How to Fix Windows 10 Error Code 0x803f7001

If you suddenly find the middle mouse button not working as you use it on your Windows 10 computer, then you’ve come to the right place as this post will provide some suggestions that can help you fix the issue. This kind of problem can affect your experience in using your computer as the middle mouse button helps you in scrolling through long web pages and screens with a lot of data. So if that stops, you will end up using your keyboard instead which is kind of a hassle compared to using the middle mouse button. It is possible that this problem could have something to do with either the hardware or software. To isolate the possibility of a hardware failure, you can try to connect the mouse to a different computer and see if it works just fine there or if it still has the same problem. If the mouse works properly on a different computer, then the issue is software-related. It is possible that a software update, especially gaming software, could have been misconfigured in a way that the middle button does not respond like it’s supposed to. To resolve the problem, you might want to try reinstalling or updating the mouse drivers or run the Hardware and Devices troubleshooter. You can also install OEM-specific mouse drivers or modify some entries in the Windows Registry.

Option 1 – Reinstall or update the Mouse driver

The problem may be caused by a corrupted or an outdated mouse driver. To fix it, you have to update or reinstall the mouse driver. How? Follow these steps:

• Open the Devices Manager from the Win X Menu.
• Then locate the Mouse and other pointing devices and right-click on the mouse driver to open the Properties.
• After that, switch to the Driver tab and click on the Uninstall Device button.
• Follow the screen option to completely uninstall it.
• Finally, disconnect the mouse and plug it back in to reinstall the mouse driver.

Note: You can install a dedicated driver on your computer in case you have it or you could also look for it directly from the website of the manufacturer.

Option 2 – Try running the Hardware Troubleshooter

The next thing you can do to fix the problem is by running the Hardware Troubleshooter. Although it won’t make much of a difference, there’s still a possibility that it could automatically fix the problem with these function keys. To use it, refer to these steps:

• The first thing you need to do is click on Start and then on the gear-like icon to pull up the window for Settings.
• After opening Settings, look for the Update and Security option and select it.
• From there, go to the Troubleshoot option located on the left-hand side of the list.
• Next, select Hardware and Devices from the list and open the Troubleshooter and run it. Once it is doing its job, wait for it to complete the process and then restart the system.
• After the system restarts, check if the problem’s now fixed. If not, refer to the next option given below.

Option 3 – Try to install OEM specific mouse drivers

Aside from updating or reinstalling the mouse drivers, you might also want to try installing OEM-specific mouse drivers. When you install Windows, it will use a generic driver for all its components. The disadvantage of generic drivers for the mouse is that it limits its functionality. In fact, some also configure the middle mouse button to respond to specific action which does not work without the correct drivers. In such cases, you need to visit the website of your computer’s manufacturers to download and install the latest drivers and then open the software and configure it the way it was before. Keep in mind that some OEMs also offer gestures, so you also have to check on that.

Option 4 – Try to modify some entries in the Registry

If a Windows Update is the one that caused the problem, you could correct it by making some modifications in the Registry but before you proceed, make sure that you create a System Restore point first.

• Tap the Win + R keys to open the Run utility.
• Then type “Regedit” in the field and hit Enter to open the Registry Editor.
• Next, navigate to this registry path: HKEY_CURRENT_USERControl PanelDesktop
• After that, double click on the “WheelScrollLines” entry on the right pane to open its Properties.
• Now change its value data to “3” and exit the Registry Editor and then see if the issue with the middle mouse button is fixed or not.

Error Code 0xc00007b – What is it?

Error code 0xc00007b usually manifests itself via the inability to start an application properly. It can occur when users attempt to run a game or other programs on their computer. In such a case, the application will not start and a message box will pop up stating that error code 0xc00007b has occurred. The error code is likely to occur when users attempt to run a program in the incorrect or inappropriate bit. For instance, if you try to load a 32bit location with a 64bit location.

Solution

Error Causes

Error code 0xc00007b affects various versions of the Windows operating system, including Windows 7, 8, 8.1, and Windows 10. In the case of error code 0xc00007b for Windows 10, the error may be caused by issues related to software you’ve installed on your machine. This may cause software conflict resulting in the need to install programs like DirectX. Left unchecked, error code 0xc00007b could incite other error codes in Windows 10, such as error code 0xc004f034.

Further Information and Manual Repair

To repair error code 0xc00007b for Windows 10 devices, users will need to implement at least one manual repair procedure. Manual repair methods are effective in combating these issues as they can address the issues causing the error in the first place, thus fixing the problem.

The manual repair procedures for fixing error code 0xc00007b are very straightforward and can be implemented with little technical knowledge. However, you may need to contact a Windows repair technician if you have difficulty fixing the error code after completing the manual repair methods listed below.

Method One: Install Microsoft DirectX

Microsoft DirectX is an application usually included in the Microsoft operating system. It enables users to access high-speed gaming and multimedia on their PC. The latest version of this Windows technology is available on Microsoft’s official site.

Visit the Microsoft website and search for DirectX End-User Runtime Web Installer. Once you have located the latest version of the program, select the preferred language you would like DirectX to run in, and then click download. Run the program, then be sure to reboot your computer.

Note that this solution should only be applied if you are having issues running or displaying a gaming or multimedia application. Once you’ve correctly installed the latest version of DirectX, it should be able to fix underlying issues that may be causing error code 0xc00007b to occur. If you are still unable to run applications after completing this manual repair procedure, however, you will need to apply another method to fix error code 0xc00007b for Windows 10.

Method Two: Install Latest Version of .NET Framework

.NET Framework, a framework developed by Microsoft, provides solutions for users who may be having problems with applications. To download the latest version of the .NET framework, follow the steps listed below.

• Step one: Open your favorite web browser
• Step two: Enter www.microsoft.com/net
• Step three: Click Downloads
• Step four: Select the latest version of the .NET Framework by clicking the framework at the top of the list. (Currently, the latest version is .NET Framework 4.6.2.)
• Step five: Select preferred language, then download
• Step six: Run software.

To ensure you successfully download the latest version of the .NET Framework, verify your computer is properly connected to the Internet while downloading the software. Also, follow the instructions provided on the Microsoft website.

After completing the download process, reboot your computer then check if you have successfully resolved error code 0xc00007b for Windows 10. If this manual repair method is successful, you will be able to access your gaming and multimedia programs. Otherwise, the error code message box will reoccur, stating that the application error code is present on your device. Apply the next manual repair procedure to correct the error code if this reoccurs.

Method Three: Install Windows Updates

In certain instances, application error codes like error code 0xc00007b affect PC users who fail to install the most current Windows updates on their device. That is why it’s important to check your system and ensure you have installed all the latest updates.

The updates, if any are available, will automatically be installed on your PC once you access Windows Update in Settings. Reboot your computer then check if you are able to run programs that previously would not open due to error code 0xc00007b. If problems persist resulting in the reoccurrence of the error code, reinstall the applications you are unable to open or get help from a Windows repair technician.

Method Four: Download an Automated Tool

If you wish to always have at your disposal a utility tool to fix these Windows 8 and other related issues when they do arise, download and install a powerful automated tool.

0x000000A5 - What is this Error Code?

0x000000A5 is a stop error code also referred to as a blue screen of death error code. It is related to Advanced Configuration and Power Interface basic input/output system in Windows. It often leads to a sudden system shut down or your system may restart unexpectedly. Blue error codes like 0x000000A5 are the most severe and dangerous types of errors Windows can encounter. Ignoring 0x000000A5 error pop-ups and not repairing it timely can result in system crashes, valuable data loss and system failure.

Solution

Error Causes

The 0x000000A5 error code occurs particularly because of the ACPI BIOS error. This error message on your computer screen indicates that the Advanced Configuration and Power Interface (ACPI) BIOS of the computer is not compatible with your Windows system and is not fully compliant with the ACPI specifications. BIOS is a set of software. Through this software, the operating system communicates with the computer’s hardware devices. The ACPI is a part of BIOS and the Windows operating system. It is the standard for the way BIOS works. The presence of ACPI in the BIOS on a given Windows system determines whether the system can make full use of features such as Power Management or Plug and Play. Here’s what happens: traditionally, ACPI BIOS implementation tries to manipulate hardware resources directly through BIOS code for hardware functionality nonetheless if the ACPI-based BIOS is not compliant with the ACPI standard on your system, it may not support workable communication between the operating system and the hardware. This results in imbalance as the operations cannot be synchronized which results in system shut down, system instability, and machine failure. As a warning stop error 0x0000000A5 is displayed on the screen.

Further Information and Manual Repair

To fix the error message 0x0000005A on your PC you don’t need any professional assistance. Solving such blue screen errors in just a couple of clicks is not possible with Restoro This is a multi-functional and feature-filled registry cleaner and system optimizer that helps PC users resolve practically every type of system instability issues and registry errors including BSoD errors like 0x000000A5. It offers a comprehensive suite of utilities including registry cleaning, privacy issue detection and repair, system stability error identification, and Active X and Class issues detection. This innovative and advanced PC fixer is designed to ensure and deliver optimum system performance. It scans and detects causes for 0x000000A5 error code and repairs them in seconds. It has a neat and intuitive layout and easy navigation which makes this repair tool extremely user-friendly. Users of all levels are it novice or experienced can use it with ease and fix all types of PC-related errors like 0x000000A5 right away with no hassle. ACPI BIOS Error can be quickly resolved with this tool. This error tool offers outstanding compatibility. It is practically compatible with all Windows versions.

Restoro download

To get started all you have to do is click here to install the Restoro on your computer. Once it is installed, run it to scan for 0x000000A5 error code. After scanning is complete, click the repair button to repair this issue immediately. For user safety and data security, Restoro also creates backup files. This ensures that no valuable data is lost during system repair. So, don’t delay in resolving error 0x000000A5 error code; install Restoro on your system today!

If you have encountered the “YOU ARE NOT AUTHORIZED TO ACCESS THIS WEB PAGE AS PER THE DOT COMPLIANCE” error while trying to visit a website using either Firefox or Chrome browser, then read on as this post will guide you on how you can fix this error. Apart from this error message, you might also see an alternative message that says, “Web Page Blocked! The page you have requested has been blocked because the URL is banned as per the Government Rules”. When you get any of the aforementioned error messages when visiting a website, this means that it has been marked. It is mostly recommended to not access the site as it might be blocked for some illegal reason. However, if you are certain that the website is legitimate and safe and you believe that it has been blocked by accident, then you can check out the given methods in this post to unblock and access the blocked or restricted website. There isn’t actually a straightforward way to remove the restriction on the website or the DOT compliance. And it won’t matter what browser you use as you will still get the same error. Thus, the best way to go about this issue is for you to bypass the ISP restriction. But before you proceed, keep in mind that the ISPs (Internet Service Providers) can block any website when a request goes through their servers.

Option 1 – Try changing the DNS

If the request to access the website does not go through the ISP’s DNS server, you might have a chance in accessing it by changing your DNS settings. You can try using the Google Public DNS.

• Tap the Win + R keys to open the Run dialog box.
• Then type “inetcpl.cpl” in the field and hit Enter to pull up the Internet Properties.
• After that, go to the Connections tab and select the LAN settings.
• From there. Uncheck the “Use a Proxy Server” option for your LAN and then make sure that the “Automatically detect settings” option is checked.
• Now click the OK and the Apply buttons.
• Restart your PC.

Note: If you are using a third-party proxy service, you have to disable it.

Option 2 – Try to install a Proxy Extension

You could also try installing a Proxy extension or Proxy software as it could also help you access the website you are trying to open as it allows you to access the blocked websites by routing the request through their server. Aside from that, it can also hide it from ISPs to make them look like the content is coming from the proxy servers.

Option 3 – Try using a VPN connection

There are instances when the network that your computer is logged on might have blocked your access to the website you are trying to open and so to fix it, you can try to use a VPN connection. There is a lot of free VPN software out there but just make sure that you install a trusted one. Once you’ve connected using VPN, try to open the website again and see if you can now access it.

Option 4 – Check the Windows Host file

You can also try to cross check the Windows Hosts file to find out if the website you are trying to open has been blocked because if it is, then it’s no wonder why you’re getting the ERR CONNECTION TIMED OUT error in Chrome. There are instances when some third party application modifies the file and add some websites to the block lists. So if the website is indeed blocked, you need to remove it from the list.

Option 5 – Try to contact your ISP

If none of the options given above worked, then you can try to contact your ISP as there are times when DOT clears a website, the ISPs are still blocking it. Thus, it’s probably better if you reach out to them and ask them to unblock the website from their end.

Intel announced that Pat Gelsinger (CEO) and Dr. Ann Kelleher  (technology Department head) will discuss Intel’s process and packaging innovations on an upcoming webcast that will happen on July 26^th. The spokesman will talk and provide a deeper look at the process and packaging roadmaps for Intel. As we know Intel is planning to expand its production capabilities, outsource some of its technologies and offer foundry services to other chip design companies. The strategy will also include a shift to a 7nm process and Intel’s effort to set itself again as leader of CPU performance by 2024. There is also a chance that we will hear exact plans for Intel in the next three or four years. Intel didn't reveal much else about what Gelsinger and Kelleher plan to discuss during the webcast. The event will be streamed on July 26 at 2 pm PT via the Intel Newsroom; it will also be available to watch on-demand after the stream ends.

Recently, a lot of users reported to Microsoft about getting an error code 0x80096004 while trying to update their Windows 10 computers. This kind of Windows Update error occurs during the initial download and verification process. It also affects the Windows features (FODs) and when you encounter this error, you will also see this error code, “TRUST_E_CERT_SIGNATURE”. This error code indicates that the signature of the certificate could not be confirmed. This is caused by a broken certificate store or a corrupt copy of the Windows operating system is installed. Here’s the complete error message:

“There were some problems installing updates, but we’ll try again later. If you keep seeing this and want to search the web or contact support for information, this may help: (0x80096004).”

To fix Windows Update error 0x80096004, you can check out the options provided below.

Option 1 – Delete the contents in the Software Distribution folder and Catroot2 folder

• Open the WinX Menu.
• From there, open Command Prompt as admin.
• Then type in the following command – don’t forget to hit Enter right after typing each one of them.

net stop wuauserv net start cryptSvc net start bits net start msiserver

• After entering these commands, it will stop the Windows Update Service, Background Intelligent Transfer Service (BITS), Cryptographic, and the MSI Installer
• Next, go to the C:/Windows/SoftwareDistribution folder and get rid of all the folders and files thereby tapping the Ctrl + A keys to select them all and then click on Delete. Note that if the files are in use, you won’t be able to delete them.

After resetting the SoftwareDistribution folder, you need to reset the Catroot2 folder to restart the services you just stopped. To do that, follow these steps:

• Type each one of the following commands.

net start wuauserv net start cryptSvc net start bits net start msiserver

• After that, exit Command Prompt and restart your computer, and then try to run Windows Update once more.

Option 2 – Run the Windows Update Troubleshooter

Running the built-in Windows Update troubleshooter is one of the things you can first check out as it is known to automatically resolve any Windows Update errors like error code 0x80096004. To run it, Refer to these steps:

• Tap the Win + I keys to open Settings.
• From there, click Update and Security and go to the Troubleshoot section.
• Next, select Windows Update and click the “Run the troubleshooter” button and wait until it’s finished, and then try to run Windows Update again.

Option 3 – Try to temporarily disable anti-virus and Windows Defender Firewall

As mentioned, the error could be due to the antivirus program or the Windows Defender Firewall installed on your computer. Thus, disabling them or any security software installed in your computer is always a good idea you can try when you’re not able to access the shared drive on your computer. There are times when you encounter problems like Error Code 0x80096004 due to interference of antivirus or security programs. Thus, you have to disable both your antivirus program and Windows Defender Firewall for the meantime and check if it fixes the error or not.

Option 4 – Try to replace the DLL file with a trusted source

You can also try to replace the crypt32.dll file as it could help in fixing the Windows Update error. Just make sure that you get one from a trusted source.

• First, you need to get the new DLL file from another computer with preferably the same file version number.
• After that, you need to boot your PC into Safe Mode and navigate to the paths listed below and then replace the file using a USB drive or other external storage devices.
  • x86: This PC > C:/Windows/System32
  • x64: This PC > C:/Windows/SysWOW64
• Next, type “cmd” in the Cortana search box and right-click on Command Prompt, and select “Run as administrator” to open it with administrator privileges.
• Now type the “regsvr32 crypt32.dll” command and hit Enter.
• Restart your PC and check if the error is now fixed.

Option 5 – Try downloading and installing the Windows Updates manually

Error Code 0x80096004 might be due to a Windows Update that has failed. So if it is not a feature update and only a cumulative update, you can download the Windows Update and install it manually. But first, you need to find out which update has failed, and to do so, refer to the following steps:

• Go to Settings and from there go to Update and Security > View Update History.
• Next, check which particular update has failed. Note that Updates that have failed to install will be displayed under the Status column which has a label of “Failed”.
• After that, go to the Microsoft Download Center and look for that update using its KB number and once you find it, download and then install it manually.

Note: You can also use the Microsoft Update Catalog, a service from Microsoft that provides a list of software updates that can be distributed over a corporate network. With the help of this service, it can be easier for you to find Microsoft software updates, drivers as well as fixes.

Option 6– Run System File Checker or SFC scan

System File Checker or SFC is a built-in command utility that helps in restoring corrupted files as well as missing files. It replaces bad and corrupted system files to good system files. To run the SFC command, follow the steps given below.

• Tap Win + R to launch Run.
• Type in cmd in the field and tap Enter.
• After opening Command Prompt, type in sfc /scannow

The command will start a system scan which will take a few whiles before it finishes. Once it’s done, you could get the following results:

1. Windows Resource Protection did not find any integrity violations.
2. Windows Resource Protection found corrupt files and successfully repaired them.
3. Windows Resource Protection found corrupt files but was unable to fix some of them.

 Reboot your PC.

Option 7 – Try to run the Windows Update Service in a Clean Boot State

There are some instances that some conflicting programs installed in your computer might be the one that’s causing Windows Update error. To identify which program is causing the problem, you need to put your computer in a Clean Boot State. To do so, follow the steps below.

• Log onto your PC as an administrator.
• Type in MSConfig in the Start Search to open the System Configuration utility.
• From there, go to the General tab and click “Selective startup”.
• Clear the “Load Startup items” check box and make sure that the “Load System Services” and “Use Original boot configuration” options are checked.
• Next, click the Services tab and select the “Hide All Microsoft Services” check box.
• Click Disable all.
• Click on Apply/OK and restart your PC. (This will put your PC into a Clean Boot State. And configure Windows to use the usual startup, just simply undo the changes.)
• Now try to run the Windows Update Service again and see if Windows Update error 0x80096004 is now gone.

OneXPlayer is a direct competitor to Valve’s upcoming steam deck. This device is clearly inspired by Valve’s offering and it shows all over the place, from its looks to its purpose and aims to PC gamers as a handheld device.

Hardware under the hood

This device is packing a 7-inch 1080p display, 11th generation Intel Core i7-1195G7 CPU, stunning 16GB of RAM, 512GB SSD drive with the option to purchase 1TB or 2TB model. GPU of choice is Intel iris Xe Graphics that is in our opinion a bottleneck in the whole system and for more demanding games, we believe switching them to 720p would be a better option. Everything here is powered with a 10455 mAh lithium-ion battery.

OneXPlayer inputs and other stuff

Handheld is equipped with dual bumpers and dual linear triggers. The console comes with dual speakers on both sides of it. Inside the console, there is an aluminum heat sink with copper heat pipes and a fan in order to cool internal hardware. On the outside, we have two USB-C ports and one USB-A port for connections, and of course, a headphone jack for headphones. The console comes with Wi-Fi 6 and Bluetooth 5.0 for wireless connectivity.

Price

The base entry model will cost you a whopping $1.259, 1TB model $1.399 and 2TB one will go as far as $1,599. With this kind of price, I am not sure it can come up as a winner against Valve. Sure it is packing fully licensed Windows 11 that will for sure offer more options than Stem’s OS based on Linux but even with that advantage I do not think it justifies such a big price difference.

Conclusion

Of course, this kind of console or handheld PC will still find its customer base, many users will probably like it since it comes Windows ready out of the box. Sure, you can place Windows on Steam deck as well but you will need to know how, where everything is ready and you can run beside steam other launchers without issues like origin, uplay, gog, etc. How this will be accepted by community time will tell but it is good to see that there is variety and competition in handheld PC space.

What is 0x80040154 Error Code?

0x80040154 is a typical ‘class not registered’ error message. It occurs when PC users try to register and Run a 32-bit DLL (dynamic link library) Windows programs on a 64-bit version of Windows.

Solution

Error Causes

• The 0x80040154 error causes include:
• Incompatible software
• Invalid entry command path
• Damaged and corrupt DLL files
• COM components not properly registered
• Active X control and class issues

To avoid the inconvenience of running programs on your Windows PC, it is advisable to resolve the 0x80040154 error.

Further Information and Manual Repair

Here are some of the best methods that you can try to resolve the 0x80040154 error code on your PC:

# 1. Use Regsvr32.exe to Re-register the Failing COM Component

This is one way to resolve the 0x80040154 error code. Regsvr32.exe is a program that you can use to register DLLs (Dynamic Link Libraries) and ActiveX controls in the registry. To use this file to re-register the failing COM components, simply open an elevated command prompt. If the 32-bit DLL is in the %systemroot%System32 folder, then move it to the %systemroot%SysWoW64 folder. After that run the following command: %systemroot%SysWoW64regsvr32 <full path of the DLL>. This will help resolve the issue.

# 2. Install and Run Restoro PC Fixer.

Another alternative is to download Restoro. This is a new, advanced, and innovative PC repair tool deployed with multiple utilities like Active X control and class fixer, system optimizer, an antivirus, and a registry cleaner. It has a user-friendly interface with simple navigation. This makes it quite easy to use for all levels of users. It is safe, fast, and compatible on all Windows versions. The Active X control and class utility scans your entire PC, detects and resolves all errors like 0x80040154 triggering ActiveX and class ID issues in seconds. Besides this, Restoro also offers other benefits. By running this software on your system you can also ensure good PC health and performance as it also removes anti-viruses, repairs registry issues, fixes damaged DLL files, and also boosts the speed of your PC. DLL files often can get damaged and corrupt due to data overload. This is associated with the registry. If you don’t clean the registry frequently, it overloads with data and damages the DLL files. However, with the help of the registry cleaner utility embedded inside this software, you can repair these files easily. The registry cleaner wipes out all the unnecessary files from your system occupying your disk space and simultaneously fixes the damaged DLL files and restores the registry. However, if the DLL files are damaged due to a malware attack, the antivirus module takes care of them. It removes all the malicious software like adware, spyware, viruses, and Trojans and restores your files. Click here to download Restoro on your PC and resolve the error 0x80040154 on your PC now!

The holiday season is almost upon us and buying gifts for loved ones can sometimes present some headaches, especially if that loved one is a Gamer or PC enthusiast. We have all been there and how almost every household today has a console or PC struggles are infecting more and more people. But do not despair, we have made a nice list of potential gifts for you. The list contains some nice essential and good things but we gave our best not to break the bank so you will not find any large screens or 300$ keyboards here. Of course, you can always get expensive gifts and if you have money for it do it, it is just we want to have affordable stuff here.

A Steam gift card

For gamers, a good game is a great gift but most of the time when we are buying a game we can miss what the person wants. That is why a Steam gift card is a great gift for gamers. He can use it and buy whatever he or she wants for its value.

Xbox Game pass

This is another for those Gamers type. Xbox game pass is a great gift even if you do not own Xbox since all games will work on PC as well. Xbox Game Pass Ultimate includes the PC version, which will unlock somewhere between 300 and 350 games automatically. It’s a subscription service, so your PC gamer will have to keep up with it. The monthly price is worth it, though.

Pack of cable ties

Almost every PC user has tons of cables lying around, and most of the time they are not really tidy. Cable ties come to the rescue!!! Let us be honest, no one likes cables that are scattered all over the place, even the computer users so if they do not have this essential piece of equipment, we are sure they will like it.

Compressed air duster

Dust is enemy no.1 for computer users, it gets into the keyboard, into small spaces, etc. It is very difficult to get it out so an air duster for compressed air is a great cleaning gift for any kind of computer enthusiast. You can get it with a can of compressed air as well so everything is ready for cleaning.

New Headset

A headset is always a great gift. Over time earbuds can deteriorate and get damaged simply just by using them and when enough time passes even cables can start losing contact and overall sound quality may drop. Usually, computer users change headsets like keyboards so if your loved one has some old headsets showing their age, a new one is a perfect present.

New SSD drive

More hard disk space is always a welcome sight for any PC user and new SSD drives fueled with new technology are faster than ones of the same size in past years making them a perfect gift.

Large mouse pad

A good mouse pad can mean a lot to a gamer. Over time mouse pad deteriorates simply with its use so a new and fancy large pad is a great gift for any user. If you want a great gift, make it with RGB light.

New malware with extensive spyware capabilities steals data from infected Android devices and is designed to automatically trigger whenever new info is read to be exfiltrated. The spyware can only be installed as a 'System Update' app available via third-party Android app stores as it was never available on Google's Play Store. This drastically limits the number of devices it can infect, given that most experienced users will most likely avoid installing it in the first place. The malware also lacks a method to infect other Android devices on its own, adding to its limited spreading capabilities. However, when it comes to stealing your data, this remote access trojan (RAT) can collect and exfiltrate an extensive array of information to its command-and-control server. Zimperium researchers who spotted it observed it while "stealing data, messages, images and taking control of Android phones."

What happens when malicious software is installed

"Once in control, hackers can record audio and phone calls, take photos, review browser history, access WhatsApp messages, and more," they added. Zimperium said its extensive range of data theft capabilities includes:

• Stealing instant messenger messages;
• Stealing instant messenger database files (if the root is available);
• Inspecting the default browser's bookmarks and searches;
• Inspecting the bookmark and search history from Google Chrome, Mozilla Firefox, and Samsung Internet Browser;
• Searching for files with specific extensions (including .pdf, .doc, .docx, and .xls, .xlsx);
• Inspecting the clipboard data;
• Inspecting the content of the notifications;
• Recording audio;
• Recording phone calls;
• Periodically take pictures (either through the front or back cameras);
• Listing of the installed applications;
• Stealing images and videos;
• Monitoring the GPS location;
• Stealing SMS messages;
• Stealing phone contacts;
• Stealing call logs;
• Exfiltrating device information (e.g., installed applications, device name, storage stats).

How does it work?

Once installed on an Android device, the malware will send several pieces of info to its Firebase command-and-control (C2) server, including storage stats, the internet connection type, and the presence of various apps such as WhatsApp. The spyware harvests data directly if it has root access or will use Accessibility Services after tricking the victims into enabling the feature on the compromised device. It will also scan the external storage for any stored or cached data, harvest it, and deliver it to the C2 servers when the user connects to a Wi-Fi network. Unlike other malware designed to steal data, this one will get triggered using Android's contentObserver and Broadcast receivers only when some conditions are met, like the addition of a new contact, new text messages, or new apps being installed. "Commands received through the Firebase messaging service initiate actions such as recording of audio from the microphone and exfiltration of data such as SMS messages," Zimperium said. "The Firebase communication is only used to issue the commands, and a dedicated C&C server is used to collect the stolen data by using a POST request."

Camouflage

The malware will also display fake "Searching for the update.." system update notifications when it receives new commands from its masters to camouflage its malicious activity. The spyware also conceals its presence on infected Android devices by hiding the icon from the drawer/menu. To further evade detection, it will only steal thumbnails of videos and images it finds, thus reducing the victims' bandwidth consumption to avoid drawing their attention to the background data exfiltration activity. Unlike other malware that harvests data in bulk, this one will also make sure that it exfiltrates only the most recent data, collecting location data created and photos taken within the last few minutes. If you would like to read more helpful articles and tips about various software and hardware visit errortools.com daily.