Excluding a folder from Windows Defender scan

The Windows Defender program can both scan and monitor almost the entire folder on a Windows 10 computer. So if you have a folder that may have files that could trigger an alarm to Windows Security, then it would be better if you add an exclusion to Windows Security.

Note that it is okay to do this as long as you’re certain that the contents of the folder you want to exclude are safe and that Windows Defender is only throwing out warnings for nothing. This way, Windows Defender won’t scan those folders in the future. And besides, there are also some Windows folders and files that you may exclude from the Antivirus scans, especially if you want to save your scan time. This kind of feature also comes in handy when you trust a file type or folder or any process that you believe is safe but the Windows Security considers as malicious.

To exclude a folder or a file or process or a file type from the Windows Security scan, here are some steps you can follow. Make sure to do them carefully.

Step 1: Search for “Windows Security” in the Search box and then click on it from the search results to open it.

Step 2: Next, click on Virus & threat protection > Manage settings > Add or remove exclusions.

Step 3: After that, on the next screen, click on Add an exclusion > Folder. It will show you a list that includes File, Folder, File Type, and Process.

Step 4: Now click on “+Add and exclusion” on the next window and then select a folder you want to exclude and click OK to add it in the Exclusions list.

Step 5: Click on the down arrow button to remove it and then click on the Remove button.

Note: If you want to only ignore a few file types, it’s better if you configure your antivirus program to ignore these files with a specific extension. This way, it will ignore all of them no matter what their location is. Also keep in mind that when you select a folder, all the subfolders in it will also be excluded from the scan. Thus, you need to understand what you’re about to do. Once you’re done excluding the folder, it is recommended that you protect the folder using the Controlled Folder Access since this folder is not monitored for threat. The Controlled Folder Access will ensure that an external program does not alter it. This way, you can be sure that even though this folder is not included in the scan, it is still secure.

Do You Need Help with Your Device?

Our Team of Experts May Help
Troubleshoot.Tech Experts are There for You!
Replace damaged files
Restore performance
Free disk space
Remove Malware
Protects WEB browser
Remove Viruses
Stop PC freezing
GET HELP
Troubleshoot.Tech experts work with all versions of Microsoft Windows including Windows 11, with Android, Mac, and more.

Share this article:

You might also like

How to Fix fltmgr.sys in Windows 10
The fltmgr.sys file or the Filter Manager is the one that’s responsible in making sure that all the file stored in a computer’s hard drive stays on their respective locations and is located in C:/Windows/System32/drivers. Now when you encounter a Blue Screen of Death or BSOD error saying, “Your PC ran into a problem that it couldn’t handle, and now it needs to restart. SYSTEM_SERVICE_EXCEPTION”. This kind of Stop error is due to an error with the driver that’s responsible for enabling the communication between the hardware and the computer. It indicates that this driver allows direct access to the internal hardware from the CPU itself. What’s worse about the SYSTEM_SERVICE_EXCEPTION BSOD error is that there are times when you won’t be able to log in to your computer even after it reboots. However, you need not worry as this post will guide you into fixing this BSOD error. All you have to do is follow the given options below carefully and that before you proceed make sure that you create a System Restore point just in case something goes wrong.

Option 1 – Run the Windows Update

Obviously, since the fltmgr.sys file is a system file from Microsoft, you can try running the Windows Update and see if it fixes the problem or not.

Option 2 – Run the System File Checker

The System File Checker, also known as the SFC scan, is a built-in utility in Windows that can be found in the C:/Windows/System32 folder. This tool allows you to scan and restore any corrupted system files in Windows that might be causing the SYSTEM_SERVICE_EXCEPTION BSOD error. To use this tool, follow the steps below.
  • Tap Win + R to launch Run.
  • Type in cmd in the field and tap Enter.
  • After opening Command Prompt, type in sfc /scannow
The command will start a system scan which will take a few whiles before it finishes. Once it’s done, you could get the following results:
  1. Windows Resource Protection did not find any integrity violations.
  2. Windows Resource Protection found corrupt files and successfully repaired them.
  3. Windows Resource Protection found corrupt files but was unable to fix some of them.
  • Restart your computer and then check if it has fixed the error or not.

Option 3 – Run the Blue Screen Troubleshooter

The Blue Screen troubleshooter is a built-in tool in Windows 10 that can be found on the Settings Troubleshooters page. To use it, refer to these steps:
  • Tap the Win + I keys to open the Settings panel.
  • Then go to Update & Security > Troubleshoot.
  • From there, look for the option called “Blue Screen” on your right-hand side and then click the “Run the troubleshooter” button to run the Blue Screen Troubleshooter and then follow the next on-screen options. Note that you might have to boot your PC into Safe Mode.

Option 4 – Check your hardware for any physical issues

There are times when faulty hardware can result in serious problems in the system such as the SYSTEM_SERVICE_EXCEPTION Blue Screen error. Thus, it is highly recommended that you check the internal components of your CPU to find out if there are any problems. And if there is any physical damage, you need to bring that to a technician to get it fixed or have it replaced.

Option 5 – Run the CHKDSK utility

You can also run the Chkdsk utility to resolve the BSOD error. The Chkdsk utility is the one that repairs hard drive errors that might be causing the problem.
  • Open Command Prompt with admin privileges.
  • After opening Command Prompt, execute the commands listed below, and don’t forget to hit Enter right after you type in each one of them and if you have installed Windows to some different directory, you must replace “C” with the name of the drive you’ve installed Windows with.
  • chkdsk C: /r /x
  • chkdsk C: /f
Read More
Malware in Popular CCleaner

On September 18th, 2017, Cisco’s Talos announced that CCleaner, a popular utility with billions of worldwide users, had been compromised by hackers, and was used to unwittingly distribute hidden malware in its installer. Later in the day, Piriform, the publisher of CCleaner, confirmed the problem.

Undetected by all but 1 major antivirus including CCleaner’s own parent company, this occurred for over a month and impacted over 2.7 million users. Users of CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 for 32-bit Windows are affected. These downloads were live on CCleaner’s official site from August 15th to September 12th, 2017. Anyone who downloaded the program during this time could be affected. The company claims that while the hackers set up the backdoor and many users were impacted, that the perpetrators have been arrested and that the malware never successfully performed its full task and compromised user’s PCs or sent out their data; in the wake of recent security breaches such as Equifax, users are understandably worried. Given the severity of the threat of hacking and data theft, users should take action immediately if they have CCleaner.

Technical Details of CCleaner Malware Injection

First reported by Talos, the malware, which was hidden in the CCleaner installer without the publisher noticing (despite them being owned by Avast, a massive Anti-virus company), modified a core program DLL file to evade detection, and creates several registry keys. Not only were these files not flagged by any major Anti-Virus, but they were also even digitally signed by Piriform via their Symantec certificate, meaning your PC and security program would likely whitelist and trust the malicious installer. The malware gathers personal information on a user’s PC, including IP address and running programs, and sends it to a remote server. In our testing, the program sent data to IP 216.126.225.148.

Restore Your PC (If Possible)

As of the publication of this article, there have been no assurances given that updating or even uninstalling CCleaner will remove the malware is installed. The only action thus far has been shutting down the remote server where user data was being sent has been shut down by authorities. For this reason, it is best to remove the underlying malware separately, as its presence represents a serious security threat. Unfortunately, as this could have been installed as far back as August 15th, 2017, your System Restore points may not go back that far, or even if they do, restoring to such an outdated point may cause unintended problems with other programs you use and potentially lost files and data. Manually backing up files and doing a full format or clean Windows installation would likely be successful in fully removing the malware, but is extremely time-consuming and can be difficult for many PC users. Unfortunately, this makes a PC Restore or format an unattainable option for many.

Update CCleaner to the Latest Version

While CCleaner has told users to update to the latest version of the program. Prior to doing so, we recommend fully uninstall CCleaner, ensuring you check its program files folders and registry keys, manually deleting any remnants, and then re-downloading the latest version from the official site and reinstalling clean.
Read More
CHKDSK cannot continue in read-only mode
As you know, the CHKDSK utility is proven to be one of the useful tools to fix any issues that concerns file system, storage, and disk. However, as useful as it may be, it is still not immune to issues as you could encounter errors when running it. One of these errors is the “One such error is the CHKDSK cannot continue in read-only mode” error. If you receive such an error message while running CHKDSK, then you’ve come to the right place as this post will help you sort the problem out. It is possible that the drive is read-only or that the Write Protection is enabled. It could also be that the drive is already being used and scanned by a different program or utility. To get rid of this error, there are a couple of suggestions you need to check out. You can try to run the CHKDSK utility from Recovery or run it on Boot. You could also try to disable Write Protection. For more detailed steps, follow the given instructions below.

Option 1 – Try to run the CHKDSK utility from Recovery

The first thing you can do to resolve the error in CHKDSK is to run the CHKDSK utility from Recovery. How? Follow these steps:
  • First, boot into the installation environment for Windows 10 from a Windows installation media.
  • Next, click on the “Repair your computer” option.
  • After that, select Troubleshoot > Advanced options > Command Prompt.
  • After opening Command Prompt, type this command and tap Enter: chkdsk <Partition Letter>: /r /f
  • Wait until the disk error checking process is completed.
  • Once it’s done, exit the Command Prompt window and restart your computer and then see if the error is fixed.

Option 2 – Try running the CHKDSK utility on Boot

On the other hand, you can also try to run the CHKDSK utility on Boot so you can fix the error and recover any damaged segments of the drive.
  • Open an elevated Command Prompt and enter this command: chkdsk /r
  • After that, you will a message that says, “Chkdsk cannot run because the volume is in use by another process. Would you like to schedule this volume to be checked the next time the system restarts? (Y/N)”
  • Type Y and tap Enter to schedule a CHKDSK scan once your computer reboots next time.

Option 3 – Try to remove the Write Protection from the drive

As mentioned, removing the Write-Protection on the concerned drive could also help you fix the problem and there are two ways to get rid of the write protection – you can either use the Diskpart utility or the Registry Editor. How? Refer to the following steps.

Via Diskpart utility:

  • Open Command Prompt with admin privileges and then type the “diskpart” command and tap Enter to execute it.
  • Next, type “list disk” and tap Enter to get the list of all the Disk connects or all the partitions that are formed on those disks.
  • After that, you need to choose one command depending on the list of commands you entered. Type “select disk #” and tap Enter to select the disk or partition you want to select.
  • Then type “attribute disk clear readonly” and tap Enter to Disable the Write Protection on the selected disk or partition.

Via Registry Editor:

  • Tap the Win + R keys to open the Run utility and type “Regedit” in the field and then tap Enter to open the Registry Editor.
  • Next, navigate to the following registry key:
ComputerHKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlStorageDevicePolicies
  • After that, look for the DWORD named “WriteProtect” and double click on it, and then set its Value Data to “0”.
  • Now restart your computer and see if the problem is now fixed or not.
Read More
Preventing installation of Removable Devices
In case you don’t know, Windows 10 supports installation and use of a number of removable devices which includes plug and plays mouse, keyboard, and other USB-based devices. But this could actually pose a threat to the integrity of a computer system and thus, some organizations pose a restriction in using these kinds of devices. the restriction on these devices is also useful especially if you keep on leaving your computer idle and someone tries to mess it up by plugging in a removable device. In such situations, the restriction will defend the user against data theft. Thus, in this post, you will be guided on how you can prevent the installation of removable devices on your Windows 10 computer. There are two options that can help you in preventing the installation of any removable devices on your computer – you can either try to use the Registry Editor or use the Group Policy Editor instead. Follow whichever option you want to use the instructions given below but before you start, don’t forget to create a System Restore Point first.

Option 1 – Prevent installation of Removable Devices via Registry Editor

  • Tap the Win + R keys to open the Run dialog box and type “Regedit” in the field and hit Enter to open the Registry Editor.
  • Next, navigate to this registry path: HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsDeviceInstallRestrictions
  • From there, look for a DWORD named “DenyRemovableDevices” and set its value to “0”. On the other hand, if you can’t find this DWORD, just simply create it and set its value to 0.
  • Once done, exit the Registry Editor and reboot your PC to apply the changes made.

Option 2 – Prevent installation of Removable Devices via Group Policy Editor

Keep in mind that the Group Policy Editor is not available in the Home Edition of the Windows operating systems. Thus, if you are using one, just stick to the first option, otherwise, proceed to the following steps.
  • Tap the Win + R keys to open the Run utility and type “gpedit.msc” and click OK or tap Enter to open the Group Policy Editor.
  • After that, go to this policy setting: Computer ConfigurationAdministrative TemplatesSystemDevice InstallationDevice Installation Restrictions
  • Next, look for the “Prevent installation of removable devices” entry and once you find it, set it as “Enabled”. From this window, you should see the following description of this policy setting:
“This policy setting allows you to prevent Windows from installing removable devices. A device is considered removable when the driver for the device to which it is connected indicates that the device is removable. For example, a Universal Serial Bus (USB) device is reported to be removable by the drivers for the USB hub to which the device is connected. This policy setting takes precedence over any other policy setting that allows Windows to install a device. If you enable this policy setting, Windows is prevented from installing removable devices and existing removable devices cannot have their drivers updated. If you enable this policy setting on a remote desktop server, the policy setting affects redirection of removable devices from a remote desktop client to the remote desktop server. If you disable or do not configure this policy setting, Windows can install and update device drivers for removable devices as allowed or prevented by other policy settings.”
  • Then click the Apply and OK buttons to save the changes made.
  • Now restart your computer to save the changes made. This should prevent the installation of any removable devices in your Windows 10 computer.
Read More
Fix 0x80070037: The specified network ...
If you are trying to copy a file but suddenly encountered an error message saying, “An unexpected error is keeping you from copying the file”, then you’ve come to the right place as this post will help you resolve the problem. This error comes along with another message that states, “Error 0x80070037: The specified network resource or device is no longer available”. This kind of error occurs when the power supply to the external device is weak and causes the device to be disconnecting and reconnecting consistently. To fix this problem, you need to check out the potential fixes provided below.

Option 1 – Try to physically check the USB ports

You need to check the USB ports as there could be some ports that are loose or damaged physically which affects the overall performance of the port. You could also try to change the USB port since modern computers have a variety of USB ports. So if your USB drive supports USB 3.0 or 3.1, make sure that you plug it inside a USB 3.0 or 3.1 ports. If you’re not sure which port, just keep in mind that the USB 3 port is usually blue or you can also use your computer’s documentation or manual as a reference to locate it.

Option 2 – Check the connected cables physically

Aside from the USB ports, you also have to check the physical status of the connected cables because if there are damaged ones, just like with USB ports, it would also affect the overall connectivity of the device with the computer. So if you notice some irregularities in the connecting cable physically, you might have to buy another one and replace it and then see if it fixes the problem or not.

Option 3 – Update or reinstall the Universal Serial Bus Controller driver

Since it could be a driver issue, you can try to update or reinstall the Universal Serial Bus Controller drivers using the Device Manager. Refer to the following steps:
  • First, click the Start button and type “device manager”.
  • Then click on the “Device Manager” from the search results to open it.
  • From there, look for the “Universal Serial Bus controllers” option and then right-click on each one of the USB drivers and select the Update Driver from the menu.
Note: If it is a regular USB drive, then it will be listed as a USB Mass Storage Device but if you have a USB 3.0 device, then look for a USB 3.0 Extensible Host Controller.
  • Restart your PC and then click the “Search automatically for updated driver software” option.
Note: If updating the USB Controller drivers didn’t work, you can try to reinstall them instead.

Option 4 – Try connecting to a slower USB port

If connecting your device to USB 3.0 or 3.1 ports didn’t work, you might want to try connecting it to a slower USB port this time. There are times when the device is not capable of supporting the higher power supply from a USB 3.0 or 3.1 port which is why the weak circuits do not work properly. Thus, try connecting your device to a USB 2.0 port and check if your device is now working.

Option 5 – Try to turn off the Power Saving option

You could also try to turn off the Power Saving option to resolve the problem. All you have to do is switch to Power Management after you select the Properties of the USB device and from there, uncheck the “Allow the computer to turn off the device to save power” option. On the other hand, if you are using a laptop and did not use the USB device for a long time, then it could be powered off. This will ensure that the system does not turn off the USB device.

Option 6 – Try to connect your device to another computer

It is also possible that your computer does not support your device. To check that possibility, you can try connecting your device to a different computer and see if it is working without any issues. If it is, then you need to get another device that’s compatible with your computer.

Option 7 – Try to use a different device

You could also try using a different device and connect it to your computer. This will help you figure out if your device is damaged or not. So if the other device you connected is working just fine, then you might have to replace your device with a new one or consult an expert and have it repaired if possible.

Option 8 – Run the Hardware and Devices Troubleshooters

  • The first thing you need to do is click on Start and then on the gear-like icon to pull up the window for Settings.
  • After opening Settings, look for the Update and Security option and select it.
  • From there, go to the Troubleshoot option located on the left-hand side of the list.
  • Next, select Hardware and Devices from the list and open the Troubleshooter and run it. Once it is doing its job, wait for it to complete the process and then restart the system.
  • After the system restarts, check if the problem’s now fixed. If not, refer to the next option given below.
Read More
A Quick Guide to Fixing Error 404

Error 404 - What is it?

Error 404 is a HTTP status code. You may come across the error code 404 while browsing online. The message indicates the web page you are trying to log on to couldn’t be found on the server. This error code is frequently customized by individual websites. Most of the time it is displayed by:
  • “404 Error"
  • "404 Not Found"
  • "Error 404"
  • "404 File or Directory Not Found"
  • "HTTP 404 Not Found”
  • "The requested URL [URL] was not found on this server."
  • "HTTP 404"
  • "404 Page Not Found"
  • “Error 404 Not Found"
The error message 404 can occur in any browser including Firefox, Internet Explorer and Google Chrome. It can also occur is any operating system. In addition to this, the error 404 may also occur during Windows updates.

Solution

Restoro box imageError Causes

Technically, the error 404 is a client-side error that implies you couldn’t access the desired web page because either you typed the wrong URL or either the page has been removed from the website. Other causes of this error code include:
  • Junk files in the browser
  • Junk registry entries
  • Browser cache issues
  • DNS server problems

Further Information and Manual Repair

If the error code does not occur due to web page removal from the owner of the website, then this means there is some other underlying issue from the error code 404. To avoid inconvenience and to access the website, it is advisable to resolve the error right away. To help you resolve the error 404 on your PC, we have listed some of the best and easy DIY solutions. Try these methods to fix the issue on your system:

Method 1

Press F5 to retry accessing the web page. F5 is the refresh/reload button. If the error is temporary this will resolve the issue immediately.

Method 2

Check the URL - ‘The error 404 not found’ may also appear because the URL was typed wrong. Search for the page on the popular search engines. Insert the correct URL for the web page you want to access. This will most likely fix the error.

Method 3

Clear your browser’s cache – For this, simply go to the history and clear up your browser’s cookies.

Method 4

Change the DNS Servers - If the entire website you want to access is giving you error 404 and if the site is available to others on different servers then you might want to try changing your DNS server. 404 errors are not particularly common unless your ISP or government filters or censors websites.

Method 5

Remove Junk files and Junk registry entries - Another way to resolve the error is to clean the registry. The underlying cause of the error could be accumulation of the junk, invalid and bad registry entries. You can remove them manually, but that process will require technical expertise and will be quite time-consuming. Nonetheless, the easy and efficient way to clean up the registry is to download Restoro. This is an advanced, highly functional and next-generation Registry Cleaner.

Why Use Restoro?

  • It is deployed with a cutting-edge and intuitive algorithm that detects, scans, and removes all the registry issues on your entire PC in seconds.
  • This registry cleaner wipes out all bad entries and junk files saved on the disk immediately, fixes the damaged and corrupt files, and restores the registry back to normal.
  • Besides functioning as a registry cleaner, this software is also integrated with several other utilities such as an antivirus that removes all kinds of malicious software from your system, a system optimizer for optimum PC functioning, and Active X controls and Class ID scanner.
  • It is safe to download, user-friendly and efficient. This error tool is compatible with all Windows versions.
To resolve error 404 on your PC, click here to download Restoro today!
Read More
A fast Guide to Fixing 2GB filesize Error

What exactly is the 2GB filesize Error?

The PST file could be around 2 gigabytes if you are using MS Outlook 2002 or any earlier versions for your own personal Folders. The 2GB filesize malfunction occurs when your PST memory both reaches or exceeds this limit. The 2GB size problem code is, in addition, referred to as an outsize PST file error. When this error happens you may be unable to deliver or receive e-mails via your Outlook account. Moreover, you'll likewise not be able to add any new data or even view your important calendar items, notes, and saved drafts. MS-Outlook shows several types of problem codes which indicate the 2GB file size dilemma. Listed below are some of the messages that can be displayed on your monitor:-
  • The file could not be added to the folder. The action could not be completed.
  • Task 'Microsoft Exchange Server - Receiving' reported error (0x8004060C): 'Unknown Error 0x8004060C'
  • Can't copy the item
  • Errors have been detected in the file xxxx.pst. Quit all mail-enabled applications.
  • Task 'Microsoft Exchange Server' reported error (0x00040820):'Errors in background synchronization. In most cases, further information is available in a synchronization log in the Deleted Items folder.'
  • xxxx.pst cannot be accessed - 0x80040116

Solution

Restoro box imageError Causes

The simple explanation for this malfunction is that you have maxed out the two gigabytes account limit. This happens in case you continue downloading fresh data and saving files and the old emails in your Outlook account. Over time, the space becomes limited and along with it the 2 GB file limit error. This error also presents a critical danger of data loss which is a possibility in your Outlook account, which hinders you as well from fully utilizing your email account. For regular Outlook customers, who utilize this program for practically all email communication within as well as outside the office, this error is annoying and frustrating as it causes a great deal of annoyance as well as decreases their performance and productivity.

What exactly are the Symptoms?

Below are a few signs that will help you recognize the 2GB file-size error:
  • Inability to fill and open the OST and PST files
  • Error messages pop-ups
  • Failure to send emails
  • Failure to make or edit new contacts
  • Inability to synchronize the file

Further Information and Manual Repair

It is desirable to fix this error code right away especially if this is the preferred strategy to carry out communication in your office. Fix it immediately or else you might not receive e-mails that are important from your colleagues. There are 3 ways to solve this issue.

Method 1

One is to remove the old e-mails and connections and replace them with new ones. This may not be the best option for you in case you don't wish to lose emails and your old contacts.

Method 2

The second alternative would be to install a fresh version of MS-Outlook like 2010. The file-size limits of OST and PST files in these editions are larger than in ms-outlook 2002. On the other hand, this is a good idea for the long run but may not be the best idea for today as you will not have the ability to recover your previous e-mails and contacts that are outdated.

Method 3

The third and maybe the method that is best to resolve the 2GB file size limit error while ensuring the restoration of your old e-mails and contacts as well as increasing the limit to 4GB, is Restoro program's installation. Here may be the best recovery program on the market. It is really easy to use, safe, exceptionally functional, secure, and especially can resolve this issue. Technical expertise isn't needed by you to perform your way around this device.

All you should do is:

Click here to download and install the Restoro repair tool on your computer. In your MS Outlook account, you can restore all your data in just a couple of clicks. Talking of data recovery, this software can also help you recover all those other e-mails before the PST malfunction happened, or that you may have deleted. So, if you have deleted any significant email that you want to recover, this will undoubtedly be of use for you. By installing it on your system you can double your Outlook account's quality to twice as much as the standard size.
Read More
Android malware spies while posing as a Update
New malware with extensive spyware capabilities steals data from infected Android devices and is designed to automatically trigger whenever new info is read to be exfiltrated. The spyware can only be installed as a 'System Update' app available via third-party Android app stores as it was never available on Google's Play Store. This drastically limits the number of devices it can infect, given that most experienced users will most likely avoid installing it in the first place. The malware also lacks a method to infect other Android devices on its own, adding to its limited spreading capabilities. However, when it comes to stealing your data, this remote access trojan (RAT) can collect and exfiltrate an extensive array of information to its command-and-control server. Zimperium researchers who spotted it observed it while "stealing data, messages, images and taking control of Android phones."

What happens when malicious software is installed

"Once in control, hackers can record audio and phone calls, take photos, review browser history, access WhatsApp messages, and more," they added. Zimperium said its extensive range of data theft capabilities includes:
  • Stealing instant messenger messages;
  • Stealing instant messenger database files (if the root is available);
  • Inspecting the default browser's bookmarks and searches;
  • Inspecting the bookmark and search history from Google Chrome, Mozilla Firefox, and Samsung Internet Browser;
  • Searching for files with specific extensions (including .pdf, .doc, .docx, and .xls, .xlsx);
  • Inspecting the clipboard data;
  • Inspecting the content of the notifications;
  • Recording audio;
  • Recording phone calls;
  • Periodically take pictures (either through the front or back cameras);
  • Listing of the installed applications;
  • Stealing images and videos;
  • Monitoring the GPS location;
  • Stealing SMS messages;
  • Stealing phone contacts;
  • Stealing call logs;
  • Exfiltrating device information (e.g., installed applications, device name, storage stats).

How does it work?

Once installed on an Android device, the malware will send several pieces of info to its Firebase command-and-control (C2) server, including storage stats, the internet connection type, and the presence of various apps such as WhatsApp. The spyware harvests data directly if it has root access or will use Accessibility Services after tricking the victims into enabling the feature on the compromised device. It will also scan the external storage for any stored or cached data, harvest it, and deliver it to the C2 servers when the user connects to a Wi-Fi network. Unlike other malware designed to steal data, this one will get triggered using Android's contentObserver and Broadcast receivers only when some conditions are met, like the addition of a new contact, new text messages, or new apps being installed. "Commands received through the Firebase messaging service initiate actions such as recording of audio from the microphone and exfiltration of data such as SMS messages," Zimperium said. "The Firebase communication is only used to issue the commands, and a dedicated C&C server is used to collect the stolen data by using a POST request."

Camouflage

The malware will also display fake "Searching for the update.." system update notifications when it receives new commands from its masters to camouflage its malicious activity. The spyware also conceals its presence on infected Android devices by hiding the icon from the drawer/menu. To further evade detection, it will only steal thumbnails of videos and images it finds, thus reducing the victims' bandwidth consumption to avoid drawing their attention to the background data exfiltration activity. Unlike other malware that harvests data in bulk, this one will also make sure that it exfiltrates only the most recent data, collecting location data created and photos taken within the last few minutes. If you would like to read more helpful articles and tips about various software and hardware visit errortools.com daily.
Read More
Intel Arc A770 GPU

intel's first gaming card that will hit the market soon has been shown in its innovation event, the Intel Arc A770. In its core ticks ACM-G10, coming with 32 Xe-cores and all the way up to 16GB of GDDR6 memory (the basic entry-level version will have 8GB of GDDR6). The card will support ray tracing and supersampling with Intel's XeSS.

intel arc a770

This is Intel's first gaming desktop GPU and after testing with some YouTube channels it turned out that the card itself sits somewhere between nVIDIA RTX 3060 Ti and an RTX 3070 so it will still be low in performance compared with the new RTX 4090 or AMD's new RDNA3 upcoming lineup. But as stated this is Intel's first gaming graphics card and having this kind of performance is no small feat for the first-time product.

One thing that is really great tho and that is going for Arc A770 GPU is its price! The Limited Edition card will cost $329 which is at this moment most cheapest GPU currently on the market in that performance range. nVIDIA is between $500 and $700 for comparison and if Intel can hold on to its performance with almost half the price card could be a great hit among gamers. GPU itself will launch on October 12th.

Read More
Fix 0xc00d36cb error in Windows 10
0xc00d36cb error shows up when you are trying to play a video or movie using the default player in Windows. This error can occur due to a glitch in the media player or corrupted system files. in this guide, we will show you how to tackle this issue and fix it.
  1. Run the video playback troubleshooter

    • Click on Start and select Settings.
    • Go to Update and Security.
    • Scroll down and open the Troubleshoot tab.
    • Scroll down and select the Video Playback option.
    • Click the Run the Troubleshooter button.
    • The troubleshooter will perform an initial scan and offer a few options.
    • Select Continue with this troubleshooter.
    • The troubleshooter will scan the system again for driver and codec issues.
    • Follow on-screen instructions and apply recommended fixes.
  2. Reset the Movies and TV app

    • Click on Start and select Settings.
    • Go to Apps and open the Apps and features tab.
    • Scroll down to Movies and TV.
    • Select Movies and TV.
    • Click Advanced options.
    • Scroll down and click on the Reset button.
  3. Create a new user account

    • Click on Start and select Settings.
    • Open Accounts.
    • Open the Family & other users tab.
    • Scroll down to Other users and click the Add someone else to this PC button.
    • In the Microsoft account window, type your email address.
    • If you don’t want to enter an email address and establish a local account, click on I don’t have this person’s sign-in information option instead.
    • Next, select Add a user without a Microsoft account (for a local account).
      • Else, enter your Microsoft account login details.
    • Enter a user name and password for your new account. Also, select a security question and add an answer to it.
    • Once the new profile is ready, log out of your current account.
  4. Check for permission issues

    • Right-click on the problematic file and select Properties.
    • Open the Security tab.
    • Click the Advanced button.
    • In the Advanced Security Setting window, click the Change link.
    • In the Select User or Group window, enter Everyone in the text box.
    • Click the Check Names button.
    • Click OK and Apply to save the changes.
    • Close all the Properties windows.
    • Try playing the file or modifying the properties and check for any improvements.
Read More
1 2 3 171
Logo
Copyright © 2023, ErrorTools. All Rights Reserved
Trademark: Microsoft Windows logos are registered trademarks of Microsoft. Disclaimer: ErrorTools.com is not affiliated with Microsoft, nor claims direct affiliation.
The information on this page is provided for information purposes only.
DMCA.com Protection Status