Fix Unable to terminate the process Error in Windows 10

Hive ransomware on Exchange servers

Hive ransomware has been targeting Microsoft exchange servers lately vulnerable to ProxyShell security issues in order to deploy various backdoors. Once the backdoor has been placed various attacks can be performed including but not limited to network reconnaissance, stealing admin accounts, taking valuable data, and even installing and deploying file-encrypting algorithms.

ProxyShell wide abuse

ProxyShell is a set of three vulnerabilities in the Microsoft Exchange Server that allows remote code execution without authentication on vulnerable deployments. The flaw has been used in past by various ransomware like Conti, BlackByte, Babuk, Cuba, and LockFile.

Security vulnerabilities have been reported to be fully patched on May 2021 but how Hive was able to still be successful in exploiting PowerShell and infiltrating into the system there seems to be still some unpatched and open issues.

Hive

Hive has gone a long way since it was first observed in the wild back in June 2021, having a successful start that prompted the FBI to release a dedicated report on its tactics and indicators of compromise.

In October 2021, the Hive gang added Linux and FreeBSD variants, and in December it became one of the most active ransomware operations in attack frequency.

Last month, researchers at Sentinel Labs reported on a new payload-hiding obfuscation method employed by Hive, which indicates active development.

Fix Error 1310, Error writing to file

If you were trying to install a program on your Windows 10 computer but encounter an error instead that says, “Error 1310, Error writing to file: <PATH>, Verify that you have access to that directory” then read on as this post will guide you on how you can fix it. This kind is a fairly common type of error encountered by many Windows users. You can get this error when you try to install certain programs like Excel, AutoCAD, Adobe Photoshop, and some other Adobe products on Windows. One of the most likely causes for this error is that the required files or location is already used by some other software which means that Windows finds that you are trying to overwrite a software that is already installed. Aside from that, it could also occur if the program installer does not have access to write to that directory. To fix Error 1310, here are some potential fixes that could help.

Option 1 – Clear up temporary or junk files

The error could be caused by some temporary or junk files in your computer and so you need to clear them up to fix the problem. You can achieve that using the Storage Sense feature.

Open Setting > System > Storage from the WinX Menu.
From there, you will see a list of all the local and connected storage devices along with the details on the free space. Make sure that Storage Sense is on.
Next, find a link that says “Free Up Space” and click it to open.
After that, a screen which is the built-in program in Windows 10 will appear and will scan your computer for the following junk files so you can free up disk space:
- Windows Upgrade Log Files
- The system created Windows Error Reporting Files
- Thumbnails
- Temporary Internet Files
- Previous Windows Installation Files
- Delivery Optimisation Files
- DirectX Shader Cache
Choose the files you want to get rid of and then click on the remove files option. Note that you’ll have an idea of the total size as you select any of the junk files listed above.
Now go to the “Free Up Space Now” section and click the Clean Now button. This will get rid of all the temporary or junk files in your computer and should hopefully fix Error 1310.

Option 2 – Reinstall the program in a Clean Boot State

You can also troubleshoot Error 1310 in a Clean Boot state. It could be that there are some third-party applications in your computer that's preventing the program from getting installed and to isolate this possibility, you need to boot your computer in a Clean Boot State and then try installing the program again. Putting your computer in this state can help you identify which program is the culprit and thus isolates the problem. In a Clean Boot state, your computer will start using only the pre-selected minimal set of drivers and startup programs. Note that you have to disable and enable one process at a time.

Log onto your PC as an administrator.
Type in MSConfig in the Start Search to open the System Configuration utility.
From there, go to the General tab and click “Selective startup”.
Clear the “Load Startup items” check box and make sure that the “Load System Services” and “Use Original boot configuration” options are checked.
Next, click the Services tab and select the “Hide All Microsoft Services” check box.
Click Disable all.
Click on Apply/OK and restart your PC. (This will put your PC into a Clean Boot State. And configure Windows to use the usual startup, just simply undo the changes.)
After you’ve set your computer into a Clean Boot State, make sure that you’re signed in as administrator and then try to install the program again.

Option 3 – Try to unregister and re-register the Windows Installer Module

Tap the Win + R keys to open the Run dialog box.
Then type the “msiexec /unregister” command and hit Enter to unregister the Windows Installer Module.
Next, type the “msiexec /regserver” command and hit Enter to re-register the Windows Installer Module.
Now restart your computer and see if un-registering and re-registering the Windows Installer Module fixed the problem or not.

Option 4 – Take ownership of the location where you want to install the app

The next thing you can try to do is to take ownership of the particular folder as this worked for some users who experienced the same problem. But before you do that, you have to create a System Restore Point first, once that’s done, proceed to the given steps below.

First, locate the concerned folder and right-click on it then select Properties.
Next, click on the Edit button in the Properties window and click OK to confirm if you got a User Account Control elevation request.
After that, select user/group from the permission windows or click on the Add button to add another user or group. It would be best if you add “Everyone” to give permission.
Then check “Full Control” under the “Allow” column to assign full access rights control permissions.
Now edit the permission to Full Control for “Everyone”.
Click OK to save the changes made and then exit.
Finally, try to install the application again.

How to remove "program" from startup

Instaling and removing applications from your Windows can sometimes leave some traces that are unpleasant and can cause annoyances. One of these annoyances is the program in the startup section of the task manager.

If you ever opened task manager and went into the startup section trying to disable some of the startup items on your Windows boot there might be a chance that you have experienced and seen a program without any icon or information about it just sitting there.

This is due to some applications being removed from the system but for some reason, it still shows itself in startup and it is quite annoying. So here we will show you how to get rid of this annoyance so your startup is clean again without junk in it.

Removing a program from startup

Locating the source of the issue

The first thing of course is to open the task manager itself and navigate to the startup tab. Inside the startup tab right-click on the column header and tick or enable Startup type and command line. Now you will see the location of the supposed file (that is missing or you could just go there by right-clicking on the item, but here it is greyed).

99% of the time startup type will be registry since the file is missing, if it was a file fix would be just to simply delete the file in the folder but since it was installed and not properly removed registry key is still present but the file cannot be found. After confirmation that the file is indeed missing and that the startup type is registry open the registry editor by typing Regedit in search and pressing enter.

Removing the key from registry

Inside Registry editor navigate to: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. Inside on right part, you will see all auto-start entries added by installed applications.

Locate one that is causing issues by comparing its path with the path inside the task manager command line and delete the key. Once the key is deleted right-click on RUN on the left part and choose HKEY_LOCAL_MACHINE to quickly jump on that key location and repeat the process of key deletion if needed. HKEY_LOCAL_MACHINE will delete startup entry for all users and sometimes entry will not be present here since the application is not installed for all users or there are no other users on the machine.

After the procedure is finished, reboot your systems in order to apply changes.

Fix 0xd00000e5, 0x8007139f, 0x80090030 PIN

The quickest and easiest way to log into your computer is when you use the PIN feature in Windows 10. Even though it is a bit slower compared to biometric logins such as Fingerprint and Iris scanning that comes under Windows Hello, the PIN feature is definitely less complicated. However, just like any other module of the software, it is also prone to some errors. In this post, you will be guided in fixing several PIN errors such as 0xd00000e5, 0x8007139f, and 0x8009003. These errors could be caused at different points in time like when you change or create a PIN or when you log into your computer. To fix the 0xd00000e5, 0x8007139f and 0x8009003 PIN errors, there are various solutions you can try. You may empty the contents of the NGC folder or remove and change the PIN or the password. You could also use the Group Policy Editor or reset the ACLs in the NGC folder as well as run built-in tools like System File Checker and the DISM tool.

Option 1 – Take ownership of the NGC folder and delete its contents

Boot your computer first into Safe Mode.
Next, you need to take ownership of the Ngc folder first and you can do that using Command Prompt.
Type “command prompt” in the Windows Search bar and then right-click on the relevant search result and select “Run as administrator”.
After that, if a User Account Control or UAC prompt appears, just click on Yes to proceed.
Next, type and enter this command: TAKEOWN /F C:WindowsServiceProfilesLocalServiceAppDataLocalMicrosoftNgc
Note that the <path> is the location of the folder or file in File Explorer.
Now type and enter this second command: ICACLS C:WindowsServiceProfilesLocalServiceAppDataLocalMicrosoftNgc /grant administrators:F
Finally, once the command has been executed, restart your computer.
Once your computer has restarted, delete all the contents in the Ngc folder and check if the error is now fixed.

Option 2 – Try to remove and change the PIN or password

The 0xd00000e5, 0x8007139f, and 0x8009003 PIN errors could be caused by some conflicting issues with the PIN or password you have set for the User Account of your computer. Thus, you have to remove or change the PIN or password to fix these PIN errors.

Remove the PIN by going to Settings > Accounts > Sign-in options.
From there, go to the PIN section and click on the Remove button.
You will be asked to verify your account to proceed in removing the PIN, enter your credentials.
Restart your computer and then set up a new PIN.
Once you’re done, restart your computer and check if the error is gone now.

Option 3 – Try to use the Group Policy Editor

Tap the Win + R keys to open the Run utility and type “gpedit.msc” in the field and tap Enter to open the Group Policy Editor.
Next, navigate to this policy setting: Computer Configuration > Administrative Templates > System > Logon
After that, double click on the “Turn on convenience PIN Sign-in” option located on the right-side panel.
Then set its radio button to Enabled. You will see the following description when you do so:

“This policy setting allows you to control whether a domain user can sign in using a convenience PIN. If you enable this policy setting, a domain user can set up and sign in with a convenience PIN. If you disable or don’t configure this policy setting, a domain user can’t set up and use a convenience PIN. Note: The user’s domain password will be cached in the system vault when using this feature. To configure Windows Hello for Business, use the Administrative Template policies under Windows Hello for Business.”

After setting the radio button to Enabled, it will turn on the Logins in your computer using the PIN.
Close the Group Policy Editor and restart your computer for the changes to take effect.

Option 4 – Try to reset the ACLs in the Ngc folder

Type “command prompt” in the Windows Search bar and then right-click on the relevant search result and select “Run as administrator”.
After opening Command Prompt with admin privileges, execute this command: C:/Windows/Service/Profiles/Local/Service/AppData/Local/MicrosoftNgc /T /Q /C /RESET
The command you entered will start checking for errors and fix them automatically.

Option 5 – Run the System File Checker scan and the DISM tool

System File Checker:

Tap Win + R to launch Run.
Type in cmd in the field and tap Enter.
After opening Command Prompt, type in sfc /scannow

The command will start a system scan which will take a few whiles before it finishes. Once it’s done, you could get the following results:

Windows Resource Protection did not find any integrity violations.
Windows Resource Protection found corrupt files and successfully repaired them.
Windows Resource Protection found corrupt files but was unable to fix some of them.

Now restart your computer.

DISM tool:

Open Command Prompt.
Then type in the following commands and make sure to hit Enter right after you type each one of them:
- Dism /Online /Cleanup-Image /CheckHealth
- Dism /Online /Cleanup-Image /ScanHealth
- Dism /Online /Cleanup-image /Restorehealth
After that, wait until the process is finished and do not close the window as the process will probably take a couple of minutes.
Once it’s done, restart your computer.

Fix 0xC03A0005 error in Windows 10

When performing a Windows Backup to the NAS device (backup to a network share) that is running Samba, fails with an error message The backup failed, The version does not support this version of the file format (0xC03A0005). The problem occurs because of a conflict with the VHD file that is created by Windows Backup and is mounted during the process. There are three types of VHD files:

Fixed,
Expandable
Differencing

If the VHD file is a sparse file that is not supported by the native VHD driver, the mounting will fail, and you will get this error. An example VHD file is one that keeps expanding depending on the backup size. The problem occurs only in the case of File Level backup (file/folders in a volume) but not on the block level backup as the vhd file is never mounted. However, in the case of File Level Backup, the vhd is mounted, created by Windows Backup, which does not support the mounting of sparse files.

The solution is to use Strict Allocate: option in the smb.conf file

Login to SMB using SSH. Open the configuration file using the VI editor located at /etc/samba/smb.conf. If the option is not there, you can manually add strict allocate = yes which will make sure there are no sparse file that is created.

Basic IT skills everybody should know

In today’s world and age, there are some essential IT skills that basically everyone should know. No matter in what field you are working some skills are just needed in order to function properly in the work. So, without further ado let's dive into what are these essential IT skills everyone, even your grandmother should know.

5 Essential IT skills everybody should know

Word processing
No matter are you creating or editing business documents or just trying to help a friend or relative, word processing skill is an essential asset and requirement in today’s age. Writing anything on a bunch of paper is time-consuming, papers can get lost, and searching for a particular item inside a bunch of papers is not a really enjoyable experience. A much easier solution is to write, format, and keep everything on the computer and almost all employers are asking for this skill.
Send and using emails
Today we live in the digital age and most communication is done in real-time via messaging apps and file sharing is done via file-sharing services. Despite mentioned technology, many files are shared and sent through emails. When a message is too long or complex when it needs to have some attachment or to be kept in archive emails are the way to go and therefore using email is a must-have essential skill.
Using search engines
When talking about using search engines we really do not think about firing up your favorite browser, going into the search engine,s and typing cat pictures. What we think is that a person should know how to use a search engine properly, tweak its search options, and phrase words and sentences to find everything he or she needs.
Doing data work
Data entry and data calculations have been made easier than ever thanks to today's technology. Microsoft excel, libre office calc, google sheets, etc. are all capable of performing a great variety of calculations and keeping track of plenty of required data. This skill is often asked by employers as an essential one.
Cyber security
Each employee or person, in general, should be quite aware of various scams and best practices to keep itself safe in this digital world. We have several articles on this topic and there are a great variety of articles on the internet as well.

Conclusion

No matter are you young or old, employed or looking for a job, these skills are a must-have in today’s world. There are a lot of great tutorials online on these various topics and I am sure that your knowledgeable friend or cousin would be happy to help and show you how to do all of these things.

How to Fix Remote Desktop Black Screen issues

According to some reports, using RDP or Remote Desktop Protocol on recent versions of Windows 10 results in a black screen. One encounters this issue is when using the Remote Desktop Connection feature on Windows 10. The real causes of this black screen are either the display drivers or some misconfiguration with the Remote Desktop Connection utility. In most cases, the Remote Desktop in Windows 10 will display a black screen and then disconnects afterward. To fix this kind of issue on your Remote Desktop, there are two suggestions you need to check out. First, you can try to disable the persistent bitmap caching, and then you can also try to update your display driver. Follow the given options below for more troubleshooting instructions.

Option 1 – Try to disable Persistent Bitmap caching

The first thing you can do to resolve the black screen issue with the remote desktop is to disable the persistent bitmap caching. All you have to do is follow these steps:

First, open the Remote Desktop Connection client.
Next, click on the Show Options button to configure the Remote Desktop Connection.
After that, go to the Experience tab and uncheck the Persistent bitmap caching option.
Once done, you should now be able to connect to the remote computer without the black screen.

Option 2 – Try to update or rollback the Graphics driver

You can try to update your Graphics card driver using the Device Manager in your computer to resolve the blank dialog boxes problem or you can also go directly to the website of your graphics card manufacturers like NVIDIA, Intel, or AMD and go to the section called Drivers then check if there’s a new available update – if there is, download and install it. To update your Graphics driver via Device Manager, refer to these steps:

First, boot your computer into Safe Mode.
After that, tap the Win + R keys to launch Run.
Type in devmgmt.msc into the box and tap Enter or click OK to open the Device Manager.
After that, a list of device drivers will be displayed. From there, look for the Display Adapters and click on them.
After that, right-click on each entry under the Display Adapters and select the “Uninstall Device” option from the menu.
Now restart your computer.
After restarting your computer, go to the Settings app and Check for Updates in the Windows Update section.

Note: If updating the Graphics driver didn’t fix the problem, you can also try to roll back to its previous version and see if that helps or you could also try to roll back, update or reinstall the Network Adapter drivers.

Option 3 – Try performing a System Restore

You might also want to perform a System Restore that might help you in fixing the error. You can do this option either by booting into Safe Mode or in System Restore. If you are already in the Advanced Startup Options, just directly select System Restore and proceed with the next steps. And if you have just booted your PC into Safe Mode, refer to the steps below.

Tap the Win + R keys to open the Run dialog box.
After that, type in “sysdm.cpl” in the field and tap Enter.
Next, go to the System Protection tab then click the System Restore button. This will open a new window where you have to select your preferred System Restore point.
After that, follow the on-screen instructions to finish the process and then restart your computer and check if the problem is fixed or not.

How to Fix Error Code 0x80073b01

Error Code 0x80073b01 - What is it?

The 0x80073b01 is an error message that often pops up on the screen when you run Windows Defender. Windows Defender is an antispyware by Microsoft integrated into Windows Vista and Windows 7. The error code 0x80073b01 is considered to be a critical Windows error which must be fixed immediately. This error code locks you out of Windows Defender thus putting your computer at risk potential security loopholes in the Windows environment such as notorious software like spyware, adware, and viruses. This is dangerous especially if you have confidential data saved on your PC as it can be exploited easily if you don’t remove such malicious software the right way. This can lead to data breaches, cybercrime, and the worst-case scenario can be identity theft. Error code 0x80073b01 symptoms include:

Sluggish pc performance,
Problems during software installations
Beeping sounds
Unexpected shutdowns
Screen freeze

Solution

Error Causes

The error code 0x80073b01 occurs when Windows Defender gets damaged due to misconfigured files and registry corruption. It is advisable to fix this error right away to avoid serious damages.

How to Resolve the Error Code 0x80073b01?

To repair the error code 0x80073b01 on your PC you don’t necessarily have to call a professional; you can fix it on your own with the help of Restoro. It’s very easy to use and does not require you to be technically sound. Besides, it can be downloaded for free thus helping you save hundreds of dollars that you are likely to spend on hiring a technician for the error code repair job. Restoro is the latest and a multi-functional system optimizer and a repair tool. This software is integrated with highly functional features that enable you to resolve almost all types of PC-related errors including the error code 0x80073b01. It includes powerful and value-adding features like registry cleaner, system stability detector, privacy error finder with anti-virus properties, and Active X and Class issues detector. With the help of its ‘registry cleaner’, you can easily scan for 0x80073b01 error codes on your PC. It offers in-depth registry cleaning scanning all the underlying causes of registry corruption that triggers 0x80073b01 error. The underlying cause for registry corruption is the accumulation of unnecessary and malicious files in the registry like junk files, temporary internet files, and invalid entries. Restoro with the help of its registry cleaning utility clears the clutter in seconds, frees up your disk space, and repairs the registry. And since the error 0x80073b01 hampered your ability to scan for viruses and spyware with Windows Defender, your computer may be exposed to serious data security threats by such malware. However, with Restoro you can remove malware from your system too. Restoro also functions as a powerful anti-virus. With the help of its privacy error detector, it scans for malicious viruses, adware and spyware on your PC ensuring that you are safe and protected from data breaches and cybercrime. This tool resolves the error 0x80073b01 successfully while repairing your registry and simultaneously optimizing the speed of your PC. It has a user-friendly interface and a simple design. There is absolutely nothing complex about it. All you have to do is download and install Restoro on your system and run it to scan for errors. After the scanning is complete, you will see a comprehensive and detailed error report specifying the number and the types of errors your PC is inflicted with. Now all you have to do is click on the Repair button to fix the issues on your PC including the error 0x80073b01 right away. Restoro is a safe and efficient tool that helps you resolve PC issues in seconds. For optimum results, it is advisable to run it on your PC regularly. This will help you keep the registry clean, PC error-free, reduce boot time, and ensure speedy PC performance. Click here to download Restoro on your PC today!

Fix Error 30053-4 or 30053-39, language pack

As you know, the Office Language Packs need to be installed right after installing Office. It also has to be on the correct version of Office so if any of these conditions are not met, you will most likely get error codes 30053-4 or 30053-39 when you install a language pack in Microsoft Office. If you are currently facing this error, read on as this post will help you fix the problem. Here’s the full context of the error message:

“Something went wrong, Sorry, installation cannot continue because no compatible office products are detected.”

When you have to work on two different languages, that’s where the language packs come in handy. You might have to work on one language but when it comes to proofreading or help, you need another language. Note that some language accessory packs offer partial localization which is why some parts of the Office might show the default language. If you are using Office 365 or Office 2019, 2016, 2013, or 2010, you need to go to the language accessory pack page from office.com and select your language. Once you see the download link, click on it to start downloading the pack. It includes the display in the chosen language, proofing tools for the selected language, as well as the Help in the selected language. Once the installation is complete, follow each one of the given options below to configure the language accessory pack properly.

Option 1 – Select Editing and Proofing language

You need to open any Office program and navigate to File > Options > Language.
From there, you need to make sure that the language you want to use is in the list under the Choose Editing Languages section.
After that, you can add or remove the language that Office uses for editing and proofing tools.

Option 2 – Configure the Display and Help languages

In this option, you can change the default display and help languages for all the Office applications so whatever you choose will be used for all the buttons, menus, and support of all the programs. After you select the language, restart all the Office applications to apply the changes made successfully. On the other hand, if you are using Office volume license versions, note that only an administrator account can install this if you are using the Volume License version of Microsoft Office 2016. You have to download the ISO image of the language packs, language interface packs, and the proofing tools from the VLSC or Volume Licensing Service Center. This process can be quite complicated so you might have to go to the docs.microsoft.com page to be guided accordingly. After you installed everything correctly, the error code 30053-4 or 30053-39 should now be fixed.

Windows Defender error code 0x80073afc

If you receive an error code of “0x80073afc” in Windows Defender after you boot your Windows 10 computer or when you try to manually run Windows Defender, then it could be that the Windows Defender files are corrupted. In such cases, this error could also occur if there is third-party security software that interferes with the smooth functioning of this Microsoft Security Client. If you are one of the users who are currently facing this issue, then here are some suggestions you can check out to resolve the Windows Defender error code 0x80073afc.

Option 1 – Try to check the status of all the Windows Defender-related services

In the Cortana search box, type “services” and click on the Services icon to open the Services Manager. Alternatively, you can also tap the Win + R keys to launch the Run prompt and then type “msc” in the field and hit Enter to open the Services Manager
After opening the Services Manager, look for the following services and make sure that their Startup type is set to their default values:
- Windows Defender Advanced Threat Protection Service – Manual
- Windows Defender Antivirus Network Inspection Service – Manual
- Windows Defender Antivirus Service – Manual
- Windows Defender Firewall Service – Automatic

You can right-click on each one of the listed services and then select Start to start them.
And if some of the services don’t have their default values, just double-click on the Services to change the Startup types and select the correct option from the drop-down menu of the Startup type under the Properties box.
Next, set up the Startup type of these services to Automatic and then click on the Start button if the services are not running yet.
Now click on the Apply and OK buttons to save the changes made and then see if it fixed the problem or not.

Option 2 – Try to re-register the concerned DLL files

You could also try to re-register some Dynamic Link Library or DLL files on your computer as this could also help in fixing the Windows Defender error.

In the Start search, type “cmd” and from the search results that appear, right-click on Command Prompt and select the “Run as administrator” option from the context menu.
After opening Command Prompt as admin, type the following commands one after the other:
- regsvr32 dll
- regsvr32 dll
- regsvr32 dll
- regsvr32 dll
Once you’ve entered the commands given above, it will re-register the concerned DLL files in your system.
Now restart your computer for the changes to take effect.

Option 3 – Try to use the Registry Editor

Tap the Win + R keys to open the Run dialog box,
Then type “Regedit” in the field and hit Enter to open the Registry Editor.
Afterward, navigate to this registry path: ComputerHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options
Next, look for the DWORDs named “MSASCui.exe”, “MpCmdRun.exe”, “MpUXSrv.exe” and “msconfig.exe”.
If you can’t find these DWORDs, refer to the next given option below.
Restart your computer.

Option 4 – Check the Environmental Values

Type “View advanced system settings” in the Windows search box and select the appropriate result.
This will open a new mini window. From there, go to the Advanced tab and click on the “Environment Variables…” button located at the bottom part of the window.
Next, look for the “%ProgramData%” variable name and make sure that its value is set to C:/ProgramData.
Then click OK to save the changes made.

Option 5 – Run the System File Checker Scan

System File Checker or SFC is a built-in command utility that helps in restoring corrupted files as well as missing files. It replaces bad and corrupted system files to good system files. To run the SFC command, follow the steps given below.

Tap Win + R to launch Run.
Type in cmd in the field and tap Enter.
After opening Command Prompt, type in sfc /scannow