Fix user account is not authorized

If you encounter the “Diskpart failed to clear disk attributes” error when you try to change the read-only state of a storage device using the Diskpart application and the request is denied, worry not for this post will give you a couple of fixes to resolve the problem. As you know, Diskpart is used for resolving read-only storage devices by changing their attribute via the command line. So if it is not able to change the attribute of the storage device, then you will most likely encounter an error such as this one. This kind of error is not uncommon and as long as there are no damaged physical attributes, you can resolve it right away. There are tons of reasons why you’re getting this error while using Diskpart, it could be that the storage device has a physical write-protected switch or the disk is hidden or has bad sectors. It could also be because the storage drive might be in RAW format or that you are running the Diskpart application without admin privileges. Whatever the cause may be, here are some options you can try to fix the problem but before you proceed, make sure that you log on to your PC as an administrator.

Option 1 – Check if there is a physical switch on the storage device

There are some USB devices and SD card readers that have a write-protected physical switch that disables all the writable options on the storage device and so if it is turned on, Diskpart won’t be able to change the disk attribute to writable. To check, simply look for the physical switch on both sides of the device and once you found it, make sure that it is toggled off and then plug the storage device back in then try running Diskpart once again.

Option 2 – Modify the WriteProtected key in the Registry Editor

Before you proceed, you have to create a System Restore Point first.

• Tap the Win + R keys to open Run and type “Regedit” in the field and hit Enter to open the Registry Editor.
• Next, navigate to the following path:

HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlStorageDevicePolicies

• After that, look for the “WriteProtect” registry entry which is located on the left side of the window, and then double click on it.
• Change its value to “0” and click OK to save the changes made and exit the Registry Editor.

Option 3 – Run CHKDSK to check the drive for errors

When it comes to some issues concerning the hard drive or removable devices, there is a utility in Windows that might help which is called “chkdsk”. This error check utility can help with several issues in the system including the “Diskpart failed to clear disk attributes” error.

• Tap the Win + S keys to open the Search box.
• Then type “command prompt” in the field and from the search results that appear, right-click on Command Prompt and select “Run as administrator”.
• After opening an elevated command prompt, copy and paste the following command and hit Enter:

CHKDSK [volume [[path] filename]] [/F] [/V] [/R] [/X] [/C] [: size]]

Note: In the command given above, “[/F]” will try to fix the system errors while “[/R]” will be the one to fix the bad sectors.

• Now if you are prompted to run CHKDSK after your reboot your PC, just tap Y and reboot your PC.
• If CHKDSK is not able to find any errors, tap the Win + E keys and navigate the access window. From there, right-click on the concerned drive and click on Properties.
• After opening Properties, click on the tab Tools and then click on the “Check” button under the Error-checking section.
• Wait until the process is completed and then restart your computer.

Option 4 – Clear the attributes on RAW

• Tap the Win + S keys then type “diskpart” in the field.
• Click the Diskpart application and if a User Account Control dialog box pops up, click Yes to proceed.
• After opening an elevated Command Prompt, type in the commands listed below and make sure to tap Enter right after you key in one command after the other.
  • list volume
  • select volume ‘n’ (In this command, you have to replace ‘n’ with the volume number of the drive)
  • format fs=fat32 quick (In this command you also have the flexibility to change the format to ‘ntfs’ or ‘exfat’)
• After executing the commands given, unplug the removable storage device and wait for a couple of seconds and then plug it back in.
• Now try any normal write operations and see if the error no longer appears.

Option 5 – Try checking the hardware components

On the other hand, it is also possible that the issue has something to do with a hardware problem and so you need to check the hardware components on your computer to determine that.

As you already know, the Windows Update mechanism in Windows 10 is a bit complex as it depends on thousands of files and services in order to properly function. There are DLL files and services that support this mechanism’s proper functioning. And so if there is any malfunction with any of these files or services, it will result in some errors when running Windows Update. One of these errors is the error code 0x8e5e0147 which has the following error message: “There was a problem installing some updates, but we’ll try again later. If you keep seeing this and want to search the web or contact support for information, this may help – Error 0x8e5e0147” To fix this error, there are several methods you can try. You can run the Windows Update troubleshooter or reset the Windows Update components manually or clear the SoftwareDistribution folder and install the update manually. You could also reset the Windows Update Agent to default using a command in PowerShell.

Option 1 – Try to run the Windows Update troubleshooter

The first thing you can do to fix the Windows Update error code 0x8e5e0147 is to run the Windows Update Troubleshooter. To run it, go to Settings and then select Troubleshoot from the options. From there, click on Windows Update and then click the “Run the troubleshooter” button. After that, follow the next on-screen instructions and you should be good to go.

Option 2 – Try to reset the Windows Update components

If by any chance that the third option didn’t work, you can also try resetting the Windows Update components as it could also help you resolve the Windows Update error. How? Refer to the following steps:

• Open Command Prompt with admin privileges.
• After that, type each one of the following commands and hit Enter after you key in one after the other.
  • net stop wuauserv
  • net stop cryptsvc
  • net stop bits
  • net stop msiserver

Note: The commands you entered will stop the Windows Update components such as Windows Update service, Cryptographic services, BITS and MSI Installer.

• After disabling WU components, you need to rename both the SoftwareDistribution and Catroot2 folders. To do that, type each one of the following commands below and don’t forget to hit Enter after you type one command after the other.
  • ren C:/Windows/SoftwareDistribution/SoftwareDistribution.old
  • ren C:/Windows/System32/catroot2/Catroot2.old
• Next, restart the services you’ve stopped by entering another series of commands. Don’t forget to hit Enter after you key in one command after the other.
  • net start wuauserv
  • net start cryptsvc
  • net start bits
  • net start msiserver
• Close Command Prompt and reboot your PC.

Option 3 – Try downloading and installing the Windows Updates manually

Windows Update error code 0x8e5e0147 might be due to a Windows Update that has failed. So if it is not a feature update and only a cumulative update, you can download the Windows Update and install it manually. But first, you need to find out which update has failed, and to do so, refer to the following steps:

• Go to Settings and from there go to Update and Security > View Update History.
• Next, check which particular update has failed. Note that Updates that have failed to install will be displayed under the Status column which has a label of “Failed”.
• After that, go to the Microsoft Download Center and look for that update using its KB number and once you find it, download and then install it manually.

Note: You can also use the Microsoft Update Catalog, a service from Microsoft that provides a list of software updates that can be distributed over a corporate network. With the help of this service, it can be easier for you to find Microsoft software updates, drivers as well as fixes. Option 4 – Try to reset the Windows Update Agent Since you can’t update the Windows Update Agent on your Windows 10 computer manually, you can try resetting it instead and you can do it using the Reset Windows Update Agent tool which you can download from the official Microsoft website. This tool allows you to:

• • Scan all protected system file and replace the corrupted one’s (sfc /scannow)
  • Scan, detect, and repair corruptions in Windows system image
  • Clean up superseded components
  • Reset Windows Update components

• Change invalid values in Windows Registry
• Delete temporary files

Moreover, this tool also allows you to carry out these operations:

• Open Internet Explorer settings
• Search for Windows Updates
• Explorer for local or online solutions
• Restart your computer

As you know, one of the useful and efficient utilities in Windows 10 is the DISM tool. It can be used with the Command Prompt command line which allows users to carry out various tasks. However, there are instances when the DISM tool could encounter some errors when you try to execute a command. One of these errors is the one that states, “The component store has been corrupted”. This kind of DISM error is due to an error in the image file. When you encounter the DISM Error 14098 when running the DISM tool, you will see the following content in the command line:

“C:>Dism /Online /Cleanup-Image /RestoreHealth /Source:c:testmountwindows /LimitAccess Deployment Image Servicing and Management tool Version: 10.0.10586.0 Image Version: 10.0.10586.0 [==========================100.0% Error: 14098 The component store has been corrupted. The DISM log file can be found at C:WINDOWSLogsDISMdism.log C:>”

There are several fixes you can check out to fix the DISM Error 14098, “The component store has been corrupted”. You can try to run the Restore Health command or reset the Windows Update components, or whitelist the dism.exe in your antivirus program, as well as try to uninstall any recently installed updates. Follow the options provided below for more details.

Option 1 – Run the Restore Health command in a Clean Boot State

• First, you need to put your computer in a Clean Boot State.
• Type in MSConfig in the Start Search to open the System Configuration utility.
• From there, go to the General tab and click “Selective startup”.
• Clear the “Load Startup items” check box and make sure that the “Load System Services” and “Use Original boot configuration” options are checked.
• Next, click the Services tab and select the “Hide All Microsoft Services” check box.
• Click Disable all.
• Click on Apply/OK and restart your PC. (This will put your PC into a Clean Boot State. And configure Windows to use the usual startup, just simply undo the changes.)
• Now open Command Prompt with admin privileges.
• Then type and enter this command to execute it: Dism /Online /Cleanup-Image /RestoreHealth
• Wait until the process is completed and restart your computer.

Note: If the Restore Health command fails, you can use the “/StartComponentCleanup parameter” by executing this command: Dism /Online /Cleanup-Image /StartComponentCleanup

Option 2 – Try to reset the Windows Update components

If by any chance that the second option didn’t work, resetting the Windows Update components could also help you resolve the problem. How? Refer to the following steps:

• Open Command Prompt with admin privileges.
• After that, type each one of the following commands and hit Enter after you key in one after the other.
  • net stop wuauserv
  • net stop cryptsvc
  • net stop bits
  • net stop msiserver

Note: The commands you entered will stop the Windows Update components such as Windows Update service, Cryptographic services, BITS, and MSI Installer.

• After disabling WU components, you need to rename both the SoftwareDistribution and Catroot2 folders. To do that, type each one of the following commands below, and don’t forget to hit Enter after you type one command after the other.
  • ren C:/Windows/SoftwareDistribution/SoftwareDistribution.old
  • ren C:/Windows/System32/catroot2/Catroot2.old
• Next, restart the services you’ve stopped by entering another series of commands. Don’t forget to hit Enter after you key in one command after the other.
  • net start wuauserv
  • net start cryptsvc
  • net start bits
  • net start msiserver
• Close Command Prompt and reboot your PC.

Option 3 – Whitelist the “dism.exe” in your antivirus program

The DISM error 14098 might also be caused by your antivirus program which could be interfering it from running. To fix this, you have to whitelist dism.exe. How? Refer to these steps:

• Open the Windows Defender Security Center from the system tray area.
• Next, click the “Virus & threat protection” option and then open the “Virus and threat protection settings”.
• After that, scroll down until you find the “Exclusions” and click on the “Add or remove exclusions” option.
• Then click the plus button and select the type of exclusion you want to add and from the drop-down list, select Folder.
• Next, navigate to this path and select the WinSxS folder: C:/Windows/WinSxS
• When a User Account Control or UAC prompt, just click on Yes to proceed.

Option 4 – Try to uninstall recently installed updates

There are times when some Windows Updates affect some mechanism internally when you update your Windows 10 computer. As a result, it causes issues with other components of the operating system which could be the reason why you’re getting the DISM error 14098.

• Go to Settings and select Update and Security > Windows Update.
• From there, click on the “View update history” option and then click on the “Uninstall Updates” option.
• This will open a new window that contains the list of installed Windows Updates.
• Now right click on the Windows Update you wish to uninstall and click Uninstall.

Running the Windows Setup does not always go smoothly as you could encounter some errors along the way. One of these errors is the “Something happened, Setup has failed to determine supported install choices” error. The only given option in such cases is to click the Close button and exit the setup. This kind of error in Windows setup can occur when you try to downgrade to the previous version of Windows using the built-in mechanism. This error could be caused by a corrupted image or it is also possible that the set of files are incomplete. Aside from that, it could also be due to compatibility issues or that the module used to downgrade the Windows operating system is not configured properly. To fix this error, you have to run the Windows Setup program in compatibility mode so that you can downgrade Windows. You could also use the image for the lower version of Windows that’s available on the official site of Microsoft. But before you do any of these, make sure that you’re logged in as an administrator. To fix the “Something happened, Setup has failed to determine supported install choices” error, follow the given options below sequentially.

Option 1 – Try to run the Installer of the downgraded version in Compatibility Mode

This is the first thing you can try to resolve the issue instead of going right ahead on making a bootable device. So if you are downgrading Windows, you can try to run the installer in the compatibility mode for that specific Windows version.

• Look for the setup file.
• Once you find it, right-click on it and select Properties from the context menu.
• After that, go to the Compatibility tab and mark the checkbox for “Run this program in compatibility mode for:” and from the drop-down list, select either Windows 7 or Windows 8.
• You also have to check the “Run as administrator” option.
• Now click the Apply button and then click OK to save the changes made and check if it has resolved the issue or not.

Option 2 – Try to troubleshoot compatibility

This option is almost the same as the first one except it is an alternative way of fixing the “Setup has failed to determine supported install choices” error in case the first one didn’t work. In this option, you will troubleshoot the compatibility issue.

• Look for the setup file.
• Then right-click on it and select the “Troubleshoot compatibility” from the context menu.
• After that, click on the “Try recommended setting” option. Once the process is done, the error message should be gone.

Option 3 – Run the DISM tool

You can run the DISM tool as well to help fix the error code 0x80244022 during Windows Update. Using this built-in tool, you have various options such as the “/ScanHealth”, “/CheckHealth”, and “/RestoreHealth”.

• Open the Command Prompt with admin privileges.
• Then type in the following commands and make sure to hit Enter right after you type each one of them:
  • Dism /Online /Cleanup-Image /CheckHealth
  • Dism /Online /Cleanup-Image /ScanHealth
  • exe /Online /Cleanup-image /Restorehealth
• Do not close the window if the process takes a while as it will probably take a few minutes to finish.

Option 4 – Try using the image from the official site of Microsoft

If none of the options given above worked, you can try to use the image from Microsoft’s official site. This would help, especially if the error is caused by a corrupted image or image folder with incomplete files.

One of the useful features that came with Windows 10 is the Mobile Hotspot although there’s a downside to it – it drains your battery faster especially if your Windows 10 device is running on battery. Another one of its flaws in the implementation of this feature is that it stays activated even when the connection is idle. In other words, it is still activated even if no devices are connected to it. As a result, it consumes battery life and affects it. There are also instances when it affects the performance of the network connection. At the time of writing, Microsoft hasn’t done anything about this dilemma yet so in the meantime, you can continue reading this post to resolve this issue on your Windows 10 device. You can remedy this Mobile Hotspot issue by running a command in Windows PowerShell. To get started, follow the given instructions below.

Turn off Mobile Hotspot Automatically:

Step 1: The first thing you have to do is to copy the following command:

powershell -windowstyle hidden -command "Start-Process cmd -ArgumentList '/s,/c,net stop "icssvc" & REG ADD "HKLMSYSTEMCurrentControlSetServicesicssvcSettings" /V PeerlessTimeoutEnabled /T REG_DWORD /D 1 /F & net start "icssvc"' -Verb runAs"

Step 2: After copying the command given above, open the Notepad app and paste the command you copied there and save it. And when saving it, select the “Save as” option and its File type as “All files”. Step 3: After that, put “TurnOnTimer.bat” as the file’s name and save it on your Desktop. Step 4: Once done, run the file you just created, and when a User Account Control or UAC prompt appears, just click on Yes. Step 5: After you run the file, it will run a series of scripts in a command line which will turn off the Mobile Hotspot automatically when idle. And that’s how you automatically turn off the Mobile Hotspot when your Windows 10 device is idle. On the other hand, if you want to undo the changes made, you can always do so using the steps provided below.

Turn on Mobile Hotspot:

Step 1: Copy and paste the following command in the Notepad app:

powershell -windowstyle hidden -command "Start-Process cmd -ArgumentList '/s,/c,net stop "icssvc" & REG ADD "HKLMSYSTEMCurrentControlSetServicesicssvcSettings" /V PeerlessTimeoutEnabled /T REG_DWORD /D 0 /F & net start "icssvc"' -Verb runAs"

Step 2: After copying and pasting the command, save it as “TurnOffTimer.bat” on the Desktop. Step 3: Once done, run the file like what you did earlier and select Yes when a UAC prompt pops up. This will run a series of scripts on a command line which will revert the changes back to their default state.

If you suddenly encountered an error saying, “The application failed to initialize properly (0xc0000005)” when you are using an application on your Windows 10 computer, read on as this post will provide you some potential fixes that could help you fix the error. You can encounter the “The application failed to initialize properly (0xc0000005)” error on many applications such as VLC, Chrome, Word, and any other executable files and even the operating system files. When you get this kind of error, you will see the following error message:

“The application failed to initialize properly (0xc0000005). Click on OK to close the application.”

This kind of application error can occur due to several reasons which include damaged installation of the application or system files may have gotten corrupted or damaged. It could also be caused by a malware infection. There are a couple of suggestions provided in this post to help you resolve the error. You can try to run both a System File Checker scan and the DISM tool or reinstall the problematic application or repair-install Windows 10 as well as run a malware scan. Note that the options provided below do not have to be followed in sequence.

Option 1 – Try to run a System File Checker scan

As mentioned, the error could be due to corrupted or damaged system files and one of the ways you can fix that is by running a System File Checker or SFC scan on your computer. To do so, follow these steps:

• In the Windows Start Search, type “command prompt” and right-click on Command Prompt from the search results, and then select the “Run as administrator” option.
• After opening Command Prompt with admin privileges, type the “sfc /scannow” and tap Enter to execute it.
• Once the scan is finished, restart your computer and see if the “The application failed to initialize properly (0xc0000005)” error is fixed or not.

Option 2 – Run the DISM tool

You can try running the Deployment Imaging and Servicing Management or DISM tool to fix the application error. Using this built-in tool, you have various options such as the “/ScanHealth”, “/CheckHealth”, and “/RestoreHealth”.

• Open the Command Prompt with admin privileges.
• Then type in the following commands and make sure to hit Enter right after you type each one of them:
  • Dism /Online /Cleanup-Image /CheckHealth
  • Dism /Online /Cleanup-Image /ScanHealth
  • exe /Online /Cleanup-image /Restorehealth
• Do not close the window if the process takes a while as it will probably take a few minutes to finish.

Option 3 – Try reinstalling the application

You might also want to uninstall the application and download its latest working version and then install it back again. Note that when you do this, you will lose all your app data.

Option 4 – Try to repair install Windows 10

• First, you have to click this link and then click the Download Tool Now button.
• Next, click the “Use the tool to create installation media (USB flash drive, DVD, or ISO file)…” option and follow the next given instructions on the screen.
• Now select the ISO file option in step 5.
• After that, you should now have an ISO file.
• Next, go to the location where you’ve downloaded the ISO file.
• Then right-click on the Windows 10 ISO file and select the Open with option and then select File Explorer.
• Now click on “setup.exe” and follow the next instructions that appear on the screen. When asked, you have to select either Nothing (clean install) or Keep personal files only option. Take note that you must not select the “Keep personal files, apps, and Windows settings”.

Option 5 – Try scanning your computer using Windows Defender

It is possible that your computer is infected with malware which could be why you’re getting the “The application failed to initialize properly (0xc0000005)” error. Thus, you need to scan your computer using Windows Defender.

• Tap the Win + I keys to open Update & Security.
• Then click on the Windows Security option and open Windows Defender Security Center.
• Next, click on Virus & threat protection > Run a new advanced scan.
• Now make sure that Full Scan is selected from the menu and then click the Scan Now button to get started.

0x800ccc79 Error - What is it?

0x800ccc79 error is an error message that you may come across when sending emails through Outlook Express from Microsoft. This error message is accompanied by a notification that is displayed as ‘email was not delivered’ or ‘the server doesn’t support SSL connection’.

Solution

Download Available to Recover all Lost Outlook data

Error Causes

This error code 0x900ccc79 is triggered due to the following causes:

• Problems related to email servers
• Changes in the configuration settings
• Corrupted Windows Registry

Further Information and Manual Repair

When you receive the error 0x800ccc79 it may hamper your ability to send emails. Therefore it is advisable to fix it to ensure your emails are sent and received without any difficulty.

This Outlook error 0x800ccc79 is quite easy to repair. By following the quick fix 0x800ccc79 error code solutions given below you can resolve this error in just a couple of minutes.

Here’s what you need to do to fix this error right away:

Cause: Configuration issues

Solution: If the error occurs due to Outlook Express being configured to use the SSL protocol while sending and receiving emails via the web, then to resolve it, you need to allow Outlook Express to bypass the Secure Socket Layer settings.

To do so, click on ‘tools’ and then on ‘Accounts’. Now select the email account that you want to modify.

Now select the ‘Properties’ tab and then click on ‘Advanced Settings’.

Here search for the following text message ‘This server requires a secure connection’. Once you locate it, uncheck all the checkboxes given next to this option. After that save the changes and restart Outlook Express to see bring the changes into effect.

Cause: Missing or Corrupt Registry Entries

Solution: If the error 0x800ccc79 occurs due to missing or corrupt registry entries, then the best way to fix this error is to download and install a good registry cleaner on your PC.

The registry cleaner will help you clean your corrupt and damaged Windows registry entries and get rid of this error right away. It is suggested you download the registry cleaner tool from a reliable website to avoid any malware or virus downloads simultaneously.

Once you download the registry cleaner on your system, click on scan. The cleaner will scan your computer completely for registry errors and show you the results in a list form.

After the scanning is complete, click on repair to fix the errors.

So, next time, if you or anyone at your office comes across the Outlook Express error 0x800ccc79, you can try these solutions and fix the error immediately without waiting for the network personnel to come and resolve it.

HPQTRA08.exe - What is it?

HPQTRA08.exe (Hewlett Packard Tray 08) is the Hewlett Packard Digital Imaging Monitor task. It is installed with the drivers of HP imaging products like PhotoSmart Printers.

It incessantly monitors and indicates the connectivity status with any recognizable HP product.

Simply put, HPQTRA08.exe is an exe (executable) file that contains step-by-step instructions that a computer follows to carry out a function.

HPQTRA08.exe error code is displayed in any of the following formats:

• "Hpqtra08.exe Application Error."
• "Cannot find hpqtra08.exe."
• "Hpqtra08.exe not found."
• "Error starting program: hpqtra08.exe."
• "Hpqtra08.exe is not a valid Win32 application."
• "Hpqtra08.exe failed."
• "Faulting Application Path: hpqtra08.exe."
• "Hpqtra08.exe has encountered a problem and needs to close. We are sorry for the inconvenience."
• "Hpqtra08.exe is not running."

Solution

Error Causes

Error code HPQTRA08.exe can be triggered for several reasons. However, some of the most common causes include:

• Corrupt Windows registry keys
• Virus infection
• Deleted, damaged, or corrupted HPQTRA08.exe file
• HPQTRA08.exe file conflict
• Corrupt or incomplete installation of Hp Digital Imaging

It is advisable to repair the error code HPQTRA08.exe on your PC immediately. Delays can lead to serious problems especially if the underlying cause of the error is related to registry corruption.

Further Information and Manual Repair

To resolve this error on your PC, you don’t need to hire a professional and pay hundreds of dollars for the repair. Simply try the DIY methods listed below to fix the problem right away.

Method 1 - Download and Install HPQTRA08.exe File

If the error cause is related to deleted, corrupted, or damaged HPQTRA08.exe file, then the best way to fix the problem is to install the HPQTRA08.exe file on your PC.

However, first, make sure the site you select to download the file from is reliable and trusted.

By downloading from an unreliable website you can expose your PC to potential malicious programs and risk your data security.

Method 2 - Remove all Viruses

Sometimes viruses and malware tend to disguise in the form of exe files such as the HPQTRA08.exe file.

In such a situation scan your entire PC for viruses and malware using a powerful antivirus. Remove all the malicious programs found to fix the issue.

Method 3 - Clean and Repair the Registry

The registry saves all PC-related activities and information including both important and obsolete files such as cookies, bad registry entries, invalid keys, internet history, and junk files.

If these files are not removed from the registry frequently, these accumulate in the registry and corrupt thereby triggering error codes. Error code HPQTRA08.exe is generated when the corrupt Windows registry keys are associated with the HPQTRA08.exe file.

To resolve, clean the registry and repair it. Although this can be done manually it can be time-consuming and tricky especially if you are not technically sound, therefore it is advisable to download Restoro.

Click here to download Restoro and resolve error HPQTRA08.exe.

Method 4 - Locate and Install the Driver

As was pointed out, you might need to reinstall the printer driver again. Using DriverFIX, you’ll be able to automatically update your computer system and install the drivers your computer needs to operate smoothly.

Hive ransomware has been targeting Microsoft exchange servers lately vulnerable to ProxyShell security issues in order to deploy various backdoors. Once the backdoor has been placed various attacks can be performed including but not limited to network reconnaissance, stealing admin accounts, taking valuable data, and even installing and deploying file-encrypting algorithms.

ProxyShell wide abuse

ProxyShell is a set of three vulnerabilities in the Microsoft Exchange Server that allows remote code execution without authentication on vulnerable deployments. The flaw has been used in past by various ransomware like Conti, BlackByte, Babuk, Cuba, and LockFile.

Security vulnerabilities have been reported to be fully patched on May 2021 but how Hive was able to still be successful in exploiting PowerShell and infiltrating into the system there seems to be still some unpatched and open issues.

Hive

Hive has gone a long way since it was first observed in the wild back in June 2021, having a successful start that prompted the FBI to release a dedicated report on its tactics and indicators of compromise.

In October 2021, the Hive gang added Linux and FreeBSD variants, and in December it became one of the most active ransomware operations in attack frequency.

Last month, researchers at Sentinel Labs reported on a new payload-hiding obfuscation method employed by Hive, which indicates active development.

Athwbx.sys or the Qualcomm Atheros driver file is known to trigger several Blue Screen of Death errors. This occurs when the driver gets corrupted or when the operating system is unable to access or find it. In addition, bad sectors in the hard disk or RAM can also cause BSOD errors. The athwbx.sys file is known to cause the following BSOD errors listed below:

• SYSTEM_THREAD_EXCEPTION_NOT_HANDLED (athwbx.sys)
• STOP 0x0000000A: IRQL_NOT_LESS_EQUAL (athwbx.sys)
• STOP 0x0000001E: KMODE_EXCEPTION_NOT_HANDLED (athwbx.sys)
• STOP 0×00000050: PAGE_FAULT_IN_NONPAGED_AREA (athwbx.sys)
• Your PC ran into a problem and needs to restart. You can search online later for this error: athwbx.sys

Before you proceed with the troubleshooting tips given below, you might want to try performing System Restore as it could resolve Blue Screen errors caused by the athwbx.sys file. To run System Restore, follow these steps:

• Tap the Win + R keys to open the Run dialog box.
• After that, type in “sysdm.cpl” in the field and tap Enter.
• Next, go to the System Protection tab then click the System Restore button. This will open a new window where you have to select your preferred System Restore point.
• After that, follow the on-screen instructions to finish the process and then restart your computer and check if the problem is fixed or not.

If System Restore didn’t help in fixing the Blue Screen error, now’s the time for you to resort to the troubleshooting tips provided below but before you get started, make sure that you create a System Restore point first.

Option 1 – Try recreating the athwbx.sys file

The first thing you can try is to recreate the athwbx.sys file. Every time your Windows 10 PC boots up, it looks for all the system drivers in place and if it is unable to find them, it tries to create them. This is why if you remove your corrupt driver file, chances are, you might get a fixed file recreated just for you. How? Refer to the steps below.

• Boot your Windows 10 PC in Safe Mode.
• Then open File Explorer and navigate to this location: C:/Windows/System32/drivers
• From there, look for the file named sys and rename it to athwbx.old.

Note: As you can see, the file’s extension has changed from .sys to .old.

• Now restart your computer and check if the athwbx.sys Blue Screen error is now fixed.

Option 2 – Try to update or rollback your device drivers

If the first option didn’t work for you, then it’s time to either update or roll back the device drivers. It is most likely that after you updated your Windows computer that your driver also needs a refresh. On the other hand, if you have just updated your device drivers then you need to roll back the drivers to their previous versions. Whichever applies to you, refer to the steps below.

• Open the Devices Manager from the Win X Menu.
• Then locate the device drivers and right-click on them to open the Properties.
• After that, switch to the Driver tab and click on the Uninstall Device button.
• Follow the screen option to completely uninstall it.
• Finally, restart your computer. It will just reinstall the device drivers automatically.

Note: You can install a dedicated driver on your computer in case you have it or you could also look for it directly from the website of the manufacturer.

Option 3 – Run the System File Checker Scan

System File Checker or SFC is a built-in command utility that helps in restoring corrupted files as well as missing files. It replaces bad and corrupted system files with good system files. To run the SFC command, follow the steps given below.

• Tap Win + R to launch Run.
• Type in cmd in the field and tap Enter.
• After opening Command Prompt, type in sfc /scannow

The command will start a system scan which will take a few whiles before it finishes. Once it’s done, you could get the following results:

1. Windows Resource Protection did not find any integrity violations.
2. Windows Resource Protection found corrupt files and successfully repaired them.
3. Windows Resource Protection found corrupt files but was unable to fix some of them.

• Restart your computer.

Option 4 – Try to run the CHKDSK utility

Running the CHKDSK utility might also help you resolve the athwbx.sys Blue Screen error. If your hard drive has issues with integrity, the update will really fail as the system will think that it’s not healthy and that’s where the CHKDSK utility comes in. The CHKDSK utility repairs hard drive errors that might be causing the problem.

• Open Command Prompt with admin privileges.
• After opening Command Prompt, execute the following command and hit Enter:

chkdsk /f /r

• Wait for the process to be completed and then restart your computer.

Option 5 – Run the Memory Diagnostic Tool

Running the Windows Memory Diagnostic tool in Windows 10 might also help you in fixing the athwbx.sys Blue Screen error. Refer to the steps below on how to run this tool:

• Tap the Win + R keys to open Run and type exe and hit Enter to open the Windows Memory Diagnostic Tool.
• After that, it will give two options such as:
  • Restart now and check for problems (Recommended)
  • Check for problems the next time I start my computer
• Once your computer has restarted, perform a basic scan or you could also go for the “Advanced” options such as “Test mix” or “Pass count”. Simply tap the F10 key to start the test.

Note: After you select the option, your PC will restart and check for memory-based issues. If it finds any issues, it will automatically fix them and if there’s no issue found, then it’s most likely not a memory-based issue so you should try the other options given below.

Option 6 – Run the Blue Screen Troubleshooter

The Blue Screen troubleshooter is a built-in tool in Windows 10 that helps users in fixing BSOD errors like athwbx.sys. It can be found on the Settings Troubleshooters page. To use it, refer to these steps:

• Tap the Win + I keys to open the Settings panel.
• Then go to Update & Security > Troubleshoot.
• From there, look for the option called “Blue Screen” on your right-hand side and then click the “Run the troubleshooter” button to run the Blue Screen Troubleshooter and then follow the next on-screen options. Note that you might have to boot your PC into Safe Mode.