and the presence of various apps such as WhatsApp. The spyware harvests data directly if it has root access or will use Accessibility Services after tricking the victims into enabling the feature on the compromised device. It will also scan the external storage for any stored or cached data, harvest it, and deliver it to the C2 servers when the user connects to a Wi-Fi network. Unlike other malware designed to steal data, this one will get triggered using Android's contentObserver and Broadcast receivers only when some conditions are met, like the addition of a new contact, new text messages, or new apps being installed. "Commands received through the Firebase messaging service initiate actions such as recording of audio from the microphone and exfiltration of data such as SMS messages," Zimperium said. "The Firebase communication is only used to issue the commands, and a dedicated C&C server is used to collect the stolen data by using a POST request."

Camouflage

The malware will also display fake "Searching for the update.." system update notifications when it receives new commands from its masters to camouflage its malicious activity. The spyware also conceals its presence on infected Android devices by hiding the icon from the drawer/menu. To further evade detection, it will only steal thumbnails of videos and images it finds, thus reducing the victims' bandwidth consumption to avoid drawing their attention to the background data exfiltration activity. Unlike other malware that harvests data in bulk, this one will also make sure that it exfiltrates only the most recent data, collecting location data created and photos taken within the last few minutes. If you would like to read more helpful articles and tips about various software and hardware visit errortools.com daily.