Enable or Disable Windows 10 Boot Log

Stop C00002lA Fatal System Error- What is it?

C00002lA Fatal System Error is a blue screen of death error that may occur when you start your Windows NT 4.0 based computer. This error causes the screen to turn blue and the system also shuts down. The stop C000021A error message is displayed in the following format:

Stop c000021a {Fatal System Error} The session manager initialization system process terminated unexpectedly with a status of 0xc0000017 (0x00000000, 0x0000000) The system has been shut down.

Error Causes

The stop C000021A error occurs when either Crsrss.exe or Winlogon.exe fails. When the Windows NT kernel identifies that either of these processes has failed, it stops and the error code stop C000021A appears on the computer screen. Here are some of the underlying causes for the stop C0000021A error:

• The incompatible third-party program
• Hard disk issues
• Service pack installation has failed
• Mismatched system files have been installed
• Bad and invalid registry keys

Further Information and Manual Repair

To resolve the stop C000021A Fatal System Error on your PC try the following solutions:

• Remove Incompatible Third Party Programs

If the error occurred after you recently installed a new program, then it is advisable to remove that program. The error occurs due to the incompatibility of the program. To remove the program go to the start menu and click on the control panel. Now click on Add/Remove Program tab and double click on the program name that you recently installed and remove it from the list. Once removed, not reboot your PC. Reinstall a compatible program and run it. It is most likely to resolve the issue. However, if the stop C000021A error still occurs, then it means the problem is critical. It is related to the registry.

• Repair and Restore the Registry

This procedure is slightly long and tricky. To try it, you need to be technically sound. Here’s what you have to do: first create a parallel installation of Windows NT. Start your PC to the parallel installation and then open the Registry Editor. On the Registry Editor’s Windows menu click HKEY_LOCAL_MACHINE on Local Machine and then click Load Hive. Now type the path %systemroot%system32configsystem into the System hive of the prior installation. Then click open. Here you will be prompted to enter the name of the key, type TEST. Note the setting for the current DWord value in the preceding registry key. This is 0x1 and is denoted by CURRENT:Reg_Dword: 0x1. This value indicated that the Current Control Set for your original Windows NT installation corresponds to ControlSet001 in this window. Now if the value is 2, it indicated that the Current Control Set corresponds to ControlSet002. Now locate the following registry key: HKEY_LOCAL_MACHINETESTControlSetXXXControlSession Manager. XXX is the Current Control Set Value. And delete any pending file rename operation entries. Then click TEST hive and then click Unload Hive. After that again repeat the process, open the registry menu and click load hive, here type the path %systemroot%system32configSoftware to the Software hive of the prior installation and then click open. Now you type TEST 2 when you are prompted for the name of the key. Remove any pending file rename operations entries in the following registry keys: HKEY_LOCAL_MACHINETEST2MicrosoftWindowsCurrentVersionRunOnce HKEY_LOCAL_MACHINETEST2MicrosoftWindowsCurrentVersionRunOnceEx Now click TEST2 hive and then click unload hive. Quit the Registry Editor and then restart your original installation. This will resolve the stop C000021A error.

What is PyLocky ransomware? And how does it execute its attack?

PyLocky ransomware is a file-locking malware created in order to lock important files and demand ransom from victims in exchange for data recovery. This new ransomware uses the .lockymap extension in marking the files it encrypts. It starts to execute its attack by dropping the following malicious payload in the system:

Name: facture_4739149_08.26.2018.exe SHA256:8655f8599b0892d55efc13fea404b520858d01812251b1d25dcf0afb4684dce9 Size: 5.3 MB

After dropping its malicious payload, this crypto-malware connects the infected computer to a remote server where it downloads more malicious files and places them on system folders. It then applies a data gathering module used to gather data about the user and the computer. The malicious files that were downloaded earlier along with the data obtained are used for another module called stealth protection. This allows PyLocky ransomware to execute its attack without detection from any security or antivirus programs installed in the system. It also modifies some registry keys and entries in the Windows Registry such as:

• HKEY_CURRENT_USERControl PanelDesktop
• HKEY_USERS.DEFAULTControl PanelDesktop
• HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun
• HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun
• HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunOnce
• HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunOnce

Once all the modifications are carried out, PyLocky ransomware will begin encrypting its targeted files using a sophisticated encryption cipher. Following the encryption, it adds the .lockymap extension to each one of the encrypted files and releases a ransom note named “LOCKY-README.txt” which contains the following content:

“Please be advised: All your files, pictures document and data has been encrypted with Military Grade Encryption RSA ABS-256. Your information is not lost. But Encrypted. In order for you to restore your files, you have to purchase a Decrypter. Follow these steps to restore your files. 1* Download the Tor Browser. ( Just type in google “Download Tor“ 2‘ Browse to URL: http://4wcgqlckaazungm.onion/index.php 3* Purchase the Decryptor to restore your files. It is very simple. If you don’t believe that we can restore your files, then you can restore 1 file of image format for free. Be aware the time is ticking. Price will be doubled every 96 hours so use it wisely. Your unique ID : CAUTION: Please do not try to modify or delete any encrypted file as it will be hard to restore it. SUPPORT: You can contact support to help decrypt your files for you. Click on support at http://4wcgqlckaazungm.onion/index.php”

How does PyLocky ransomware spread over the web?

PyLocky ransomware spreads using malicious spam email campaigns. Creators of this threat embed an infected attachment to spam emails and send them using a spambot. Crooks may even use deceptive tactics to trick you into opening the malware-laden immediately which is something you must not do. Thus, before opening any emails, make sure that you’ve thoroughly checked them. To successfully obliterate PyLocky ransomware from your computer, refer to the removal guide laid out below.

• Step 1: Launch the Task Manager by simply tapping Ctrl + Shift + Esc keys on your keyboard.
• Step 2: Under the Task Manager, go to the Processes tab and look for the process named facture_4739149_08.26.2018.exe and any suspicious-looking process which takes up most of your CPU’s resources and is most likely related to PyLocky ransomware.
• Step 3: After that, close the Task Manager.
• Step 4: Tap Win + R, type in appwiz.cpl and click OK or tap Enter to open Control Panel’s list of installed programs.
• Step 5: Under the list of installed programs, look for PyLocky ransomware or anything similar, and then uninstall it.
• Step 6: Next, close the Control Panel and tap Win + E keys to launch File Explorer.
• Step 7: Navigate to the following locations below and look for PyLocky ransomware’s malicious components such as facture_4739149_08.26.2018.exe and LOCKY-README.txt as well as other suspicious files, then delete all of them.

%TEMP% %WINDIR%System32Tasks %APPDATA%MicrosoftWindowsTemplates %USERPROFILE%Downloads %USERPROFILE%Desktop

• Step 8: Close the File Explorer.
• Step 9: Tap Win + R to open Run and then type in Regedit in the field and tap enter to pull up Windows Registry.
• Step 10: Navigate to the following path:

HKEY_CURRENT_USERControl PanelDesktop HKEY_USERS.DEFAULTControl PanelDesktop HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunOnce HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunOnce

• Step 11: Delete the registry keys and sub-keys created by PyLocky ransomware.
• Step 12: Close the Registry Editor and empty the Recycle Bin.

Try to recover your encrypted files using the Shadow Volume copies Restoring your encrypted files using Windows Previous Versions feature will only be effective if PyLocky ransomware hasn’t deleted the shadow copies of your files. But still, this is one of the best and free methods there is, so it’s definitely worth a shot. To restore the encrypted file, right-click on it and select Properties, a new window will pop up, then proceed to Previous Versions. It will load the file’s previous version before it was modified. After it loads, select any of the previous versions displayed on the list like the one in the illustration below. And then click the Restore button.

Facebook has an algorithm inside it that can recognize your face in pictures and videos which is meant to help people tag friends when they upload media into Facebook. It is a neat feature meant to help all Facebook users but what if we do not want to be detected in pictures and videos? What if we do not want to be tagged? If you are one of the Facebook users that do not wish to be detected and recognized by Facebook in media keep on reading to find out how you can disable this option.

1. Open the Facebook website and log into your account.
2. Click on the arrow visible in the top menu bar.
3. Select the Settings & privacy option.
4. Click on the Settings option.
5. Switch to the Face recognition tab on the left-hand side.
6. Click the Edit button.
7. Select No from the drop-down list.

And you are done, you do not need to log out or restart facebook in order for changes to have an effect. Now you are free from face recognition and detection.

Windows 11 brought with it a simplified right-click menu that has limited options. If you would like to bring the old Windows 10 right-click menu you will have to do some registry tweaking but it is doable. Since this requires registry tweak, please follow given solution step by step

1. Press Start and type RegEdit
2. Click on Registry Editor
3. Inside registry editor find next key: Computer\H_KEY_CURRENT_USER\SOFTWARE\CLASSES\CLSID\
4. Right click in the right part of editor window and select New > Key
5. Type in as a name: {86ca1aa0-34aa-4e8b-a509-50c905bae2a2}
6. Right click on {86ca1aa0-34aa-4e8b-a509-50c905bae2a2} key and select New > Key again to create new key inside this one
7. Name inside key InprocServer32
8. Double click the “(Default)” key in InprocServer32 to open it
9. When the Default key opens close it without making any changes by clicking on OK. This will make its value property Blank instead of value not set
10. Close Registry Editor
11. Restart your PC

Once the system is up if the followed solution is applied you will now have an old school menu once right-click is used.

You might be familiar with the Encryption File System or EFS algorithm if you rather keep your files and folders encrypted. Encryption File System is a built-in feature in Windows 10 which allows users to secure their important files. Although there is an alternative way for you to secure your data on your Windows 10 computer, you can’t ignore the fact that the main advantage of an Encryption File System over BitLocker is that the former can help you encrypt a particular folder rather than encrypting the whole hard drive partition. If you move a file inside a folder encrypted with the Encrypting File System it will automatically get encrypted. There are some users who like this feature but unsurprisingly, there are some that don’t. So if whether you want your files encrypted when you place them in an encrypted folder or if you want to keep it as it is, read on as to how you can do it either way. You can enable or disable automatic encryption of files moved to encrypted folders in Windows 10 using the Registry Editor or the Group Policy Editor. Before you proceed, make sure to create a System Restore Point first because the modifications you’re about to make in your computer might affect its overall functioning so if anything goes wrong, you can always undo the changes. Once you have that covered, refer to the options given below to enable or disable automatic encryption in Windows 10.

Option 1 – Enable or disable automatic encryption using Registry Editor

• Press the Win key + R key at the same time to open the Run dialog box.
• Then type “Regedit” in the field and press Enter to open the Registry Editor and if a User Account Control or UAC prompt appears, just click Yes to proceed.
• After opening the Registry Editor, navigate to this key location: HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionPoliciesExplorer
• Next, right-click on Explorer and select New > DWORD (32-bit) Value and then name the newly create DWORD to “NoEncryptOnMove” and press Enter to save it.
• After that, double click on the NoEncryptOnMove DWORD and set its value to the following preferences:
  • 1 – Disable Auto Encryption of files moved to encrypted folders.
  • 0 – Enable Auto Encryption of files moved to encrypted folders.

• Now close the Registry Editor and restart your computer to successfully apply the changes made.

Option 2 – Enable or disable automatic encryption using the Group Policy Editor

• Press the Win + R keys to open the Run box and type “gpedit.msc” in the field and press Enter to open the Group Policy Editor.
• After that, navigate to this path: Computer ConfigurationAdministrative TemplatesSystem
• Next, look for the “Do not automatically encrypt files moved to encrypted folders” option and double click on it to set the policy. From there, you will see the following description:

“This policy setting prevents File Explorer from encrypting files that are moved to an encrypted folder. If you enable this policy setting, File Explorer will not automatically encrypt files that are moved to an encrypted folder. If you disable or do not configure this policy setting, File Explorer automatically encrypts files that are moved to an encrypted folder. This setting applies only to files moved within a volume. When files are moved to other volumes, or if you create a new file in an encrypted folder, File Explorer encrypts those files automatically.”

• Now select one of the radio buttons below depending on your preference:
  • Not Configured or Disabled: Enable Auto Encrypt of files moved to EFS Encrypted folders.
  • Enabled: Disable Auto Encrypt of files moved to EFS Encrypted folders.
• Then click on the Apply and OK buttons to save the changes made.
• Exit the Group Policy Editor and restart your computer.

In case you don’t know, new support has been added by Microsoft to Windows 10 that now allows users to turn off or on the Mobile Hotspot remotely. The Mobile Hotspot feature, known earlier as “Virtual Networks”, was first introduced with the initial release of Windows 10. With this new feature to remotely turn on or off the Mobile Hotspot in Windows 10, users can just use the Bluetooth on their mobile phones to turn off or on the Mobile Hotspot even when their Windows 10 computers are out of their reach. To turn off or on the Mobile Hotspot feature in your Windows 10 computer remotely, there are two options you can try. First, you can do it using the Windows 10 settings app or using the Registry Editor. To get started, refer to the following options.

Option 1 – Turn off or on the Mobile Hotspot remotely via Windows 10 Settings app

• First, you need to open the Windows 10 Settings app and from there go to Network & Internet and then go to the Mobile Hotspot section.
• After that, scroll down to the “Turn on remotely” section.
• Once done, make sure that the toggle button is set to ON and that the Bluetooth of both devices is turned on and paired as well. This should enable the feature to turn on or off the mobile hotspot remotely.

Option 2 – Turn off or on the Mobile Hotspot remotely via Registry Editor

Before you get started with the second option, make sure that you create a System Restore point first. Once done, proceed to the following steps:

• Tap the Win + R keys to open the Run dialog box and type “Regedit” in the field and then hit Enter to open the Registry Editor.
• Next, navigate to this registry path: ComputerHKEY_LOCAL_MACHINESOFTWAREMicrosoftWcmSvcTethering
• From there, look for the DWORD named “RemoteStartupDisabled” and set its Value data to be “0”. This will enable the feature that will allow you to remotely turn on or off the mobile hotspot in your Windows 10 computer. To disable it, just set its Value data to “1”.

Driver state power failure error can be linked to three things happening in your computer. Incorrect power settings, driver issues, or incompatible hardware. Sadly when this error happens you only receive a blue screen of death with this message: Sadly receiving this blue screen does not really explain which of the three cases is the correct one and causing the unwanted issue. That being said, this article will not offer you a direct solution this time, it will be more like a guide on what to check and to do in order to remove this error, reason for this is the nature of the error itself. If your computer is booting properly and you can enter Windows without issues the first thing you can try is going into power options and set it to high performance, if you are on a laptop set high performance both ways, when plugged and when on battery. Power performance settings can reflect on some hardware and can cause mayhem. After setting reboot the computer and see if the error repeats itself. If the error persists go to the device manager and see if there is hardware that has any kind of warning beside it. If there is, update the driver or remove the driver of the device to see if this fixes the issue. If all of the previous two things fail there is another thing you could try. Turn off your computer and disconnect all hardware except the most basic one. Now, this may take a long period of time but boot your computer and then repeat this process but each time add a new piece of hardware to eliminate and find which one is causing the issue. When found try to see if it is repairable through driver updates or get a new device.

If you suddenly encounter PFN_LIST_CORRUPT Blue Screen of Death error while using your computer then it means that the Page Frame Number or PFN list is corrupted. Page Frame Number is an indexing number used by the hard drive to find out the location of every single file on the physical disk. This kind of Blue Screen error is usually caused by a driver that’s passing a bad memory descriptor list and it can either be temporary or permanent. And so to fix this particular BSOD error, read on as this post contains a couple of suggestions that could help. Keep in mind that when you get a Blue Screen error like PFN_LIST_CORRUPT, the power connection to your PC must not be interrupted and so if you are using a laptop, it’s best if you connect it to a power source. On the other hand, if creating a dump from 0% to 100% takes up more than 5-10 minutes, then you have to force shut down your computer by pressing and holding the Power Key for 10 seconds or at least until the CPU lights turn off. After you do that, proceed to the troubleshooting tips prepared below.

Option 1 – Run the Blue Screen Troubleshooter

The Blue Screen troubleshooter is a built-in tool in Windows 10 that helps users in fixing BSOD errors like PFN_LIST_CORRUPT. It can be found on the Settings Troubleshooters page. To use it, refer to these steps:

• Tap the Win + I keys to open the Settings panel.
• Then go to Update & Security > Troubleshoot.
• From there, look for the option called “Blue Screen” on your right-hand side and then click the “Run the troubleshooter” button to run the Blue Screen Troubleshooter and then follow the next on-screen options. Note that you might have to boot your PC into Safe Mode.

Option 2 – Run a System File Checker scan

You can also try to run a System File Checker or SFC scan in order to scan your computer for corrupted files that might be the cause behind the PFN_LIST_CORRUPT error. Once it finds any corrupted system files, it will automatically fix them. To run System File Checker, here’s what you have to do:

• Tap Win + R to launch Run.
• Type in cmd in the field and tap Enter.
• After opening Command Prompt, type in sfc /scannow

The command will start a system scan which will take a few whiles before it finishes. Once it’s done, you could get the following results:

1. Windows Resource Protection did not find any integrity violations.
2. Windows Resource Protection found corrupt files and successfully repaired them.
3. Windows Resource Protection found corrupt files but was unable to fix some of them.

• Restart your computer after the scan is completed.

Option 3 – Check for any hard disk errors

• On your desktop, right-click on the “This PC” or computer icon and then select Manage to open the Disk Management. Here you get to check your drive’s health.
• Next, click on Disk Management on the left side panel.
• From there, check the state of your drives. If it shows that all your partitions are healthy then it means all is good and that the problem may have something to do with some physical issues with your hard drive.

You might also want to run the CHKDSK utility to help you fix any issues with your hard disk. If your hard drive has issues with integrity, the update will really fail as the system will think that it’s not healthy and that’s where the CHKDSK utility comes in. The CHKDSK utility repairs hard drive errors that might be causing the problem.

• Open Command Prompt with admin privileges.
• After opening Command Prompt, execute the following command and hit Enter:

chkdsk /f /r

• Wait for the process to be completed and then restart your computer.

Option 4 – Update the Device drivers

Updating the Device drivers can also help you fix the PFN_LIST_CORRUPT Blue Screen error. To do so, follow the steps below.

• Tap the Win + R keys to launch Run.
• Type in devmgmt.msc into the box and tap Enter or click OK to open the Device Manager.
• After that, a list of device drivers will be displayed. If you see a red or yellow sign that shows up against the driver, right-click on the driver and select “Update Driver Software”.
• Select the “Search automatically for updated driver software” option and then follow the instructions to complete the process.
• Restart your PC and then check if the Blue Screen error is now fixed or not.

Option 5 – Disable OneDrive

The PFN_LIST_CORRUPT error might also be caused by OneDrive. Thus, you have to try disabling this program to resolve the problem.

• Tap the Ctrl + Shift + Esc keys to open the Task Manager.
• Once the Task Manager is open, click on More Details located at the bottom left portion of the window.
• Then go to the Startup tab and select Microsoft OneDrive and then click Disable.

Windows 11 will bring some old applications in new looks and some will get additional features as well. One of the old apps that will get new stuff is a calculator. The calculator was always a way to go application for quick calculations but Microsoft aims to expand on that and make the calculator a little more useful. The first thing that you will notice is the calculator look, the calculator has now an application theme setting that allows you to change the look of the application. It comes in standard and professional mode as usual but this time calculator will come with features that will enable it to handle some programming and engineering tasks. The new calculator features a full graphing mode that lets you visually analyze a graph to identify key features. It also packs a deep converter that can switch between more than 100 units and currencies.

Other Windows 11 apps

A new snipping tool will be delivered with this latest update as well packed with new functionality. We have covered new features of the snipping tool in another article, if you are interested you can find the article here: https://errortools.com/windows/new-snipping-tool-redesigned-in-windows-11/ Mail and Calendar apps will also get a redesign, sadly all redesign that they will include will be of visual nature to fit in the overall Windows 11 theme, functionality will remain the same.

Hello everyone, last time we were talking about disk cleanup and its benefits, but as you need to keep your System clean you should also clean and keep your hardware clean as well. Many system issues could be traced and could happen due to dirty PC. In this article, we will give you tips on how to perform safely cleaning on your computer and hopefully point good sides to it so you can develop a healthy habit of regularly cleaning it and keeping it tidy. Keeping your PC clean is not rocket science and you can do it with things you already and probably have in your house. One thing that I would recommend tho to purchase is antistatic gloves since they could prevent any kind of electrostatic discharges thus protecting your electric components. If you have the option to disconnect your PC and get it outdoors, I would highly recommend this approach since all the dust will be dusted outside and not in the room where your computer is. If you can not it is still ok, but since some portion of dust will be set in the room, you might need to dust your room after cleaning your computer.

Cleaning outside case & redusting inside

The first thing after disconnecting your computer is to dust it from outside, here you will need a vacuum cleaner and a brush, gently brush outside dust from your casing and vacuum it with your vacuum cleaner. You can use dustcloth for larger parts but use the brush for fans and connectors. After you have done cleaning the outside part, open the side of your computer casing, put on your antistatic gloves, and get a fine and soft brush, repeat dusting and vacuuming of the inner parts of your computer. If your computer is not regularly been cleaned this part will take a little longer since there would be excess dust inside and it will take a longer time to vacuum it all but keep going until you are left with no dirt.

Cleaning it inside

Fans are troublesome to clean since they will rotate when brushed and that could make you miss certain sports, in order to battle this get a tape and stick the fan into one position, brush areas that you can reach, then unstick it, rotate the head, stick it again in another position and dust off remaining areas which you could not reach before. If your computer is very dirty and some hard dirt is at bottom of the connectors, disconnect desired component and clean the connection properly. plug it back in immediately after cleaning to avoid connecting it somewhere else. Harder stains that could not be dusted could be cleaned with little alcohol. Get your dustcloth just a little wet with alcohol, just a corner, and gently wipe out sticky dust or spills if they are present. Leave it 10 minutes for alcohol to evaporate before plugging it back into an electric socket.

Thermal paste and cable management

If you have money and expertise, every 2 years would be a good idea to change the thermal paste on your processor, all you need to do is buy it from your local computer store online, remove the CPU fan clean the CPU and bottom of the fan and apply new thermal paste, place fan back and lock it. If you do not have expertise in this area, call someone who has to show you how it is done. When cleaning it would be a good idea if you do not have any cable management to do it now, nice and tidy cables not only look good, they also improve your air circulation inside your casing making your computer cooling better. once you are done with it, close back the casing side and plug it back in the wall.

Peripherals

When you are cleaning your computer, do yourself a favor and clean your keyboard, mouse, and screen as well. the keyboard can be quickly cleaned with compressed air in the can and screen and mouse with dustcloth. That's it, remember, keep your PC clean and tidy and enjoy the benefits of non-hardware malfunctions caused by dirt and dust.