Enable or disable Console Mode Sign-in

If you receive the error code 0xc000014C while you boot up your computer, then this post might be of help. This kind of error usually points to the Registry of your computer that might be corrupted. As a result, the operating system was not able to read the BCD file and throws the 0xc000014C error. The error code 0xc000014C is triggered when your computer encounters an error in the first booting sector. You might receive any of these error messages:

“Info: An error occurred while attempting to read the boot configuration data.” with File: as “BootBCD” “File: Windowssystem32configsystem Info: Windows failed to load because the system registry file is missing or is corrupt” “Info: The Boot Configuration Data for your PC is missing or contains errors.”

To fix the error code 0xc000014C when booting your computer, you can check out the suggestions provided below.

Option 1 – Try running System Restore in Advanced Startup Options

Since you probably can’t boot into your Windows 10 computer, you can try to run System Restore again in the Advanced Startup Options.

• Boot your computer into the Advanced Startup Options screen.
• From there, you will see some options to troubleshoot when you can’t log in to Windows in the usual way.
• Now select Troubleshoot > Advanced Options > Command Prompt.
• After that, type “rstrui” and hit Enter to execute the command which will start the System Restore process.

Option 2 – Try to rebuild the BCD files

You can also try rebuilding the BCD files to resolve error 0xc000014C for corrupted Boot Configuration Data

• You can start by booting into the installation environment for Windows 10 from an installation media.
• After that, click on Repair your computer and on the blue screen, select Troubleshoot and then select the Advanced options menu.
• From there, select Command Prompt and once you open it, enter each one of the commands given below by sequence.
  • bootrec /FixMbr
  • bootrec /FixBoot
  • bootrec /ScanOS
  • bootrec /RebuildBcd
• Once you’re done executing the commands given above, type “exit” to close the Command Prompt window and then restart your computer and see if it fixed error code 0xc000014c.

Option 3 – Try restoring the default and uncorrupt Registry Values

This option is a bit tricky as you have to be sure about what you are doing here. However, if you are not sure, you might want to seek out a technician to fix the problem for you. But if you can handle it, then carefully follow the steps below.

• You have to first physically remove the hard drive of the computer that’s not booting up. You can refer to it as Hard drive 1 and Computer 1, respectively.
• After that, you need to have another computer which you can refer to as Computer 2, and refer to its hard drive as Hard drive 2. Make sure that this second computer is working properly.
• Next, you have to attach Hard drive 1 to Computer 2 with the Hard drive 2 attached as well.
• After that, boot Computer 2 from Hard drive 2 where Hard drive 1 will act as the second storage unit.
• Then navigate to the following location in the System Partition of the Hard drive 2.

C:/Windows/System32/config/RegBack

• From there, you have to replace all the files. Once you’re done, shut down your computer and then take out the Hard drive 1 from Computer 2 and put it back to Computer 1 as the only hard drive.
• Now boot your computer normally and check if the problem is fixed.

Windows 11 has brought some new features and changed some of the existing ones. One of these changes includes quick switching of audio devices which will play audio. Audio switching can still be done under the taskbar, it is just a little different and one could say even hidden. Follow this quick guide and you will be switching from your headphones to speakers as an example in a matter of seconds.

1. Click on the speaker icon located in the far-right part of the taskbar.
2. After the quick settings menu appears click on the right arrow located right of the volume slider. If the arrow is not present, instead of click on the pencil icon, then on add, and finally select Volume from the list.
3. After clicking on the arrow icon, a list of all enabled audio devices on the system will replace the volume slider. Click on the desired audio device in order to make it active.
4. Click anywhere outside the quick setting menu to save changes and close it.

Note: in the Quick settings menu if you choose More Volume Settings it will bring you to System > Sound where you can access more sound input and output options.

One of the important functions in the Windows operating system is the Task Scheduler. It can automatically run various tasks at a certain time where you’ll have to add a task that needs to be executed and then choose the time it has to run at. So when that time comes, the Task Scheduler will run the task automatically. However, some users reported getting an Error 0x80070057 where the Task Scheduler fails to start. This kind of error may be due to a disabled service that prevents the service from running. It is also possible that the antivirus program interfered with the task – it could be that the Task Scheduler is somewhat in the block list since the antivirus adds it to the list automatically when it’s installed. On the other hand, it could be that you lack administrator-level privilege which is why the Task Scheduler was not able to carry out the task. To fix this issue, here are some suggestions you can try.

Option 1 – Try to restart the Task Scheduler service

As mentioned, it is possible that the Task Scheduler service could be disabled. You could have disabled it when trying to enhance your computer’s performance and whatnot. Thus, you need to verify if it’s running or not and then restart it.

• First, you need to tap the Win + R keys on your keyboard to open the Run dialog box.
• Next, type “services.msc” in the field and click OK or tap Enter to open the Windows Services Manager.
• You will see a list of Services and from there, look for the Task Scheduler service and double click on it.
• After that, go to the General tab and click on the Startup Type options and then select “Automatically” from the given list.
• Click on the “RUN” option and select the “Restart the Service” option.
• And click on the “After Second Failure” option and then select the “Restart-Service” option again.
• Now click on the “After Subsequent Failures” tab and select the “Restart the Service” option.
• Finally, click on the Apply and OK buttons and then run the Task Scheduler and see if the issue is now fixed.

Option 2 – Try to temporarily disable the anti-virus program

As mentioned, the error could be due to the antivirus program or the Windows Defender Firewall installed in your computer. Thus, disabling them or any security software installed on your computer is always a good idea you can try when you’re not able to access the shared drive on your computer. There are times when you encounter problems like the Task Scheduler Error 0x80070057 due to interference of antivirus or security programs. Thus, you have to disable both your antivirus program for the meantime and check if it fixes the error or not.

Option 3 – Run the Task Scheduler with an administrator account

Like pointed out, the Task Scheduler Error 0x80070057 may be due to the lack of admin privileges. Thus, you have to log in to an administrator account and try running the Task Scheduler again. It is also recommended that the administrator account you’re going to use as a password when logging in.

Option 4 – Repair the Task Scheduler by deleting corrupted tasks

Note that a single corrupted file can cause big problems so this option is quite important. And for you to delete a corrupted task or any task from the Task Scheduler, you have to use the Registry Editor if you are not able to use the Task Scheduler interface. To do so, follow these steps:

• Tap the Win + R keys to open the dialog box for Run.
• Next, type in Regedit and click on OK or tap Enter to open the Registry Editor.
• Then navigate to this path: ComputerHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionScheduleTaskCacheTree

Note: In this path, you can see all the tasks that are currently set in the Task Scheduler. And since it would be hard to tell which one of them is corrupted, you have to delete the latest one in Task Scheduler last. But before you do so, make sure that you take note of the ID of the tasks. And for you to get the ID, you have to select the task you wish to delete and double click on the ID string located on your right-hand side, and then copy it in the Notepad.

• Right-click on the task name and then delete it.
• After that, delete the very same GUID which you have copied earlier from these folders:
• ComputerHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionScheduleTaskCacheBoot
• ComputerHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionScheduleTaskCacheLogon
• ComputerHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionScheduleTaskCacheMaintenance
• ComputerHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionScheduleTaskCachePlain
• ComputerHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionScheduleTaskCacheTasks

Note: You might not see the same GUID from these folders but if you see it, delete it right away.

• Next, navigate to this location: C:/Windows/System32/Tasks
• Delete the very same tasks you just deleted from the Registry Editor.
• Restart your PC and check if the Task Scheduler is back to its normal state or not.

Security on your PC and on your accounts is the important thing. Security on your phone device is also very very important. That is why we are bringing you a list of 8 applications that are marked by the cybersecurity team as ones that could be used to steal data from you. If you have by any chance any of these applications installed, uninstall them immediately.

List is as follows:

• Cake VPN (com.lazycoder.cakevpns)
• Pacific VPN (com.protectvpn.freeapp)
• eVPN (com.abcd.evpnfree)
• BeatPlayer (com.crrl.beatplayers)
• QR/Barcode Scanner MAX (com.bezrukd.qrcodebarcode)
• Music Player (com.revosleap.samplemusicplayers)
• tooltipnatorlibrary (com.mistergrizzlys.docscanpro)
• QRecorder (com.record.callvoicerecorder)

If you would like to read more helpful articles and tips about various software and hardware visit errortools.com daily.

Ntdll.dll Error - What is it?

Ntdll.dll is a type of DLL (Dynamic Link Library) error. DLL errors are some of the most common but complicated errors to troubleshoot and resolve by PC users. The Ntdll.dll error message is displayed in the following formats:

• "STOP: 0xC0000221 unknown hard error C:WinntSystem32Ntdll.dll
• "NTDLL.DLL Error!"
• "STOP: C0000221 unknown hard error SystemRootSystem32ntdll.dll"
• "[PROGRAM NAME] caused a fault in module NTDLL.DLL at [ANY ADDRESS]"
• "AppName: [PROGRAM NAME] ModName: ntdll.dll"
• "Crash caused in ntdll.dll!"
• "Unhandled exception at [ANY ADDRESS] (NTDLL.DLL)"

You may come across the ‘Ntdll.dll error’ pop-up either when you try to run a program or after using it or while the program is running. It may also appear when Windows starts or shutdowns or even during Windows installation.

Solution

Error Causes

The Ntdll.dll error code can be triggered due to numerous reasons such as:

• DLL file corruption due to hard drive bad entries
• Missing DLL files
• Corrupt hardware drivers
• Viruses
• DLL file misconfiguration

It is recommended to resolve this error code immediately on your PC to avoid inconvenience and serious PC damages like program lockouts, system failure, freeze, and crash

Further Information and Manual Repair

All the causes for ‘Ntdll.dll’ are linked with the registry. The registry is the main database of your system. It saves all the activities and files on your PC including the important data file and unnecessary files such as the junk files, temporary internet files, and obsolete files, files of the programs installed, bad entries, invalid registry keys, and cookies. These files take up also hard drive space thereby causing dll file damage, disk fragmentation, and data overload. Ntdll.dll error may also occur to due viral infection and malware attack. There are 2 ways to resolve the Ntdll.dll error. One is to install 2 separate tools, the registry cleaner, and antivirus, and run them separately to scan for errors. This option is time-consuming and running an antivirus can also slow down the speed of your computer. Therefore we recommend that you opt for the second alternative that is to download Restoro.

Why Restoro.

• This is an advanced, innovative, and multi-functional PC repair tool embedded with several powerful PC repair utilities like a registry cleaner, an antivirus, and a system optimizer. This is a one-stop solution for all your PC errors.
• It is user-friendly, safe, efficient, and compatible with all Windows versions. The registry cleaning feature scans for all registry issues.
• It wipes out all the unnecessary files from the hard drive, repairs the damaged dll files, and restores the registry, thereby resolving the Ntdll.dll error code right away.
• The privacy error utility functions like an antivirus. It detects and removes all the malicious software like viruses, malware, Trojans, and spyware. Simultaneously, the system optimizer feature boosts the PC speed.

Click here to download Restoro and resolve the Ntdll.dll error on your PC today!

As you know, aside from making computing a lot easier, mouse and touchpad, it also makes computing more efficient and less time-consuming. And so life is unimaginable without these useful devices. However, it is a known fact that you can’t customize these devices since all touchpads and mice come with their own default scrolling direction but worry not for in this post you will be guided on how you can reverse their default scrolling directions. Every user has their own different preferences when it comes to scrolling directions. You might want the scrolling directions to look like the page is being scrolled in the same direction in where you move your fingers over the touchpad or you might prefer it in an inverted way. Reversing the scroll direction for your device’s touchpad is really easy as Windows by default offers this customization. So if you are trying to find a way to reverse the scrolling direction of your mouse, then you have to follow a tricky little method which will be provided in this post. It is apparent from the number of settings the touchpad is available that it has become more customizable. You can configure everything, from its gestures, taps, sensitivity, and even its scrolling direction. And now, if you want to reverse its scrolling direction, here’s what you have to do: Step 1: Tap the Win + I keys to open Settings. Step 2: From there, go to Devices and select Touchpad from the menu. Step 3: Next, look for the Scrolling Direction setting. Step 4: Then click on the drop-down and select your preferred setting.  If you want the same direction scrolling, just select the “Downwards motion scrolls down” option, and if you want the opposite select the other one. After you carry out these steps, the settings will be applied right away and you will see the changes. On the other hand, if you want to change the scrolling direction for your mouse, the procedure is not as simple as it was for the touchpad.

To reverse the scrolling direction for a mouse, refer to these steps:

Step 1: In the Start Search, type “device manager” and click on the appropriate result to open the Device Manager. Step 2: After opening the Device Manager, look for your Mouse under the “Mice and other pointing devices” section. It is mostly listed as an “HID-compliant mouse”. Step 3: Right-click on your mouse and click Properties. Step 4: From there, go to the Details tab and from the drop-down menu, select Device Instance Path. Step 5: Now take note of the value displayed on its value field and then tap the Win + R keys to open the Run dialog box. Step 6: Type in “Regedit” in the field and hit Enter to open the Registry Editor. Step 7: Next, navigate to the following location:

HKEY_LOCAL_MACHINESYSTEMCurrentControlSetEnumHID

Step 8: From this folder, you have to start matching the values in the first part of the value you’ve taken note of. Step 9: Open the folder which has the same value and repeat this for the second part of the value. Step 10: Afterwards, click on the Device Parameters and look for a property named “FlipFlopWheel” and invert its value from 0 to 1 or 1 to 0 to reverse the scrolling direction. And then restart your PC to apply the changes made. After you restart your PC, you should see the changes in the scrolling direction of your mouse. Note that you can change the value back to its original value or just use the registry backup to undo the changes you’ve made.

Error 1512 - What is it?

Error 1512 is a type of runtime error code. This error may hamper your ability to run and load your desired programs on Windows PC. There are increased chances of runtime error 1512 occurring when system files go missing or get corrupt. Symptoms of this error code include:

• Slow PC speed
• Window System freeze

Solution

Error Causes

There are several for the occurrence of runtime error 1512. These include:

• Faulty or outdated drivers
• Poor Program installation
• Damaged Windows Registry
• Viruses tampering the system settings/memory
• Broken or incorrect Registry entries
• Damaged Windows registry

Further Information and Manual Repair

To resolve this issue you don’t have to hire a professional and spend hundreds of dollars to get it fixed. Here are some of the best and easy do-it-yourself methods to repair error 1512 on your system in a few minutes. These methods are very easy to work around and do not require any kind of technical expertise.

Method 1 - Uninstall and then reinstall the Same Program

Sometimes this runtime error may pop up due to poor program installation. In such an event, it is advisable to uninstall the program and then reinstall it again properly. To do so, go to the start menu, and click on control panel. Now select the program & features option. Here you will find the option Add/Remove Program. Remove the program causing error 1512. Once the program is removed, reinstall it again.

Method 2 - Run an Antivirus Program

Computer viruses are capable of tampering with system settings. Due to this reason you might experience runtime errors like 1512 on your PC. These malicious programs usually enter the system through phishing emails or website downloads. To resolve the issue, you need to run a powerful antivirus program. An antivirus removes all sorts of malicious programs hiding in your PC like malware, spyware, and malware that are responsible for generating runtime errors.

Method 3 - Update the Outdated Drivers on your PC

If the error still persists, then it is suggested to update outdated drivers. Faulty and outdated drivers can also trigger runtime error 1512. To do this, go to the Device Manager. Here use the Driver update wizard to make updates.

Method 4 - Remove the Invalid Registry Entries and Repair the Damaged Registry

The best way to perform both tasks is to download Restoro. It is embedded with a registry cleaner that is quite easy to use. The registry cleaner removes all invalid entries in seconds, cleans the cluttered registry by wiping out all the redundant and unnecessary files. The damaged registry is then repaired and resumes its normal function. Click here to download Restoro and resolve runtime error 1512.

My Maps Wizard is a browser extension for Google Chrome Developed by Mindspark Inc. This extension offers users access to different websites that offer route planning, map views, and other traveling tools.

While all this might sound interesting and useful, this extension has been marked as a Browser Hijacker by several popular anti-virus applications.

When installed this extension changes your default home page and new tab page to MyWay.com or Ask.com depending on the extension version. It also monitors and records user browsing activity that it later uses to display sponsored / unwanted ads throughout your browsing sessions. While browsing the internet with this extension active and installed you will see additional pop-up ads, sponsored links, and injected ads into search results.

About Browser Hijackers

Browser hijacking is a form of unwanted software, often a browser add-on or extension, which causes modifications in the browser’s settings. There are lots of reasons why you may experience a browser hijack; however commercial, advertising, and marketing are the primary reasons for their creation. It redirects you to the sponsored websites and injects ads on your internet browser that assists its creator to generate earnings. Although it may seem naive, these tools were created by malicious people who always attempt to take full advantage of you, so that hackers can easily earn money from your naive and distraction. Browser hijackers could also allow other harmful programs without your knowledge to further damage your personal computer.

How you can know whether the web browser is hijacked?

There are numerous symptoms of web browser hijacking: 1. you notice unauthorized modifications to your web browser’s homepage 2. you find new unwanted favorites or bookmarks added, usually directed to ad-filled or pornography sites 3. the default search engine and the default web browser settings are altered 4. you find many toolbars on the internet browser 5. never-ending pop-up ads appear and/or your browser pop-up blocker is disabled 6. your browser has instability problems or exhibits frequent errors 7. you can’t visit specific websites such as homepages of anti-malware software.

So how does a PC get infected with a browser hijacker?

There are a number of ways your PC can get infected by a browser hijacker. They generally arrive by way of spam email, via file-sharing websites, or by a drive-by download. They may also originate from any BHO, browser extension, toolbar, add-on, or plug-in with malicious intent. A browser hijacker may also come bundled up with some freeware that you unwittingly download to your PC, compromising your internet security. An example of some infamous browser hijacker includes Conduit, Anyprotect, Babylon, SweetPage, DefaultTab, RocketTab, and Delta Search, however, the names are often changing. Browser hijacking can lead to severe privacy problems and even identity theft, affect your web browsing experience by taking control of outgoing traffic, drastically slows down your personal computer by consuming lots of system resources, and cause system instability as well.

Learn how to remove a browser hijacker

Certain browser hijacking can be quite easily stopped by finding and eliminating the corresponding malware software through your control panel. Having said that, the majority of hijackers are quite tenacious and need specialized tools to remove them. Furthermore, manual removals require in-depth system knowledge and therefore could be a very difficult task for novice computer users. Industry experts always suggest users eliminate any malicious software including browser hijacker by using an automatic removal tool, which is simpler, safer, and quicker than the manual removal solution. One of the best tools for correcting browser hijacker infections is SafeBytes Anti-Malware. It will help you remove any pre-existing malicious software on your system and provides you real-time monitoring and protection against new internet threats. Employ a system optimizer (such as Total System Care) along with your antivirus software to correct various registry issues, eliminate computer vulnerabilities, and boost your computer performance.

What To Do When You Cannot Install Safebytes Anti-Malware?

All malware is bad, but certain types of malware do much more damage to your computer or laptop than others. Certain malware variants modify web browser settings by adding a proxy server or change the PC’s DNS configuration settings. In these instances, you’ll be unable to visit certain or all of the sites, and thus not able to download or install the required security software to eliminate the computer virus. So what to do if malicious software keeps you from downloading or installing Anti-Malware? There are a few actions you can take to get around this issue.

Install the anti-malware in Safe Mode

Safe Mode is actually a unique, basic version of Microsoft Windows in which just bare minimum services are loaded to stop viruses as well as other troublesome applications from loading. If the virus is set to load automatically when PC boots, shifting to this mode may prevent it from doing so. To get into Safe Mode or Safe Mode with Networking, press F8 while the system is starting up or run MSConfig and find the “Safe Boot” options under the “Boot” tab. Once you are in safe mode, you can try to install your antivirus application without the hindrance of malicious software. Now, you are able to run the antivirus scan to remove computer viruses and malware without hindrance from another malicious application.

Download the security software in an alternate browser

Malicious code may exploit vulnerabilities in a particular internet browser and block access to all anti-malware software sites. The best solution to avoid this issue is to go with a browser that is well known for its security features. Firefox contains built-in Malware and Phishing Protection to keep you secure online.

Run antivirus from a pen drive

Another way is to download and transfer anti-malware software from a clean PC to run a virus scan on the affected computer. Try these simple measures to clean up your infected computer by using portable anti-malware. 1) Download Safebytes Anti-Malware or Windows Defender Offline onto a virus-free computer system. 2) Mount the USB drive onto the same computer. 3) Double-click on the downloaded file to open the installation wizard. 4) When asked, select the location of the pen drive as the place where you want to store the software files. Follow activation instructions. 5) Remove the pen drive. You can now utilize this portable antivirus on the infected computer. 6) Double click the Safebytes Anti-malware icon on the flash drive to run the application. 7) Press the “Scan Now” button to begin the malware scan.

Let's Talk About SafeBytes Anti-Malware!

If you’re looking to download an anti-malware application for your PC, there are lots of tools out there to consider however, you cannot trust blindly to anyone, regardless of whether it is paid or free software. A few are very good ones, some are decent, and some are merely fake anti-malware applications that will harm your PC themselves! You must pick one that is efficient, practical and has a good reputation for its malware protection. One of the recommended software programs is SafeBytes Anti-Malware. SafeBytes has a superb history of excellent service, and customers are very happy with it. Safebytes is among the well-established computer solutions firms, which provide this complete anti-malware software. Using its cutting-edge technology, this software will help you remove multiples types of malware like viruses, PUPs, trojans, worms, ransomware, adware, and browser hijackers.

SafeBytes anti-malware provides a plethora of advanced features which sets it aside from all others. The following are some of the features you may like in SafeBytes.

World-class AntiMalware Protection: Built upon a greatly acclaimed anti-virus engine, this malware removal application can identify and get rid of numerous obstinate malware threats such as browser hijackers, potentially unwanted programs, and ransomware that other typical anti-virus programs will miss. Live Protection: SafeBytes offers complete and real-time security for your PC. It’ll constantly monitor your pc for hacker activity and also provides users with superior firewall protection. Safe Browsing: Through its unique safety rating, SafeBytes informs you whether a site is safe or not to visit it. This will make sure that you’re always certain of your online safety when browsing the web. Light-weight Utility: SafeBytes is a lightweight and user-friendly anti-virus and anti-malware solution. As it uses minimum computer resources, this application leaves the computer power exactly where it belongs to: with you. Fantastic Tech Support Team: You can get high levels of support 24/7 if you’re using their paid version. SafeBytes can keep your personal computer safe from the latest malware threats automatically, thus keeping your internet experience secure and safe. You can be sure that your computer system will be protected in real-time once you put this tool to use. If you want advanced forms of protection features & threat detections, buying SafeBytes Anti-Malware could be worth the money!

Technical Details and Manual Removal (Advanced Users)

To remove My Maps Wizard manually, go to the Add/Remove programs list in the Windows Control Panel and select the offending program you want to get rid of. For internet browser extensions, go to your browser’s Addon/Extension manager and select the add-on you would like to remove or disable. You will additionally also want to totally reset your web browser to its default configuration settings. To ensure complete removal, find the following Windows registry entries on your computer and remove them or reset the values appropriately. But bear in mind, this can be a tricky task and only computer professionals could carry it out safely. In addition, some malicious programs are capable to defend against its removal. You’re advised to do this process in Safe Mode.

Windows Terminal is a new free Microsoft terminal sort of application. When you open either Power Shell or Command Prompt in Windows they will be opened in different windows, and if you want several of each you will have several windows of each on your screen. Windows Terminal fixes this by opening each of the Instances of Command Prompt and Power Shell as separate tabs inside itself making it much easier to manage multiple instances of named applications. You can also run both Power Shell and Command prompt tabs in the same Windows Terminal. Luckily running command prompt and power shell in different tabs is not the only thing you can do. Windows Terminal lets you choose your own theme, it has emoji support, GPU rendering, split panes, and many more customizable options. Windows 11 will have Terminal as the default command-line environment for opening Power Shell or Command prompt, even Windows Subsystem for Linux (WSL)

Setting Windows Terminal as the default application

If I was successful I have managed to show you that Windows Terminal is something that you should use even if you do not or cannot upgrade to Windows 11. You can use it inside Windows 10 also. First thing is to download and install it. You can get Windows Terminal from the official Microsoft website here: Windows Terminal page After download and installation are completed, open the Terminal app and select the down arrow menu, click Settings. Alternatively, you can use CTRL + + shortcut. Inside Settings by default Default Terminal application would be set to Windows Console Host Click on the Default Terminal application to bring a drop-down menu and choose Windows Terminal from the list. Now by default once opened Windows Terminal will use Power Shell as the default profile, however, you can change this by clicking on the drop-down for the default profile where you can choose between Command Prompt, Power Shell, Windows Power Shell, or Azure Cloud Shell. Pick one that you prefer, click on Save and it will be opened as default on the next run.

Hive ransomware has been targeting Microsoft exchange servers lately vulnerable to ProxyShell security issues in order to deploy various backdoors. Once the backdoor has been placed various attacks can be performed including but not limited to network reconnaissance, stealing admin accounts, taking valuable data, and even installing and deploying file-encrypting algorithms.

ProxyShell wide abuse

ProxyShell is a set of three vulnerabilities in the Microsoft Exchange Server that allows remote code execution without authentication on vulnerable deployments. The flaw has been used in past by various ransomware like Conti, BlackByte, Babuk, Cuba, and LockFile.

Security vulnerabilities have been reported to be fully patched on May 2021 but how Hive was able to still be successful in exploiting PowerShell and infiltrating into the system there seems to be still some unpatched and open issues.

Hive

Hive has gone a long way since it was first observed in the wild back in June 2021, having a successful start that prompted the FBI to release a dedicated report on its tactics and indicators of compromise.

In October 2021, the Hive gang added Linux and FreeBSD variants, and in December it became one of the most active ransomware operations in attack frequency.

Last month, researchers at Sentinel Labs reported on a new payload-hiding obfuscation method employed by Hive, which indicates active development.