Cannot find the MS Software License Terms

Error Code 0xC1900101, 0x4000D - What Is It?

Error Code 0xC1900101, 0x4000D is not very common among the many error codes emerging when updating to Windows 10. It is specific to Windows 7 users who try to upgrade to Windows 10 system.

This error hinders Windows 7 users to install the Windows 10 update. Once the update is launched, the process will go smoothly until a certain percentage (normally upon hitting 70% or more) and then it gets stuck. The user will then see a notification stating: “The installation failed in the SECOND_BOOT phase with an error during MIGRATE_DATA operation.”

You’ll be able to get past the error after a while. The error message will disappear and continue with the configuration process. But, not for long as it will reoccur at around 90% of installation with another error message saying: “The installation failed in the SECOND_BOOT phase with an error during PRE_OOBE operation.”

Solution

Error Causes

You’re most likely to encounter Error Code 0xC1900101 – 0x4000D when you upgrade to Windows 10 using a USB drive. There are several reasons why this update-related error happens such as wrong update, incompatibility with an antivirus program, or incompatibilities with some software.

Further Information and Manual Repair

In attempting to fix error code-related problems, it is best to do manual repair methods. Employing repair methods manually can help users pinpoint the root causes of the issues they are encountering and apply permanent solutions to fix the problem.

While every Windows user can do most manual repair methods, there are certain cases where help from a Windows expert is needed. If you’re not confident in employing the manual repair methods yourself, you can always consider seeking help from a professional Windows technician who is equipped with enough knowledge to address any issues you are facing or you can just simply use a powerful automated tool.

In fixing Error Code 0xC1900101 – 0x4000D, you can try doing any of the following manual repair methods:

Method One: Disable Background Applications

Error Code 0xC1900101-0x4000D probably occurs when there are programs running in the background of the system as you are in the process of updating. On that note, you must ensure that any programs running in the background must be disabled through Task Manager.

1. Press Ctrl+Alt+Del then choose Task Manager.
2. Right-click on all background applications then chooses End Task to close the apps.

NOTE: If there are any processes you are unfamiliar with, you can always right-click that process then “search online.” Be careful not to end “Windows process” tasks under the “Type” column as it might cause further problems.

3. Restart your device then proceed to Windows 10 system upgrading.

Method Two: Uninstall Anti-Malware Tools

Anti-malware tools normally trigger problems since they consist of files that are possibly incompatible with some software. If Error Code 0xc1900101-0x4000d is caused by incompatibility with an antivirus program, follow the following steps:

1. Open the Control Panel then choose System and Security.
2. Select Windows Solution Center.
3. Click Security to locate your antivirus.
4. Once you’ve located your antivirus, click on it then choose
5. Restart your device then check if it eliminates the problem.

Method Three: Install System Updates

1. Click on the Start menu then select System and Security – Windows Updates.
2. Choose Check for updates.
3. If there are any required updates detected by the system, select them all then choose Install Updates.
4. Restart your device.

Method Four: Check System For Any Incompatibilities

In doing this method, you need to use the System Readiness tool.

1. Download System Update Readiness Tool for Windows 7 for x64-based Systems (KB947821).
2. Once the download is finished, open Windows 6.1-KB947821-v34-x64.msu
3. Run the program to check for any incompatibilities in your system.

NOTE: The process might take a while depending on the speed of your device.

4. If there are no results found, you can now try updating again to Windows 10. However, if there are any issues found, you need to have them fixed first.

Method Five: Download A Powerful Automated Tool

Can’t seem to put up with the long and technical manual repair process? You can still fix this error by downloading and installing a powerful automated tool that will surely get the job done in a jiffy!

What is DISM Error 1726? Every time you encounter some issues in your Windows 10 computer, especially when it comes to corrupted system files, you can always use the SFC scan and if the SFC can isn’t able to resolve the issue, there is also the DISM tool you can use which usually resolve the vast majority of system file corruption sufficiently. However, there are times when even the DISM commands experience issues as well. Such is the case with the 1726 error: “The remote procedure call failed”.

Some users reported that this DISM problem happens right before the process is supposed to end. According to experts, this error in DISM occurs due to any of the following reasons:

1. A third-party program might have interrupted the DISM operation and is the one that triggered the 1726 error: “The remote procedure call failed”.
2. The error could also pop up when there is a pending corruption repair. This usually happens when you tried to run a DISM command previously that was terminated manually or was halted because of some malfunction.
3. Lastly, the error could also occur because the process that’s responsible for the procedure is disabled or was prevented from running.

Whichever the case is, here are some suggestions that might help you in resolving the 1726 error: “The remote procedure call failed”.

Option 1 – Try updating your PC to the latest Windows build available

Since the problem is specific to certain builds in Windows 10, you need to make sure that your computer is updated before you try other troubleshooting steps. Thus, follow the steps below to update your Windows 10 PC.

• Tap the Win + R keys to open the Run dialog box.
• Then type “ms-settings:windowsupdate” in the field and hit Enter to open the Windows Update screen.
• After that, click on Check for Updates and then follow the next on-screen instructions to apply the latest Windows update.
• Once the update has been installed, restart your PC and run the DISM command again and see if the problem is fixed.

Option 2 – Try to change the Startup Type of the Remote Procedure Call service

As stated early on, the error might also be caused by a disabled Remote Procedure Call service or RPC or that it might be prevented from running for some reason. In case you don’t know, RPC is the service control manager for both COM and DCOM servers and it’s responsible for performing object variation requests, exporting resolution as well as distributing collection for the servers. And so if the server is disabled, all programs that are using COM and DCOM including the DISM commands, will not function correctly. Thus, you need to make sure that the RPC service is scheduled to enable itself on every system boot. To do so, here’s what you have to do:

• Tap the Win + R keys to open the Run dialog box.
• Type “services.msc” in the field and hit Enter to open Services.
• From there, scroll down until you see the Remote Procedure Call (RPC) service and then right-click on it and select Properties.
• Then go to the General tab and change the drop-down menu next to Startup type to Automatic.
• After that, click the Apply button and then OK to apply the changes made.
• Restart your PC and run the DISM command once again at the next startup.

Option 3 – Try to modify the RpcSs registry key value

If the option didn’t work, you can also try enabling the RPC service using the Registry Editor. Before you proceed, make sure to create a System Restore point first and then follow the steps below afterward.

• Tap the Win + R keys to open the Run dialog box.
• Type “Regedit” in the field and hit Enter or click OK to open the Registry Editor. And if a User Account Control prompt appears, just click on Yes.
• After that, navigate to this registry key: HKEY_LOCAL_MACHINE SYSTEM CurrentControlSet Services RpcSs
• After selecting the aforementioned registry key, go to the right pane and double-click on the Start value.
• Next, change the Value data of start to 2 and click OK to save the changes made.
• Exit the Registry Editor and restart your PC and check if the 1726 error in DISM has already been resolved or not.

Option 4 – Try to disable the Windows Search service temporarily

Some users also recommended disabling the Windows Search service for the meantime as it could be the one that’s interrupting the DISM process.

• Tap the Win + R keys to open the Run dialog box.
• In the field, type “services.msc” to open the Services window again and hit Enter to open it.
• Next, scroll down over the services list and double-click on the Windows Update service.
• Afterward, go to Windows Search properties and click the General tab and then click the Stop button to stop the service from running temporarily.
• Now try running the DISM commands again and see if the problem’s fixed or not.
• Restart the Windows Search service and then restart your PC as well.

Can’t Find Games on Twitch is a common error happening to a vast variety of people. The issue can be traced back to browser issues to others like malware infection. In this guide, we will provide you with common fixes on how to overcome this issue so you can continue watching your favorite streamer.

1. Sign out of Twitch, then sign back in

   If it is a browser issue or some glitch in the Twitch system simply signing out and then signing back in will solve the issue since information about the account will be resent to the twitch platform.

2. Refresh the application

   Sometimes servers are having high traffic and can get overloaded, refresh the application in the upper left corner to reload content.

3. Use browser instead of Twitch application

   If you are still having issues with the application, open the twitch website and access content there.

4. Close twitch

   But in task manager. Sometimes just closing it via the X button is not enough, some glitches stay and the application is still running in the background. Open task manager and close it from there.

5. Scan system for malware

   Scan the entire system for malware, various malware can halt twitch and cause issues.

6. Reinstall application

   If everything else failed, reinstall the application.

What is 0x8007043c Error Code?

Have you ever come across 0x8007043c error message pop up on your PC? If yes, then you should know that this error message is generated when any corresponding process or operation cannot be completed successfully by the application. This is a critical Windows OS Error message that should be fixed immediately.

Solution

Error Causes

The 0x8007043c error code is usually triggered by the following reasons:

• Missing or corrupt registry files
• Failure to update Windows Installer
• Viruses and Spyware

Common signs of this error code are pop-up messages, program lock-ups, problems with opening documents, and screen freeze.

Further Information and Manual Repair

As soon as you experience this error on your PC, it is advisable to repair it immediately because this error poses high-security risks. Malwares and viruses are notorious for data theft. To fix the 0x8007043c error on your PC, you don’t need to take on the services of an IT professional. This error code is rated as easy to repair. By following the instruction and repair solutions given below, you can easily fix this Window error 0x8007043c in a couple of minutes by yourself. Here’s what you need to do:

Step 1: Scan for Viruses and Spyware

To stop hackers from sneaking into your PC and stealing your confidential data, you must first scan your computer for viruses and spyware on your PC. It is advisable to use a powerful antivirus to ensure your computer is totally virus and spyware clean.

Step 2: Download and Install a Registry Cleaner

After you scan for viruses, you should now download and install a registry cleaner. This is needed because an antivirus does not detect corrupt registry entries. To detect such entries, the registry cleaner tool is the best. After you download a registry cleaner on your system, click the scan button. You will have to wait for a few seconds for the scanning to finish. Once the scanning is complete, click on the ‘Repair’ button to fix the errors. After fixing all the errors, restart your computer. This is important because the registry changes will only come into effect after the system restarts. By following these 2 simple steps, you can easily resolve the 0x8007043c error on your system. However, to prevent this error from occurring again, it is recommended to run the antivirus every time you use your PC.

Error Code 8024001F – What is it?

During the Microsoft Windows 10 upgrade, certain users have experienced an issue with error code 8024001F. Users should note that this error is also known as Windows Update 8024001F and 0x8024001F. This error code is relatively common and is usually caused by a faulty internet connection. Thanks to this common reasoning, the error is generally fixed easily, and users are able to restart their Microsoft Windows 10 upgrade. Common symptoms include:

• A dialog box appears with the Error Code 8024001F when attempting to upgrade to Microsoft Windows 10.
• Your current version of Windows is unable to recognize the need for an update to Microsoft Windows 10.

Solution

Error Causes

With only three issues causing error code 8024001F, it is relatively easy to determine your particular issue and then follow the steps below to rectify the situation.

• Your computer is not connected to the internet.
• The Windows firewall is interfering with the Microsoft Windows 10 update.
• Your third-party antivirus and firewall software is interfering with the Microsoft Windows 10 update.
• Your system is infected with the Conficker worm, which is preventing the Microsoft Windows 10 update from processing correctly.

Microsoft Support asks that you contact them directly for further assistance if you are able to rule out these three reasons for error code 8024001F.

Further Information and Manual Repair

Error code 8024001F is easily corrected using one of the following methods. Each of these methods should be convenient and comfortable for a basic computer user at home. If at any time you are unsure or feel you need more assistance, Microsoft Support asks that you contact them directly for more guided support.

Method 1- Access the Troubleshooter

1. Access the Windows Update Troubleshooter
2. When the dialog box pops up, click OK.
3. Click NEXT on the following dialog box.
4. Windows will then run the Troubleshooter, attempting to detect any known issues with your system.
5. Depending upon the results you should be able to follow the on-screen prompts which will alleviate the update issue.

Method 2- Correct your internet connections

1. Closeout of the error code 8024001F dialog box.
2. Close the Microsoft Windows 10 updater.
3. Attempt to access the internet through your normal browser.
4. ** If you can successfully access the internet, then an internet connection is not the cause for this error code.
5. If you are unable to access the internet verify that you are plugged into your network, both at the router/wall and at your computer jack.
6. If you use a router, verify that all of the lights are on and active (showing an active internet connection).
7. Establish an internet connection if possible. If you are unable to establish an internet connection, you may need to contact your internet provider.
8. If you are able to reestablish an internet connection, then you should have no problem running your Microsoft Windows 10 update.

Method 3- Adjust the Windows Update settings

1. Log into your current version of Windows as the Administrator (enter a password if prompted).
2. Click the START button on your keyboard or screen.
3. Search for the term “admin”, press ENTER
4. Click the “administrative tools” option
5. Select the “services” file, re-enter your password.
6. Open the Windows Update file by right-clicking on the name.
7. Choose the “properties” option
8. Under the GENERAL tab, make sure that the “startup type:” is set to AUTOMATIC (DELAYED START)
9. Under the “Service Status” header, click the START button.
10. Click OK
11. Restart the Microsoft Windows 10 update.

Method 4- Scan for the Conficker Worm

1. Access the web address to be directed to the Microsoft Safety Scanner.
2. Run this free scanner provided by Microsoft to verify if the Conficker Worm is your issue.
3. If this worm is causing your error, Microsoft will walk you through the steps necessary to remove the worm.

Method 5- Firewall and Anti-Virus software

1. If you are using the Windows firewall or a third-party anti-virus and firewall software, disable these programs.
2. Run the Microsoft Windows 10 upgrade.
3. After the upgrade is complete, turn your antivirus and firewall software back on.

Users should not have a problem employing the above methods. Start with the simplest solutions first, and then work your way to the more intricate methods. In some cases, depending on why this particular error code was caused, you may have to use a powerful automated tool to have it resolved.

The new thing from Mozilla is not a browser, it is a VPN!

Besides Firefox, Mozilla offers now Firefox Relay, an app helping you to mask your email and phone number, and a new Mozilla VPN.

Mozilla has recently announced a new subscription model that will let you use all products together for $6.99 per month. Although this is a little more expensive than the competition that goes around for $5 per month note that with this subscription you are having access to all services, not just VPN.

VPN will not only hide your IP address but will also make sure websites cannot access your real location and it encrypts all of your network activity. Relay will give you protection against spam, serving as a shield for your email and limiting spammers from access to your real email address and phone number. With Mozilla subscription will let you use both services.

On September 18th, 2017, Cisco’s Talos announced that CCleaner, a popular utility with billions of worldwide users, had been compromised by hackers, and was used to unwittingly distribute hidden malware in its installer. Later in the day, Piriform, the publisher of CCleaner, confirmed the problem.

Undetected by all but 1 major antivirus including CCleaner’s own parent company, this occurred for over a month and impacted over 2.7 million users. Users of CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 for 32-bit Windows are affected. These downloads were live on CCleaner’s official site from August 15th to September 12th, 2017. Anyone who downloaded the program during this time could be affected. The company claims that while the hackers set up the backdoor and many users were impacted, that the perpetrators have been arrested and that the malware never successfully performed its full task and compromised user’s PCs or sent out their data; in the wake of recent security breaches such as Equifax, users are understandably worried. Given the severity of the threat of hacking and data theft, users should take action immediately if they have CCleaner.

Technical Details of CCleaner Malware Injection

First reported by Talos, the malware, which was hidden in the CCleaner installer without the publisher noticing (despite them being owned by Avast, a massive Anti-virus company), modified a core program DLL file to evade detection, and creates several registry keys. Not only were these files not flagged by any major Anti-Virus, but they were also even digitally signed by Piriform via their Symantec certificate, meaning your PC and security program would likely whitelist and trust the malicious installer. The malware gathers personal information on a user’s PC, including IP address and running programs, and sends it to a remote server. In our testing, the program sent data to IP 216.126.225.148.

Restore Your PC (If Possible)

As of the publication of this article, there have been no assurances given that updating or even uninstalling CCleaner will remove the malware is installed. The only action thus far has been shutting down the remote server where user data was being sent has been shut down by authorities. For this reason, it is best to remove the underlying malware separately, as its presence represents a serious security threat. Unfortunately, as this could have been installed as far back as August 15th, 2017, your System Restore points may not go back that far, or even if they do, restoring to such an outdated point may cause unintended problems with other programs you use and potentially lost files and data. Manually backing up files and doing a full format or clean Windows installation would likely be successful in fully removing the malware, but is extremely time-consuming and can be difficult for many PC users. Unfortunately, this makes a PC Restore or format an unattainable option for many.

Update CCleaner to the Latest Version

While CCleaner has told users to update to the latest version of the program. Prior to doing so, we recommend fully uninstall CCleaner, ensuring you check its program files folders and registry keys, manually deleting any remnants, and then re-downloading the latest version from the official site and reinstalling clean.

Error Code 0x80070643 – What is it?

Error Code 0x80070643 or Windows Update error code affects various versions of the Windows operating system, including Windows 10. Error code 0x80070643 usually occurs due to corruption within the .Net Framework. When this occurs, users will be unable to install updates they have downloaded on their PC.

Solution

Error Causes

Error codes within Windows occur for many reasons including corrupt system files, viruses, and lack of space on your PC. In terms of error code 0x80070643 in Windows 10, the cause usually relates to a problem with the .NET framework or errors within one’s registry.

Further Information and Manual Repair

To solve error code 0x80070643 in Windows 10, users will need to employ various manual repair methods. These methods seek to fix core problems that result in the error being present on your device in the first place. Thus, the methods include the use of the .Net Framework Repair tool, resetting Windows Update components, or running a clean boot.

Note that the instructions provided in this article must be followed correctly, as making changes to your computer via these manual repair methods can result in serious problems if mistakes are made. Consider a Windows repair technician if you are unable to complete the steps mentioned in the manual repair methods below. Note, failure to rectify this error might result in other error messages, such as error code 0xc004fc03

Method One: Run the .Net Framework Repair Tool

As error code 0x80070643 may be triggered by issues related to the .Net Framework on your machine, it’s important that you download the .Net Framework Repair tool. This tool, as the name suggests, helps to repair errors it detects within the setup or updates associated with the framework.

The tool is available on the official Windows site. Download the tool and follow the instructions provided. Once you’ve downloaded the .Net Framework Repair tool, run it and wait until it fixes all problems detected within the framework.

Afterward, reboot your computer and check to see if Windows Update is functioning properly. If the error code reoccurs, proceed to another solution by implementing the second manual repair method listed in this article.

Method Two: Reset Windows Update Components

This method is the most technical of all the methods mentioned in this article. It will require that Windows 10 user access Command Prompt and make modifications to the Windows registry – an area of the operating system which stores important information, settings and other details regarding hardware and programs installed on your machine. Follow the steps carefully and be sure to back up the registry before proceeding with this manual repair method.

Step one: Type Command Prompt in the search box near Start, then select Command Prompt (Admin).

Step two: Select Yes as soon as the User Account Control box appears.

Step three: Stop Windows Update service, the BITS service, and Cryptographic service by typing the following commands:

net stop bits

net stop wuauserv

net stop appidsvc

net stop cryptsvc

Step four: Be sure to press Enter after typing each command.

Step five: Type the following command, then Enter to delete qmgr*.dat files:

        Del "%ALLUSERSPROFILE%Application DataMicrosoftNetworkDownloaderqmgr*.dat"

Step six: Press enter after typing the following command:

        cd /d %windir%system32

Step seven: Reregister the files for BITS and Windows Update that you stopped in step three. To do this, type the following commands, selecting Enter after each command:

        regsvr32.exe atl.dll

        regsvr32.exe urlmon.dll

        regsvr32.exe mshtml.dll

        regsvr32.exe shdocvw.dll

        regsvr32.exe browseui.dll

        regsvr32.exe jscript.dll

        regsvr32.exe vbscript.dll

        regsvr32.exe scrrun.dll

        regsvr32.exe msxml.dll

        regsvr32.exe msxml3.dll

        regsvr32.exe msxml6.dll

        regsvr32.exe actxprxy.dll

        regsvr32.exe softpub.dll

        regsvr32.exe wintrust.dll

        regsvr32.exe dssenh.dll

        regsvr32.exe rsaenh.dll

        regsvr32.exe gpkcsp.dll

        regsvr32.exe sccbase.dll

        regsvr32.exe slbcsp.dll

        regsvr32.exe cryptdlg.dll

        regsvr32.exe oleaut32.dll

        regsvr32.exe ole32.dll

        regsvr32.exe shell32.dll

        regsvr32.exe initpki.dll

        regsvr32.exe wuapi.dll

        regsvr32.exe wuaueng.dll

        regsvr32.exe wuaueng1.dll

        regsvr32.exe wucltui.dll

        regsvr32.exe wups.dll

        regsvr32.exe wups2.dll

        regsvr32.exe wuweb.dll

        regsvr32.exe qmgr.dll

        regsvr32.exe qmgrprxy.dll

        regsvr32.exe wucltux.dll

        regsvr32.exe muweb.dll

        regsvr32.exe wuwebv.dll

Step eight: Reset Winsock in Command Prompt by typing the following command, then selecting Enter:

      netsh winsock reset

Step nine: Configure proxy settings in Windows 10 with the following command, then press Enter:

     netsh winhttp reset proxy

Step ten: To restart the BITS, Windows Update, and Cryptographic service, type the following commands, then press Enter:

        net start bits

        net start wuauserv

        net start appidsvc

        net start cryptsvc

Step eleven: Install the latest Windows Update Agent.

Step twelve: Restart your machine.

Once you’ve restarted your PC, check Windows Update to verify if the error code is resolved. You should now be able to access the latest updates on your device. However, if a problem has arisen and the error code reoccurs, you will need to proceed with a Clean Boot.

Method Three: Download an Automated Tool

If you wish to always have at your disposal a utility tool to fix these Windows 8 and other related issues when they do arise, download and install a powerful automated tool.

Visual studio code is a code editor available for Windows, Linux, and macOS. It is a completely free tool offering you to code in any language without the need to switch to another editor. Visual Studio Code is part of Microsoft Visual Studio which is a complete integrated development environment (IDE). Take notice that Visual studio itself has more advanced tools for developing and testing, it has 24/7 support, training, and Azure for WEB apps. Visual Studio Code is an editor lacking in some advanced features Visual Studio offers.

Visual Studio code Price and royalty

As mentioned Visual Studio code is completely free licensed under the MIT license agreement giving you the tool free to use and sell your product. How it supports Linux, Windows, and macOS, all you need it to go to its official page https://code.visualstudio.com/, download it and start using it. How this is free project backside is that there is no official support, you will have to rely on various articles and community in order to get needed information or problem solution.

Features

Syntax highlighting has become standard and norm for any editor but besides this function VS code offers us also IntelliSense option which goes a step further with code completion, code hinting, and parameter info. This means that VS code is aware of many things going on inside your code and will offer you as you type a menu with options for autocomplete along with variables referenced, function names, etc. VS code offers extensions inside its extensions marketplace where you can add extensions in order to implement new languages, add debuggers, change the layout, etc. This is one of the great features it allows you to easily switch from one project to another, one language to another not leaving your code editor. Working with version control systems like Git is easy with VS Code. You’ll be able to stage files and make commits, then push and pull changes to your remote code repository of choice, right from the editor.

Conclusion about Visual Studio code

Visual Studio Code is one of if not the most flexible and extensible code editors currently on the market that I have ever tried and used. IT has become my code editor of choice simply for reasons that there is really not much it cannot do and it is constantly updated and taken care of. You can really tune it to look and feels how you want with extensions and you really cannot beat the free price tag. I would highly recommend this editor for daily use especially since its biggest competitors like Atom and sublime text have not seen many updates lately.

New malware with extensive spyware capabilities steals data from infected Android devices and is designed to automatically trigger whenever new info is read to be exfiltrated. The spyware can only be installed as a 'System Update' app available via third-party Android app stores as it was never available on Google's Play Store. This drastically limits the number of devices it can infect, given that most experienced users will most likely avoid installing it in the first place. The malware also lacks a method to infect other Android devices on its own, adding to its limited spreading capabilities. However, when it comes to stealing your data, this remote access trojan (RAT) can collect and exfiltrate an extensive array of information to its command-and-control server. Zimperium researchers who spotted it observed it while "stealing data, messages, images and taking control of Android phones."

What happens when malicious software is installed

"Once in control, hackers can record audio and phone calls, take photos, review browser history, access WhatsApp messages, and more," they added. Zimperium said its extensive range of data theft capabilities includes:

• Stealing instant messenger messages;
• Stealing instant messenger database files (if the root is available);
• Inspecting the default browser's bookmarks and searches;
• Inspecting the bookmark and search history from Google Chrome, Mozilla Firefox, and Samsung Internet Browser;
• Searching for files with specific extensions (including .pdf, .doc, .docx, and .xls, .xlsx);
• Inspecting the clipboard data;
• Inspecting the content of the notifications;
• Recording audio;
• Recording phone calls;
• Periodically take pictures (either through the front or back cameras);
• Listing of the installed applications;
• Stealing images and videos;
• Monitoring the GPS location;
• Stealing SMS messages;
• Stealing phone contacts;
• Stealing call logs;
• Exfiltrating device information (e.g., installed applications, device name, storage stats).

How does it work?

Once installed on an Android device, the malware will send several pieces of info to its Firebase command-and-control (C2) server, including storage stats, the internet connection type, and the presence of various apps such as WhatsApp. The spyware harvests data directly if it has root access or will use Accessibility Services after tricking the victims into enabling the feature on the compromised device. It will also scan the external storage for any stored or cached data, harvest it, and deliver it to the C2 servers when the user connects to a Wi-Fi network. Unlike other malware designed to steal data, this one will get triggered using Android's contentObserver and Broadcast receivers only when some conditions are met, like the addition of a new contact, new text messages, or new apps being installed. "Commands received through the Firebase messaging service initiate actions such as recording of audio from the microphone and exfiltration of data such as SMS messages," Zimperium said. "The Firebase communication is only used to issue the commands, and a dedicated C&C server is used to collect the stolen data by using a POST request."

Camouflage

The malware will also display fake "Searching for the update.." system update notifications when it receives new commands from its masters to camouflage its malicious activity. The spyware also conceals its presence on infected Android devices by hiding the icon from the drawer/menu. To further evade detection, it will only steal thumbnails of videos and images it finds, thus reducing the victims' bandwidth consumption to avoid drawing their attention to the background data exfiltration activity. Unlike other malware that harvests data in bulk, this one will also make sure that it exfiltrates only the most recent data, collecting location data created and photos taken within the last few minutes. If you would like to read more helpful articles and tips about various software and hardware visit errortools.com daily.